@luminaryworks/auth-react 0.4.5 → 0.6.0

package/dist/index.js

@@ -1,4 +1,4 @@
-(function(){if(typeof document==="undefined")return;var id="lw-auth-react-headless-login";if(document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent="/* src/HeadlessLoginPanel.module.scss */\n.HeadlessLoginPanel_module_panel {\n  --lw-auth-theme: #1677ff;\n  --lw-auth-theme-deep: color-mix(in srgb, var(--lw-auth-theme) 72%, #000);\n  width: min(100%, 400px);\n  padding: 28px 28px 22px;\n  border-radius: 16px;\n  background: rgba(255, 255, 255, 0.96);\n  color: #14212b;\n  box-shadow: 0 24px 64px rgba(15, 23, 42, 0.28);\n  font-family:\n    \"Segoe UI\",\n    \"PingFang SC\",\n    \"Noto Sans SC\",\n    sans-serif;\n}\n.HeadlessLoginPanel_module_brand {\n  display: flex;\n  gap: 14px;\n  align-items: center;\n  margin-bottom: 12px;\n}\n.HeadlessLoginPanel_module_logo {\n  border-radius: 12px;\n  display: block;\n}\n.HeadlessLoginPanel_module_product {\n  margin: 0;\n  font-size: 13px;\n  font-weight: 650;\n  letter-spacing: 0.04em;\n  text-transform: uppercase;\n  color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_title {\n  margin: 2px 0 0;\n  font-size: 22px;\n  font-weight: 700;\n  line-height: 1.25;\n}\n.HeadlessLoginPanel_module_subtitle {\n  margin: 0 0 18px;\n  font-size: 14px;\n  line-height: 1.5;\n  color: #4b5c68;\n}\n.HeadlessLoginPanel_module_form {\n  display: grid;\n  gap: 10px;\n}\n.HeadlessLoginPanel_module_socialStack {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 10px;\n  font-size: 12px;\n}\n.HeadlessLoginPanel_module_input {\n  width: 100%;\n  box-sizing: border-box;\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 10px 12px;\n  font-size: 14px;\n  outline: none;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_input:focus {\n  border-color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_input:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_passwordField {\n  position: relative;\n  display: flex;\n  align-items: center;\n}\n.HeadlessLoginPanel_module_passwordInput {\n  padding-right: 42px;\n}\n.HeadlessLoginPanel_module_passwordToggle {\n  position: absolute;\n  right: 4px;\n  top: 50%;\n  transform: translateY(-50%);\n  z-index: 1;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 36px;\n  height: 36px;\n  border: none;\n  border-radius: 4px;\n  padding: 0;\n  color: #5a6b76;\n  background: transparent;\n  cursor: pointer;\n}\n.HeadlessLoginPanel_module_passwordToggle:hover:not(:disabled) {\n  color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 12%, transparent);\n}\n.HeadlessLoginPanel_module_passwordToggle:focus-visible {\n  outline: 2px solid var(--lw-auth-theme);\n  outline-offset: 1px;\n}\n.HeadlessLoginPanel_module_passwordToggle:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_primaryBtn {\n  border: none;\n  border-radius: 10px;\n  padding: 11px 14px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #fff;\n  background:\n    linear-gradient(\n      135deg,\n      var(--lw-auth-theme) 0%,\n      var(--lw-auth-theme-deep) 100%);\n}\n.HeadlessLoginPanel_module_primaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialBtn {\n  flex: 1 1 calc(50% - 5px);\n  min-width: min(140px, 100%);\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  gap: 8px;\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 11px 10px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n}\n.HeadlessLoginPanel_module_socialBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialLogo {\n  flex-shrink: 0;\n  display: block;\n}\n.HeadlessLoginPanel_module_logoFallback {\n  width: 18px;\n  height: 18px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--lw-auth-theme) 14%, #fff);\n  color: var(--lw-auth-theme-deep);\n  font-size: 11px;\n  font-weight: 700;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  flex-shrink: 0;\n}\n.HeadlessLoginPanel_module_cancelBtn {\n  margin-top: 10px;\n  width: 100%;\n  border: none;\n  background: transparent;\n  color: #5a6b76;\n  font-size: 13px;\n  cursor: pointer;\n  padding: 8px;\n}\n.HeadlessLoginPanel_module_cancelBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_divider {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  margin: 14px 0;\n  color: #90a0ab;\n}\n.HeadlessLoginPanel_module_dividerLine {\n  flex: 1;\n  height: 1px;\n  background: #d5e0e7;\n}\n.HeadlessLoginPanel_module_dividerText {\n  font-size: 12px;\n  text-transform: uppercase;\n  letter-spacing: 0.08em;\n}\n.HeadlessLoginPanel_module_hint {\n  margin: 10px 0 0;\n  font-size: 12px;\n  color: #6b7c87;\n  line-height: 1.45;\n}\n.HeadlessLoginPanel_module_switchMode {\n  margin: 12px 0 0;\n  text-align: center;\n}\n.HeadlessLoginPanel_module_switchModeBtn {\n  border: none;\n  background: transparent;\n  color: var(--lw-auth-theme);\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  padding: 4px 8px;\n  text-decoration: underline;\n  text-underline-offset: 3px;\n}\n.HeadlessLoginPanel_module_switchModeBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_error {\n  margin: 12px 0 0;\n  font-size: 13px;\n  color: #b42318;\n  line-height: 1.4;\n}\n.HeadlessLoginPanel_module_footer {\n  margin-top: 18px;\n  padding-top: 12px;\n  border-top: 1px solid #e4ebf0;\n  font-size: 12px;\n  color: #6b7c87;\n  display: flex;\n  gap: 8px;\n  justify-content: center;\n}\n/*# sourceMappingURL=index.css.map */";document.head.appendChild(s);})();
+(function(){if(typeof document==="undefined")return;var id="lw-auth-react-headless-login";if(document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent="/* src/HeadlessLoginPanel.module.scss */\n.HeadlessLoginPanel_module_panel {\n  --lw-auth-theme: #1677ff;\n  --lw-auth-theme-deep: color-mix(in srgb, var(--lw-auth-theme) 72%, #000);\n  width: min(100%, 400px);\n  padding: 28px 28px 22px;\n  border-radius: 16px;\n  background: rgba(255, 255, 255, 0.96);\n  color: #14212b;\n  box-shadow: 0 24px 64px rgba(15, 23, 42, 0.28);\n  font-family:\n    \"Segoe UI\",\n    \"PingFang SC\",\n    \"Noto Sans SC\",\n    sans-serif;\n}\n.HeadlessLoginPanel_module_brand {\n  display: flex;\n  gap: 14px;\n  align-items: center;\n  margin-bottom: 12px;\n}\n.HeadlessLoginPanel_module_logo {\n  border-radius: 12px;\n  display: block;\n}\n.HeadlessLoginPanel_module_product {\n  margin: 0;\n  font-size: 13px;\n  font-weight: 650;\n  letter-spacing: 0.04em;\n  text-transform: uppercase;\n  color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_title {\n  margin: 2px 0 0;\n  font-size: 22px;\n  font-weight: 700;\n  line-height: 1.25;\n}\n.HeadlessLoginPanel_module_subtitle {\n  margin: 0 0 18px;\n  font-size: 14px;\n  line-height: 1.5;\n  color: #4b5c68;\n}\n.HeadlessLoginPanel_module_form {\n  display: grid;\n  gap: 10px;\n}\n.HeadlessLoginPanel_module_channelTabs {\n  display: grid;\n  grid-template-columns: 1fr 1fr;\n  gap: 6px;\n  margin-bottom: 2px;\n}\n.HeadlessLoginPanel_module_channelTab {\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 8px 10px;\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #4b5c68;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_channelTab:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_channelTabActive {\n  color: var(--lw-auth-theme-deep);\n  border-color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 10%, #fff);\n}\n.HeadlessLoginPanel_module_codeRow {\n  display: grid;\n  grid-template-columns: 1fr auto;\n  gap: 8px;\n  align-items: stretch;\n}\n.HeadlessLoginPanel_module_codeInput {\n  min-width: 0;\n}\n.HeadlessLoginPanel_module_secondaryBtn {\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 0 12px;\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n  white-space: nowrap;\n}\n.HeadlessLoginPanel_module_secondaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialStack {\n  display: grid;\n  grid-template-columns: repeat(2, minmax(0, 1fr));\n  gap: 10px;\n  font-size: 12px;\n}\n.HeadlessLoginPanel_module_input {\n  width: 100%;\n  box-sizing: border-box;\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 10px 12px;\n  font-size: 14px;\n  outline: none;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_input:focus {\n  border-color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_input:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_passwordField {\n  position: relative;\n  display: flex;\n  align-items: center;\n}\n.HeadlessLoginPanel_module_passwordInput {\n  padding-right: 42px;\n}\n.HeadlessLoginPanel_module_passwordToggle {\n  position: absolute;\n  right: 4px;\n  top: 50%;\n  transform: translateY(-50%);\n  z-index: 1;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 36px;\n  height: 36px;\n  border: none;\n  border-radius: 4px;\n  padding: 0;\n  color: #5a6b76;\n  background: transparent;\n  cursor: pointer;\n}\n.HeadlessLoginPanel_module_passwordToggle:hover:not(:disabled) {\n  color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 12%, transparent);\n}\n.HeadlessLoginPanel_module_passwordToggle:focus-visible {\n  outline: 2px solid var(--lw-auth-theme);\n  outline-offset: 1px;\n}\n.HeadlessLoginPanel_module_passwordToggle:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_primaryBtn {\n  border: none;\n  border-radius: 10px;\n  padding: 11px 14px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #fff;\n  background:\n    linear-gradient(\n      135deg,\n      var(--lw-auth-theme) 0%,\n      var(--lw-auth-theme-deep) 100%);\n}\n.HeadlessLoginPanel_module_primaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialBtn {\n  width: 100%;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  gap: 8px;\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 11px 10px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n}\n.HeadlessLoginPanel_module_socialBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialLogo {\n  flex-shrink: 0;\n  display: block;\n}\n.HeadlessLoginPanel_module_logoFallback {\n  width: 18px;\n  height: 18px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--lw-auth-theme) 14%, #fff);\n  color: var(--lw-auth-theme-deep);\n  font-size: 11px;\n  font-weight: 700;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  flex-shrink: 0;\n}\n.HeadlessLoginPanel_module_cancelBtn {\n  margin-top: 10px;\n  width: 100%;\n  border: none;\n  background: transparent;\n  color: #5a6b76;\n  font-size: 13px;\n  cursor: pointer;\n  padding: 8px;\n}\n.HeadlessLoginPanel_module_cancelBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_divider {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  margin: 14px 0;\n  color: #90a0ab;\n}\n.HeadlessLoginPanel_module_dividerLine {\n  flex: 1;\n  height: 1px;\n  background: #d5e0e7;\n}\n.HeadlessLoginPanel_module_dividerText {\n  font-size: 12px;\n  text-transform: uppercase;\n  letter-spacing: 0.08em;\n}\n.HeadlessLoginPanel_module_hint {\n  margin: 10px 0 0;\n  font-size: 12px;\n  color: #6b7c87;\n  line-height: 1.45;\n}\n.HeadlessLoginPanel_module_domainsHint {\n  margin: -2px 0 0;\n  font-size: 12px;\n  line-height: 1.45;\n  color: #4b5c68;\n  word-break: break-word;\n}\n.HeadlessLoginPanel_module_switchMode {\n  margin: 12px 0 0;\n  text-align: center;\n}\n.HeadlessLoginPanel_module_switchModeBtn {\n  border: none;\n  background: transparent;\n  color: var(--lw-auth-theme);\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  padding: 4px 8px;\n  text-decoration: underline;\n  text-underline-offset: 3px;\n}\n.HeadlessLoginPanel_module_switchModeBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_error {\n  margin: 12px 0 0;\n  font-size: 13px;\n  color: #b42318;\n  line-height: 1.4;\n}\n.HeadlessLoginPanel_module_footer {\n  margin-top: 18px;\n  padding-top: 12px;\n  border-top: 1px solid #e4ebf0;\n  font-size: 12px;\n  color: #6b7c87;\n  display: flex;\n  gap: 8px;\n  justify-content: center;\n}\n\n/* src/LoginLanguageSwitcher.module.scss */\n.LoginLanguageSwitcher_module_switch {\n  position: relative;\n  display: inline-flex;\n}\n.LoginLanguageSwitcher_module_trigger {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  height: 32px;\n  padding: 0 10px 0 8px;\n  border: 1px solid rgba(15, 23, 42, 0.12);\n  border-radius: 999px;\n  background: rgba(255, 255, 255, 0.86);\n  color: #243044;\n  font: inherit;\n  font-size: 13px;\n  line-height: 1;\n  cursor: pointer;\n  backdrop-filter: blur(8px);\n}\n.LoginLanguageSwitcher_module_trigger:hover,\n.LoginLanguageSwitcher_module_trigger[aria-expanded=true] {\n  border-color: var(--lw-login-accent, #1677ff);\n  color: #0f172a;\n}\n.LoginLanguageSwitcher_module_icon {\n  width: 14px;\n  height: 14px;\n  display: block;\n}\n.LoginLanguageSwitcher_module_caret {\n  width: 10px;\n  height: 10px;\n  opacity: 0.65;\n}\n.LoginLanguageSwitcher_module_menu {\n  position: absolute;\n  top: calc(100% + 6px);\n  right: 0;\n  z-index: 20;\n  min-width: 168px;\n  margin: 0;\n  padding: 6px;\n  list-style: none;\n  border-radius: 12px;\n  background: #fff;\n  box-shadow: 0 12px 40px rgba(15, 23, 42, 0.16);\n}\n.LoginLanguageSwitcher_module_item {\n  display: block;\n  width: 100%;\n  border: 0;\n  border-radius: 8px;\n  padding: 8px 10px;\n  background: transparent;\n  color: #1f2937;\n  font: inherit;\n  font-size: 14px;\n  text-align: left;\n  cursor: pointer;\n}\n.LoginLanguageSwitcher_module_item:hover {\n  background: #f3f6fb;\n}\n.LoginLanguageSwitcher_module_itemActive {\n  background: color-mix(in srgb, var(--lw-login-accent, #1677ff) 14%, #fff);\n  color: var(--lw-login-accent, #1677ff);\n  font-weight: 650;\n}\n.LoginLanguageSwitcher_module_onDark {\n  border-color: rgba(255, 255, 255, 0.22);\n  background: rgba(15, 23, 42, 0.28);\n  color: rgba(255, 255, 255, 0.92);\n}\n.LoginLanguageSwitcher_module_onDark:hover,\n.LoginLanguageSwitcher_module_onDark[aria-expanded=true] {\n  border-color: rgba(255, 255, 255, 0.55);\n  color: #fff;\n}\n\n/* src/LoginCanvas.module.scss */\n.LoginCanvas_module_canvas {\n  --lw-login-accent: #1677ff;\n  position: relative;\n  min-height: 100dvh;\n  display: grid;\n  place-items: center;\n  padding: 56px 20px 24px;\n  overflow: hidden;\n  background:\n    radial-gradient(\n      900px 480px at 8% -8%,\n      color-mix(in srgb, var(--lw-login-accent) 28%, transparent),\n      transparent 58%),\n    radial-gradient(\n      720px 420px at 100% 12%,\n      color-mix(in srgb, var(--lw-login-accent) 16%, transparent),\n      transparent 52%),\n    linear-gradient(\n      165deg,\n      var(--lw-login-bg-a, #f4f7fb) 0%,\n      var(--lw-login-bg-b, #e7eef6) 100%);\n  color: var(--lw-login-ink, #122033);\n}\n.LoginCanvas_module_canvas[data-tone=console] {\n  --lw-login-accent: #7eb6ff;\n  --lw-login-bg-a: #0e1726;\n  --lw-login-bg-b: #1a2740;\n  --lw-login-ink: #e8eef8;\n  --lw-login-grid: rgba(255, 255, 255, 0.05);\n}\n.LoginCanvas_module_canvas[data-tone=vista] {\n  --lw-login-accent: #1677ff;\n  --lw-login-bg-a: #f4f7fb;\n  --lw-login-bg-b: #dde7f0;\n  --lw-login-grid: rgba(11, 