@flow-industries/id 0.21.0 → 0.21.2

package/README.md

@@ -47,6 +47,38 @@ Full documentation at **[docs.flow.industries/en/auth](https://docs.flow.industr
 - [JWT verify](https://docs.flow.industries/en/auth/jwt-verify) - verify Flow sessions on your backend
 - [API reference](https://docs.flow.industries/en/auth/api) and [self-hosting](https://docs.flow.industries/en/auth/self-hosting)
 
+## Public profile overlays
+
+```ts
+import { closeProfile, openProfile } from "@flow-industries/id";
+import { isValidUsername } from "@flow-industries/id/usernames";
+
+if (isValidUsername(username)) {
+  openProfile(username, { onClose: () => resumeInput() });
+}
+
+closeProfile();
+```
+
+`@flow-industries/id/usernames` also exports `USERNAME_REGEX` and
+`MAX_USERNAME_LENGTH`. It has no browser or server dependencies.
+
+`OpenProfileOptions.onClose?: () => void` fires once after the overlay stops
+accepting input, before its exit animation finishes. It covers the close button,
+backdrop, Escape, `closeProfile()`, and sign-in/sign-out handoffs. The latest
+successful `openProfile` call owns the callback, even when switching profiles
+while open; an omitted callback clears the previous one. Invalid usernames and
+SSR return `false` without replacing it. Closing an already closed overlay is a
+no-op. A callback may open another profile.
+
+React callers pass the same option to
+`useOpenProfile({ onClose: () => resumeInput() })` from
+`@flow-industries/id/react`; the callback is captured when its returned opener
+is called. The overlay belongs to the page and survives component unmounts.
+
+Open from the document that owns the full viewport. Canvas hosts must release
+pointer lock before opening, then use `onClose` to restore their input state.
+
 ## License
 
 MIT

package/dist/sdk/client/create-flow.js

@@ -362,6 +362,7 @@ export function createFlow(options = {}) {
      */
     async function login(loginOpts = {}) {
         const dialogHost = getDialog();
+        dialogHost.captureFocus();
         let accessKeyModule;
         let accessKeyPrep;
         let extraCapabilities;

package/dist/sdk/client/dialog-host.js

@@ -1,4 +1,5 @@
 import { bridgeToWindow, makeIframe } from "./iframe-host";
+import { setOverlayFocus } from "./overlay-focus";
 const HIDDEN_STYLE = {
     position: "fixed",
     inset: "0",
@@ -35,6 +36,12 @@ export function createDialogHost(options) {
     const { host, container = document.body } = options;
     let iframe = null;
     let messenger = null;
+    let opener = null;
+    function captureFocus() {
+        const active = document.activeElement;
+        if (active instanceof HTMLElement && active !== iframe)
+            opener = active;
+    }
     const pending = new Map();
     /**
      * Mounts the iframe and wires up the postMessage bridge. Idempotent — safe
@@ -43,8 +50,9 @@ export function createDialogHost(options) {
     function ensureFrame() {
         if (iframe)
             return;
-        iframe = makeIframe(`${host}`);
+        iframe = makeIframe(`${host}`, "Flow ID");
         iframe.dataset.flowId = "";
+        iframe.inert = true;
         Object.assign(iframe.style, HIDDEN_STYLE);
         container.appendChild(iframe);
         // Bind the bridge to this iframe's own window — a page may host more than
@@ -109,6 +117,8 @@ export function createDialogHost(options) {
         if (!iframe)
             return;
         Object.assign(iframe.style, VISIBLE_STYLE);
+        setOverlayFocus(iframe, true, opener);
+        opener = null;
         // The dialog owns its open/close animation and mounts the overlay (playing
         // the enter animation) on this signal — same mechanism as the profile
         // widget, so every dialog appears and disappears identically.
@@ -124,6 +134,7 @@ export function createDialogHost(options) {
         // requestAnimationFrame, making the close (and the next open) skip straight
         // to the end. While hidden the overlay is transparent and click-through.
         iframe.style.pointerEvents = "none";
+        setOverlayFocus(iframe, false);
         void (
         // SAFETY: the payload map types this topic; the dialog reads exactly these fields.
         messenger?.send("__internal", { type: "dialog-hidden" }));
@@ -190,6 +201,7 @@ export function createDialogHost(options) {
         return dispatchRequest(method, params);
     }
     return {
+        captureFocus,
         open,
         close,
         destroy,

