@passflow/react 0.15.1 → 0.17.0

package/dist/src/components/flow/index.d.cts

@@ -1,5 +1,5 @@
 export { ConsentFlow } from './consent/index.cjs';
 export { DeviceVerifyFlow } from './device-verify/index.cjs';
-export { PassflowFlow, type PassflowProps } from './passflow/index.cjs';
+export { PassflowFlow, type PassflowFlowLocation, type PassflowFlowNavigate, type PassflowProps } from './passflow/index.cjs';
 export { TwoFactorSetupMagicLinkFlow, type TwoFactorSetupMagicLinkFlowProps } from './two-factor-setup-magic-link/index.cjs';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/components/flow/index.d.ts

@@ -1,5 +1,5 @@
 export { ConsentFlow } from './consent/index.js';
 export { DeviceVerifyFlow } from './device-verify/index.js';
-export { PassflowFlow, type PassflowProps } from './passflow/index.js';
+export { PassflowFlow, type PassflowFlowLocation, type PassflowFlowNavigate, type PassflowProps } from './passflow/index.js';
 export { TwoFactorSetupMagicLinkFlow, type TwoFactorSetupMagicLinkFlowProps } from './two-factor-setup-magic-link/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/components/flow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/flow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,KAAK,gCAAgC,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/flow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,KAAK,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AACpH,OAAO,EAAE,2BAA2B,EAAE,KAAK,gCAAgC,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/src/components/flow/passflow/flow-router.d.cts

@@ -0,0 +1,39 @@
+export type FlowLocation = {
+    pathname: string;
+    search: string;
+};
+export type FlowNavigateOptions = {
+    replace: boolean;
+};
+export type FlowNavigate = (location: FlowLocation, options: FlowNavigateOptions) => void;
+export type FlowHistory = {
+    /** The current location. Returns the same object until the location changes. */
+    read: () => FlowLocation;
+    subscribe: (listener: () => void) => () => void;
+    navigate: FlowNavigate;
+};
+/** The screens PassflowFlow renders, keyed as in `routes`. */
+export declare const FLOW_SCREENS: readonly ["signin", "signup", "verify_otp", "verify_magic_link", "forgot_password", "forgot_password_success", "reset_password", "invitation", "two_factor_verify", "two_factor_setup", "two_factor_setup_magic_link"];
+export type FlowScreen = (typeof FLOW_SCREENS)[number];
+export type FlowMatch = {
+    screen: FlowScreen;
+    params: Record<string, string>;
+};
+/** `'/auth/'` → `'/auth'`, `'auth'` → `'/auth'`, `'/'` or `''` → `''`. */
+export declare const normalizePrefix: (prefix: string | undefined) => string;
+/** The screen at `pathname` under `prefix`, or null when the path is not one of the flow's screens. */
+export declare const matchScreen: (pathname: string, prefix: string) => FlowMatch | null;
+/**
+ * Where the flow is mounted, worked out from the first URL it sees: the part in
+ * front of a screen path (`/auth/signin` → `/auth`), or the whole path when it
+ * names no screen (`/auth` → `/auth`, `/` → `''`).
+ */
+export declare const detectPrefix: (pathname: string) => string;
+/** The absolute path of a screen under `prefix`; `params` fill `:name` segments. */
+export declare const screenPath: (screen: FlowScreen, prefix: string, params?: Record<string, string>) => string;
+export declare const isUnderPrefix: (pathname: string, prefix: string) => boolean;
+export declare const withQuestionMark: (search: string) => string;
+export declare const createBrowserHistory: () => FlowHistory;
+export declare const createHashHistory: () => FlowHistory;
+export declare const createMemoryHistory: (initial?: FlowLocation) => FlowHistory;
+//# sourceMappingURL=flow-router.d.ts.map

