@passflow/core 0.20.0 → 0.20.1

package/dist/lib/storage/index.d.ts

@@ -1,106 +0,0 @@
-/**
- * Storage Manager
- *
- * Abstraction layer over browser localStorage for token and data persistence.
- * Supports custom storage implementations for testing and alternative platforms.
- * Handles key prefixing for multi-app scenarios.
- *
- * @module storage
- */
-import { TokenType } from '../token';
-import { TokenDeliveryMode, Tokens } from '../types';
-export type Storage = {
-    setItem: (key: string, value: string) => void;
-    getItem: (key: string) => string | null;
-    removeItem: (key: string) => void;
-};
-export interface StorageManagerParams {
-    storage?: Storage;
-    prefix?: string;
-}
-export declare class StorageManager {
-    private keyStoragePrefix;
-    readonly scopes: string;
-    readonly deviceId: string;
-    readonly invitationToken: string;
-    readonly previousRedirectUrl: string;
-    private readonly STORAGE_PREFIX;
-    private readonly ID_TOKEN_KEY;
-    private readonly CSRF_TOKEN_KEY;
-    private readonly DELIVERY_MODE_KEY;
-    private storage;
-    constructor({ storage, prefix }?: StorageManagerParams);
-    /**
-     * Save tokens to storage with conditional logic based on delivery mode
-     * In cookie/BFF mode: ONLY save ID token (not access/refresh tokens)
-     * In JSON mode: save all tokens (existing behavior)
-     */
-    saveTokens(tokens: Tokens, deliveryMode?: TokenDeliveryMode): void;
-    getToken(tokenType: TokenType): string | undefined;
-    /**
-     * Get tokens from storage with conditional logic based on delivery mode
-     * In cookie/BFF mode: return ID token only (access/refresh in HttpOnly cookies)
-     * In JSON mode: return all stored tokens (existing behavior)
-     */
-    getTokens(): Tokens | undefined;
-    getScopes(): string[] | undefined;
-    /**
-     * Check if JSON mode tokens exist in storage (ignores delivery mode)
-     * Used to detect stale state where delivery_mode is set but JSON tokens exist
-     */
-    hasJsonModeTokens(): boolean;
-    /**
-     * Check if cookie mode ID token exists in storage
-     * Used to detect legitimate cookie/BFF mode sessions
-     */
-    hasCookieModeIdToken(): boolean;
-    deleteToken(tokenType: TokenType): void;
-    deleteTokens(): void;
-    getDeviceId(): string | undefined;
-    setDeviceId(deviceId: string): void;
-    deleteDeviceId(): void;
-    setInvitationToken(token: string): void;
-    getInvitationToken(): string | undefined;
-    deleteInvitationToken(): void;
-    setPreviousRedirectUrl(url: string): void;
-    getPreviousRedirectUrl(): string | undefined;
-    deletePreviousRedirectUrl(): void;
-    /**
-     * Set the token delivery mode in storage
-     */
-    setDeliveryMode(mode: TokenDeliveryMode): void;
-    /**
-     * Get the token delivery mode from storage
-     */
-    getDeliveryMode(): TokenDeliveryMode | undefined;
-    /**
-     * Clear the delivery mode from storage
-     */
-    clearDeliveryMode(): void;
-    /**
-     * Get the ID token from storage (cookie mode)
-     */
-    getIdToken(): string | undefined;
-    /**
-     * Set the ID token in storage (cookie mode)
-     */
-    setIdToken(token: string): void;
-    /**
-     * Clear the ID token from storage
-     */
-    clearIdToken(): void;
-    /**
-     * Get the CSRF token from storage
-     */
-    getCsrfToken(): string | undefined;
-    /**
-     * Set the CSRF token in storage
-     */
-    setCsrfToken(token: string): void;
-    /**
-     * Clear the CSRF token from storage
-     */
-    clearCsrfToken(): void;
-    private getKeyForTokenType;
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/storage/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAErD,MAAM,MAAM,OAAO,GAAG;IACpB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACxC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,gBAAgB,CAAM;IAC9B,QAAQ,CAAC,MAAM,SAA2C;IAC1D,QAAQ,CAAC,QAAQ,SAA8C;IAC/D,QAAQ,CAAC,eAAe,SAAqD;IAC7E,QAAQ,CAAC,mBAAmB,SAAyD;IAGrF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoC;IACjE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IACrE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyC;IAE3E,OAAO,CAAC,OAAO,CAAU;IAEzB,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,GAAE,oBAAyB,EAGzD;IAED;;;;OAIG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAgBjE;IAED,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAGjD;IAED;;;;OAIG;IACH,SAAS,IAAI,MAAM,GAAG,SAAS,CAsB9B;IAED,SAAS,IAAI,MAAM,EAAE,GAAG,SAAS,CAEhC;IAED;;;OAGG;IACH,iBAAiB,IAAI,OAAO,CAG3B;IAED;;;OAGG;IACH,oBAAoB,IAAI,OAAO,CAG9B;IAED,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAGtC;IAED,YAAY,IAAI,IAAI,CAanB;IAED,WAAW,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAElC;IAED,cAAc,IAAI,IAAI,CAErB;IAED,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtC;IAED,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvC;IAED,qBAAqB,IAAI,IAAI,CAE5B;IAED,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAExC;IAED,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE3C;IAED,yBAAyB,IAAI,IAAI,CAEhC;IAID;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAM7C;IAED;;OAEG;IACH,eAAe,IAAI,iBAAiB,GAAG,SAAS,CAU/C;IAED;;OAEG;IACH,iBAAiB,IAAI,IAAI,CAMxB;IAID;;OAEG;IACH,UAAU,IAAI,MAAM,GAAG,SAAS,CAO/B;IAED;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM9B;IAED;;OAEG;IACH,YAAY,IAAI,IAAI,CAMnB;IAID;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,SAAS,CAOjC;IAED;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAMhC;IAED;;OAEG;IACH,cAAc,IAAI,IAAI,CAMrB;IAED,OAAO,CAAC,kBAAkB;CAG3B"}

