@passflow/core 0.20.0 → 0.20.1

package/dist/lib/passflow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passflow.d.ts","sourceRoot":"","sources":["../../lib/passflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAEL,KAAK,WAAW,EAGhB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,EAClC,KAAK,cAAc,EAEnB,4BAA4B,EAC5B,KAAK,uCAAuC,EAC5C,KAAK,mCAAmC,EACxC,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,yCAAyC,EAC9C,KAAK,iCAAiC,EACtC,KAAK,8BAA8B,EACnC,KAAK,qCAAqC,EAC1C,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAK7B,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAI7B,MAAM,OAAO,CAAC;AAOf,OAAO,EAAkC,aAAa,EAAqB,gBAAgB,EAAe,MAAM,YAAY,CAAC;AAE7H,OAAO,EAAqB,aAAa,EAAiB,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAc,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAEL,KAAK,kBAAkB,EAGvB,KAAK,SAAS,EACd,KAAK,uBAAuB,EAE5B,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AAGnB,qBAAa,QAAQ;IACnB;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAe;IAG9C,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,UAAU,CAAa;IAG/B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,sBAAsB,CAAU;IACxC,OAAO,CAAC,eAAe,CAAS;IAGhC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,gBAAgB,CAAmB;IAGpC,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,gBAAgB,CAAC;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAEhC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IAGrD,OAAO,CAAC,qBAAqB,CAAC,CAAgG;IAC9H,OAAO,CAAC,sBAAsB,CAAC,CAAsB;IAGrD,OAAO,CAAC,eAAe,CAAC,CAAmB;IAG3C,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,OAAO,CAAC,QAAQ,CAAkB;IAClC,IAAI,MAAM,IAAI,MAAM,CAEnB;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,YAAY,MAAM,EAAE,cAAc,EAyGjC;IAED;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAmB5B;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAEpC;IAED;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,QAAQ,EAAE,uBAAuB,GAAG,MAAM,IAAI,CAExD;IAED;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,aAAa,CAEvD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAoBxB,kGAAkG;IAClG,OAAO,CAAC,YAAY;IAapB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAShC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAUrF;YAEY,kBAAkB;IAyBhC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,SAAS,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,QAKjE;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,QAEnE;IAGD;;;;;;;;;;;;;;;OAeG;IACH,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED,OAAO,CAAC,iBAAiB;IA0FzB;;;;;;OAMG;IACH,OAAO,CAAC,0BAA0B;IAuBlC,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,gCAAgC;IAqCxC;;;;;;;;;;;;OAYG;IACH,eAAe,uBAEd;IAED;;;;;;;;;;OAUG;IACH,oBAAoB,gCAEnB;IAED;;;;;;;;;;;;;OAaG;IACH,eAAe,6BAEd;IAED;;;;;;;;;;;OAWG;IACH,gBAAgB,YAEf;IAGD;;;;;;;;;;;;;OAaG;IACH,eAAe,IAAI,OAAO,CASzB;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAInF;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAInF;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAEpG;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,0BAA0B,CAAC,OAAO,EAAE,yCAAyC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAIxH;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAUnB;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAY5B;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,sBAAsB,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAElE;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,yBAAyB,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAErE;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,QAanB;IAED;;;;;;;;;;;;;;;;;OAiBG;IACG,YAAY,IAAI,OAAO,CAAC,6BAA6B,CAAC,CAoB3D;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,sBAAsB,CAAC,OAAO,EAAE,qCAAqC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEvG;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAIlG;IAGD;;;;;;;;;;;;OAYG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,CAM3C;IAED;;;;;;;;;;;;OAYG;IACG,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAMnD;IAED;;;;;;;;;;;;OAYG;IACG,yBAAyB,IAAI,OAAO,CAAC,8BAA8B,CAAC,CAMzE;IAED;;;;;;;;;;;;OAYG;IACG,kBAAkB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAM3D;IAGD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,eAAe,CAAC,OAAO,EAAE,mCAAmC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAI1G;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACG,mBAAmB,CAAC,OAAO,EAAE,uCAAuC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAIlH;IAGD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAOlC;IAED;;;;;;;;;;;;;;OAcG;IACG,SAAS,CAAC,SAAS,UAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE9D;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAEjD;IAGD;;;;;;;;;;;;;OAaG;IACG,eAAe,mDAMpB;IAED;;;;;;;;;;;;;OAaG;IACG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAMzF;IAED;;;;;;;;;;;;OAYG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAM3E;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,cAAc,CAAC,OAAO,CAAC,EAAE;QAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB;IAGD;;;;;OAKG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAS7F;IAED;;;;;OAKG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAUxF;IAGD;;;;;;;;;;;;;;;;;;;OAmBG;IACG,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAUtF;IAED;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAMpC;IAED;;;;;;;;;;;;OAYG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAMtE;IAED;;;;;;;;;;;;OAYG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAMtE;IAED;;;;;;;;;;;;OAYG;IACG,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAMzE;IAGD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,eAAe,CAAC,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,MAAM,CAE/G;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI,CAE1G;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,eAAe,IAAI,OAAO,0BAA0B,EAAE,iBAAiB,CAEtE;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAEvC;IAID;;;;;;;;;;;;OAYG;IACG,kBAAkB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAM3D;IAED;;;;;;;;;;;;;OAaG;IACG,mBAAmB,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAM3D;IAED;;;;;;;;;;;;;;OAcG;IACG,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAM3E;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAc1G;IAED;;;;;;;;;;;;;;;;OAgBG;IACG,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAcrH;IAED;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAMtE;IAED;;;;;;;;;;;;;;OAcG;IACG,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAMzF;IAED;;;;;;;;;;;;OAYG;IACG,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAM3D;IAED;;;;;;;;;;;OAWG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMnD;IAED;;;;;;;;;;;;;OAaG;IACH,+BAA+B,IAAI,OAAO,CAEzC;IAED;;;;;;;;;OASG;IACH,aAAa,IAAI,CAAC,GAAG,CAAC,CAErB;IAID;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,+BAA+B,CACnC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,aAAa,EAAE,yCAAyC,CAAC,CAE1E;IAED;;;;;;;;;;;;;;OAcG;IACH,mBAAmB,IAAI,OAAO,aAAa,EAAE,8BAA8B,GAAG,IAAI,CAEjF;IAED;;;;;;;;;;;;;OAaG;IACH,mBAAmB,IAAI,OAAO,CAE7B;IAED;;;;;;;;;;OAUG;IACH,qBAAqB,IAAI,IAAI,CAE5B;CACF"}

