@passflow/react 0.7.0 → 0.8.1

package/dist/src/components/ui/login-screen/passkey-progress.d.ts

@@ -0,0 +1,4 @@
+import { FC } from 'react';
+import { LoginPasskeyProgressState } from './types';
+export declare const LoginPasskeyProgress: FC<LoginPasskeyProgressState>;
+//# sourceMappingURL=passkey-progress.d.ts.map

package/dist/src/components/ui/login-screen/passkey-progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-progress.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/passkey-progress.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAIhC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEzD,eAAO,MAAM,oBAAoB,EAAE,EAAE,CAAC,yBAAyB,CA+B9D,CAAC"}

package/dist/src/components/ui/login-screen/shared.d.ts

@@ -0,0 +1,15 @@
+import { FC, PropsWithChildren } from 'react';
+import { LoginScreenNotice as LoginScreenNoticeProps } from './types';
+export declare const LoginAlert: FC<{
+    message?: string | null;
+    id?: string;
+}>;
+export declare const LoginDivider: FC<{
+    label: string;
+}>;
+export declare const LoginActionStack: FC<PropsWithChildren>;
+export declare const LoginProgress: FC<{
+    message: string;
+}>;
+export declare const LoginScreenNotice: FC<LoginScreenNoticeProps>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/src/components/ui/login-screen/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/shared.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,IAAI,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAE3E,eAAO,MAAM,UAAU,EAAE,EAAE,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CASnE,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAM9C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,iBAAiB,CAElD,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAKjD,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,EAAE,CAAC,sBAAsB,CAcxD,CAAC"}

package/dist/src/components/ui/login-screen/shell.d.ts

@@ -0,0 +1,13 @@
+import { FC, PropsWithChildren } from 'react';
+export type LoginScreenShellProps = PropsWithChildren & {
+    iconId?: string;
+    title?: string;
+    subtitle?: string;
+    className?: string;
+    customCss?: string;
+    customLogo?: string;
+    customLogoAlt?: string;
+    removeBranding?: boolean;
+};
+export declare const LoginScreenShell: FC<LoginScreenShellProps>;
+//# sourceMappingURL=shell.d.ts.map

package/dist/src/components/ui/login-screen/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/shell.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAGnD,OAAO,oBAAoB,CAAC;AAC5B,OAAO,oBAAoB,CAAC;AAE5B,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA2CtD,CAAC"}

package/dist/src/components/ui/login-screen/status.d.ts

@@ -0,0 +1,4 @@
+import { FC } from 'react';
+import { LoginStatusState } from './types';
+export declare const LoginStatus: FC<LoginStatusState>;
+//# sourceMappingURL=status.d.ts.map

package/dist/src/components/ui/login-screen/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/status.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAIhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAgC5C,CAAC"}