18, 32, 0.045);\n}\n.LoginCanvas_module_canvas[data-tone=data] {\n  --lw-login-accent: #5aa2ff;\n  --lw-login-bg-a: #070b14;\n  --lw-login-bg-b: #12203a;\n  --lw-login-ink: #e8eefc;\n  --lw-login-grid: rgba(255, 255, 255, 0.045);\n}\n.LoginCanvas_module_canvas[data-tone=edu] {\n  --lw-login-accent: #f59e0b;\n  --lw-login-bg-a: #fff7ed;\n  --lw-login-bg-b: #e0e7ff;\n  --lw-login-grid: rgba(67, 56, 202, 0.06);\n}\n.LoginCanvas_module_grid {\n  position: absolute;\n  inset: 0;\n  pointer-events: none;\n  background-image:\n    linear-gradient(var(--lw-login-grid, rgba(15, 23, 42, 0.04)) 1px, transparent 1px),\n    linear-gradient(\n      90deg,\n      var(--lw-login-grid, rgba(15, 23, 42, 0.04)) 1px,\n      transparent 1px);\n  background-size: 48px 48px;\n  mask-image:\n    radial-gradient(\n      ellipse at center,\n      #000 18%,\n      transparent 74%);\n}\n.LoginCanvas_module_lang {\n  position: fixed;\n  top: 14px;\n  right: 16px;\n  z-index: 5;\n}\n.LoginCanvas_module_decor {\n  position: absolute;\n  inset: 0;\n  pointer-events: none;\n  z-index: 0;\n}\n.LoginCanvas_module_slot {\n  position: relative;\n  z-index: 1;\n  width: min(440px, 100%);\n}\n.LoginCanvas_module_slotFill {\n  width: min(1120px, 100%);\n}\n/*# sourceMappingURL=index.css.map */";document.head.appendChild(s);})();
 'use strict';
 
 var oidcClientTs = require('oidc-client-ts');
@@ -55,6 +55,8 @@ var LOGIN_EXPERIENCE_CAPABILITIES = {
   passwordSignIn: "password-sign-in",
   /** Username + password self-register via Experience (Logto NewPasswordIdentity). */
   passwordSignUp: "password-sign-up",
+  /** Email + verification code + password self-register. */
+  emailCodeSignUp: "email-code-sign-up",
   socialConnectors: "social-connectors",
   socialDirectSignIn: "social-direct-sign-in"
 };
@@ -86,6 +88,160 @@ function resolveLoginExperienceProviderFromEnv(env = {}) {
   return env.VITE_IAM_PROVIDER ?? env.PUBLIC_IAM_PROVIDER ?? env.IAM_PROVIDER ?? env.IDP_MODE ?? "logto";
 }
 
+// src/register-policy.ts
+var DEFAULT_REGISTER_EMAIL_ALLOWLIST = [
+  // Google
+  "gmail.com",
+  "googlemail.com",
+  // Tencent / QQ
+  "qq.com",
+  "foxmail.com",
+  // NetEase
+  "163.com",
+  "126.com",
+  "yeah.net",
+  // Microsoft
+  "outlook.com",
+  "hotmail.com",
+  "live.com",
+  "msn.com",
+  // Apple
+  "icloud.com",
+  "me.com",
+  "mac.com",
+  // Yahoo
+  "yahoo.com",
+  "yahoo.co.jp",
+  // Proton
+  "proton.me",
+  "protonmail.com",
+  // Others commonly used by real users
+  "sina.com",
+  "sina.cn",
+  "aliyun.com",
+  "139.com"
+];
+var DEFAULT_DISPOSABLE_EMAIL_BLOCKLIST = [
+  "mailinator.com",
+  "guerrillamail.com",
+  "guerrillamail.net",
+  "10minutemail.com",
+  "tempmail.com",
+  "temp-mail.org",
+  "yopmail.com",
+  "trashmail.com",
+  "sharklasers.com",
+  "getnada.com",
+  "maildrop.cc",
+  "discard.email",
+  "mailnesia.com"
+];
+function parseList(raw) {
+  if (!raw) return [];
+  const parts = Array.isArray(raw) ? raw : String(raw).split(/[\s,;]+/);
+  return [
+    ...new Set(
+      parts.map((s) => s.trim().toLowerCase().replace(/^@/, "")).filter(Boolean)
+    )
+  ];
+}
+function normalizeRegisterEmailMode(raw) {
+  const key = (raw || "allowlist").trim().toLowerCase();
+  if (key === "off" || key === "false" || key === "0" || key === "disabled") return "off";
+  if (key === "blocklist" || key === "deny" || key === "blacklist") return "blocklist";
+  return "allowlist";
+}
+function resolveRegisterEmailPolicy(input = {}) {
+  const mode = normalizeRegisterEmailMode(input.mode);
+  const allowlist = parseList(input.allowlist);
+  const blocklist = parseList(input.blocklist);
+  return {
+    mode,
+    allowlist: allowlist.length ? allowlist : DEFAULT_REGISTER_EMAIL_ALLOWLIST,
+    blocklist: blocklist.length ? blocklist : DEFAULT_DISPOSABLE_EMAIL_BLOCKLIST
+  };
+}
+function readRegisterEmailPolicyFromEnv(env = {}) {
+  return resolveRegisterEmailPolicy({
+    mode: env.VITE_AUTH_REGISTER_EMAIL_MODE || env.PUBLIC_AUTH_REGISTER_EMAIL_MODE || env.NEXT_PUBLIC_AUTH_REGISTER_EMAIL_MODE || env.AUTH_REGISTER_EMAIL_MODE,
+    allowlist: env.VITE_AUTH_REGISTER_EMAIL_ALLOWLIST || env.PUBLIC_AUTH_REGISTER_EMAIL_ALLOWLIST || env.NEXT_PUBLIC_AUTH_REGISTER_EMAIL_ALLOWLIST || env.AUTH_REGISTER_EMAIL_ALLOWLIST,
+    blocklist: env.VITE_AUTH_REGISTER_EMAIL_BLOCKLIST || env.PUBLIC_AUTH_REGISTER_EMAIL_BLOCKLIST || env.NEXT_PUBLIC_AUTH_REGISTER_EMAIL_BLOCKLIST || env.AUTH_REGISTER_EMAIL_BLOCKLIST
+  });
+}
+function emailDomain(email) {
+  const trimmed = email.trim().toLowerCase();
+  const at = trimmed.lastIndexOf("@");
+  if (at <= 0 || at === trimmed.length - 1) return null;
+  if (trimmed.includes(" ") || trimmed.indexOf("@") !== at) return null;
+  return trimmed.slice(at + 1);
+}
+function isValidEmailShape(email) {
+  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email.trim());
+}
+function evaluateRegisterEmail(email, policy = resolveRegisterEmailPolicy()) {
+  if (!isValidEmailShape(email)) return { ok: false, reason: "invalid" };
+  const domain = emailDomain(email);
+  if (!domain) return { ok: false, reason: "invalid" };
+  if (policy.blocklist.includes(domain)) {
+    return { ok: false, reason: "disposable", domain };
+  }
+  if (policy.mode === "off") return { ok: true, domain };
+  if (policy.mode === "blocklist") return { ok: true, domain };
+  if (!policy.allowlist.includes(domain)) {
+    return { ok: false, reason: "not_allowed", domain };
+  }
+  return { ok: true, domain };
+}
+function registerEmailRejectionMessage(decision) {
+  if (decision.ok) return "";
+  if (decision.reason === "invalid") return "Enter a valid email address";
+  if (decision.reason === "disposable") {
+    return "Temporary or disposable email addresses are not allowed";
+  }
+  return "This email provider is not accepted for self-registration. Use Gmail, Outlook, QQ, 163, iCloud, or another allowed provider \u2014 or sign in with Google / GitHub.";
+}
+function formatAllowedEmailDomains(policy, options) {
+  if (policy.mode !== "allowlist") return null;
+  const list = [...policy.allowlist].map((d) => d.toLowerCase()).filter(Boolean);
+  if (!list.length) return null;
+  const max = options?.max ?? 16;
+  const shown = list.slice(0, max);
+  const rest = list.length - shown.length;
+  const body = shown.join(", ");
+  return rest > 0 ? `${body}, +${rest} more` : body;
+}
+function registerEmailDomainsHint(policy, labels) {
+  const prefix = labels?.allowedDomainsPrefix ?? "Allowed email domains";
+  const formatted = formatAllowedEmailDomains(policy);
+  if (formatted) return `${prefix}: ${formatted}`;
+  if (policy.mode === "blocklist") {
+    return labels?.allowedDomainsBlocklist ?? "Most email providers are accepted. Temporary / disposable addresses are blocked.";
+  }
+  if (policy.mode === "off" && policy.blocklist.length > 0) {
+    return labels?.allowedDomainsBlocklist ?? "Most email providers are accepted. Temporary / disposable addresses are blocked.";
+  }
+  return labels?.allowedDomainsOpen ?? "Email registration is open for most providers.";
+}
+async function fetchRegisterEmailPolicy(apiBase, init) {
+  const base = apiBase.replace(/\/$/, "");
+  try {
+    const res = await fetch(`${base}/api/register-policy`, {
+      credentials: "omit",
+      headers: { Accept: "application/json" },
+      ...init
+    });
+    if (!res.ok) return resolveRegisterEmailPolicy();
+    const data = await res.json();
