@dloizides/auth-web 1.23.0 → 1.25.0

package/dist/index.mjs

@@ -397,6 +397,45 @@ var DEFAULT_VERIFY_EMAIL_LABELS = {
   signIn: DEFAULT_VERIFY_SIGN_IN_LABELS
 };
 
+// src/components/labels/accountDeletionLabels.ts
+var DEFAULT_ACCOUNT_DELETION_LABELS = {
+  title: "Delete your account",
+  subtitle: "We email you a link to confirm. Nothing is deleted until you open it.",
+  reason: {
+    label: "Reason (optional)",
+    placeholder: "Why are you leaving?",
+    hint: "Optional reason for deleting your account",
+    inputLabel: "Reason for deleting your account"
+  },
+  submit: "Request account deletion",
+  submitHint: "Emails you a link to confirm the deletion",
+  submitting: "Sending the request",
+  stepUpTitle: "Confirm your password",
+  stepUpSubtitle: "You signed in a while ago. Enter your password to continue.",
+  password: {
+    label: "Password",
+    placeholder: "Your password",
+    hint: "Your current password",
+    inputLabel: "Password"
+  },
+  stepUpSubmit: "Confirm and continue",
+  stepUpSubmitHint: "Checks your password, then sends the deletion request",
+  checkEmailTitle: "Check your email",
+  checkEmailBody: "Open the link we sent you to confirm. Your account stays active until then.",
+  emailNotSentTitle: "We could not send the email",
+  emailNotSentBody: "Your request is recorded, but the confirmation email did not go out. Contact support to finish it.",
+  scheduledDate: "Scheduled deletion date: {date}",
+  alreadyRequestedTitle: "Deletion already requested",
+  alreadyRequestedBody: "Look for the confirmation link in your email. You do not need to ask again.",
+  errorPasswordRequired: "Enter your password.",
+  errorWrongPassword: "That password is not correct.",
+  errorSignInRequired: "Your session ended. Sign in and try again.",
+  errorRateLimited: "Too many attempts. Wait a moment and try again.",
+  errorRateLimitedSeconds: "Too many attempts. Try again in {seconds} seconds.",
+  errorRetryLater: "We could not reach the account service. Try again later.",
+  errorFailed: "Something went wrong. Try again."
+};
+
 // src/components/testIds.ts
 var AuthTestIds = {
   loginForm: "auth-login-form",
@@ -679,7 +718,7 @@ function useLoginSubmit({
   missingFieldsLabel,
   invalidCredentialsLabel
 }) {
-  const [errorText, setErrorText] = useState(null);
+  const [errorText2, setErrorText] = useState(null);
   const inFlight = useRef(false);
   const runLogin = useCallback(async () => {
     if (inFlight.current) {
@@ -705,7 +744,7 @@ function useLoginSubmit({
   const handleSubmit = useCallback(() => {
     void runLogin();
   }, [runLogin]);
-  return { errorText, handleSubmit };
+  return { errorText: errorText2, handleSubmit };
 }
 function isKeyRepeat(event) {
   const native = event?.nativeEvent;
@@ -865,7 +904,7 @@ function LoginForm({
     prefillNonce,
     prefillIntent
   });
-  const { errorText, handleSubmit } = useLoginSubmit({
+  const { errorText: errorText2, handleSubmit } = useLoginSubmit({
     username,
     password,
     login,
@@ -921,12 +960,12 @@ function LoginForm({
         }
       )
     ] }),
-    errorText !== null ? /* @__PURE__ */ jsx(
+    errorText2 !== null ? /* @__PURE__ */ jsx(
       Text,
       {
         style: styles3.errorText,
         testID: withTestIdPrefix(AuthTestIds.loginError, testIdPrefix),
-        children: errorText
+        children: errorText2
       }
     ) : null,
     onForgotPassword !== void 0 ? /* @__PURE__ */ jsx(
@@ -1018,7 +1057,7 @@ function ForgotPasswordForm({
   );
   const [email, setEmail] = useState("");
   const [submitted, setSubmitted] = useState(false);
-  const [errorText, setErrorText] = useState(null);
+  const [errorText2, setErrorText] = useState(null);
   const mutationOptions = useMemo(
     () => ({
       client,
@@ -1080,12 +1119,12 @@ function ForgotPasswordForm({
               }
             )
           ] }),
-          errorText !== null ? /* @__PURE__ */ jsx(
+          errorText2 !== null ? /* @__PURE__ */ jsx(
             Text,
             {
               style: styles3.errorText,
               testID: withTestIdPrefix(AuthTestIds.forgotPasswordError, testIdPrefix),
-              children: errorText
+              children: errorText2
             }
           ) : null,
           /* @__PURE__ */ jsx(
@@ -1573,7 +1612,7 @@ function OtpRequestStep({
   labels,
   testIdPrefix,
   isSubmitting,
-  errorText,
+  errorText: errorText2,
   onSubmit
 }) {
   const [email, setEmail] = useState("");
@@ -1601,7 +1640,7 @@ function OtpRequestStep({
         }
       )
     ] }),
-    errorText !== null ? /* @__PURE__ */ jsx(Text, { style: styles3.errorText, testID: withTestIdPrefix(AuthTestIds.otpError, testIdPrefix), children: errorText }) : null,
+    errorText2 !== null ? /* @__PURE__ */ jsx(Text, { style: styles3.errorText, testID: withTestIdPrefix(AuthTestIds.otpError, testIdPrefix), children: errorText2 }) : null,
