@passflow/react 0.13.0 → 0.15.0

package/dist/src/hooks/use-upgrade.d.cts

@@ -0,0 +1,53 @@
+/**
+ * `useUpgrade` — the read side of the assurance-upgrade flow (§8.2, §13.3).
+ *
+ * It **reads `UpgradeContext` and installs nothing**. Installation belongs to
+ * `UpgradeProvider` and only to it: two hooks each installing a prompt handler
+ * would open two prompts and defeat single-flight.
+ *
+ * Outside an `UpgradeProvider` it returns `status: 'idle'` with no-op actions
+ * rather than throwing (§9.5 H8).
+ */
+import type { AssuranceBar, UpgradeChallenge, UpgradeFactor, UpgradeFactorType } from '@passflow/core';
+import { type UpgradeElevateOptions, type UpgradeErrorStatusKind, type UpgradeHookState, type UpgradeSettledState } from '../context/upgrade-context.cjs';
+export type UseUpgradeResult = {
+    /** True when an `UpgradeProvider` installed a prompt handler. */
+    enabled: boolean;
+    /** The whole state, as the discriminated union (§13.5's `UpgradeHookState`). */
+    state: UpgradeHookState;
+    /** The discriminant, for the common `status === 'challenged'` read. */
+    status: UpgradeHookState['status'];
+    /** What the server demanded — the MERGED requirement when challenges joined. */
+    challenge: UpgradeChallenge | null;
+    /** Usable factors, already ranked; index 0 is the suggested one. */
+    factors: readonly UpgradeFactor[];
+    /** The ranked factor types, which is what `UpgradeHookState.challenged` carries. */
+    factorTypes: readonly UpgradeFactorType[];
+    selectedFactor: UpgradeFactorType | null;
+    /**
+     * Elevated, and still not enough: the replay was re-challenged (§13.4).
+     * Non-null **only** in the `insufficient` state, and it never coexists with
+     * `status === 'success'` — this must not read as success.
+     */
+    insufficient: {
+        obtained: AssuranceBar;
+        required: AssuranceBar;
+    } | null;
+    /** The terminal failure, in the `error` state only. */
+    error: Error | null;
+    /** Which failure class, in the `error` state only. */
+    errorKind: UpgradeErrorStatusKind | null;
+    /** The previous attempt's failure while the prompt is re-shown (a wrong code). */
+    previousError: Error | null;
+    /** True while a ceremony is on the wire. */
+    busy: boolean;
+    /** The factor-selection signal — §13.2's late-join boundary (T3). */
+    selectFactor: (factor: UpgradeFactorType) => void;
+    submit: (code?: string) => void;
+    cancel: () => void;
+    dismiss: () => void;
+    /** Resolves `null` on cancellation; otherwise the flight's terminal state. */
+    elevate: (options?: UpgradeElevateOptions) => Promise<UpgradeSettledState | null>;
+};
+export declare const useUpgrade: () => UseUpgradeResult;
+//# sourceMappingURL=use-upgrade.d.ts.map

package/dist/src/hooks/use-upgrade.d.ts

@@ -1,5 +1,15 @@
-import { UpgradeElevateOptions, UpgradeErrorStatusKind, UpgradeHookState, UpgradeSettledState } from '../context/upgrade-context';
-import { AssuranceBar, UpgradeChallenge, UpgradeFactor, UpgradeFactorType } from '@passflow/core';
+/**
+ * `useUpgrade` — the read side of the assurance-upgrade flow (§8.2, §13.3).
+ *
+ * It **reads `UpgradeContext` and installs nothing**. Installation belongs to
+ * `UpgradeProvider` and only to it: two hooks each installing a prompt handler
+ * would open two prompts and defeat single-flight.
+ *
+ * Outside an `UpgradeProvider` it returns `status: 'idle'` with no-op actions
+ * rather than throwing (§9.5 H8).
+ */
+import type { AssuranceBar, UpgradeChallenge, UpgradeFactor, UpgradeFactorType } from '@passflow/core';
+import { type UpgradeElevateOptions, type UpgradeErrorStatusKind, type UpgradeHookState, type UpgradeSettledState } from '../context/upgrade-context.js';
 export type UseUpgradeResult = {
     /** True when an `UpgradeProvider` installed a prompt handler. */
     enabled: boolean;

