@flow-industries/id 0.21.1 → 0.21.2

package/dist/sdk/client/create-flow.js

@@ -362,6 +362,7 @@ export function createFlow(options = {}) {
      */
     async function login(loginOpts = {}) {
         const dialogHost = getDialog();
+        dialogHost.captureFocus();
         let accessKeyModule;
         let accessKeyPrep;
         let extraCapabilities;

package/dist/sdk/client/dialog-host.js

@@ -1,4 +1,5 @@
 import { bridgeToWindow, makeIframe } from "./iframe-host";
+import { setOverlayFocus } from "./overlay-focus";
 const HIDDEN_STYLE = {
     position: "fixed",
     inset: "0",
@@ -35,6 +36,12 @@ export function createDialogHost(options) {
     const { host, container = document.body } = options;
     let iframe = null;
     let messenger = null;
+    let opener = null;
+    function captureFocus() {
+        const active = document.activeElement;
+        if (active instanceof HTMLElement && active !== iframe)
+            opener = active;
+    }
     const pending = new Map();
     /**
      * Mounts the iframe and wires up the postMessage bridge. Idempotent — safe
@@ -43,8 +50,9 @@ export function createDialogHost(options) {
     function ensureFrame() {
         if (iframe)
             return;
-        iframe = makeIframe(`${host}`);
+        iframe = makeIframe(`${host}`, "Flow ID");
         iframe.dataset.flowId = "";
+        iframe.inert = true;
         Object.assign(iframe.style, HIDDEN_STYLE);
         container.appendChild(iframe);
         // Bind the bridge to this iframe's own window — a page may host more than
@@ -109,6 +117,8 @@ export function createDialogHost(options) {
         if (!iframe)
             return;
         Object.assign(iframe.style, VISIBLE_STYLE);
+        setOverlayFocus(iframe, true, opener);
+        opener = null;
         // The dialog owns its open/close animation and mounts the overlay (playing
         // the enter animation) on this signal — same mechanism as the profile
         // widget, so every dialog appears and disappears identically.
@@ -124,6 +134,7 @@ export function createDialogHost(options) {
         // requestAnimationFrame, making the close (and the next open) skip straight
         // to the end. While hidden the overlay is transparent and click-through.
         iframe.style.pointerEvents = "none";
+        setOverlayFocus(iframe, false);
         void (
         // SAFETY: the payload map types this topic; the dialog reads exactly these fields.
         messenger?.send("__internal", { type: "dialog-hidden" }));
@@ -190,6 +201,7 @@ export function createDialogHost(options) {
         return dispatchRequest(method, params);
     }
     return {
+        captureFocus,
         open,
         close,
         destroy,

package/dist/sdk/client/flow-widget.js

@@ -11,6 +11,11 @@ const WIDGET_ROUTE = {
     xp: "/dialog/xp-widget",
     "action-timer": "/dialog/action-timer",
 };
+// `satisfies` the full widget union so a new widget cannot ship untitled.
+const WIDGET_TITLE = {
+    xp: "Flow ID XP",
+    "action-timer": "Flow ID action timer",
+};
 /**
  * Mounts one of the inline Flow ID widgets — the XP strip, the action timer —
  * as a transparent iframe the embedder positions and sizes itself.
@@ -42,7 +47,7 @@ export function createFlowWidget(options) {
     const hostOrigin = new URL(host).origin;
     let theme = options.theme ?? "light dark";
     const route = WIDGET_ROUTE[options.widget];
-    const frame = makeIframe(`${host}${route}`);
+    const frame = makeIframe(`${host}${route}`, WIDGET_TITLE[options.widget]);
     frame.style.background = "transparent";
     const container = options.container ?? document.body;
     // Appended before bridging: `contentWindow` is null until the frame is in the