package/dist/src/components/flow/passflow/flow-router.d.ts

@@ -0,0 +1,39 @@
+export type FlowLocation = {
+    pathname: string;
+    search: string;
+};
+export type FlowNavigateOptions = {
+    replace: boolean;
+};
+export type FlowNavigate = (location: FlowLocation, options: FlowNavigateOptions) => void;
+export type FlowHistory = {
+    /** The current location. Returns the same object until the location changes. */
+    read: () => FlowLocation;
+    subscribe: (listener: () => void) => () => void;
+    navigate: FlowNavigate;
+};
+/** The screens PassflowFlow renders, keyed as in `routes`. */
+export declare const FLOW_SCREENS: readonly ["signin", "signup", "verify_otp", "verify_magic_link", "forgot_password", "forgot_password_success", "reset_password", "invitation", "two_factor_verify", "two_factor_setup", "two_factor_setup_magic_link"];
+export type FlowScreen = (typeof FLOW_SCREENS)[number];
+export type FlowMatch = {
+    screen: FlowScreen;
+    params: Record<string, string>;
+};
+/** `'/auth/'` → `'/auth'`, `'auth'` → `'/auth'`, `'/'` or `''` → `''`. */
+export declare const normalizePrefix: (prefix: string | undefined) => string;
+/** The screen at `pathname` under `prefix`, or null when the path is not one of the flow's screens. */
+export declare const matchScreen: (pathname: string, prefix: string) => FlowMatch | null;
+/**
+ * Where the flow is mounted, worked out from the first URL it sees: the part in
+ * front of a screen path (`/auth/signin` → `/auth`), or the whole path when it
+ * names no screen (`/auth` → `/auth`, `/` → `''`).
+ */
+export declare const detectPrefix: (pathname: string) => string;
+/** The absolute path of a screen under `prefix`; `params` fill `:name` segments. */
+export declare const screenPath: (screen: FlowScreen, prefix: string, params?: Record<string, string>) => string;
+export declare const isUnderPrefix: (pathname: string, prefix: string) => boolean;
+export declare const withQuestionMark: (search: string) => string;
+export declare const createBrowserHistory: () => FlowHistory;
+export declare const createHashHistory: () => FlowHistory;
+export declare const createMemoryHistory: (initial?: FlowLocation) => FlowHistory;
+//# sourceMappingURL=flow-router.d.ts.map

package/dist/src/components/flow/passflow/flow-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-router.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/passflow/flow-router.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AACvD,MAAM,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAE1F,MAAM,MAAM,WAAW,GAAG;IACxB,gFAAgF;IAChF,IAAI,EAAE,MAAM,YAAY,CAAC;IACzB,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD,QAAQ,EAAE,YAAY,CAAC;CACxB,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,YAAY,wNAY4B,CAAC;AAEtD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,MAAM,SAAS,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AA4B/E,0EAA0E;AAC1E,eAAO,MAAM,eAAe,WAAY,MAAM,GAAG,SAAS,KAAG,MAG5D,CAAC;AAIF,uGAAuG;AACvG,eAAO,MAAM,WAAW,aAAc,MAAM,UAAU,MAAM,KAAG,SAAS,GAAG,IAW1E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,YAAY,aAAc,MAAM,KAAG,MAO/C,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,UAAU,WAAY,UAAU,UAAU,MAAM,WAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAQ,MACc,CAAC;AAEpH,eAAO,MAAM,aAAa,aAAc,MAAM,UAAU,MAAM,YACa,CAAC;AAE5E,eAAO,MAAM,gBAAgB,WAAY,MAAM,WAAgE,CAAC;AAsBhH,eAAO,MAAM,oBAAoB,QAAO,WAWtC,CAAC;AASH,eAAO,MAAM,iBAAiB,QAAO,WASnC,CAAC;AAEH,eAAO,MAAM,mBAAmB,aAAa,YAAY,KAAmC,WAgB3F,CAAC"}

package/dist/src/components/flow/passflow/index.d.cts

@@ -1,16 +1,38 @@
 import type { SuccessAuthRedirect } from '../../../types/index.cjs';
-export type PassflowProps = {
+import { type FlowLocation, type FlowNavigate } from './flow-router.cjs';
+export type { FlowLocation as PassflowFlowLocation, FlowNavigate as PassflowFlowNavigate } from './flow-router.cjs';
+type PassflowBaseProps = {
     successAuthRedirect?: SuccessAuthRedirect;
     federatedDisplayMode?: 'modal' | 'redirect';
     error?: string;
     relyingPartyId?: string;
+    /**
+     * Where the flow is mounted, such as `/auth`: its screens are then `/auth/signin`,
+     * `/auth/signup`, and so on. Leave it out and the flow works it out from the first
+     * URL it sees (`/auth/signin` or `/auth` → `/auth`; `/` → none).
+     */
     pathPrefix?: string;
     /**
-     * The router the flow creates for itself. Ignored when the flow is rendered
-     * inside a host react-router `<Router>`: the flow then uses the host's router.
+     * The history the flow keeps when the app does not pass `location`. `browser`
+     * (the default) uses the address bar, on its own or inside the app's router;
+     * `hash` keeps the flow's path after `#`; `memory` leaves the URL alone.
      */
     routerType?: 'browser' | 'hash' | 'memory';
+    /** @deprecated Never had an effect. Use `pathPrefix`. */
     basename?: string;
 };
+export type PassflowProps = PassflowBaseProps & ({
+    location?: undefined;
+    navigate?: undefined;
+} | {
+    /**
+     * Full control: the app's router owns the location. Pass its current
+     * `{ pathname, search }` and a `navigate` that moves it; `routerType` is then
+     * not used. Not needed for an app router in browser mode, which the default
+     * already follows.
+     */
+    location: FlowLocation;
+    navigate: FlowNavigate;
+});
 export declare const PassflowFlow: (props: PassflowProps) => import("react").JSX.Element | null;
 //# sourceMappingURL=index.d.ts.map

