@passflow/core 0.20.0 → 0.21.0

package/dist/lib/services/logger.d.ts

@@ -1,24 +0,0 @@
-/**
- * Logger interface for Passflow services
- */
-export interface Logger {
-    error(message: string, ...args: unknown[]): void;
-    warn(message: string, ...args: unknown[]): void;
-    info(message: string, ...args: unknown[]): void;
-    debug(message: string, ...args: unknown[]): void;
-}
-/**
- * Default console logger implementation
- */
-export declare class ConsoleLogger implements Logger {
-    error(message: string, ...args: unknown[]): void;
-    warn(message: string, ...args: unknown[]): void;
-    info(message: string, ...args: unknown[]): void;
-    debug(message: string, ...args: unknown[]): void;
-}
-/**
- * Get the default logger
- * @returns Default logger instance
- */
-export declare function getDefaultLogger(): Logger;
-//# sourceMappingURL=logger.d.ts.map

package/dist/lib/services/logger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../lib/services/logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClD;AAED;;GAEG;AACH,qBAAa,aAAc,YAAW,MAAM;IAC1C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAG/C;IAED,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAG9C;IAED,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAG9C;IAED,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAG/C;CACF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/lib/services/tenant-service.d.ts

@@ -1,200 +0,0 @@
-import { PassflowAuthorizationResponse, PassflowGroupResponse, PassflowInvitationsResponse, PassflowRoleResponse, PassflowStatusResponse, PassflowTenantResponse, PassflowUserTenantMembershipResponse, TenantAPI } from '../api';
-import { Logger } from './logger';
-import { TenantUserMembership } from './tenant-user-membership';
-/**
- * Service for managing tenants
- */
-export declare class TenantService {
-    private tenantApi;
-    private scopes;
-    private logger;
-    constructor(tenantApi: TenantAPI, scopes: string[], logger?: Logger);
-    /**
-     * Handle Passflow API errors
-     * @param error The error object
-     * @param context Context information for logging
-     * @throws Formatted error with Passflow API error details
-     */
-    private handlePassflowError;
-    /**
-     * Join a tenant invitation
-     * @param token The invitation token
-     * @param scopes Optional scopes to request
-     * @returns Promise with invite response
-     */
-    joinInvitation(token: string, scopes?: string[]): Promise<PassflowAuthorizationResponse>;
-    /**
-     * Create a new tenant
-     * @param name The name of the tenant
-     * @returns Promise with tenant response
-     */
-    createTenant(name: string): Promise<PassflowTenantResponse>;
-    /**
-     * Get tenant details
-     * @param tenantId Tenant ID
-     * @returns Promise with tenant response
-     */
-    /**
-     * Get tenant details
-     * @param tenantId Tenant ID
-     * @returns Promise with tenant response
-     */
-    getTenantDetails(tenantId: string): Promise<PassflowTenantResponse>;
-    /**
-     * Get tenant details and transform into TenantUserMembership
-     * @param tenantId Tenant ID
-     * @returns Promise with TenantUserMembership instance
-     */
-    getTenantUserMembership(tenantId: string): Promise<TenantUserMembership>;
-    /**
-     * Update tenant name
-     * @param tenantId Tenant ID
-     * @param name New tenant name
-     * @returns Promise with status response
-     */
-    updateTenant(tenantId: string, name: string): Promise<PassflowStatusResponse>;
-    /**
-     * Delete a tenant
-     * @param tenantId Tenant ID
-     * @returns Promise with status response
-     */
-    deleteTenant(tenantId: string): Promise<PassflowStatusResponse>;
-    /**
-     * Get user's tenant memberships
-     * @returns Promise with user tenant membership response
-     */
-    getUserTenantMembership(): Promise<PassflowUserTenantMembershipResponse>;
-    /**
-     * Create a group in a tenant
-     * @param tenantId Tenant ID
-     * @param name Group name
-     * @returns Promise with group response
-     */
-    createGroup(tenantId: string, name: string): Promise<PassflowGroupResponse>;
-    /**
-     * Get group information
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @returns Promise with group response
-     */
-    getGroupInfo(tenantId: string, groupId: string): Promise<PassflowGroupResponse>;
-    /**
-     * Update a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param name New group name
-     * @returns Promise with group response
-     */
-    updateGroup(tenantId: string, groupId: string, name: string): Promise<PassflowGroupResponse>;
-    /**
-     * Delete a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @returns Promise with status response
-     */
-    deleteGroup(tenantId: string, groupId: string): Promise<PassflowStatusResponse>;
-    /**
-     * Add a user to a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param userId User ID
-     * @param role Role to assign
-     * @returns Promise with status response
-     */
-    addUserToGroup(tenantId: string, groupId: string, userId: string, role: string): Promise<PassflowStatusResponse>;
-    /**
-     * Remove user roles from a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param userId User ID
-     * @param roles Roles to remove
-     * @returns Promise with status response
-     */
-    removeUserRolesFromGroup(tenantId: string, groupId: string, userId: string, roles: string[]): Promise<PassflowStatusResponse>;
-    /**
-     * Change user roles in a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param userId User ID
-     * @param roles New roles to assign
-     * @returns Promise with status response
-     */
-    changeUserRoles(tenantId: string, groupId: string, userId: string, roles: string[]): Promise<PassflowStatusResponse>;
-    /**
-     * Delete a user from a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param userId User ID
-     * @returns Promise with status response
-     */
-    deleteUserFromGroup(tenantId: string, groupId: string, userId: string): Promise<PassflowStatusResponse>;
-    /**
-     * Get roles for a tenant
-     * @param tenantId Tenant ID
-     * @returns Promise with array of role responses
-     */
-    getRolesForTenant(tenantId: string): Promise<PassflowRoleResponse[]>;
-    /**
-     * Create a role for a tenant
-     * @param tenantId Tenant ID
-     * @param name Role name
-     * @returns Promise with role response
-     */
-    createRoleForTenant(tenantId: string, name: string): Promise<PassflowRoleResponse>;
-    /**
-     * Update a role
-     * @param tenantId Tenant ID
-     * @param roleId Role ID
-     * @param name New role name
-     * @returns Promise with role response
-     */
-    updateRole(tenantId: string, roleId: string, name: string): Promise<PassflowRoleResponse>;
-    /**
-     * Delete a role
-     * @param tenantId Tenant ID
-     * @param roleId Role ID
-     * @returns Promise with status response
-     */
-    deleteRole(tenantId: string, roleId: string): Promise<PassflowStatusResponse>;
-    /**
-     * Delete a user from a tenant
-     * @param tenantId Tenant ID
-     * @param userId User ID
-     * @returns Promise with status response
-     */
-    deleteUserFromTenant(tenantId: string, userId: string): Promise<PassflowStatusResponse>;
-    /**
-     * Get invitations to a group
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param limit Maximum number of invitations to return
-     * @param skip Number of invitations to skip
-     * @returns Promise with invitations response
-     */
-    getGroupInvitations(tenantId: string, groupId: string, limit: number, skip: number): Promise<PassflowInvitationsResponse>;
-    /**
-     * Get invitations to a tenant
-     * @param tenantId Tenant ID
-     * @param limit Maximum number of invitations to return
-     * @param skip Number of invitations to skip
-     * @returns Promise with invitations response
-     */
-    getTenantInvitations(tenantId: string, limit: number, skip: number): Promise<PassflowInvitationsResponse>;
-    /**
-     * Invalidate an invitation by ID
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param inviteId Invitation ID
-     * @returns Promise with empty record
-     */
-    invalidateInviteById(tenantId: string, groupId: string, inviteId: string): Promise<Record<string, never>>;
-    /**
-     * Invalidate an invitation by email
-     * @param tenantId Tenant ID
-     * @param groupId Group ID
-     * @param email Email address
-     * @returns Promise with empty record
-     */
-    invalidateInviteByEmail(tenantId: string, groupId: string, email: string): Promise<Record<string, never>>;
-}
-//# sourceMappingURL=tenant-service.d.ts.map