package/dist/src/components/ui/login-screen/types.d.ts

@@ -0,0 +1,153 @@
+import { AuthUiError, DefaultMethod } from '../../../types';
+import { PassflowPasswordPolicySettings, Providers } from '@passflow/core';
+export type LoginScreenChrome = {
+    title: string;
+    subtitle?: string;
+    variant?: 'sign-in';
+    customCss?: string;
+    customLogo?: string;
+    customLogoAlt?: string;
+    removeBranding?: boolean;
+};
+export type LoginCredentialsValues = {
+    method: DefaultMethod | null;
+    emailOrUsername: string;
+    phone: string;
+    password: string;
+};
+export type LoginScreenLink = {
+    prompt: string;
+    label: string;
+    to: string;
+    search?: string;
+};
+export type LoginScreenNotice = {
+    code?: string;
+    appName: string;
+    message: string;
+    codeTestId?: string;
+    appNameTestId?: string;
+};
+export type LoginIdentityMethod = {
+    id: DefaultMethod;
+    label: string;
+    selectLabel: string;
+    requiredMessage: string;
+    format?: 'email';
+    password: boolean;
+    passwordlessLabel?: string;
+};
+export type LoginMethodConfig = {
+    identities: LoginIdentityMethod[];
+    passkey: boolean;
+    providers: Providers[];
+};
+export type LoginCredentialsState = {
+    kind: 'credentials';
+    methods: LoginMethodConfig;
+    passwordPolicy: PassflowPasswordPolicySettings | null;
+    credentialPurpose?: 'sign-in' | 'sign-up';
+    initialMethod?: DefaultMethod | null;
+    forcePasskey?: boolean;
+    allowPasskeyToggle?: boolean;
+    disabled?: boolean;
+    busy?: boolean;
+    error?: AuthUiError | null;
+    primaryLabel?: string;
+    passwordlessLabelPrefix?: string;
+    passkeyLabel?: string;
+    testId?: string;
+    primaryTestId?: string;
+    notice?: LoginScreenNotice;
+    forgotPassword?: {
+        to: string;
+        getSearch?: (method: DefaultMethod | null) => string;
+    };
+    footer?: LoginScreenLink;
+    onPassword?: (values: LoginCredentialsValues) => void;
+    onPasswordless?: (values: LoginCredentialsValues) => void;
+    onPasskey?: () => void;
+    onProvider?: (provider: Providers) => void;
+    onReset?: () => void;
+};
+export type LoginCodeEntryState = {
+    kind: 'code-entry';
+    label?: string;
+    initialCode?: string;
+    error?: string | null;
+    busy?: boolean;
+    submitLabel?: string;
+    testId?: string;
+    onSubmit: (code: string) => void;
+};
+export type LoginPasskeyProgressState = {
+    kind: 'passkey-progress';
+    working: boolean;
+    message: string;
+    actionLabel?: string;
+    error?: string | null;
+    recoverable?: boolean;
+    retryLabel?: string;
+    testId?: string;
+    onAction?: () => void;
+    onRetry?: () => void;
+};
+export type LoginDeviceApprovalState = {
+    kind: 'device-approval';
+    appName: string;
+    code?: string;
+    identity?: string | null;
+    busy?: boolean;
+    error?: string | null;
+    actionLabel?: string;
+    busyLabel?: string;
+    testId?: string;
+    actionTestId?: string;
+    codeTestId?: string;
+    appNameTestId?: string;
+    onApprove: () => void;
+};
+export type LoginInvitationState = {
+    kind: 'invitation';
+    identity?: string | null;
+    inviterName?: string | null;
+    busy?: boolean;
+    error?: string | null;
+    acceptLabel?: string;
+    busyLabel?: string;
+    switchAccountLabel?: string;
+    createAccountLabel?: string;
+    testId?: string;
+    acceptTestId?: string;
+    onAccept: () => void;
+    onSwitchAccount: () => void;
+    onCreateAccount: () => void;
+};
+export type LoginGeneralErrorState = {
+    kind: 'general-error';
+    message?: string;
+    detail?: string;
+    actionLabel?: string;
+    testId?: string;
+    onAction: () => void;
+};
+export type LoginStatusState = {
+    kind: 'status';
+    tone: 'success' | 'error' | 'disabled';
+    message: string;
+    detail?: string;
+    recoverable?: boolean;
+    retryLabel?: string;
+    testId?: string;
+    onRetry?: () => void;
+    primaryAction?: {
+        label: string;
+        onClick: () => void;
+    };
+};
+export type LoginScreenState = LoginCredentialsState | LoginCodeEntryState | LoginPasskeyProgressState | LoginDeviceApprovalState | LoginInvitationState | LoginGeneralErrorState | LoginStatusState;
+export type LoginScreenProps = {
+    chrome: LoginScreenChrome;
+    state: LoginScreenState;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/components/ui/login-screen/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/login-screen/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAAE,8BAA8B,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,SAAS,EAAE,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,cAAc,EAAE,8BAA8B,GAAG,IAAI,CAAC;IACtD,iBAAiB,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,cAAc,CAAC,EAAE;QACf,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,KAAK,MAAM,CAAC;KACtD,CAAC;IACF,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACtD,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC1D,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,IAAI,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,aAAa,CAAC,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,IAAI,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB,qBAAqB,GACrB,mBAAmB,GACnB,yBAAyB,GACzB,wBAAwB,GACxB,oBAAoB,GACpB,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,gBAAgB,CAAC;CACzB,CAAC"}