package/dist/lib/pkce.d.ts

@@ -1,13 +0,0 @@
-/**
- * RFC 7636 proof key: the verifier stays on this client, its S256 hash goes to
- * the server with the sign-in, and the server answers with a code that only the
- * verifier redeems.
- */
-export type PkcePair = {
-    verifier: string;
-    challenge: string;
-};
-/** BASE64URL(SHA256(ASCII(verifier))), RFC 7636 §4.2. */
-export declare const s256Challenge: (verifier: string) => Promise<string>;
-export declare const createPkcePair: () => Promise<PkcePair>;
-//# sourceMappingURL=pkce.d.ts.map

package/dist/lib/pkce.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../lib/pkce.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AA+BF,yDAAyD;AACzD,eAAO,MAAM,aAAa,aAAoB,MAAM,KAAG,OAAO,CAAC,MAAM,CAGpE,CAAC;AAEF,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,QAAQ,CAGvD,CAAC"}

package/dist/lib/platform/index.d.ts

@@ -1,4 +0,0 @@
-export type { AuthCallbackResult, CurrentUrlInfo, OpenAuthUrlOptions, PasskeySupport, PlatformAdapter, PlatformStorage, } from './types';
-export { PopupClosedError } from './types';
-export { WebAdapter, webAdapter } from './web-adapter';
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/platform/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/platform/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC"}

