@dloizides/auth-web 1.22.1 → 1.24.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { ReactNode, ReactElement } from 'react';
-import { BffAuthClient, BffUser, DemoCredentials, HttpClient, DemoAccount, BffLoginRequest, BffForgotPasswordRequest, BffResetPasswordRequest, BffOtpRequestResult } from '@dloizides/auth-client';
+import { BffAuthClient, BffUser, DemoCredentials, HttpClient, DemoAccount, BffLoginRequest, BffForgotPasswordRequest, BffResetPasswordRequest, BffOtpRequestResult, BffRegisterRequest } from '@dloizides/auth-client';
 export { BffAuthClient, BffAuthClientOptions, BffForgotPasswordRequest, BffLoginRequest, BffOtpRequestRequest, BffOtpRequestResult, BffOtpVerifyRequest, BffPinLoginRequest, BffRegisterRequest, BffResetPasswordRequest, BffUser, DemoAccount, DemoCredentials, HttpClient, HttpRequest, HttpResponse, createFetchHttpClient } from '@dloizides/auth-client';
 import { UseMutationOptions, UseMutationResult } from '@tanstack/react-query';
 
@@ -460,6 +460,8 @@ interface ResetPasswordFormLabels {
     errorTokenInvalid: string;
     /** Error: a network / 5xx failure. */
     errorNetwork: string;
+    /** Error: the BFF rate-limited the attempt. Falls back to `errorNetwork`. */
+    errorRateLimited?: string;
 }
 declare const DEFAULT_RESET_PASSWORD_LABELS: ResetPasswordFormLabels;
 
@@ -571,6 +573,11 @@ type RegisterInputField = Exclude<RegisterField, 'website'>;
  * honeypot is kept (empty for real users) so the BFF can enforce it as well.
  */
 type RegisterSubmitValues = Omit<RegisterFormValues, 'confirmPassword'>;
+/** Extra request data for shared registration; only passed to `onSubmit` when it is on. */
+interface RegisterSubmitMeta {
+    idempotencyKey: string;
+    formElapsedMs: number;
+}
 /** `true` when the password is acceptable. */
 type RegisterPasswordPolicy = (password: string) => boolean;
 type RegisterSubmitOutcome<TResult> = {
@@ -603,9 +610,20 @@ interface RegisterFormLabels {
     fields: Record<RegisterInputField, RegisterFieldLabels>;
     /** Copy for the single "Your name" input of the compact form. Defaults to English. */
     fullName?: RegisterFieldLabels;
+    /** Heading shown after a 202 with shared registration on. Defaults to English. */
+    checkEmailTitle?: string;
+    /** Body shown after a 202 with shared registration on. Defaults to English. */
+    checkEmailBody?: string;
 }
 declare const DEFAULT_REGISTER_LABELS: RegisterFormLabels;
 
+/** Copy for the verified account whose automatic sign-in failed. */
+interface VerifySignInLabels {
+    title: string;
+    body: string;
+    action: string;
+    actionHint: string;
+}
 /** Strings rendered by `<VerifyEmailScreen>`. */
 interface VerifyEmailLabels {
     loadingTitle: string;
@@ -629,9 +647,53 @@ interface VerifyEmailLabels {
     resendSubmit: string;
     resendSubmitHint: string;
     resendConfirmation: string;
-}
+    /** Shown when the BFF rate-limits the link. Falls back to `errorGeneric`. */
+    errorRateLimited?: string;
+    /** Copy for the set-new-password step of shared registration. */
+    newPassword?: Partial<ResetPasswordFormLabels>;
+    /** Copy for the verified-but-not-signed-in step of shared registration. */
+    signIn?: Partial<VerifySignInLabels>;
+}
+declare const DEFAULT_VERIFY_NEW_PASSWORD_LABELS: ResetPasswordFormLabels;
+declare const DEFAULT_VERIFY_SIGN_IN_LABELS: VerifySignInLabels;
 declare const DEFAULT_VERIFY_EMAIL_LABELS: VerifyEmailLabels;
 