package/dist/src/components/flow/passflow/index.d.ts

@@ -1,16 +1,38 @@
 import type { SuccessAuthRedirect } from '../../../types/index.js';
-export type PassflowProps = {
+import { type FlowLocation, type FlowNavigate } from './flow-router.js';
+export type { FlowLocation as PassflowFlowLocation, FlowNavigate as PassflowFlowNavigate } from './flow-router.js';
+type PassflowBaseProps = {
     successAuthRedirect?: SuccessAuthRedirect;
     federatedDisplayMode?: 'modal' | 'redirect';
     error?: string;
     relyingPartyId?: string;
+    /**
+     * Where the flow is mounted, such as `/auth`: its screens are then `/auth/signin`,
+     * `/auth/signup`, and so on. Leave it out and the flow works it out from the first
+     * URL it sees (`/auth/signin` or `/auth` → `/auth`; `/` → none).
+     */
     pathPrefix?: string;
     /**
-     * The router the flow creates for itself. Ignored when the flow is rendered
-     * inside a host react-router `<Router>`: the flow then uses the host's router.
+     * The history the flow keeps when the app does not pass `location`. `browser`
+     * (the default) uses the address bar, on its own or inside the app's router;
+     * `hash` keeps the flow's path after `#`; `memory` leaves the URL alone.
      */
     routerType?: 'browser' | 'hash' | 'memory';
+    /** @deprecated Never had an effect. Use `pathPrefix`. */
     basename?: string;
 };
+export type PassflowProps = PassflowBaseProps & ({
+    location?: undefined;
+    navigate?: undefined;
+} | {
+    /**
+     * Full control: the app's router owns the location. Pass its current
+     * `{ pathname, search }` and a `navigate` that moves it; `routerType` is then
+     * not used. Not needed for an app router in browser mode, which the default
+     * already follows.
+     */
+    location: FlowLocation;
+    navigate: FlowNavigate;
+});
 export declare const PassflowFlow: (props: PassflowProps) => import("react").JSX.Element | null;
 //# sourceMappingURL=index.d.ts.map

package/dist/src/components/flow/passflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/passflow/index.tsx"],"names":[],"mappings":"AAcA,OAAO,oBAAoB,CAAC;AAmB5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAGnD,MAAM,MAAM,aAAa,GAAG;IAC1B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AA6OF,eAAO,MAAM,YAAY,8DAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/passflow/index.tsx"],"names":[],"mappings":"AAeA,OAAO,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAOL,KAAK,YAAY,EAEjB,KAAK,YAAY,EAOlB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,YAAY,IAAI,oBAAoB,EAAE,YAAY,IAAI,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEhH,KAAK,iBAAiB,GAAG;IACvB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAC3C,CACI;IACE,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,GACD;IACE;;;;;OAKG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;CACxB,CACJ,CAAC;AAuOJ,eAAO,MAAM,YAAY,8DAA6C,CAAC"}

package/dist/src/components/flow/two-factor-setup-magic-link/index.d.cts

@@ -8,6 +8,11 @@ type MagicLinkError = NonNullable<UseTwoFactorSetupMagicLinkReturn['error']>;
  * Props for TwoFactorSetupMagicLinkFlow component
  */
 export type TwoFactorSetupMagicLinkFlowProps = {
+    /**
+     * The magic-link token. Leave it out and it is read from the URL: the path
+     * segment after `/two-factor-setup-magic-link/` (or the same after `#`).
+     */
+    token?: string;
     /** Callback after successful setup */
     onSuccess?: () => void;
     /** Callback on validation error */
@@ -21,7 +26,7 @@ export type TwoFactorSetupMagicLinkFlowProps = {
  * Flow component for magic link 2FA setup
  *
  * This component:
- * 1. Extracts token from URL params
+ * 1. Takes the token from its `token` prop, or from the URL
  * 2. Validates token via useTwoFactorSetupMagicLink hook
  * 3. Shows loading state during validation
  * 4. Shows error UI if validation fails