package/dist/lib/platform/types.d.ts

@@ -1,206 +0,0 @@
-import type { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/browser';
-import type { Storage } from '../storage';
-/**
- * Synchronous key-value storage interface.
- * Compatible with localStorage (web) and react-native-mmkv (RN).
- * Alias of the Storage type in lib/storage/index.ts to maintain a single source of truth.
- */
-export type PlatformStorage = Storage;
-/**
- * Result returned by getCurrentUrl().
- * Provides structured access to URL components so adapters don't
- * need to parse a URL string themselves.
- */
-export type CurrentUrlInfo = {
-    /** Full URL string, e.g. "https://app.com/callback?access_token=abc#hash" */
-    href: string;
-    /** Origin, e.g. "https://app.com" */
-    origin: string;
-    /** Pathname, e.g. "/callback" */
-    pathname: string;
-    /** Query string including "?", e.g. "?access_token=abc" */
-    search: string;
-    /** Hash including "#", e.g. "#access_token=abc" */
-    hash: string;
-    /** Hostname without port, e.g. "app.com" */
-    hostname: string;
-};
-/**
- * Options passed to openAuthUrl(). Adapters can use these to decide
- * whether to open a popup, redirect, or use a deep link.
- */
-export type OpenAuthUrlOptions = {
-    /**
-     * Preferred presentation mode. Adapters may ignore this and use
-     * whatever makes sense for the platform.
-     * - "popup": Open in a popup window (web default)
-     * - "redirect": Full-page redirect (web fallback)
-     * - "deeplink": Open with a deep link (React Native)
-     */
-    mode?: 'popup' | 'redirect' | 'deeplink';
-    /** Popup width hint (web only) */
-    width?: number;
-    /** Popup height hint (web only) */
-    height?: number;
-    /** Origin to watch for the popup to return to (web popup mode only) */
-    expectedReturnOrigin?: string;
-};
-/**
- * Result returned when the auth flow completes.
- * The adapter is responsible for detecting when auth is done and
- * returning the tokens from the callback URL.
- */
-export type AuthCallbackResult = {
-    /** Raw query string from the callback URL, e.g. "?access_token=abc" */
-    callbackSearch: string;
-    /** Raw hash from the callback URL, e.g. "#access_token=abc" */
-    callbackHash: string;
-};
-/**
- * Optional passkey support. Adapters that do not support passkeys
- * return undefined from these methods. The calling code must check
- * for undefined before using the result.
- */
-export type PasskeySupport = {
-    /**
-     * Start a passkey registration ceremony.
-     * @returns Registration response, or undefined if not supported.
-     */
-    startRegistration(options: PublicKeyCredentialCreationOptionsJSON): Promise<RegistrationResponseJSON | undefined>;
-    /**
-     * Start a passkey authentication ceremony.
-     * @returns Authentication response, or undefined if not supported.
-     */
-    startAuthentication(options: PublicKeyCredentialRequestOptionsJSON): Promise<AuthenticationResponseJSON | undefined>;
-};
-/**
- * Error thrown when the authentication popup is closed by the user
- * before authentication completes. Use `instanceof PopupClosedError`
- * for type-safe error discrimination instead of string matching.
- */
-export declare class PopupClosedError extends Error {
-    constructor(message?: string);
-}
-/**
- * PlatformAdapter abstracts all platform-specific APIs that the
- * Passflow SDK needs. Implement this interface to add support for
- * a new platform (e.g. React Native).
- *
- * All methods have sensible defaults in WebAdapter. You only need
- * to implement what your platform supports.
- */
-export interface PlatformAdapter {
-    /**
-     * Synchronous key-value storage for tokens and SDK state.
-     * Must be synchronous. Use localStorage on web, MMKV on React Native.
-     */
-    readonly storage: PlatformStorage;
-    /**
-     * Returns the current URL of the application.
-     * On web: wraps window.location.
-     * On React Native: implement using your routing library (e.g. Linking.getInitialURL).
-     *
-     * May return null in environments where URL is not meaningful (e.g. during SSR).
-     */
-    getCurrentUrl(): CurrentUrlInfo | null;
-    /**
-     * Navigates to the given URL, replacing the current history entry.
-     * On web: window.history.replaceState(...)
-     * On React Native: no-op or use your router's replace method.
-     */
-    replaceUrl(url: string): void;
-    /**
-     * Navigates to the given URL, performing a full navigation.
-     * On web: window.location.href = url
-     * On React Native: use Linking.openURL or your router.
-     */
-    navigateTo(url: string): void;
-    /**
-     * Register a callback invoked when the app comes to the foreground
-     * (page becomes visible / app resumes).
-     * Returns an unsubscribe function.
-     *
-     * On web: document.addEventListener('visibilitychange', ...)
-     * On React Native: AppState.addEventListener('change', ...)
-     */
-    onForeground(callback: () => void): () => void;
-    /**
-     * Register a callback invoked when the app goes to the background
-     * (page hidden / app suspended).
-     * Returns an unsubscribe function.
-     *
-     * On web: document.addEventListener('visibilitychange', ...)
-     * On React Native: AppState.addEventListener('change', ...)
-     *
-     * NOTE: This method is intentionally not called by the SDK internally.
-     * It is part of the interface to support React Native adapters which need
-     * to perform cleanup (e.g., flush queues) when the app is backgrounded.
-     * Web adapters may implement it as a no-op or use visibilitychange.
-     */
-    onBackground(callback: () => void): () => void;
-    /**
-     * Register a callback invoked just before the page/app is closed.
-     * Returns an unsubscribe function.
-     *
-     * On web: window.addEventListener('beforeunload', ...)
-     * On React Native: implement as a no-op (RN handles cleanup differently).
-     */
-    onBeforeUnload(callback: () => void): () => void;
-    /**
-     * Returns true if the app is currently in the foreground (page visible).
-     * On web: !document.hidden
-     * On React Native: AppState.currentState === 'active'
-     */
-    isInForeground(): boolean;
-    /**
-     * Opens a URL for federated/OAuth authentication.
-     *
-     * Web implementation:
-     *   - "popup" mode: Opens a popup via window.open(), polls for the callback,
-     *     resolves when the popup returns to expectedReturnOrigin.
-     *   - "redirect" mode: Full-page redirect (window.location.href = url).
-     *     Returns a Promise that never resolves (page navigates away).
-     *
-     * React Native implementation:
-     *   - Opens the URL via Linking.openURL() with a deep link scheme.
-     *   - Resolves when the deep link callback is received.
-     *
-     * @returns Promise that resolves with the callback URL tokens,
-     *          or rejects if auth fails or is cancelled.
-     *          In redirect mode on web, the promise may never resolve.
-     */
-    openAuthUrl(url: string, options?: OpenAuthUrlOptions): Promise<AuthCallbackResult>;
-    /**
-     * Optional passkey support. If the platform does not support passkeys,
-     * this property is undefined. The SDK checks for undefined before calling.
-     */
-    readonly passkeys?: PasskeySupport;
-    /**
-     * Encodes a string to Base64.
-     * On web: btoa(str)
-     * On React Native: use base64-js or Buffer.
-     */
-    btoa(str: string): string;
-    /**
-     * Decodes a Base64 string.
-     * On web: atob(str) or Buffer fallback for SSR.
-     * On React Native: use base64-js or Buffer.
-     */
-    atob(str: string): string;
-    /**
-     * Returns true if the platform supports HTTP cookies.
-     * On web: true (with a quick write/read test).
-     * On React Native: false. Cookie mode is not available.
-     *
-     * When this returns false, cookie token delivery mode must not be used.
-     * The SDK will throw a descriptive error if cookie mode is configured
-     * on a platform where cookies are not supported.
-     */
-    cookiesSupported(): boolean;
-    /**
-     * Returns the platform/device type.
-     * Used to set the X-Device-Type header on API requests.
-     */
-    getDeviceType(): 'web' | 'ios' | 'android';
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/lib/platform/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../lib/platform/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,sCAAsC,EACtC,qCAAqC,EACrC,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAM1C;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC;AAMtC;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAMF;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IACzC,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAMF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EAAE,sCAAsC,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAElH;;;OAGG;IACH,mBAAmB,CAAC,OAAO,EAAE,qCAAqC,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CACtH,CAAC;AAMF;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAO,SAAoC,EAGtD;CACF;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAG9B;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAIlC;;;;;;OAMG;IACH,aAAa,IAAI,cAAc,GAAG,IAAI,CAAC;IAEvC;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAI9B;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAE/C;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAE/C;;;;;;OAMG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAEjD;;;;OAIG;IACH,cAAc,IAAI,OAAO,CAAC;IAI1B;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAIpF;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IAInC;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAE1B;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAI1B;;;;;;;;OAQG;IACH,gBAAgB,IAAI,OAAO,CAAC;IAI5B;;;OAGG;IACH,aAAa,IAAI,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;CAC5C"}