     /* @__PURE__ */ jsx(
       TouchableOpacity,
       {
@@ -1624,7 +1663,7 @@ function OtpVerifyStep({
   testIdPrefix,
   identifier,
   isSubmitting,
-  errorText,
+  errorText: errorText2,
   onSubmit,
   onResend,
   onChangeEmail
@@ -1655,7 +1694,7 @@ function OtpVerifyStep({
         }
       )
     ] }),
-    errorText !== null ? /* @__PURE__ */ jsx(Text, { style: styles3.errorText, testID: withTestIdPrefix(AuthTestIds.otpError, testIdPrefix), children: errorText }) : null,
+    errorText2 !== null ? /* @__PURE__ */ jsx(Text, { style: styles3.errorText, testID: withTestIdPrefix(AuthTestIds.otpError, testIdPrefix), children: errorText2 }) : null,
     /* @__PURE__ */ jsx(
       TouchableOpacity,
       {
@@ -1878,11 +1917,11 @@ function OtpForm({
     setLocalError(null);
     otp.reset();
   }, [otp]);
-  const errorText = localError ?? transportErrorFor(otp.step, otp.error, labels);
+  const errorText2 = localError ?? transportErrorFor(otp.step, otp.error, labels);
   const content = otp.step === "requestCode" /* RequestCode */ ? /* @__PURE__ */ jsx(
     OtpRequestStep,
     {
-      errorText,
+      errorText: errorText2,
       isSubmitting: otp.isSubmitting,
       labels,
       styles: styles3,
@@ -1893,7 +1932,7 @@ function OtpForm({
   ) : /* @__PURE__ */ jsx(
     OtpVerifyStep,
     {
-      errorText,
+      errorText: errorText2,
       identifier: otp.identifier,
       isSubmitting: otp.isSubmitting,
       labels,
@@ -2005,7 +2044,7 @@ function PinForm({
   const [localError, setLocalError] = useState(null);
   const [pinValue, setPinValue] = useState("");
   const handleSubmit = useSubmitHandler(pin, labels, setLocalError, onSuccess);
-  const errorText = localError ?? transportErrorFor2(pin.error, labels);
+  const errorText2 = localError ?? transportErrorFor2(pin.error, labels);
   const buttonStyle = pin.isSubmitting ? [styles3.primaryButton, styles3.primaryButtonDisabled] : styles3.primaryButton;
   const content = /* @__PURE__ */ jsxs(Fragment, { children: [
     /* @__PURE__ */ jsx(Text, { style: styles3.title, children: labels.title }),
@@ -2031,12 +2070,12 @@ function PinForm({
         }
       )
     ] }),
-    errorText !== null ? /* @__PURE__ */ jsx(
+    errorText2 !== null ? /* @__PURE__ */ jsx(
       Text,
       {
         style: styles3.errorText,
         testID: withTestIdPrefix(AuthTestIds.pinError, testIdPrefix),
-        children: errorText
+        children: errorText2
       }
     ) : null,
     /* @__PURE__ */ jsx(
@@ -2262,7 +2301,7 @@ function useDevicePinUnlock({
   const [pin, setPinState] = useState("");
   const [submitting, setSubmitting] = useState(false);
   const [errorKey, setErrorKey] = useState(null);
-  const [retryAfterSeconds, setRetryAfterSeconds] = useState(null);
+  const [retryAfterSeconds2, setRetryAfterSeconds] = useState(null);
   const setPin = useCallback((next) => {
     setPinState(next);
     setErrorKey(null);
@@ -2302,7 +2341,7 @@ function useDevicePinUnlock({
       setSubmitting(false);
     });
   }, [client, pin, digits, onSignedIn]);
-  return { pin, submitting, errorKey, retryAfterSeconds, setPin, submit };
+  return { pin, submitting, errorKey, retryAfterSeconds: retryAfterSeconds2, setPin, submit };
 }
 function resolveErrorText(errorKey, digits, retryAfter, labels) {
   if (errorKey === null) {
@@ -2338,14 +2377,14 @@ function DevicePinUnlockScreen({
     () => ({ ...DEFAULT_DEVICE_PIN_UNLOCK_LABELS, ...labelsProp }),
     [labelsProp]
   );
-  const { pin, submitting, errorKey, retryAfterSeconds, setPin, submit } = useDevicePinUnlock({
+  const { pin, submitting, errorKey, retryAfterSeconds: retryAfterSeconds2, setPin, submit } = useDevicePinUnlock({
     client,
     digits,
     onSignedIn
   });
   const hasName = rememberedUsername !== "";
   const title = hasName ? interpolate(labels.title, { name: rememberedUsername }) : labels.titleNoName;
-  const error = resolveErrorText(errorKey, digits, retryAfterSeconds, labels);
+  const error = resolveErrorText(errorKey, digits, retryAfterSeconds2, labels);
   const buttonStyle = submitting ? [styles3.primaryButton, styles3.primaryButtonDisabled] : styles3.primaryButton;
   return /* @__PURE__ */ jsx(View, { style: styles3.screen, children: /* @__PURE__ */ jsxs(
     View,
@@ -4238,10 +4277,12 @@ function RegisterFormFields({
   onChange,
   onSubmitEditing,
   testIdPrefix,
-  compact = false
+  compact = false,
+  hideTenantName = false
 }) {
+  const fields = compact ? COMPACT_FIELDS : FIELDS;
   return /* @__PURE__ */ jsxs(Fragment, { children: [
-    (compact ? COMPACT_FIELDS : FIELDS).map((config) => {
+    fields.filter((config) => !(hideTenantName && config.key === "tenantName")).map((config) => {
       const copy = copyFor(config.key, labels, compact);
       return /* @__PURE__ */ jsxs(View, { style: styles3.fieldGroup, children: [
