@passflow/react 0.17.0 → 0.19.0

package/dist/src/components/flow/passflow/index.d.cts

@@ -1,9 +1,15 @@
-import type { SuccessAuthRedirect } from '../../../types/index.cjs';
+import type { FederatedLanding, SuccessAuthRedirect } from '../../../types/index.cjs';
 import { type FlowLocation, type FlowNavigate } from './flow-router.cjs';
 export type { FlowLocation as PassflowFlowLocation, FlowNavigate as PassflowFlowNavigate } from './flow-router.cjs';
 type PassflowBaseProps = {
     successAuthRedirect?: SuccessAuthRedirect;
     federatedDisplayMode?: 'modal' | 'redirect';
+    /**
+     * Where a federated redirect comes back. `app` (the default) keeps today's redirect URL. `login-page`, for a hosted
+     * login page on a PKCE app, comes back to this page, which exchanges the code and forwards the tokens to
+     * `successAuthRedirect`, else the app's default redirect.
+     */
+    federatedLanding?: FederatedLanding;
     error?: string;
     relyingPartyId?: string;
     /**

package/dist/src/components/flow/passflow/index.d.ts

@@ -1,9 +1,15 @@
-import type { SuccessAuthRedirect } from '../../../types/index.js';
+import type { FederatedLanding, SuccessAuthRedirect } from '../../../types/index.js';
 import { type FlowLocation, type FlowNavigate } from './flow-router.js';
 export type { FlowLocation as PassflowFlowLocation, FlowNavigate as PassflowFlowNavigate } from './flow-router.js';
 type PassflowBaseProps = {
     successAuthRedirect?: SuccessAuthRedirect;
     federatedDisplayMode?: 'modal' | 'redirect';
+    /**
+     * Where a federated redirect comes back. `app` (the default) keeps today's redirect URL. `login-page`, for a hosted
+     * login page on a PKCE app, comes back to this page, which exchanges the code and forwards the tokens to
+     * `successAuthRedirect`, else the app's default redirect.
+     */
+    federatedLanding?: FederatedLanding;
     error?: string;
     relyingPartyId?: string;
     /**

package/dist/src/components/flow/passflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/passflow/index.tsx"],"names":[],"mappings":"AAeA,OAAO,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAOL,KAAK,YAAY,EAEjB,KAAK,YAAY,EAOlB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,YAAY,IAAI,oBAAoB,EAAE,YAAY,IAAI,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEhH,KAAK,iBAAiB,GAAG;IACvB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAC3C,CACI;IACE,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,GACD;IACE;;;;;OAKG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;CACxB,CACJ,CAAC;AAuOJ,eAAO,MAAM,YAAY,8DAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/flow/passflow/index.tsx"],"names":[],"mappings":"AAeA,OAAO,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,EAOL,KAAK,YAAY,EAEjB,KAAK,YAAY,EAOlB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,YAAY,IAAI,oBAAoB,EAAE,YAAY,IAAI,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEhH,KAAK,iBAAiB,GAAG;IACvB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAC3C,CACI;IACE,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,GACD;IACE;;;;;OAKG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;CACxB,CACJ,CAAC;AA+QJ,eAAO,MAAM,YAAY,8DAA6C,CAAC"}

package/dist/src/components/form/reset-password/index.d.cts

@@ -3,6 +3,8 @@ import type { SuccessAuthRedirect } from '../../../types/index.cjs';
 type TResetPassword = {
     successAuthRedirect?: SuccessAuthRedirect;
     twoFactorVerifyPath?: string;
+    /** Where `Back to sign in` goes once the password is saved. */
+    signInPath?: string;
 };
 export declare const ResetPassword: FC<TResetPassword>;
 export {};

package/dist/src/components/form/reset-password/index.d.ts

@@ -3,6 +3,8 @@ import type { SuccessAuthRedirect } from '../../../types/index.js';
 type TResetPassword = {
     successAuthRedirect?: SuccessAuthRedirect;
     twoFactorVerifyPath?: string;
+    /** Where `Back to sign in` goes once the password is saved. */
+    signInPath?: string;
 };
 export declare const ResetPassword: FC<TResetPassword>;
 export {};

