@dloizides/auth-web 1.16.0 → 1.17.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 1.17.0
+
+**Multi-account demo login — the `<DemoCredentialsHint>` now renders one labelled,
+one-tap-fillable row per published demo account.** Additive and
+backward-compatible: a single account renders byte-for-byte as before.
+
+- **`resolveDemoAccounts` / `resolveAccountList`** (new exports) — resolve either
+  the `publishedAccounts` list (from `@dloizides/auth-client` 4.4.0 / a BFF on
+  Bff.AspNetCore 1.17.0+) or a legacy single pair into an ordered, validated
+  `DemoAccount[]`. `resolveDemoCredentials` is unchanged and still exported.
+- **`useDemoCredentials().hintProps`** gains `accounts: DemoAccount[]` (the
+  resolved list). `credentials` is still passed through unchanged, so the field
+  is purely additive; `onUse` fills whichever account the hint reports.
+- **`<DemoCredentialsHint>`** gains an `accounts?` prop (preferred over
+  `credentials` when present). One account → no per-account heading, unsuffixed
+  testIDs (unchanged). Multiple accounts → each gets its label heading and
+  index-suffixed testIDs (`…-username-0`, `…-use-1`, `…-account-label-0`).
+- New testID `demoCredentialsAccountLabel`; new re-exported type `DemoAccount`.
+- Bumps `@dloizides/auth-client` to `^4.4.0` for the `publishedAccounts` type.
+
 ## 1.16.0
 
 **New shared `AccountSettingsScreen` — one authenticated account surface for all

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { ReactNode, ReactElement } from 'react';
-import { BffAuthClient, BffUser, DemoCredentials, HttpClient, BffLoginRequest, BffForgotPasswordRequest, BffResetPasswordRequest, BffOtpRequestResult } from '@dloizides/auth-client';
-export { BffAuthClient, BffAuthClientOptions, BffForgotPasswordRequest, BffLoginRequest, BffOtpRequestRequest, BffOtpRequestResult, BffOtpVerifyRequest, BffPinLoginRequest, BffRegisterRequest, BffResetPasswordRequest, BffUser, DemoCredentials, HttpClient, HttpRequest, HttpResponse, createFetchHttpClient } from '@dloizides/auth-client';
+import { BffAuthClient, BffUser, DemoCredentials, HttpClient, DemoAccount, BffLoginRequest, BffForgotPasswordRequest, BffResetPasswordRequest, BffOtpRequestResult } from '@dloizides/auth-client';
+export { BffAuthClient, BffAuthClientOptions, BffForgotPasswordRequest, BffLoginRequest, BffOtpRequestRequest, BffOtpRequestResult, BffOtpVerifyRequest, BffPinLoginRequest, BffRegisterRequest, BffResetPasswordRequest, BffUser, DemoAccount, DemoCredentials, HttpClient, HttpRequest, HttpResponse, createFetchHttpClient } from '@dloizides/auth-client';
 import { UseMutationOptions, UseMutationResult } from '@tanstack/react-query';
 
 /**
@@ -1609,9 +1609,18 @@ declare const enum DemoCredentialsHintVariant {
 interface DemoCredentialsHintProps {
     /**
      * The demo credentials to advertise. `undefined` — or a pair with a blank
-     * username or password — renders nothing at all.
+     * username or password — renders nothing at all. When {@link accounts} is given
+     * and non-empty it takes precedence; otherwise this single pair is resolved
+     * (and, if it carries a `publishedAccounts` list, expanded) into the rows.
      */
     credentials?: DemoCredentials;
+    /**
+     * The resolved list of demo accounts to advertise, one labelled row per entry.
+     * Preferred over {@link credentials} when present and non-empty. A single entry
+     * renders exactly like the legacy single-pair panel (no per-account heading).
+     * This is what `useDemoCredentials().hintProps` supplies.
+     */
+    accounts?: DemoAccount[];
     /**
      * Presentation. Defaults to `Disclosure` (one quiet expandable line); pass
      * `Panel` for the original always-open block.
@@ -1631,7 +1640,7 @@ interface DemoCredentialsHintProps {
     onUse?: (credentials: DemoCredentials) => void;
 }
 /** Themeable public-demo credentials surface. Renders `null` when there is no demo. */
-declare function DemoCredentialsHint({ credentials, variant, theme: themeProp, labels: labelsProp, testIdPrefix, onUse, }: Readonly<DemoCredentialsHintProps>): ReactElement | null;
+declare function DemoCredentialsHint({ credentials, accounts, variant, theme: themeProp, labels: labelsProp, testIdPrefix, onUse, }: Readonly<DemoCredentialsHintProps>): ReactElement | null;
 
 /**
  * React context for the `AuthTheme`.