package/dist/src/components/flow/two-factor-setup-magic-link/index.d.ts

@@ -8,6 +8,11 @@ type MagicLinkError = NonNullable<UseTwoFactorSetupMagicLinkReturn['error']>;
  * Props for TwoFactorSetupMagicLinkFlow component
  */
 export type TwoFactorSetupMagicLinkFlowProps = {
+    /**
+     * The magic-link token. Leave it out and it is read from the URL: the path
+     * segment after `/two-factor-setup-magic-link/` (or the same after `#`).
+     */
+    token?: string;
     /** Callback after successful setup */
     onSuccess?: () => void;
     /** Callback on validation error */
@@ -21,7 +26,7 @@ export type TwoFactorSetupMagicLinkFlowProps = {
  * Flow component for magic link 2FA setup
  *
  * This component:
- * 1. Extracts token from URL params
+ * 1. Takes the token from its `token` prop, or from the URL
  * 2. Validates token via useTwoFactorSetupMagicLink hook
  * 3. Shows loading state during validation
  * 4. Shows error UI if validation fails

package/dist/src/components/flow/two-factor-setup-magic-link/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/two-factor-setup-magic-link/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAOhC,OAAO,EAAE,KAAK,gCAAgC,EAA6C,MAAM,SAAS,CAAC;AAE3G,OAAO,oBAAoB,CAAC;AAE5B;;GAEG;AACH,KAAK,cAAc,GAAG,WAAW,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,mCAAmC;IACnC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAC1C,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,EAAE,EAAE,CAAC,gCAAgC,CAsH5E,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/two-factor-setup-magic-link/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAMhC,OAAO,EAAE,KAAK,gCAAgC,EAA6C,MAAM,SAAS,CAAC;AAE3G,OAAO,oBAAoB,CAAC;AAE5B;;GAEG;AACH,KAAK,cAAc,GAAG,WAAW,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,mCAAmC;IACnC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAC1C,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAeF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,EAAE,EAAE,CAAC,gCAAgC,CAuH5E,CAAC"}

package/dist/src/components/form/forgot-password/forgot-password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forgot-password.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/forgot-password/forgot-password.tsx"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,EAAE,EAAW,MAAM,OAAO,CAAC;AASzC,OAAO,oBAAoB,CAAC;AAY5B,KAAK,eAAe,GAAG;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,EAAE,CAAC,eAAe,CA+L9C,CAAC"}
+{"version":3,"file":"forgot-password.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/forgot-password/forgot-password.tsx"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,EAAE,EAAW,MAAM,OAAO,CAAC;AASzC,OAAO,oBAAoB,CAAC;AAY5B,KAAK,eAAe,GAAG;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,EAAE,CAAC,eAAe,CAgM9C,CAAC"}

package/dist/src/components/form/invitation-join/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/invitation-join/index.tsx"],"names":[],"mappings":"AASA,MAAM,MAAM,mBAAmB,GAAG;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AA2EF,eAAO,MAAM,cAAc,oEAAgD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/invitation-join/index.tsx"],"names":[],"mappings":"AASA,MAAM,MAAM,mBAAmB,GAAG;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AA4EF,eAAO,MAAM,cAAc,oEAAgD,CAAC"}

package/dist/src/components/form/signin/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signin/index.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAkDnD,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CAwLlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signin/index.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAkDnD,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CAyLlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}

package/dist/src/components/form/signup/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signup/index.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAiB,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAsDlE,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CAsKlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signup/index.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAiB,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAsDlE,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CAuKlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}