package/dist/src/components/form/reset-password/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/reset-password/index.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAehC,OAAO,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAUnD,KAAK,cAAc,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,cAAc,CAiJ5C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/reset-password/index.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAMhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,oBAAoB,CAAC;AAM5B,KAAK,cAAc,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAWF,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,cAAc,CA8G5C,CAAC"}

package/dist/src/components/form/signin/index.d.cts

@@ -1,9 +1,10 @@
 import type { FC } from 'react';
-import type { SuccessAuthRedirect } from '../../../types/index.cjs';
+import type { FederatedLanding, SuccessAuthRedirect } from '../../../types/index.cjs';
 export type TSignIn = {
     successAuthRedirect?: SuccessAuthRedirect;
     relyingPartyId?: string;
     federatedDisplayMode?: 'modal' | 'redirect';
+    federatedLanding?: FederatedLanding;
     signUpPath?: string;
     verifyOTPPath?: string;
     verifyMagicLinkPath?: string;

package/dist/src/components/form/signin/index.d.ts

@@ -1,9 +1,10 @@
 import type { FC } from 'react';
-import type { SuccessAuthRedirect } from '../../../types/index.js';
+import type { FederatedLanding, SuccessAuthRedirect } from '../../../types/index.js';
 export type TSignIn = {
     successAuthRedirect?: SuccessAuthRedirect;
     relyingPartyId?: string;
     federatedDisplayMode?: 'modal' | 'redirect';
+    federatedLanding?: FederatedLanding;
     signUpPath?: string;
     verifyOTPPath?: string;
     verifyMagicLinkPath?: string;

package/dist/src/components/form/signin/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signin/index.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAkDnD,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CAyLlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signin/index.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAchC,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAmDrE,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CA6OlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}

package/dist/src/components/form/signup/index.d.cts

@@ -1,9 +1,10 @@
 import type { FC } from 'react';
-import type { SuccessAuthRedirect } from '../../../types/index.cjs';
+import type { FederatedLanding, SuccessAuthRedirect } from '../../../types/index.cjs';
 export type TSignUp = {
     successAuthRedirect?: SuccessAuthRedirect;
     relyingPartyId?: string;
     federatedDisplayMode?: 'modal' | 'redirect';
+    federatedLanding?: FederatedLanding;
     signInPath?: string;
     verifyOTPPath?: string;
     verifyMagicLinkPath?: string;

package/dist/src/components/form/signup/index.d.ts

@@ -1,9 +1,10 @@
 import type { FC } from 'react';
-import type { SuccessAuthRedirect } from '../../../types/index.js';
+import type { FederatedLanding, SuccessAuthRedirect } from '../../../types/index.js';
 export type TSignUp = {
     successAuthRedirect?: SuccessAuthRedirect;
     relyingPartyId?: string;
     federatedDisplayMode?: 'modal' | 'redirect';
+    federatedLanding?: FederatedLanding;
     signInPath?: string;
     verifyOTPPath?: string;
     verifyMagicLinkPath?: string;

package/dist/src/components/form/signup/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signup/index.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAQhC,OAAO,KAAK,EAAiB,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAsDlE,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CAuKlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/signup/index.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAchC,OAAO,KAAK,EAAiB,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAuDpF,MAAM,MAAM,OAAO,GAAG;IACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC,OAAO,CA2NlC,CAAC;AAEF,eAAO,MAAM,MAAM,wDAAwC,CAAC"}

package/dist/src/components/form/verify-challenge/verify-challenge-approval.d.cts

@@ -0,0 +1,13 @@
+import { type FC } from 'react';
+type VerifyChallengeApprovalProps = {
+    challengeId: string | null;
+    otp: string | null;
+};
+/**
+ * The device that opened an emailed link on a row only another device can sign in with. Opening it writes nothing: the
+ * user reads the request, then approves with the code shown on the other device, or denies. Errors from these calls
+ * are plain and carry no code, but are not logged here anyway, because this screen holds the OTP and the match code.
+ */
+export declare const VerifyChallengeApproval: FC<VerifyChallengeApprovalProps>;
+export {};
+//# sourceMappingURL=verify-challenge-approval.d.ts.map