@@ -1747,6 +1756,7 @@ declare const AuthTestIds: {
     readonly changePasswordError: "auth-change-password-error";
     readonly changePasswordSuccess: "auth-change-password-success";
     readonly demoCredentialsHint: "auth-demo-credentials-hint";
+    readonly demoCredentialsAccountLabel: "auth-demo-credentials-account-label";
     readonly demoCredentialsUsername: "auth-demo-credentials-username";
     readonly demoCredentialsPassword: "auth-demo-credentials-password";
     readonly demoCredentialsUseButton: "auth-demo-credentials-use";
@@ -2283,6 +2293,13 @@ interface DemoCredentialsLoginFormProps {
 /** The `<DemoCredentialsHint>` props that carry the credentials + fill action. */
 interface DemoCredentialsHintWiring {
     credentials?: DemoCredentials;
+    /**
+     * The resolved list of demo accounts (from `publishedAccounts`, else the legacy
+     * single pair wrapped into one). The hint renders one labelled row per entry and
+     * prefers this over {@link credentials} when present. Additive — a hint given only
+     * `credentials` still resolves the same list itself.
+     */
+    accounts: DemoAccount[];
     onUse: (credentials: DemoCredentials) => void;
 }
 /** What {@link useDemoCredentials} hands back. */
@@ -2325,6 +2342,19 @@ declare function useDemoCredentials({ credentials, prefillOnMount, }?: Readonly<
  */
 declare function resolveDemoCredentials(credentials?: DemoCredentials | null): DemoCredentials | null;
 
+/**
+ * Validate a raw list of accounts, dropping any unusable entry. Used by the hint
+ * when a consumer passes an `accounts` prop directly (the hook already routes its
+ * list through here too, so validation happens in exactly one place).
+ */
+declare function resolveAccountList(accounts?: readonly DemoAccount[] | null): DemoAccount[];
+/**
+ * Resolve the ordered list of demo accounts to advertise, from either the new
+ * `publishedAccounts` list or the legacy single pair. Returns `[]` when nothing
+ * is usable — the "render nothing" contract, as a list.
+ */
+declare function resolveDemoAccounts(credentials?: DemoCredentials | null): DemoAccount[];
+
 /**
  * `createBffAuthClient` — the one-line wiring of a same-origin `BffAuthClient`.
  *
@@ -2614,4 +2644,4 @@ interface UseChangePasswordResult {
 }
 declare function useChangePassword({ client, onChanged, }: UseChangePasswordArgs): UseChangePasswordResult;
 
-export { type AccountSettingsChangePasswordConfig, type AccountSettingsDevicePinConfig, type AccountSettingsLabels, type AccountSettingsPasskeysConfig, type AccountSettingsPreferredMethodConfig, AccountSettingsScreen, type AccountSettingsScreenProps, AuthScreen, type AuthScreenProps, AuthTestIds, type AuthTheme, type AuthThemeColors, AuthThemeProvider, type AuthThemeProviderProps, type AuthThemeRadii, type AuthThemeSpacing, type AuthThemeTypography, BffAuthStatus, type BffDeviceState, type BffLoginConfig, type BffLogoutClient, CHANGE_PASSWORD_ENDPOINT, type ChangePasswordCapableClient, ChangePasswordCard, type ChangePasswordCardProps, ChangePasswordErrorKey, type ChangePasswordRequest, type ChangePasswordResult, type CreateBffAuthClientOptions, type CreateBffChangePasswordClientOptions, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, type DemoCredentialsHintLabels, type DemoCredentialsHintProps, DemoCredentialsHintVariant, type DemoCredentialsHintWiring, type DemoCredentialsLoginFormProps, type DevicePinCapableClient, type DevicePinDisableCapableClient, type DevicePinEnrollCapableClient, DevicePinEnrollErrorKey, DevicePinEnrollForm, type DevicePinEnrollFormProps, type DevicePinEnrollLabels, type DevicePinEnrollResult, DevicePinErrorKey, DevicePinInput, type DevicePinInputProps, DevicePinLengthPicker, type DevicePinLengthPickerProps, DevicePinOffer, type DevicePinOfferProps, DevicePinSettingsCard, type DevicePinSettingsCardProps, type DevicePinSettingsLabels, type DevicePinUnlockCapableClient, type DevicePinUnlockLabels, type DevicePinUnlockResult, DevicePinUnlockScreen, type DevicePinUnlockScreenProps, type DevicePinUnlockedUser, ForgotPasswordFields, type ForgotPasswordFieldsLabels, type ForgotPasswordFieldsProps, ForgotPasswordForm, type ForgotPasswordFormLabels, type ForgotPasswordFormProps, type LoginConfigCapableClient, LoginForm, type