package/dist/src/hooks/use-upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-upgrade.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EAErB,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGvG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,KAAK,EAAE,gBAAgB,CAAC;IACxB,uEAAuE;IACvE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,gFAAgF;IAChF,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,oEAAoE;IACpE,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,oFAAoF;IACpF,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC1C,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC;;;;OAIG;IACH,YAAY,EAAE;QAAE,QAAQ,EAAE,YAAY,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IACxE,uDAAuD;IACvD,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,sDAAsD;IACtD,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACzC,kFAAkF;IAClF,aAAa,EAAE,KAAK,GAAG,IAAI,CAAC;IAC5B,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;IACd,qEAAqE;IACrE,YAAY,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAClD,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,qBAAqB,KAAK,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;CACnF,CAAC;AAOF,eAAO,MAAM,UAAU,QAAO,gBA2B7B,CAAC"}
+{"version":3,"file":"use-upgrade.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEvG,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EAErB,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,KAAK,EAAE,gBAAgB,CAAC;IACxB,uEAAuE;IACvE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,gFAAgF;IAChF,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,oEAAoE;IACpE,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,oFAAoF;IACpF,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC1C,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC;;;;OAIG;IACH,YAAY,EAAE;QAAE,QAAQ,EAAE,YAAY,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IACxE,uDAAuD;IACvD,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,sDAAsD;IACtD,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACzC,kFAAkF;IAClF,aAAa,EAAE,KAAK,GAAG,IAAI,CAAC;IAC5B,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;IACd,qEAAqE;IACrE,YAAY,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAClD,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,qBAAqB,KAAK,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;CACnF,CAAC;AAOF,eAAO,MAAM,UAAU,QAAO,gBA2B7B,CAAC"}

package/dist/src/hooks/use-user-passkeys.d.cts

@@ -0,0 +1,12 @@
+import type { PassflowUserPasskey } from '@passflow/core';
+export type UseUserPasskeysProps = () => {
+    data: PassflowUserPasskey[];
+    createUserPasskey: (relaingPartyId: string) => Promise<void>;
+    editUserPasskey: (newName: string, passkeyId: string) => Promise<void>;
+    deleteUserPasskey: (passkeyId: string) => Promise<void>;
+    isLoading: boolean;
+    isError: boolean;
+    errorMessage: string;
+};
+export declare const useUserPasskeys: UseUserPasskeysProps;
+//# sourceMappingURL=use-user-passkeys.d.ts.map

package/dist/src/hooks/use-user-passkeys.d.ts

@@ -1,4 +1,4 @@
-import { PassflowUserPasskey } from '@passflow/core';
+import type { PassflowUserPasskey } from '@passflow/core';
 export type UseUserPasskeysProps = () => {
     data: PassflowUserPasskey[];
     createUserPasskey: (relaingPartyId: string) => Promise<void>;

package/dist/src/index.d.cts

@@ -0,0 +1,10 @@
+export * from '@passflow/core';
+export * from './components/flow/index.cjs';
+export * from './components/form/index.cjs';
+export type { PassflowUpgradeOptions, UpgradeProviderProps } from './components/provider/index.cjs';
+export { PassflowProvider, UpgradeProvider } from './components/provider/index.cjs';
+export * from './components/ui/index.cjs';
+export { INERT_UPGRADE_CONTEXT, UpgradeContext, type UpgradeContextValue, type UpgradeElevateOptions, type UpgradeErrorStatusKind, type UpgradeHookState, type UpgradePromptView, type UpgradeSettledState, } from './context/upgrade-context.cjs';
+export * from './hooks/index.cjs';
+export { attachAuth, withAuth } from './utils/upgrade-auth.cjs';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts

@@ -1,10 +1,10 @@
-export * from './components/flow';
-export * from './components/form';
-export * from './components/ui';
-export { PassflowProvider, UpgradeProvider } from './components/provider';
-export type { UpgradeProviderProps, PassflowUpgradeOptions } from './components/provider';
-export { UpgradeContext, INERT_UPGRADE_CONTEXT, type UpgradeContextValue, type UpgradeElevateOptions, type UpgradeErrorStatusKind, type UpgradeHookState, type UpgradePromptView, type UpgradeSettledState, } from './context/upgrade-context';
-export { withAuth, attachAuth } from './utils/upgrade-auth';
-export * from './hooks';
 export * from '@passflow/core';
+export * from './components/flow/index.js';
+export * from './components/form/index.js';
+export type { PassflowUpgradeOptions, UpgradeProviderProps } from './components/provider/index.js';
+export { PassflowProvider, UpgradeProvider } from './components/provider/index.js';
+export * from './components/ui/index.js';
+export { INERT_UPGRADE_CONTEXT, UpgradeContext, type UpgradeContextValue, type UpgradeElevateOptions, type UpgradeErrorStatusKind, type UpgradeHookState, type UpgradePromptView, type UpgradeSettledState, } from './context/upgrade-context.js';
+export * from './hooks/index.js';
+export { attachAuth, withAuth } from './utils/upgrade-auth.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,oBAAoB,CAAC;AAC5B,OAAO,yBAAyB,CAAC;AAEjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC1E,YAAY,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE1F,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC5D,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,oBAAoB,CAAC;AAC5B,OAAO,yBAAyB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC1E,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,GACzB,MAAM,2BAA2B,CAAC;AACnC,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/src/types/auth-errors.d.cts