package/dist/lib/store.d.ts

@@ -1,175 +0,0 @@
-/**
- * Passflow Store
- *
- * Event subscription system using the Observer pattern.
- * Manages authentication event notifications to subscribers.
- * Supports filtered subscriptions for specific event types.
- *
- * @module store
- */
-import type { TwoFactorMethod } from './api/model';
-import { ParsedTokens, Tokens } from './types';
-/**
- * Passflow event types
- */
-export declare enum PassflowEvent {
-    SignIn = "signin",
-    SignInStart = "signin:start",
-    Register = "register",
-    RegisterStart = "register:start",
-    SignOut = "signout",
-    SessionRestored = "session:restored",
-    SessionExpired = "session:expired",
-    Error = "error",
-    Refresh = "refresh",
-    RefreshStart = "refresh:start",
-    TokenCacheExpired = "token-cache-expired",
-    TwoFactorRequired = "2fa:required",
-    TwoFactorSetupStarted = "2fa:setup_started",
-    TwoFactorEnabled = "2fa:enabled",
-    TwoFactorDisabled = "2fa:disabled",
-    TwoFactorVerified = "2fa:verified",
-    TwoFactorRecoveryUsed = "2fa:recovery_used",
-    TwoFactorRecoveryCodesLow = "2fa:recovery_low",
-    TwoFactorRecoveryCodesExhausted = "2fa:recovery_exhausted",
-    TwoFactorSetupMagicLinkValidated = "2fa:magic_link_validated",
-    TwoFactorSetupMagicLinkFailed = "2fa:magic_link_failed",
-    TwoFactorChallengeReceived = "two_factor_challenge_received",
-    TwoFactorMethodSwitched = "two_factor_method_switched",
-    TwoFactorDeviceTrusted = "two_factor_device_trusted"
-}
-/**
- * Error payload interface for structured error information
- */
-export interface ErrorPayload {
-    message: string;
-    code?: string | number;
-    details?: unknown;
-    originalError?: unknown;
-}
-/**
- * Event-specific payload types
- */
-export type PassflowEventPayload = {
-    [PassflowEvent.SignIn]: {
-        tokens?: Tokens;
-        parsedTokens?: ParsedTokens;
-    };
-    [PassflowEvent.SignInStart]: {
-        email?: string;
-        provider?: string;
-    };
-    [PassflowEvent.Register]: {
-        tokens?: Tokens;
-        parsedTokens?: ParsedTokens;
-    };
-    [PassflowEvent.RegisterStart]: {
-        email?: string;
-    };
-    [PassflowEvent.SignOut]: {
-        userId?: string;
-    };
-    [PassflowEvent.SessionRestored]: {
-        id: string;
-        email?: string;
-        username?: string;
-        [key: string]: unknown;
-    };
-    [PassflowEvent.SessionExpired]: {
-        reason: 'refresh_failed' | 'token_invalid' | 'logged_out';
-    };
-    [PassflowEvent.Error]: ErrorPayload;
-    [PassflowEvent.Refresh]: {
-        tokens?: Tokens;
-        parsedTokens?: ParsedTokens;
-    };
-    [PassflowEvent.RefreshStart]: {
-        tokenId?: string;
-    };
-    [PassflowEvent.TokenCacheExpired]: {
-        isExpired: boolean;