package/dist/src/components/form/verify-challenge/verify-challenge-approval.d.ts

@@ -0,0 +1,13 @@
+import { type FC } from 'react';
+type VerifyChallengeApprovalProps = {
+    challengeId: string | null;
+    otp: string | null;
+};
+/**
+ * The device that opened an emailed link on a row only another device can sign in with. Opening it writes nothing: the
+ * user reads the request, then approves with the code shown on the other device, or denies. Errors from these calls
+ * are plain and carry no code, but are not logged here anyway, because this screen holds the OTP and the match code.
+ */
+export declare const VerifyChallengeApproval: FC<VerifyChallengeApprovalProps>;
+export {};
+//# sourceMappingURL=verify-challenge-approval.d.ts.map

package/dist/src/components/form/verify-challenge/verify-challenge-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-challenge-approval.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/verify-challenge/verify-challenge-approval.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,EAAuB,MAAM,OAAO,CAAC;AAarD,KAAK,4BAA4B,GAAG;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB,CAAC;AAeF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,EAAE,CAAC,4BAA4B,CA2GpE,CAAC"}

package/dist/src/components/form/verify-challenge/verify-challenge-magic-link.d.cts

@@ -1,2 +1,7 @@
-export declare const VerifyChallengeMagicLink: () => import("react").JSX.Element;
+import { type FC } from 'react';
+type VerifyChallengeMagicLinkProps = {
+    signInPath?: string;
+};
+export declare const VerifyChallengeMagicLink: FC<VerifyChallengeMagicLinkProps>;
+export {};
 //# sourceMappingURL=verify-challenge-magic-link.d.ts.map

package/dist/src/components/form/verify-challenge/verify-challenge-magic-link.d.ts

@@ -1,2 +1,7 @@
-export declare const VerifyChallengeMagicLink: () => import("react").JSX.Element;
+import { type FC } from 'react';
+type VerifyChallengeMagicLinkProps = {
+    signInPath?: string;
+};
+export declare const VerifyChallengeMagicLink: FC<VerifyChallengeMagicLinkProps>;
+export {};
 //# sourceMappingURL=verify-challenge-magic-link.d.ts.map

package/dist/src/components/form/verify-challenge/verify-challenge-magic-link.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-challenge-magic-link.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/verify-challenge/verify-challenge-magic-link.tsx"],"names":[],"mappings":"AAKA,OAAO,oBAAoB,CAAC;AAQ5B,eAAO,MAAM,wBAAwB,mCAyDpC,CAAC"}
+{"version":3,"file":"verify-challenge-magic-link.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/verify-challenge/verify-challenge-magic-link.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,EAAgC,MAAM,OAAO,CAAC;AAK9D,OAAO,oBAAoB,CAAC;AAkM5B,KAAK,6BAA6B,GAAG;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,EAAE,CAAC,6BAA6B,CAuBtE,CAAC"}

package/dist/src/components/form/verify-challenge/verify-challenge-otp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-challenge-otp.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/verify-challenge/verify-challenge-otp.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAInD,OAAO,oBAAoB,CAAC;AAI5B,KAAK,mBAAmB,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAgBF,eAAO,MAAM,kBAAkB,EAAE,EAAE,CAAC,mBAAmB,CA4EtD,CAAC"}
+{"version":3,"file":"verify-challenge-otp.d.ts","sourceRoot":"","sources":["../../../../../src/components/form/verify-challenge/verify-challenge-otp.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAKnD,OAAO,oBAAoB,CAAC;AAI5B,KAAK,mBAAmB,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAgBF,eAAO,MAAM,kBAAkB,EAAE,EAAE,CAAC,mBAAmB,CAgFtD,CAAC"}