package/dist/lib/platform/web-adapter.d.ts

@@ -1,104 +0,0 @@
-import { type AuthCallbackResult, type CurrentUrlInfo, type OpenAuthUrlOptions, type PasskeySupport, type PlatformAdapter, type PlatformStorage } from './types';
-export declare class WebAdapter implements PlatformAdapter {
-    get storage(): PlatformStorage;
-    /**
-     * Replaces:
-     *   window.location.origin  (passflow.ts:95, axios-client.ts:49)
-     *   window.location.search  (passflow.ts:338,416, auth-service.ts:610,826)
-     *   window.location.hash    (passflow.ts:342)
-     *   window.location.href    (auth-service.ts:826)
-     *   window.location.pathname (passflow.ts:429,441,443)
-     *   window?.location?.hostname (user-service.ts:57)
-     */
-    getCurrentUrl(): CurrentUrlInfo | null;
-    /**
-     * Replaces:
-     *   window.history.replaceState({}, document.title, ...)
-     *   (passflow.ts:429, 441, 443)
-     */
-    replaceUrl(url: string): void;
-    /**
-     * Replaces:
-     *   window.location.href = url
-     *   (auth-service.ts:795, 813, 845, passflow.ts indirectly)
-     */
-    navigateTo(url: string): void;
-    /**
-     * Replaces:
-     *   document.addEventListener('visibilitychange', handler) where !document.hidden
-     *   (token-cache-service.ts:134-145)
-     */
-    onForeground(callback: () => void): () => void;
-    /**
-     * Replaces:
-     *   document.addEventListener('visibilitychange', handler) where document.hidden
-     *   (token-cache-service.ts:134-145, complementary to onForeground)
-     *
-     * NOTE: Not currently called by the SDK. Included in the interface for
-     * React Native adapter compatibility (future use).
-     */
-    onBackground(callback: () => void): () => void;
-    /**
-     * Replaces:
-     *   window.addEventListener('beforeunload', ...)
-     *   (token-cache-service.ts:151)
-     */
-    onBeforeUnload(callback: () => void): () => void;
-    /**
-     * Replaces:
-     *   typeof document !== 'undefined' && document.hidden
-     *   (token-cache-service.ts:112)
-     */
-    isInForeground(): boolean;
-    /**
-     * Replaces:
-     *   window.open(passflowURL, '_blank', `width=...,height=...`)
-     *   + polling loop with popupWindow.location.href/search
-     *   + window.location.href = origin (post-auth redirect)
-     *   (auth-service.ts:741-805)
-     *
-     *   window.location.href = passflowURL (redirect mode)
-     *   (auth-service.ts:813)
-     */
-    openAuthUrl(url: string, options?: OpenAuthUrlOptions): Promise<AuthCallbackResult>;
-    /**
-     * Replaces:
-     *   startRegistration({ optionsJSON: publicKey }) from @simplewebauthn/browser
-     *   (auth-service.ts:645-646, user-service.ts:65)
-     *
-     *   startAuthentication({ optionsJSON: publicKey }) from @simplewebauthn/browser
-     *   (auth-service.ts:681)
-     */
-    readonly passkeys: PasskeySupport;
-    /**
-     * Replaces:
-     *   btoa(publicKey.user.id)
-     *   (auth-service.ts:644, user-service.ts:64)
-     */
-    btoa(str: string): string;
-    /**
-     * Replaces:
-     *   window.atob(base64) / Buffer.from(base64, 'base64').toString('utf-8')
-     *   (token/service.ts:26-27)
-     */
-    atob(str: string): string;
-    /**
-     * Replaces:
-     *   document.cookie write/read test
-     *   (axios-client.ts:221-223)
-     */
-    cookiesSupported(): boolean;
-    /**
-     * Replaces:
-     *   Hardcoded 'web' string in DEVICE_TYPE_HEADER_KEY header
-     *   (axios-client.ts:91)
-     *   OS.web enum value (auth-service.ts:244, 358, 637, 676, user-service.ts:55)
-     */
-    getDeviceType(): 'web' | 'ios' | 'android';
-}
-/**
- * Singleton instance used as the default adapter.
- * Exported so consuming code can reference it without allocating a new instance.
- */
-export declare const webAdapter: WebAdapter;
-//# sourceMappingURL=web-adapter.d.ts.map