LoginFormLabels, type LoginFormProps, OtpForm, type OtpFormLabels, type OtpFormProps, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, type PasskeyErrorCode, PasskeyLoginButton, type PasskeyLoginButtonProps, type PasskeyLoginLabels, PasskeySettingsCard, type PasskeySettingsCardProps, type PasskeySettingsLabels, PasswordPolicyError, type PerformBffLogoutOptions, PinForm, type PinFormLabels, type PinFormProps, type PreferencesClientOptions, type PreferredMethodClient, PreferredMethodHint, type PreferredMethodHintLabels, type PreferredMethodHintProps, PreferredMethodSettingsCard, type PreferredMethodSettingsCardProps, type PreferredMethodSettingsLabels, PrefillIntent, ResetPasswordError, ResetPasswordForm, type ResetPasswordFormLabels, type ResetPasswordFormProps, type RoleRoute, type RoleRouteTable, type UseBffAuthOptions, type UseBffAuthResult, type UseBffForgotPasswordOptions, type UseBffLoginConfigResult, type UseBffResetPasswordOptions, type UseChangePasswordArgs, type UseChangePasswordResult, type UseDemoCredentialsOptions, type UseDemoCredentialsResult, type UseDevicePinDisableArgs, type UseDevicePinDisableResult, type UseDevicePinEnrollArgs, type UseDevicePinEnrollResult, type UseDevicePinUnlockArgs, type UseDevicePinUnlockResult, type UseForgotPasswordSubmitArgs, type UseForgotPasswordSubmitResult, type UseOtpLoginOptions, type UseOtpLoginResult, type UsePasskeyCeremonyOptions, type UsePasskeyCeremonyResult, type UsePinLoginOptions, type UsePinLoginResult, type UsePreferredMethodSettingArgs, type UsePreferredMethodSettingResult, type UseResetPasswordFormArgs, type UseResetPasswordFormResult, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createPreferencesClient, defaultAuthTheme, isAllowedPinDigits, isPasswordValid, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveDemoCredentials, resolvePostLoginRoute, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };
+export { type AccountSettingsChangePasswordConfig, type AccountSettingsDevicePinConfig, type AccountSettingsLabels, type AccountSettingsPasskeysConfig, type AccountSettingsPreferredMethodConfig, AccountSettingsScreen, type AccountSettingsScreenProps, AuthScreen, type AuthScreenProps, AuthTestIds, type AuthTheme, type AuthThemeColors, AuthThemeProvider, type AuthThemeProviderProps, type AuthThemeRadii, type AuthThemeSpacing, type AuthThemeTypography, BffAuthStatus, type BffDeviceState, type BffLoginConfig, type BffLogoutClient, CHANGE_PASSWORD_ENDPOINT, type ChangePasswordCapableClient, ChangePasswordCard, type ChangePasswordCardProps, ChangePasswordErrorKey, type ChangePasswordRequest, type ChangePasswordResult, type CreateBffAuthClientOptions, type CreateBffChangePasswordClientOptions, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, type DemoCredentialsHintLabels, type DemoCredentialsHintProps, DemoCredentialsHintVariant, type DemoCredentialsHintWiring, type DemoCredentialsLoginFormProps, type DevicePinCapableClient, type DevicePinDisableCapableClient, type DevicePinEnrollCapableClient, DevicePinEnrollErrorKey, DevicePinEnrollForm, type DevicePinEnrollFormProps, type DevicePinEnrollLabels, type DevicePinEnrollResult, DevicePinErrorKey, DevicePinInput, type DevicePinInputProps, DevicePinLengthPicker, type DevicePinLengthPickerProps, DevicePinOffer, type DevicePinOfferProps, DevicePinSettingsCard, type DevicePinSettingsCardProps, type DevicePinSettingsLabels, type DevicePinUnlockCapableClient, type DevicePinUnlockLabels, type DevicePinUnlockResult, DevicePinUnlockScreen, type DevicePinUnlockScreenProps, type DevicePinUnlockedUser, ForgotPasswordFields, type ForgotPasswordFieldsLabels, type ForgotPasswordFieldsProps, ForgotPasswordForm, type ForgotPasswordFormLabels, type ForgotPasswordFormProps, type LoginConfigCapableClient, LoginForm, type LoginFormLabels, type LoginFormProps, OtpForm, type OtpFormLabels, type OtpFormProps, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, type PasskeyErrorCode, PasskeyLoginButton, type PasskeyLoginButtonProps, type PasskeyLoginLabels, PasskeySettingsCard, type PasskeySettingsCardProps, type PasskeySettingsLabels, PasswordPolicyError, type PerformBffLogoutOptions, PinForm, type PinFormLabels, type PinFormProps, type PreferencesClientOptions, type