+interface AccountDeletionFieldLabels {
+    label: string;
+    placeholder: string;
+    hint: string;
+    inputLabel: string;
+}
+/** Strings rendered by `<AccountDeletionForm>`. `{seconds}` and `{date}` are filled in. */
+interface AccountDeletionLabels {
+    title: string;
+    subtitle: string;
+    reason: AccountDeletionFieldLabels;
+    submit: string;
+    submitHint: string;
+    submitting: string;
+    stepUpTitle: string;
+    stepUpSubtitle: string;
+    password: AccountDeletionFieldLabels;
+    stepUpSubmit: string;
+    stepUpSubmitHint: string;
+    checkEmailTitle: string;
+    checkEmailBody: string;
+    emailNotSentTitle: string;
+    emailNotSentBody: string;
+    scheduledDate: string;
+    alreadyRequestedTitle: string;
+    alreadyRequestedBody: string;
+    errorPasswordRequired: string;
+    errorWrongPassword: string;
+    errorSignInRequired: string;
+    errorRateLimited: string;
+    errorRateLimitedSeconds: string;
+    errorRetryLater: string;
+    errorFailed: string;
+}
+declare const DEFAULT_ACCOUNT_DELETION_LABELS: AccountDeletionLabels;
+
 /**
  * Who asked for a prefill — the difference between "the user requested this" and
  * "the app offered it".
@@ -1897,6 +1959,8 @@ declare const AuthTestIds: {
     readonly verifyEmailSuccess: "auth-verify-email-success";
     readonly verifyEmailContinue: "auth-verify-email-continue";
     readonly verifyEmailError: "auth-verify-email-error";
+    readonly verifyEmailSignIn: "auth-verify-email-sign-in";
+    readonly verifyEmailSignInContinue: "auth-verify-email-sign-in-continue";
     readonly verifyEmailResendCta: "auth-verify-email-resend-cta";
     readonly verifyEmailResendForm: "auth-verify-email-resend-form";
     readonly verifyEmailResendEmail: "auth-verify-email-resend-email";
@@ -2004,7 +2068,9 @@ declare const enum ResetPasswordError {
     /** The reset token is missing, expired, or already consumed. */
     TokenInvalid = "tokenInvalid",
     /** A network or 5xx failure prevented the reset from completing. */
-    Network = "network"
+    Network = "network",
+    /** The BFF rate-limited the attempt (HTTP 429). */
+    RateLimited = "rateLimited"
 }
 
 interface UseResetPasswordFormArgs {
@@ -2508,7 +2574,7 @@ declare function resolveDemoAccounts(credentials?: DemoCredentials | null): Demo
 
 interface RegisterFormProps<TResult> {
     /** Send the registration (build the request, call the BFF). Throw on failure. */
-    onSubmit: (values: RegisterSubmitValues) => Promise<TResult>;
+    onSubmit: (values: RegisterSubmitValues, meta?: RegisterSubmitMeta) => Promise<TResult>;
     /** Called with whatever `onSubmit` resolved to. */
     onSuccess: (result: TResult) => void;
     /** Called with the failure code; map it to localised copy. */
@@ -2533,7 +2599,7 @@ interface RegisterFormProps<TResult> {
     compact?: boolean;
 }
 /** Themeable registration form built on `useRegisterForm`. */
-declare function RegisterForm<TResult>({ onSubmit, onSuccess, onError, onSubmitAttempt, passwordPolicy, labels: labelsProp, theme: themeProp, footer, testIdPrefix, compact, }: Readonly<RegisterFormProps<TResult>>): ReactElement;
+declare function RegisterForm<TResult>(props: Readonly<RegisterFormProps<TResult>>): ReactElement;
 
 /**
  * `testID` values for `<RegisterForm>`.
@@ -2558,11 +2624,12 @@ declare const RegisterTestIds: {
     readonly tenantNameInput: "register-tenant-name-input";
     readonly submitButton: "register-submit-button";
     readonly websiteInput: "register-website";
+    readonly checkEmail: "register-check-email";
 };
 
 interface UseRegisterFormArgs<TResult> {
     /** Send the registration. Throw on failure; the message is decoded to a code. */
-    onSubmit: (values: RegisterSubmitValues) => Promise<TResult>;
+    onSubmit: (values: RegisterSubmitValues, meta?: RegisterSubmitMeta) => Promise<TResult>;
     /** Password rule. Defaults to {@link isRegisterPasswordStrong}. */
     passwordPolicy?: RegisterPasswordPolicy;
     /**
@@ -2575,6 +2642,8 @@ interface UseRegisterFormArgs<TResult> {
      * (from the email) and the password confirmation are derived before validation.
      */
     compact?: boolean;
+    /** Opt-in shared registration: `onSubmit` also gets the key and form time; an accepted result clears the passwords. */
+    sharedRegistration?: boolean;
 }
 interface UseRegisterFormResult<TResult> {
     state: RegisterFormValues;
@@ -2585,7 +2654,7 @@ interface UseRegisterFormResult<TResult> {
     error: RegisterErrorCode | null;
 }
 /** Headless registration form logic. */
-declare function useRegisterForm<TResult>({ onSubmit, passwordPolicy, onSubmitAttempt, compact, }: UseRegisterFormArgs<TResult>): UseRegisterFormResult<TResult>;
+declare function useRegisterForm<TResult>({ onSubmit, passwordPolicy, onSubmitAttempt, compact, sharedRegistration, }: UseRegisterFormArgs<TResult>): UseRegisterFormResult<TResult>;
 