package/dist/lib/platform/web-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-adapter.d.ts","sourceRoot":"","sources":["../../../lib/platform/web-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EAErB,MAAM,SAAS,CAAC;AAEjB,qBAAa,UAAW,YAAW,eAAe;IAMhD,IAAI,OAAO,IAAI,eAAe,CAY7B;IAMD;;;;;;;;OAQG;IACH,aAAa,IAAI,cAAc,GAAG,IAAI,CAUrC;IAED;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAG5B;IAED;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAG5B;IAMD;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAU7C;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAU7C;IAED;;;;OAIG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAO/C;IAED;;;;OAIG;IACH,cAAc,IAAI,OAAO,CAGxB;IAMD;;;;;;;;;OASG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiEtF;IAMD;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAG/B;IAMF;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExB;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQxB;IAMD;;;;OAIG;IACH,gBAAgB,IAAI,OAAO,CAU1B;IAMD;;;;;OAKG;IACH,aAAa,IAAI,KAAK,GAAG,KAAK,GAAG,SAAS,CAEzC;CACF;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,YAAmB,CAAC"}

package/dist/lib/services/auth-service.d.ts

@@ -1,197 +0,0 @@
-import { AuthAPI, PassflowAuthorizationResponse, PassflowFederatedAuthExtendedPayload, PassflowFederatedAuthPayload, PassflowPasskeyAuthenticateStartPayload, PassflowPasskeyRegisterStartPayload, PassflowPasswordlessResponse, PassflowPasswordlessSignInCompletePayload, PassflowPasswordlessSignInPayload, PassflowSendPasswordResetEmailPayload, PassflowSignInPayload, PassflowSignUpPayload, PassflowSuccessResponse, PassflowValidationResponse, TokenExchangeConfig, type UpgradeRefreshField } from '../api';
-import { DeviceService } from '../device';
-import { type PlatformAdapter } from '../platform';
-import { StorageManager } from '../storage';
-import { PassflowStore } from '../store';
-import { ParsedTokens, Tokens } from '../types';
-import { type UpgradeSessionPin } from '../upgrade/session';
-import { TokenCacheService } from './token-cache-service';
-/**
- * Service for handling authentication related functionality
- */
-export declare class AuthService {
-    private authApi;
-    private deviceService;
-    private storageManager;
-    private subscribeStore;
-    private tokenCacheService;
-    private scopes;
-    private createTenantForNewUser;
-    private url;
-    private sessionCallbacks;
-    private appId?;
-    private platform;
-    private readPkceEnabled?;
-    private tokenDeliveryManager;
-    private tokenExchangeConfig?;
-    private pendingPkce?;
-    constructor(authApi: AuthAPI, deviceService: DeviceService, storageManager: StorageManager, subscribeStore: PassflowStore, tokenCacheService: TokenCacheService, scopes: string[], createTenantForNewUser: boolean, url: string, sessionCallbacks: {
-        createSession?: ({ tokens, parsedTokens }: {
-            tokens?: Tokens;
-            parsedTokens?: ParsedTokens;
-        }) => Promise<void>;
-        expiredSession?: () => Promise<void>;
-    }, appId?: string | undefined, tokenExchangeConfig?: TokenExchangeConfig, platform?: PlatformAdapter, readPkceEnabled?: (() => Promise<boolean>) | undefined);
-    /**
-     * Initialize session state on page load for cookie/BFF mode
-     */
-    private initializeSession;
-    /**
-     * Restore session for cookie/BFF mode on page load
-     * Validates that HttpOnly cookies are still valid
-     * @returns true if session is valid, false otherwise
-     */
-    restoreSession(): Promise<boolean>;
-    /**
-     * Process successful authentication response
-     * Handles token storage, session state, CSRF tokens
-     * In BFF mode, forwards tokens to BFF server
-     */
-    private processAuthResponse;
-    /**
-     * Reports whether a sign-in response is still waiting on its second factor,
-     * and when it is, hands the 2FA token on.
-     *
-     * Every sign-in path can end this way: the server answers with a
-     * `tfa_token` (or `requires_2fa`) in place of tokens. That response is not
-     * a session, so on `true` the caller returns it as it is — without
-     * `processAuthResponse`, a `SignIn`/`Register` event or a session check.
-     * The `TwoFactorRequired` event is what the TwoFactorService listens to, so
-     * its verify and recovery calls can carry the token. On a PKCE sign-in the
-     * server keeps the login's challenge, so the second factor's answer is a code:
-     * the verifier stays here for `completePkceSignIn`, off the public event.
-     */
-    private handlePendingSecondFactor;
-    /**
-     * Keeps the verifier in memory, which is where it is read from first. The copy
-     * in sessionStorage is only for a redirect or reload during the second factor,
-     * which would otherwise lose the sign-in.
-     */
-    private rememberPkceSignIn;
-    private readPendingPkce;
-    /** Whether a PKCE sign-in is waiting for the code its second factor answers with. */
-    hasPendingPkceSignIn(): boolean;
-    /** Drops the verifier of a pending sign-in. `TwoFactorService` calls this with its own state. */
-    forgetPkceSignIn(): void;
-    /**
-     * The proof key for a sign-in on a PKCE app, undefined on any other app.
-     *
-     * It is sent whether or not the sign-in has a parent: the parent is added to
-     * the request outside this SDK, so it is not visible here, and `pkce.Challenge`
-     * on the server wants it under a device parent and ignores it under an OIDC one.
-     * When the setting cannot be read the sign-in goes out without a challenge, and
-     * a PKCE app refuses it with its own error.
-     */
-    private startPkce;
-    /**
-     * Swaps a code in a sign-in's answer for what the code stands for; any other
-     * answer passes through. That can still be a 2FA token: the server re-runs its
