@poly-x/react 0.1.0-alpha.14 → 0.1.0-alpha.16

package/dist/index.cjs

@@ -433,6 +433,9 @@ var BffSessionStore = class {
 			status: "signed-out",
 			reason: "signed-out"
 		});
+		if (options?.onSignOut) try {
+			await options.onSignOut();
+		} catch {}
 		window.location.assign(options?.redirectTo ?? "/");
 	};
 	/** Null by design: under BFF custody the token never reaches the browser (FR-SES-3). */
@@ -511,6 +514,45 @@ function Protected({ children, fallback = null, loading = null }) {
 	return isSignedIn ? children : fallback;
 }
 //#endregion
+//#region src/geolocation.ts
+/**
+* Capture the browser's precise location IF the user consented. Resolves to a consent-labelled
+* result and never throws/rejects.
+*/
+async function capturePreciseLocation(consented, opts = {}) {
+	if (!consented) return { consent: "denied" };
+	const geo = opts.geolocation ?? (typeof navigator !== "undefined" ? navigator.geolocation : void 0);
+	if (!geo) return { consent: "denied" };
+	const timeoutMs = opts.timeoutMs ?? 8e3;
+	return new Promise((resolve) => {
+		let settled = false;
+		const done = (result) => {
+			if (settled) return;
+			settled = true;
+			resolve(result);
+		};
+		const timer = setTimeout(() => done({ consent: "denied" }), timeoutMs + 500);
+		const finish = (result) => {
+			clearTimeout(timer);
+			done(result);
+		};
+		try {
+			geo.getCurrentPosition((position) => finish({
+				latitude: String(position.coords.latitude),
+				longitude: String(position.coords.longitude),
+				accuracyMeters: typeof position.coords.accuracy === "number" ? position.coords.accuracy : void 0,
+				consent: "granted"
+			}), () => finish({ consent: "denied" }), {
+				enableHighAccuracy: true,
+				timeout: timeoutMs,
+				maximumAge: 0
+			});
+		} catch {
+			finish({ consent: "denied" });
+		}
+	});
+}
+//#endregion
 //#region src/components/sign-in.tsx
 const DEFAULT_LABELS$3 = {
 	heading: "Sign in",
@@ -670,6 +712,7 @@ function SignIn(props) {
 		setSubmitting(true);
 		setError(null);
 		try {
+			const geo = props.captureLocation ? await capturePreciseLocation(true) : void 0;
 			const body = await (await fetch(action, {
 				method: "POST",
 				headers: { "content-type": "application/json" },
@@ -678,6 +721,7 @@ function SignIn(props) {
 					password,
 					organizationCode: props.organizationCode,
 					tenantId: options.tenantId,
+					...geo ? { geo } : {},
 					...options.passwords
 				})
 			})).json().catch(() => ({}));
@@ -1684,7 +1728,10 @@ function UserButtonRoot(props) {
 		key: "signOut",
 		label: labels.signOut,
 		labelIcon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExitIcon, {}),
-		onClick: () => void signOut({ redirectTo: props.afterSignOutUrl })
+		onClick: () => void signOut({
+			redirectTo: props.afterSignOutUrl,
+			onSignOut: props.onSignOut
+		})
 	});
 	if (props.showSignOutEverywhere) builtIns.set("signOutEverywhere", {
 		key: "signOutEverywhere",
@@ -1692,7 +1739,8 @@ function UserButtonRoot(props) {
 		labelIcon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExitIcon, {}),
 		onClick: () => void signOut({
 			scope: "everywhere",
-			redirectTo: props.afterSignOutUrl
+			redirectTo: props.afterSignOutUrl,
+			onSignOut: props.onSignOut
 		})
 	});
 	const items = resolveItems(props.children, builtIns);
@@ -1878,6 +1926,7 @@ exports.UserAvatar = UserAvatar;
 exports.UserButton = UserButton;
 exports.WebLocksLock = WebLocksLock;
 exports.WindowBrowserBridge = WindowBrowserBridge;
+exports.capturePreciseLocation = capturePreciseLocation;
 exports.createLoginController = createLoginController;
 exports.initialsFrom = initialsFrom;
 exports.resolveSide = resolveSide;

package/dist/index.d.cts

@@ -24,6 +24,13 @@ interface BffSignOutOptions {
   scope?: "device" | "everywhere";
   /** Where to land afterwards. Resolved here, client-side — the server takes no redirect target. */
   redirectTo?: string;
+  /**
+   * Run consumer cleanup after the session is revoked but BEFORE the post-sign-out
+   * redirect (the page is still alive at this point) — e.g. clear app cookies, reset
+   * local state, flush a store. Awaited; a thrown/rejected hook is swallowed so a
+   * failing callback can never trap the user in a signed-out-but-not-redirected state.
