@luckystack/core 0.5.0 → 0.6.0

package/dist/{pageRouteValidation-BzsRvO6x.d.ts → pageRouteValidation-DfiiLorR.d.ts}

@@ -459,6 +459,37 @@ interface AuthConfig {
      * DEFAULT `/confirm-email-change`.
      */
     emailChangeConfirmPath: string;
+    /**
+     * Passwordless email-code login (ADR 0024): the user enters their email,
+     * receives a short numeric code, and signs in by typing it. Requires a
+     * registered email sender (`@luckystack/email`). DEFAULT `false`.
+     * Anti-enumeration: the request endpoint always answers "sent".
+     */
+    emailCodeLogin: boolean;
+    /** Email-code TTL in seconds (login + 2FA fallback codes). DEFAULT 600. */
+    emailCodeTtlSeconds: number;
+    /** Email-code length in digits. DEFAULT 6. */
+    emailCodeLength: number;
+    /** Wrong-code attempts before an email code is burned. DEFAULT 5. */
+    emailCodeMaxAttempts: number;
+    /**
+     * Second factor at login (ADR 0024). `'optional'` = per-user opt-in: a user
+     * who enrolled an authenticator app (TOTP — Google/Microsoft Authenticator,
+     * Authy, …) must answer a 2FA challenge after their password/email-code is
+     * verified. `'disabled'` (DEFAULT) = the challenge step never triggers, even
+     * for enrolled users (kill switch).
+     */
+    twoFactor: 'disabled' | 'optional';
+    /**
+     * Allow "send the code to my email instead" as a 2FA fallback channel for
+     * enrolled users (lost phone). Requires a registered email sender.
+     * DEFAULT `true` (recovery codes always work regardless).
+     */
+    twoFactorEmailFallback: boolean;
+    /** Pending 2FA login-challenge TTL in seconds. DEFAULT 300. */
+    twoFactorChallengeTtlSeconds: number;
+    /** Wrong-code attempts before a pending 2FA challenge is burned. DEFAULT 5. */
+    twoFactorMaxAttempts: number;
 }
 interface OfflineQueueConfig {
     /** Hard cap on items per queue (api + sync are tracked separately). Default 200. */

package/dist/{projectConfig-P2AHHQVW.js → projectConfig-USHD3PRE.js}

@@ -4,7 +4,7 @@ import {
   getProjectName,
   isProjectConfigRegistered,
   registerProjectConfig
-} from "./chunk-ECWDUWBG.js";
+} from "./chunk-3HQDGXMX.js";
 import "./chunk-USQA6QTX.js";
 export {
   DEFAULT_PROJECT_CONFIG,
@@ -13,4 +13,4 @@ export {
   isProjectConfigRegistered,
   registerProjectConfig
 };
-//# sourceMappingURL=projectConfig-P2AHHQVW.js.map
+//# sourceMappingURL=projectConfig-USHD3PRE.js.map

package/dist/{sentrySetup-552JVLHJ.js → sentrySetup-HGQN5FIP.js}

@@ -4,7 +4,7 @@ import {
   initSharedSentry,
   setSentryUser,
   startSpan
-} from "./chunk-ELHTLIEX.js";
+} from "./chunk-KPQX46TT.js";
 import "./chunk-USQA6QTX.js";
 export {
   captureException,
@@ -13,4 +13,4 @@ export {
   setSentryUser,
   startSpan
 };
-//# sourceMappingURL=sentrySetup-552JVLHJ.js.map
+//# sourceMappingURL=sentrySetup-HGQN5FIP.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@luckystack/core",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "private": false,
   "publishConfig": {
     "access": "public",