PreferredMethodClient, PreferredMethodHint, type PreferredMethodHintLabels, type PreferredMethodHintProps, PreferredMethodSettingsCard, type PreferredMethodSettingsCardProps, type PreferredMethodSettingsLabels, PrefillIntent, ResetPasswordError, ResetPasswordForm, type ResetPasswordFormLabels, type ResetPasswordFormProps, type RoleRoute, type RoleRouteTable, type UseBffAuthOptions, type UseBffAuthResult, type UseBffForgotPasswordOptions, type UseBffLoginConfigResult, type UseBffResetPasswordOptions, type UseChangePasswordArgs, type UseChangePasswordResult, type UseDemoCredentialsOptions, type UseDemoCredentialsResult, type UseDevicePinDisableArgs, type UseDevicePinDisableResult, type UseDevicePinEnrollArgs, type UseDevicePinEnrollResult, type UseDevicePinUnlockArgs, type UseDevicePinUnlockResult, type UseForgotPasswordSubmitArgs, type UseForgotPasswordSubmitResult, type UseOtpLoginOptions, type UseOtpLoginResult, type UsePasskeyCeremonyOptions, type UsePasskeyCeremonyResult, type UsePinLoginOptions, type UsePinLoginResult, type UsePreferredMethodSettingArgs, type UsePreferredMethodSettingResult, type UseResetPasswordFormArgs, type UseResetPasswordFormResult, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createPreferencesClient, defaultAuthTheme, isAllowedPinDigits, isPasswordValid, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { ReactNode, ReactElement } from 'react';
-import { BffAuthClient, BffUser, DemoCredentials, HttpClient, BffLoginRequest, BffForgotPasswordRequest, BffResetPasswordRequest, BffOtpRequestResult } from '@dloizides/auth-client';
-export { BffAuthClient, BffAuthClientOptions, BffForgotPasswordRequest, BffLoginRequest, BffOtpRequestRequest, BffOtpRequestResult, BffOtpVerifyRequest, BffPinLoginRequest, BffRegisterRequest, BffResetPasswordRequest, BffUser, DemoCredentials, HttpClient, HttpRequest, HttpResponse, createFetchHttpClient } from '@dloizides/auth-client';
+import { BffAuthClient, BffUser, DemoCredentials, HttpClient, DemoAccount, BffLoginRequest, BffForgotPasswordRequest, BffResetPasswordRequest, BffOtpRequestResult } from '@dloizides/auth-client';
+export { BffAuthClient, BffAuthClientOptions, BffForgotPasswordRequest, BffLoginRequest, BffOtpRequestRequest, BffOtpRequestResult, BffOtpVerifyRequest, BffPinLoginRequest, BffRegisterRequest, BffResetPasswordRequest, BffUser, DemoAccount, DemoCredentials, HttpClient, HttpRequest, HttpResponse, createFetchHttpClient } from '@dloizides/auth-client';
 import { UseMutationOptions, UseMutationResult } from '@tanstack/react-query';
 
 /**
@@ -1609,9 +1609,18 @@ declare const enum DemoCredentialsHintVariant {
 interface DemoCredentialsHintProps {
     /**
      * The demo credentials to advertise. `undefined` — or a pair with a blank
-     * username or password — renders nothing at all.
+     * username or password — renders nothing at all. When {@link accounts} is given
+     * and non-empty it takes precedence; otherwise this single pair is resolved
+     * (and, if it carries a `publishedAccounts` list, expanded) into the rows.
      */
     credentials?: DemoCredentials;
+    /**
+     * The resolved list of demo accounts to advertise, one labelled row per entry.
+     * Preferred over {@link credentials} when present and non-empty. A single entry
+     * renders exactly like the legacy single-pair panel (no per-account heading).
+     * This is what `useDemoCredentials().hintProps` supplies.
+     */
+    accounts?: DemoAccount[];
     /**
      * Presentation. Defaults to `Disclosure` (one quiet expandable line); pass
      * `Panel` for the original always-open block.
@@ -1631,7 +1640,7 @@ interface DemoCredentialsHintProps {
     onUse?: (credentials: DemoCredentials) => void;
 }
 /** Themeable public-demo credentials surface. Renders `null` when there is no demo. */
-declare function DemoCredentialsHint({ credentials, variant, theme: themeProp, labels: labelsProp, testIdPrefix, onUse, }: Readonly<DemoCredentialsHintProps>): ReactElement | null;
+declare function DemoCredentialsHint({ credentials, accounts, variant, theme: themeProp, labels: labelsProp, testIdPrefix, onUse, }: Readonly<DemoCredentialsHintProps>): ReactElement | null;
 
 /**
  * React context for the `AuthTheme`.