@@ -0,0 +1,8 @@
+export type AuthErrorScope = 'form' | 'identity' | 'password' | 'credentials';
+export type AuthUiError = {
+    message: string;
+    scope: AuthErrorScope;
+};
+export type AuthOperation = 'password' | 'passwordless' | 'passkey';
+export type AuthFlow = 'sign-in' | 'sign-up';
+//# sourceMappingURL=auth-errors.d.ts.map

package/dist/src/types/device-errors.d.cts

@@ -0,0 +1,95 @@
+/**
+ * Error taxonomy for the RFC 8628 device verification flow.
+ *
+ * ── The rule this file exists to enforce ────────────────────────────────────
+ * The person on this screen has just scanned a QR code with their phone and is
+ * deciding whether to hand a terminal a token. They are not debugging us. So:
+ *
+ *   the message a user reads is NEVER a string we did not write for them.
+ *
+ * Not the browser's. Not the server's `error_description`. Not an exception's
+ * `.message`. Those are written for operators and they leak — the screen this
+ * taxonomy replaced did `err.message ?? 'Something went wrong'` and duly showed
+ * a real user:
+ *
+ *     "Resident credentials or empty 'allowCredentials' lists are not
+ *      supported at this time."
+ *
+ * — a Chrome/CDP internal, about a spec feature, in the middle of a sign-in.
+ *
+ * The technical string is not thrown away; it is just demoted. It rides along
+ * in `detail`, which the UI logs to the console and may offer behind a
+ * "details" affordance, and which the server also has in its own logs. Diagnosis
+ * keeps everything. The user keeps their sentence.
+ */
+/**
+ * The closed set of things that can go wrong on the verification page, at the
+ * granularity a USER can act on.
+ *
+ * Deliberately coarser than the causes. Several distinct WebAuthn failures
+ * collapse into `passkey_failed` because the remedy is identical ("try again or
+ * use another method") and because the browser itself refuses to distinguish
+ * them — Chrome reports "you cancelled", "you timed out" and "there is no
+ * credential here" all as NotAllowedError, on purpose, so that a page cannot use
+ * the ceremony as an oracle for which accounts exist on a device. Inventing a
+ * finer story for the user than the browser told us would mean guessing.
+ */
+export type DeviceErrorType = 
+/** No user_code supplied yet — show the code entry form, not an error. */
+'code_required'
+/** The code is wrong, malformed, or names nothing. */
+ | 'code_invalid'
+/** The code was real and has expired. */
+ | 'code_expired'
+/** This request was already declined. */
+ | 'code_declined'
+/** Already approved — the terminal already has what it needs. */
+ | 'code_already_approved'
+/** RFC 8628 §5.1 budget spent. */
+ | 'too_many_attempts'
+/** The app owner has this sign-in mode switched off. Renders the refusal. */
+ | 'mode_disabled'
+/** The requesting app is gone, or its sign-in method is not configured. */
+ | 'app_unavailable'
+/** Wrong email or password. */
+ | 'bad_credentials'
+/** The form was submitted empty. */
+ | 'missing_credentials'
+/** The second-factor code is wrong. */
+ | 'second_factor_invalid'
+/** The second-factor form was submitted empty. */
+ | 'missing_second_factor'
+/** The account is blocked. */
+ | 'account_blocked'
+/** The passkey ceremony did not complete: cancelled, timed out, or none found. */
+ | 'passkey_failed'
+/** This browser/authenticator cannot do this passkey sign-in at all. */
+ | 'passkey_unsupported'
+/** We could not reach the server. */
+ | 'offline'
+/** Anything else — including every technical failure the user cannot act on. */
+ | 'generic';
+/**
+ * A classified failure: one sentence for the human, everything else for us.
+ */
+export type DeviceError = {
+    type: DeviceErrorType;
+    /**
+     * Plain, human, safe to render. Written by us, for this screen. Never
+     * interpolated from an exception or a server description.
+     */
+    message: string;
+    /**
+     * The technical string — an exception message, a server `error_description`,
+     * a DOMException name. For the console, a collapsed details affordance, and
+     * bug reports. MUST NOT be shown as the primary message.
+     */
+    detail?: string;
+    /**
+     * Whether trying again on this page could plausibly work. Drives whether a
+     * retry control is offered: `false` means the page must not invite the user
+     * to bang on it (an expired code will never become unexpired here).
+     */
+    isRecoverable: boolean;
+};
+//# sourceMappingURL=device-errors.d.ts.map