-    };
-    [PassflowEvent.TwoFactorRequired]: {
-        email: string;
-        challengeId: string;
-        tfaToken: string;
-    };
-    [PassflowEvent.TwoFactorSetupStarted]: {
-        secret: string;
-        method?: TwoFactorMethod;
-    };
-    [PassflowEvent.TwoFactorEnabled]: {
-        recoveryCodes: string[];
-        clearRecoveryCodes: () => void;
-    };
-    [PassflowEvent.TwoFactorDisabled]: Record<string, never>;
-    [PassflowEvent.TwoFactorVerified]: {
-        tokens?: Tokens;
-    };
-    [PassflowEvent.TwoFactorRecoveryUsed]: {
-        tokens?: Tokens;
-        remainingCodes: number;
-    };
-    [PassflowEvent.TwoFactorRecoveryCodesLow]: {
-        tokens?: Tokens;
-        remainingCodes: number;
-    };
-    [PassflowEvent.TwoFactorRecoveryCodesExhausted]: {
-        tokens?: Tokens;
-    };
-    [PassflowEvent.TwoFactorSetupMagicLinkValidated]: {
-        userId: string;
-        appId?: string | null;
-        expiresIn: number;
-        sessionToken: string;
-    };
-    [PassflowEvent.TwoFactorSetupMagicLinkFailed]: {
-        error: {
-            code: 'INVALID_TOKEN' | 'EXPIRED_TOKEN' | 'REVOKED_TOKEN' | 'RATE_LIMITED' | 'SERVER_ERROR';
-            message: string;
-            retryAfter?: number;
-        };
-    };
-    [PassflowEvent.TwoFactorChallengeReceived]: {
-        challengeId: string;
-        method: TwoFactorMethod;
-        alternativeMethods: TwoFactorMethod[];
-    };
-    [PassflowEvent.TwoFactorMethodSwitched]: {
-        challengeId: string;
-        method: TwoFactorMethod;
-        alternativeMethods: TwoFactorMethod[];
-    };
-    [PassflowEvent.TwoFactorDeviceTrusted]: Record<string, never>;
-};
-/**
- * Passflow subscriber interface
- */
-export interface PassflowSubscriber {
-    onAuthChange<E extends PassflowEvent>(eventType: E, payload?: PassflowEventPayload[E]): void;
-}
-/**
- * Store for managing Passflow event subscriptions
- */
-export declare class PassflowStore {
-    private subscribers;
-    /**
-     * Subscribe to authentication events
-     * @param subscriber The subscriber to register
-     * @param events Optional specific events to subscribe to
-     */
-    subscribe(subscriber: PassflowSubscriber, events?: PassflowEvent[]): void;
-    /**
-     * Unsubscribe from authentication events
-     * @param subscriber The subscriber to unregister
-     * @param events Optional specific events to unsubscribe from
-     */
-    unsubscribe(subscriber: PassflowSubscriber, events?: PassflowEvent[]): void;
-    /**
-     * Notify subscribers of an event
-     * @param eventType The type of event that occurred
-     * @param payload Event-specific payload data
-     */
-    notify<E extends PassflowEvent>(eventType: E, payload?: PassflowEventPayload[E]): void;
-}
-//# sourceMappingURL=store.d.ts.map