package/dist/src/components/ui/switch/index.d.ts

@@ -2,6 +2,7 @@ import { ChangeEvent, FC } from 'react';
 type TSwitch = {
     label: string;
     checked: boolean;
+    disabled?: boolean;
     onChange: (event: ChangeEvent<HTMLInputElement>) => void;
 };
 export declare const Switch: FC<TSwitch>;

package/dist/src/components/ui/switch/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/switch/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAE7C,KAAK,OAAO,GAAG;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC;CAC1D,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,EAAE,CAAC,OAAO,CAM9B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/ui/switch/index.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAE7C,KAAK,OAAO,GAAG;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC;CAC1D,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,EAAE,CAAC,OAAO,CAa9B,CAAC"}

package/dist/src/hooks/index.d.ts

@@ -22,4 +22,5 @@ export { useTwoFactorChallenge, type UseTwoFactorChallengeReturn } from './use-t
 export { useTwoFactorMethods, type UseTwoFactorMethodsReturn } from './use-two-factor-methods';
 export { useSessionExpired, type UseSessionExpiredOptions, type UseSessionExpiredResult, type SessionExpiredReason, } from './use-session-expired';
 export { useCLIAuth, type UseCLIAuthProps, type CLIAuthState } from './use-cli-auth';
+export { useDeviceVerify, type UseDeviceVerifyProps, type DeviceVerifyStatus, type DeviceVerifyInfo, type DeviceUIMode, } from './use-device-verify';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,KAAK,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjH,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,KAAK,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,KAAK,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,KAAK,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE/F,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,KAAK,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjH,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,KAAK,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,KAAK,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,KAAK,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE/F,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAErF,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC"}

package/dist/src/hooks/use-app-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-app-settings.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-app-settings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAKtH,MAAM,MAAM,mBAAmB,GAAG,MAAM;IACtC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,8BAA8B,GAAG,IAAI,CAAC;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sBAAsB,EAAE,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,mBA8O5B,CAAC"}
+{"version":3,"file":"use-app-settings.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-app-settings.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAKtH,MAAM,MAAM,mBAAmB,GAAG,MAAM;IACtC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,8BAA8B,GAAG,IAAI,CAAC;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sBAAsB,EAAE,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,mBA4N5B,CAAC"}