package/dist/src/types/index.d.cts

@@ -0,0 +1,26 @@
+export type PreferIdentity = 'identity' | 'phone' | 'none';
+export type DefaultMethod = 'email_or_username' | 'phone';
+export type PreferChallenge = 'passkey' | 'password' | 'otp' | 'magic_link';
+export type SuccessAuthRedirect = string;
+export type { RegisteredTwoFactorMethod, TwoFactorChallengeResponse, TwoFactorMethod, TwoFactorVerifyRequestV2, TwoFactorVerifyResponseV2, } from '@passflow/core';
+export type { AuthErrorScope, AuthFlow, AuthOperation, AuthUiError } from './auth-errors.cjs';
+export type { DeviceError, DeviceErrorType } from './device-errors.cjs';
+export type { TwoFactorError, TwoFactorErrorType } from './two-factor-errors.cjs';
+export interface UseTwoFactorChallengeReturn {
+    challenge: import('@passflow/core').TwoFactorChallengeResponse | null;
+    isLoading: boolean;
+    error: Error | null;
+    requestChallenge: (firstFactorMethod?: string) => Promise<void>;
+    verify: (response: string, trustDevice?: boolean) => Promise<void>;
+    switchMethod: (method: import('@passflow/core').TwoFactorMethod) => Promise<void>;
+    selectedMethod: import('@passflow/core').TwoFactorMethod | null;
+}
+export interface UseTwoFactorMethodsReturn {
+    availableMethods: import('@passflow/core').TwoFactorMethod[];
+    registeredMethods: import('@passflow/core').RegisteredTwoFactorMethod[];
+    isLoading: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    removeMethod: (methodId: string) => Promise<void>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/src/types/index.d.ts

@@ -2,10 +2,10 @@ export type PreferIdentity = 'identity' | 'phone' | 'none';
 export type DefaultMethod = 'email_or_username' | 'phone';
 export type PreferChallenge = 'passkey' | 'password' | 'otp' | 'magic_link';
 export type SuccessAuthRedirect = string;
-export type { TwoFactorErrorType, TwoFactorError } from './two-factor-errors';
-export type { DeviceErrorType, DeviceError } from './device-errors';
-export type { AuthErrorScope, AuthFlow, AuthOperation, AuthUiError } from './auth-errors';
-export type { TwoFactorMethod, TwoFactorChallengeResponse, RegisteredTwoFactorMethod, TwoFactorVerifyRequestV2, TwoFactorVerifyResponseV2, } from '@passflow/core';
+export type { RegisteredTwoFactorMethod, TwoFactorChallengeResponse, TwoFactorMethod, TwoFactorVerifyRequestV2, TwoFactorVerifyResponseV2, } from '@passflow/core';
+export type { AuthErrorScope, AuthFlow, AuthOperation, AuthUiError } from './auth-errors.js';
+export type { DeviceError, DeviceErrorType } from './device-errors.js';
+export type { TwoFactorError, TwoFactorErrorType } from './two-factor-errors.js';
 export interface UseTwoFactorChallengeReturn {
     challenge: import('@passflow/core').TwoFactorChallengeResponse | null;
     isLoading: boolean;

package/dist/src/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,OAAO,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,CAAC;AAE5E,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEzC,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC9E,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAG1F,YAAY,EACV,eAAe,EACf,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,OAAO,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,cAAc,EAAE,OAAO,gBAAgB,EAAE,eAAe,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC7D,iBAAiB,EAAE,OAAO,gBAAgB,EAAE,yBAAyB,EAAE,CAAC;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,OAAO,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,CAAC;AAE5E,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAGzC,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1F,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG9E,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,OAAO,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,cAAc,EAAE,OAAO,gBAAgB,EAAE,eAAe,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC7D,iBAAiB,EAAE,OAAO,gBAAgB,EAAE,yBAAyB,EAAE,CAAC;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD"}

package/dist/src/types/two-factor-errors.d.cts

@@ -0,0 +1,14 @@
+/**
+ * Types of 2FA errors with different handling strategies
+ */
+export type TwoFactorErrorType = 'expired' | 'not_enabled' | 'invalid_code' | 'generic';
+/**
+ * Structured error information for 2FA errors
+ */
+export type TwoFactorError = {
+    type: TwoFactorErrorType;
+    message: string;
+    isRecoverable: boolean;
+    shouldAutoRedirect: boolean;
+};
+//# sourceMappingURL=two-factor-errors.d.ts.map

