@ikonai/sdk-react-ui 1.1.1 → 1.3.0

package/app/use-ikon-app.d.ts

@@ -122,6 +122,12 @@ export interface UseIkonAppResult {
      * say the session has ended rather than show a generic connection error.
      */
     isSessionExpired: boolean;
+    /**
+     * True when the app's server started and then died before it could serve the session — nearly
+     * always an exception out of the app's own startup code. Terminal: the same bundle crashes the
+     * same way, so the app should say it failed to start instead of waiting out the connect budget.
+     */
+    isStartupFailed: boolean;
     /**
      * UI stores for rendering.
      */

package/auth/auth-service.d.ts

@@ -7,6 +7,17 @@ export interface OAuthCallbackResult {
     token: string;
     provider: LoginMethod;
 }
+/**
+ * Whether a same-origin auth response came from an LB with no `/ikon/auth` route — the app
+ * frontend answered instead of the auth service.
+ *
+ * The marker header settles it outright when present. The shape heuristic below is the fallback
+ * for an auth service deployed before the header existed, and it can only ever guess: it reads a
+ * 404/405 or an HTML 200 as the app frontend answering. That guess has misfired twice on
+ * /email/send's 204 — Express stamps its default text/html content type even on a bodyless
+ * response — which is why an HTML content type counts only together with a 200.
+ */
+export declare function isRouteMissingResponse(response: Response): boolean;
 /**
  * Authenticate anonymously with the Ikon auth service.
  * Returns a session with a token for anonymous users. `flavor` names which not-signed-in identity
@@ -43,12 +54,45 @@ export declare function verifyLoginCode({ email, code, authUrl }: VerifyLoginCod
  * Returns the token and provider if present, or null if not an OAuth callback.
  */
 export declare function parseOAuthCallback(): OAuthCallbackResult | null;
+/**
+ * Sign-in failure parsed from an OAuth callback redirect: the machine code from the `error` query
+ * param, plus the provider the callback names when it knows which one failed.
+ */
+export interface OAuthErrorResult {
+    code: string;
+    provider: LoginMethod | null;
+}
 /**
  * Get the error from an OAuth callback if present.
  */
-export declare function parseOAuthError(): string | null;
+export declare function parseOAuthError(): OAuthErrorResult | null;
+/**
+ * True when the URL asks this tab to skip the local-dev auto-login (`?ikon-signed-out`).
+ *
+ * A local `ikon app run` signs the developer straight in, which is what you want while building —
+ * and exactly what you cannot have while checking the signed-out product. Without this, seeing the
+ * public site means logging out by hand in a throwaway browser profile, so it tends not to happen
+ * and the guest experience ships unlooked-at. Local dev only: it suppresses the injected developer
+ * token and nothing else, so it grants no access and does nothing in a deployed build.
+ */
+export declare function wantsSignedOut(): boolean;
+/**
+ * Human-readable text for an OAuth callback error code. Unknown codes pass through verbatim so a
+ * backend code this build does not know yet still surfaces rather than disappearing.
+ *
+ * The refused-link text is written for the visitor's mental model, not the system's: they clicked
+ * the provider because they have an account THERE, so it must say the pre-existing account is on
+ * this app, must not sound like their provider account is broken, and must point at a concrete
+ * next step — the email code sign-in when this app offers it, since that proves mailbox ownership
+ * and reaches the existing account.
+ */
+export declare function describeAuthError(code: string, provider?: string | null, options?: {
+    emailSignInAvailable?: boolean;
+}): string;
 /**
- * Clear OAuth-related parameters from the URL.
+ * Clear OAuth-related parameters from the URL, preserving the app's own query parameters —
+ * a deep link like /projects/new?prompt=… must survive the OAuth round-trip so the app can
+ * read it after sign-in (the SDK sends path+query as the connect InitialPath).
  */
 export declare function clearOAuthParams(): void;
 /**

package/auth/index.d.ts

@@ -1,5 +1,5 @@
 export type { AuthConfig, AuthContextValue, AuthSession, AuthState, AuthUser, LoginMethod } from './types';
 export { clearAuthSession, isSignedInBootLikely, loadAuthSession, saveAuthSession, sessionToUser } from './storage';
-export { authenticateAnonymous, buildOAuthRedirectUrl, clearOAuthParams, getPasskeyAuthenticationOptions, getPasskeyRegistrationOptions, isPasskeySupported, parseOAuthCallback, parseOAuthError, sendLoginCode, verifyLoginCode, verifyPasskeyAuthentication, verifyPasskeyRegistration, type OAuthCallbackResult, type SendLoginCodeOptions, type VerifyLoginCodeOptions, } from './auth-service';
+export { authenticateAnonymous, buildOAuthRedirectUrl, clearOAuthParams, describeAuthError, getPasskeyAuthenticationOptions, getPasskeyRegistrationOptions, isPasskeySupported, parseOAuthCallback, parseOAuthError, sendLoginCode, verifyLoginCode, verifyPasskeyAuthentication, verifyPasskeyRegistration, type OAuthCallbackResult, type OAuthErrorResult, type SendLoginCodeOptions, type VerifyLoginCodeOptions, } from './auth-service';
 export { AuthProvider, useAuth, useAuthOptional, type AuthProviderProps } from './auth-context';
 export { useAuthGuard, type UseAuthGuardOptions, type UseAuthGuardResult } from './use-auth-guard';