package/dist/sdk/client/flow-widget.js

@@ -11,6 +11,11 @@ const WIDGET_ROUTE = {
     xp: "/dialog/xp-widget",
     "action-timer": "/dialog/action-timer",
 };
+// `satisfies` the full widget union so a new widget cannot ship untitled.
+const WIDGET_TITLE = {
+    xp: "Flow ID XP",
+    "action-timer": "Flow ID action timer",
+};
 /**
  * Mounts one of the inline Flow ID widgets — the XP strip, the action timer —
  * as a transparent iframe the embedder positions and sizes itself.
@@ -42,7 +47,7 @@ export function createFlowWidget(options) {
     const hostOrigin = new URL(host).origin;
     let theme = options.theme ?? "light dark";
     const route = WIDGET_ROUTE[options.widget];
-    const frame = makeIframe(`${host}${route}`);
+    const frame = makeIframe(`${host}${route}`, WIDGET_TITLE[options.widget]);
     frame.style.background = "transparent";
     const container = options.container ?? document.body;
     // Appended before bridging: `contentWindow` is null until the frame is in the

package/dist/sdk/client/iframe-host.d.ts

@@ -16,10 +16,12 @@ export declare const OVERLAY_STYLE: Partial<CSSStyleDeclaration>;
 /**
  * Creates a Flow dialog iframe element: WebAuthn-permitted, borderless, and
  * `color-scheme: normal` so the iframe itself stays transparent (the rendered
- * theme is applied to nested card wrappers, not the iframe). The caller owns
- * positioning/visibility and any `data-*` marker.
+ * theme is applied to nested card wrappers, not the iframe). `title` is the
+ * accessible name screen readers announce for the frame (WCAG 4.1.2), so every
+ * Flow surface must say what it is. The caller owns positioning/visibility and
+ * any `data-*` marker.
  */
-export declare function makeIframe(src: string): HTMLIFrameElement;
+export declare function makeIframe(src: string, title: string): HTMLIFrameElement;
 /**
  * Builds a postMessage bridge to a child window (iframe `contentWindow` or
  * popup). Inbound is filtered by `source` so multiple same-origin Flow frames

package/dist/sdk/client/iframe-host.js

@@ -21,12 +21,15 @@ export const OVERLAY_STYLE = {
 /**
  * Creates a Flow dialog iframe element: WebAuthn-permitted, borderless, and
  * `color-scheme: normal` so the iframe itself stays transparent (the rendered
- * theme is applied to nested card wrappers, not the iframe). The caller owns
- * positioning/visibility and any `data-*` marker.
+ * theme is applied to nested card wrappers, not the iframe). `title` is the
+ * accessible name screen readers announce for the frame (WCAG 4.1.2), so every
+ * Flow surface must say what it is. The caller owns positioning/visibility and
+ * any `data-*` marker.
  */
-export function makeIframe(src) {
+export function makeIframe(src, title) {
     const frame = document.createElement("iframe");
     frame.src = src;
+    frame.title = title;
     frame.allow = IFRAME_ALLOW;
     frame.style.border = "none";
     frame.style.colorScheme = "normal";