         /* @__PURE__ */ jsx(Text, { style: styles3.label, children: copy.label }),
@@ -4305,13 +4346,13 @@ var RegisterErrorCode = /* @__PURE__ */ ((RegisterErrorCode2) => {
 })(RegisterErrorCode || {});
 
 // src/hooks/routeRegisterOutcome.ts
-function routeRegisterOutcome(outcome, handlers) {
-  if (outcome.ok) {
-    handlers.onSuccess(outcome.result);
+function routeRegisterOutcome(outcome2, handlers) {
+  if (outcome2.ok) {
+    handlers.onSuccess(outcome2.result);
     return;
   }
-  if (outcome.error !== "inFlight" /* InFlight */) {
-    handlers.onError?.(outcome.error);
+  if (outcome2.error !== "inFlight" /* InFlight */) {
+    handlers.onError?.(outcome2.error);
   }
 }
 
@@ -4371,19 +4412,19 @@ function trimRegisterValues(values) {
     website: values.website.trim()
   };
 }
-function hasMissingRequiredField(values) {
+function hasMissingRequiredField(values, tenantNameHidden) {
   const required = [
     values.firstName,
     values.lastName,
     values.username,
     values.email,
     values.password,
-    values.tenantName
+    ...tenantNameHidden ? [] : [values.tenantName]
   ];
   return required.some((value) => value === "");
 }
-function validateRegisterValues(values, passwordPolicy) {
-  if (hasMissingRequiredField(values)) {
+function validateRegisterValues(values, passwordPolicy, tenantNameHidden = false) {
+  if (hasMissingRequiredField(values, tenantNameHidden)) {
     return "missingFields" /* MissingFields */;
   }
   if (!isEmailShaped(values.email)) {
@@ -4452,6 +4493,24 @@ function mapRegisterErrorCode(error) {
   return match === void 0 ? "validationFailed" /* ValidationFailed */ : match[1];
 }
 
+// src/hooks/newIdempotencyKey.ts
+var HEX_RADIX = 16;
+var HEX_BYTE_LENGTH = 2;
+var KEY_BYTES = 16;
+var fallbackSequence = 0;
+function newIdempotencyKey() {
+  const cryptoApi = globalThis.crypto;
+  if (typeof cryptoApi?.randomUUID === "function") {
+    return cryptoApi.randomUUID();
+  }
+  if (typeof cryptoApi?.getRandomValues === "function") {
+    const bytes = cryptoApi.getRandomValues(new Uint8Array(KEY_BYTES));
+    return Array.from(bytes, (byte) => byte.toString(HEX_RADIX).padStart(HEX_BYTE_LENGTH, "0")).join("");
+  }
+  fallbackSequence += 1;
+  return `${Date.now().toString(HEX_RADIX)}-${String(fallbackSequence)}`;
+}
+
 // src/hooks/registerCompact.ts
 var WHITESPACE_RUN = /\s+/;
 var UNSAFE_USERNAME_CHARS = /[^a-z0-9._-]/g;
@@ -4474,26 +4533,26 @@ function expandCompactRegisterValues(values) {
     confirmPassword: values.password
   };
 }
-
-// src/hooks/newIdempotencyKey.ts
-var HEX_RADIX = 16;
-var HEX_BYTE_LENGTH = 2;
-var KEY_BYTES = 16;
-var fallbackSequence = 0;
-function newIdempotencyKey() {
-  const cryptoApi = globalThis.crypto;
-  if (typeof cryptoApi?.randomUUID === "function") {
-    return cryptoApi.randomUUID();
-  }
-  if (typeof cryptoApi?.getRandomValues === "function") {
-    const bytes = cryptoApi.getRandomValues(new Uint8Array(KEY_BYTES));
-    return Array.from(bytes, (byte) => byte.toString(HEX_RADIX).padStart(HEX_BYTE_LENGTH, "0")).join("");
-  }
-  fallbackSequence += 1;
-  return `${Date.now().toString(HEX_RADIX)}-${String(fallbackSequence)}`;
+function createOpaqueTenantName() {
+  return `workspace-${newIdempotencyKey()}`;
+}
+function useDerivedTenantName(derive) {
+  const deriveRef = useRef(derive);
+  deriveRef.current = derive;
+  const name = useRef(null);
+  return useMemo(
+    () => ({
+      current: () => {
+        name.current ?? (name.current = deriveRef.current?.() ?? "");
+        return name.current;
+      },
+      reset: () => {
+        name.current = null;
+      }
+    }),
+    []
+  );
 }
-
-// src/hooks/useRegisterSubmitMeta.ts
 function useRegisterSubmitMeta() {
   const openedAt = useRef(Date.now());
   const key = useRef(null);
@@ -4541,17 +4600,21 @@ function useRegisterForm({
   passwordPolicy = isRegisterPasswordStrong,
   onSubmitAttempt,
   compact = false,
-  sharedRegistration = false
+  sharedRegistration = false,
+  deriveTenantName
 }) {
   const [state, setState] = useState(EMPTY_VALUES);
   const [isSubmitting, setIsSubmitting] = useState(false);
   const [error, setError] = useState(null);
   const inFlight = useRef(false);
   const submitMeta = useRegisterSubmitMeta();
+  const derivedName = useDerivedTenantName(deriveTenantName);
+  const tenantNameHidden = deriveTenantName !== void 0;
   const setField = useCallback((field2, value) => {
     submitMeta.resetKey();
+    derivedName.reset();
     setState((prev) => ({ ...prev, [field2]: value }));
-  }, [submitMeta]);
+  }, [derivedName, submitMeta]);
   const submit = useCallback(async () => {
     if (inFlight.current) {
       return { ok: false, error: "inFlight" /* InFlight */ };
@@ -4559,7 +4622,7 @@ function useRegisterForm({
     onSubmitAttempt?.();
     const trimmedRaw = trimRegisterValues(state);