package/dist/src/components/provider/passflow-provider.d.cts

@@ -2,6 +2,8 @@ import { type PassflowConfig } from '@passflow/core';
 import React, { type FC, type ReactNode } from 'react';
 import { type UpgradeProviderProps } from './upgrade-provider.cjs';
 import { type NavigateFunction, type RouterType } from '../../context/index.cjs';
+import { readParentChallengeIdFromURL } from '../../utils/url-params.cjs';
+export { readParentChallengeIdFromURL };
 /**
  * The assurance-upgrade options a consumer may set on `PassflowProvider`.
  *
@@ -54,27 +56,17 @@ type PassflowProviderProps = PassflowConfig & {
  *
  *   - /auth/login                      — password login
  *   - /auth/register                   — password sign-up
- *   - /auth/passwordless/*             — OTP / magic-link start+complete
+ *   - /auth/passwordless/start|complete — OTP / magic-link; the status and
+ *                                        approval calls take no parent
  *   - /auth/passkey/*                  — passkey registration/auth
  *   - /auth/2fa/*                      — second-factor verify
+ *   - /auth/validate                   — emailed sign-up / sign-in code
  *   - /auth/federated/start            — federated start (callback is server)
  *   - /auth/session/exchange           — RFC 8693-style session exchange
  *                                        (ADR-2; activated on Leg 2 of
  *                                        OIDC two-step flows)
  */
 export declare const AUTH_ENDPOINT_PATTERN: RegExp;
-/**
- * Read `parent_challenge_id` from the current URL's query string.
- * Returns `undefined` when not present so callers can short-circuit
- * the OIDC interceptor on non-OIDC mounts.
- *
- * Lowercases only the parameter KEYS (not values) so the
- * KSUID-shaped value isn't corrupted on the way through. (URL params
- * are case-sensitive per RFC 3986; some Passflow URLs use mixed
- * case like `appId=...`. The lowercase-keys treatment mirrors what
- * the bundled login-app was doing pre-SDK-migration.)
- */
-export declare const readParentChallengeIdFromURL: () => string | undefined;
 /**
  * Has the OIDC interceptor already taken ownership of the post-login navigation?
  *
@@ -156,5 +148,4 @@ export type OIDCExchangeContextValue = {
 };
 export declare const OIDCExchangeContext: React.Context<OIDCExchangeContextValue>;
 export declare const PassflowProvider: FC<PassflowProviderProps>;
-export {};
 //# sourceMappingURL=passflow-provider.d.ts.map

package/dist/src/components/provider/passflow-provider.d.ts

@@ -2,6 +2,8 @@ import { type PassflowConfig } from '@passflow/core';
 import React, { type FC, type ReactNode } from 'react';
 import { type UpgradeProviderProps } from './upgrade-provider.js';
 import { type NavigateFunction, type RouterType } from '../../context/index.js';
+import { readParentChallengeIdFromURL } from '../../utils/url-params.js';
+export { readParentChallengeIdFromURL };
 /**
  * The assurance-upgrade options a consumer may set on `PassflowProvider`.
  *
@@ -54,27 +56,17 @@ type PassflowProviderProps = PassflowConfig & {
  *
  *   - /auth/login                      — password login
  *   - /auth/register                   — password sign-up
- *   - /auth/passwordless/*             — OTP / magic-link start+complete
+ *   - /auth/passwordless/start|complete — OTP / magic-link; the status and
+ *                                        approval calls take no parent
  *   - /auth/passkey/*                  — passkey registration/auth
  *   - /auth/2fa/*                      — second-factor verify
+ *   - /auth/validate                   — emailed sign-up / sign-in code
  *   - /auth/federated/start            — federated start (callback is server)
  *   - /auth/session/exchange           — RFC 8693-style session exchange
  *                                        (ADR-2; activated on Leg 2 of
  *                                        OIDC two-step flows)
  */
 export declare const AUTH_ENDPOINT_PATTERN: RegExp;
-/**
- * Read `parent_challenge_id` from the current URL's query string.
- * Returns `undefined` when not present so callers can short-circuit
- * the OIDC interceptor on non-OIDC mounts.
- *
- * Lowercases only the parameter KEYS (not values) so the
- * KSUID-shaped value isn't corrupted on the way through. (URL params
- * are case-sensitive per RFC 3986; some Passflow URLs use mixed
- * case like `appId=...`. The lowercase-keys treatment mirrors what
- * the bundled login-app was doing pre-SDK-migration.)
- */
-export declare const readParentChallengeIdFromURL: () => string | undefined;
 /**
  * Has the OIDC interceptor already taken ownership of the post-login navigation?
  *
@@ -156,5 +148,4 @@ export type OIDCExchangeContextValue = {
 };
 export declare const OIDCExchangeContext: React.Context<OIDCExchangeContextValue>;
 export declare const PassflowProvider: FC<PassflowProviderProps>;
-export {};
 //# sourceMappingURL=passflow-provider.d.ts.map