package/dist/lib/services/tenant-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-service.d.ts","sourceRoot":"","sources":["../../../lib/services/tenant-service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,oCAAoC,EACpC,SAAS,EACV,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAoB,MAAM,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;GAEG;AACH,qBAAa,aAAa;IAItB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,MAAM;IAJhB,OAAO,CAAC,MAAM,CAAS;IAEvB,YACU,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EAAE,EACxB,MAAM,CAAC,EAAE,MAAM,EAGhB;IAED;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAqC3B;;;;;OAKG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAO7F;IAED;;;;OAIG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAMhE;IAID;;;;OAIG;IACH;;;;OAIG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAOxE;IAED;;;;OAIG;IACG,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAO7E;IAED;;;;;OAKG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAMlF;IAED;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAMpE;IAED;;;OAGG;IACG,uBAAuB,IAAI,OAAO,CAAC,oCAAoC,CAAC,CAM7E;IAID;;;;;OAKG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAMhF;IAED;;;;;OAKG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAMpF;IAED;;;;;;OAMG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAMjG;IAED;;;;;OAKG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAMpF;IAED;;;;;;;OAOG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CASrH;IAED;;;;;;;OAOG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,sBAAsB,CAAC,CASjC;IAED;;;;;;;OAOG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CASzH;IAED;;;;;;OAMG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAS5G;IAID;;;;OAIG;IACG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAMzE;IAED;;;;;OAKG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAMvF;IAED;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAM9F;IAED;;;;;OAKG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAMlF;IAID;;;;;OAKG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAM5F;IAID;;;;;;;OAOG;IACG,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,2BAA2B,CAAC,CAMtC;IAED;;;;;;OAMG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAM9G;IAED;;;;;;OAMG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAS9G;IAED;;;;;;OAMG;IACG,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAS9G;CACF"}

package/dist/lib/services/tenant-user-membership.d.ts

@@ -1,76 +0,0 @@
-import type { PassflowTenantResponse } from '../api/model';
-/**
- * Flat user representation
- */
-export interface User {
-    id: string;
-    name: string | null;
-    email: string | null;
-    phone: string | null;
-}
-/**
- * Flat group representation
- */
-export interface Group {
-    id: string;
-    name: string;
-    default: boolean;
-    updated_at: string;
-    created_at: string;
-}
-/**
- * Flat role representation
- */
-export interface Role {
-    id: string;
-    tenant_id: string;
-    name: string;
-}
-/**
- * Maps a user to a group with specific roles
- */
-export interface Membership {
-    userId: string;
-    groupId: string;
-    roleIds: string[];
-}
-/**
- * Full tenant view with lookup maps
- */
-export interface TenantData {
-    tenant_id: string;
-    tenant_name: string;
-    users: User[];
-    groups: Group[];
-    roles: Role[];
-    memberships: Membership[];
-    usersById: Map<string, User>;
-    groupsById: Map<string, Group>;
-    rolesById: Map<string, Role>;
-}
-/**
- * Utility for transforming raw PassflowTenantResponse
- * into a flattened TenantData model with quick lookup methods.
- */
-export declare class TenantUserMembership {
-    private data;
-    constructor(raw: PassflowTenantResponse);
-    private normalize;
-    /**
-     * Returns all users in the specified group.
-     */
-    getUsersInGroup(groupId: string): User[];
-    /**
-     * Returns all groups to which the specified user belongs.
-     */
-    getGroupsForUser(userId: string): Group[];
-    /**
-     * Returns all roles that the specified user has in the specified group.
-     */
-    getUserRolesInGroup(userId: string, groupId: string): Role[];
-    /**
-     * Returns the full TenantData object.
-     */
-    getData(): TenantData;
-}
-//# sourceMappingURL=tenant-user-membership.d.ts.map

package/dist/lib/services/tenant-user-membership.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-user-membership.d.ts","sourceRoot":"","sources":["../../../lib/services/tenant-user-membership.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA+B,sBAAsB,EAAuB,MAAM,cAAc,CAAC;AAE7G;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAa;IAEzB,YAAY,GAAG,EAAE,sBAAsB,EAEtC;IAED,OAAO,CAAC,SAAS;IA2DjB;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,CAKvC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,CAKxC;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,CAM3D;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAEpB;CACF"}