@@ -1747,6 +1756,7 @@ declare const AuthTestIds: {
     readonly changePasswordError: "auth-change-password-error";
     readonly changePasswordSuccess: "auth-change-password-success";
     readonly demoCredentialsHint: "auth-demo-credentials-hint";
+    readonly demoCredentialsAccountLabel: "auth-demo-credentials-account-label";
     readonly demoCredentialsUsername: "auth-demo-credentials-username";
     readonly demoCredentialsPassword: "auth-demo-credentials-password";
     readonly demoCredentialsUseButton: "auth-demo-credentials-use";
@@ -2283,6 +2293,13 @@ interface DemoCredentialsLoginFormProps {
 /** The `<DemoCredentialsHint>` props that carry the credentials + fill action. */
 interface DemoCredentialsHintWiring {
     credentials?: DemoCredentials;
+    /**
+     * The resolved list of demo accounts (from `publishedAccounts`, else the legacy
+     * single pair wrapped into one). The hint renders one labelled row per entry and
+     * prefers this over {@link credentials} when present. Additive — a hint given only
+     * `credentials` still resolves the same list itself.
+     */
+    accounts: DemoAccount[];
     onUse: (credentials: DemoCredentials) => void;
 }
 /** What {@link useDemoCredentials} hands back. */
@@ -2325,6 +2342,19 @@ declare function useDemoCredentials({ credentials, prefillOnMount, }?: Readonly<
  */
 declare function resolveDemoCredentials(credentials?: DemoCredentials | null): DemoCredentials | null;
 
+/**
+ * Validate a raw list of accounts, dropping any unusable entry. Used by the hint
+ * when a consumer passes an `accounts` prop directly (the hook already routes its
+ * list through here too, so validation happens in exactly one place).
+ */
+declare function resolveAccountList(accounts?: readonly DemoAccount[] | null): DemoAccount[];
+/**
+ * Resolve the ordered list of demo accounts to advertise, from either the new
+ * `publishedAccounts` list or the legacy single pair. Returns `[]` when nothing
+ * is usable — the "render nothing" contract, as a list.
+ */
+declare function resolveDemoAccounts(credentials?: DemoCredentials | null): DemoAccount[];
+
 /**
  * `createBffAuthClient` — the one-line wiring of a same-origin `BffAuthClient`.
  *
@@ -2614,4 +2644,4 @@ interface UseChangePasswordResult {
 }
 declare function useChangePassword({ client, onChanged, }: UseChangePasswordArgs): UseChangePasswordResult;
 
-export { type AccountSettingsChangePasswordConfig, type AccountSettingsDevicePinConfig, type AccountSettingsLabels, type AccountSettingsPasskeysConfig, type AccountSettingsPreferredMethodConfig, AccountSettingsScreen, type AccountSettingsScreenProps, AuthScreen, type AuthScreenProps, AuthTestIds, type AuthTheme, type AuthThemeColors, AuthThemeProvider, type AuthThemeProviderProps, type AuthThemeRadii, type AuthThemeSpacing, type AuthThemeTypography, BffAuthStatus, type BffDeviceState, type BffLoginConfig, type BffLogoutClient, CHANGE_PASSWORD_ENDPOINT, type ChangePasswordCapableClient, ChangePasswordCard, type ChangePasswordCardProps, ChangePasswordErrorKey, type ChangePasswordRequest, type ChangePasswordResult, type CreateBffAuthClientOptions, type CreateBffChangePasswordClientOptions, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, type DemoCredentialsHintLabels, type DemoCredentialsHintProps, DemoCredentialsHintVariant, type DemoCredentialsHintWiring, type DemoCredentialsLoginFormProps, type DevicePinCapableClient, type DevicePinDisableCapableClient, type DevicePinEnrollCapableClient, DevicePinEnrollErrorKey, DevicePinEnrollForm, type DevicePinEnrollFormProps, type DevicePinEnrollLabels, type DevicePinEnrollResult, DevicePinErrorKey, DevicePinInput, type DevicePinInputProps, DevicePinLengthPicker, type DevicePinLengthPickerProps, DevicePinOffer, type DevicePinOfferProps, DevicePinSettingsCard, type DevicePinSettingsCardProps, type DevicePinSettingsLabels, type DevicePinUnlockCapableClient, type DevicePinUnlockLabels, type DevicePinUnlockResult, DevicePinUnlockScreen, type DevicePinUnlockScreenProps, type DevicePinUnlockedUser, ForgotPasswordFields, type ForgotPasswordFieldsLabels, type ForgotPasswordFieldsProps, ForgotPasswordForm, type ForgotPasswordFormLabels, type ForgotPasswordFormProps, type LoginConfigCapableClient, LoginForm, type LoginFormLabels, type LoginFormProps, OtpForm, type OtpFormLabels, type OtpFormProps, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, type PasskeyErrorCode, PasskeyLoginButton, type PasskeyLoginButtonProps, type PasskeyLoginLabels, PasskeySettingsCard, type PasskeySettingsCardProps, type PasskeySettingsLabels, PasswordPolicyError, type PerformBffLogoutOptions, PinForm, type PinFormLabels, type PinFormProps, type PreferencesClientOptions, type PreferredMethodClient, PreferredMethodHint, type PreferredMethodHintLabels, type PreferredMethodHintProps, PreferredMethodSettingsCard, type PreferredMethodSettingsCardProps, type PreferredMethodSettingsLabels, PrefillIntent, ResetPasswordError, ResetPasswordForm, type ResetPasswordFormLabels, type ResetPasswordFormProps, type RoleRoute, type RoleRouteTable, type UseBffAuthOptions, type