@ibgib/web-gib 0.0.59 → 0.0.60

package/dist/AUTO-GENERATED-version.d.mts

@@ -10,5 +10,5 @@
 /**
  * this is the version of this package, auto-updated in the build process
  */
-export declare const AUTO_GENERATED_VERSION = "0.0.59";
+export declare const AUTO_GENERATED_VERSION = "0.0.60";
 //# sourceMappingURL=AUTO-GENERATED-version.d.mts.map

package/dist/AUTO-GENERATED-version.mjs

@@ -10,5 +10,5 @@
 /**
  * this is the version of this package, auto-updated in the build process
  */
-export const AUTO_GENERATED_VERSION = '0.0.59';
+export const AUTO_GENERATED_VERSION = '0.0.60';
 //# sourceMappingURL=AUTO-GENERATED-version.mjs.map

package/dist/identity/custodian-delegate-helper.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"custodian-delegate-helper.d.mts","sourceRoot":"","sources":["../../src/identity/custodian-delegate-helper.mts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;;;GAKG;AACH,wBAAsB,kCAAkC,CAAC,EACrD,cAAc,GACjB,EAAE;IACC,cAAc,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BlB;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAAC,EAC9C,cAAc,GACjB,EAAE;IACC,cAAc,EAAE,MAAM,CAAC;CAC1B,GAAG,IAAI,CAIP"}
+{"version":3,"file":"custodian-delegate-helper.d.mts","sourceRoot":"","sources":["../../src/identity/custodian-delegate-helper.mts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;;;;GAKG;AACH,wBAAsB,kCAAkC,CAAC,EACrD,cAAc,GACjB,EAAE;IACC,cAAc,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDlB;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAAC,EAC9C,cAAc,GACjB,EAAE;IACC,cAAc,EAAE,MAAM,CAAC;CAC1B,GAAG,IAAI,CAIP"}

package/dist/identity/custodian-delegate-helper.mjs

@@ -5,6 +5,8 @@
  * for full-custodian / passwordless identities.
  */
 import { getUUID, hash, HashAlgorithm, extractErrorMsg } from "@ibgib/helper-gib/dist/helpers/utils-helper.mjs";
+import { storageGet, storagePut } from "../storage/storage-helpers.web.mjs";
+import { getGlobalDbName, getGlobalStoreName } from "../helpers.web.mjs";
 const LOCAL_STORAGE_PREFIX = 'ibgib_custodian_delegate_secret_';
 /**
  * Retrieves or generates a high-entropy local delegate secret for a passwordless custodian identity.
@@ -19,18 +21,33 @@ export async function deriveLocalCustodianDelegateSecret({ primaryTjpAddr, }) {
             throw new Error('primaryTjpAddr is required to derive local custodian delegate secret (E: a1b2c3d4e5f67890123456789a000101)');
         }
         const key = `${LOCAL_STORAGE_PREFIX}${primaryTjpAddr}`;
-        const existingSecret = localStorage.getItem(key);
+        const dbName = getGlobalDbName();
+        const storeName = getGlobalStoreName();
+        // debugger; // what are the dbName and storeName?
+        const existingSecret = await storageGet({ dbName, storeName, key });
         if (existingSecret) {
             return existingSecret;
         }
         // Generate high-entropy 512-bit SHA hash secret from fresh UUIDs
-        const rawEntropy = `${await getUUID()}-${await getUUID()}-${await getUUID()}-${Date.now()}`;
+        const rawEntropy = await getUUID(32);
         const newSecret = await hash({
             s: rawEntropy,
             algorithm: HashAlgorithm.sha_512
         });
-        localStorage.setItem(key, newSecret);
+        await storagePut({ dbName, storeName, key, value: newSecret });
         return newSecret;
+        // const existingSecret = localStorage.getItem(key);
+        // if (existingSecret) {
+        //     return existingSecret;
+        // }
+        // // Generate high-entropy 512-bit SHA hash secret from fresh UUIDs
+        // const rawEntropy = `${await getUUID()}-${await getUUID()}-${await getUUID()}-${Date.now()}`;
+        // const newSecret = await hash({
+        //     s: rawEntropy,
+        //     algorithm: HashAlgorithm.sha_512
+        // });
+        // localStorage.setItem(key, newSecret);
+        // return newSecret;
     }
     catch (error) {
         console.error(`${lc} ${extractErrorMsg(error)}`);