package/dist/sdk/client/open-profile.js

@@ -2,6 +2,7 @@ import { resolveIdHost } from "../id-host";
 import { isValidUsername } from "../usernames";
 import { getFlow, requireFlow } from "./create-flow";
 import { answerTokenRequest, bridgeToWindow, hostIdentity, makeIframe, OVERLAY_STYLE, } from "./iframe-host";
+import { setOverlayFocus } from "./overlay-focus";
 // One overlay per page, kept for the page's lifetime. The alternative — a
 // handle per call site — would put a second fullscreen iframe over the host the
 // moment two parts of an app (a scoreboard and a chat line) both showed a
@@ -21,13 +22,17 @@ function createViewer(options) {
     // meant for the page underneath with nothing on screen to explain it.
     let ready = false;
     let visible = false;
+    let onClose;
     function applyHitTesting() {
-        if (frame)
-            frame.style.pointerEvents = ready && visible ? "auto" : "none";
+        if (!frame)
+            return;
+        frame.style.pointerEvents = ready && visible ? "auto" : "none";
+        setOverlayFocus(frame, ready && visible);
     }
     function mount(username) {
-        const el = makeIframe(`${host}/dialog/`);
+        const el = makeIframe(`${host}/dialog/`, "Flow ID profile");
         el.dataset.flowProfileView = "";
+        el.inert = true;
         Object.assign(el.style, OVERLAY_STYLE, { pointerEvents: "none" });
         // Appended before bridging: `contentWindow` is null until the frame is in
         // the document, and the bridge is bound to that window.
@@ -78,7 +83,7 @@ function createViewer(options) {
         });
         return opened;
     }
-    function open(username) {
+    function open(username, nextOnClose) {
         const mounted = bridge;
         const live = mounted ?? mount(username);
         // A frame created just now is already on this profile; an existing one is
@@ -93,6 +98,8 @@ function createViewer(options) {
             type: "profile-identity",
             identity: hostIdentity(flow),
         });
+        window.addEventListener("keydown", onKeyDown);
+        onClose = nextOnClose;
         visible = true;
         applyHitTesting();
         void live.send("__internal", { type: "dialog-shown" });
@@ -104,11 +111,21 @@ function createViewer(options) {
     // always-rendered, transparent and click-through while hidden keeps every
     // open animation reliable, on the second open and the tenth.
     function close() {
-        if (!frame || !bridge)
+        if (!visible || !frame || !bridge)
             return;
         visible = false;
+        window.removeEventListener("keydown", onKeyDown);
         applyHitTesting();
         void bridge.send("__internal", { type: "dialog-hidden" });
+        const notifyClose = onClose;
+        onClose = undefined;
+        notifyClose?.();
+    }
+    function onKeyDown(event) {
+        if (event.key !== "Escape" || event.defaultPrevented)
+            return;
+        event.preventDefault();
+        close();
     }
     function setTheme(next) {
         if (next === theme)
@@ -163,7 +180,7 @@ export function openProfile(username, options = {}) {
     viewer = live;
     if (options.theme)
         live.setTheme(options.theme);
-    live.open(username);
+    live.open(username, options.onClose);
     return true;
 }
 /**

package/dist/sdk/client/overlay-focus.d.ts

@@ -0,0 +1 @@
+export declare function setOverlayFocus(frame: HTMLIFrameElement, visible: boolean, opener?: HTMLElement | null): void;

package/dist/sdk/client/overlay-focus.js

@@ -0,0 +1,24 @@
+const triggers = new WeakMap();
+export function setOverlayFocus(frame, visible, opener) {
+    if (visible) {
+        if (triggers.has(frame))
+            return;
+        const active = opener ?? document.activeElement;
+        triggers.set(frame, active instanceof HTMLElement && active !== frame ? active : null);
+        frame.inert = false;
+        frame.focus();
+        return;
+    }
+    const restore = document.activeElement === frame;
+    frame.inert = true;
+    const trigger = triggers.get(frame);
+    triggers.delete(frame);
+    if (restore && trigger?.isConnected) {
+        requestAnimationFrame(() => {
+            if (trigger.isConnected &&
+                (document.activeElement === frame ||
+                    document.activeElement === document.body))
+                trigger.focus();
+        });
+    }
+}