package/dist/lib/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../lib/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAE/C;;GAEG;AACH,oBAAY,aAAa;IACvB,MAAM,WAAW;IACjB,WAAW,iBAAiB;IAC5B,QAAQ,aAAa;IACrB,aAAa,mBAAmB;IAChC,OAAO,YAAY;IACnB,eAAe,qBAAqB;IACpC,cAAc,oBAAoB;IAClC,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,YAAY,kBAAkB;IAC9B,iBAAiB,wBAAwB;IACzC,iBAAiB,iBAAiB;IAClC,qBAAqB,sBAAsB;IAC3C,gBAAgB,gBAAgB;IAChC,iBAAiB,iBAAiB;IAClC,iBAAiB,iBAAiB;IAClC,qBAAqB,sBAAsB;IAC3C,yBAAyB,qBAAqB;IAC9C,+BAA+B,2BAA2B;IAC1D,gCAAgC,6BAA6B;IAC7D,6BAA6B,0BAA0B;IACvD,0BAA0B,kCAAkC;IAC5D,uBAAuB,+BAA+B;IACtD,sBAAsB,8BAA8B;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC;IACzE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC;IAC3E,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC3G,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE;QAAE,MAAM,EAAE,gBAAgB,GAAG,eAAe,GAAG,YAAY,CAAA;KAAE,CAAC;IAC9F,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IACpC,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC;IAC1E,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1D,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IACpF,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,kBAAkB,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IAC9F,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,aAAa,CAAC,qBAAqB,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,CAAC,aAAa,CAAC,yBAAyB,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACvF,CAAC,aAAa,CAAC,+BAA+B,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,CAAC,aAAa,CAAC,gCAAgC,CAAC,EAAE;QAChD,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE;QAC7C,KAAK,EAAE;YACL,IAAI,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,cAAc,CAAC;YAC5F,OAAO,EAAE,MAAM,CAAC;YAChB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB,CAAC;KACH,CAAC;IACF,CAAC,aAAa,CAAC,0BAA0B,CAAC,EAAE;QAC1C,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,eAAe,CAAC;QACxB,kBAAkB,EAAE,eAAe,EAAE,CAAC;KACvC,CAAC;IACF,CAAC,aAAa,CAAC,uBAAuB,CAAC,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,eAAe,CAAC;QACxB,kBAAkB,EAAE,eAAe,EAAE,CAAC;KACvC,CAAC;IACF,CAAC,aAAa,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/D,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,CAAC,SAAS,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;CAC9F;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAiE;IAEpF;;;;OAIG;IACH,SAAS,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,IAAI,CAOxE;IAED;;;;OAIG;IACH,WAAW,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,IAAI,CAe1E;IAED;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,IAAI,CAMrF;CACF"}