package/dist/src/components/provider/passflow-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passflow-provider.d.ts","sourceRoot":"","sources":["../../../../src/components/provider/passflow-provider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,cAAc,EAA2B,MAAM,gBAAgB,CAAC;AAC7G,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,SAAS,EAAiE,MAAM,OAAO,CAAC;AACtH,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAIL,KAAK,gBAAgB,EAIrB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAEnB,OAAO,oBAAoB,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAEpG,KAAK,qBAAqB,GAAG,cAAc,GAAG;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,sBAAsB,CAAC;IAC3C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,QACkE,CAAC;AAErG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,QAAO,MAAM,GAAG,SAQxD,CAAC;AAiCF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,uBAAuB,QAAO,OAA+B,CAAC;AAqK3E;;;GAGG;AACH,KAAK,mBAAmB,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;GAMG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAmLtF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B,CAAC;AAwCF,eAAO,MAAM,mBAAmB,yCAE9B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAyJtD,CAAC"}
+{"version":3,"file":"passflow-provider.d.ts","sourceRoot":"","sources":["../../../../src/components/provider/passflow-provider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,cAAc,EAA2B,MAAM,gBAAgB,CAAC;AAC7G,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,SAAS,EAAiE,MAAM,OAAO,CAAC;AACtH,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGpG,OAAO,EAIL,KAAK,gBAAgB,EAIrB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAEnB,OAAO,oBAAoB,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAEpG,KAAK,qBAAqB,GAAG,cAAc,GAAG;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,sBAAsB,CAAC;IAC3C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,QACkE,CAAC;AAErG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,QAAO,MAAM,GAAG,SAQxD,CAAC;AAiCF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,uBAAuB,QAAO,OAA+B,CAAC;AAqK3E;;;GAGG;AACH,KAAK,mBAAmB,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;GAMG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAmLtF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B,CAAC;AAwCF,eAAO,MAAM,mBAAmB,yCAE9B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA0JtD,CAAC"}

package/dist/src/components/provider/use-dispose-on-replace.d.cts

@@ -0,0 +1,17 @@
+import type { Passflow } from '@passflow/core';
+type Disposable = Pick<Passflow, 'dispose'>;
+/**
+ * Disposes a Passflow instance once it is replaced (a new `useMemo` value) or the
+ * provider unmounts. Each instance owns refresh timers, a BroadcastChannel and Web
+ * Locks; one left undisposed keeps acting as an extra tab.
+ *
+ * Why the dispose is deferred: React StrictMode runs effect cleanup and setup again
+ * for the same instance in one commit, while `useMemo` keeps that instance live. An
+ * immediate dispose in cleanup would kill the instance the app keeps using, and core
+ * forbids using an instance after `dispose()`. So cleanup only schedules the dispose
+ * (`setTimeout(0)`); a setup that sees the same instance cancels it. A different
+ * instance or a real unmount leaves the timer to fire.
+ */
+export declare function useDisposeOnReplace(instance: Disposable): void;
+export {};
+//# sourceMappingURL=use-dispose-on-replace.d.ts.map

package/dist/src/components/provider/use-dispose-on-replace.d.ts

@@ -0,0 +1,17 @@
+import type { Passflow } from '@passflow/core';
+type Disposable = Pick<Passflow, 'dispose'>;
+/**
+ * Disposes a Passflow instance once it is replaced (a new `useMemo` value) or the
+ * provider unmounts. Each instance owns refresh timers, a BroadcastChannel and Web
+ * Locks; one left undisposed keeps acting as an extra tab.
+ *
+ * Why the dispose is deferred: React StrictMode runs effect cleanup and setup again
+ * for the same instance in one commit, while `useMemo` keeps that instance live. An
+ * immediate dispose in cleanup would kill the instance the app keeps using, and core
+ * forbids using an instance after `dispose()`. So cleanup only schedules the dispose
+ * (`setTimeout(0)`); a setup that sees the same instance cancels it. A different
+ * instance or a real unmount leaves the timer to fire.
+ */
+export declare function useDisposeOnReplace(instance: Disposable): void;
+export {};
+//# sourceMappingURL=use-dispose-on-replace.d.ts.map

package/dist/src/components/provider/use-dispose-on-replace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-dispose-on-replace.d.ts","sourceRoot":"","sources":["../../../../src/components/provider/use-dispose-on-replace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,KAAK,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAO5C;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAe9D"}

package/dist/src/context/auth-context.d.cts

@@ -1,6 +1,6 @@
-import { type ParsedTokens, type Tokens } from '@passflow/core';
+import { type ParsedTokens, type SessionExpiredReason, type Tokens } from '@passflow/core';
 import { type FC, type PropsWithChildren } from 'react';
-export type SessionExpiredHandler = (reason: 'refresh_failed' | 'token_invalid' | 'logged_out') => void;
+export type SessionExpiredHandler = (reason: SessionExpiredReason) => void;
 export type AuthContextValue = {
     isAuthenticated: () => boolean;
     logout: () => void;
@@ -14,8 +14,9 @@ export type AuthContextValue = {
 export declare const AuthContext: import("react").Context<AuthContextValue | undefined>;
 export type AuthProviderProps = PropsWithChildren<{
     /**
-     * Called when the session expires (token refresh failed).
-     * Use this to redirect to your login page.
+     * Called when the session has really ended: last auth strike, no successor token pair
+     * in time, or another user's tokens in storage. A transient refresh failure keeps the
+     * session and does not call this. Use this to redirect to your login page.
      */
     onSessionExpired?: SessionExpiredHandler;
 }>;