package/dist/lib/services/token-cache-service.d.ts

@@ -1,36 +0,0 @@
-import { AuthAPI } from '../api';
-import type { PlatformAdapter } from '../platform';
-import { StorageManager } from '../storage';
-import { PassflowStore } from '../store';
-import type { ParsedTokens, Tokens } from '../types';
-export declare class TokenCacheService {
-    private storageManager;
-    private authApi;
-    private subscribeStore;
-    private platform;
-    tokensCache: Tokens | undefined;
-    parsedTokensCache: ParsedTokens | undefined;
-    private checkInterval;
-    private readonly CHECK_INTERVAL;
-    private unsubscribeForeground;
-    private unsubscribeUnload;
-    isRefreshing: boolean;
-    tokenExpiredFlag: boolean;
-    constructor(storageManager: StorageManager, authApi: AuthAPI, subscribeStore: PassflowStore, platform?: PlatformAdapter);
-    initialize(): void;
-    private refreshTokensCache;
-    startTokenCheck(): void;
-    private setupLifecycleListeners;
-    private stopTokenCheck;
-    /**
-     * Cleanup method to stop all intervals and remove event listeners.
-     * Should be called when the service is no longer needed.
-     */
-    destroy(): void;
-    setTokensCache(tokens: Tokens | undefined): void;
-    getTokens(): Tokens | undefined;
-    getTokensWithRefresh(): Promise<Tokens | undefined>;
-    getParsedTokens(): ParsedTokens | undefined;
-    isExpired(): boolean;
-}
-//# sourceMappingURL=token-cache-service.d.ts.map

package/dist/lib/services/token-cache-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-cache-service.d.ts","sourceRoot":"","sources":["../../../lib/services/token-cache-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAA+B,aAAa,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAErD,qBAAa,iBAAiB;IAY1B,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,QAAQ;IAdlB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iBAAiB,EAAE,YAAY,GAAG,SAAS,CAAC;IAE5C,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,qBAAqB,CAA6B;IAC1D,OAAO,CAAC,iBAAiB,CAA6B;IACtD,YAAY,UAAS;IACrB,gBAAgB,UAAS;IAEzB,YACU,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,aAAa,EAC7B,QAAQ,GAAE,eAA4B,EAK/C;IAED,UAAU,SAoCT;YAEa,kBAAkB;IAoChC,eAAe,SAwBd;IAED,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,cAAc;IAYtB;;;OAGG;IACH,OAAO,SAMN;IAED,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAiB/C;IAED,SAAS,uBAER;IAEK,oBAAoB,gCA4BzB;IAED,eAAe,6BAEd;IAED,SAAS,YAYR;CACF"}