+   */
+  onSignOut?: () => void | Promise<void>;
 }
 //#endregion
 //#region src/auth-channel.d.ts
@@ -255,6 +262,13 @@ interface SignInProps {
    * "Forgot password?" link appears under the password field. Omit to hide it.
    */
   forgotPasswordUrl?: string;
+  /**
+   * v6 (FR-CNST): capture precise location for security/presence. When enabled, sign-in asks the
+   * browser for a position — the browser's own native permission prompt is the consent gate (no
+   * in-form checkbox), and it's remembered per-origin after the first choice. A block, denial, or
+   * timeout never blocks sign-in (coarse IP fallback). Off by default.
+   */
+  captureLocation?: boolean;
   /** Where to send the browser after success. Overrides the server's default redirect. */
   afterSignInPath?: string;
   /** Pre-scope the login to a single organization (skips org discovery). */
@@ -392,6 +406,49 @@ declare function AuthCallback({
   children
 }: AuthCallbackProps): ReactNode;
 //#endregion
+//#region src/geolocation.d.ts
+/**
+ * @poly-x/react/geolocation — browser precise-location capture for sign-in (v6, FR-CNST/FR-LOC).
+ *
+ * The consent-gated bridge to `navigator.geolocation`. It NEVER rejects: a decline, a browser
+ * permission denial, a missing API, or a timeout all resolve to `{ consent: "denied" }` with no
+ * coordinates, so the caller can always proceed — sign-in must never block on location (D52).
+ * The captured value is posted to the BFF, which forwards it to the platform on the token
+ * exchange; the platform stores precise only when consent is `granted`, else coarse (IP).
+ */
+/** Minimal shape of the browser Geolocation API we depend on (injectable for testing). */
+interface GeolocationLike {
+  getCurrentPosition(success: (position: {
+    coords: {
+      latitude: number;
+      longitude: number;
+      accuracy?: number;
+    };
+  }) => void, error?: (err: unknown) => void, options?: {
+    enableHighAccuracy?: boolean;
+    timeout?: number;
+    maximumAge?: number;
+  }): void;
+}
+/** The consent-labelled result of a capture attempt. Coordinates present only when granted. */
+interface CapturedGeo {
+  latitude?: string;
+  longitude?: string;
+  accuracyMeters?: number;
+  consent: "granted" | "denied";
+}
+interface CaptureOptions {
+  /** Max time to wait for a fix before giving up (coarse fallback). Default 8000ms. */
+  timeoutMs?: number;
+  /** Override the geolocation source (tests). Defaults to `navigator.geolocation`. */
+  geolocation?: GeolocationLike;
+}
+/**
+ * Capture the browser's precise location IF the user consented. Resolves to a consent-labelled
+ * result and never throws/rejects.
+ */
+declare function capturePreciseLocation(consented: boolean, opts?: CaptureOptions): Promise<CapturedGeo>;
+//#endregion
 //#region src/components/placement.d.ts
 /**
  * Collision-aware placement for the SDK's popovers.
@@ -463,6 +520,12 @@ interface UserButtonProps {
   showName?: boolean;
   /** Where to land after signing out. Default the app root. */
   afterSignOutUrl?: string;
+  /**
+   * Consumer cleanup run after the session is revoked but before the redirect —
+   * clear app cookies, reset local stores, etc. Awaited; errors are swallowed so a
+   * failing hook can't trap the user. Applies to both "Sign out" and "Sign out everywhere".
+   */
+  onSignOut?: () => void | Promise<void>;
   /**
    * Destination for the "Manage account" entry. Omitted entirely when unset — PolyX has no
    * hosted profile page, so the destination is the consumer's to own.