 /**
  * Pure registration helpers: trimming, client-side validation and decoding of a
@@ -2919,6 +2988,10 @@ declare const enum VerifyEmailErrorCode {
     TokenUsed = "TOKEN_USED",
     KeycloakUpdateFailed = "KEYCLOAK_UPDATE_FAILED",
     MissingToken = "MISSING_TOKEN",
+    NewPasswordRequired = "NEW_PASSWORD_REQUIRED",
+    WeakPassword = "WEAK_PASSWORD",
+    RateLimited = "RATE_LIMITED",
+    SignInFailed = "SIGN_IN_FAILED",
     Generic = "GENERIC"
 }
 
@@ -2932,6 +3005,7 @@ type VerifyEmailResult = {
 interface VerifyEmailCapableClient {
     verifyEmail(token: string): Promise<VerifyEmailResult>;
     resendVerification(email: string, verifyUrlTemplate?: string): Promise<boolean>;
+    setNewPassword?(token: string, newPassword: string): Promise<VerifyEmailResult>;
 }
 
 interface VerifyEmailScreenProps {
@@ -2948,11 +3022,12 @@ interface VerifyEmailScreenProps {
 /** Verifies the emailed token on mount, then offers Continue or a resend-link form. */
 declare function VerifyEmailScreen({ client, token, onContinue, theme: themeProp, labels: labelsProp, verifyUrlTemplate, onVerified, onFailed, testIdPrefix, }: Readonly<VerifyEmailScreenProps>): ReactElement;
 
-/** The three states the verify-email screen moves through. */
+/** The states the verify-email screen moves through. */
 declare const enum VerifyEmailPhase {
     Loading = "loading",
     Success = "success",
-    Failure = "failure"
+    Failure = "failure",
+    NewPasswordRequired = "newPasswordRequired"
 }
 
 interface UseVerifyEmailArgs {
@@ -3006,4 +3081,143 @@ declare function readVerifyToken(raw: string | readonly string[] | undefined): s
 /** The failure body copy for a verification error code. */
 declare function verifyEmailErrorText(code: VerifyEmailErrorCode, labels: VerifyEmailLabels): string;
 