     const trimmed = compact ? expandCompactRegisterValues(trimmedRaw) : trimmedRaw;
-    const refusal = trimmed.website === "" ? validateRegisterValues(trimmed, passwordPolicy) : "failed" /* Failed */;
+    const refusal = trimmed.website === "" ? validateRegisterValues(trimmed, passwordPolicy, tenantNameHidden) : "failed" /* Failed */;
     if (refusal !== null) {
       setError(refusal);
       return { ok: false, error: refusal };
@@ -4568,7 +4631,7 @@ function useRegisterForm({
     setError(null);
     setIsSubmitting(true);
     try {
-      const values = toSubmitValues(trimmed);
+      const values = toSubmitValues(tenantNameHidden ? { ...trimmed, tenantName: derivedName.current() } : trimmed);
       const result = await (sharedRegistration ? onSubmit(values, submitMeta.next()) : onSubmit(values));
       if (sharedRegistration && isRegisterAccepted(result)) {
         setState(withoutPasswords);
@@ -4577,12 +4640,16 @@ function useRegisterForm({
     } catch (caught) {
       const code = mapRegisterErrorCode(caught);
       setError(code);
+      if (tenantNameHidden && code === "tenantNameTaken" /* TenantNameTaken */) {
+        derivedName.reset();
+        submitMeta.resetKey();
+      }
       return { ok: false, error: code };
     } finally {
       inFlight.current = false;
       setIsSubmitting(false);
     }
-  }, [compact, onSubmit, onSubmitAttempt, passwordPolicy, sharedRegistration, state, submitMeta]);
+  }, [compact, derivedName, onSubmit, onSubmitAttempt, passwordPolicy, sharedRegistration, state, submitMeta, tenantNameHidden]);
   return { state, setField, submit, isSubmitting, error };
 }
 function RegisterFormCore({
@@ -4596,6 +4663,7 @@ function RegisterFormCore({
   footer,
   testIdPrefix,
   compact = false,
+  deriveTenantName,
   sharedRegistration
 }) {
   const theme = useAuthTheme(themeProp);
@@ -4609,7 +4677,8 @@ function RegisterFormCore({
     onSubmitAttempt,
     passwordPolicy,
     compact,
-    sharedRegistration
+    sharedRegistration,
+    deriveTenantName
   });
   const handlePress = useCallback(async () => {
     routeRegisterOutcome(await submit(), { onSuccess, onError });
@@ -4623,6 +4692,7 @@ function RegisterFormCore({
       {
         compact,
         disabled: isSubmitting,
+        hideTenantName: deriveTenantName !== void 0,
         labels,
         styles: styles3,
         testIdPrefix,
@@ -5441,6 +5511,432 @@ function SharedRegisterForm({
   return /* @__PURE__ */ jsx(RegisterFormCore, { ...formProps, sharedRegistration: true, onSuccess: handleResult });
 }
 
-export { AccountSettingsScreen, AuthScreen, AuthTestIds, AuthThemeProvider, BffAuthStatus, CHANGE_PASSWORD_ENDPOINT, ChangePasswordCard, ChangePasswordErrorKey, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_REGISTER_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEFAULT_VERIFY_EMAIL_LABELS, DEFAULT_VERIFY_NEW_PASSWORD_LABELS, DEFAULT_VERIFY_SIGN_IN_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, DemoCredentialsHintVariant, DevicePinEnrollErrorKey, DevicePinEnrollForm, DevicePinErrorKey, DevicePinInput, DevicePinLengthPicker, DevicePinOffer, DevicePinSettingsCard, DevicePinUnlockScreen, ForgotPasswordFields, ForgotPasswordForm, LoginForm, OtpForm, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, PasskeyLoginButton, PasskeySettingsCard, PasswordPolicyError, PinForm, PreferredMethodHint, PreferredMethodSettingsCard, PrefillIntent, REGISTER_ENDPOINT, RESEND_VERIFICATION_ENDPOINT, RegisterErrorCode, RegisterForm, RegisterTestIds, ResetPasswordError, ResetPasswordForm, SharedRegisterForm, VERIFY_AND_LOGIN_ENDPOINT, VERIFY_EMAIL_ENDPOINT, VERIFY_TOKEN_PLACEHOLDER, VerifyEmailErrorCode, VerifyEmailPhase, VerifyEmailScreen, buildVerifyUrlTemplate, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAuthClient, createBffChangePasswordClient, createBffVerifyEmailClient, createPreferencesClient, createSharedRegistrationClient, defaultAuthTheme, deriveUsernameFromEmail, isAllowedPinDigits, isPasswordValid, isRegisterAccepted, isRegisterPasswordStrong, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, readVerifyToken, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, splitFullName, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useRegisterForm, useResendVerification, useResetPasswordForm, useVerifyEmail, validatePasswordPolicy, verifyEmailErrorText, withTestIdPrefix };
+// src/account/AccountDeletionStatus.ts
+var AccountDeletionStatus = /* @__PURE__ */ ((AccountDeletionStatus2) => {
+  AccountDeletionStatus2["Accepted"] = "accepted";
+  AccountDeletionStatus2["StepUpRequired"] = "stepUpRequired";
+  AccountDeletionStatus2["AlreadyRequested"] = "alreadyRequested";
+  AccountDeletionStatus2["SignInRequired"] = "signInRequired";
+  AccountDeletionStatus2["RateLimited"] = "rateLimited";
+  AccountDeletionStatus2["RetryLater"] = "retryLater";
+  AccountDeletionStatus2["Failed"] = "failed";