package/dist/identity/custodian-delegate-helper.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"custodian-delegate-helper.mjs","sourceRoot":"","sources":["../../src/identity/custodian-delegate-helper.mts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAEhH,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,EACrD,cAAc,GAGjB;IACG,MAAM,EAAE,GAAG,IAAI,kCAAkC,CAAC,IAAI,GAAG,CAAC;IAC1D,IAAI,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAClI,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,cAAc,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,cAAc,EAAE,CAAC;YACjB,OAAO,cAAc,CAAC;QAC1B,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,GAAG,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC5F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC;YACzB,CAAC,EAAE,UAAU;YACb,SAAS,EAAE,aAAa,CAAC,OAAO;SACnC,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,SAAS,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAAC,EAC9C,cAAc,GAGjB;IACG,IAAI,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAChC,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,cAAc,EAAE,CAAC;IACvD,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"custodian-delegate-helper.mjs","sourceRoot":"","sources":["../../src/identity/custodian-delegate-helper.mts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,EACrD,cAAc,GAGjB;IACG,MAAM,EAAE,GAAG,IAAI,kCAAkC,CAAC,IAAI,GAAG,CAAC;IAC1D,IAAI,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAClI,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,cAAc,EAAE,CAAC;QAEvD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;QAEvC,kDAAkD;QAGlD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,IAAI,cAAc,EAAE,CAAC;YACjB,OAAO,cAAc,CAAC;QAC1B,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC;YACzB,CAAC,EAAE,UAAU;YACb,SAAS,EAAE,aAAa,CAAC,OAAO;SACnC,CAAC,CAAC;QACH,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE/D,OAAO,SAAS,CAAC;QAGjB,oDAAoD;QACpD,wBAAwB;QACxB,6BAA6B;QAC7B,IAAI;QAEJ,oEAAoE;QACpE,+FAA+F;QAC/F,iCAAiC;QACjC,qBAAqB;QACrB,uCAAuC;QACvC,MAAM;QAEN,wCAAwC;QACxC,oBAAoB;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAAC,EAC9C,cAAc,GAGjB;IACG,IAAI,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAChC,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,cAAc,EAAE,CAAC;IACvD,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC"}

package/dist/identity/identity-constants.mjs

@@ -56,8 +56,8 @@ export const IDENTITY_POOL_ID_APP_AUTHORIZE = 'identity-app-authorize';
 export const IDENTITY_POOL_ID_APP_EPOCH = 'identity-app-epoch';
 // ===========================================================================
 // KDF SALTS
-// Used to derive tier-specific MasterSecrets from a root passphrase.
-// Different salt per tier ensures independent secrets even with same passphrase.
+// Used to derive tier-specific MasterSecrets from a root password.
+// Different salt per tier ensures independent secrets even with same password.
 // ===========================================================================
 export const IDENTITY_KDF_SALT_META = 'ibgib-identity-meta-v1';
 export const IDENTITY_KDF_SALT_LOCAL = 'ibgib-identity-local-v1';