package/dist/src/utils/auth-error.d.cts

@@ -0,0 +1,7 @@
+import type { AuthFlow, AuthOperation, AuthUiError } from '../types/index.cjs';
+export declare const authRedirectErrorMessage = "We couldn't continue this authentication request. Return to the app and try again.";
+export declare const verificationLinkErrorMessage = "This verification link is invalid or incomplete. Request a new link or code and try again.";
+export declare const invitationLinkErrorMessage = "This invitation link is invalid or has expired.";
+export declare const verificationRequestErrorMessage = "This verification request is no longer available. Start again to request a new link or code.";
+export declare const authErrorFor: (flow: AuthFlow, operation: AuthOperation) => AuthUiError;
+//# sourceMappingURL=auth-error.d.ts.map

package/dist/src/utils/auth-error.d.ts

@@ -1,4 +1,4 @@
-import { AuthFlow, AuthOperation, AuthUiError } from '../types';
+import type { AuthFlow, AuthOperation, AuthUiError } from '../types/index.js';
 export declare const authRedirectErrorMessage = "We couldn't continue this authentication request. Return to the app and try again.";
 export declare const verificationLinkErrorMessage = "This verification link is invalid or incomplete. Request a new link or code and try again.";
 export declare const invitationLinkErrorMessage = "This invitation link is invalid or has expired.";

package/dist/src/utils/auth-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAiCpE,eAAO,MAAM,wBAAwB,uFAAuF,CAAC;AAE7H,eAAO,MAAM,4BAA4B,+FACqD,CAAC;AAE/F,eAAO,MAAM,0BAA0B,oDAAoD,CAAC;AAE5F,eAAO,MAAM,+BAA+B,iGACoD,CAAC;AAEjG,eAAO,MAAM,YAAY,GAAI,MAAM,QAAQ,EAAE,WAAW,aAAa,KAAG,WAA+C,CAAC"}
+{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAiCpE,eAAO,MAAM,wBAAwB,uFAAuF,CAAC;AAE7H,eAAO,MAAM,4BAA4B,+FACqD,CAAC;AAE/F,eAAO,MAAM,0BAA0B,oDAAoD,CAAC;AAE5F,eAAO,MAAM,+BAA+B,iGACoD,CAAC;AAEjG,eAAO,MAAM,YAAY,SAAU,QAAQ,aAAa,aAAa,KAAG,WAA+C,CAAC"}

package/dist/src/utils/classify-device-error.d.cts

@@ -0,0 +1,35 @@
+import type { DeviceError, DeviceErrorType } from '../types/device-errors.cjs';
+/**
+ * An error carrying a server-supplied reason code. Thrown by the device API
+ * client so the classifier can map precisely rather than sniff strings.
+ */
+export declare class DeviceApiError extends Error {
+    /** Stable machine reason from the server. */
+    readonly reason: string;
+    /** The OAuth2 error code (`invalid_request`, `unauthorized_client`, ...). */
+    readonly code: string;
+    /** HTTP status. */
+    readonly status: number;
+    constructor(params: {
+        reason: string;
+        code: string;
+        status: number;
+        description: string;
+    });
+}
+/**
+ * Classify any failure from the device verification flow.
+ *
+ * Order matters: the server's own reason wins when we have one (it knows more
+ * than we can infer), then WebAuthn's message text, then WebAuthn's name, then
+ * the network, then a safe default. Every path ends in copy from
+ * DEVICE_ERROR_COPY — there is deliberately no branch that forwards a raw
+ * string to `message`.
+ */
+export declare function classifyDeviceError(err: unknown): DeviceError;
+/**
+ * The copy for a type, without an error to classify. For states that are known
+ * up front rather than thrown — e.g. a browser with no WebAuthn at all.
+ */
+export declare function deviceErrorOfType(type: DeviceErrorType, detail?: string): DeviceError;
+//# sourceMappingURL=classify-device-error.d.ts.map

package/dist/src/utils/classify-device-error.d.ts

@@ -1,4 +1,4 @@
-import { DeviceError, DeviceErrorType } from '../types/device-errors';
+import type { DeviceError, DeviceErrorType } from '../types/device-errors.js';
 /**
  * An error carrying a server-supplied reason code. Thrown by the device API
  * client so the classifier can map precisely rather than sniff strings.