+    return resolveRegisterEmailPolicy({
+      mode: data.mode,
+      allowlist: data.allowlist,
+      blocklist: data.blocklist
+    });
+  } catch {
+    return resolveRegisterEmailPolicy();
+  }
+}
+
 // src/logto-experience-adapter.ts
 var LOGTO_USERNAME_RE = /^[A-Za-z_]\w*$/;
 function isLogtoRegisterUsername(value) {
@@ -173,9 +329,11 @@ var LogtoExperienceAdapter = class {
   capabilities = [
     LOGIN_EXPERIENCE_CAPABILITIES.passwordSignIn,
     LOGIN_EXPERIENCE_CAPABILITIES.passwordSignUp,
+    LOGIN_EXPERIENCE_CAPABILITIES.emailCodeSignUp,
     LOGIN_EXPERIENCE_CAPABILITIES.socialConnectors,
     LOGIN_EXPERIENCE_CAPABILITIES.socialDirectSignIn
   ];
+  emailPolicy = resolveRegisterEmailPolicy();
   async experiencePasswordSignIn(input) {
     const { apiBase, identifier, password } = input;
     await bootstrapOidcInteraction(input);
@@ -240,7 +398,10 @@ var LogtoExperienceAdapter = class {
     await bootstrapOidcInteraction(input);
     await experienceFetch(apiBase, "", {
       method: "PUT",
-      body: JSON.stringify({ interactionEvent: "Register" })
+      body: JSON.stringify({
+        interactionEvent: "Register",
+        ...input.captchaToken ? { captchaToken: input.captchaToken } : {}
+      })
     });
     const verified = await experienceFetch(
       apiBase,
@@ -267,6 +428,96 @@ var LogtoExperienceAdapter = class {
     });
     return { redirectTo: submitted?.redirectTo, raw: submitted };
   }
+  async sendRegisterEmailCode(input) {
+    const email = (input.email || input.identifier || "").trim().toLowerCase();
+    const decision = evaluateRegisterEmail(email, this.emailPolicy);
+    if (!decision.ok) {
+      throw new Error(registerEmailRejectionMessage(decision));
+    }
+    await bootstrapOidcInteraction({
+      apiBase: input.apiBase,
+      issuer: input.issuer,
+      clientId: input.clientId,
+      redirectUri: input.redirectUri,
+      audience: input.audience,
+      scopes: input.scopes,
+      returnUrl: input.returnUrl
+    });
+    await experienceFetch(input.apiBase, "", {
+      method: "PUT",
+      body: JSON.stringify({
+        interactionEvent: "Register",
+        ...input.captchaToken ? { captchaToken: input.captchaToken } : {}
+      })
+    });
+    const sent = await experienceFetch(
+      input.apiBase,
+      "/verification/verification-code",
+      {
+        method: "POST",
+        body: JSON.stringify({
+          identifier: { type: "email", value: email },
+          interactionEvent: "Register"
+        })
+      }
+    );
+    if (!sent?.verificationId) {
+      throw new Error("Experience API did not return verificationId for email code");
+    }
+    return { verificationId: sent.verificationId };
+  }
+  async experienceEmailPasswordSignUp(input) {
+    const email = (input.email || input.identifier || "").trim().toLowerCase();
+    const decision = evaluateRegisterEmail(email, this.emailPolicy);
+    if (!decision.ok) {
+      throw new Error(registerEmailRejectionMessage(decision));
+    }
+    if (!input.password || input.password.length < 8) {
+      throw new Error("Password must be at least 8 characters");
+    }
+    if (!input.code?.trim() || !input.verificationId?.trim()) {
+      throw new Error("Email verification code is required");
+    }
+    const verified = await experienceFetch(
+      input.apiBase,
+      "/verification/verification-code/verify",
+      {
+        method: "POST",
+        body: JSON.stringify({
+          identifier: { type: "email", value: email },
+          verificationId: input.verificationId,
+          code: input.code.trim()
+        })
+      }
+    );
+    const codeVerificationId = verified?.verificationId || input.verificationId;
+    try {
+      await experienceFetch(input.apiBase, "/identification", {
+        method: "POST",
+        body: JSON.stringify({ verificationId: codeVerificationId })
+      });
+    } catch (error) {
+      const msg = error instanceof Error ? error.message : String(error);
+      if (!/missing_profile/i.test(msg)) {
+        if (!/422|password|profile/i.test(msg)) {
+          throw error instanceof Error ? error : new Error(msg);
+        }
+      }
+    }
+    await experienceFetch(input.apiBase, "/profile", {
+      method: "POST",
+      body: JSON.stringify({ type: "password", value: input.password })
+    });
+    await experienceFetch(input.apiBase, "/identification", {
+      method: "POST",
+      body: JSON.stringify({})
+    });
+    const submitted = await experienceFetch(input.apiBase, "/submit", {
+      method: "POST",
+      body: JSON.stringify({})
+    });
+    return { redirectTo: submitted?.redirectTo, raw: submitted };
+  }
   async fetchSocialConnectors(input) {
     const url = new URL(`${input.apiBase.replace(/\/$/, "")}/api/.well-known/sign-in-exp`);
     if (input.appId?.trim()) url.searchParams.set("appId", input.appId.trim());
@@ -669,6 +920,138 @@ function useLuminaryAuth() {
   return ctx;
 }
 
+// src/login-labels.ts
+var DEFAULT_LOGIN_LOCALES = [
+  { code: "en", label: "English", short: "EN" },
+  { code: "zh-CN", label: "\u7B80\u4F53\u4E2D\u6587", short: "\u7B80" },
+  { code: "zh-TW", label: "\u7E41\u9AD4\u4E2D\u6587", short: "\u7E41" },
+  { code: "es", label: "Espa\xF1ol", short: "ES" }
+];
+var ZH_CN = {
+  title: "\u767B\u5F55",
+  subtitle: "\u4F7F\u7528 LuminaryWorks \u7EDF\u4E00\u8D26\u53F7",
+  identifierPlaceholder: "\u90AE\u7BB1\u6216\u7528\u6237\u540D",
+  registerIdentifierPlaceholder: "\u7528\u6237\u540D",
+  passwordPlaceholder: "\u5BC6\u7801",
+  confirmPasswordPlaceholder: "\u786E\u8BA4\u5BC6\u7801",
+  submitPassword: "\u5BC6\u7801\u767B\u5F55",
+  submitRegister: "\u521B\u5EFA\u8D26\u53F7",
+  submitSso: "\u4F7F\u7528\u7EDF\u4E00\u8D26\u53F7\u7EE7\u7EED",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "\u6216",
+  hint: "\u793E\u4EA4\u8D26\u53F7\u4F1A\u76F4\u63A5\u6253\u5F00\u5BF9\u5E94\u670D\u52A1\u3002\u5BC6\u7801\u767B\u5F55\u4F7F\u7528\u4F60\u7684 LuminaryWorks \u8D26\u53F7\u3002",
+  registerHint: "\u90AE\u7BB1\u6CE8\u518C\u9700\u8981\u9A8C\u8BC1\u7801\u3002\u4E5F\u53EF\u4EE5\u7528\u7528\u6237\u540D\u6CE8\u518C\uFF0C\u6216\u6539\u7528\u793E\u4EA4\u8D26\u53F7\u4E00\u952E\u767B\u5F55\u3002",
+  cancel: "\u53D6\u6D88",
+  experienceUnavailable: "\u5BC6\u7801\u767B\u5F55\u6682\u4E0D\u53EF\u7528\uFF0C\u8BF7\u6539\u7528\u793E\u4EA4\u8D26\u53F7\u3002",
+  showPassword: "\u663E\u793A\u5BC6\u7801",
+  hidePassword: "\u9690\u85CF\u5BC6\u7801",
+  registerLink: "\u521B\u5EFA\u8D26\u53F7",
+  loginLink: "\u5DF2\u6709\u8D26\u53F7\uFF1F\u53BB\u767B\u5F55",
+  passwordMismatch: "\u4E24\u6B21\u5BC6\u7801\u4E0D\u4E00\u81F4",
+  registerTitle: "\u521B\u5EFA\u8D26\u53F7",
+  registerSubtitle: "\u521B\u5EFA LuminaryWorks \u7EDF\u4E00\u8D26\u53F7",
+  registerWithEmail: "\u90AE\u7BB1",
+  registerWithUsername: "\u7528\u6237\u540D",
+  emailPlaceholder: "\u90AE\u7BB1",
+  verificationCodePlaceholder: "\u9A8C\u8BC1\u7801",
+  sendCode: "\u53D1\u9001\u9A8C\u8BC1\u7801",
+  resendCode: "\u91CD\u65B0\u53D1\u9001",
+  allowedDomainsPrefix: "\u5141\u8BB8\u7684\u90AE\u7BB1\u57DF\u540D",
+  allowedDomainsOpen: "\u5927\u591A\u6570\u90AE\u7BB1\u90FD\u53EF\u4EE5\u6CE8\u518C\u3002",
+  allowedDomainsBlocklist: "\u5927\u591A\u6570\u90AE\u7BB1\u53EF\u7528\u3002\u4E34\u65F6\u90AE\u7BB1\u4F1A\u88AB\u62D2\u7EDD\u3002",
+  waitingExternalBrowser: "\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u5B8C\u6210\u767B\u5F55\uFF0C\u7136\u540E\u56DE\u5230\u672C\u5E94\u7528\u3002"