package/dist/sdk/client/iframe-host.d.ts

@@ -16,10 +16,12 @@ export declare const OVERLAY_STYLE: Partial<CSSStyleDeclaration>;
 /**
  * Creates a Flow dialog iframe element: WebAuthn-permitted, borderless, and
  * `color-scheme: normal` so the iframe itself stays transparent (the rendered
- * theme is applied to nested card wrappers, not the iframe). The caller owns
- * positioning/visibility and any `data-*` marker.
+ * theme is applied to nested card wrappers, not the iframe). `title` is the
+ * accessible name screen readers announce for the frame (WCAG 4.1.2), so every
+ * Flow surface must say what it is. The caller owns positioning/visibility and
+ * any `data-*` marker.
  */
-export declare function makeIframe(src: string): HTMLIFrameElement;
+export declare function makeIframe(src: string, title: string): HTMLIFrameElement;
 /**
  * Builds a postMessage bridge to a child window (iframe `contentWindow` or
  * popup). Inbound is filtered by `source` so multiple same-origin Flow frames

package/dist/sdk/client/iframe-host.js

@@ -21,12 +21,15 @@ export const OVERLAY_STYLE = {
 /**
  * Creates a Flow dialog iframe element: WebAuthn-permitted, borderless, and
  * `color-scheme: normal` so the iframe itself stays transparent (the rendered
- * theme is applied to nested card wrappers, not the iframe). The caller owns
- * positioning/visibility and any `data-*` marker.
+ * theme is applied to nested card wrappers, not the iframe). `title` is the
+ * accessible name screen readers announce for the frame (WCAG 4.1.2), so every
+ * Flow surface must say what it is. The caller owns positioning/visibility and
+ * any `data-*` marker.
  */
-export function makeIframe(src) {
+export function makeIframe(src, title) {
     const frame = document.createElement("iframe");
     frame.src = src;
+    frame.title = title;
     frame.allow = IFRAME_ALLOW;
     frame.style.border = "none";
     frame.style.colorScheme = "normal";

package/dist/sdk/client/open-profile.js

@@ -2,6 +2,7 @@ import { resolveIdHost } from "../id-host";
 import { isValidUsername } from "../usernames";
 import { getFlow, requireFlow } from "./create-flow";
 import { answerTokenRequest, bridgeToWindow, hostIdentity, makeIframe, OVERLAY_STYLE, } from "./iframe-host";
+import { setOverlayFocus } from "./overlay-focus";
 // One overlay per page, kept for the page's lifetime. The alternative — a
 // handle per call site — would put a second fullscreen iframe over the host the
 // moment two parts of an app (a scoreboard and a chat line) both showed a
@@ -23,12 +24,15 @@ function createViewer(options) {
     let visible = false;
     let onClose;
     function applyHitTesting() {
-        if (frame)
-            frame.style.pointerEvents = ready && visible ? "auto" : "none";
+        if (!frame)
+            return;
+        frame.style.pointerEvents = ready && visible ? "auto" : "none";
+        setOverlayFocus(frame, ready && visible);
     }
     function mount(username) {
-        const el = makeIframe(`${host}/dialog/`);
+        const el = makeIframe(`${host}/dialog/`, "Flow ID profile");
         el.dataset.flowProfileView = "";
+        el.inert = true;
         Object.assign(el.style, OVERLAY_STYLE, { pointerEvents: "none" });
         // Appended before bridging: `contentWindow` is null until the frame is in
         // the document, and the bridge is bound to that window.

package/dist/sdk/client/overlay-focus.d.ts

@@ -0,0 +1 @@
+export declare function setOverlayFocus(frame: HTMLIFrameElement, visible: boolean, opener?: HTMLElement | null): void;