package/dist/sdk/client/profile-button.js

@@ -1,6 +1,7 @@
 import { resolveIdHost } from "../id-host";
 import { getFlow, requireFlow } from "./create-flow";
 import { answerTokenRequest, bridgeToWindow, hostIdentity, makeIframe, OVERLAY_STYLE, } from "./iframe-host";
+import { setOverlayFocus } from "./overlay-focus";
 const POSITION_STYLE = {
     "top-right": { top: "0", right: "0" },
     "top-left": { top: "0", left: "0" },
@@ -46,8 +47,8 @@ export function createProfileButton(options) {
         createdContainer = el;
         container = el;
     }
-    function makeFrame() {
-        const frame = makeIframe(`${host}/dialog/`);
+    function makeFrame(title) {
+        const frame = makeIframe(`${host}/dialog/`, title);
         frame.dataset.flowProfile = "";
         frame.style.display = "block";
         return frame;
@@ -71,7 +72,7 @@ export function createProfileButton(options) {
         return bridge;
     }
     // ----- the persistent pill (stays mounted; sizes to its own content) -----
-    const pill = makeFrame();
+    const pill = makeFrame("Flow ID profile button");
     let pillWidth = 0;
     let pillHeight = 0;
     function applyPillSize() {
@@ -105,7 +106,8 @@ export function createProfileButton(options) {
     function ensureDialog() {
         if (dialog)
             return;
-        dialog = makeFrame();
+        dialog = makeFrame("Flow ID profile");
+        dialog.inert = true;
         Object.assign(dialog.style, OVERLAY_STYLE, {
             pointerEvents: "none",
         });
@@ -144,12 +146,14 @@ export function createProfileButton(options) {
         if (!dialog)
             return;
         dialog.style.pointerEvents = "auto";
+        setOverlayFocus(dialog, true);
         void dialogBridge?.send("__internal", { type: "dialog-shown" });
     }
     function hideDialog() {
         if (!dialog)
             return;
         dialog.style.pointerEvents = "none";
+        setOverlayFocus(dialog, false);
         void dialogBridge?.send("__internal", { type: "dialog-hidden" });
     }
     // ----- keep both iframes' identity in sync with the Flow session -----
@@ -186,6 +190,7 @@ export function createProfileButton(options) {
             });
         },
         destroy() {
+            hideDialog();
             unsubscribe();
             pillBridge.destroy();
             dialogBridge?.destroy();

package/dist/sdk/react/open-profile.js

@@ -19,6 +19,6 @@ import { useFlow } from "./hooks";
  */
 export function useOpenProfile(options = {}) {
     const flow = useFlow();
-    const { host, theme } = options;
-    return useCallback((username) => openProfile(username, { flow, host, theme }), [flow, host, theme]);
+    const { host, theme, onClose } = options;
+    return useCallback((username) => openProfile(username, { flow, host, theme, onClose }), [flow, host, theme, onClose]);
 }