+};
+var ZH_TW = {
+  title: "\u767B\u5165",
+  subtitle: "\u4F7F\u7528 LuminaryWorks \u7D71\u4E00\u5E33\u865F",
+  identifierPlaceholder: "\u96FB\u5B50\u90F5\u4EF6\u6216\u4F7F\u7528\u8005\u540D\u7A31",
+  registerIdentifierPlaceholder: "\u4F7F\u7528\u8005\u540D\u7A31",
+  passwordPlaceholder: "\u5BC6\u78BC",
+  confirmPasswordPlaceholder: "\u78BA\u8A8D\u5BC6\u78BC",
+  submitPassword: "\u5BC6\u78BC\u767B\u5165",
+  submitRegister: "\u5EFA\u7ACB\u5E33\u865F",
+  submitSso: "\u4F7F\u7528\u7D71\u4E00\u5E33\u865F\u7E7C\u7E8C",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "\u6216",
+  hint: "\u793E\u4EA4\u5E33\u865F\u6703\u76F4\u63A5\u958B\u555F\u5C0D\u61C9\u670D\u52D9\u3002\u5BC6\u78BC\u767B\u5165\u4F7F\u7528\u4F60\u7684 LuminaryWorks \u5E33\u865F\u3002",
+  registerHint: "\u96FB\u5B50\u90F5\u4EF6\u8A3B\u518A\u9700\u8981\u9A57\u8B49\u78BC\u3002\u4E5F\u53EF\u4EE5\u7528\u4F7F\u7528\u8005\u540D\u7A31\u8A3B\u518A\uFF0C\u6216\u6539\u7528\u793E\u4EA4\u5E33\u865F\u3002",
+  cancel: "\u53D6\u6D88",
+  experienceUnavailable: "\u5BC6\u78BC\u767B\u5165\u66AB\u4E0D\u53EF\u7528\uFF0C\u8ACB\u6539\u7528\u793E\u4EA4\u5E33\u865F\u3002",
+  showPassword: "\u986F\u793A\u5BC6\u78BC",
+  hidePassword: "\u96B1\u85CF\u5BC6\u78BC",
+  registerLink: "\u5EFA\u7ACB\u5E33\u865F",
+  loginLink: "\u5DF2\u6709\u5E33\u865F\uFF1F\u53BB\u767B\u5165",
+  passwordMismatch: "\u5169\u6B21\u5BC6\u78BC\u4E0D\u4E00\u81F4",
+  registerTitle: "\u5EFA\u7ACB\u5E33\u865F",
+  registerSubtitle: "\u5EFA\u7ACB LuminaryWorks \u7D71\u4E00\u5E33\u865F",
+  registerWithEmail: "\u96FB\u5B50\u90F5\u4EF6",
+  registerWithUsername: "\u4F7F\u7528\u8005\u540D\u7A31",
+  emailPlaceholder: "\u96FB\u5B50\u90F5\u4EF6",
+  verificationCodePlaceholder: "\u9A57\u8B49\u78BC",
+  sendCode: "\u767C\u9001\u9A57\u8B49\u78BC",
+  resendCode: "\u91CD\u65B0\u767C\u9001",
+  allowedDomainsPrefix: "\u5141\u8A31\u7684\u96FB\u5B50\u90F5\u4EF6\u7DB2\u57DF",
+  allowedDomainsOpen: "\u5927\u591A\u6578\u96FB\u5B50\u90F5\u4EF6\u90FD\u53EF\u4EE5\u8A3B\u518A\u3002",
+  allowedDomainsBlocklist: "\u5927\u591A\u6578\u96FB\u5B50\u90F5\u4EF6\u53EF\u7528\u3002\u81E8\u6642\u4FE1\u7BB1\u6703\u88AB\u62D2\u7D55\u3002",
+  waitingExternalBrowser: "\u8ACB\u5728\u700F\u89BD\u5668\u4E2D\u5B8C\u6210\u767B\u5165\uFF0C\u7136\u5F8C\u56DE\u5230\u672C\u61C9\u7528\u3002"
+};
+var ES = {
+  title: "Iniciar sesi\xF3n",
+  subtitle: "Usa tu cuenta unificada de LuminaryWorks",
+  identifierPlaceholder: "Correo o usuario",
+  registerIdentifierPlaceholder: "Usuario",
+  passwordPlaceholder: "Contrase\xF1a",
+  confirmPasswordPlaceholder: "Confirmar contrase\xF1a",
+  submitPassword: "Entrar con contrase\xF1a",
+  submitRegister: "Crear cuenta",
+  submitSso: "Continuar con la cuenta unificada",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "o",
+  hint: "Las redes abren el proveedor directamente. La contrase\xF1a usa tu cuenta LuminaryWorks.",
+  registerHint: "El registro por correo pide un c\xF3digo. Tambi\xE9n puedes usar un nombre de usuario o una red social.",
+  cancel: "Cancelar",
+  experienceUnavailable: "El inicio con contrase\xF1a no est\xE1 disponible. Usa una red social.",
+  showPassword: "Mostrar contrase\xF1a",
+  hidePassword: "Ocultar contrase\xF1a",
+  registerLink: "Crear una cuenta",
+  loginLink: "\xBFYa tienes cuenta? Inicia sesi\xF3n",
+  passwordMismatch: "Las contrase\xF1as no coinciden",
+  registerTitle: "Crear cuenta",
+  registerSubtitle: "Crea tu cuenta unificada de LuminaryWorks",
+  registerWithEmail: "Correo",
+  registerWithUsername: "Usuario",
+  emailPlaceholder: "Correo",
+  verificationCodePlaceholder: "C\xF3digo",
+  sendCode: "Enviar c\xF3digo",
+  resendCode: "Reenviar",
+  allowedDomainsPrefix: "Dominios de correo permitidos",
+  allowedDomainsOpen: "El registro por correo est\xE1 abierto para la mayor\xEDa de proveedores.",
+  allowedDomainsBlocklist: "Se aceptan la mayor\xEDa de correos. Se bloquean direcciones temporales.",
+  waitingExternalBrowser: "Termina el inicio de sesi\xF3n en el navegador y vuelve a esta app."
+};
+var BY_LOCALE = {
+  en: void 0,
+  "zh-CN": ZH_CN,
+  "zh-TW": ZH_TW,
+  es: ES
+};
+function normalizeLoginLocale(locale) {
+  const raw = (locale ?? "en").trim().toLowerCase();
+  if (raw === "zh" || raw === "zh-cn" || raw === "zh-hans" || raw.startsWith("zh-cn")) {
+    return "zh-CN";
+  }
+  if (raw === "zh-tw" || raw === "zh-hant" || raw.startsWith("zh-tw")) return "zh-TW";
+  if (raw === "es" || raw.startsWith("es-")) return "es";
+  if (raw === "en" || raw.startsWith("en-")) return "en";
+  return "en";
+}
+function loginLabels(locale) {
+  return BY_LOCALE[normalizeLoginLocale(locale)] ?? {};
+}
+
 // src/HeadlessLoginPanel.module.scss
 var HeadlessLoginPanel_module_default = {
   panel: "HeadlessLoginPanel_module_panel",
@@ -678,6 +1061,12 @@ var HeadlessLoginPanel_module_default = {
   title: "HeadlessLoginPanel_module_title",
   subtitle: "HeadlessLoginPanel_module_subtitle",
   form: "HeadlessLoginPanel_module_form",
+  channelTabs: "HeadlessLoginPanel_module_channelTabs",
+  channelTab: "HeadlessLoginPanel_module_channelTab",
+  channelTabActive: "HeadlessLoginPanel_module_channelTabActive",
+  codeRow: "HeadlessLoginPanel_module_codeRow",
+  codeInput: "HeadlessLoginPanel_module_codeInput",
+  secondaryBtn: "HeadlessLoginPanel_module_secondaryBtn",
   socialStack: "HeadlessLoginPanel_module_socialStack",
   input: "HeadlessLoginPanel_module_input",
   passwordField: "HeadlessLoginPanel_module_passwordField",
@@ -692,6 +1081,7 @@ var HeadlessLoginPanel_module_default = {
   dividerLine: "HeadlessLoginPanel_module_dividerLine",
   dividerText: "HeadlessLoginPanel_module_dividerText",
   hint: "HeadlessLoginPanel_module_hint",
+  domainsHint: "HeadlessLoginPanel_module_domainsHint",
   switchMode: "HeadlessLoginPanel_module_switchMode",
   switchModeBtn: "HeadlessLoginPanel_module_switchModeBtn",
   error: "HeadlessLoginPanel_module_error",
@@ -712,7 +1102,7 @@ var defaults = {
   submitGithub: "GitHub",
   socialDivider: "or",
   hint: "Social providers open directly. Password uses your LuminaryWorks account.",
-  registerHint: "Create a username (start with a letter or _). Prefer email? Use a social provider below.",
+  registerHint: "Email register needs a code (Gmail / Outlook / QQ / 163 / iCloud \u2026). Username is an alternative. Prefer one-click? Use a social provider.",
   cancel: "Cancel",
   experienceUnavailable: "Password sign-in is unavailable; use a social provider instead.",
   showPassword: "Show password",
@@ -721,7 +1111,17 @@ var defaults = {
   loginLink: "Already have an account? Sign in",
   passwordMismatch: "Passwords do not match",
   registerTitle: "Create account",
-  registerSubtitle: "Create your LuminaryWorks unified account"
+  registerSubtitle: "Create your LuminaryWorks unified account",
+  registerWithEmail: "Email",
+  registerWithUsername: "Username",
+  emailPlaceholder: "Email",
+  verificationCodePlaceholder: "Verification code",
+  sendCode: "Send code",
+  resendCode: "Resend code",
+  allowedDomainsPrefix: "Allowed email domains",
+  allowedDomainsOpen: "Email registration is open for most providers.",
+  allowedDomainsBlocklist: "Most email providers are accepted. Temporary / disposable addresses are blocked.",
+  waitingExternalBrowser: "Finish signing in with your browser, then return to this app."