package/dist/sdk/client/overlay-focus.js

@@ -0,0 +1,24 @@
+const triggers = new WeakMap();
+export function setOverlayFocus(frame, visible, opener) {
+    if (visible) {
+        if (triggers.has(frame))
+            return;
+        const active = opener ?? document.activeElement;
+        triggers.set(frame, active instanceof HTMLElement && active !== frame ? active : null);
+        frame.inert = false;
+        frame.focus();
+        return;
+    }
+    const restore = document.activeElement === frame;
+    frame.inert = true;
+    const trigger = triggers.get(frame);
+    triggers.delete(frame);
+    if (restore && trigger?.isConnected) {
+        requestAnimationFrame(() => {
+            if (trigger.isConnected &&
+                (document.activeElement === frame ||
+                    document.activeElement === document.body))
+                trigger.focus();
+        });
+    }
+}

package/dist/sdk/client/profile-button.js

@@ -1,6 +1,7 @@
 import { resolveIdHost } from "../id-host";
 import { getFlow, requireFlow } from "./create-flow";
 import { answerTokenRequest, bridgeToWindow, hostIdentity, makeIframe, OVERLAY_STYLE, } from "./iframe-host";
+import { setOverlayFocus } from "./overlay-focus";
 const POSITION_STYLE = {
     "top-right": { top: "0", right: "0" },
     "top-left": { top: "0", left: "0" },
@@ -46,8 +47,8 @@ export function createProfileButton(options) {
         createdContainer = el;
         container = el;
     }
-    function makeFrame() {
-        const frame = makeIframe(`${host}/dialog/`);
+    function makeFrame(title) {
+        const frame = makeIframe(`${host}/dialog/`, title);
         frame.dataset.flowProfile = "";
         frame.style.display = "block";
         return frame;
@@ -71,7 +72,7 @@ export function createProfileButton(options) {
         return bridge;
     }
     // ----- the persistent pill (stays mounted; sizes to its own content) -----
-    const pill = makeFrame();
+    const pill = makeFrame("Flow ID profile button");
     let pillWidth = 0;
     let pillHeight = 0;
     function applyPillSize() {
@@ -105,7 +106,8 @@ export function createProfileButton(options) {
     function ensureDialog() {
         if (dialog)
             return;
-        dialog = makeFrame();
+        dialog = makeFrame("Flow ID profile");
+        dialog.inert = true;
         Object.assign(dialog.style, OVERLAY_STYLE, {
             pointerEvents: "none",
         });
@@ -144,12 +146,14 @@ export function createProfileButton(options) {
         if (!dialog)
             return;
         dialog.style.pointerEvents = "auto";
+        setOverlayFocus(dialog, true);
         void dialogBridge?.send("__internal", { type: "dialog-shown" });
     }
     function hideDialog() {
         if (!dialog)
             return;
         dialog.style.pointerEvents = "none";
+        setOverlayFocus(dialog, false);
         void dialogBridge?.send("__internal", { type: "dialog-hidden" });
     }
     // ----- keep both iframes' identity in sync with the Flow session -----
@@ -186,6 +190,7 @@ export function createProfileButton(options) {
             });
         },
         destroy() {
+            hideDialog();
             unsubscribe();
             pillBridge.destroy();
             dialogBridge?.destroy();