package/dist/lib/services/two-factor-service.d.ts

@@ -1,193 +0,0 @@
-import { RegisteredTwoFactorMethod, TwoFactorAlternativeRequest, TwoFactorChallengeRequest, TwoFactorChallengeResponse, TwoFactorCompletionOptions, TwoFactorConfirmResponse, TwoFactorDisableResponse, TwoFactorMethod, TwoFactorRecoveryResponse, TwoFactorRegenerateResponse, TwoFactorSetupMagicLinkSession, TwoFactorSetupMagicLinkValidationResponse, TwoFactorSetupResponse, TwoFactorStatusResponse, TwoFactorTrustedDevice, TwoFactorVerifyRequestV2, TwoFactorVerifyResponse, TwoFactorVerifyResponseV2 } from '../api/model';
-import { TwoFactorApiClient } from '../api/two-factor';
-import { PassflowStore } from '../store';
-import type { Tokens } from '../types';
-/**
- * Owns what a second factor's answer turns into: this service never stores tokens
- * or holds the PKCE verifier. `AuthService` implements it.
- */
-export interface SignInCompleter {
-    /** Redeems the code a second factor answered with on a PKCE sign-in, and applies the tokens. */
-    completePkceSignIn(code: string): Promise<Tokens>;
-    /** Applies the tokens a second factor answered with directly. */
-    applyTokens(tokens: Tokens): Promise<void>;
-    hasPendingPkceSignIn(): boolean;
-    forgetPkceSignIn(): void;
-}
-/**
- * Service for managing Two-Factor Authentication
- */
-export declare class TwoFactorService {
-    private twoFactorApi;
-    private subscribeStore;
-    private signInCompleter?;
-    private partialAuthState?;
-    private readonly PARTIAL_AUTH_TIMEOUT_MS;
-    private readonly SESSION_STORAGE_KEY;
-    private totpDigits;
-    private magicLinkSession?;
-    constructor(twoFactorApi: TwoFactorApiClient, subscribeStore: PassflowStore, signInCompleter?: SignInCompleter | undefined);
-    /**
-     * Emit error event and throw the error
-     * Helper method to ensure errors are properly emitted to subscribers
-     */
-    private emitErrorAndThrow;
-    /**
-     * Get 2FA enrollment status for current user
-     */
-    getStatus(): Promise<TwoFactorStatusResponse>;
-    /**
-     * Begin 2FA setup process
-     * Returns secret and QR code for authenticator app
-     */
-    beginSetup(): Promise<TwoFactorSetupResponse>;
-    /**
-     * Confirm 2FA setup with TOTP code
-     * Returns recovery codes that MUST be displayed to user
-     */
-    confirmSetup(code: string): Promise<TwoFactorConfirmResponse>;
-    /**
-     * Verify TOTP code during login
-     * Completes authentication if successful
-     *
-     * @param options.trustDevice - ask the server to trust this device for later sign-ins
-     */
-    verify(code: string, options?: TwoFactorCompletionOptions): Promise<TwoFactorVerifyResponse>;
-    /**
-     * Use recovery code for authentication
-     * Completes authentication if successful
-     *
-     * @param options.trustDevice - ask the server to trust this device for later sign-ins
-     */
-    useRecoveryCode(code: string, options?: TwoFactorCompletionOptions): Promise<TwoFactorRecoveryResponse>;
-    /**
-     * Disable 2FA (requires TOTP verification)
-     */
-    disable(code: string): Promise<TwoFactorDisableResponse>;
-    /**
-     * Regenerate recovery codes
-     */
-    regenerateRecoveryCodes(code: string): Promise<TwoFactorRegenerateResponse>;
-    /**
-     * Check if 2FA verification is required (local state check)
-     * Returns true if user has signed in but needs 2FA verification
-     */
-    isVerificationRequired(): boolean;
-    /**
-     * Set partial auth state when login requires 2FA
-     * Called internally via event listener when AuthService emits TwoFactorRequired
-     */
-    setPartialAuthState(email?: string, challengeId?: string, tfaToken?: string): void;
-    /**
-     * Clear partial auth state
-     * Called on logout or successful verification
-     */
-    clearPartialAuthState(): void;
-    /**
-     * Ends the pending sign-in with the second factor's answer. On a PKCE app that
-     * answer is a code, redeemed and replaced by the tokens, so no caller or
-     * subscriber ever gets a code where tokens belong. Tokens are applied once, by