package/dist/sdk/types/account-data.d.ts

@@ -0,0 +1,269 @@
+import type { RawRecord, RawValue } from "../json";
+import type { AccountSession, SecurityActivityEntry } from "./auth";
+import type { RoomEventRecurrence } from "./room-events";
+/**
+ * Self-serve account deletion (AUTH-246), the personal-data export (AUTH-247)
+ * and the erasure ledger downstream services replay (AUTH-119).
+ */
+/** Body of `POST /api/account/delete`: the caller's current username, typed
+ * back as the confirmation. */
+export type AccountDeleteRequest = {
+    confirm: string;
+};
+export type AccountDeleteResponse = {
+    ok: true;
+};
+/** What one account deletion removed, beyond the user row's own cascade. */
+export type AccountErasureCounts = {
+    /** Non-system rooms the account owned, deleted with everything inside them. */
+    ownedRoomsDeleted: number;
+    /** Cookie sessions the cascade took down. */
+    sessionsDeleted: number;
+    /** Passkeys the cascade took down. */
+    passkeysDeleted: number;
+    /** OTP / quota rows keyed on the account's email or id. */
+    verificationsDeleted: number;
+    /** Per-user rate-limit rows (never the ip-keyed ones). */
+    rateLimitsDeleted: number;
+};
+/** Result of `deleteAccount`: `missing` is the idempotent second call. */
+export type AccountErasureResult = {
+    outcome: "missing";
+} | {
+    outcome: "deleted";
+    userId: string;
+    isGuest: boolean;
+    /** The stored avatar URL, for the post-commit object delete. */
+    image: string | null;
+    counts: AccountErasureCounts;
+};
+/** One row of the erasure ledger as `GET /api/account/erasures` serves it. */
+export type AccountErasureEntry = {
+    seq: number;
+    /** The deleted account's Flow `user.id` — the JWT `sub` consumers keyed on. */
+    sub: string;
+    deletedRoomIds: string[];
+    erasedAt: string;
+};
+export type AccountErasureFeed = {
+    /** Ascending by `seq`. */
+    erasures: AccountErasureEntry[];
+    /** Feed this back as `after` for the next page; equals the request's
+     * `after` when the page was empty. */
+    nextAfter: number;
+};
+export type AccountExportAccount = {
+    id: string;
+    username: string;
+    name: string | null;
+    email: string | null;
+    emailVerified: boolean;
+    isGuest: boolean;
+    role: string;
+    image: string | null;
+    bio: string | null;
+    walletAddress: string | null;
+    subscribedToNews: boolean;
+    createdAt: string;
+};
+/** A passkey as the owner sees it: metadata only, never the public key,
+ * credential id or signature counter. */
+export type AccountExportPasskey = {
+    id: string;
+    name: string | null;
+    deviceType: string | null;
+    backedUp: boolean | null;
+    transports: string | null;
+    aaguid: string | null;
+    createdAt: string;
+};
+export type AccountExportSettingsSurface = {
+    version: number;
+    settings: Record<string, RawValue>;
+};
+export type AccountExportXpSummary = {
+    totalXp: number;
+    flowScore: number;
+    lastVisitDate: string | null;
+    updatedAt: string;
+};
+export type AccountExportXpGrant = {
+    id: string;
+    source: string;
+    baseAmount: number;
+    flowScore: number;
+    amount: number;
+    metadata: RawRecord | null;
+    createdAt: string;
+};
+export type AccountExportActionEvent = {
+    id: string;
+    sessionId: string;
+    kind: string;
+    accruedSeconds: number;
+    at: string;
+};
+export type AccountExportRoomSettings = {
+    roomId: string;
+    surface: string;
+    settings: RawRecord;
+    version: number;
+};
+export type AccountExportActionSession = {
+    id: string;
+    source: string;
+    state: string;
+    subjectId: string | null;
+    accruedSeconds: number;
+    focusedSeconds: number;
+    xpGranted: number | null;
+    metadata: RawRecord | null;
+    startedAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+};
+export type AccountExportStudySubject = {
+    id: string;
+    field: string | null;
+    name: string;