package/dist/identity/identity-constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"identity-constants.mjs","sourceRoot":"","sources":["../../src/identity/identity-constants.mts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,kEAAkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AACpE,mEAAmE;AACnE,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,sDAAsD;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAC5E,uDAAuD;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E,8EAA8E;AAC9E,WAAW;AACX,gEAAgE;AAChE,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AACjE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AACvE,yEAAyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E,+DAA+D;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAC3D,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAEjE,uDAAuD;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AACvE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAE/D,8EAA8E;AAC9E,YAAY;AACZ,qEAAqE;AACrE,iFAAiF;AACjF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,CAAC;AAErE,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AACzE,mFAAmF;AACnF,MAAM,CAAC,MAAM,oCAAoC,GAAG,4BAA4B,CAAC;AACjF,iFAAiF;AACjF,MAAM,CAAC,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AACrE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AAE7E,8EAA8E;AAC9E,2CAA2C;AAC3C,wEAAwE;AACxE,kDAAkD;AAClD,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC1E,qDAAqD;AACrD,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,kCAAkC,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"identity-constants.mjs","sourceRoot":"","sources":["../../src/identity/identity-constants.mts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,kEAAkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AACpE,mEAAmE;AACnE,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,sDAAsD;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAC5E,uDAAuD;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E,8EAA8E;AAC9E,WAAW;AACX,gEAAgE;AAChE,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AACjE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AACvE,yEAAyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E,+DAA+D;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAC3D,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAEjE,uDAAuD;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AACvE;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAE/D,8EAA8E;AAC9E,YAAY;AACZ,mEAAmE;AACnE,+EAA+E;AAC/E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAA2B,CAAC;AAErE,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AACzE,mFAAmF;AACnF,MAAM,CAAC,MAAM,oCAAoC,GAAG,4BAA4B,CAAC;AACjF,iFAAiF;AACjF,MAAM,CAAC,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AACrE,qEAAqE;AACrE,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AAE7E,8EAA8E;AAC9E,2CAA2C;AAC3C,wEAAwE;AACxE,kDAAkD;AAClD,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC1E,qDAAqD;AACrD,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,kCAAkC,GAAG,QAAQ,CAAC"}

package/dist/identity/identity-types.d.mts

@@ -187,17 +187,17 @@ export interface IIdentityService {
     getTip(tjpGib: IbGibAddr): Promise<KeystoneIbGib_V1>;
 }
 /**
- * Inputs for deriving a tier-specific MasterSecret from a root passphrase.
+ * Inputs for deriving a tier-specific MasterSecret from a root password.
  *
  * Each tier uses a different salt to ensure independent MasterSecrets
- * even when the same passphrase is used for all tiers.
+ * even when the same password is used for all tiers.
  *
  * @see docs/identity/KEYSTONES.md for per-tier salt conventions
  * @see identity-helpers.mts for derivation functions
  */
 export interface MasterSecretDerivationContext {
-    /** The root passphrase (sovereign path) or server secret (custodial path). */
-    passphrase: string;
+    /** The root password (sovereign path) or server secret (custodial path). */
+    password: string;
     /**
      * Tier-specific salt (e.g., `IDENTITY_KDF_SALT_META`, `IDENTITY_KDF_SALT_LOCAL`).
      * @see identity-constants.mts

package/dist/identity/identity-types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-types.d.mts","sourceRoot":"","sources":["../../src/identity/identity-types.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAMrG;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACrD;;;;;;;;;OASG;IACH,mBAAmB,EAAE,SAAS,EAAE,CAAC;IAEjC;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACtD;;;;;;;;;;;;OAYG;IACH,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IACzD,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,WAAW,EAAE,SAAS,CAAC;IAEvB;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IAEtB;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,SAAS,CAAC;CACvC;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACjC,yEAAyE;IACzE,UAAU,EAAE,SAAS,CAAC;IAEtB,oEAAoE;IACpE,kBAAkB,EAAE,MAAM,CAAC;IAE3B,sDAAsD;IACtD,WAAW,EAAE,SAAS,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACpC,4CAA4C;IAC5C,UAAU,EAAE,SAAS,CAAC;IAEtB,sDAAsD;IACtD,WAAW,EAAE,SAAS,CAAC;IAEvB;;;OAGG;IACH,cAAc,EAAE,SAAS,CAAC;IAE1B,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;IAErE;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEzD;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACxD;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,6BAA6B;IAC1C,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"identity-types.d.mts","sourceRoot":"","sources":["../../src/identity/identity-types.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAMrG;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACrD;;;;;;;;;OASG;IACH,mBAAmB,EAAE,SAAS,EAAE,CAAC;IAEjC;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACtD;;;;;;;;;;;;OAYG;IACH,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IACzD,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,WAAW,EAAE,SAAS,CAAC;IAEvB;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IAEtB;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,SAAS,CAAC;CACvC;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACjC,yEAAyE;IACzE,UAAU,EAAE,SAAS,CAAC;IAEtB,oEAAoE;IACpE,kBAAkB,EAAE,MAAM,CAAC;IAE3B,sDAAsD;IACtD,WAAW,EAAE,SAAS,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACpC,4CAA4C;IAC5C,UAAU,EAAE,SAAS,CAAC;IAEtB,sDAAsD;IACtD,WAAW,EAAE,SAAS,CAAC;IAEvB;;;OAGG;IACH,cAAc,EAAE,SAAS,CAAC;IAE1B,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;IAErE;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEzD;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACxD;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,6BAA6B;IAC1C,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/ui/component/identity/add-device/add-device.css