package/dist/src/components/provider/passflow-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passflow-provider.d.ts","sourceRoot":"","sources":["../../../../src/components/provider/passflow-provider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,cAAc,EAA2B,MAAM,gBAAgB,CAAC;AAC7G,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,SAAS,EAAiE,MAAM,OAAO,CAAC;AACtH,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGpG,OAAO,EAIL,KAAK,gBAAgB,EAIrB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAEnB,OAAO,oBAAoB,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAEpG,KAAK,qBAAqB,GAAG,cAAc,GAAG;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,sBAAsB,CAAC;IAC3C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,QACkE,CAAC;AAErG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,QAAO,MAAM,GAAG,SAQxD,CAAC;AAiCF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,uBAAuB,QAAO,OAA+B,CAAC;AAqK3E;;;GAGG;AACH,KAAK,mBAAmB,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;GAMG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAmLtF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B,CAAC;AAwCF,eAAO,MAAM,mBAAmB,yCAE9B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA0JtD,CAAC"}
+{"version":3,"file":"passflow-provider.d.ts","sourceRoot":"","sources":["../../../../src/components/provider/passflow-provider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EAKpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,SAAS,EAAiE,MAAM,OAAO,CAAC;AACtH,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGpG,OAAO,EAKL,KAAK,gBAAgB,EAIrB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,oBAAoB,CAAC;AAE5B,OAAO,EAAE,4BAA4B,EAAE,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAEpG,KAAK,qBAAqB,GAAG,cAAc,GAAG;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,sBAAsB,CAAC;IAC3C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,qBAAqB,QAC6F,CAAC;AAiChI;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,uBAAuB,QAAO,OAA+B,CAAC;AAqK3E;;;GAGG;AACH,KAAK,mBAAmB,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IAKvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;GAMG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,YAAY,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAmLtF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B,CAAC;AAwFF,eAAO,MAAM,mBAAmB,yCAE9B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAgKtD,CAAC"}

package/dist/src/components/ui/button/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/button/index.tsx"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,oBAAoB,EAEzB,KAAK,EAAE,EAGP,KAAK,iBAAiB,EAGvB,MAAM,OAAO,CAAC;AAEf,OAAO,oBAAoB,CAAC;AAE5B,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,EAAE,CAAC,WAAW,CASlC,CAAC;AAEF,KAAK,OAAO,GAAG,iBAAiB,GAC9B,oBAAoB,CAAC,iBAAiB,CAAC,GAAG;IACxC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjC;;OAEG;IACH,OAAO,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9G,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEJ,eAAO,MAAM,MAAM,EAAE,EAAE,CAAC,OAAO,CAkF9B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/button/index.tsx"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,oBAAoB,EAEzB,KAAK,EAAE,EAGP,KAAK,iBAAiB,EAGvB,MAAM,OAAO,CAAC;AAEf,OAAO,oBAAoB,CAAC;AAE5B,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,EAAE,CAAC,WAAW,CASlC,CAAC;AAEF,KAAK,OAAO,GAAG,iBAAiB,GAC9B,oBAAoB,CAAC,iBAAiB,CAAC,GAAG;IACxC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjC;;OAEG;IACH,OAAO,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9G,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEJ,eAAO,MAAM,MAAM,EAAE,EAAE,CAAC,OAAO,CA2F9B,CAAC"}

package/dist/src/components/ui/fields/field-otp.d.cts

@@ -1,4 +1,4 @@
-import type { FC } from 'react';
+import type { FC, Ref } from 'react';
 export type FieldOtpCharset = 'numeric' | 'alphanumeric';
 export type FieldOtpState = 'default' | 'error' | 'disabled';
 type FieldOtpBaseProps = {
@@ -19,6 +19,8 @@ type FieldOtpBaseProps = {
     /** Id of the element that describes it, such as the error message. */
     describedBy?: string;
     autoFocus?: boolean;
+    /** The one real `<input>`, so a screen can return focus to it after the field was locked. */
+    ref?: Ref<HTMLInputElement>;
 };
 /**
  * The code field is named either by a visible label it draws itself (`label`),