package/dist/lib/token/delivery-manager.d.ts

@@ -1,121 +0,0 @@
-/**
- * Token Delivery Manager
- *
- * Manages token delivery mode state and session validity for the SDK.
- * Supports three delivery modes: JSON body, cookie, and mobile.
- * Persists delivery mode to storage for session continuity.
- *
- * @module token/delivery-manager
- */
-import type { StorageManager } from '../storage';
-export declare enum TokenDeliveryMode {
-    JsonBody = "json_body",
-    Cookie = "cookie",
-    Mobile = "mobile",
-    /**
-     * BFF (Backend-for-Frontend) mode.
-     * Tokens are sent to BFF server which stores them in httpOnly cookies.
-     * Only ID token is kept locally for user info display.
-     */
-    BFF = "bff"
-}
-export declare enum SessionState {
-    Unknown = "unknown",// Initial state, not yet determined
-    Valid = "valid",// Session is valid (cookie mode trust state)
-    Invalid = "invalid"
-}
-export declare class TokenDeliveryManager {
-    private storageManager;
-    private mode;
-    private sessionState;
-    private isInitializedFlag;
-    private readonly STORAGE_PREFIX;
-    private readonly DELIVERY_MODE_KEY;
-    private readonly SESSION_STATE_KEY;
-    constructor(storageManager: StorageManager);
-    /**
-     * Set the token delivery mode
-     */
-    setMode(mode: TokenDeliveryMode): void;
-    /**
-     * Get the current token delivery mode
-     */
-    getMode(): TokenDeliveryMode;
-    /**
-     * Check if currently in cookie mode
-     */
-    isCookieMode(): boolean;
-    /**
-     * Check if currently in JSON body mode
-     */
-    isJsonMode(): boolean;
-    /**
-     * Check if currently in mobile mode
-     */
-    isMobileMode(): boolean;
-    /**
-     * Check if currently in BFF mode
-     */
-    isBFFMode(): boolean;
-    /**
-     * Check if delivery mode has been initialized from a server response
-     */
-    isInitialized(): boolean;
-    /**
-     * Mark session as valid (successful authentication or token refresh)
-     */
-    setSessionValid(): void;
-    /**
-     * Mark session as invalid (received 401 or logout)
-     */
-    setSessionInvalid(): void;
-    /**
-     * Reset session state to unknown (used during authentication flows)
-     */
-    setSessionUnknown(): void;
-    /**
-     * Check if session is valid
-     */
-    isSessionValid(): boolean;
-    /**
-     * Check if session state is unknown (not yet determined)
-     */
-    isSessionUnknown(): boolean;
-    /**
-     * Check if session is invalid
-     */
-    isSessionInvalid(): boolean;
-    /**
-     * Get current session state
-     */
-    getSessionState(): SessionState;
-    /**
-     * Reset delivery manager to initial state
-     */
-    reset(): void;
-    /**
-     * Load persisted delivery mode from storage
-     */
-    private loadPersistedMode;
-    /**
-     * Load persisted session state from storage
-     */
-    private loadPersistedSessionState;
-    /**
-     * Persist delivery mode to storage
-     */
-    private persistMode;
-    /**
-     * Persist session state to storage
-     */
-    private persistSessionState;
-    /**
-     * Clear persisted delivery mode from storage
-     */
-    private clearPersistedMode;
-    /**
-     * Clear persisted session state from storage
-     */
-    private clearPersistedSessionState;
-}
-//# sourceMappingURL=delivery-manager.d.ts.map

package/dist/lib/token/delivery-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery-manager.d.ts","sourceRoot":"","sources":["../../../lib/token/delivery-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,oBAAY,iBAAiB;IAC3B,QAAQ,cAAc;IACtB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB;;;;OAIG;IACH,GAAG,QAAQ;CACZ;AAED,oBAAY,YAAY;IACtB,OAAO,YAAY,CAAE,oCAAoC;IACzD,KAAK,UAAU,CAAE,6CAA6C;IAC9D,OAAO,YAAY;CACpB;AAED,qBAAa,oBAAoB;IASnB,OAAO,CAAC,cAAc;IARlC,OAAO,CAAC,IAAI,CAAiD;IAC7D,OAAO,CAAC,YAAY,CAAsC;IAC1D,OAAO,CAAC,iBAAiB,CAAS;IAElC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyC;IAC3E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyC;IAE3E,YAAoB,cAAc,EAAE,cAAc,EAGjD;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,OAAO,IAAI,iBAAiB,CAE3B;IAED;;OAEG;IACH,YAAY,IAAI,OAAO,CAEtB;IAED;;OAEG;IACH,UAAU,IAAI,OAAO,CAEpB;IAED;;OAEG;IACH,YAAY,IAAI,OAAO,CAEtB;IAED;;OAEG;IACH,SAAS,IAAI,OAAO,CAEnB;IAED;;OAEG;IACH,aAAa,IAAI,OAAO,CAEvB;IAED;;OAEG;IACH,eAAe,IAAI,IAAI,CAGtB;IAED;;OAEG;IACH,iBAAiB,IAAI,IAAI,CAGxB;IAED;;OAEG;IACH,iBAAiB,IAAI,IAAI,CAGxB;IAED;;OAEG;IACH,cAAc,IAAI,OAAO,CAExB;IAED;;OAEG;IACH,gBAAgB,IAAI,OAAO,CAE1B;IAED;;OAEG;IACH,gBAAgB,IAAI,OAAO,CAE1B;IAED;;OAEG;IACH,eAAe,IAAI,YAAY,CAE9B;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAMZ;IAED;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAcjC;;OAEG;IACH,OAAO,CAAC,WAAW;IAQnB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAQ3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAQ1B;;OAEG;IACH,OAAO,CAAC,0BAA0B;CAOnC"}