-export { type AccountSettingsChangePasswordConfig, type AccountSettingsDevicePinConfig, type AccountSettingsLabels, type AccountSettingsPasskeysConfig, type AccountSettingsPreferredMethodConfig, AccountSettingsScreen, type AccountSettingsScreenProps, AuthScreen, type AuthScreenProps, AuthTestIds, type AuthTheme, type AuthThemeColors, AuthThemeProvider, type AuthThemeProviderProps, type AuthThemeRadii, type AuthThemeSpacing, type AuthThemeTypography, BffAuthStatus, type BffDeviceState, type BffLoginConfig, type BffLogoutClient, type BuildVerifyUrlTemplateOptions, CHANGE_PASSWORD_ENDPOINT, type ChangePasswordCapableClient, ChangePasswordCard, type ChangePasswordCardProps, ChangePasswordErrorKey, type ChangePasswordRequest, type ChangePasswordResult, type CreateBffAuthClientOptions, type CreateBffChangePasswordClientOptions, type CreateBffVerifyEmailClientOptions, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_REGISTER_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEFAULT_VERIFY_EMAIL_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, type DemoCredentialsHintLabels, type DemoCredentialsHintProps, DemoCredentialsHintVariant, type DemoCredentialsHintWiring, type DemoCredentialsLoginFormProps, type DevicePinCapableClient, type DevicePinDisableCapableClient, type DevicePinEnrollCapableClient, DevicePinEnrollErrorKey, DevicePinEnrollForm, type DevicePinEnrollFormProps, type DevicePinEnrollLabels, type DevicePinEnrollResult, DevicePinErrorKey, DevicePinInput, type DevicePinInputProps, DevicePinLengthPicker, type DevicePinLengthPickerProps, DevicePinOffer, type DevicePinOfferProps, DevicePinSettingsCard, type DevicePinSettingsCardProps, type DevicePinSettingsLabels, type DevicePinUnlockCapableClient, type DevicePinUnlockLabels, type DevicePinUnlockResult, DevicePinUnlockScreen, type DevicePinUnlockScreenProps, type DevicePinUnlockedUser, ForgotPasswordFields, type ForgotPasswordFieldsLabels, type ForgotPasswordFieldsProps, ForgotPasswordForm, type ForgotPasswordFormLabels, type ForgotPasswordFormProps, type LoginConfigCapableClient, LoginForm, type LoginFormLabels, type LoginFormProps, OtpForm, type OtpFormLabels, type OtpFormProps, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, type PasskeyErrorCode, PasskeyLoginButton, type PasskeyLoginButtonProps, type PasskeyLoginLabels, PasskeySettingsCard, type PasskeySettingsCardProps, type PasskeySettingsLabels, PasswordPolicyError, type PerformBffLogoutOptions, PinForm, type PinFormLabels, type PinFormProps, type PreferencesClientOptions, type PreferredMethodClient, PreferredMethodHint, type PreferredMethodHintLabels, type PreferredMethodHintProps, PreferredMethodSettingsCard, type PreferredMethodSettingsCardProps, type PreferredMethodSettingsLabels, PrefillIntent, RESEND_VERIFICATION_ENDPOINT, RegisterErrorCode, type RegisterField, type RegisterFieldLabels, RegisterForm, type RegisterFormLabels, type RegisterFormProps, type RegisterFormValues, type RegisterInputField, type RegisterPasswordPolicy, type RegisterSubmitOutcome, type RegisterSubmitValues, RegisterTestIds, ResetPasswordError, ResetPasswordForm, type ResetPasswordFormLabels, type ResetPasswordFormProps, type RoleRoute, type RoleRouteTable, type SplitName, type UseBffAuthOptions, type UseBffAuthResult, type UseBffForgotPasswordOptions, type UseBffLoginConfigResult, type UseBffResetPasswordOptions, type UseChangePasswordArgs, type UseChangePasswordResult, type UseDemoCredentialsOptions, type UseDemoCredentialsResult, type UseDevicePinDisableArgs, type UseDevicePinDisableResult, type UseDevicePinEnrollArgs, type UseDevicePinEnrollResult, type UseDevicePinUnlockArgs, type UseDevicePinUnlockResult, type UseForgotPasswordSubmitArgs, type UseForgotPasswordSubmitResult, type UseOtpLoginOptions, type UseOtpLoginResult, type UsePasskeyCeremonyOptions, type UsePasskeyCeremonyResult, type UsePinLoginOptions, type UsePinLoginResult, type UsePreferredMethodSettingArgs, type UsePreferredMethodSettingResult, type UseRegisterFormArgs, type UseRegisterFormResult, type UseResendVerificationArgs, type UseResendVerificationResult, type UseResetPasswordFormArgs, type UseResetPasswordFormResult, type UseVerifyEmailArgs, type UseVerifyEmailResult, VERIFY_EMAIL_ENDPOINT, VERIFY_TOKEN_PLACEHOLDER, type