package/dist/src/components/ui/fields/field-otp.d.ts

@@ -1,4 +1,4 @@
-import type { FC } from 'react';
+import type { FC, Ref } from 'react';
 export type FieldOtpCharset = 'numeric' | 'alphanumeric';
 export type FieldOtpState = 'default' | 'error' | 'disabled';
 type FieldOtpBaseProps = {
@@ -19,6 +19,8 @@ type FieldOtpBaseProps = {
     /** Id of the element that describes it, such as the error message. */
     describedBy?: string;
     autoFocus?: boolean;
+    /** The one real `<input>`, so a screen can return focus to it after the field was locked. */
+    ref?: Ref<HTMLInputElement>;
 };
 /**
  * The code field is named either by a visible label it draws itself (`label`),

package/dist/src/components/ui/fields/field-otp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"field-otp.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/fields/field-otp.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,oBAAoB,CAAC;AAC5B,OAAO,iBAAiB,CAAC;AAEzB,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,cAAc,CAAC;AAEzD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAE7D,KAAK,iBAAiB,GAAG;IACvB,wEAAwE;IACxE,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,wDAAwD;IACxD,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,2FAA2F;IAC3F,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+FAA+F;IAC/F,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAC3C,CACI;IACE,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,GACD;IACE,oGAAoG;IACpG,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CACJ,CAAC;AAsBJ;;;;;;;;GAQG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAwDtC,CAAC"}
+{"version":3,"file":"field-otp.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/fields/field-otp.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAErC,OAAO,oBAAoB,CAAC;AAC5B,OAAO,iBAAiB,CAAC;AAEzB,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,cAAc,CAAC;AAEzD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAE7D,KAAK,iBAAiB,GAAG;IACvB,wEAAwE;IACxE,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,wDAAwD;IACxD,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,2FAA2F;IAC3F,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+FAA+F;IAC/F,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6FAA6F;IAC7F,GAAG,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAC3C,CACI;IACE,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,GACD;IACE,oGAAoG;IACpG,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CACJ,CAAC;AAsBJ;;;;;;;;GAQG;AACH,eAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CA0DtC,CAAC"}

package/dist/src/components/ui/login-screen/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/credentials.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAchC,OAAO,KAAK,EAAE,qBAAqB,EAA0B,MAAM,SAAS,CAAC;AAqB7E,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAsXtD,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/credentials.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAchC,OAAO,KAAK,EAAE,qBAAqB,EAA0B,MAAM,SAAS,CAAC;AAqB7E,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAiYtD,CAAC"}

package/dist/src/components/ui/login-screen/email-code.d.cts

@@ -0,0 +1,25 @@
+import type { FC } from 'react';
+import type { LoginEmailCodeResend, LoginEmailCodeState } from './types.cjs';
+type EmailCodeResendButtonProps = LoginEmailCodeResend & {
+    /** Locked by the step itself, while a verify is in flight. */
+    locked: boolean;
+};
+/**
+ * Resend, with its own cooldown. The countdown is drawn in the label but hidden
+ * from assistive technology, so the name stays `Resend code` and is not re-read
+ * every second. While it counts down, the button is `aria-disabled`: it keeps
+ * focus after a press instead of dropping the keyboard user.
+ *
+ * The step remounts it (`key`) when `restartKey` changes, which restarts the
+ * cooldown for a code the server sent again.
+ */
+export declare const EmailCodeResendButton: FC<EmailCodeResendButtonProps>;
+/**
+ * The emailed verification code step: the server's prompt names a row of code
+ * boxes; six digits submit by themselves. A failed verify or a resend clears the
+ * typed code. While a verify is in flight the code, Resend and the way back are
+ * locked, and focus returns to the code when it ends.
+ */
+export declare const LoginEmailCode: FC<LoginEmailCodeState>;
+export {};
+//# sourceMappingURL=email-code.d.ts.map