package/dist/lib/token/index.d.ts

@@ -1,4 +0,0 @@
-export * from './membership';
-export * from './service';
-export * from './token';
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/token/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/token/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC"}

package/dist/lib/token/membership.d.ts

@@ -1,37 +0,0 @@
-export type Tenant = {
-    id: string;
-    name: string;
-};
-export type TenantMembership = {
-    tenant: Tenant;
-    tenantRoles?: GroupMembership;
-    groups?: GroupMembership[];
-};
-export type Group = {
-    id: string;
-    name: string;
-};
-export type GroupMembership = {
-    group: Group;
-    roles: string[];
-};
-export type RawUserMembership = {
-    [key: string]: {
-        tenant_id: string;
-        tenant_name: string;
-        tenant_roles?: string[];
-        root_group_id: string;
-        groups: {
-            [key: string]: string[];
-        };
-        group_names: {
-            [key: string]: string;
-        };
-    };
-};
-export type UserMembership = {
-    raw: RawUserMembership;
-    tenants: TenantMembership[];
-};
-export declare const parseMembership: (raw: RawUserMembership) => UserMembership;
-//# sourceMappingURL=membership.d.ts.map

package/dist/lib/token/membership.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../lib/token/membership.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,MAAM,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE;YACN,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;SACzB,CAAC;QACF,WAAW,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,iBAAiB,CAAC;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,eAAe,QAAS,iBAAiB,KAAG,cAmBxD,CAAC"}

package/dist/lib/token/service.d.ts

@@ -1,47 +0,0 @@
-/**
- * Token Service
- *
- * JWT token parsing, validation, and utility functions.
- * Provides platform-agnostic Base64 decoding for SSR/Node.js support.
- * Handles token expiry calculations with configurable buffer time.
- *
- * @module token
- */
-import { StorageManager } from '../storage';
-import { Token, TokenType } from './token';
-export declare class TokenService {
-    protected storageManager: StorageManager;
-    constructor(storageManager: StorageManager);
-    /**
-     * Checks if a token is not exists or expired.
-     *
-     * @param {TokenType} ttype - The token type to check.
-     * @returns {boolean} Returns true if the token is expired or not exists, false otherwise.
-     */
-    isTokenTypeExpired(ttype: TokenType): boolean;
-    /**
-     * Parse token from storage by type.
-     * Please be aware that this method does not check if the token signature and if the token is valid.
-     *
-     * @param {TokenType} tokenType - The token type to check.
-     * @returns {Token | undefined} Returns token with parsed user membership or undefined.
-     */
-    parseTokenType(tokenType: TokenType): Token | undefined;
-}
-/**
- * Checks if a token is expired.
- *
- * @param {Token} token - The token to check.
- * @param {number} bufferSeconds - Time buffer in seconds to consider token expired early
- *                                 This prevents race conditions where token expires during request
- * @returns {boolean} Returns true if the token is expired or will expire within buffer time, false otherwise.
- */
-export declare function isTokenExpired(token: Token, bufferSeconds?: number): boolean;
-/**
- * Parse token from string. Please be aware that this method does not check if the token signature and if the token is valid.
- *
- * @param {string} tokenString - The token string representation.
- * @returns {Token } Returns token with parsed user membership or undefined.
- */
-export declare function parseToken(tokenString: string): Token;
-//# sourceMappingURL=service.d.ts.map