@@ -565,4 +628,4 @@ declare function UserAvatar({
 declare const PACKAGE_NAME = "@poly-x/react";
 declare const version = "0.0.0";
 //#endregion
-export { type Align, AuthCallback, type AuthCallbackMessage, type AuthCallbackProps, type AuthChannel, BroadcastAuthChannel, BroadcastChannelSessionChannel, type BrowserBridge, type CallbackParams, ForgotPassword, type ForgotPasswordLabels, type ForgotPasswordProps, type LoginController, type LoginControllerDeps, PACKAGE_NAME, PolyXContext, type PolyXContextValue, PolyXProvider, type PolyXProviderProps, PopupCancelledError, type PopupHandle, Protected, type ProtectedProps, ResetPassword, type ResetPasswordLabels, type ResetPasswordProps, SessionStoragePkceStore, type Side, type SideOption, SignIn, type SignInLabels, type SignInOptions, type SignInProps, type SignInVariant, type UseAuth, UserAvatar, type UserAvatarProps, UserButton, type UserButtonActionProps, type UserButtonLabels, type UserButtonLinkProps, type UserButtonProps, type UserButtonSlotProps, WebLocksLock, WindowBrowserBridge, createLoginController, initialsFrom, resolveSide, useAuth, useAuthCallback, useSession, useUser, version };
+export { type Align, AuthCallback, type AuthCallbackMessage, type AuthCallbackProps, type AuthChannel, BroadcastAuthChannel, BroadcastChannelSessionChannel, type BrowserBridge, type CallbackParams, type CaptureOptions, type CapturedGeo, ForgotPassword, type ForgotPasswordLabels, type ForgotPasswordProps, type GeolocationLike, type LoginController, type LoginControllerDeps, PACKAGE_NAME, PolyXContext, type PolyXContextValue, PolyXProvider, type PolyXProviderProps, PopupCancelledError, type PopupHandle, Protected, type ProtectedProps, ResetPassword, type ResetPasswordLabels, type ResetPasswordProps, SessionStoragePkceStore, type Side, type SideOption, SignIn, type SignInLabels, type SignInOptions, type SignInProps, type SignInVariant, type UseAuth, UserAvatar, type UserAvatarProps, UserButton, type UserButtonActionProps, type UserButtonLabels, type UserButtonLinkProps, type UserButtonProps, type UserButtonSlotProps, WebLocksLock, WindowBrowserBridge, capturePreciseLocation, createLoginController, initialsFrom, resolveSide, useAuth, useAuthCallback, useSession, useUser, version };

package/dist/index.d.mts

@@ -24,6 +24,13 @@ interface BffSignOutOptions {
   scope?: "device" | "everywhere";
   /** Where to land afterwards. Resolved here, client-side — the server takes no redirect target. */
   redirectTo?: string;
+  /**
+   * Run consumer cleanup after the session is revoked but BEFORE the post-sign-out
+   * redirect (the page is still alive at this point) — e.g. clear app cookies, reset
+   * local state, flush a store. Awaited; a thrown/rejected hook is swallowed so a
+   * failing callback can never trap the user in a signed-out-but-not-redirected state.
+   */
+  onSignOut?: () => void | Promise<void>;
 }
 //#endregion
 //#region src/auth-channel.d.ts
@@ -255,6 +262,13 @@ interface SignInProps {
    * "Forgot password?" link appears under the password field. Omit to hide it.
    */
   forgotPasswordUrl?: string;
+  /**
+   * v6 (FR-CNST): capture precise location for security/presence. When enabled, sign-in asks the
+   * browser for a position — the browser's own native permission prompt is the consent gate (no
+   * in-form checkbox), and it's remembered per-origin after the first choice. A block, denial, or
+   * timeout never blocks sign-in (coarse IP fallback). Off by default.
+   */
+  captureLocation?: boolean;
   /** Where to send the browser after success. Overrides the server's default redirect. */
   afterSignInPath?: string;
   /** Pre-scope the login to a single organization (skips org discovery). */
@@ -392,6 +406,49 @@ declare function AuthCallback({
   children
 }: AuthCallbackProps): ReactNode;
 //#endregion
+//#region src/geolocation.d.ts
+/**
+ * @poly-x/react/geolocation — browser precise-location capture for sign-in (v6, FR-CNST/FR-LOC).
+ *
+ * The consent-gated bridge to `navigator.geolocation`. It NEVER rejects: a decline, a browser
+ * permission denial, a missing API, or a timeout all resolve to `{ consent: "denied" }` with no
+ * coordinates, so the caller can always proceed — sign-in must never block on location (D52).
+ * The captured value is posted to the BFF, which forwards it to the platform on the token
+ * exchange; the platform stores precise only when consent is `granted`, else coarse (IP).
+ */
+/** Minimal shape of the browser Geolocation API we depend on (injectable for testing). */
+interface GeolocationLike {
+  getCurrentPosition(success: (position: {
+    coords: {
+      latitude: number;
+      longitude: number;
+      accuracy?: number;
+    };
+  }) => void, error?: (err: unknown) => void, options?: {
+    enableHighAccuracy?: boolean;
+    timeout?: number;
+    maximumAge?: number;
+  }): void;
+}
+/** The consent-labelled result of a capture attempt. Coordinates present only when granted. */
+interface CapturedGeo {
+  latitude?: string;
+  longitude?: string;
+  accuracyMeters?: number;
+  consent: "granted" | "denied";
+}
+interface CaptureOptions {
+  /** Max time to wait for a fix before giving up (coarse fallback). Default 8000ms. */
+  timeoutMs?: number;
+  /** Override the geolocation source (tests). Defaults to `navigator.geolocation`. */
+  geolocation?: GeolocationLike;
+}
+/**
+ * Capture the browser's precise location IF the user consented. Resolves to a consent-labelled
+ * result and never throws/rejects.