@@ -5,22 +5,75 @@
 }
 
 .component-container {
-    padding: 1.5rem;
+    padding: 1.75rem;
     background: var(--ibgib-bg-surface, #1e1e2e);
     color: var(--ibgib-text-primary, #cdd6f4);
     border-radius: 12px;
     box-shadow: 0 4px 20px rgba(0, 0, 0, 0.3);
 }
 
+.hidden {
+    display: none !important;
+}
+
+.sso-options {
+    display: flex;
+    flex-direction: column;
+    gap: 0.75rem;
+}
+
+.sso-btn {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 0.75rem;
+    padding: 0.8rem 1.25rem;
+    border: 1px solid rgba(255, 255, 255, 0.15);
+    border-radius: 8px;
+    background: #181825;
+    color: #cdd6f4;
+    font-size: 0.95rem;
+    font-weight: 600;
+    cursor: pointer;
+    transition: transform 0.15s ease, background 0.15s ease, border-color 0.15s ease;
+}
+
+.sso-btn:hover {
+    transform: translateY(-1px);
+    background: #313244;
+    border-color: #89b4fa;
+}
+
+.divider {
+    display: flex;
+    align-items: center;
+    text-align: center;
+    margin: 0.75rem 0;
+    color: #a6adc8;
+    font-size: 0.75rem;
+    font-weight: 700;
+    letter-spacing: 1px;
+}
+
+.divider::before, .divider::after {
+    content: '';
+    flex: 1;
+    border-bottom: 1px solid rgba(255, 255, 255, 0.1);
+}
+
+.divider span {
+    padding: 0 0.75rem;
+}
+
 .input-group {
-    margin-bottom: 1.2rem;
+    margin-bottom: 1rem;
     display: flex;
     flex-direction: column;
     gap: 0.4rem;
 }
 
 .input-group label {
-    font-size: 0.95rem;
+    font-size: 0.92rem;
     font-weight: 500;
     color: var(--ibgib-text-secondary, #a6adc8);
 }
@@ -50,7 +103,7 @@
 }
 
 .action-row {
-    margin-top: 1.5rem;
+    margin-top: 1rem;
 }
 
 .action-btn {
@@ -58,7 +111,7 @@
     padding: 0.85rem 1.5rem;
     border: none;
     border-radius: 8px;
-    background: linear-gradient(135deg, #50fa7b, #40c767);
+    background: linear-gradient(135deg, #89b4fa, #74c7ec);
     color: #11111b;
     font-size: 1rem;
     font-weight: 600;
@@ -75,6 +128,12 @@
     transform: translateY(0);
 }
 
+.action-btn:disabled {
+    opacity: 0.6;
+    cursor: not-allowed;
+    transform: none;
+}
+
 .status-area {
     margin-top: 1.2rem;
     padding: 1rem;
@@ -100,34 +159,51 @@
     color: #a6e3a1;
 }
 
-.hidden {
-    display: none !important;
-}
-
-.collapsed {
-    display: none !important;
+.status-msg {
+    margin: 0;
+    line-height: 1.4;
+    word-break: break-word;
 }
 
 .result-area {
     margin-top: 1.5rem;
-    padding: 1.2rem;
-    border-radius: 8px;
-    background: rgba(166, 227, 161, 0.1);
+    padding: 1.25rem;
+    background: rgba(166, 227, 161, 0.08);
     border: 1px solid #a6e3a1;
+    border-radius: 8px;
+}
+
+.result-area.collapsed {
+    display: none;
 }
 