-     * the completer, in the app's delivery mode. The pending state goes only after
-     * that has worked, except when no verifier can ever redeem the code.
-     */
-    private finishSignIn;
-    /**
-     * The 2FA token of the sign-in waiting on its second factor, if any.
-     */
-    private pendingTfaToken;
-    /**
-     * Attempt to recover partial auth state from sessionStorage
-     * Called before verification operations to handle page refresh
-     */
-    private recoverPartialAuthState;
-    /**
-     * Validate magic link token for 2FA setup
-     *
-     * This method validates an admin-generated magic link token and
-     * creates a scoped session (scope: "2fa_setup") that can ONLY be
-     * used for completing 2FA setup operations.
-     *
-     * Session characteristics:
-     * - Stored in memory only (no persistence across page reloads)
-     * - Short-lived (typically 1 hour expiration)
-     * - Cannot be refreshed
-     * - Cannot be promoted to full authentication
-     * - Only valid for 2FA setup endpoints
-     *
-     * @param token - Magic link token from URL parameter
-     * @returns Validation response with session details
-     */
-    validateTwoFactorSetupMagicLink(token: string): Promise<TwoFactorSetupMagicLinkValidationResponse>;
-    /**
-     * Get current magic link session (if any)
-     * Used by React SDK to access session token for API calls
-     *
-     * @returns Active magic link session or null if none/expired
-     */
-    getMagicLinkSession(): TwoFactorSetupMagicLinkSession | null;
-    /**
-     * Clear magic link session
-     * Called after successful setup completion or on error
-     */
-    clearMagicLinkSession(): void;
-    /**
-     * Check if magic link session is active
-     * Used by React SDK to determine if form can use magic link auth
-     */
-    hasMagicLinkSession(): boolean;
-    /**
-     * Get the session token from magic link session (if active)
-     * Used by AxiosClient for injecting auth header on 2FA setup endpoints
-     */
-    getMagicLinkSessionToken(): string | null;
-    /**
-     * Get configured TOTP digit count
-     * Returns the number of digits (6 or 8) for TOTP codes
-     * Useful for UI components that need to render the correct number of input fields
-     */
-    getTotpDigits(): 6 | 8;
-    /**
-     * Get available 2FA methods for current user
-     */
-    getAvailableMethods(): Promise<TwoFactorMethod[]>;
-    /**
-     * Get registered 2FA methods for current user
-     */
-    getRegisteredMethods(): Promise<RegisteredTwoFactorMethod[]>;
-    /**
-     * Start 2FA method setup
-     */
-    startMethodSetup(method: TwoFactorMethod, payload?: Record<string, unknown>): Promise<unknown>;
-    /**
-     * Complete 2FA method setup
-     */
-    completeMethodSetup(method: TwoFactorMethod, payload: Record<string, unknown>): Promise<unknown>;
-    /**
-     * Remove registered 2FA method
-     */
-    removeMethod(methodId: string): Promise<void>;
-    /**
-     * Request 2FA challenge during login
-     */
-    requestChallenge(payload: TwoFactorChallengeRequest): Promise<TwoFactorChallengeResponse>;
-    /**
-     * Verify 2FA challenge (v2)
-     * Set `trust_device` on the payload to ask the server to trust this device.
-     */
-    verifyV2(payload: TwoFactorVerifyRequestV2): Promise<TwoFactorVerifyResponseV2>;
-    /**
-     * Switch to alternative 2FA method during challenge
-     */
-    switchToAlternative(payload: TwoFactorAlternativeRequest): Promise<TwoFactorChallengeResponse>;
-    /**
-     * List the devices the user trusted to skip the second factor on this app.
-     * The one this request came from has `current: true`.
-     */
-    getTrustedDevices(): Promise<TwoFactorTrustedDevice[]>;
-    /**
-     * Revoke a trusted device; its next sign-in asks for the second factor again.
-     * Rejects with the server's 404 when the user has no such device.
-     */
-    revokeTrustedDevice(deviceId: string): Promise<void>;
-}
-//# sourceMappingURL=two-factor-service.d.ts.map