package/dist/src/components/ui/login-screen/email-code.d.ts

@@ -0,0 +1,25 @@
+import type { FC } from 'react';
+import type { LoginEmailCodeResend, LoginEmailCodeState } from './types.js';
+type EmailCodeResendButtonProps = LoginEmailCodeResend & {
+    /** Locked by the step itself, while a verify is in flight. */
+    locked: boolean;
+};
+/**
+ * Resend, with its own cooldown. The countdown is drawn in the label but hidden
+ * from assistive technology, so the name stays `Resend code` and is not re-read
+ * every second. While it counts down, the button is `aria-disabled`: it keeps
+ * focus after a press instead of dropping the keyboard user.
+ *
+ * The step remounts it (`key`) when `restartKey` changes, which restarts the
+ * cooldown for a code the server sent again.
+ */
+export declare const EmailCodeResendButton: FC<EmailCodeResendButtonProps>;
+/**
+ * The emailed verification code step: the server's prompt names a row of code
+ * boxes; six digits submit by themselves. A failed verify or a resend clears the
+ * typed code. While a verify is in flight the code, Resend and the way back are
+ * locked, and focus returns to the code when it ends.
+ */
+export declare const LoginEmailCode: FC<LoginEmailCodeState>;
+export {};
+//# sourceMappingURL=email-code.d.ts.map

package/dist/src/components/ui/login-screen/email-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-code.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/email-code.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,OAAO,CAAC;AAM3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AASzE,KAAK,0BAA0B,GAAG,oBAAoB,GAAG;IACvD,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,EAAE,EAAE,CAAC,0BAA0B,CA0ChE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,EAAE,CAAC,mBAAmB,CAgGlD,CAAC"}

package/dist/src/components/ui/login-screen/index.d.cts

@@ -1,4 +1,4 @@
 export { LoginScreen } from './login-screen.cjs';
 export { LoginAlert } from './shared.cjs';
-export type { LoginCodeEntryState, LoginConsentScope, LoginConsentState, LoginCredentialsState, LoginCredentialsValues, LoginDeviceApprovalState, LoginGeneralErrorState, LoginIdentityMethod, LoginInvitationState, LoginMethodConfig, LoginPasskeyProgressState, LoginScreenChrome, LoginScreenLink, LoginScreenNotice as LoginScreenNoticeProps, LoginScreenProps, LoginScreenState, LoginSecondFactorMethod, LoginSecondFactorState, LoginStatusState, } from './types.cjs';
+export type { LoginCodeEntryState, LoginConsentScope, LoginConsentState, LoginCredentialsState, LoginCredentialsValues, LoginDeviceApprovalState, LoginEmailCodeResend, LoginEmailCodeState, LoginGeneralErrorState, LoginIdentityMethod, LoginInvitationState, LoginMethodConfig, LoginNewPasswordState, LoginPasskeyProgressState, LoginPasswordlessApprovalFormState, LoginPasswordlessApprovalLoadingState, LoginPasswordlessApprovalState, LoginPasswordlessWaitingState, LoginScreenAction, LoginScreenChrome, LoginScreenLink, LoginScreenNotice as LoginScreenNoticeProps, LoginScreenProps, LoginScreenState, LoginSecondFactorMethod, LoginSecondFactorState, LoginStatusState, } from './types.cjs';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/components/ui/login-screen/index.d.ts

@@ -1,4 +1,4 @@
 export { LoginScreen } from './login-screen.js';
 export { LoginAlert } from './shared.js';
-export type { LoginCodeEntryState, LoginConsentScope, LoginConsentState, LoginCredentialsState, LoginCredentialsValues, LoginDeviceApprovalState, LoginGeneralErrorState, LoginIdentityMethod, LoginInvitationState, LoginMethodConfig, LoginPasskeyProgressState, LoginScreenChrome, LoginScreenLink, LoginScreenNotice as LoginScreenNoticeProps, LoginScreenProps, LoginScreenState, LoginSecondFactorMethod, LoginSecondFactorState, LoginStatusState, } from './types.js';
+export type { LoginCodeEntryState, LoginConsentScope, LoginConsentState, LoginCredentialsState, LoginCredentialsValues, LoginDeviceApprovalState, LoginEmailCodeResend, LoginEmailCodeState, LoginGeneralErrorState, LoginIdentityMethod, LoginInvitationState, LoginMethodConfig, LoginNewPasswordState, LoginPasskeyProgressState, LoginPasswordlessApprovalFormState, LoginPasswordlessApprovalLoadingState, LoginPasswordlessApprovalState, LoginPasswordlessWaitingState, LoginScreenAction, LoginScreenChrome, LoginScreenLink, LoginScreenNotice as LoginScreenNoticeProps, LoginScreenProps, LoginScreenState, LoginSecondFactorMethod, LoginSecondFactorState, LoginStatusState, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/components/ui/login-screen/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,IAAI,sBAAsB,EAC3C,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,qCAAqC,EACrC,8BAA8B,EAC9B,6BAA6B,EAC7B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,IAAI,sBAAsB,EAC3C,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,SAAS,CAAC"}