package/dist/src/context/auth-context.d.ts

@@ -1,6 +1,6 @@
-import { type ParsedTokens, type Tokens } from '@passflow/core';
+import { type ParsedTokens, type SessionExpiredReason, type Tokens } from '@passflow/core';
 import { type FC, type PropsWithChildren } from 'react';
-export type SessionExpiredHandler = (reason: 'refresh_failed' | 'token_invalid' | 'logged_out') => void;
+export type SessionExpiredHandler = (reason: SessionExpiredReason) => void;
 export type AuthContextValue = {
     isAuthenticated: () => boolean;
     logout: () => void;
@@ -14,8 +14,9 @@ export type AuthContextValue = {
 export declare const AuthContext: import("react").Context<AuthContextValue | undefined>;
 export type AuthProviderProps = PropsWithChildren<{
     /**
-     * Called when the session expires (token refresh failed).
-     * Use this to redirect to your login page.
+     * Called when the session has really ended: last auth strike, no successor token pair
+     * in time, or another user's tokens in storage. A transient refresh failure keeps the
+     * session and does not call this. Use this to redirect to your login page.
      */
     onSessionExpired?: SessionExpiredHandler;
 }>;

package/dist/src/context/auth-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../../src/context/auth-context.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAA0C,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxG,OAAO,EAAiB,KAAK,EAAE,EAAE,KAAK,iBAAiB,EAAoC,MAAM,OAAO,CAAC;AAGzG,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe,GAAG,YAAY,KAAK,IAAI,CAAC;AAExG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACpH,CAAC;AAEF,eAAO,MAAM,WAAW,uDAAyD,CAAC;AAElF,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;IAChD;;;OAGG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;CAC1C,CAAC,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAmE9C,CAAC"}
+{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../../src/context/auth-context.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,oBAAoB,EACzB,KAAK,MAAM,EACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAiB,KAAK,EAAE,EAAE,KAAK,iBAAiB,EAAoC,MAAM,OAAO,CAAC;AAGzG,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;AAE3E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACpH,CAAC;AAEF,eAAO,MAAM,WAAW,uDAAyD,CAAC;AAElF,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;IAChD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;CAC1C,CAAC,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAkE9C,CAAC"}

package/dist/src/context/index.d.cts

@@ -2,5 +2,6 @@ export * from './auth-context.cjs';
 export * from './navigation-context.cjs';
 export * from './passflow-context.cjs';
 export * from './router-context.cjs';
+export * from './search-context.cjs';
 export * from './upgrade-context.cjs';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/context/index.d.ts

@@ -2,5 +2,6 @@ export * from './auth-context.js';
 export * from './navigation-context.js';
 export * from './passflow-context.js';
 export * from './router-context.js';
+export * from './search-context.js';
 export * from './upgrade-context.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/context/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/context/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/context/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}

package/dist/src/context/search-context.d.cts

@@ -0,0 +1,20 @@
+/**
+ * Where the forms read and write their search params (`?challenge_id=…`).
+ *
+ * Outside PassflowFlow it is the address bar, as it always was. Inside, PassflowFlow
+ * provides its own location, so the forms see the right params when the flow keeps a
+ * memory or hash history, or is driven by an app router that does not use the address
+ * bar. In the default browser mode both are the same URL.
+ */
+export type SearchSource = {
+    /** The current search string, with its leading `?` or empty. */
+    read: () => string;
+    /** Moves to the same path with a new search string. */
+    write: (search: string, options: {
+        replace: boolean;
+    }) => void;
+};
+export declare const addressBarSearch: SearchSource;
+export declare const SearchContext: import("react").Context<SearchSource>;
+export declare const useSearchSource: () => SearchSource;
+//# sourceMappingURL=search-context.d.ts.map

package/dist/src/context/search-context.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Where the forms read and write their search params (`?challenge_id=…`).
+ *
+ * Outside PassflowFlow it is the address bar, as it always was. Inside, PassflowFlow
+ * provides its own location, so the forms see the right params when the flow keeps a
+ * memory or hash history, or is driven by an app router that does not use the address
+ * bar. In the default browser mode both are the same URL.
+ */
+export type SearchSource = {
+    /** The current search string, with its leading `?` or empty. */
+    read: () => string;
+    /** Moves to the same path with a new search string. */
+    write: (search: string, options: {
+        replace: boolean;
+    }) => void;
+};
+export declare const addressBarSearch: SearchSource;
+export declare const SearchContext: import("react").Context<SearchSource>;
+export declare const useSearchSource: () => SearchSource;
+//# sourceMappingURL=search-context.d.ts.map