VerifyEmailCapableClient, VerifyEmailErrorCode, type VerifyEmailLabels, VerifyEmailPhase, type VerifyEmailResult, VerifyEmailScreen, type VerifyEmailScreenProps, buildVerifyUrlTemplate, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createBffVerifyEmailClient, createPreferencesClient, defaultAuthTheme, deriveUsernameFromEmail, isAllowedPinDigits, isPasswordValid, isRegisterPasswordStrong, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, readVerifyToken, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, splitFullName, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useRegisterForm, useResendVerification, useResetPasswordForm, useVerifyEmail, validatePasswordPolicy, verifyEmailErrorText, withTestIdPrefix };
+/** What the shared `/bff/register` resolves to; `accepted` means a 202 with no session. */
+interface SharedRegisterResult {
+    accepted: boolean;
+    body: unknown;
+}
+/** `true` when `result` reports an accepted registration waiting on the emailed link. */
+declare function isRegisterAccepted(result: unknown): boolean;
+
+declare const REGISTER_ENDPOINT = "/bff/register";
+declare const VERIFY_AND_LOGIN_ENDPOINT = "/bff/verify-and-login";
+interface SharedRegistrationClient extends VerifyEmailCapableClient {
+    register(request: BffRegisterRequest, meta?: RegisterSubmitMeta): Promise<SharedRegisterResult>;
+    setNewPassword(token: string, newPassword: string): Promise<VerifyEmailResult>;
+}
+/** Same-origin client for the shared registration path; never calls `/bff/verify-email`. */
+declare function createSharedRegistrationClient(options?: CreateBffVerifyEmailClientOptions): SharedRegistrationClient;
+
+interface SharedRegisterFormProps<TResult> extends RegisterFormProps<TResult> {
+    /** Called once when the BFF accepts the signup (202). `onSuccess` is not called then: no session exists. */
+    onAccepted?: (result: TResult) => void;
+}
+/** `<RegisterForm>` for the shared path: `onSubmit` also gets `meta`, and a 202 shows "check your email". */
+declare function SharedRegisterForm<TResult>({ onSuccess, onAccepted, ...formProps }: Readonly<SharedRegisterFormProps<TResult>>): ReactElement;
+
+/** What `POST /bff/account/delete-request` answered, as the form routes on it. */
+declare const enum AccountDeletionStatus {
+    Accepted = "accepted",
+    StepUpRequired = "stepUpRequired",
+    AlreadyRequested = "alreadyRequested",
+    SignInRequired = "signInRequired",
+    RateLimited = "rateLimited",
+    RetryLater = "retryLater",
+    Failed = "failed"
+}
+
+/** What `POST /bff/step-up/password` answered. */
+declare const enum StepUpStatus {
+    Confirmed = "confirmed",
+    WrongPassword = "wrongPassword",
+    RateLimited = "rateLimited",
+    Failed = "failed"
+}
+
+declare const ACCOUNT_DELETE_REQUEST_ENDPOINT = "/bff/account/delete-request";
+declare const STEP_UP_PASSWORD_ENDPOINT = "/bff/step-up/password";
+/** The 202 body: the request is recorded and waits on the emailed confirmation. */
+interface AccountDeletionReceipt {
+    requestId: string;
+    scheduledDeletionDate: string;
+    confirmationEmailSent: boolean;
+}
+type AccountDeletionResult = {
+    status: AccountDeletionStatus.Accepted;
+    receipt: AccountDeletionReceipt;
+} | {
+    status: AccountDeletionStatus.RateLimited;
+    retryAfterSeconds: number | null;
+} | {
+    status: AccountDeletionStatus.StepUpRequired | AccountDeletionStatus.AlreadyRequested | AccountDeletionStatus.SignInRequired | AccountDeletionStatus.RetryLater | AccountDeletionStatus.Failed;
+};
+type StepUpResult = {
+    status: StepUpStatus.RateLimited;
+    retryAfterSeconds: number | null;
+} | {
+    status: StepUpStatus.Confirmed | StepUpStatus.WrongPassword | StepUpStatus.Failed;
+};
+/** The two calls the account deletion form needs. Neither rejects on an expected outcome. */
+interface AccountDeletionCapableClient {
+    requestDeletion(reason?: string): Promise<AccountDeletionResult>;
+    stepUpPassword(password: string): Promise<StepUpResult>;
+}
+/** Same-origin client: session cookie, `X-BFF-Csrf: 1`, JSON. A transport error resolves to `Failed`. */
+declare function createBffAccountDeletionClient(options?: CreateBffVerifyEmailClientOptions): AccountDeletionCapableClient;
+
+/** Failure causes of the account deletion form. */