+    archivedAt: string | null;
+    createdAt: string;
+    lastUsedAt: string;
+};
+export type AccountExportCharacterStateTime = {
+    day: string;
+    state: string;
+    seconds: number;
+    updatedAt: string;
+};
+export type AccountExportOwnedRoom = {
+    id: string;
+    slug: string;
+    displayName: string;
+    description: string | null;
+    visibility: string;
+    isSystem: boolean;
+    createdAt: string;
+    updatedAt: string;
+};
+export type AccountExportRoomMembership = {
+    roomId: string;
+    roomSlug: string;
+    role: string;
+    joinedAt: string;
+};
+/** A restriction placed on the caller. The issuing moderator is deliberately
+ * absent — the export carries only the caller's own identity. */
+export type AccountExportRoomRestriction = {
+    id: string;
+    roomId: string;
+    kind: string;
+    reason: string | null;
+    expiresAt: string | null;
+    createdAt: string;
+};
+export type AccountExportRoomPresence = {
+    roomId: string;
+    channel: string;
+    joinedAt: string;
+    updatedAt: string;
+};
+export type AccountExportRoomPlayerState = {
+    roomId: string;
+    x: number;
+    y: number;
+    z: number;
+    yaw: number;
+    worldId: string;
+    updatedAt: string;
+};
+export type AccountExportRooms = {
+    settings: AccountExportRoomSettings[];
+    owned: AccountExportOwnedRoom[];
+    memberships: AccountExportRoomMembership[];
+    restrictions: AccountExportRoomRestriction[];
+    presence: AccountExportRoomPresence[];
+    playerState: AccountExportRoomPlayerState[];
+};
+export type AccountExportAuthoredEvent = {
+    id: string;
+    roomId: string;
+    title: string;
+    description: string | null;
+    coverUrl: string | null;
+    startsAt: string;
+    endsAt: string | null;
+    timezone: string;
+    recurrence: RoomEventRecurrence | null;
+    reminderOffsets: number[] | null;
+    status: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type AccountExportRsvp = {
+    occurrenceId: string;
+    createdAt: string;
+};
+export type AccountExportFollow = {
+    eventId: string;
+    createdAt: string;
+};
+export type AccountExportAttendance = {
+    occurrenceId: string;
+    firstSeenAt: string;
+    lastSeenAt: string;
+};
+export type AccountExportRoomEvents = {
+    authored: AccountExportAuthoredEvent[];
+    rsvps: AccountExportRsvp[];
+    follows: AccountExportFollow[];
+    attendance: AccountExportAttendance[];
+};
+export type AccountExportGameEvent = {
+    id: string;
+    event: string;
+    occurredAt: string;
+    recordedAt: string;
+    serverId: string;
+    sessionId: string | null;
+    roomId: string | null;
+    roomSlug: string | null;
+    reason: string | null;
+    detail: RawRecord | null;
+};
+/** Where the rest of a person's Flow data lives, so one export names every
+ * service that has to be asked. */
+export type AccountExportOtherService = {
+    service: string;
+    export: string;
+    holds: string;
+};
+/** The whole personal-data export (`GET /api/account/export`), version 1. */
+export type AccountExport = {
+    format: "flow-id-export";
+    version: 1;
+    exportedAt: string;
+    account: AccountExportAccount;
+    passkeys: AccountExportPasskey[];
+    sessions: AccountSession[];
+    settings: Record<string, AccountExportSettingsSurface>;
+    xp: {
+        summary: AccountExportXpSummary | null;
+        ledger: AccountExportXpGrant[];
+    };
+    actions: {
+        events: AccountExportActionEvent[];
+        sessions: AccountExportActionSession[];
+    };
+    study: {
+        subjects: AccountExportStudySubject[];
+    };
+    characterStateTime: AccountExportCharacterStateTime[];
+    rooms: AccountExportRooms;
+    roomEvents: AccountExportRoomEvents;
+    gameEvents: AccountExportGameEvent[];
+    securityActivity: SecurityActivityEntry[];
+    otherServices: AccountExportOtherService[];
+    /** Dotted names of every collection that hit the row cap (newest rows kept). */
+    truncated: string[];
+};