package/dist/src/context/search-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-context.d.ts","sourceRoot":"","sources":["../../../src/context/search-context.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,gEAAgE;IAChE,IAAI,EAAE,MAAM,MAAM,CAAC;IACnB,uDAAuD;IACvD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;CAChE,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,YAO9B,CAAC;AAEF,eAAO,MAAM,aAAa,uCAAgD,CAAC;AAE3E,eAAO,MAAM,eAAe,oBAAkC,CAAC"}

package/dist/src/hooks/index.d.cts

@@ -11,8 +11,9 @@ export { useOutsideClick } from './use-outsideclick.cjs';
 export { usePassflow } from './use-passflow.cjs';
 export { type UsePasswordlessCompleteProps, usePasswordlessComplete } from './use-passwordless-complete.cjs';
 export { type UseProviderProps, useProvider } from './use-provider.cjs';
+export { type UseRefreshStatusResult, useRefreshStatus } from './use-refresh-status.cjs';
 export { type UseResetPasswordProps, useResetPassword } from './use-reset-password.cjs';
-export { type SessionExpiredReason, type UseSessionExpiredOptions, type UseSessionExpiredResult, useSessionExpired, } from './use-session-expired.cjs';
+export { type UseSessionExpiredOptions, type UseSessionExpiredResult, useSessionExpired, } from './use-session-expired.cjs';
 export { type UseSignInProps, useSignIn } from './use-signin.cjs';
 export { type UseSignUpProps, useSignUp } from './use-signup.cjs';
 export { type UseTrustedDevicesProps, useTrustedDevices } from './use-trusted-devices.cjs';

package/dist/src/hooks/index.d.ts

@@ -11,8 +11,9 @@ export { useOutsideClick } from './use-outsideclick.js';
 export { usePassflow } from './use-passflow.js';
 export { type UsePasswordlessCompleteProps, usePasswordlessComplete } from './use-passwordless-complete.js';
 export { type UseProviderProps, useProvider } from './use-provider.js';
+export { type UseRefreshStatusResult, useRefreshStatus } from './use-refresh-status.js';
 export { type UseResetPasswordProps, useResetPassword } from './use-reset-password.js';
-export { type SessionExpiredReason, type UseSessionExpiredOptions, type UseSessionExpiredResult, useSessionExpired, } from './use-session-expired.js';
+export { type UseSessionExpiredOptions, type UseSessionExpiredResult, useSessionExpired, } from './use-session-expired.js';
 export { type UseSignInProps, useSignIn } from './use-signin.js';
 export { type UseSignUpProps, useSignUp } from './use-signup.js';
 export { type UseTrustedDevicesProps, useTrustedDevices } from './use-trusted-devices.js';

package/dist/src/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,KAAK,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,KAAK,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,KAAK,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,KAAK,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACjH,OAAO,EAAE,KAAK,gCAAgC,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAEtH,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE3F,OAAO,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,KAAK,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,KAAK,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,KAAK,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,KAAK,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGpF,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,KAAK,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,KAAK,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACjH,OAAO,EAAE,KAAK,gCAAgC,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAEtH,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE3F,OAAO,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,KAAK,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/src/hooks/use-refresh-status.d.cts

@@ -0,0 +1,36 @@
+export interface UseRefreshStatusResult {
+    /**
+     * True inside a transient-failure episode: a token refresh failed for a reason that
+     * does not end the session (network, 5xx) and core is retrying. The session is kept.
+     */
+    isFailing: boolean;
+    /**
+     * Epoch ms of the episode's first transient failure (`RefreshFailing.since`).
+     */
+    since: number | null;
+    /**
+     * Epoch ms of the pending retry, when core knows it (`RefreshFailing.nextRetryAt`).
+     */
+    nextRetryAt: number | null;
+}
+/**
+ * Hook to show a "connection trouble" notice while token refresh is failing transiently.
+ *
+ * Set by `RefreshFailing`; cleared by `RefreshRecovered`, and by `SessionExpired`,
+ * `SignOut`, `SignIn` and `Register`, which end or replace the session the episode
+ * belonged to. A real end of the session is reported by `useSessionExpired`, not here.
+ *
+ * Core reports the episode only as events (there is no getter to read on mount), so a
+ * component that mounts after `RefreshFailing` starts idle. Call the hook in a component
+ * that lives for the whole app, near `PassflowProvider`.
+ *
+ * @example
+ * ```tsx
+ * function ConnectionNotice() {
+ *   const { isFailing } = useRefreshStatus();
+ *   return isFailing ? <Banner>Reconnecting...</Banner> : null;
+ * }
+ * ```
+ */
+export declare function useRefreshStatus(): UseRefreshStatusResult;
+//# sourceMappingURL=use-refresh-status.d.ts.map