package/dist/lib/services/two-factor-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"two-factor-service.d.ts","sourceRoot":"","sources":["../../../lib/services/two-factor-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,yCAAyC,EACzC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAiB,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAqBvC;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,gGAAgG;IAChG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,iEAAiE;IACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,oBAAoB,IAAI,OAAO,CAAC;IAChC,gBAAgB,IAAI,IAAI,CAAC;CAC1B;AAOD;;GAEG;AACH,qBAAa,gBAAgB;IAazB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,eAAe,CAAC;IAd1B,OAAO,CAAC,gBAAgB,CAAC,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiB;IACzD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA4B;IAIhE,OAAO,CAAC,UAAU,CAAY;IAG9B,OAAO,CAAC,gBAAgB,CAAC,CAAiC;IAE1D,YACU,YAAY,EAAE,kBAAkB,EAChC,cAAc,EAAE,aAAa,EAC7B,eAAe,CAAC,EAAE,eAAe,YAAA,EAwB1C;IAED;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAWlD;IAED;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAYlD;IAED;;;OAGG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAyBlE;IAED;;;;;OAKG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAiCjG;IAED;;;;;OAKG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAiD5G;IAED;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAa7D;IAED;;OAEG;IACG,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAyBhF;IAED;;;OAGG;IACH,sBAAsB,IAAI,OAAO,CAehC;IAED;;;OAGG;IACH,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAwBjF;IAED;;;OAGG;IACH,qBAAqB,IAAI,IAAI,CAU5B;IAED;;;;;;OAMG;YACW,YAAY;IAqB1B;;OAEG;IACH,OAAO,CAAC,eAAe;IAIvB;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;;;;;;;;;;;;;;;OAgBG;IACG,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,yCAAyC,CAAC,CA8BvG;IAED;;;;;OAKG;IACH,mBAAmB,IAAI,8BAA8B,GAAG,IAAI,CAU3D;IAED;;;OAGG;IACH,qBAAqB,IAAI,IAAI,CAE5B;IAED;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAE7B;IAED;;;OAGG;IACH,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAGxC;IAED;;;;OAIG;IACH,aAAa,IAAI,CAAC,GAAG,CAAC,CAErB;IAMD;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAMtD;IAED;;OAEG;IACG,oBAAoB,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAMjE;IAED;;OAEG;IACG,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAQnG;IAED;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAarG;IAED;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMlD;IAED;;OAEG;IACG,gBAAgB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAY9F;IAED;;;OAGG;IACG,QAAQ,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAoBpF;IAED;;OAEG;IACG,mBAAmB,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAYnG;IAED;;;OAGG;IACG,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAM3D;IAED;;;OAGG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzD;CACF"}