package/dist/sdk/types/events.d.ts

@@ -9,7 +9,7 @@ export type AuthOutcome = "success" | "failure" | "info";
 export type AuthMode = "sign-up" | "sign-in";
 /** Client-only funnel steps reported via the `/api/events` beacon. */
 export type FunnelStep = "mode_selected" | "email_entered" | "ceremony_started" | "ceremony_failed" | "done_shown";
-export type AuthEventName = "auth.username.checked" | "auth.signup.succeeded" | "auth.signup.failed" | "auth.otp.sent" | "auth.otp.verified" | "auth.otp.failed" | "auth.email.verify.sent" | "auth.email.verify.succeeded" | "auth.email.verify.failed" | "auth.email.changed" | "auth.avatar.upload.succeeded" | "auth.avatar.upload.failed" | "auth.bio.update.succeeded" | "auth.bio.update.failed" | "auth.profile.view.failed" | "auth.profile.view.uncapped" | "auth.challenge.issued" | "auth.signin.succeeded" | "auth.signin.failed" | "auth.passkey.added" | "auth.passkey.add_failed" | "auth.restore.succeeded" | "auth.restore.failed" | "auth.restore.no_session" | "auth.refresh.succeeded" | "auth.refresh.failed" | "auth.refresh.reuse" | "auth.refresh.grace" | "auth.jwt.verified" | "auth.jwt.rejected" | "auth.signout" | "auth.session.revoked" | "auth.session.revoked_all" | "auth.audience.rejected" | "auth.audience.minted" | "auth.guest.created" | "auth.guest.restored" | "auth.guest.upgraded" | "auth.guest.failed" | "auth.role.granted" | "auth.role.revoked" | "room.restriction.issued" | "room.restriction.lifted" | "auth.funnel.mode_selected" | "auth.funnel.email_entered" | "auth.funnel.ceremony_started" | "auth.funnel.ceremony_failed" | "auth.funnel.done_shown" | "room_event.activated" | "room_event.completed" | "room_event.reminder_dispatched" | "room_event.reminder_failed";
+export type AuthEventName = "auth.username.checked" | "auth.signup.succeeded" | "auth.signup.failed" | "auth.otp.sent" | "auth.otp.verified" | "auth.otp.failed" | "auth.email.verify.sent" | "auth.email.verify.succeeded" | "auth.email.verify.failed" | "auth.email.changed" | "auth.avatar.upload.succeeded" | "auth.avatar.upload.failed" | "auth.bio.update.succeeded" | "auth.bio.update.failed" | "auth.profile.view.failed" | "auth.profile.view.uncapped" | "auth.challenge.issued" | "auth.signin.succeeded" | "auth.signin.failed" | "auth.passkey.added" | "auth.passkey.add_failed" | "auth.restore.succeeded" | "auth.restore.failed" | "auth.restore.no_session" | "auth.refresh.succeeded" | "auth.refresh.failed" | "auth.refresh.reuse" | "auth.refresh.grace" | "auth.jwt.verified" | "auth.jwt.rejected" | "auth.signout" | "auth.session.revoked" | "auth.session.revoked_all" | "auth.audience.rejected" | "auth.audience.minted" | "auth.guest.created" | "auth.guest.restored" | "auth.guest.upgraded" | "auth.guest.failed" | "auth.role.granted" | "auth.role.revoked" | "auth.account.deleted" | "auth.account.exported" | "room.restriction.issued" | "room.restriction.lifted" | "auth.funnel.mode_selected" | "auth.funnel.email_entered" | "auth.funnel.ceremony_started" | "auth.funnel.ceremony_failed" | "auth.funnel.done_shown" | "room_event.activated" | "room_event.completed" | "room_event.reminder_dispatched" | "room_event.reminder_failed";
 export type AuthErrorCode = "username_taken" | "credential_taken" | "email_taken" | "email_not_verified" | "no_email" | "image_upload_forbidden" | "image_upload_rate_limited" | "invalid_image_type" | "image_too_large" | "image_upload_failed" | "bio_forbidden" | "bio_invalid" | "bio_too_long" | "profile_rate_limited" | "profile_ip_missing" | "otp_invalid" | "otp_expired" | "otp_attempts_exceeded" | "otp_resend_cooldown" | "otp_resend_limit" | "otp_global_limit" | "otp_send_failed" | "challenge_expired" | "unknown_credential" | "invalid_assertion_type" | "invalid_assertion_origin" | "user_verification_required" | "invalid_signature" | "user_not_found" | "missing_audience" | "audience_not_allowed" | "audience_mismatch" | "no_session" | "no_passkey" | "refresh_token_invalid" | "refresh_token_expired" | "refresh_epoch_stale" | "refresh_user_epoch_stale" | "refresh_reuse_detected" | "guest_rate_limited" | "guest_global_limit" | "guest_username_exhausted" | "guest_session" | "passkey_exists" | "already_upgraded" | "malformed_token" | "unknown_key" | "verification_failed" | "webauthn_not_allowed" | "webauthn_security" | "webauthn_invalid_state" | "webauthn_not_supported" | "webauthn_constraint" | "webauthn_aborted" | "webauthn_unknown" | "internal_error";
 /** One flat record per event = one row in the `auth_events` stream. */
 export interface AuthEventRecord {
@@ -47,6 +47,10 @@ export interface AuthEventRecord {
     occurrenceId: string | null;
     dispatchKind: string | null;
     recipients: number | null;
+    /** Account-lifecycle fields: whether the account was a guest, and what an
+     * erasure or export touched, as per-section row counts. */
+    guest: boolean | null;
+    counts: Record<string, number> | null;
 }
 /** Body accepted by `POST /api/events` from the dialog. */
 export interface BeaconBody {