 .result-area h3 {
     margin-top: 0;
+    margin-bottom: 0.5rem;
     color: #a6e3a1;
+    font-size: 1.15rem;
+}
+
+.address-label {
+    margin-bottom: 0.25rem;
+    font-size: 0.85rem;
+    color: var(--ibgib-text-secondary, #a6adc8);
 }
 
 .keystone-addr {
     display: block;
-    word-break: break-all;
-    padding: 0.6rem;
+    padding: 0.5rem 0.75rem;
     background: #11111b;
     border-radius: 6px;
     font-family: monospace;
     font-size: 0.85rem;
-    color: #89b4fa;
+    color: #f9e2af;
+    word-break: break-all;
+    margin-bottom: 0.75rem;
+}
+
+.warning {
+    margin: 0;
+    font-size: 0.85rem;
+    color: #a6adc8;
 }

package/dist/ui/component/identity/add-device/add-device.d.mts

@@ -19,11 +19,20 @@ export declare class AddDeviceComponentMeta extends IbGibDynamicComponentMetaBas
 interface AddDeviceElements extends ElementsBase {
     containerEl: HTMLDivElement;
     titleEl: HTMLHeadingElement;
+    subtitleEl: HTMLParagraphElement;
+    surfaceEntryEl: HTMLDivElement;
+    btnGoogleSso: HTMLButtonElement;
+    btnGithubSso: HTMLButtonElement;
     inputIdentifier: HTMLInputElement;
+    btnContinueEmail: HTMLButtonElement;
+    sectionCodeVerification: HTMLDivElement;
+    inputCode: HTMLInputElement;
+    btnVerifyCode: HTMLButtonElement;
+    sectionSovereignPassword: HTMLDivElement;
+    inputPassword: HTMLInputElement;
+    btnAuthorizePassword: HTMLButtonElement;
     inputDeviceTag: HTMLInputElement;
-    inputPassphrase: HTMLInputElement;
     checkboxMakeActive: HTMLInputElement;
-    btnAddDeviceEl: HTMLButtonElement;
     statusArea: HTMLDivElement;
     statusText: HTMLParagraphElement;
     resultAreaEl: HTMLDivElement;
@@ -34,16 +43,24 @@ interface AddDeviceElements extends ElementsBase {
  */
 export declare class AddDeviceComponentInstance extends IbGibFormInstanceBase<IbGib_V1, AddDeviceElements> implements IbGibDynamicComponentInstance<IbGib_V1, AddDeviceElements> {
     protected lc: string;
+    private _stagedEmail?;
+    private _stagedPrimaryTjpAddr?;
+    private _stagedPrimaryKeystone?;
+    private _stagedPrimaryGraph?;
     constructor();
     initialize(opts: IbGibDynamicComponentInstanceInitOpts): Promise<void>;
     created(): Promise<void>;
     disconnected(): Promise<void>;
     private initHandlers;
-    private setButtonLoading;
-    /**
-     * Executes the Phase 1 Add-Device pairing orchestration flow.
-     */
-    protected handleAddDevice(): Promise<void>;
+    private getDeviceTag;
+    protected handleSsoClick(providerId: 'google' | 'github'): Promise<void>;
+    protected handleContinueEmail(): Promise<void>;
+    protected handleVerifyCode(): Promise<void>;
+    private completeCustodialDelegateOnboarding;
+    protected handleAuthorizePassword(): Promise<void>;
+    private finalizeDeviceOnboarding;
+    protected renderUI(): Promise<void>;
+    handleContextUpdated(): Promise<void>;
 }
 export {};
 //# sourceMappingURL=add-device.d.mts.map