package/dist/sdk/types/account-data.d.ts

@@ -0,0 +1,269 @@
+import type { RawRecord, RawValue } from "../json";
+import type { AccountSession, SecurityActivityEntry } from "./auth";
+import type { RoomEventRecurrence } from "./room-events";
+/**
+ * Self-serve account deletion (AUTH-246), the personal-data export (AUTH-247)
+ * and the erasure ledger downstream services replay (AUTH-119).
+ */
+/** Body of `POST /api/account/delete`: the caller's current username, typed
+ * back as the confirmation. */
+export type AccountDeleteRequest = {
+    confirm: string;
+};
+export type AccountDeleteResponse = {
+    ok: true;
+};
+/** What one account deletion removed, beyond the user row's own cascade. */
+export type AccountErasureCounts = {
+    /** Non-system rooms the account owned, deleted with everything inside them. */
+    ownedRoomsDeleted: number;
+    /** Cookie sessions the cascade took down. */
+    sessionsDeleted: number;
+    /** Passkeys the cascade took down. */
+    passkeysDeleted: number;
+    /** OTP / quota rows keyed on the account's email or id. */
+    verificationsDeleted: number;
+    /** Per-user rate-limit rows (never the ip-keyed ones). */
+    rateLimitsDeleted: number;
+};
+/** Result of `deleteAccount`: `missing` is the idempotent second call. */
+export type AccountErasureResult = {
+    outcome: "missing";
+} | {
+    outcome: "deleted";
+    userId: string;
+    isGuest: boolean;
+    /** The stored avatar URL, for the post-commit object delete. */
+    image: string | null;
+    counts: AccountErasureCounts;
+};
+/** One row of the erasure ledger as `GET /api/account/erasures` serves it. */
+export type AccountErasureEntry = {
+    seq: number;
+    /** The deleted account's Flow `user.id` — the JWT `sub` consumers keyed on. */
+    sub: string;
+    deletedRoomIds: string[];
+    erasedAt: string;
+};
+export type AccountErasureFeed = {
+    /** Ascending by `seq`. */
+    erasures: AccountErasureEntry[];
+    /** Feed this back as `after` for the next page; equals the request's
+     * `after` when the page was empty. */
+    nextAfter: number;
+};
+export type AccountExportAccount = {
+    id: string;
+    username: string;
+    name: string | null;
+    email: string | null;
+    emailVerified: boolean;
+    isGuest: boolean;
+    role: string;
+    image: string | null;
+    bio: string | null;
+    walletAddress: string | null;
+    subscribedToNews: boolean;
+    createdAt: string;
+};
+/** A passkey as the owner sees it: metadata only, never the public key,
+ * credential id or signature counter. */
+export type AccountExportPasskey = {
+    id: string;
+    name: string | null;
+    deviceType: string | null;
+    backedUp: boolean | null;
+    transports: string | null;
+    aaguid: string | null;
+    createdAt: string;
+};
+export type AccountExportSettingsSurface = {
+    version: number;
+    settings: Record<string, RawValue>;
+};
+export type AccountExportXpSummary = {
+    totalXp: number;
+    flowScore: number;
+    lastVisitDate: string | null;
+    updatedAt: string;
+};
+export type AccountExportXpGrant = {
+    id: string;
+    source: string;
+    baseAmount: number;
+    flowScore: number;
+    amount: number;
+    metadata: RawRecord | null;
+    createdAt: string;
+};
+export type AccountExportActionEvent = {
+    id: string;
+    sessionId: string;
+    kind: string;
+    accruedSeconds: number;
+    at: string;
+};
+export type AccountExportRoomSettings = {
+    roomId: string;
+    surface: string;
+    settings: RawRecord;
+    version: number;
+};
+export type AccountExportActionSession = {
+    id: string;
+    source: string;
+    state: string;
+    subjectId: string | null;
+    accruedSeconds: number;
+    focusedSeconds: number;
+    xpGranted: number | null;
+    metadata: RawRecord | null;
+    startedAt: string;
+    updatedAt: string;
+    finishedAt: string | null;
+};
+export type AccountExportStudySubject = {
+    id: string;
+    field: string | null;
+    name: string;