-     * gate at the exchange unless the code records a passed second factor.
-     */
-    private exchangeCode;
-    /**
-     * Finishes a PKCE sign-in whose code came from its second factor: redeems the
-     * code with the first factor's verifier and applies the tokens. `TwoFactorService`
-     * is the caller, and clears the pending state once this has succeeded.
-     */
-    completePkceSignIn(code: string): Promise<PassflowAuthorizationResponse>;
-    /**
-     * Applies tokens that were issued outside this service, honouring the delivery
-     * mode: this is the one place they reach the BFF and browser storage, so no
-     * caller saves them itself. An answer that carries no tokens is left alone.
-     */
-    applyTokens(tokens: Tokens): Promise<void>;
-    /**
-     * Forward tokens to BFF server for httpOnly cookie storage
-     */
-    private forwardTokensToBFF;
-    signIn(payload: PassflowSignInPayload): Promise<PassflowAuthorizationResponse>;
-    signUp(payload: PassflowSignUpPayload): Promise<PassflowAuthorizationResponse>;
-    passwordlessSignIn(payload: PassflowPasswordlessSignInPayload): Promise<PassflowPasswordlessResponse>;
-    passwordlessSignInComplete(payload: PassflowPasswordlessSignInCompletePayload): Promise<PassflowValidationResponse>;
-    logOut(): Promise<void>;
-    /**
-     * The session and user identity this client currently holds, or `undefined`
-     * when none is readable.
-     *
-     * Read from the stored access token's claims, which is the same source every
-     * other client-side session fact comes from. In a delivery mode that keeps
-     * the access token out of reach — a cookie-mode or BFF session — there is
-     * nothing to read and the answer is `undefined`.
-     */
-    readSessionPin(): UpgradeSessionPin | undefined;
-    /**
-     * Refuses to APPLY tokens that belong to a different principal (§13.4
-     * revision 6 / H2).
-     *
-     * Called immediately before the rotated tokens are written, which is the only
-     * place the check cannot be bypassed: the epoch guard around `prepare` and
-     * `commit` runs before the server call, and token application happens after
-     * it returns, so a logout and re-login in between let user A's flight write
-     * over user B's session.
-     *
-     * It throws `UpgradeSessionChangedError`, so the elevation terminates as
-     * §13.3's `session changed mid-flight` on every surface — the outcome class
-     * itself, not a transport failure that happens to carry the kind: this is the
-     * only entry point into token application, so a caller holding the promise
-     * directly (`AuthService.refreshToken`) must see the same `code` a waiter
-     * behind the controller does. It does NOT invalidate
-     * anything: `setSessionInvalid()` runs off a positive allow-list elsewhere,
-     * and the live user is never logged out as a side effect of someone else's
-     * abandoned flight. Fail-closed on token application, fail-open on session
-     * state — two different axes.
-     */
-    private assertSessionPin;
-    /**
-     * Refreshes the session, optionally committing an assurance upgrade.
-     *
-     * This is the ONLY token-storing path for all four delivery modes, which is
-     * why the upgrade commit goes through here rather than posting to
-     * `/auth/refresh` directly: it saves the rotated tokens, updates the cache and
-     * emits `Refresh`. Bypassing it would elevate the session on the server and
-     * leave the client holding stale tokens — everything looks fine until the next
-     * request 401s.
-     *
-     * An upgrade commit changes the error handling in one specific way: a 4xx is
-     * NOT treated as a dead session. The server answers a wrong code with a 401,
-     * and tearing the session down there is the logout-at-step-up defect. The
-     * upgrade transport classifies those failures and invalidates the session
-     * itself when the 401 turns out to be a genuine expiry.
-     */
-    refreshToken(upgrade?: UpgradeRefreshField, pin?: UpgradeSessionPin): Promise<PassflowAuthorizationResponse>;
-    sendPasswordResetEmail(payload: PassflowSendPasswordResetEmailPayload): Promise<PassflowSuccessResponse>;
-    resetPassword(newPassword: string, scopes?: string[]): Promise<PassflowAuthorizationResponse>;
-    passkeyRegister(payload: PassflowPasskeyRegisterStartPayload): Promise<PassflowAuthorizationResponse>;
-    passkeyAuthenticate(payload: PassflowPasskeyAuthenticateStartPayload): Promise<PassflowAuthorizationResponse>;
-    createFederatedAuthUrl(payload: PassflowFederatedAuthExtendedPayload): string;
-    federatedAuthWithPopup(payload: PassflowFederatedAuthPayload): Promise<void>;
-    federatedAuthWithRedirect(payload: PassflowFederatedAuthPayload): void;
-    authRedirectUrl(options?: {
-        url?: string;
-        redirectUrl?: string;
-        scopes?: string[];
-        appId?: string;
-    }): string;
-    authRedirect(options?: {
-        url?: string;
-        redirectUrl?: string;
-        scopes?: string[];
-        appId?: string;
-    }): void;
-    /**
-     * Check if user is authenticated
-     * CRITICAL: Cookie/BFF mode checks ID token + session state, NOT access_token
-     */
-    isAuthenticated(parsedTokens: ParsedTokens): boolean;
-    /**
-     * Handle session check and callbacks
-     */
-    submitSessionCheck(doRefresh?: boolean): Promise<Tokens | undefined>;
-    /**
-     * Get tokens and refresh if needed
-     * Cookie/BFF mode: Returns ID token only (access/refresh in HttpOnly cookies)
-     * JSON mode: Returns all tokens from localStorage
-     */
-    getTokens(doRefresh: boolean): Promise<Tokens | undefined>;
-}
-//# sourceMappingURL=auth-service.d.ts.map