package/dist/ui/component/identity/add-device/add-device.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"add-device.d.mts","sourceRoot":"","sources":["../../../../../src/ui/component/identity/add-device/add-device.mts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAY3D,OAAO,EAAE,6BAA6B,EAAE,qBAAqB,EAAG,MAAM,yCAAyC,CAAC;AAChH,OAAO,EACH,YAAY,EAAE,6BAA6B,EAC3C,qCAAqC,EACxC,MAAM,2BAA2B,CAAC;AAMnC,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,6BAA6B;IACrE,SAAS,CAAC,EAAE,EAAE,MAAM,CAA8B;IAElD,WAAW,CAAC,EAAE,MAAM,CAAgD;IACpE,aAAa,SAA6B;IAE1C,cAKC;IAEK,cAAc,CAAC,EACjB,IAAI,EACJ,SAAS,EACZ,EAAE;QACC,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,SAAS,CAAC;KACxB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CASzC;CACJ;AAED,UAAU,iBAAkB,SAAQ,YAAY;IAC5C,WAAW,EAAE,cAAc,CAAC;IAC5B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,eAAe,EAAE,gBAAgB,CAAC;IAClC,cAAc,EAAE,gBAAgB,CAAC;IACjC,eAAe,EAAE,gBAAgB,CAAC;IAClC,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,cAAc,EAAE,iBAAiB,CAAC;IAClC,UAAU,EAAE,cAAc,CAAC;IAC3B,UAAU,EAAE,oBAAoB,CAAC;IACjC,YAAY,EAAE,cAAc,CAAC;IAC7B,cAAc,EAAE,WAAW,CAAC;CAC/B;AAED;;GAEG;AACH,qBAAa,0BACT,SAAQ,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,CACzD,YAAW,6BAA6B,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IAErE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAkC;IAEtD,cAEC;IAEc,UAAU,CAAC,IAAI,EAAE,qCAAqC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;IAEc,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAmBtC;IAEc,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,UAAgB,eAAe,kBAuP9B;CACJ"}
+{"version":3,"file":"add-device.d.mts","sourceRoot":"","sources":["../../../../../src/ui/component/identity/add-device/add-device.mts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAc3D,OAAO,EAAE,6BAA6B,EAAE,qBAAqB,EAAG,MAAM,yCAAyC,CAAC;AAChH,OAAO,EACH,YAAY,EAAE,6BAA6B,EAC3C,qCAAqC,EACxC,MAAM,2BAA2B,CAAC;AASnC,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,6BAA6B;IACrE,SAAS,CAAC,EAAE,EAAE,MAAM,CAA8B;IAElD,WAAW,CAAC,EAAE,MAAM,CAAgD;IACpE,aAAa,SAA6B;IAE1C,cAKC;IAEK,cAAc,CAAC,EACjB,IAAI,EACJ,SAAS,EACZ,EAAE;QACC,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,SAAS,CAAC;KACxB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CASzC;CACJ;AAED,UAAU,iBAAkB,SAAQ,YAAY;IAC5C,WAAW,EAAE,cAAc,CAAC;IAC5B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,UAAU,EAAE,oBAAoB,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,iBAAiB,CAAC;IAChC,YAAY,EAAE,iBAAiB,CAAC;IAChC,eAAe,EAAE,gBAAgB,CAAC;IAClC,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,uBAAuB,EAAE,cAAc,CAAC;IACxC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,aAAa,EAAE,iBAAiB,CAAC;IACjC,wBAAwB,EAAE,cAAc,CAAC;IACzC,aAAa,EAAE,gBAAgB,CAAC;IAChC,oBAAoB,EAAE,iBAAiB,CAAC;IACxC,cAAc,EAAE,gBAAgB,CAAC;IACjC,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,UAAU,EAAE,cAAc,CAAC;IAC3B,UAAU,EAAE,oBAAoB,CAAC;IACjC,YAAY,EAAE,cAAc,CAAC;IAC7B,cAAc,EAAE,WAAW,CAAC;CAC/B;AAED;;GAEG;AACH,qBAAa,0BACT,SAAQ,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,CACzD,YAAW,6BAA6B,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IAErE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAkC;IAGtD,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,qBAAqB,CAAC,CAAS;IACvC,OAAO,CAAC,sBAAsB,CAAC,CAAmB;IAClD,OAAO,CAAC,mBAAmB,CAAC,CAAiB;IAE7C,cAEC;IAEc,UAAU,CAAC,IAAI,EAAE,qCAAqC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;IAEc,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAmCtC;IAEc,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3C;IAED,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,YAAY;IAiBpB,UAAgB,cAAc,CAAC,UAAU,EAAE,QAAQ,GAAG,QAAQ,iBA2D7D;IAMD,UAAgB,mBAAmB,kBAgElC;IAED,UAAgB,gBAAgB,kBA2G/B;YAMa,mCAAmC;IA2FjD,UAAgB,uBAAuB,kBAyItC;YAMa,wBAAwB;IA+FtC,UAAyB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAEjD;IAEc,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEnD;CACJ"}