+    archivedAt: string | null;
+    createdAt: string;
+    lastUsedAt: string;
+};
+export type AccountExportCharacterStateTime = {
+    day: string;
+    state: string;
+    seconds: number;
+    updatedAt: string;
+};
+export type AccountExportOwnedRoom = {
+    id: string;
+    slug: string;
+    displayName: string;
+    description: string | null;
+    visibility: string;
+    isSystem: boolean;
+    createdAt: string;
+    updatedAt: string;
+};
+export type AccountExportRoomMembership = {
+    roomId: string;
+    roomSlug: string;
+    role: string;
+    joinedAt: string;
+};
+/** A restriction placed on the caller. The issuing moderator is deliberately
+ * absent — the export carries only the caller's own identity. */
+export type AccountExportRoomRestriction = {
+    id: string;
+    roomId: string;
+    kind: string;
+    reason: string | null;
+    expiresAt: string | null;
+    createdAt: string;
+};
+export type AccountExportRoomPresence = {
+    roomId: string;
+    channel: string;
+    joinedAt: string;
+    updatedAt: string;
+};
+export type AccountExportRoomPlayerState = {
+    roomId: string;
+    x: number;
+    y: number;
+    z: number;
+    yaw: number;
+    worldId: string;
+    updatedAt: string;
+};
+export type AccountExportRooms = {
+    settings: AccountExportRoomSettings[];
+    owned: AccountExportOwnedRoom[];
+    memberships: AccountExportRoomMembership[];
+    restrictions: AccountExportRoomRestriction[];
+    presence: AccountExportRoomPresence[];
+    playerState: AccountExportRoomPlayerState[];
+};
+export type AccountExportAuthoredEvent = {
+    id: string;
+    roomId: string;
+    title: string;
+    description: string | null;
+    coverUrl: string | null;
+    startsAt: string;
+    endsAt: string | null;
+    timezone: string;
+    recurrence: RoomEventRecurrence | null;
+    reminderOffsets: number[] | null;
+    status: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type AccountExportRsvp = {
+    occurrenceId: string;
+    createdAt: string;
+};
+export type AccountExportFollow = {
+    eventId: string;
+    createdAt: string;
+};
+export type AccountExportAttendance = {
+    occurrenceId: string;
+    firstSeenAt: string;
+    lastSeenAt: string;
+};
+export type AccountExportRoomEvents = {
+    authored: AccountExportAuthoredEvent[];
+    rsvps: AccountExportRsvp[];
+    follows: AccountExportFollow[];
+    attendance: AccountExportAttendance[];
+};
+export type AccountExportGameEvent = {
+    id: string;
+    event: string;
+    occurredAt: string;
+    recordedAt: string;
+    serverId: string;
+    sessionId: string | null;
+    roomId: string | null;
+    roomSlug: string | null;
+    reason: string | null;
+    detail: RawRecord | null;
+};
+/** Where the rest of a person's Flow data lives, so one export names every
+ * service that has to be asked. */
+export type AccountExportOtherService = {
+    service: string;
+    export: string;
+    holds: string;
+};
+/** The whole personal-data export (`GET /api/account/export`), version 1. */
+export type AccountExport = {
+    format: "flow-id-export";
+    version: 1;
+    exportedAt: string;
+    account: AccountExportAccount;
+    passkeys: AccountExportPasskey[];
+    sessions: AccountSession[];
+    settings: Record<string, AccountExportSettingsSurface>;
+    xp: {
+        summary: AccountExportXpSummary | null;
+        ledger: AccountExportXpGrant[];
+    };
+    actions: {
+        events: AccountExportActionEvent[];
+        sessions: AccountExportActionSession[];
+    };
+    study: {
+        subjects: AccountExportStudySubject[];
+    };
+    characterStateTime: AccountExportCharacterStateTime[];
+    rooms: AccountExportRooms;
+    roomEvents: AccountExportRoomEvents;
+    gameEvents: AccountExportGameEvent[];
+    securityActivity: SecurityActivityEntry[];
+    otherServices: AccountExportOtherService[];
+    /** Dotted names of every collection that hit the row cap (newest rows kept). */
+    truncated: string[];
+};