+  return AccountDeletionStatus2;
+})(AccountDeletionStatus || {});
+
+// src/account/StepUpStatus.ts
+var StepUpStatus = /* @__PURE__ */ ((StepUpStatus2) => {
+  StepUpStatus2["Confirmed"] = "confirmed";
+  StepUpStatus2["WrongPassword"] = "wrongPassword";
+  StepUpStatus2["RateLimited"] = "rateLimited";
+  StepUpStatus2["Failed"] = "failed";
+  return StepUpStatus2;
+})(StepUpStatus || {});
+
+// src/account/accountDeletionClient.ts
+var ACCOUNT_DELETE_REQUEST_ENDPOINT = "/bff/account/delete-request";
+var STEP_UP_PASSWORD_ENDPOINT = "/bff/step-up/password";
+var RECENT_AUTHENTICATION_REQUIRED = "RECENT_AUTHENTICATION_REQUIRED";
+var HTTP_ACCEPTED2 = 202;
+var HTTP_UNAUTHORIZED3 = 401;
+var HTTP_FORBIDDEN = 403;
+var HTTP_CONFLICT = 409;
+var HTTP_TOO_MANY_REQUESTS3 = 429;
+var HTTP_BAD_GATEWAY = 502;
+var DELTA_SECONDS = /^\d+$/;
+function retryAfterSeconds(response) {
+  const raw = response.header?.("Retry-After")?.trim();
+  return raw !== void 0 && DELTA_SECONDS.test(raw) ? Number(raw) : null;
+}
+function decodeReceipt(data) {
+  const body = isRecord3(data) ? data : {};
+  return {
+    requestId: typeof body.requestId === "string" ? body.requestId : "",
+    scheduledDeletionDate: typeof body.scheduledDeletionDate === "string" ? body.scheduledDeletionDate : "",
+    confirmationEmailSent: body.confirmationEmailSent === true
+  };
+}
+function isStaleLogin(data) {
+  return isRecord3(data) && data.code === RECENT_AUTHENTICATION_REQUIRED;
+}
+function decodeDeletion(response) {
+  switch (response.status) {
+    case HTTP_ACCEPTED2:
+      return { status: "accepted" /* Accepted */, receipt: decodeReceipt(response.data) };
+    case HTTP_FORBIDDEN:
+      return { status: isStaleLogin(response.data) ? "stepUpRequired" /* StepUpRequired */ : "failed" /* Failed */ };
+    case HTTP_CONFLICT:
+      return { status: "alreadyRequested" /* AlreadyRequested */ };
+    case HTTP_UNAUTHORIZED3:
+      return { status: "signInRequired" /* SignInRequired */ };
+    case HTTP_TOO_MANY_REQUESTS3:
+      return { status: "rateLimited" /* RateLimited */, retryAfterSeconds: retryAfterSeconds(response) };
+    case HTTP_BAD_GATEWAY:
+      return { status: "retryLater" /* RetryLater */ };
+    default:
+      return { status: "failed" /* Failed */ };
+  }
+}
+function decodeStepUp(response) {
+  if (response.ok) {
+    return { status: "confirmed" /* Confirmed */ };
+  }
+  if (response.status === HTTP_UNAUTHORIZED3) {
+    return { status: "wrongPassword" /* WrongPassword */ };
+  }
+  if (response.status === HTTP_TOO_MANY_REQUESTS3) {
+    return { status: "rateLimited" /* RateLimited */, retryAfterSeconds: retryAfterSeconds(response) };
+  }
+  return { status: "failed" /* Failed */ };
+}
+function createBffAccountDeletionClient(options = {}) {
+  const http = options.http ?? lazyFetchHttpClient3;
+  const baseUrl = options.baseUrl ?? "";
+  const post = (path, body) => http({
+    url: `${baseUrl}${path}`,
+    method: "POST",
+    headers: { "Content-Type": "application/json", "X-BFF-Csrf": "1" },
+    body: JSON.stringify(body),
+    credentials: "include"
+  });
+  return {
+    requestDeletion: async (reason) => {
+      try {
+        return decodeDeletion(await post(ACCOUNT_DELETE_REQUEST_ENDPOINT, reason === void 0 ? {} : { reason }));
+      } catch {
+        return { status: "failed" /* Failed */ };
+      }
+    },
+    stepUpPassword: async (password) => {
+      try {
+        return decodeStepUp(await post(STEP_UP_PASSWORD_ENDPOINT, { password }));
+      } catch {
+        return { status: "failed" /* Failed */ };
+      }
+    }
+  };
+}
+
+// src/account/AccountDeletionErrorKey.ts
+var AccountDeletionErrorKey = /* @__PURE__ */ ((AccountDeletionErrorKey2) => {
+  AccountDeletionErrorKey2["PasswordRequired"] = "passwordRequired";
+  AccountDeletionErrorKey2["WrongPassword"] = "wrongPassword";
+  AccountDeletionErrorKey2["SignInRequired"] = "signInRequired";
+  AccountDeletionErrorKey2["RateLimited"] = "rateLimited";
+  AccountDeletionErrorKey2["RetryLater"] = "retryLater";
+  AccountDeletionErrorKey2["Failed"] = "failed";
+  return AccountDeletionErrorKey2;
+})(AccountDeletionErrorKey || {});
+
+// src/account/AccountDeletionPhase.ts
+var AccountDeletionPhase = /* @__PURE__ */ ((AccountDeletionPhase2) => {
+  AccountDeletionPhase2["Confirm"] = "confirm";
+  AccountDeletionPhase2["StepUp"] = "stepUp";
+  AccountDeletionPhase2["Accepted"] = "accepted";
+  AccountDeletionPhase2["AlreadyRequested"] = "alreadyRequested";
+  return AccountDeletionPhase2;
+})(AccountDeletionPhase || {});
+
+// src/account/accountDeletionFlow.ts
+function outcome(phase, errorKey = null, retryAfterSeconds2 = null) {
+  return { phase, errorKey, receipt: null, retryAfterSeconds: retryAfterSeconds2 };
+}
+function fromDeletion(result, steppedUp) {
+  switch (result.status) {
+    case "accepted" /* Accepted */:
+      return { ...outcome("accepted" /* Accepted */), receipt: result.receipt };
+    case "stepUpRequired" /* StepUpRequired */:
+      return outcome("stepUp" /* StepUp */, steppedUp ? "failed" /* Failed */ : null);
+    case "alreadyRequested" /* AlreadyRequested */:
+      return outcome("alreadyRequested" /* AlreadyRequested */);
+    case "signInRequired" /* SignInRequired */:
+      return outcome("confirm" /* Confirm */, "signInRequired" /* SignInRequired */);
+    case "rateLimited" /* RateLimited */:
+      return outcome("confirm" /* Confirm */, "rateLimited" /* RateLimited */, result.retryAfterSeconds);
+    case "retryLater" /* RetryLater */:
+      return outcome("confirm" /* Confirm */, "retryLater" /* RetryLater */);
+    default:
+      return outcome("confirm" /* Confirm */, "failed" /* Failed */);
+  }
+}
+function fromStepUpFailure(result) {
+  if (result.status === "wrongPassword" /* WrongPassword */) {
+    return outcome("stepUp" /* StepUp */, "wrongPassword" /* WrongPassword */);
+  }
+  if (result.status === "rateLimited" /* RateLimited */) {
+    return outcome("stepUp" /* StepUp */, "rateLimited" /* RateLimited */, result.retryAfterSeconds);
+  }
+  return outcome("stepUp" /* StepUp */, "failed" /* Failed */);
+}
+async function runDeletionAttempt(client, { phase, reason, password }) {
+  const trimmed = reason.trim();
+  const sentReason = trimmed === "" ? void 0 : trimmed;
+  if (phase !== "stepUp" /* StepUp */) {
+    return fromDeletion(await client.requestDeletion(sentReason), false);
+  }
+  const stepUp = await client.stepUpPassword(password);
+  if (stepUp.status !== "confirmed" /* Confirmed */) {
+    return fromStepUpFailure(stepUp);
+  }
+  return fromDeletion(await client.requestDeletion(sentReason), true);
+}
+var MS_PER_SECOND = 1e3;
+function useRetryAfterBlock(onExpired) {
+  const [retryAfterSeconds2, setRetryAfterSeconds] = useState(null);
+  const timer = useRef(null);
+  const stopTimer = useCallback(() => {
+    if (timer.current !== null) {
+      clearTimeout(timer.current);
+    }
+    timer.current = null;
+  }, []);
+  useEffect(() => stopTimer, [stopTimer]);
+  const block = useCallback(
+    (seconds) => {
+      stopTimer();
+      setRetryAfterSeconds(seconds);
+      timer.current = setTimeout(() => {
+        timer.current = null;
+        setRetryAfterSeconds(null);
+        onExpired();
+      }, seconds * MS_PER_SECOND);
+    },
+    [onExpired, stopTimer]
+  );
+  return { retryAfterSeconds: retryAfterSeconds2, block };
+}
+
+// src/account/useAccountDeletion.ts
+function useAccountDeletion(args) {
+  const { client, onAccepted, onSignInRequired } = args;
+  const [reason, setReason] = useState("");
+  const [password, setPasswordValue] = useState("");
+  const [phase, setPhase] = useState("confirm" /* Confirm */);
+  const [submitting, setSubmitting] = useState(false);
+  const [errorKey, setErrorKey] = useState(null);
+  const [receipt, setReceipt] = useState(null);
+  const inFlight = useRef(false);
+  const clearRateLimit = useCallback(() => {
+    setErrorKey((current) => current === "rateLimited" /* RateLimited */ ? null : current);
+  }, []);
+  const { retryAfterSeconds: retryAfterSeconds2, block } = useRetryAfterBlock(clearRateLimit);
+  const blocked = retryAfterSeconds2 !== null;
+  const setPassword = useCallback((value) => {
+    setPasswordValue(value);
+    setErrorKey((current) => current === "rateLimited" /* RateLimited */ ? current : null);
+  }, []);
+  const applyOutcome = useCallback((outcome2) => {
+    setPhase(outcome2.phase);
+    setErrorKey(outcome2.errorKey);
+    setPasswordValue("");
+    if (outcome2.retryAfterSeconds !== null) {
+      block(outcome2.retryAfterSeconds);
+    }
+    if (outcome2.errorKey === "signInRequired" /* SignInRequired */) {
+      onSignInRequired?.();
+    }
+    if (outcome2.receipt === null) {
+      return;
+    }
+    setReceipt(outcome2.receipt);
+    onAccepted?.(outcome2.receipt);
+  }, [block, onAccepted, onSignInRequired]);
+  const submit = useCallback(() => {
+    if (inFlight.current || blocked) {
+      return;
+    }
+    if (phase === "stepUp" /* StepUp */ && password === "") {
+      setErrorKey("passwordRequired" /* PasswordRequired */);
+      return;
+    }
+    inFlight.current = true;
+    setSubmitting(true);
+    setErrorKey(null);
+    runDeletionAttempt(client, { phase, reason, password }).then(applyOutcome).catch(() => {
+      setPasswordValue("");
+      setErrorKey("failed" /* Failed */);
+    }).finally(() => {
+      inFlight.current = false;
+      setSubmitting(false);
+    });
+  }, [applyOutcome, blocked, client, password, phase, reason]);
+  return { phase, reason, password, setReason, setPassword, submitting, blocked, retryAfterSeconds: retryAfterSeconds2, errorKey, receipt, submit };
+}
+var REASON_MAX_LENGTH = 1e3;
+function AccountDeletionField({
+  copy,
+  placeholderColor,
+  secure,