UseBffAuthResult, type UseBffForgotPasswordOptions, type UseBffLoginConfigResult, type UseBffResetPasswordOptions, type UseChangePasswordArgs, type UseChangePasswordResult, type UseDemoCredentialsOptions, type UseDemoCredentialsResult, type UseDevicePinDisableArgs, type UseDevicePinDisableResult, type UseDevicePinEnrollArgs, type UseDevicePinEnrollResult, type UseDevicePinUnlockArgs, type UseDevicePinUnlockResult, type UseForgotPasswordSubmitArgs, type UseForgotPasswordSubmitResult, type UseOtpLoginOptions, type UseOtpLoginResult, type UsePasskeyCeremonyOptions, type UsePasskeyCeremonyResult, type UsePinLoginOptions, type UsePinLoginResult, type UsePreferredMethodSettingArgs, type UsePreferredMethodSettingResult, type UseResetPasswordFormArgs, type UseResetPasswordFormResult, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createPreferencesClient, defaultAuthTheme, isAllowedPinDigits, isPasswordValid, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveDemoCredentials, resolvePostLoginRoute, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };
+export { type AccountSettingsChangePasswordConfig, type AccountSettingsDevicePinConfig, type AccountSettingsLabels, type AccountSettingsPasskeysConfig, type AccountSettingsPreferredMethodConfig, AccountSettingsScreen, type AccountSettingsScreenProps, AuthScreen, type AuthScreenProps, AuthTestIds, type AuthTheme, type AuthThemeColors, AuthThemeProvider, type AuthThemeProviderProps, type AuthThemeRadii, type AuthThemeSpacing, type AuthThemeTypography, BffAuthStatus, type BffDeviceState, type BffLoginConfig, type BffLogoutClient, CHANGE_PASSWORD_ENDPOINT, type ChangePasswordCapableClient, ChangePasswordCard, type ChangePasswordCardProps, ChangePasswordErrorKey, type ChangePasswordRequest, type ChangePasswordResult, type CreateBffAuthClientOptions, type CreateBffChangePasswordClientOptions, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, type DemoCredentialsHintLabels, type DemoCredentialsHintProps, DemoCredentialsHintVariant, type DemoCredentialsHintWiring, type DemoCredentialsLoginFormProps, type DevicePinCapableClient, type DevicePinDisableCapableClient, type DevicePinEnrollCapableClient, DevicePinEnrollErrorKey, DevicePinEnrollForm, type DevicePinEnrollFormProps, type DevicePinEnrollLabels, type DevicePinEnrollResult, DevicePinErrorKey, DevicePinInput, type DevicePinInputProps, DevicePinLengthPicker, type DevicePinLengthPickerProps, DevicePinOffer, type DevicePinOfferProps, DevicePinSettingsCard, type DevicePinSettingsCardProps, type DevicePinSettingsLabels, type DevicePinUnlockCapableClient, type DevicePinUnlockLabels, type DevicePinUnlockResult, DevicePinUnlockScreen, type DevicePinUnlockScreenProps, type DevicePinUnlockedUser, ForgotPasswordFields, type ForgotPasswordFieldsLabels, type ForgotPasswordFieldsProps, ForgotPasswordForm, type ForgotPasswordFormLabels, type ForgotPasswordFormProps, type LoginConfigCapableClient, LoginForm, type LoginFormLabels, type LoginFormProps, OtpForm, type OtpFormLabels, type OtpFormProps, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, type PasskeyErrorCode, PasskeyLoginButton, type PasskeyLoginButtonProps, type PasskeyLoginLabels, PasskeySettingsCard, type PasskeySettingsCardProps, type PasskeySettingsLabels, PasswordPolicyError, type PerformBffLogoutOptions, PinForm, type PinFormLabels, type PinFormProps, type PreferencesClientOptions, type PreferredMethodClient, PreferredMethodHint, type PreferredMethodHintLabels, type PreferredMethodHintProps, PreferredMethodSettingsCard, type PreferredMethodSettingsCardProps, type PreferredMethodSettingsLabels, PrefillIntent, ResetPasswordError, ResetPasswordForm, type ResetPasswordFormLabels, type ResetPasswordFormProps, type RoleRoute, type RoleRouteTable, type UseBffAuthOptions, type UseBffAuthResult, type UseBffForgotPasswordOptions, type UseBffLoginConfigResult, type UseBffResetPasswordOptions, type UseChangePasswordArgs, type UseChangePasswordResult, type UseDemoCredentialsOptions, type UseDemoCredentialsResult, type UseDevicePinDisableArgs, type UseDevicePinDisableResult, type UseDevicePinEnrollArgs, type UseDevicePinEnrollResult, type UseDevicePinUnlockArgs, type UseDevicePinUnlockResult, type UseForgotPasswordSubmitArgs, type UseForgotPasswordSubmitResult, type UseOtpLoginOptions, type UseOtpLoginResult, type UsePasskeyCeremonyOptions, type UsePasskeyCeremonyResult, type UsePinLoginOptions, type UsePinLoginResult, type UsePreferredMethodSettingArgs, type UsePreferredMethodSettingResult, type UseResetPasswordFormArgs, type UseResetPasswordFormResult, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createPreferencesClient, defaultAuthTheme, isAllowedPinDigits, isPasswordValid, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useResetPasswordForm, validatePasswordPolicy, withTestIdPrefix };

package/dist/index.js

@@ -415,6 +415,8 @@ var AuthTestIds = {
   changePasswordSuccess: "auth-change-password-success",
   // Public-demo credentials panel
   demoCredentialsHint: "auth-demo-credentials-hint",
+  // Per-account heading, present only when >1 account is published (multi-account).