package/dist/sdk/types/events.d.ts

@@ -9,7 +9,7 @@ export type AuthOutcome = "success" | "failure" | "info";
 export type AuthMode = "sign-up" | "sign-in";
 /** Client-only funnel steps reported via the `/api/events` beacon. */
 export type FunnelStep = "mode_selected" | "email_entered" | "ceremony_started" | "ceremony_failed" | "done_shown";
-export type AuthEventName = "auth.username.checked" | "auth.signup.succeeded" | "auth.signup.failed" | "auth.otp.sent" | "auth.otp.verified" | "auth.otp.failed" | "auth.email.verify.sent" | "auth.email.verify.succeeded" | "auth.email.verify.failed" | "auth.email.changed" | "auth.avatar.upload.succeeded" | "auth.avatar.upload.failed" | "auth.bio.update.succeeded" | "auth.bio.update.failed" | "auth.profile.view.failed" | "auth.profile.view.uncapped" | "auth.challenge.issued" | "auth.signin.succeeded" | "auth.signin.failed" | "auth.passkey.added" | "auth.passkey.add_failed" | "auth.restore.succeeded" | "auth.restore.failed" | "auth.restore.no_session" | "auth.refresh.succeeded" | "auth.refresh.failed" | "auth.refresh.reuse" | "auth.refresh.grace" | "auth.jwt.verified" | "auth.jwt.rejected" | "auth.signout" | "auth.session.revoked" | "auth.session.revoked_all" | "auth.audience.rejected" | "auth.audience.minted" | "auth.guest.created" | "auth.guest.restored" | "auth.guest.upgraded" | "auth.guest.failed" | "auth.role.granted" | "auth.role.revoked" | "room.restriction.issued" | "room.restriction.lifted" | "auth.funnel.mode_selected" | "auth.funnel.email_entered" | "auth.funnel.ceremony_started" | "auth.funnel.ceremony_failed" | "auth.funnel.done_shown" | "room_event.activated" | "room_event.completed" | "room_event.reminder_dispatched" | "room_event.reminder_failed";
+export type AuthEventName = "auth.username.checked" | "auth.signup.succeeded" | "auth.signup.failed" | "auth.otp.sent" | "auth.otp.verified" | "auth.otp.failed" | "auth.email.verify.sent" | "auth.email.verify.succeeded" | "auth.email.verify.failed" | "auth.email.changed" | "auth.avatar.upload.succeeded" | "auth.avatar.upload.failed" | "auth.bio.update.succeeded" | "auth.bio.update.failed" | "auth.profile.view.failed" | "auth.profile.view.uncapped" | "auth.challenge.issued" | "auth.signin.succeeded" | "auth.signin.failed" | "auth.passkey.added" | "auth.passkey.add_failed" | "auth.restore.succeeded" | "auth.restore.failed" | "auth.restore.no_session" | "auth.refresh.succeeded" | "auth.refresh.failed" | "auth.refresh.reuse" | "auth.refresh.grace" | "auth.jwt.verified" | "auth.jwt.rejected" | "auth.signout" | "auth.session.revoked" | "auth.session.revoked_all" | "auth.audience.rejected" | "auth.audience.minted" | "auth.guest.created" | "auth.guest.restored" | "auth.guest.upgraded" | "auth.guest.failed" | "auth.role.granted" | "auth.role.revoked" | "auth.account.deleted" | "auth.account.exported" | "room.restriction.issued" | "room.restriction.lifted" | "auth.funnel.mode_selected" | "auth.funnel.email_entered" | "auth.funnel.ceremony_started" | "auth.funnel.ceremony_failed" | "auth.funnel.done_shown" | "room_event.activated" | "room_event.completed" | "room_event.reminder_dispatched" | "room_event.reminder_failed";
 export type AuthErrorCode = "username_taken" | "credential_taken" | "email_taken" | "email_not_verified" | "no_email" | "image_upload_forbidden" | "image_upload_rate_limited" | "invalid_image_type" | "image_too_large" | "image_upload_failed" | "bio_forbidden" | "bio_invalid" | "bio_too_long" | "profile_rate_limited" | "profile_ip_missing" | "otp_invalid" | "otp_expired" | "otp_attempts_exceeded" | "otp_resend_cooldown" | "otp_resend_limit" | "otp_global_limit" | "otp_send_failed" | "challenge_expired" | "unknown_credential" | "invalid_assertion_type" | "invalid_assertion_origin" | "user_verification_required" | "invalid_signature" | "user_not_found" | "missing_audience" | "audience_not_allowed" | "audience_mismatch" | "no_session" | "no_passkey" | "refresh_token_invalid" | "refresh_token_expired" | "refresh_epoch_stale" | "refresh_user_epoch_stale" | "refresh_reuse_detected" | "guest_rate_limited" | "guest_global_limit" | "guest_username_exhausted" | "guest_session" | "passkey_exists" | "already_upgraded" | "malformed_token" | "unknown_key" | "verification_failed" | "webauthn_not_allowed" | "webauthn_security" | "webauthn_invalid_state" | "webauthn_not_supported" | "webauthn_constraint" | "webauthn_aborted" | "webauthn_unknown" | "internal_error";
 /** One flat record per event = one row in the `auth_events` stream. */
 export interface AuthEventRecord {
@@ -47,6 +47,10 @@ export interface AuthEventRecord {
     occurrenceId: string | null;
     dispatchKind: string | null;
     recipients: number | null;
+    /** Account-lifecycle fields: whether the account was a guest, and what an
+     * erasure or export touched, as per-section row counts. */
+    guest: boolean | null;
+    counts: Record<string, number> | null;
 }
 /** Body accepted by `POST /api/events` from the dialog. */
 export interface BeaconBody {