package/dist/src/hooks/use-device-verify.d.ts

@@ -0,0 +1,79 @@
+import { DeviceError } from '../types/device-errors';
+/**
+ * The RFC 8628 verification flow, as a hook.
+ *
+ * ── The one rule the whole thing is built around ────────────────────────────
+ * Signing in and approving are TWO ACTS, and this hook keeps them two. Proving
+ * who you are (`/oidc/device/authenticate`) yields an approval ticket and
+ * NOTHING else — no tokens, no session. Approving (`/oidc/device/approve`) is
+ * what releases tokens to the waiting terminal, and it needs that ticket.
+ *
+ * The gap between them is not ceremony, it is RFC 8628 §5.4: an attacker can
+ * start a device grant and walk a victim into approving it (STORM-2372). They
+ * know the user_code — they created it — and the page is public, so they can
+ * read its CSRF token too. Neither can be the authority for approval. Only the
+ * ticket, held in this hook's memory and bound to the browser that actually
+ * authenticated, can be.
+ *
+ * So: never collapse authenticate+approve into one call "for convenience".
+ * Mode 1 puts both behind one TAP (see confirmWithPassword) — that is a UI
+ * affordance and is fine, because the human still looked at the code first.
+ * Mode 3 skips the tap entirely, which it earns by using an origin-bound
+ * passkey; see the note on confirmWithPasskey.
+ */
+/** The UI the server resolved for this challenge. A closed set — the client does not choose. */
+export type DeviceUIMode = 'consent' | 'full_login' | 'passkey';
+/** What GET /oidc/device/info hands the page to render itself. */
+export type DeviceVerifyInfo = {
+    mode: DeviceUIMode;
+    /** Absent for `passkey` mode, by design — see device_page.go. */
+    user_code?: string;
+    app_name: string;
+    csrf_token: string;
+    methods: {
+        password: boolean;
+        passkey: boolean;
+    };
+};
+export type DeviceVerifyStatus = 
+/** Asking the server what to render. */
+'loading'
+/** No code yet — show the entry form. */
+ | 'code_entry'
+/** Info in hand; awaiting the user. */
+ | 'ready'
+/** A call is in flight. */
+ | 'working'
+/** Identity proven, ticket held, not yet approved. */
+ | 'signed_in'
+/** Approved. The terminal has its tokens. */
+ | 'done'
+/** The mode is switched off. Terminal, and nothing approvable is rendered. */
+ | 'refused'
+/** Terminal failure — bad/expired code, dead app. */
+ | 'failed';
+export type UseDeviceVerifyProps = {
+    status: DeviceVerifyStatus;
+    info: DeviceVerifyInfo | null;
+    error: DeviceError | null;
+    /** The email that authenticated, once one has. */
+    email: string | null;
+    /** Whether an approval ticket is held. */
+    isAuthenticated: boolean;
+    /** Re-run the info lookup for a code typed by hand. */
+    submitCode: (code: string) => void;
+    /** Prove identity with a password. Does NOT approve. */
+    signInWithPassword: (email: string, password: string) => Promise<void>;
+    /** Prove identity with a passkey. Does NOT approve. */
+    signInWithPasskey: () => Promise<void>;
+    /** Approve, using the ticket already held. */
+    approve: () => Promise<void>;
+    /** One tap: prove identity if needed, then approve. */
+    confirmWithPassword: (email: string, password: string) => Promise<void>;
+    /** Passkey ceremony then approve, with no tap in between. */
+    confirmWithPasskey: () => Promise<void>;
+    /** Clear a recoverable error so the user can try again. */
+    clearError: () => void;
+};
+export declare const useDeviceVerify: () => UseDeviceVerifyProps;
+//# sourceMappingURL=use-device-verify.d.ts.map

package/dist/src/hooks/use-device-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-device-verify.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-device-verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gGAAgG;AAChG,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAEhE,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB;AAC5B,wCAAwC;AACtC,SAAS;AACX,yCAAyC;GACvC,YAAY;AACd,uCAAuC;GACrC,OAAO;AACT,2BAA2B;GACzB,SAAS;AACX,sDAAsD;GACpD,WAAW;AACb,6CAA6C;GAC3C,MAAM;AACR,8EAA8E;GAC5E,SAAS;AACX,qDAAqD;GACnD,QAAQ,CAAC;AAEb,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,kDAAkD;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0CAA0C;IAC1C,eAAe,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,wDAAwD;IACxD,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,uDAAuD;IACvD,iBAAiB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,uDAAuD;IACvD,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,6DAA6D;IAC7D,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,IAAI,CAAC;CACxB,CAAC;AA+BF,eAAO,MAAM,eAAe,QAAO,oBA0QlC,CAAC"}

package/dist/src/hooks/use-join-invite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-join-invite.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-join-invite.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAAG,MAAM;IACrC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,kBAwB3B,CAAC"}
+{"version":3,"file":"use-join-invite.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-join-invite.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,kBAAkB,GAAG,MAAM;IACrC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,kBA4B3B,CAAC"}

package/dist/src/hooks/use-passwordless-complete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-passwordless-complete.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-passwordless-complete.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yCAAyC,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAI5G,MAAM,MAAM,4BAA4B,GAAG,MAAM;IAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,yCAAyC,KAAK,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAC1G,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,4BAoCrC,CAAC"}
+{"version":3,"file":"use-passwordless-complete.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-passwordless-complete.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yCAAyC,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAI5G,MAAM,MAAM,4BAA4B,GAAG,MAAM;IAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,yCAAyC,KAAK,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAC1G,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,4BAuCrC,CAAC"}