+  demoCredentialsAccountLabel: "auth-demo-credentials-account-label",
   demoCredentialsUsername: "auth-demo-credentials-username",
   demoCredentialsPassword: "auth-demo-credentials-password",
   demoCredentialsUseButton: "auth-demo-credentials-use",
@@ -3571,9 +3573,21 @@ function DemoCredentialsBody({
   styles: styles3,
   authStyles,
   testIdPrefix,
+  accountLabel,
+  testIdIndex,
   onUse
 }) {
+  const testId = (base) => withTestIdPrefix(testIdIndex === void 0 ? base : `${base}-${testIdIndex}`, testIdPrefix);
+  const hasLabel = typeof accountLabel === "string" && accountLabel.length > 0;
   return /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { children: [
+    hasLabel ? /* @__PURE__ */ jsxRuntime.jsx(
+      reactNative.Text,
+      {
+        style: styles3.accountLabel,
+        testID: testId(AuthTestIds.demoCredentialsAccountLabel),
+        children: accountLabel
+      }
+    ) : null,
     /* @__PURE__ */ jsxRuntime.jsxs(reactNative.View, { style: styles3.row, children: [
       /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: styles3.rowLabel, children: labels.usernameLabel }),
       /* @__PURE__ */ jsxRuntime.jsx(
@@ -3581,7 +3595,7 @@ function DemoCredentialsBody({
         {
           selectable: true,
           style: styles3.rowValue,
-          testID: withTestIdPrefix(AuthTestIds.demoCredentialsUsername, testIdPrefix),
+          testID: testId(AuthTestIds.demoCredentialsUsername),
           children: credentials.username
         }
       )
@@ -3593,7 +3607,7 @@ function DemoCredentialsBody({
         {
           selectable: true,
           style: styles3.rowValue,
-          testID: withTestIdPrefix(AuthTestIds.demoCredentialsPassword, testIdPrefix),
+          testID: testId(AuthTestIds.demoCredentialsPassword),
           children: credentials.password
         }
       )
@@ -3605,7 +3619,7 @@ function DemoCredentialsBody({
         accessibilityLabel: labels.useCredentials,
         accessibilityRole: "button",
         style: [authStyles.secondaryButton, styles3.useButton],
-        testID: withTestIdPrefix(AuthTestIds.demoCredentialsUseButton, testIdPrefix),
+        testID: testId(AuthTestIds.demoCredentialsUseButton),
         onPress: onUse,
         children: /* @__PURE__ */ jsxRuntime.jsx(reactNative.Text, { style: authStyles.secondaryButtonText, children: labels.useCredentials })
       }
@@ -3658,6 +3672,15 @@ function useDemoCredentialsStyles(theme) {
         marginBottom: spacing.sm,
         color: colors.textSecondary
       },
+      accountLabel: {
+        fontSize: typography.caption,
+        fontWeight: "700",
+        color: colors.text,
+        // Separates one account block from the previous one; the first block sits
+        // under the panel description / disclosure divider, which already spaces it.