package/dist/lib/services/auth-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-service.d.ts","sourceRoot":"","sources":["../../../lib/services/auth-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,OAAO,EAEP,6BAA6B,EAE7B,oCAAoC,EACpC,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,4BAA4B,EAC5B,yCAAyC,EACzC,iCAAiC,EACjC,qCAAqC,EACrC,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,mBAAmB,EACzB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,KAAK,eAAe,EAAgC,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAA+B,aAAa,EAAE,MAAM,UAAU,CAAC;AAGtE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAqC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAa1D;;GAEG;AACH,qBAAa,WAAW;IAMpB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,sBAAsB;IAC9B,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,KAAK,CAAC;IAEd,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,eAAe,CAAC;IApB1B,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAClD,OAAO,CAAC,WAAW,CAAC,CAAoB;IAExC,YACU,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,cAAc,EAAE,aAAa,EAC7B,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,MAAM,EAAE,EAChB,sBAAsB,EAAE,OAAO,EAC/B,GAAG,EAAE,MAAM,EACX,gBAAgB,EAAE;QACxB,aAAa,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,YAAY,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9G,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KACtC,EACO,KAAK,CAAC,EAAE,MAAM,YAAA,EACtB,mBAAmB,CAAC,EAAE,mBAAmB,EACjC,QAAQ,GAAE,eAA4B,EACtC,eAAe,CAAC,GAAE,MAAM,OAAO,CAAC,OAAO,CAAC,aAAA,EAYjD;IAED;;OAEG;YACW,iBAAiB;IAO/B;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAoDvC;IAED;;;;OAIG;YACW,mBAAmB;IAiCjC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yBAAyB;IAsBjC;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,eAAe;IAevB,qFAAqF;IACrF,oBAAoB,IAAI,OAAO,CAE9B;IAED,iGAAiG;IACjG,gBAAgB,IAAI,IAAI,CAUvB;IAED;;;;;;;;OAQG;YACW,SAAS;IAWvB;;;;OAIG;YACW,YAAY;IAU1B;;;;OAIG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAQ7E;IAED;;;;OAIG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM/C;IAED;;OAEG;YACW,kBAAkB;IAwB1B,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA6EnF;IAEK,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAwDnF;IAEK,kBAAkB,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,4BAA4B,CAAC,CA2C1G;IAEK,0BAA0B,CAAC,OAAO,EAAE,yCAAyC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA2BxH;IAEK,MAAM,kBA2CX;IAED;;;;;;;;OAQG;IACH,cAAc,IAAI,iBAAiB,GAAG,SAAS,CAU9C;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,gBAAgB;IAkBxB;;;;;;;;;;;;;;;OAeG;IACG,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA4LjH;IAEK,sBAAsB,CAAC,OAAO,EAAE,qCAAqC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAY7G;IAEK,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAsClG;IAEK,eAAe,CAAC,OAAO,EAAE,mCAAmC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA+C1G;IAEK,mBAAmB,CAAC,OAAO,EAAE,uCAAuC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA+ClH;IAED,sBAAsB,CAAC,OAAO,EAAE,oCAAoC,GAAG,MAAM,CAoB5E;IAEK,sBAAsB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CjF;IAED,yBAAyB,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAMrE;IAGD,eAAe,CAAC,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,MAAM,CAwB/G;IAED,YAAY,CAAC,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI,CAW1G;IAED;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CA8BnD;IAED;;OAEG;IACG,kBAAkB,CAAC,SAAS,UAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAwBvE;IAED;;;;OAIG;IACG,SAAS,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyC/D;CACF"}