+ */
+declare function capturePreciseLocation(consented: boolean, opts?: CaptureOptions): Promise<CapturedGeo>;
+//#endregion
 //#region src/components/placement.d.ts
 /**
  * Collision-aware placement for the SDK's popovers.
@@ -463,6 +520,12 @@ interface UserButtonProps {
   showName?: boolean;
   /** Where to land after signing out. Default the app root. */
   afterSignOutUrl?: string;
+  /**
+   * Consumer cleanup run after the session is revoked but before the redirect —
+   * clear app cookies, reset local stores, etc. Awaited; errors are swallowed so a
+   * failing hook can't trap the user. Applies to both "Sign out" and "Sign out everywhere".
+   */
+  onSignOut?: () => void | Promise<void>;
   /**
    * Destination for the "Manage account" entry. Omitted entirely when unset — PolyX has no
    * hosted profile page, so the destination is the consumer's to own.
@@ -565,4 +628,4 @@ declare function UserAvatar({
 declare const PACKAGE_NAME = "@poly-x/react";
 declare const version = "0.0.0";
 //#endregion
-export { type Align, AuthCallback, type AuthCallbackMessage, type AuthCallbackProps, type AuthChannel, BroadcastAuthChannel, BroadcastChannelSessionChannel, type BrowserBridge, type CallbackParams, ForgotPassword, type ForgotPasswordLabels, type ForgotPasswordProps, type LoginController, type LoginControllerDeps, PACKAGE_NAME, PolyXContext, type PolyXContextValue, PolyXProvider, type PolyXProviderProps, PopupCancelledError, type PopupHandle, Protected, type ProtectedProps, ResetPassword, type ResetPasswordLabels, type ResetPasswordProps, SessionStoragePkceStore, type Side, type SideOption, SignIn, type SignInLabels, type SignInOptions, type SignInProps, type SignInVariant, type UseAuth, UserAvatar, type UserAvatarProps, UserButton, type UserButtonActionProps, type UserButtonLabels, type UserButtonLinkProps, type UserButtonProps, type UserButtonSlotProps, WebLocksLock, WindowBrowserBridge, createLoginController, initialsFrom, resolveSide, useAuth, useAuthCallback, useSession, useUser, version };
+export { type Align, AuthCallback, type AuthCallbackMessage, type AuthCallbackProps, type AuthChannel, BroadcastAuthChannel, BroadcastChannelSessionChannel, type BrowserBridge, type CallbackParams, type CaptureOptions, type CapturedGeo, ForgotPassword, type ForgotPasswordLabels, type ForgotPasswordProps, type GeolocationLike, type LoginController, type LoginControllerDeps, PACKAGE_NAME, PolyXContext, type PolyXContextValue, PolyXProvider, type PolyXProviderProps, PopupCancelledError, type PopupHandle, Protected, type ProtectedProps, ResetPassword, type ResetPasswordLabels, type ResetPasswordProps, SessionStoragePkceStore, type Side, type SideOption, SignIn, type SignInLabels, type SignInOptions, type SignInProps, type SignInVariant, type UseAuth, UserAvatar, type UserAvatarProps, UserButton, type UserButtonActionProps, type UserButtonLabels, type UserButtonLinkProps, type UserButtonProps, type UserButtonSlotProps, WebLocksLock, WindowBrowserBridge, capturePreciseLocation, createLoginController, initialsFrom, resolveSide, useAuth, useAuthCallback, useSession, useUser, version };

package/dist/index.mjs

@@ -432,6 +432,9 @@ var BffSessionStore = class {
 			status: "signed-out",
 			reason: "signed-out"
 		});
+		if (options?.onSignOut) try {
+			await options.onSignOut();
+		} catch {}
 		window.location.assign(options?.redirectTo ?? "/");
 	};
 	/** Null by design: under BFF custody the token never reaches the browser (FR-SES-3). */
@@ -510,6 +513,45 @@ function Protected({ children, fallback = null, loading = null }) {
 	return isSignedIn ? children : fallback;
 }
 //#endregion
+//#region src/geolocation.ts
+/**
+* Capture the browser's precise location IF the user consented. Resolves to a consent-labelled
+* result and never throws/rejects.