+        marginTop: spacing.sm,
+        marginBottom: spacing.xs / HALF
+      },
       row: {
         flexDirection: "row",
         alignItems: "center",
@@ -3733,8 +3756,39 @@ function resolveDemoCredentials(credentials) {
   }
   return { username, password };
 }
+
+// src/demo/resolveDemoAccounts.ts
+function resolveAccount(account) {
+  if (account === void 0 || account === null) {
+    return null;
+  }
+  const pair = resolveDemoCredentials(account);
+  if (pair === null) {
+    return null;
+  }
+  const label = typeof account.label === "string" ? account.label : "";
+  return { label, username: pair.username, password: pair.password };
+}
+function resolveAccountList(accounts) {
+  if (!Array.isArray(accounts)) {
+    return [];
+  }
+  return accounts.map(resolveAccount).filter((account) => account !== null);
+}
+function resolveDemoAccounts(credentials) {
+  if (credentials === void 0 || credentials === null) {
+    return [];
+  }
+  const fromList = resolveAccountList(credentials.publishedAccounts);
+  if (fromList.length > 0) {
+    return fromList;
+  }
+  const single = resolveDemoCredentials(credentials);
+  return single === null ? [] : [{ label: "", username: single.username, password: single.password }];
+}
 function DemoCredentialsHint({
   credentials,
+  accounts,
   variant = "disclosure" /* Disclosure */,
   theme: themeProp,
   labels: labelsProp,
@@ -3749,29 +3803,35 @@ function DemoCredentialsHint({
     () => ({ ...DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, ...labelsProp }),
     [labelsProp]
   );
-  const resolved = react.useMemo(() => resolveDemoCredentials(credentials), [credentials]);
-  const handleUse = react.useCallback(() => {
-    if (resolved !== null && onUse !== void 0) {
-      onUse(resolved);
-    }
-  }, [resolved, onUse]);
+  const resolvedAccounts = react.useMemo(
+    () => accounts !== void 0 && accounts.length > 0 ? resolveAccountList(accounts) : resolveDemoAccounts(credentials),
+    [accounts, credentials]
+  );
+  const makeUse = react.useCallback(
+    (account) => onUse === void 0 ? void 0 : () => onUse({ username: account.username, password: account.password }),
+    [onUse]
+  );
   const handleToggle = react.useCallback(() => {
     setExpanded((current) => !current);
   }, []);
-  if (resolved === null) {
+  if (resolvedAccounts.length === 0) {
     return null;
   }
-  const body = /* @__PURE__ */ jsxRuntime.jsx(
+  const isSingle = resolvedAccounts.length === 1;
+  const body = resolvedAccounts.map((account, index) => /* @__PURE__ */ jsxRuntime.jsx(
     DemoCredentialsBody,
     {
+      accountLabel: isSingle ? void 0 : account.label,
       authStyles,
-      credentials: resolved,
+      credentials: { username: account.username, password: account.password },
       labels,
       styles: styles3,
+      testIdIndex: isSingle ? void 0 : index,
       testIdPrefix,
-      onUse: onUse === void 0 ? void 0 : handleUse
-    }
-  );
+      onUse: makeUse(account)
+    },
+    `${account.username}-${String(index)}`
+  ));
   if (variant === "panel" /* Panel */) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
       reactNative.View,
@@ -3927,7 +3987,11 @@ function useDemoCredentials({
   credentials,
   prefillOnMount = false
 } = {}) {
-  const resolved = react.useMemo(() => resolveDemoCredentials(credentials), [credentials]);
+  const accounts = react.useMemo(() => resolveDemoAccounts(credentials), [credentials]);
+  const resolved = react.useMemo(() => {
+    const first = accounts[0];
+    return first === void 0 ? null : { username: first.username, password: first.password };
+  }, [accounts]);
   const [filled, setFilled] = react.useState(
     prefillOnMount ? resolved : null
   );
@@ -3959,11 +4023,12 @@ function useDemoCredentials({
         prefillIntent
       },
       // `credentials` is passed through unresolved on purpose: the hint applies
-      // `resolveDemoCredentials` itself, so it fails closed even when it is used
-      // standalone, without this hook.
-      hintProps: { credentials, onUse: handleUse }
+      // `resolveDemoAccounts` itself, so it fails closed even when it is used
+      // standalone, without this hook. `accounts` is the already-resolved list the
+      // hint prefers — one labelled row per entry.
+      hintProps: { credentials, accounts, onUse: handleUse }
     }),
-    [filled, prefillNonce, prefillIntent, credentials, handleUse]
+    [filled, prefillNonce, prefillIntent, credentials, accounts, handleUse]
   );
 }
 async function lazyFetchHttpClient(request) {
@@ -4179,6 +4244,8 @@ exports.readCachedPreferredMethod = readCachedPreferredMethod;
 exports.readPasskeyError = readPasskeyError;
 exports.readPasskeyRegistered = readPasskeyRegistered;
 exports.resolveAccessibleRoutes = resolveAccessibleRoutes;
+exports.resolveAccountList = resolveAccountList;
+exports.resolveDemoAccounts = resolveDemoAccounts;
 exports.resolveDemoCredentials = resolveDemoCredentials;
 exports.resolvePostLoginRoute = resolvePostLoginRoute;
 exports.startPasskeyLogin = startPasskeyLogin;