package/dist/src/utils/classify-device-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classify-device-error.d.ts","sourceRoot":"","sources":["../../../src/utils/classify-device-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA+I1E;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;CAS1F;AAYD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAmC7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAErF"}
+{"version":3,"file":"classify-device-error.d.ts","sourceRoot":"","sources":["../../../src/utils/classify-device-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA+I1E;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAQxF;CACF;AAYD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAmC7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAErF"}

package/dist/src/utils/classify-two-factor-error.d.cts

@@ -0,0 +1,13 @@
+import type { TwoFactorError } from '../types/two-factor-errors.cjs';
+/**
+ * Classify 2FA error based on error message
+ *
+ * @param errorMessage - Error message from SDK
+ * @returns Classified error with handling strategy
+ */
+export declare function classifyTwoFactorError(errorMessage: string): TwoFactorError;
+/**
+ * Get user-friendly error message based on error type
+ */
+export declare function getUserFriendlyErrorMessage(error: TwoFactorError): string;
+//# sourceMappingURL=classify-two-factor-error.d.ts.map

package/dist/src/utils/classify-two-factor-error.d.ts

@@ -1,4 +1,4 @@
-import { TwoFactorError } from '../types/two-factor-errors';
+import type { TwoFactorError } from '../types/two-factor-errors.js';
 /**
  * Classify 2FA error based on error message
  *

package/dist/src/utils/cn.d.cts

@@ -0,0 +1,3 @@
+import { type ClassValue } from 'clsx';
+export declare const cn: (...classes: ClassValue[]) => string;
+//# sourceMappingURL=cn.d.ts.map

package/dist/src/utils/cn.d.ts

@@ -1,3 +1,3 @@
-import { ClassValue } from 'clsx';
+import { type ClassValue } from 'clsx';
 export declare const cn: (...classes: ClassValue[]) => string;
 //# sourceMappingURL=cn.d.ts.map

package/dist/src/utils/cn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cn.d.ts","sourceRoot":"","sources":["../../../src/utils/cn.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAG7C,eAAO,MAAM,EAAE,GAAI,GAAG,SAAS,UAAU,EAAE,WAA2B,CAAC"}
+{"version":3,"file":"cn.d.ts","sourceRoot":"","sources":["../../../src/utils/cn.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAG7C,eAAO,MAAM,EAAE,eAAgB,UAAU,EAAE,WAA2B,CAAC"}

package/dist/src/utils/dayjs/format.d.cts

@@ -0,0 +1,8 @@
+declare const stringByFields: {
+    last_used: string;
+    default: string;
+};
+export declare const formatDateToString: (date: Date | string, format: string) => string;
+export declare const usedFieldString: (date: Date | string, field: keyof typeof stringByFields) => string;
+export {};
+//# sourceMappingURL=format.d.ts.map

package/dist/src/utils/dayjs/format.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../../src/utils/dayjs/format.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,cAAc;;;CAGnB,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,MAAM,IAAI,GAAG,MAAM,EAAE,QAAQ,MAAM,KAAG,MAAoC,CAAC;AAC9G,eAAO,MAAM,eAAe,GAAI,MAAM,IAAI,GAAG,MAAM,EAAE,OAAO,MAAM,OAAO,cAAc,KAAG,MAOzF,CAAC"}
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../../src/utils/dayjs/format.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,cAAc;IAClB,SAAS;IACT,OAAO;CACR,CAAC;AAEF,eAAO,MAAM,kBAAkB,SAAU,IAAI,GAAG,MAAM,UAAU,MAAM,KAAG,MAAoC,CAAC;AAC9G,eAAO,MAAM,eAAe,SAAU,IAAI,GAAG,MAAM,SAAS,MAAM,OAAO,cAAc,KAAG,MAOzF,CAAC"}

package/dist/src/utils/dayjs/index.d.cts

@@ -0,0 +1,2 @@
+export * from './format.cjs';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/utils/dayjs/index.d.ts

@@ -1,2 +1,2 @@
-export * from './format';
+export * from './format.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/utils/get-app-version.d.cts

@@ -0,0 +1,7 @@
+declare global {
+    interface Window {
+        passflowReactAppVersion: () => void;
+    }
+}
+export {};
+//# sourceMappingURL=get-app-version.d.ts.map

package/dist/src/utils/get-auth-methods.d.cts

@@ -0,0 +1,30 @@
+import type { AuthStrategies, Providers } from '@passflow/core';
+export type AuthMethods = {
+    internal: {
+        username: {
+            password: boolean;
+        };
+        email: {
+            password: boolean;
+            otp: boolean;
+            magicLink: boolean;
+        };
+        phone: {
+            password: boolean;
+            otp: boolean;
+            magicLink: boolean;
+        };
+    };
+    fim: {
+        providers: Providers[];
+    };
+    passkey: boolean;
+    hasEmailMethods: boolean;
+    hasSignInEmailMethods: boolean;
+    hasPhoneMethods: boolean;
+    hasSignInPhoneMethods: boolean;
+    hasUsernameMethods: boolean;
+    hasSignInUsernameMethods: boolean;
+};
+export declare const getAuthMethods: (strategies?: AuthStrategies[]) => AuthMethods;
+//# sourceMappingURL=get-auth-methods.d.ts.map