package/dist/sdk/types/index.d.ts

@@ -1,3 +1,4 @@
+export type { AccountDeleteRequest, AccountDeleteResponse, AccountErasureCounts, AccountErasureEntry, AccountErasureFeed, AccountErasureResult, AccountExport, AccountExportAccount, AccountExportActionEvent, AccountExportActionSession, AccountExportAttendance, AccountExportAuthoredEvent, AccountExportCharacterStateTime, AccountExportFollow, AccountExportGameEvent, AccountExportOtherService, AccountExportOwnedRoom, AccountExportPasskey, AccountExportRoomEvents, AccountExportRoomMembership, AccountExportRoomPlayerState, AccountExportRoomPresence, AccountExportRoomRestriction, AccountExportRoomSettings, AccountExportRooms, AccountExportRsvp, AccountExportSettingsSurface, AccountExportStudySubject, AccountExportXpGrant, AccountExportXpSummary, } from "./account-data";
 export type { ActionCurve, ActionEventRequest, ActionEventResponse, ActionsApi, ActiveActionState, FinishActionRequest, ListStudySessionsOptions, ListStudySubjectsOptions, StartActionInput, StartActionResult, StudyApi, StudySubjectResponse, UseActiveActionOptions, XpEstimateContext, } from "./actions";
 export type { AccountSession, AccountSessionsResponse, AdditionalSession, AuthConfig, AuthResponse, AuthResponseWithWebAuthn, BioNormalization, BioRejection, BioWriteRefusal, BioWriteResult, FlowCredential, FlowUser, PasskeyPluginOptions, RevokeAllSessionsResponse, RevokeSessionResponse, SecurityActivityEntry, SecurityActivityResponse, SessionUser, VerifiedFlowJWT, VerifyOptions, WebAuthnSignature, } from "./auth";
 export type { BodyRegion, CosmeticItem, CosmeticMaterial, CosmeticPaint, CosmeticSlot, EquipConflict, EquippedCosmetic, EquippedCosmetics, EquipRegion, PaintSlot, SettingsConflict, } from "./cosmetics";

package/dist/sdk/types/sdk.d.ts

@@ -312,6 +312,7 @@ export type FlowWidgetProps = {
     theme?: ColorScheme;
 };
 export type DialogHost = {
+    captureFocus: () => void;
     open: (options?: DialogOpenOptions) => void;
     close: () => void;
     destroy: () => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flow-industries/id",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -126,7 +126,7 @@
   ],
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1073.0",
-    "@flow-industries/ui": "^0.19.0",
+    "@flow-industries/ui": "^0.21.0",
     "@hono/otel": "^1.1.2",
     "@openobserve/browser-logs": "^0.3.1",
     "@openobserve/browser-rum": "^0.3.1",