+declare const enum AccountDeletionErrorKey {
+    PasswordRequired = "passwordRequired",
+    WrongPassword = "wrongPassword",
+    SignInRequired = "signInRequired",
+    RateLimited = "rateLimited",
+    RetryLater = "retryLater",
+    Failed = "failed"
+}
+
+/** Which view the account deletion form shows. */
+declare const enum AccountDeletionPhase {
+    Confirm = "confirm",
+    StepUp = "stepUp",
+    Accepted = "accepted",
+    AlreadyRequested = "alreadyRequested"
+}
+
+interface UseAccountDeletionArgs {
+    client: AccountDeletionCapableClient;
+    onAccepted?: (receipt: AccountDeletionReceipt) => void;
+    onSignInRequired?: () => void;
+}
+interface UseAccountDeletionResult {
+    phase: AccountDeletionPhase;
+    reason: string;
+    password: string;
+    setReason: (value: string) => void;
+    setPassword: (value: string) => void;
+    submitting: boolean;
+    blocked: boolean;
+    retryAfterSeconds: number | null;
+    errorKey: AccountDeletionErrorKey | null;
+    receipt: AccountDeletionReceipt | null;
+    submit: () => void;
+}
+/** State behind the account deletion form: request, password step-up + one retry, 429 wait. */
+declare function useAccountDeletion(args: UseAccountDeletionArgs): UseAccountDeletionResult;
+
+interface AccountDeletionFormProps {
+    client: AccountDeletionCapableClient;
+    /** Localised copy. Partial: unspecified top-level keys fall back to English defaults. */
+    labels?: Partial<AccountDeletionLabels>;
+    theme?: AuthTheme;
+    testIdPrefix?: string;
+    /** Rendered at the end of every view (e.g. a cancel link). */
+    footer?: ReactNode;
+    onAccepted?: (receipt: AccountDeletionReceipt) => void;
+    onSignInRequired?: () => void;
+}
+/** Asks for an optional reason, steps up with the password when the login is stale, then says check your email. */
+declare function AccountDeletionForm({ client, labels: labelsProp, theme: themeProp, testIdPrefix, footer, onAccepted, onSignInRequired, }: Readonly<AccountDeletionFormProps>): ReactElement;
+
+/** `testID` values for `<AccountDeletionForm>`. */
+declare const AccountDeletionTestIds: {
+    readonly form: "account-deletion-form";
+    readonly reasonInput: "account-deletion-reason-input";
+    readonly stepUpInput: "account-deletion-password-input";
+    readonly submitButton: "account-deletion-submit-button";
+    readonly error: "account-deletion-error";
+    readonly checkEmail: "account-deletion-check-email";
+    readonly emailNotSent: "account-deletion-email-not-sent";
+    readonly alreadyRequested: "account-deletion-already-requested";
+};
+
+export { ACCOUNT_DELETE_REQUEST_ENDPOINT, type AccountDeletionCapableClient, AccountDeletionErrorKey, type AccountDeletionFieldLabels, AccountDeletionForm, type AccountDeletionFormProps, type AccountDeletionLabels, AccountDeletionPhase, type AccountDeletionReceipt, type AccountDeletionResult, AccountDeletionStatus, AccountDeletionTestIds, type AccountSettingsChangePasswordConfig, type AccountSettingsDevicePinConfig, type AccountSettingsLabels, type AccountSettingsPasskeysConfig, type AccountSettingsPreferredMethodConfig, AccountSettingsScreen, type AccountSettingsScreenProps, AuthScreen, type AuthScreenProps, AuthTestIds, type AuthTheme, type AuthThemeColors, AuthThemeProvider, type AuthThemeProviderProps, type AuthThemeRadii, type AuthThemeSpacing, type AuthThemeTypography, BffAuthStatus, type BffDeviceState, type BffLoginConfig, type BffLogoutClient, type BuildVerifyUrlTemplateOptions, CHANGE_PASSWORD_ENDPOINT, type ChangePasswordCapableClient, ChangePasswordCard, type ChangePasswordCardProps, ChangePasswordErrorKey, type ChangePasswordRequest, type ChangePasswordResult, type CreateBffAuthClientOptions, type CreateBffChangePasswordClientOptions, type CreateBffVerifyEmailClientOptions, DEFAULT_ACCOUNT_DELETION_LABELS, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_REGISTER_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEFAULT_VERIFY_EMAIL_LABELS, DEFAULT_VERIFY_NEW_PASSWORD_LABELS, DEFAULT_VERIFY_SIGN_IN_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, type DemoCredentialsHintLabels, type DemoCredentialsHintProps, DemoCredentialsHintVariant, type DemoCredentialsHintWiring, type DemoCredentialsLoginFormProps, type