package/dist/src/hooks/use-refresh-status.d.ts

@@ -0,0 +1,36 @@
+export interface UseRefreshStatusResult {
+    /**
+     * True inside a transient-failure episode: a token refresh failed for a reason that
+     * does not end the session (network, 5xx) and core is retrying. The session is kept.
+     */
+    isFailing: boolean;
+    /**
+     * Epoch ms of the episode's first transient failure (`RefreshFailing.since`).
+     */
+    since: number | null;
+    /**
+     * Epoch ms of the pending retry, when core knows it (`RefreshFailing.nextRetryAt`).
+     */
+    nextRetryAt: number | null;
+}
+/**
+ * Hook to show a "connection trouble" notice while token refresh is failing transiently.
+ *
+ * Set by `RefreshFailing`; cleared by `RefreshRecovered`, and by `SessionExpired`,
+ * `SignOut`, `SignIn` and `Register`, which end or replace the session the episode
+ * belonged to. A real end of the session is reported by `useSessionExpired`, not here.
+ *
+ * Core reports the episode only as events (there is no getter to read on mount), so a
+ * component that mounts after `RefreshFailing` starts idle. Call the hook in a component
+ * that lives for the whole app, near `PassflowProvider`.
+ *
+ * @example
+ * ```tsx
+ * function ConnectionNotice() {
+ *   const { isFailing } = useRefreshStatus();
+ *   return isFailing ? <Banner>Reconnecting...</Banner> : null;
+ * }
+ * ```
+ */
+export declare function useRefreshStatus(): UseRefreshStatusResult;
+//# sourceMappingURL=use-refresh-status.d.ts.map

package/dist/src/hooks/use-refresh-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-refresh-status.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-refresh-status.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAaD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,IAAI,sBAAsB,CA4BzD"}

package/dist/src/hooks/use-session-expired.d.cts

@@ -1,4 +1,4 @@
-export type SessionExpiredReason = 'refresh_failed' | 'token_invalid' | 'logged_out';
+import { type SessionExpiredReason } from '@passflow/core';
 export interface UseSessionExpiredOptions {
     /**
      * Called when the session expires.
@@ -23,9 +23,13 @@ export interface UseSessionExpiredResult {
 /**
  * Hook to handle session expiration events.
  *
- * When the SDK detects that the session is invalid (e.g., refresh token expired),
- * it emits a SessionExpired event. This hook allows you to react to that event
- * and redirect users to your login page.
+ * Core emits SessionExpired only when the session has really ended: the last
+ * auth strike (`'refresh_failed'`), no successor token pair in time
+ * (`'successor_timeout'`), or another user's tokens in storage
+ * (`'identity_changed'`). A transient refresh failure (network, 5xx) keeps the
+ * session and is reported as RefreshFailing / RefreshRecovered instead; see
+ * `useRefreshStatus`. This hook lets you react to the real end and redirect
+ * users to your login page.
  *
  * @example
  * ```tsx

package/dist/src/hooks/use-session-expired.d.ts

@@ -1,4 +1,4 @@
-export type SessionExpiredReason = 'refresh_failed' | 'token_invalid' | 'logged_out';
+import { type SessionExpiredReason } from '@passflow/core';
 export interface UseSessionExpiredOptions {
     /**
      * Called when the session expires.
@@ -23,9 +23,13 @@ export interface UseSessionExpiredResult {
 /**
  * Hook to handle session expiration events.
  *
- * When the SDK detects that the session is invalid (e.g., refresh token expired),
- * it emits a SessionExpired event. This hook allows you to react to that event
- * and redirect users to your login page.
+ * Core emits SessionExpired only when the session has really ended: the last
+ * auth strike (`'refresh_failed'`), no successor token pair in time
+ * (`'successor_timeout'`), or another user's tokens in storage
+ * (`'identity_changed'`). A transient refresh failure (network, 5xx) keeps the
+ * session and is reported as RefreshFailing / RefreshRecovered instead; see
+ * `useRefreshStatus`. This hook lets you react to the real end and redirect
+ * users to your login page.
  *
  * @example
  * ```tsx