package/dist/lib/token/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../lib/token/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAuB3C,qBAAa,YAAY;IACvB,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC;IAEzC,YAAY,cAAc,EAAE,cAAc,EAEzC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAM5C;IAED;;;;;;OAMG;IACH,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,CAItD;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,SAA8B,GAAG,OAAO,CAGjG;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,KAAK,CAwBrD"}

package/dist/lib/token/token.d.ts

@@ -1,55 +0,0 @@
-import { RawUserMembership, UserMembership } from './membership';
-export type Token = {
-    aud: string[];
-    exp: number;
-    iat: number;
-    iss: string;
-    jti: string;
-    sub: string;
-    type: string;
-    email?: string;
-    phonenumber?: string;
-    passflow_tm?: RawUserMembership;
-    payload?: unknown;
-    membership?: UserMembership;
-};
-export type InvitationToken = Token & {
-    email: string;
-    inviter_id: string;
-    inviter_name: string;
-    redirect_url: string;
-    tenant_name: string;
-};
-/**
- * Token types used in the Passflow SDK.
- *
- * Note: Some enum values intentionally differ from keys for API compatibility.
- * The values match what the Passflow API returns in token payloads.
- *
- * @example
- * // access_token key maps to 'access' value (API response format)
- * TokenType.access_token === 'access' // true
- */
-export declare enum TokenType {
-    /** ID token - contains user identity claims */
-    id_token = "id_token",
-    /** Access token - for API authorization. Maps to 'access' in API responses */
-    access_token = "access",
-    /** Refresh token - for obtaining new access tokens. Maps to 'refresh' in API responses */
-    refresh_token = "refresh",
-    /** Invitation token - for accepting user invitations */
-    invite_token = "invite",
-    /** Password reset token - for password reset flows */
-    reset_token = "reset",
-    /** Web cookie token - for web-based session management */
-    web_cookie = "web-cookie",
-    /** Management token - for administrative operations */
-    management = "management",
-    /** Sign-in token - for authentication flows */
-    signin = "signin",
-    /** Actor token - for impersonation and delegated access */
-    actor = "actor",
-    /** Two-factor authentication challenge token - for 2FA flows */
-    two_factor = "2fa"
-}
-//# sourceMappingURL=token.d.ts.map

package/dist/lib/token/token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../lib/token/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,MAAM,KAAK,GAAG;IAClB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;;GASG;AACH,oBAAY,SAAS;IACnB,+CAA+C;IAC/C,QAAQ,aAAa;IACrB,8EAA8E;IAC9E,YAAY,WAAW;IACvB,0FAA0F;IAC1F,aAAa,YAAY;IACzB,wDAAwD;IACxD,YAAY,WAAW;IACvB,sDAAsD;IACtD,WAAW,UAAU;IACrB,0DAA0D;IAC1D,UAAU,eAAe;IACzB,uDAAuD;IACvD,UAAU,eAAe;IACzB,+CAA+C;IAC/C,MAAM,WAAW;IACjB,2DAA2D;IAC3D,KAAK,UAAU;IACf,gEAAgE;IAChE,UAAU,QAAQ;CACnB"}

package/dist/lib/types/index.d.ts

@@ -1,24 +0,0 @@
-import { Token } from '../token';
-import { SessionState, TokenDeliveryMode } from '../token/delivery-manager';
-export type Tokens = {
-    access_token?: string;
-    id_token?: string;
-    refresh_token?: string;
-    scopes?: string[];
-};
-export type ParsedTokens = {
-    access_token?: Token;
-    id_token?: Token;
-    refresh_token?: Token;
-    scopes?: string[];
-};
-export type SessionParams = {
-    createSession?: ({ tokens, parsedTokens }: {
-        tokens?: Tokens;
-        parsedTokens?: ParsedTokens;
-    }) => Promise<void>;
-    expiredSession?: () => Promise<void>;
-    doRefresh?: boolean;
-};
-export { SessionState, TokenDeliveryMode };
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/types/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE5E,MAAM,MAAM,MAAM,GAAG;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,aAAa,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,YAAY,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9G,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAGF,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC"}