package/dist/src/hooks/use-signin.d.ts

@@ -1,9 +1,10 @@
+import { AuthOperation, AuthUiError } from '../types';
 import { PassflowPasskeyAuthenticateStartPayload, PassflowPasswordlessResponse, PassflowPasswordlessSignInPayload, PassflowSignInPayload } from '@passflow/core';
 export type UseSignInProps = () => {
-    fetch: (payload: PassflowPasskeyAuthenticateStartPayload | PassflowSignInPayload | PassflowPasswordlessSignInPayload, type: 'passkey' | 'password' | 'passwordless') => Promise<boolean | string | PassflowPasswordlessResponse>;
+    fetch: (payload: PassflowPasskeyAuthenticateStartPayload | PassflowSignInPayload | PassflowPasswordlessSignInPayload, type: AuthOperation) => Promise<boolean | string | PassflowPasswordlessResponse>;
     isLoading: boolean;
     isError: boolean;
-    error: string;
+    error: AuthUiError | null;
     reset: () => void;
 };
 export declare const useSignIn: UseSignInProps;

package/dist/src/hooks/use-signin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-signin.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-signin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uCAAuC,EACvC,4BAA4B,EAC5B,iCAAiC,EACjC,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,MAAM,cAAc,GAAG,MAAM;IACjC,KAAK,EAAE,CACL,OAAO,EAAE,uCAAuC,GAAG,qBAAqB,GAAG,iCAAiC,EAC5G,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,cAAc,KAC1C,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,4BAA4B,CAAC,CAAC;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,cA0CvB,CAAC"}
+{"version":3,"file":"use-signin.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-signin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EACV,uCAAuC,EACvC,4BAA4B,EAC5B,iCAAiC,EACjC,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,MAAM,cAAc,GAAG,MAAM;IACjC,KAAK,EAAE,CACL,OAAO,EAAE,uCAAuC,GAAG,qBAAqB,GAAG,iCAAiC,EAC5G,IAAI,EAAE,aAAa,KAChB,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,4BAA4B,CAAC,CAAC;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,cA4CvB,CAAC"}

package/dist/src/hooks/use-signup.d.ts

@@ -1,9 +1,10 @@
+import { AuthOperation, AuthUiError } from '../types';
 import { PassflowPasskeyRegisterStartPayload, PassflowPasswordlessResponse, PassflowPasswordlessSignInPayload, PassflowSignUpPayload } from '@passflow/core';
 export type UseSignUpProps = () => {
-    fetch: (payload: PassflowPasskeyRegisterStartPayload | PassflowSignUpPayload | PassflowPasswordlessSignInPayload, type: 'passkey' | 'password' | 'passwordless') => Promise<boolean | string | PassflowPasswordlessResponse>;
+    fetch: (payload: PassflowPasskeyRegisterStartPayload | PassflowSignUpPayload | PassflowPasswordlessSignInPayload, type: AuthOperation) => Promise<boolean | string | PassflowPasswordlessResponse>;
     isLoading: boolean;
     isError: boolean;
-    error: string;
+    error: AuthUiError | null;
     reset: () => void;
 };
 export declare const useSignUp: UseSignUpProps;

package/dist/src/hooks/use-signup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-signup.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-signup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mCAAmC,EACnC,4BAA4B,EAC5B,iCAAiC,EACjC,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,MAAM,cAAc,GAAG,MAAM;IACjC,KAAK,EAAE,CACL,OAAO,EAAE,mCAAmC,GAAG,qBAAqB,GAAG,iCAAiC,EACxG,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,cAAc,KAC1C,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,4BAA4B,CAAC,CAAC;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,cA6CvB,CAAC"}
+{"version":3,"file":"use-signup.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-signup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EACV,mCAAmC,EACnC,4BAA4B,EAC5B,iCAAiC,EACjC,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,MAAM,cAAc,GAAG,MAAM;IACjC,KAAK,EAAE,CACL,OAAO,EAAE,mCAAmC,GAAG,qBAAqB,GAAG,iCAAiC,EACxG,IAAI,EAAE,aAAa,KAChB,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,4BAA4B,CAAC,CAAC;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,cA+CvB,CAAC"}

package/dist/src/types/auth-errors.d.ts

@@ -0,0 +1,8 @@
+export type AuthErrorScope = 'form' | 'identity' | 'password' | 'credentials';
+export type AuthUiError = {
+    message: string;
+    scope: AuthErrorScope;
+};
+export type AuthOperation = 'password' | 'passwordless' | 'passkey';
+export type AuthFlow = 'sign-in' | 'sign-up';
+//# sourceMappingURL=auth-errors.d.ts.map