 };
 function resolveSieBase(config) {
   const explicit = config.experienceApiBase?.trim();
@@ -748,10 +1148,15 @@ function HeadlessLoginPanel({
   productName,
   logoSrc,
   labels: labelsProp,
+  locale,
   returnUrl,
   mode = "popup",
+  openExternalUrl,
   showSocialConnectors = true,
   showRegister = true,
+  registerEmailPolicy: registerEmailPolicyProp,
+  fetchRegisterPolicy = true,
+  getCaptchaToken,
   socialProviders = "auto",
   showCancel,
   onCancel,
@@ -766,12 +1171,50 @@ function HeadlessLoginPanel({
     experienceAdapterProp,
     config.iamProvider
   );
-  const labels = { ...defaults, ...labelsProp };
+  const [emailPolicy, setEmailPolicy] = react.useState(
+    () => registerEmailPolicyProp ?? resolveRegisterEmailPolicy()
+  );
+  react.useEffect(() => {
+    if (registerEmailPolicyProp) {
+      setEmailPolicy(registerEmailPolicyProp);
+      return;
+    }
+    if (!fetchRegisterPolicy || !showRegister) {
+      setEmailPolicy(resolveRegisterEmailPolicy());
+      return;
+    }
+    const base = config.experienceApiBase?.trim();
+    if (!base) {
+      setEmailPolicy(resolveRegisterEmailPolicy());
+      return;
+    }
+    let cancelled = false;
+    void fetchRegisterEmailPolicy(base).then((policy) => {
+      if (!cancelled) setEmailPolicy(policy);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    config.experienceApiBase,
+    fetchRegisterPolicy,
+    registerEmailPolicyProp,
+    showRegister
+  ]);
+  react.useEffect(() => {
+    if (experienceAdapter instanceof LogtoExperienceAdapter) {
+      experienceAdapter.emailPolicy = emailPolicy;
+    }
+  }, [emailPolicy, experienceAdapter]);
+  const labels = { ...defaults, ...loginLabels(locale), ...labelsProp };
   const configured = isIdpConfigured(config);
   const [panelMode, setPanelMode] = react.useState("sign-in");
+  const [registerChannel, setRegisterChannel] = react.useState("email");
   const [identifier, setIdentifier] = react.useState("");
   const [password, setPassword] = react.useState("");
   const [confirmPassword, setConfirmPassword] = react.useState("");
+  const [verificationCode, setVerificationCode] = react.useState("");
+  const [emailVerificationId, setEmailVerificationId] = react.useState(null);
   const [passwordVisible, setPasswordVisible] = react.useState(false);
   const panelStyle = {
     ...style,
@@ -779,13 +1222,20 @@ function HeadlessLoginPanel({
   };
   const [loading, setLoading] = react.useState(null);
   const [error, setError] = react.useState("");
+  const [awaitingExternal, setAwaitingExternal] = react.useState(false);
   const [connectors, setConnectors] = react.useState([]);
   const socialEnabled = showSocialConnectors !== false && !(Array.isArray(socialProviders) && socialProviders.length === 0) && experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.socialConnectors) && experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.socialDirectSignIn) && typeof experienceAdapter.fetchSocialConnectors === "function" && typeof experienceAdapter.createSocialSignInRequest === "function";
   const passwordEnabled = experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.passwordSignIn) && typeof experienceAdapter.experiencePasswordSignIn === "function";
-  const registerEnabled = showRegister !== false && experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.passwordSignUp) && typeof experienceAdapter.experiencePasswordSignUp === "function";
+  const registerEnabled = showRegister !== false && (experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.passwordSignUp) && typeof experienceAdapter.experiencePasswordSignUp === "function" || experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.emailCodeSignUp) && typeof experienceAdapter.sendRegisterEmailCode === "function" && typeof experienceAdapter.experienceEmailPasswordSignUp === "function");
+  const emailRegisterEnabled = experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.emailCodeSignUp) && typeof experienceAdapter.sendRegisterEmailCode === "function" && typeof experienceAdapter.experienceEmailPasswordSignUp === "function";
+  const usernameRegisterEnabled = experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.passwordSignUp) && typeof experienceAdapter.experiencePasswordSignUp === "function";
   const isRegister = panelMode === "register" && registerEnabled;
+  const useEmailRegister = isRegister && registerChannel === "email" && emailRegisterEnabled;
   react.useEffect(() => {
-    const resetBusy = () => setLoading(null);
+    const resetBusy = () => {
+      setLoading(null);
+      setAwaitingExternal(false);
+    };
     window.addEventListener("pageshow", resetBusy);
     window.addEventListener("popstate", resetBusy);
     return () => {
@@ -828,6 +1278,19 @@ function HeadlessLoginPanel({
   ]);
   const runOidc = async (experienceRequest) => {
     if (!configured) throw new Error("IdP not configured");
+    if (mode === "external") {
+      if (!openExternalUrl) {
+        throw new Error('openExternalUrl is required when mode is "external"');
+      }
+      const url = await prepareSignInRequestUrl(config, {
+        returnUrl,
+        ...experienceRequest
+      });
+      setAwaitingExternal(true);
+      await openExternalUrl(url);
+      setLoading(null);
+      return;
+    }
     if (mode === "redirect") {
       await signInRedirect(config, { returnUrl, ...experienceRequest });
       return;
@@ -851,6 +1314,7 @@ function HeadlessLoginPanel({
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
       setLoading(null);
+      setAwaitingExternal(false);
     }
   };
   const runHostedOidc = async () => {
@@ -861,6 +1325,7 @@ function HeadlessLoginPanel({
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
       setLoading(null);
+      setAwaitingExternal(false);
     }
   };
   const followExperienceRedirect = (redirectTo) => {
@@ -880,17 +1345,46 @@ function HeadlessLoginPanel({
       if (!apiBase) {
         throw new Error(labels.experienceUnavailable);
       }
+      const captchaToken = getCaptchaToken ? await getCaptchaToken() : void 0;
       if (isRegister) {
-        if (!registerEnabled || !experienceAdapter.experiencePasswordSignUp) {
-          throw new Error(labels.experienceUnavailable);
-        }
         if (password !== confirmPassword) {
           throw new Error(labels.passwordMismatch);
         }
+        if (useEmailRegister) {
+          if (!experienceAdapter.experienceEmailPasswordSignUp || !emailVerificationId) {
+            throw new Error("Send and enter the email verification code first");
+          }
+          const decision = evaluateRegisterEmail(identifier.trim(), emailPolicy);
+          if (!decision.ok) throw new Error(registerEmailRejectionMessage(decision));
+          const result3 = await experienceAdapter.experienceEmailPasswordSignUp({
+            apiBase,
+            identifier: identifier.trim(),
+            email: identifier.trim(),
+            password,
+            code: verificationCode,
+            verificationId: emailVerificationId,
+            captchaToken,
+            issuer: config.issuer,
+            clientId: config.clientId,
+            redirectUri: config.redirectUri,
+            audience: config.audience,
+            scopes: config.scopes,
+            returnUrl
+          });
+          if (result3.redirectTo) {
+            followExperienceRedirect(result3.redirectTo);
+            return;
+          }
+          throw new Error("Experience API did not return redirectTo");
+        }
+        if (!usernameRegisterEnabled || !experienceAdapter.experiencePasswordSignUp) {
+          throw new Error(labels.experienceUnavailable);
+        }
         const result2 = await experienceAdapter.experiencePasswordSignUp({
           apiBase,
           identifier: identifier.trim(),
           password,
+          captchaToken,
           issuer: config.issuer,
           clientId: config.clientId,
           redirectUri: config.redirectUri,
@@ -930,20 +1424,59 @@ function HeadlessLoginPanel({
       setLoading(null);
     }
   };
+  const runSendCode = async () => {
+    if (!configured || !useEmailRegister) return;
+    setError("");