DevicePinCapableClient, type DevicePinDisableCapableClient, type DevicePinEnrollCapableClient, DevicePinEnrollErrorKey, DevicePinEnrollForm, type DevicePinEnrollFormProps, type DevicePinEnrollLabels, type DevicePinEnrollResult, DevicePinErrorKey, DevicePinInput, type DevicePinInputProps, DevicePinLengthPicker, type DevicePinLengthPickerProps, DevicePinOffer, type DevicePinOfferProps, DevicePinSettingsCard, type DevicePinSettingsCardProps, type DevicePinSettingsLabels, type DevicePinUnlockCapableClient, type DevicePinUnlockLabels, type DevicePinUnlockResult, DevicePinUnlockScreen, type DevicePinUnlockScreenProps, type DevicePinUnlockedUser, ForgotPasswordFields, type ForgotPasswordFieldsLabels, type ForgotPasswordFieldsProps, ForgotPasswordForm, type ForgotPasswordFormLabels, type ForgotPasswordFormProps, type LoginConfigCapableClient, LoginForm, type LoginFormLabels, type LoginFormProps, OtpForm, type OtpFormLabels, type OtpFormProps, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, type PasskeyErrorCode, PasskeyLoginButton, type PasskeyLoginButtonProps, type PasskeyLoginLabels, PasskeySettingsCard, type PasskeySettingsCardProps, type PasskeySettingsLabels, PasswordPolicyError, type PerformBffLogoutOptions, PinForm, type PinFormLabels, type PinFormProps, type PreferencesClientOptions, type PreferredMethodClient, PreferredMethodHint, type PreferredMethodHintLabels, type PreferredMethodHintProps, PreferredMethodSettingsCard, type PreferredMethodSettingsCardProps, type PreferredMethodSettingsLabels, PrefillIntent, REGISTER_ENDPOINT, RESEND_VERIFICATION_ENDPOINT, RegisterErrorCode, type RegisterField, type RegisterFieldLabels, RegisterForm, type RegisterFormLabels, type RegisterFormProps, type RegisterFormValues, type RegisterInputField, type RegisterPasswordPolicy, type RegisterSubmitMeta, type RegisterSubmitOutcome, type RegisterSubmitValues, RegisterTestIds, ResetPasswordError, ResetPasswordForm, type ResetPasswordFormLabels, type ResetPasswordFormProps, type RoleRoute, type RoleRouteTable, STEP_UP_PASSWORD_ENDPOINT, SharedRegisterForm, type SharedRegisterFormProps, type SharedRegisterResult, type SharedRegistrationClient, type SplitName, type StepUpResult, StepUpStatus, type UseAccountDeletionArgs, type UseAccountDeletionResult, type UseBffAuthOptions, type UseBffAuthResult, type UseBffForgotPasswordOptions, type UseBffLoginConfigResult, type UseBffResetPasswordOptions, type UseChangePasswordArgs, type UseChangePasswordResult, type UseDemoCredentialsOptions, type UseDemoCredentialsResult, type UseDevicePinDisableArgs, type UseDevicePinDisableResult, type UseDevicePinEnrollArgs, type UseDevicePinEnrollResult, type UseDevicePinUnlockArgs, type UseDevicePinUnlockResult, type UseForgotPasswordSubmitArgs, type UseForgotPasswordSubmitResult, type UseOtpLoginOptions, type UseOtpLoginResult, type UsePasskeyCeremonyOptions, type UsePasskeyCeremonyResult, type UsePinLoginOptions, type UsePinLoginResult, type UsePreferredMethodSettingArgs, type UsePreferredMethodSettingResult, type UseRegisterFormArgs, type UseRegisterFormResult, type UseResendVerificationArgs, type UseResendVerificationResult, type UseResetPasswordFormArgs, type UseResetPasswordFormResult, type UseVerifyEmailArgs, type UseVerifyEmailResult, VERIFY_AND_LOGIN_ENDPOINT, VERIFY_EMAIL_ENDPOINT, VERIFY_TOKEN_PLACEHOLDER, type VerifyEmailCapableClient, VerifyEmailErrorCode, type VerifyEmailLabels, VerifyEmailPhase, type VerifyEmailResult, VerifyEmailScreen, type VerifyEmailScreenProps, type VerifySignInLabels, buildVerifyUrlTemplate, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAccountDeletionClient, createBffAuthClient, createBffChangePasswordClient, createBffVerifyEmailClient, createPreferencesClient, createSharedRegistrationClient, defaultAuthTheme, deriveUsernameFromEmail, isAllowedPinDigits, isPasswordValid, isRegisterAccepted, isRegisterPasswordStrong, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, readVerifyToken, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, splitFullName, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAccountDeletion, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useRegisterForm, useResendVerification, useResetPasswordForm, useVerifyEmail, validatePasswordPolicy, verifyEmailErrorText, withTestIdPrefix };