package/dist/src/types/auth-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-errors.d.ts","sourceRoot":"","sources":["../../../src/types/auth-errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAE9E,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC"}

package/dist/src/types/device-errors.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Error taxonomy for the RFC 8628 device verification flow.
+ *
+ * ── The rule this file exists to enforce ────────────────────────────────────
+ * The person on this screen has just scanned a QR code with their phone and is
+ * deciding whether to hand a terminal a token. They are not debugging us. So:
+ *
+ *   the message a user reads is NEVER a string we did not write for them.
+ *
+ * Not the browser's. Not the server's `error_description`. Not an exception's
+ * `.message`. Those are written for operators and they leak — the screen this
+ * taxonomy replaced did `err.message ?? 'Something went wrong'` and duly showed
+ * a real user:
+ *
+ *     "Resident credentials or empty 'allowCredentials' lists are not
+ *      supported at this time."
+ *
+ * — a Chrome/CDP internal, about a spec feature, in the middle of a sign-in.
+ *
+ * The technical string is not thrown away; it is just demoted. It rides along
+ * in `detail`, which the UI logs to the console and may offer behind a
+ * "details" affordance, and which the server also has in its own logs. Diagnosis
+ * keeps everything. The user keeps their sentence.
+ */
+/**
+ * The closed set of things that can go wrong on the verification page, at the
+ * granularity a USER can act on.
+ *
+ * Deliberately coarser than the causes. Several distinct WebAuthn failures
+ * collapse into `passkey_failed` because the remedy is identical ("try again or
+ * use another method") and because the browser itself refuses to distinguish
+ * them — Chrome reports "you cancelled", "you timed out" and "there is no
+ * credential here" all as NotAllowedError, on purpose, so that a page cannot use
+ * the ceremony as an oracle for which accounts exist on a device. Inventing a
+ * finer story for the user than the browser told us would mean guessing.
+ */
+export type DeviceErrorType = 
+/** No user_code supplied yet — show the code entry form, not an error. */
+'code_required'
+/** The code is wrong, malformed, or names nothing. */
+ | 'code_invalid'
+/** The code was real and has expired. */
+ | 'code_expired'
+/** This request was already declined. */
+ | 'code_declined'
+/** Already approved — the terminal already has what it needs. */
+ | 'code_already_approved'
+/** RFC 8628 §5.1 budget spent. */
+ | 'too_many_attempts'
+/** The app owner has this sign-in mode switched off. Renders the refusal. */
+ | 'mode_disabled'
+/** The requesting app is gone, or its sign-in method is not configured. */
+ | 'app_unavailable'
+/** Wrong email or password. */
+ | 'bad_credentials'
+/** The form was submitted empty. */
+ | 'missing_credentials'
+/** The account is blocked. */
+ | 'account_blocked'
+/** The passkey ceremony did not complete: cancelled, timed out, or none found. */
+ | 'passkey_failed'
+/** This browser/authenticator cannot do this passkey sign-in at all. */
+ | 'passkey_unsupported'
+/** We could not reach the server. */
+ | 'offline'
+/** Anything else — including every technical failure the user cannot act on. */
+ | 'generic';
+/**
+ * A classified failure: one sentence for the human, everything else for us.
+ */
+export type DeviceError = {
+    type: DeviceErrorType;
+    /**
+     * Plain, human, safe to render. Written by us, for this screen. Never
+     * interpolated from an exception or a server description.
+     */
+    message: string;
+    /**
+     * The technical string — an exception message, a server `error_description`,
+     * a DOMException name. For the console, a collapsed details affordance, and
+     * bug reports. MUST NOT be shown as the primary message.
+     */
+    detail?: string;
+    /**
+     * Whether trying again on this page could plausibly work. Drives whether a
+     * retry control is offered: `false` means the page must not invite the user
+     * to bang on it (an expired code will never become unexpired here).
+     */
+    isRecoverable: boolean;
+};
+//# sourceMappingURL=device-errors.d.ts.map