package/dist/src/utils/get-auth-methods.d.ts

@@ -1,4 +1,4 @@
-import { AuthStrategies, Providers } from '@passflow/core';
+import type { AuthStrategies, Providers } from '@passflow/core';
 export type AuthMethods = {
     internal: {
         username: {

package/dist/src/utils/get-auth-methods.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-auth-methods.d.ts","sourceRoot":"","sources":["../../../src/utils/get-auth-methods.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAiC,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG/F,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE;QACR,QAAQ,EAAE;YACR,QAAQ,EAAE,OAAO,CAAC;SACnB,CAAC;QACF,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO,CAAC;YAClB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,OAAO,CAAC;SACpB,CAAC;QACF,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO,CAAC;YAClB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,OAAO,CAAC;SACpB,CAAC;KACH,CAAC;IACF,GAAG,EAAE;QACH,SAAS,EAAE,SAAS,EAAE,CAAC;KACxB,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wBAAwB,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,aAAa,cAAc,EAAE,KAAG,WA8E9D,CAAC"}
+{"version":3,"file":"get-auth-methods.d.ts","sourceRoot":"","sources":["../../../src/utils/get-auth-methods.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAiC,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAK/F,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE;QACR,QAAQ,EAAE;YACR,QAAQ,EAAE,OAAO,CAAC;SACnB,CAAC;QACF,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO,CAAC;YAClB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,OAAO,CAAC;SACpB,CAAC;QACF,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO,CAAC;YAClB,GAAG,EAAE,OAAO,CAAC;YACb,SAAS,EAAE,OAAO,CAAC;SACpB,CAAC;KACH,CAAC;IACF,GAAG,EAAE;QACH,SAAS,EAAE,SAAS,EAAE,CAAC;KACxB,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wBAAwB,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF,eAAO,MAAM,cAAc,gBAAiB,cAAc,EAAE,KAAG,WA8E9D,CAAC"}

package/dist/src/utils/get-form-labels.d.cts

@@ -0,0 +1,10 @@
+import type { InternalStrategyChallenge } from '@passflow/core';
+import type { DefaultMethod } from '../types/index.cjs';
+import type { AuthMethods } from './get-auth-methods.cjs';
+export declare const getIdentityLabel: (methods: AuthMethods, type: 'label' | 'button') => "Email" | "Email or username" | "Use email" | "Use email or username" | "Use username" | "Username" | null;
+export declare const getPasswordlessData: (methods: AuthMethods, currentMethod: DefaultMethod | null) => {
+    label: string;
+    challengeType: InternalStrategyChallenge;
+} | null;
+export declare const getValidationErrorsLabel: (methods: AuthMethods) => "Email is required" | "Email or username is required" | "Field is required" | "Username is required";
+//# sourceMappingURL=get-form-labels.d.ts.map

package/dist/src/utils/get-form-labels.d.ts

@@ -1,10 +1,10 @@
-import { DefaultMethod } from '../types';
-import { InternalStrategyChallenge } from '@passflow/core';
-import { AuthMethods } from './get-auth-methods';
-export declare const getIdentityLabel: (methods: AuthMethods, type: "label" | "button") => "Email or username" | "Use email or username" | "Email" | "Use email" | "Username" | "Use username" | null;
+import type { InternalStrategyChallenge } from '@passflow/core';
+import type { DefaultMethod } from '../types/index.js';
+import type { AuthMethods } from './get-auth-methods.js';
+export declare const getIdentityLabel: (methods: AuthMethods, type: 'label' | 'button') => "Email" | "Email or username" | "Use email" | "Use email or username" | "Use username" | "Username" | null;
 export declare const getPasswordlessData: (methods: AuthMethods, currentMethod: DefaultMethod | null) => {
     label: string;
     challengeType: InternalStrategyChallenge;
 } | null;
-export declare const getValidationErrorsLabel: (methods: AuthMethods) => "Email or username is required" | "Email is required" | "Username is required" | "Field is required";
+export declare const getValidationErrorsLabel: (methods: AuthMethods) => "Email is required" | "Email or username is required" | "Field is required" | "Username is required";
 //# sourceMappingURL=get-form-labels.d.ts.map