+  disabled,
+  value,
+  styles: styles3,
+  testID,
+  onChangeText,
+  onSubmitEditing
+}) {
+  const inputRef = useRef(null);
+  useFocusOnMount(inputRef);
+  return /* @__PURE__ */ jsxs(View, { style: styles3.fieldGroup, children: [
+    /* @__PURE__ */ jsx(Text, { style: styles3.label, children: copy.label }),
+    /* @__PURE__ */ jsx(
+      TextInput,
+      {
+        ref: inputRef,
+        accessibilityHint: copy.hint,
+        accessibilityLabel: copy.inputLabel,
+        autoComplete: secure ? "current-password" : "off",
+        editable: !disabled,
+        maxLength: secure ? void 0 : REASON_MAX_LENGTH,
+        placeholder: copy.placeholder,
+        placeholderTextColor: placeholderColor,
+        returnKeyType: "go",
+        secureTextEntry: secure,
+        style: styles3.input,
+        testID,
+        value,
+        onChangeText,
+        onSubmitEditing
+      }
+    )
+  ] });
+}
+function AccountDeletionNotice({
+  title,
+  body,
+  detail,
+  styles: styles3,
+  testID,
+  footer
+}) {
+  const headingRef = useRef(null);
+  useFocusOnMount(headingRef);
+  return /* @__PURE__ */ jsx(View, { style: styles3.screen, children: /* @__PURE__ */ jsxs(View, { accessibilityLiveRegion: "polite", style: styles3.card, testID, children: [
+    /* @__PURE__ */ jsx(View, { ref: headingRef, accessible: true, focusable: true, children: /* @__PURE__ */ jsx(Text, { accessibilityRole: "header", style: styles3.title, children: title }) }),
+    /* @__PURE__ */ jsx(Text, { style: styles3.subtitle, children: body }),
+    detail === null ? null : /* @__PURE__ */ jsx(Text, { style: styles3.helperText, children: detail }),
+    footer
+  ] }) });
+}
+
+// src/components/accountDeletionTestIds.ts
+var AccountDeletionTestIds = {
+  form: "account-deletion-form",
+  reasonInput: "account-deletion-reason-input",
+  stepUpInput: "account-deletion-password-input",
+  submitButton: "account-deletion-submit-button",
+  error: "account-deletion-error",
+  checkEmail: "account-deletion-check-email",
+  emailNotSent: "account-deletion-email-not-sent",
+  alreadyRequested: "account-deletion-already-requested"
+};
+function errorText(errorKey, seconds, labels) {
+  switch (errorKey) {
+    case null:
+      return null;
+    case "passwordRequired" /* PasswordRequired */:
+      return labels.errorPasswordRequired;
+    case "wrongPassword" /* WrongPassword */:
+      return labels.errorWrongPassword;
+    case "signInRequired" /* SignInRequired */:
+      return labels.errorSignInRequired;
+    case "rateLimited" /* RateLimited */:
+      return seconds === null ? labels.errorRateLimited : interpolate(labels.errorRateLimitedSeconds, { seconds });
+    case "retryLater" /* RetryLater */:
+      return labels.errorRetryLater;
+    default:
+      return labels.errorFailed;
+  }
+}
+function scheduledDetail(receipt, labels) {
+  const date = new Date(receipt?.scheduledDeletionDate ?? "");
+  return Number.isNaN(date.getTime()) ? null : interpolate(labels.scheduledDate, { date: date.toLocaleDateString() });
+}
+function noticeCopy(phase, receipt, labels) {
+  if (phase === "alreadyRequested" /* AlreadyRequested */) {
+    return {
+      title: labels.alreadyRequestedTitle,
+      body: labels.alreadyRequestedBody,
+      detail: null,
+      testId: AccountDeletionTestIds.alreadyRequested
+    };
+  }
+  if (phase !== "accepted" /* Accepted */) {
+    return null;
+  }
+  const detail = scheduledDetail(receipt, labels);
+  if (receipt?.confirmationEmailSent === true) {
+    return { title: labels.checkEmailTitle, body: labels.checkEmailBody, detail, testId: AccountDeletionTestIds.checkEmail };
+  }
+  return { title: labels.emailNotSentTitle, body: labels.emailNotSentBody, detail, testId: AccountDeletionTestIds.emailNotSent };
+}
+function AccountDeletionForm({
+  client,
+  labels: labelsProp,
+  theme: themeProp,
+  testIdPrefix,
+  footer,
+  onAccepted,
+  onSignInRequired
+}) {
+  const theme = useAuthTheme(themeProp);
+  const styles3 = useAuthStyles(theme);
+  const labels = useMemo(() => ({ ...DEFAULT_ACCOUNT_DELETION_LABELS, ...labelsProp }), [labelsProp]);
+  const form = useAccountDeletion({ client, onAccepted, onSignInRequired });
+  const handleSubmitEditing = useSubmitOnEnter(form.submit);
+  const testId = (id) => withTestIdPrefix(id, testIdPrefix);
+  const notice = noticeCopy(form.phase, form.receipt, labels);
+  if (notice !== null) {
+    return /* @__PURE__ */ jsx(
+      AccountDeletionNotice,
+      {
+        body: notice.body,
+        detail: notice.detail,
+        footer,
+        styles: styles3,
+        testID: testId(notice.testId),
+        title: notice.title
+      }
+    );
+  }
+  const steppingUp = form.phase === "stepUp" /* StepUp */;
+  const message = errorText(form.errorKey, form.retryAfterSeconds, labels);
+  const submitLabel = steppingUp ? labels.stepUpSubmit : labels.submit;