package/dist/src/types/device-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-errors.d.ts","sourceRoot":"","sources":["../../../src/types/device-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe;AACzB,0EAA0E;AACxE,eAAe;AACjB,sDAAsD;GACpD,cAAc;AAChB,yCAAyC;GACvC,cAAc;AAChB,yCAAyC;GACvC,eAAe;AACjB,iEAAiE;GAC/D,uBAAuB;AACzB,kCAAkC;GAChC,mBAAmB;AACrB,6EAA6E;GAC3E,eAAe;AACjB,2EAA2E;GACzE,iBAAiB;AACnB,+BAA+B;GAC7B,iBAAiB;AACnB,oCAAoC;GAClC,qBAAqB;AACvB,8BAA8B;GAC5B,iBAAiB;AACnB,kFAAkF;GAChF,gBAAgB;AAClB,wEAAwE;GACtE,qBAAqB;AACvB,qCAAqC;GACnC,SAAS;AACX,gFAAgF;GAC9E,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,eAAe,CAAC;IACtB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC"}

package/dist/src/types/index.d.ts

@@ -3,6 +3,8 @@ export type DefaultMethod = 'email_or_username' | 'phone';
 export type PreferChallenge = 'passkey' | 'password' | 'otp' | 'magic_link';
 export type SuccessAuthRedirect = string;
 export type { TwoFactorErrorType, TwoFactorError } from './two-factor-errors';
+export type { DeviceErrorType, DeviceError } from './device-errors';
+export type { AuthErrorScope, AuthFlow, AuthOperation, AuthUiError } from './auth-errors';
 export type { TwoFactorMethod, TwoFactorChallengeResponse, RegisteredTwoFactorMethod, TwoFactorVerifyRequestV2, TwoFactorVerifyResponseV2, } from '@passflow/core';
 export interface UseTwoFactorChallengeReturn {
     challenge: import('@passflow/core').TwoFactorChallengeResponse | null;

package/dist/src/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,OAAO,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,CAAC;AAE5E,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEzC,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG9E,YAAY,EACV,eAAe,EACf,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,OAAO,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,cAAc,EAAE,OAAO,gBAAgB,EAAE,eAAe,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC7D,iBAAiB,EAAE,OAAO,gBAAgB,EAAE,yBAAyB,EAAE,CAAC;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,OAAO,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,CAAC;AAE5E,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEzC,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC9E,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAG1F,YAAY,EACV,eAAe,EACf,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,OAAO,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACtE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,cAAc,EAAE,OAAO,gBAAgB,EAAE,eAAe,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,gBAAgB,EAAE,eAAe,EAAE,CAAC;IAC7D,iBAAiB,EAAE,OAAO,gBAAgB,EAAE,yBAAyB,EAAE,CAAC;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD"}

package/dist/src/utils/auth-error.d.ts

@@ -0,0 +1,7 @@
+import { AuthFlow, AuthOperation, AuthUiError } from '../types';
+export declare const authRedirectErrorMessage = "We couldn't continue this authentication request. Return to the app and try again.";
+export declare const verificationLinkErrorMessage = "This verification link is invalid or incomplete. Request a new link or code and try again.";
+export declare const invitationLinkErrorMessage = "This invitation link is invalid or has expired.";
+export declare const verificationRequestErrorMessage = "This verification request is no longer available. Start again to request a new link or code.";
+export declare const authErrorFor: (flow: AuthFlow, operation: AuthOperation) => AuthUiError;
+//# sourceMappingURL=auth-error.d.ts.map

package/dist/src/utils/auth-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-error.d.ts","sourceRoot":"","sources":["../../../src/utils/auth-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAiCpE,eAAO,MAAM,wBAAwB,uFAAuF,CAAC;AAE7H,eAAO,MAAM,4BAA4B,+FACqD,CAAC;AAE/F,eAAO,MAAM,0BAA0B,oDAAoD,CAAC;AAE5F,eAAO,MAAM,+BAA+B,iGACoD,CAAC;AAEjG,eAAO,MAAM,YAAY,GAAI,MAAM,QAAQ,EAAE,WAAW,aAAa,KAAG,WAA+C,CAAC"}