package/dist/ui/component/identity/add-device/add-device.html

@@ -1,37 +1,111 @@
 <div id="container" class="component-container">
-    <h2 id="title">Sign In New Device</h2>
+    <h2 id="title">Sign In to Device</h2>
     <div class="content">
-        <p>Sign in on this device to add it to an existing account.</p>
+        <p id="subtitle" style="margin-bottom: 1.25rem; font-size: 0.95rem; color: #a6adc8;">
+            Sign in on this device to link and synchronize your identity.
+        </p>
 
-        <div class="input-group">
-            <label for="input-identifier">Email</label>
-            <input type="text" id="input-identifier" placeholder="Enter registered email..." class="text-input">
-        </div>
+        <!-- ----------------------------------------------------------------- -->
+        <!-- Surface 1: Main Sign In Entry Surface                             -->
+        <!-- ----------------------------------------------------------------- -->
+        <div id="surface-entry">
+            <div class="sso-options"
+                style="display: flex; flex-direction: column; gap: 0.6rem; margin-bottom: 1.25rem;">
+                <button id="btn-google-sso" class="sso-btn google-btn">
+                    <svg width="18" height="18" viewBox="0 0 24 24">
+                        <path fill="#4285F4"
+                            d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" />
+                        <path fill="#34A853"
+                            d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" />
+                        <path fill="#FBBC05"
+                            d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l2.85-2.22.81-.63z" />
+                        <path fill="#EA4335"
+                            d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84c.87-2.6 3.3-4.52 6.16-4.52z" />
+                    </svg>
+                    Continue with Google
+                </button>
+                <button id="btn-github-sso" class="sso-btn github-btn">
+                    <svg width="18" height="18" viewBox="0 0 24 24" fill="currentColor">
+                        <path
+                            d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0024 12c0-6.63-5.37-12-12-12z" />
+                    </svg>
+                    Continue with GitHub
+                </button>
+            </div>
 
-        <div class="input-group">
-            <label for="input-device-tag">Device Name</label>
-            <input type="text" id="input-device-tag" placeholder="e.g. laptop, phone, living-room..."
-                class="text-input">
-        </div>
+            <div class="divider">
+                <span>OR SIGN IN WITH EMAIL</span>
+            </div>
 
-        <div class="input-group">
-            <label for="input-passphrase">Master Passphrase</label>
-            <input type="password" id="input-passphrase" placeholder="Enter your master passphrase..."
-                class="secret-input">
+            <div class="input-group">
+                <label for="input-identifier">Email</label>
+                <input type="email" id="input-identifier" placeholder="Enter your registered email..."
+                    class="text-input">
+            </div>
+
+            <div class="action-row" style="margin-top: 0.75rem;">
+                <button id="btn-continue-email" class="action-btn">Continue with Email</button>
+            </div>
         </div>
 