package/dist/sdk/types/index.d.ts

@@ -1,3 +1,4 @@
+export type { AccountDeleteRequest, AccountDeleteResponse, AccountErasureCounts, AccountErasureEntry, AccountErasureFeed, AccountErasureResult, AccountExport, AccountExportAccount, AccountExportActionEvent, AccountExportActionSession, AccountExportAttendance, AccountExportAuthoredEvent, AccountExportCharacterStateTime, AccountExportFollow, AccountExportGameEvent, AccountExportOtherService, AccountExportOwnedRoom, AccountExportPasskey, AccountExportRoomEvents, AccountExportRoomMembership, AccountExportRoomPlayerState, AccountExportRoomPresence, AccountExportRoomRestriction, AccountExportRoomSettings, AccountExportRooms, AccountExportRsvp, AccountExportSettingsSurface, AccountExportStudySubject, AccountExportXpGrant, AccountExportXpSummary, } from "./account-data";
 export type { ActionCurve, ActionEventRequest, ActionEventResponse, ActionsApi, ActiveActionState, FinishActionRequest, ListStudySessionsOptions, ListStudySubjectsOptions, StartActionInput, StartActionResult, StudyApi, StudySubjectResponse, UseActiveActionOptions, XpEstimateContext, } from "./actions";
 export type { AccountSession, AccountSessionsResponse, AdditionalSession, AuthConfig, AuthResponse, AuthResponseWithWebAuthn, BioNormalization, BioRejection, BioWriteRefusal, BioWriteResult, FlowCredential, FlowUser, PasskeyPluginOptions, RevokeAllSessionsResponse, RevokeSessionResponse, SecurityActivityEntry, SecurityActivityResponse, SessionUser, VerifiedFlowJWT, VerifyOptions, WebAuthnSignature, } from "./auth";
 export type { BodyRegion, CosmeticItem, CosmeticMaterial, CosmeticPaint, CosmeticSlot, EquipConflict, EquippedCosmetic, EquippedCosmetics, EquipRegion, PaintSlot, SettingsConflict, } from "./cosmetics";

package/dist/sdk/types/sdk.d.ts

@@ -230,6 +230,14 @@ export type ProfileButtonHandle = {
     destroy: () => void;
 };
 export type OpenProfileOptions = {
+    /**
+     * Called once when the overlay closes, including its close button, backdrop,
+     * Escape, closeProfile(), or a sign-in/sign-out handoff. Runs after the
+     * overlay stops accepting input, without waiting for the exit animation.
+     * The latest successful open replaces this callback; omitting it clears the
+     * previous callback. Rejected opens and repeated closes do not notify.
+     */
+    onClose?: () => void;
     /**
      * The Flow ID origin serving the overlay (e.g. https://id.flow.industries).
      * Defaults to the resolved Flow instance's `host`, then the SDK default.
@@ -249,12 +257,7 @@ export type OpenProfileOptions = {
      */
     flow?: Flow;
 };
-export type UseOpenProfileOptions = {
-    /** Override the Flow ID origin; defaults to the resolved Flow's `host`. */
-    host?: string;
-    /** Color scheme for the dialog chrome; defaults to "light dark" (the OS). */
-    theme?: ColorScheme;
-};
+export type UseOpenProfileOptions = Pick<OpenProfileOptions, "host" | "theme" | "onClose">;
 /** The inline Flow ID widgets an embedder can mount alongside its own UI. */
 export type FlowWidgetName = "xp" | "action-timer";
 export type MountFlowWidgetOptions = {
@@ -309,6 +312,7 @@ export type FlowWidgetProps = {
     theme?: ColorScheme;
 };
 export type DialogHost = {
+    captureFocus: () => void;
     open: (options?: DialogOpenOptions) => void;
     close: () => void;
     destroy: () => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flow-industries/id",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -19,6 +19,10 @@
       "types": "./dist/sdk/client/index.d.ts",
       "import": "./dist/sdk/client/index.js"
     },
+    "./usernames": {
+      "types": "./dist/sdk/usernames.d.ts",
+      "import": "./dist/sdk/usernames.js"
+    },
     "./react": {
       "types": "./dist/sdk/react/index.d.ts",
       "import": "./dist/sdk/react/index.js"
@@ -69,6 +73,7 @@
     "usernames:refresh": "bun run scripts/generate-reserved-usernames.ts",
     "lint": "biome check",
     "test": "bun test src",
+    "test:sdk-package": "bash scripts/test-sdk-package.sh",
     "format": "biome format --write",
     "check": "biome check --write",
     "typecheck": "tsr generate && tsc --noEmit"
@@ -121,7 +126,7 @@
   ],
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1073.0",
-    "@flow-industries/ui": "^0.19.0",
+    "@flow-industries/ui": "^0.21.0",
     "@hono/otel": "^1.1.2",
     "@openobserve/browser-logs": "^0.3.1",
     "@openobserve/browser-rum": "^0.3.1",