package/dist/src/components/ui/login-screen/login-screen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-screen.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/login-screen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAWhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CA6C5C,CAAC"}
+{"version":3,"file":"login-screen.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/login-screen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAehC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAuD5C,CAAC"}

package/dist/src/components/ui/login-screen/new-password.d.cts

@@ -0,0 +1,10 @@
+import type { FC } from 'react';
+import type { LoginNewPasswordState } from './types.cjs';
+/**
+ * Choosing a new password, checked against the app's password policy as it is
+ * typed: for a reset, or to finish an account started by email. The field keeps
+ * `id="password"`, and the button the `passflow-button-reset-password` class, so an
+ * app's custom CSS still finds them.
+ */
+export declare const LoginNewPassword: FC<LoginNewPasswordState>;
+//# sourceMappingURL=new-password.d.ts.map

package/dist/src/components/ui/login-screen/new-password.d.ts

@@ -0,0 +1,10 @@
+import type { FC } from 'react';
+import type { LoginNewPasswordState } from './types.js';
+/**
+ * Choosing a new password, checked against the app's password policy as it is
+ * typed: for a reset, or to finish an account started by email. The field keeps
+ * `id="password"`, and the button the `passflow-button-reset-password` class, so an
+ * app's custom CSS still finds them.
+ */
+export declare const LoginNewPassword: FC<LoginNewPasswordState>;
+//# sourceMappingURL=new-password.d.ts.map

package/dist/src/components/ui/login-screen/new-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"new-password.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/new-password.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAMhC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAOrD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAoFtD,CAAC"}

package/dist/src/components/ui/login-screen/passwordless-approval.d.cts

@@ -0,0 +1,4 @@
+import type { FC } from 'react';
+import type { LoginPasswordlessApprovalState } from './types.cjs';
+export declare const LoginPasswordlessApproval: FC<LoginPasswordlessApprovalState>;
+//# sourceMappingURL=passwordless-approval.d.ts.map

package/dist/src/components/ui/login-screen/passwordless-approval.d.ts

@@ -0,0 +1,4 @@
+import type { FC } from 'react';
+import type { LoginPasswordlessApprovalState } from './types.js';
+export declare const LoginPasswordlessApproval: FC<LoginPasswordlessApprovalState>;
+//# sourceMappingURL=passwordless-approval.d.ts.map

package/dist/src/components/ui/login-screen/passwordless-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordless-approval.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/passwordless-approval.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAa,MAAM,OAAO,CAAC;AAK3C,OAAO,KAAK,EAAsC,8BAA8B,EAAE,MAAM,SAAS,CAAC;AAgGlG,eAAO,MAAM,yBAAyB,EAAE,EAAE,CAAC,8BAA8B,CAStE,CAAC"}

package/dist/src/components/ui/login-screen/passwordless-waiting.d.cts

@@ -0,0 +1,4 @@
+import type { FC } from 'react';
+import type { LoginPasswordlessWaitingState } from './types.cjs';
+export declare const LoginPasswordlessWaiting: FC<LoginPasswordlessWaitingState>;
+//# sourceMappingURL=passwordless-waiting.d.ts.map

package/dist/src/components/ui/login-screen/passwordless-waiting.d.ts

@@ -0,0 +1,4 @@
+import type { FC } from 'react';
+import type { LoginPasswordlessWaitingState } from './types.js';
+export declare const LoginPasswordlessWaiting: FC<LoginPasswordlessWaitingState>;
+//# sourceMappingURL=passwordless-waiting.d.ts.map

package/dist/src/components/ui/login-screen/passwordless-waiting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordless-waiting.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/passwordless-waiting.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAGhC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AAE7D,eAAO,MAAM,wBAAwB,EAAE,EAAE,CAAC,6BAA6B,CAyBtE,CAAC"}

package/dist/src/components/ui/login-screen/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/status.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAIhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAgC5C,CAAC"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/status.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAIhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAyC5C,CAAC"}