+*/
+async function capturePreciseLocation(consented, opts = {}) {
+	if (!consented) return { consent: "denied" };
+	const geo = opts.geolocation ?? (typeof navigator !== "undefined" ? navigator.geolocation : void 0);
+	if (!geo) return { consent: "denied" };
+	const timeoutMs = opts.timeoutMs ?? 8e3;
+	return new Promise((resolve) => {
+		let settled = false;
+		const done = (result) => {
+			if (settled) return;
+			settled = true;
+			resolve(result);
+		};
+		const timer = setTimeout(() => done({ consent: "denied" }), timeoutMs + 500);
+		const finish = (result) => {
+			clearTimeout(timer);
+			done(result);
+		};
+		try {
+			geo.getCurrentPosition((position) => finish({
+				latitude: String(position.coords.latitude),
+				longitude: String(position.coords.longitude),
+				accuracyMeters: typeof position.coords.accuracy === "number" ? position.coords.accuracy : void 0,
+				consent: "granted"
+			}), () => finish({ consent: "denied" }), {
+				enableHighAccuracy: true,
+				timeout: timeoutMs,
+				maximumAge: 0
+			});
+		} catch {
+			finish({ consent: "denied" });
+		}
+	});
+}
+//#endregion
 //#region src/components/sign-in.tsx
 const DEFAULT_LABELS$3 = {
 	heading: "Sign in",
@@ -669,6 +711,7 @@ function SignIn(props) {
 		setSubmitting(true);
 		setError(null);
 		try {
+			const geo = props.captureLocation ? await capturePreciseLocation(true) : void 0;
 			const body = await (await fetch(action, {
 				method: "POST",
 				headers: { "content-type": "application/json" },
@@ -677,6 +720,7 @@ function SignIn(props) {
 					password,
 					organizationCode: props.organizationCode,
 					tenantId: options.tenantId,
+					...geo ? { geo } : {},
 					...options.passwords
 				})
 			})).json().catch(() => ({}));
@@ -1683,7 +1727,10 @@ function UserButtonRoot(props) {
 		key: "signOut",
 		label: labels.signOut,
 		labelIcon: /* @__PURE__ */ jsx(ExitIcon, {}),
-		onClick: () => void signOut({ redirectTo: props.afterSignOutUrl })
+		onClick: () => void signOut({
+			redirectTo: props.afterSignOutUrl,
+			onSignOut: props.onSignOut
+		})
 	});
 	if (props.showSignOutEverywhere) builtIns.set("signOutEverywhere", {
 		key: "signOutEverywhere",
@@ -1691,7 +1738,8 @@ function UserButtonRoot(props) {
 		labelIcon: /* @__PURE__ */ jsx(ExitIcon, {}),
 		onClick: () => void signOut({
 			scope: "everywhere",
-			redirectTo: props.afterSignOutUrl
+			redirectTo: props.afterSignOutUrl,
+			onSignOut: props.onSignOut
 		})
 	});
 	const items = resolveItems(props.children, builtIns);
@@ -1861,4 +1909,4 @@ const UserButton = Object.assign(UserButtonRoot, {
 const PACKAGE_NAME = "@poly-x/react";
 const version = "0.0.0";
 //#endregion
-export { AuthCallback, BroadcastAuthChannel, BroadcastChannelSessionChannel, ForgotPassword, PACKAGE_NAME, PolyXContext, PolyXProvider, PopupCancelledError, Protected, ResetPassword, SessionStoragePkceStore, SignIn, UserAvatar, UserButton, WebLocksLock, WindowBrowserBridge, createLoginController, initialsFrom, resolveSide, useAuth, useAuthCallback, useSession, useUser, version };
+export { AuthCallback, BroadcastAuthChannel, BroadcastChannelSessionChannel, ForgotPassword, PACKAGE_NAME, PolyXContext, PolyXProvider, PopupCancelledError, Protected, ResetPassword, SessionStoragePkceStore, SignIn, UserAvatar, UserButton, WebLocksLock, WindowBrowserBridge, capturePreciseLocation, createLoginController, initialsFrom, resolveSide, useAuth, useAuthCallback, useSession, useUser, version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poly-x/react",
-  "version": "0.1.0-alpha.14",
+  "version": "0.1.0-alpha.16",
   "description": "PolyX SDK for React SPAs - provider, hooks, drop-in auth UI",
   "license": "MIT",
   "type": "module",
@@ -27,7 +27,7 @@
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.cts",
   "dependencies": {
-    "@poly-x/core": "0.1.0-alpha.14"
+    "@poly-x/core": "0.1.0-alpha.16"
   },
   "peerDependencies": {
     "react": ">=18",