+    setLoading("send-code");
+    try {
+      const apiBase = config.experienceApiBase?.trim();
+      if (!apiBase || !experienceAdapter.sendRegisterEmailCode) {
+        throw new Error(labels.experienceUnavailable);
+      }
+      const email = identifier.trim();
+      const decision = evaluateRegisterEmail(email, emailPolicy);
+      if (!decision.ok) throw new Error(registerEmailRejectionMessage(decision));
+      const captchaToken = getCaptchaToken ? await getCaptchaToken() : void 0;
+      const sent = await experienceAdapter.sendRegisterEmailCode({
+        apiBase,
+        identifier: email,
+        email,
+        captchaToken,
+        issuer: config.issuer,
+        clientId: config.clientId,
+        redirectUri: config.redirectUri,
+        audience: config.audience,
+        scopes: config.scopes,
+        returnUrl
+      });
+      setEmailVerificationId(sent.verificationId);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+    } finally {
+      setLoading(null);
+    }
+  };
   const switchPanelMode = (next) => {
     setPanelMode(next);
     setError("");
     setConfirmPassword("");
+    setVerificationCode("");
+    setEmailVerificationId(null);
   };
   const busy = loading !== null;
   const showSocial = socialEnabled && connectors.length > 0;
   const showHint = Boolean(labelsProp?.hint) || showSocial || isRegister;
-  const formReady = Boolean(identifier.trim()) && Boolean(password) && (!isRegister || Boolean(confirmPassword));
+  const formReady = Boolean(identifier.trim()) && Boolean(password) && (!isRegister || Boolean(confirmPassword)) && (!useEmailRegister || Boolean(verificationCode.trim()) && Boolean(emailVerificationId));
   const titleText = isRegister ? labels.registerTitle : labels.title;
   const subtitleText = isRegister ? labels.registerSubtitle : labels.subtitle;
-  const identifierPlaceholder = isRegister ? labels.registerIdentifierPlaceholder : labels.identifierPlaceholder;
+  const identifierPlaceholder = isRegister ? useEmailRegister ? labels.emailPlaceholder : labels.registerIdentifierPlaceholder : labels.identifierPlaceholder;
   const submitLabel = isRegister ? labels.submitRegister : labels.submitPassword;
   const hintText = isRegister ? labels.registerHint : labels.hint;
+  const domainsHint = useEmailRegister ? registerEmailDomainsHint(emailPolicy, {
+    allowedDomainsPrefix: labels.allowedDomainsPrefix,
+    allowedDomainsOpen: labels.allowedDomainsOpen,
+    allowedDomainsBlocklist: labels.allowedDomainsBlocklist
+  }) : null;
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: cx(HeadlessLoginPanel_module_default.panel, className), style: panelStyle, children: [
     /* @__PURE__ */ jsxRuntime.jsxs("header", { className: HeadlessLoginPanel_module_default.brand, children: [
       logoSrc ? /* @__PURE__ */ jsxRuntime.jsx("img", { src: logoSrc, alt: "", width: 48, height: 48, className: HeadlessLoginPanel_module_default.logo }) : null,
@@ -955,19 +1488,93 @@ function HeadlessLoginPanel({
     /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.subtitle, children: subtitleText }),
     configured ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
       passwordEnabled ? /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: (e) => void runPassword(e), className: HeadlessLoginPanel_module_default.form, children: [
+        isRegister && emailRegisterEnabled && usernameRegisterEnabled ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: HeadlessLoginPanel_module_default.channelTabs, role: "tablist", "aria-label": "Register method", children: [
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "button",
+            {
+              type: "button",
+              role: "tab",
+              className: cx(
+                HeadlessLoginPanel_module_default.channelTab,
+                registerChannel === "email" && HeadlessLoginPanel_module_default.channelTabActive
+              ),
+              "aria-selected": registerChannel === "email",
+              disabled: busy,
+              onClick: () => {
+                setRegisterChannel("email");
+                setEmailVerificationId(null);
+                setVerificationCode("");
+                setError("");
+              },
+              children: labels.registerWithEmail
+            }
+          ),
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "button",
+            {
+              type: "button",
+              role: "tab",
+              className: cx(
+                HeadlessLoginPanel_module_default.channelTab,
+                registerChannel === "username" && HeadlessLoginPanel_module_default.channelTabActive
+              ),
+              "aria-selected": registerChannel === "username",
+              disabled: busy,
+              onClick: () => {
+                setRegisterChannel("username");
+                setEmailVerificationId(null);
+                setVerificationCode("");
+                setError("");
+              },
+              children: labels.registerWithUsername
+            }
+          )
+        ] }) : null,
         /* @__PURE__ */ jsxRuntime.jsx(
           "input",
           {
-            type: "text",
+            type: useEmailRegister ? "email" : "text",
             name: "identifier",
             autoComplete: isRegister ? "username" : "username",
             placeholder: identifierPlaceholder,
             value: identifier,
-            onChange: (e) => setIdentifier(e.target.value),
+            onChange: (e) => {
+              setIdentifier(e.target.value);
+              if (useEmailRegister) {
+                setEmailVerificationId(null);
+              }
+            },
             className: HeadlessLoginPanel_module_default.input,
             disabled: busy
           }
         ),
+        domainsHint ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.domainsHint, "data-testid": "register-allowed-domains", children: domainsHint }) : null,
+        useEmailRegister ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: HeadlessLoginPanel_module_default.codeRow, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "input",
+            {
+              type: "text",
+              name: "verificationCode",
+              inputMode: "numeric",
+              autoComplete: "one-time-code",
+              placeholder: labels.verificationCodePlaceholder,
+              value: verificationCode,
+              onChange: (e) => setVerificationCode(e.target.value),
+              className: cx(HeadlessLoginPanel_module_default.input, HeadlessLoginPanel_module_default.codeInput),
+              disabled: busy
+            }
+          ),
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "button",
+            {
+              type: "button",
+              className: HeadlessLoginPanel_module_default.secondaryBtn,
+              disabled: busy || !identifier.trim(),
+              onClick: () => void runSendCode(),
+              children: loading === "send-code" ? "\u2026" : emailVerificationId ? labels.resendCode : labels.sendCode
+            }
+          )
+        ] }) : null,
         /* @__PURE__ */ jsxRuntime.jsxs("div", { className: HeadlessLoginPanel_module_default.passwordField, children: [
           /* @__PURE__ */ jsxRuntime.jsx(
             "input",
@@ -1030,6 +1637,7 @@ function HeadlessLoginPanel({
           children: isRegister ? labels.loginLink : labels.registerLink
         }
       ) }) : null,
+      awaitingExternal ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.hint, role: "status", children: labels.waitingExternalBrowser }) : null,
       showSocial ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: HeadlessLoginPanel_module_default.divider, "aria-hidden": true, children: [
         /* @__PURE__ */ jsxRuntime.jsx("span", { className: HeadlessLoginPanel_module_default.dividerLine }),
         /* @__PURE__ */ jsxRuntime.jsx("span", { className: HeadlessLoginPanel_module_default.dividerText, children: labels.socialDivider }),
@@ -1203,6 +1811,124 @@ function useAuthGateOptional() {
   return react.useContext(AuthGateContext);
 }
 
+// src/LoginLanguageSwitcher.module.scss
+var LoginLanguageSwitcher_module_default = {