+  return /* @__PURE__ */ jsx(View, { style: styles3.screen, children: /* @__PURE__ */ jsxs(View, { style: styles3.card, testID: testId(AccountDeletionTestIds.form), children: [
+    /* @__PURE__ */ jsx(Text, { style: styles3.title, children: steppingUp ? labels.stepUpTitle : labels.title }),
+    /* @__PURE__ */ jsx(Text, { style: styles3.subtitle, children: steppingUp ? labels.stepUpSubtitle : labels.subtitle }),
+    /* @__PURE__ */ jsx(
+      AccountDeletionField,
+      {
+        copy: steppingUp ? labels.password : labels.reason,
+        disabled: form.submitting,
+        placeholderColor: theme.colors.textSecondary,
+        secure: steppingUp,
+        styles: styles3,
+        testID: testId(steppingUp ? AccountDeletionTestIds.stepUpInput : AccountDeletionTestIds.reasonInput),
+        value: steppingUp ? form.password : form.reason,
+        onChangeText: steppingUp ? form.setPassword : form.setReason,
+        onSubmitEditing: handleSubmitEditing
+      },
+      form.phase
+    ),
+    message === null ? null : /* @__PURE__ */ jsx(Text, { accessibilityLiveRegion: "polite", style: styles3.errorText, testID: testId(AccountDeletionTestIds.error), children: message }),
+    /* @__PURE__ */ jsx(View, { style: styles3.fieldGroup, children: /* @__PURE__ */ jsx(
+      Button,
+      {
+        fullWidth: true,
+        accessibilityHint: steppingUp ? labels.stepUpSubmitHint : labels.submitHint,
+        accessibilityLabel: form.submitting ? labels.submitting : submitLabel,
+        disabled: form.blocked,
+        label: submitLabel,
+        loading: form.submitting,
+        testID: testId(AccountDeletionTestIds.submitButton),
+        variant: "danger",
+        onPress: form.submit
+      }
+    ) }),
+    footer
+  ] }) });
+}
+
+export { ACCOUNT_DELETE_REQUEST_ENDPOINT, AccountDeletionErrorKey, AccountDeletionForm, AccountDeletionPhase, AccountDeletionStatus, AccountDeletionTestIds, AccountSettingsScreen, AuthScreen, AuthTestIds, AuthThemeProvider, BffAuthStatus, CHANGE_PASSWORD_ENDPOINT, ChangePasswordCard, ChangePasswordErrorKey, DEFAULT_ACCOUNT_DELETION_LABELS, DEFAULT_ACCOUNT_SETTINGS_LABELS, DEFAULT_AUTH_CARD_MAX_WIDTH, DEFAULT_DEMO_CREDENTIALS_HINT_LABELS, DEFAULT_DEVICE_PIN_ENROLL_LABELS, DEFAULT_DEVICE_PIN_SETTINGS_LABELS, DEFAULT_DEVICE_PIN_UNLOCK_LABELS, DEFAULT_FORGOT_PASSWORD_FIELDS_LABELS, DEFAULT_FORGOT_PASSWORD_LABELS, DEFAULT_LOGIN_LABELS, DEFAULT_OTP_LABELS, DEFAULT_PASSKEY_LOGIN_LABELS, DEFAULT_PASSKEY_SETTINGS_LABELS, DEFAULT_PIN_LABELS, DEFAULT_PREFERRED_METHOD_HINT_LABELS, DEFAULT_PREFERRED_METHOD_SETTINGS_LABELS, DEFAULT_REGISTER_LABELS, DEFAULT_RESET_PASSWORD_LABELS, DEFAULT_VERIFY_EMAIL_LABELS, DEFAULT_VERIFY_NEW_PASSWORD_LABELS, DEFAULT_VERIFY_SIGN_IN_LABELS, DEVICE_PIN_ALLOWED_DIGITS, DEVICE_PIN_DEFAULT_DIGITS, DemoCredentialsHint, DemoCredentialsHintVariant, DevicePinEnrollErrorKey, DevicePinEnrollForm, DevicePinErrorKey, DevicePinInput, DevicePinLengthPicker, DevicePinOffer, DevicePinSettingsCard, DevicePinUnlockScreen, ForgotPasswordFields, ForgotPasswordForm, LoginForm, OtpForm, OtpLoginStep, PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, PasskeyCeremonyMode, PasskeyCeremonyStatus, PasskeyLoginButton, PasskeySettingsCard, PasswordPolicyError, PinForm, PreferredMethodHint, PreferredMethodSettingsCard, PrefillIntent, REGISTER_ENDPOINT, RESEND_VERIFICATION_ENDPOINT, RegisterErrorCode, RegisterForm, RegisterTestIds, ResetPasswordError, ResetPasswordForm, STEP_UP_PASSWORD_ENDPOINT, SharedRegisterForm, StepUpStatus, VERIFY_AND_LOGIN_ENDPOINT, VERIFY_EMAIL_ENDPOINT, VERIFY_TOKEN_PLACEHOLDER, VerifyEmailErrorCode, VerifyEmailPhase, VerifyEmailScreen, buildVerifyUrlTemplate, cachePreferredMethod, clearCachedPreferredMethod, collectUserRoles, createBffAccountDeletionClient, createBffAuthClient, createBffChangePasswordClient, createBffVerifyEmailClient, createOpaqueTenantName, createPreferencesClient, createSharedRegistrationClient, defaultAuthTheme, deriveUsernameFromEmail, isAllowedPinDigits, isPasswordValid, isRegisterAccepted, isRegisterPasswordStrong, isValidForgotPasswordEmail, performBffLogout, readCachedPreferredMethod, readPasskeyError, readPasskeyRegistered, readVerifyToken, resolveAccessibleRoutes, resolveAccountList, resolveDemoAccounts, resolveDemoCredentials, resolvePostLoginRoute, splitFullName, startPasskeyLogin, startPasskeyRegistration, syncPreferredMethodFromServer, useAccountDeletion, useAuthTheme, useBffAuth, useBffForgotPassword, useBffLoginConfig, useBffResetPassword, useChangePassword, useDemoCredentials, useDevicePinDisable, useDevicePinEnroll, useDevicePinUnlock, useForgotPasswordSubmit, useOtpLogin, usePasskeyCeremony, usePinLogin, usePreferredMethodSetting, useRegisterForm, useResendVerification, useResetPasswordForm, useVerifyEmail, validatePasswordPolicy, verifyEmailErrorText, withTestIdPrefix };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map