-        <div class="checkbox-group" style="margin-bottom: 1.5rem; display: flex; align-items: center; gap: 0.5rem;">
-            <input type="checkbox" id="checkbox-make-active" checked
-                style="cursor: pointer; width: 1rem; height: 1rem;">
-            <label for="checkbox-make-active" style="cursor: pointer; font-size: 0.9rem; user-select: none;">Set as
-                active device on this browser</label>
+        <!-- ----------------------------------------------------------------- -->
+        <!-- Surface 2 (Conditional): 6-Digit Email OTP Verification           -->
+        <!-- ----------------------------------------------------------------- -->
+        <div id="section-code-verification" class="input-group hidden"
+            style="margin-top: 1.25rem; padding: 1rem; border: 1px dashed #89b4fa; border-radius: 8px; background: rgba(137, 180, 250, 0.05);">
+            <label for="input-code" style="font-weight: bold; color: #89b4fa;">✉️ Enter 6-Digit Email Verification
+                Code</label>
+            <p style="font-size: 0.82rem; color: #a6adc8; margin-top: 0.25rem; margin-bottom: 0.75rem;">Check your email
+                for your 6-digit verification code:</p>
+            <div style="display: flex; gap: 0.5rem; flex-wrap: wrap; align-items: center;">
+                <input type="text" id="input-code" maxlength="6" placeholder="123456" class="text-input"
+                    style="font-family: monospace; font-size: 1.2rem; letter-spacing: 4px; text-align: center; max-width: 160px;">
+                <button id="btn-verify-code" class="action-btn" style="white-space: nowrap; width: auto;">Verify
+                    Code</button>
+            </div>
         </div>
 
-        <div class="action-row">
-            <button id="btn-add-device" class="action-btn">Sign In</button>
+        <!-- ----------------------------------------------------------------- -->
+        <!-- Surface 3 (Conditional): Sovereign Primary Password Entry        -->
+        <!-- ----------------------------------------------------------------- -->
+        <div id="section-sovereign-password" class="input-group hidden"
+            style="margin-top: 1.25rem; padding: 1rem; border: 1px dashed #f59e0b; border-radius: 8px; background: rgba(245, 158, 11, 0.05);">
+            <label for="input-password" style="font-weight: bold; color: #f59e0b;">🔐 Primary Password
+                Required</label>
+            <p style="font-size: 0.82rem; color: #a6adc8; margin-top: 0.25rem; margin-bottom: 0.75rem;">This sovereign
+                identity requires your master password to authorize this device:</p>
+            <div class="input-group">
+                <input type="password" id="input-password" placeholder="Enter your master password..."
+                    class="secret-input text-input">
+            </div>
+            <div class="action-row" style="margin-top: 0.5rem;">
+                <button id="btn-authorize-password" class="action-btn">Authorize & Pair Device</button>
+            </div>
         </div>
 
-        <div class="switch-workflow" style="margin-top: 1.2rem; text-align: center; font-size: 0.9rem; color: #a6adc8;">
+        <!-- ----------------------------------------------------------------- -->
+        <!-- Advanced Settings (Collapsible Device Tag & Active Toggle)        -->
+        <!-- ----------------------------------------------------------------- -->
+        <details id="details-device-options"
+            style="margin-top: 1.25rem; font-size: 0.85rem; color: #a6adc8; cursor: pointer;">
+            <summary style="user-select: none; font-weight: 500;">⚙️ Advanced Device Options</summary>
+            <div style="padding-top: 0.75rem;">
+                <div class="input-group" style="margin-bottom: 0.75rem;">
+                    <label for="input-device-tag" style="font-size: 0.82rem;">Device Name / Tag</label>
+                    <input type="text" id="input-device-tag" placeholder="e.g. laptop, phone, living-room..."
+                        class="text-input" style="font-size: 0.88rem; padding: 0.55rem 0.8rem;">
+                </div>
+                <div class="checkbox-group" style="display: flex; align-items: center; gap: 0.5rem;">
+                    <input type="checkbox" id="checkbox-make-active" checked
+                        style="cursor: pointer; width: 0.95rem; height: 0.95rem;">
+                    <label for="checkbox-make-active"
+                        style="cursor: pointer; font-size: 0.82rem; user-select: none;">Set as active identity on this
+                        browser</label>
+                </div>
+            </div>
+        </details>
+
+        <div class="switch-workflow" style="margin-top: 1.5rem; text-align: center; font-size: 0.9rem; color: #a6adc8;">
             Need a new identity? <button id="btn-switch-create-account" class="link-btn"
                 style="background: none; border: none; color: #89b4fa; font-weight: 600; cursor: pointer; text-decoration: underline; padding: 0; font-size: 0.9rem;">Create
                 Account</button>