+  switch: "LoginLanguageSwitcher_module_switch",
+  trigger: "LoginLanguageSwitcher_module_trigger",
+  icon: "LoginLanguageSwitcher_module_icon",
+  caret: "LoginLanguageSwitcher_module_caret",
+  menu: "LoginLanguageSwitcher_module_menu",
+  item: "LoginLanguageSwitcher_module_item",
+  itemActive: "LoginLanguageSwitcher_module_itemActive",
+  onDark: "LoginLanguageSwitcher_module_onDark"
+};
+function GlobeIcon() {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { className: LoginLanguageSwitcher_module_default.icon, viewBox: "0 0 24 24", "aria-hidden": "true", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "9", fill: "none", stroke: "currentColor", strokeWidth: "1.6" }),
+    /* @__PURE__ */ jsxRuntime.jsx("ellipse", { cx: "12", cy: "12", rx: "4", ry: "9", fill: "none", stroke: "currentColor", strokeWidth: "1.6" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M3 12h18M5 8h14M5 16h14", fill: "none", stroke: "currentColor", strokeWidth: "1.6" })
+  ] });
+}
+function LoginLanguageSwitcher({
+  locale,
+  onChange,
+  locales = DEFAULT_LOGIN_LOCALES,
+  label = "Language",
+  variant = "default"
+}) {
+  const [open, setOpen] = react.useState(false);
+  const rootRef = react.useRef(null);
+  const menuId = react.useId();
+  const current = locales.find((item) => item.code === locale) ?? locales.find((item) => normalizeLoginLocale(item.code) === normalizeLoginLocale(locale)) ?? locales[0];
+  react.useEffect(() => {
+    if (!open) return;
+    const onPointer = (event) => {
+      if (!rootRef.current?.contains(event.target)) setOpen(false);
+    };
+    const onKey = (event) => {
+      if (event.key === "Escape") setOpen(false);
+    };
+    document.addEventListener("mousedown", onPointer);
+    document.addEventListener("keydown", onKey);
+    return () => {
+      document.removeEventListener("mousedown", onPointer);
+      document.removeEventListener("keydown", onKey);
+    };
+  }, [open]);
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: LoginLanguageSwitcher_module_default.switch, ref: rootRef, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "button",
+      {
+        type: "button",
+        className: variant === "onDark" ? `${LoginLanguageSwitcher_module_default.trigger} ${LoginLanguageSwitcher_module_default.onDark}` : LoginLanguageSwitcher_module_default.trigger,
+        "aria-label": label,
+        "aria-haspopup": "listbox",
+        "aria-expanded": open,
+        "aria-controls": menuId,
+        onClick: () => setOpen((value) => !value),
+        children: [
+          /* @__PURE__ */ jsxRuntime.jsx(GlobeIcon, {}),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { children: current?.short ?? "EN" }),
+          /* @__PURE__ */ jsxRuntime.jsx("svg", { className: LoginLanguageSwitcher_module_default.caret, viewBox: "0 0 12 12", "aria-hidden": "true", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M2.5 4.5 6 8l3.5-3.5", fill: "none", stroke: "currentColor", strokeWidth: "1.4" }) })
+        ]
+      }
+    ),
+    open ? /* @__PURE__ */ jsxRuntime.jsx("ul", { className: LoginLanguageSwitcher_module_default.menu, id: menuId, role: "listbox", "aria-label": label, children: locales.map((item) => {
+      const active = item.code === current?.code;
+      return /* @__PURE__ */ jsxRuntime.jsx("li", { role: "presentation", children: /* @__PURE__ */ jsxRuntime.jsx(
+        "button",
+        {
+          type: "button",
+          role: "option",
+          "aria-selected": active,
+          className: active ? `${LoginLanguageSwitcher_module_default.item} ${LoginLanguageSwitcher_module_default.itemActive}` : LoginLanguageSwitcher_module_default.item,
+          onClick: () => {
+            onChange(item.code);
+            setOpen(false);
+          },
+          children: item.label
+        }
+      ) }, item.code);
+    }) }) : null
+  ] });
+}
+
+// src/LoginCanvas.module.scss
+var LoginCanvas_module_default = {
+  canvas: "LoginCanvas_module_canvas",
+  grid: "LoginCanvas_module_grid",
+  lang: "LoginCanvas_module_lang",
+  decor: "LoginCanvas_module_decor",
+  slot: "LoginCanvas_module_slot",
+  slotFill: "LoginCanvas_module_slotFill"
+};
+function LoginCanvas({
+  tone,
+  locale,
+  onLocaleChange,
+  locales,
+  languageLabel,
+  fill = false,
+  decor,
+  children
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: LoginCanvas_module_default.canvas, "data-tone": tone, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: LoginCanvas_module_default.grid, "aria-hidden": "true" }),
+    decor ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: LoginCanvas_module_default.decor, children: decor }) : null,
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: LoginCanvas_module_default.lang, children: /* @__PURE__ */ jsxRuntime.jsx(
+      LoginLanguageSwitcher,
+      {
+        locale,
+        onChange: onLocaleChange,
+        locales,
+        label: languageLabel,
+        variant: tone === "console" || tone === "data" ? "onDark" : "default"
+      }
+    ) }),
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: fill ? `${LoginCanvas_module_default.slot} ${LoginCanvas_module_default.slotFill}` : LoginCanvas_module_default.slot, children })
+  ] });
+}
+
 // src/post-login-path.ts
 var DEFAULT_UNSAFE = ["/login", "/auth", "/exception"];
 function normalizeAppPath(path, fallback) {
@@ -1254,10 +1980,15 @@ function createPostLoginPathHelpers(options) {
 }
 
 exports.AuthGateProvider = AuthGateProvider;
+exports.DEFAULT_DISPOSABLE_EMAIL_BLOCKLIST = DEFAULT_DISPOSABLE_EMAIL_BLOCKLIST;
+exports.DEFAULT_LOGIN_LOCALES = DEFAULT_LOGIN_LOCALES;
 exports.DEFAULT_LOGIN_THEME_COLOR = DEFAULT_LOGIN_THEME_COLOR;
+exports.DEFAULT_REGISTER_EMAIL_ALLOWLIST = DEFAULT_REGISTER_EMAIL_ALLOWLIST;
 exports.HeadlessLoginPanel = HeadlessLoginPanel;
 exports.HostedOidcExperienceAdapter = HostedOidcExperienceAdapter;
 exports.LOGIN_EXPERIENCE_CAPABILITIES = LOGIN_EXPERIENCE_CAPABILITIES;
+exports.LoginCanvas = LoginCanvas;
+exports.LoginLanguageSwitcher = LoginLanguageSwitcher;
 exports.LogtoExperienceAdapter = LogtoExperienceAdapter;
 exports.LuminaryAuthProvider = LuminaryAuthProvider;
 exports.ReauthOverlay = ReauthOverlay;
@@ -1267,8 +1998,12 @@ exports.createLoginExperienceAdapter = createLoginExperienceAdapter;
 exports.createLogtoDirectSignInRequest = createLogtoDirectSignInRequest;
 exports.createPostLoginPathHelpers = createPostLoginPathHelpers;
 exports.createUserManager = createUserManager;
+exports.emailDomain = emailDomain;
+exports.evaluateRegisterEmail = evaluateRegisterEmail;
 exports.experiencePasswordSignIn = experiencePasswordSignIn;
+exports.fetchRegisterEmailPolicy = fetchRegisterEmailPolicy;
 exports.fetchSocialConnectors = fetchSocialConnectors;
+exports.formatAllowedEmailDomains = formatAllowedEmailDomains;
 exports.getCurrentUser = getCurrentUser;
 exports.getStoredAccessToken = getStoredAccessToken;
 exports.handleSignInCallback = handleSignInCallback;
@@ -1276,13 +2011,21 @@ exports.handleSignInPopupCallback = handleSignInPopupCallback;
 exports.isIdpConfigured = isIdpConfigured;
 exports.isLogtoRegisterUsername = isLogtoRegisterUsername;
 exports.isOidcPopupWindow = isOidcPopupWindow;
+exports.isValidEmailShape = isValidEmailShape;
+exports.loginLabels = loginLabels;
+exports.normalizeLoginLocale = normalizeLoginLocale;
+exports.normalizeRegisterEmailMode = normalizeRegisterEmailMode;
 exports.prepareSignInRequestUrl = prepareSignInRequestUrl;
 exports.readIdpConfigFromEnv = readIdpConfigFromEnv;
+exports.readRegisterEmailPolicyFromEnv = readRegisterEmailPolicyFromEnv;
+exports.registerEmailDomainsHint = registerEmailDomainsHint;
+exports.registerEmailRejectionMessage = registerEmailRejectionMessage;
 exports.resetUserManager = resetUserManager;
 exports.resolveExperienceApiBase = resolveExperienceApiBase;
 exports.resolveIssuer = resolveIssuer;
 exports.resolveLoginExperienceAdapter = resolveLoginExperienceAdapter;
 exports.resolveLoginExperienceProviderFromEnv = resolveLoginExperienceProviderFromEnv;
+exports.resolveRegisterEmailPolicy = resolveRegisterEmailPolicy;
 exports.sameOriginAuthorizeUrl = sameOriginAuthorizeUrl;
 exports.signInPopup = signInPopup;
 exports.signInRedirect = signInRedirect;