package/dist/src/utils/classify-device-error.d.ts

@@ -0,0 +1,35 @@
+import { DeviceError, DeviceErrorType } from '../types/device-errors';
+/**
+ * An error carrying a server-supplied reason code. Thrown by the device API
+ * client so the classifier can map precisely rather than sniff strings.
+ */
+export declare class DeviceApiError extends Error {
+    /** Stable machine reason from the server. */
+    readonly reason: string;
+    /** The OAuth2 error code (`invalid_request`, `unauthorized_client`, ...). */
+    readonly code: string;
+    /** HTTP status. */
+    readonly status: number;
+    constructor(params: {
+        reason: string;
+        code: string;
+        status: number;
+        description: string;
+    });
+}
+/**
+ * Classify any failure from the device verification flow.
+ *
+ * Order matters: the server's own reason wins when we have one (it knows more
+ * than we can infer), then WebAuthn's message text, then WebAuthn's name, then
+ * the network, then a safe default. Every path ends in copy from
+ * DEVICE_ERROR_COPY — there is deliberately no branch that forwards a raw
+ * string to `message`.
+ */
+export declare function classifyDeviceError(err: unknown): DeviceError;
+/**
+ * The copy for a type, without an error to classify. For states that are known
+ * up front rather than thrown — e.g. a browser with no WebAuthn at all.
+ */
+export declare function deviceErrorOfType(type: DeviceErrorType, detail?: string): DeviceError;
+//# sourceMappingURL=classify-device-error.d.ts.map

package/dist/src/utils/classify-device-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-device-error.d.ts","sourceRoot":"","sources":["../../../src/utils/classify-device-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAyI1E;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;CAS1F;AAYD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAmC7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAErF"}

package/dist/src/utils/index.d.ts

@@ -9,5 +9,8 @@ export { getIdentityLabel, getPasswordlessData, getValidationErrorsLabel } from
 export { useUrlParams } from './url-params';
 export { getUrlErrors } from './get-url-errors';
 export { classifyTwoFactorError, getUserFriendlyErrorMessage } from './classify-two-factor-error';
+export { classifyDeviceError, deviceErrorOfType, DeviceApiError } from './classify-device-error';
+export { authErrorFor, authRedirectErrorMessage, invitationLinkErrorMessage, verificationLinkErrorMessage, verificationRequestErrorMessage, } from './auth-error';
+export { getInvitationAuthChrome, type InvitationAuthIntent } from './invitation-auth-chrome';
 export { TwoFactorLoopPrevention } from './two-factor-loop-prevention';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9E,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9E,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/src/utils/invitation-auth-chrome.d.ts

@@ -0,0 +1,8 @@
+export type InvitationAuthIntent = 'sign-in' | 'sign-up';
+type InvitationAuthChrome = {
+    title: string;
+    subtitle: string;
+};
+export declare const getInvitationAuthChrome: (inviteToken: string | null | undefined, intent: InvitationAuthIntent) => InvitationAuthChrome | null;
+export {};
+//# sourceMappingURL=invitation-auth-chrome.d.ts.map

package/dist/src/utils/invitation-auth-chrome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-auth-chrome.d.ts","sourceRoot":"","sources":["../../../src/utils/invitation-auth-chrome.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzD,KAAK,oBAAoB,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAaF,eAAO,MAAM,uBAAuB,GAClC,aAAa,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,QAAQ,oBAAoB,KAC3B,oBAAoB,GAAG,IAczB,CAAC"}

package/dist/src/utils/login-theme.d.ts

@@ -0,0 +1,8 @@
+import { LoginWebAppStyle } from '@passflow/core';
+export type CompatibleLoginWebAppStyle = Partial<LoginWebAppStyle> & {
+    /** Legacy field used by themes created before text_color was introduced. */
+    content_color?: string;
+};
+export declare const getLoginThemeCssVariables: (style: CompatibleLoginWebAppStyle) => Record<string, string | null>;
+export declare const applyLoginThemeStyles: (root: HTMLElement, style: CompatibleLoginWebAppStyle) => void;
+//# sourceMappingURL=login-theme.d.ts.map