package/dist/lib/services/index.d.ts

@@ -1,8 +0,0 @@
-export * from './auth-service';
-export * from './invitation-service';
-export * from './tenant-service';
-export * from './tenant-user-membership';
-export * from './token-cache-service';
-export * from './two-factor-service';
-export * from './user-service';
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/services/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC"}

package/dist/lib/services/invitation-service.d.ts

@@ -1,44 +0,0 @@
-import type { InvitationAPI, InvitationsPaginatedList, InviteLinkResponse, PassflowSuccessResponse, RequestInviteLinkPayload } from '../api';
-/**
- * Service for managing invitations
- */
-export declare class InvitationService {
-    private invitationApi;
-    constructor(invitationApi: InvitationAPI);
-    /**
-     * Requests an invitation link that can be used to invite users
-     * @param payload Request invitation payload
-     * @returns Promise with invitation link and token
-     */
-    requestInviteLink(payload: RequestInviteLinkPayload): Promise<InviteLinkResponse>;
-    /**
-     * Gets a list of active invitations
-     * @param options Optional parameters for filtering and pagination
-     * @returns Promise with paginated list of invitations
-     */
-    getInvitations(options: {
-        tenantID: string;
-        groupID?: string;
-        skip?: number | string;
-        limit?: number | string;
-    }): Promise<InvitationsPaginatedList>;
-    /**
-     * Deletes an invitation by token
-     * @param token The invitation token to delete
-     * @returns Promise with success response
-     */
-    deleteInvitation(token: string): Promise<PassflowSuccessResponse>;
-    /**
-     * Resends an invitation by token
-     * @param token The invitation token to resend
-     * @returns Promise with success response
-     */
-    resendInvitation(token: string): Promise<PassflowSuccessResponse>;
-    /**
-     * Gets a link to an invitation by id
-     * @param invitationID The invitation ID to get link
-     * @returns Promise with the link
-     */
-    getInvitationLink(invitationID: string): Promise<InviteLinkResponse>;
-}
-//# sourceMappingURL=invitation-service.d.ts.map

package/dist/lib/services/invitation-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation-service.d.ts","sourceRoot":"","sources":["../../../lib/services/invitation-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,QAAQ,CAAC;AAEhB;;GAEG;AACH,qBAAa,iBAAiB;IAChB,OAAO,CAAC,aAAa;IAAjC,YAAoB,aAAa,EAAE,aAAa,EAAI;IAEpD;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEhF;IAED;;;;OAIG;IACH,cAAc,CAAC,OAAO,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAEpC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEhE;IAED;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEhE;IAED;;;;OAIG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEnE;CACF"}