package/dist/src/utils/get-form-labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-form-labels.d.ts","sourceRoot":"","sources":["../../../src/utils/get-form-labels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,eAAO,MAAM,gBAAgB,GAAI,SAAS,WAAW,EAAE,MAAM,OAAO,GAAG,QAAQ,+GAO9E,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,SAAS,WAAW,EACpB,eAAe,aAAa,GAAG,IAAI,KAClC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,yBAAyB,CAAA;CAAE,GAAG,IAYhE,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,SAAS,WAAW,yGAM5D,CAAC"}
+{"version":3,"file":"get-form-labels.d.ts","sourceRoot":"","sources":["../../../src/utils/get-form-labels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,eAAO,MAAM,gBAAgB,YAAa,WAAW,QAAQ,OAAO,GAAG,QAAQ,+GAO9E,CAAC;AAEF,eAAO,MAAM,mBAAmB,YACrB,WAAW,iBACL,aAAa,GAAG,IAAI,KAClC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,yBAAyB,CAAA;CAAE,GAAG,IAYhE,CAAC;AAEF,eAAO,MAAM,wBAAwB,YAAa,WAAW,yGAM5D,CAAC"}

package/dist/src/utils/get-url-errors.d.cts

@@ -0,0 +1,5 @@
+export declare const getUrlErrors: (subUrl?: string) => {
+    error: string | null;
+    message: string | null;
+};
+//# sourceMappingURL=get-url-errors.d.ts.map

package/dist/src/utils/get-url-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-url-errors.d.ts","sourceRoot":"","sources":["../../../src/utils/get-url-errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM;;;CAM3C,CAAC"}
+{"version":3,"file":"get-url-errors.d.ts","sourceRoot":"","sources":["../../../src/utils/get-url-errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,YAAa,MAAM;;;CAM3C,CAAC"}

package/dist/src/utils/get-url-with-tokens.d.cts

@@ -0,0 +1,4 @@
+import type { Passflow } from '@passflow/core';
+export type TokenUrlFormat = 'query' | 'hash';
+export declare const getUrlWithTokens: (passflow: Passflow, url: string, format?: TokenUrlFormat) => Promise<string>;
+//# sourceMappingURL=get-url-with-tokens.d.ts.map

package/dist/src/utils/get-url-with-tokens.d.ts

@@ -1,4 +1,4 @@
-import { Passflow } from '@passflow/core';
+import type { Passflow } from '@passflow/core';
 export type TokenUrlFormat = 'query' | 'hash';
 export declare const getUrlWithTokens: (passflow: Passflow, url: string, format?: TokenUrlFormat) => Promise<string>;
 //# sourceMappingURL=get-url-with-tokens.d.ts.map

package/dist/src/utils/get-url-with-tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-url-with-tokens.d.ts","sourceRoot":"","sources":["../../../src/utils/get-url-with-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9C,eAAO,MAAM,gBAAgB,GAAU,UAAU,QAAQ,EAAE,KAAK,MAAM,EAAE,SAAQ,cAAuB,KAAG,OAAO,CAAC,MAAM,CAmBvH,CAAC"}
+{"version":3,"file":"get-url-with-tokens.d.ts","sourceRoot":"","sources":["../../../src/utils/get-url-with-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9C,eAAO,MAAM,gBAAgB,aAAoB,QAAQ,OAAO,MAAM,WAAU,cAAc,KAAY,OAAO,CAAC,MAAM,CAmBvH,CAAC"}

package/dist/src/utils/index.d.cts

@@ -0,0 +1,18 @@
+export { authErrorFor, authRedirectErrorMessage, invitationLinkErrorMessage, verificationLinkErrorMessage, verificationRequestErrorMessage, } from './auth-error.cjs';
+export { classifyDeviceError, DeviceApiError, deviceErrorOfType } from './classify-device-error.cjs';
+export { classifyTwoFactorError, getUserFriendlyErrorMessage } from './classify-two-factor-error.cjs';
+export { cn } from './cn.cjs';
+export * from './dayjs/index.cjs';
+export { type AuthMethods, getAuthMethods } from './get-auth-methods.cjs';
+export { getIdentityLabel, getPasswordlessData, getValidationErrorsLabel } from './get-form-labels.cjs';
+export { getUrlErrors } from './get-url-errors.cjs';
+export { getUrlWithTokens, type TokenUrlFormat } from './get-url-with-tokens.cjs';
+export { getInvitationAuthChrome, type InvitationAuthIntent } from './invitation-auth-chrome.cjs';
+export { routeToSecondFactor, urlCarriesTwoFactorToken } from './second-factor.cjs';
+export { TwoFactorLoopPrevention } from './two-factor-loop-prevention.cjs';
+export { undefinedOnCatch } from './undefined-on-catch.cjs';
+export { attachAuth, registerUpgradeAuthInstance, releaseUpgradeAuthInstance, upgradeAuthInstance, withAuth, } from './upgrade-auth.cjs';
+export { useUrlParams } from './url-params.cjs';
+export { isValidUrl } from './validate-url.cjs';
+export * from './validation-schemas/index.cjs';
+//# sourceMappingURL=index.d.ts.map