package/dist/lib/services/user-service.d.ts

@@ -1,41 +0,0 @@
-import { PassflowSuccessResponse, UserAPI } from '../api';
-import type { PlatformAdapter } from '../platform';
-/**
- * Service for managing user profile and passkeys
- */
-export declare class UserService {
-    private userAPI;
-    private deviceService;
-    private platform;
-    constructor(userAPI: UserAPI, deviceService: DeviceService, platform?: PlatformAdapter);
-    /**
-     * Get user's registered passkeys
-     * @returns Promise with passkeys array
-     */
-    getUserPasskeys(): Promise<import("..").PassflowUserPasskey[]>;
-    /**
-     * Rename a user passkey
-     * @param name The new name for the passkey
-     * @param passkeyId The ID of the passkey to rename
-     * @returns Promise with success response
-     */
-    renameUserPasskey(name: string, passkeyId: string): Promise<PassflowSuccessResponse>;
-    /**
-     * Delete a user passkey
-     * @param passkeyId The ID of the passkey to delete
-     * @returns Promise with success response
-     */
-    deleteUserPasskey(passkeyId: string): Promise<PassflowSuccessResponse>;
-    /**
-     * Add a new passkey for the current user
-     * @param options Optional parameters for the passkey
-     * @returns Promise that resolves when the passkey is added
-     */
-    addUserPasskey({ relyingPartyId, passkeyUsername, passkeyDisplayName, }?: {
-        relyingPartyId?: string;
-        passkeyUsername?: string;
-        passkeyDisplayName?: string;
-    }): Promise<void>;
-}
-import { DeviceService } from '../device';
-//# sourceMappingURL=user-service.d.ts.map

package/dist/lib/services/user-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-service.d.ts","sourceRoot":"","sources":["../../../lib/services/user-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,uBAAuB,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD;;GAEG;AACH,qBAAa,WAAW;IAEpB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,QAAQ;IAHlB,YACU,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,aAAa,EAC5B,QAAQ,GAAE,eAA4B,EAC5C;IAEJ;;;OAGG;IACH,eAAe,gDAEd;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEnF;IAED;;;;OAIG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAErE;IAED;;;;OAIG;IACG,cAAc,CAAC,EACnB,cAAc,EACd,eAAe,EACf,kBAAkB,GACnB,GAAE;QACD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBrB;CACF;AAGD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}