@stapel/auth-react 1.0.0

package/dist/headless/Passkey.js

@@ -0,0 +1,51 @@
+import { useMemo } from "react";
+import { createPasskeyLoginFlow, createPasskeyRegistrationFlow, } from "../flows/passkeyFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi, useAuthSession } from "../model/context.js";
+/** Headless passkey registration (auth-sa.md §17, requires auth). */
+export function PasskeyRegistration(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const { webauthnCreate } = props;
+    const flow = useMemo(() => createPasskeyRegistrationFlow({
+        api,
+        analytics,
+        ...(webauthnCreate !== undefined ? { webauthnCreate } : {}),
+    }), [api, analytics, webauthnCreate]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        begin: (deviceName) => {
+            void flow.begin(deviceName);
+        },
+        submitCredential: (credential) => {
+            void flow.submitCredential(credential);
+        },
+        reset: flow.reset,
+    });
+}
+/** Headless passkey login (auth-sa.md §17, no auth required). */
+export function PasskeyLogin(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const session = useAuthSession();
+    const { webauthnGet } = props;
+    const flow = useMemo(() => createPasskeyLoginFlow({
+        api,
+        analytics,
+        onAuthenticated: (r) => session.adopt(r),
+        ...(webauthnGet !== undefined ? { webauthnGet } : {}),
+    }), [api, analytics, session, webauthnGet]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        begin: (email) => {
+            void flow.begin(email);
+        },
+        submitAssertion: (credential) => {
+            void flow.submitAssertion(credential);
+        },
+        reset: flow.reset,
+    });
+}
+//# sourceMappingURL=Passkey.js.map

package/dist/headless/Passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Passkey.js","sourceRoot":"","sources":["../../src/headless/Passkey.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAkBnF,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,KAGnC;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,6BAA6B,CAAC;QAC5B,GAAG;QACH,SAAS;QACT,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,EACJ,CAAC,GAAG,EAAE,SAAS,EAAE,cAAc,CAAC,CACjC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE;YACpB,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QACD,gBAAgB,EAAE,CAAC,UAAU,EAAE,EAAE;YAC/B,KAAK,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AASD,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,KAG5B;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,sBAAsB,CAAC;QACrB,GAAG;QACH,SAAS;QACT,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,EACJ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CACvC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE;YAC9B,KAAK,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/PasswordChange.d.ts

@@ -0,0 +1,20 @@
+import type { ReactNode } from "react";
+import type { OtpChannel } from "../api/types.js";
+import type { PasswordChangeState } from "../flows/passwordChangeFlow.js";
+export interface PasswordChangeBag {
+    readonly state: PasswordChangeState;
+    changeWithPassword(oldPassword: string, newPassword: string): void;
+    requestOtp(method: OtpChannel): void;
+    submitOtp(code: string, newPassword: string): void;
+    reset(): void;
+}
+/**
+ * Headless authenticated password change (auth-sa.md §4). Pair with
+ * `usePasswordMethods()` to decide which tabs to render; call
+ * `changeWithPassword` for the old-password tab or `requestOtp`/`submitOtp`
+ * for the email/SMS tabs.
+ */
+export declare function PasswordChange(props: {
+    children: (bag: PasswordChangeBag) => ReactNode;
+}): ReactNode;
+//# sourceMappingURL=PasswordChange.d.ts.map

package/dist/headless/PasswordChange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordChange.d.ts","sourceRoot":"","sources":["../../src/headless/PasswordChange.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAI1E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACnE,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE;IACpC,QAAQ,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,SAAS,CAAC;CACjD,GAAG,SAAS,CAqBZ"}

package/dist/headless/PasswordChange.js

@@ -0,0 +1,30 @@
+import { useMemo } from "react";
+import { createPasswordChangeFlow } from "../flows/passwordChangeFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi } from "../model/context.js";
+/**
+ * Headless authenticated password change (auth-sa.md §4). Pair with
+ * `usePasswordMethods()` to decide which tabs to render; call
+ * `changeWithPassword` for the old-password tab or `requestOtp`/`submitOtp`
+ * for the email/SMS tabs.
+ */
+export function PasswordChange(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const flow = useMemo(() => createPasswordChangeFlow({ api, analytics }), [api, analytics]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        changeWithPassword: (oldPassword, newPassword) => {
+            void flow.changeWithPassword(oldPassword, newPassword);
+        },
+        requestOtp: (method) => {
+            void flow.requestOtp(method);
+        },
+        submitOtp: (code, newPassword) => {
+            void flow.submitOtp(code, newPassword);
+        },
+        reset: flow.reset,
+    });
+}
+//# sourceMappingURL=PasswordChange.js.map

package/dist/headless/PasswordChange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordChange.js","sourceRoot":"","sources":["../../src/headless/PasswordChange.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAUnE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAE9B;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAClD,CAAC,GAAG,EAAE,SAAS,CAAC,CACjB,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,kBAAkB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE;YAC/C,KAAK,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QACD,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YACrB,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE;YAC/B,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/PasswordLogin.d.ts

@@ -0,0 +1,17 @@
+import type { ReactNode } from "react";
+import type { PasswordLoginState, TotpProof } from "../flows/passwordLoginFlow.js";
+export interface PasswordLoginBag {
+    readonly state: PasswordLoginState;
+    login(loginId: string, password: string): void;
+    submitTotp(proof: TotpProof): void;
+    reset(): void;
+}
+/**
+ * Headless password login with the TOTP step-up branch (auth-sa.md §3 + §11).
+ * When `state.step === "totpRequired"`, render a TOTP input and call
+ * `submitTotp({ code })` (or `{ backup_code }`).
+ */
+export declare function PasswordLogin(props: {
+    children: (bag: PasswordLoginBag) => ReactNode;
+}): ReactNode;
+//# sourceMappingURL=PasswordLogin.d.ts.map

package/dist/headless/PasswordLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordLogin.d.ts","sourceRoot":"","sources":["../../src/headless/PasswordLogin.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,KAAK,EACV,kBAAkB,EAClB,SAAS,EACV,MAAM,+BAA+B,CAAC;AAIvC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACnC,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,QAAQ,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,CAAC;CAChD,GAAG,SAAS,CAwBZ"}

package/dist/headless/PasswordLogin.js

@@ -0,0 +1,31 @@
+import { useMemo } from "react";
+import { createPasswordLoginFlow } from "../flows/passwordLoginFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi, useAuthSession } from "../model/context.js";
+/**
+ * Headless password login with the TOTP step-up branch (auth-sa.md §3 + §11).
+ * When `state.step === "totpRequired"`, render a TOTP input and call
+ * `submitTotp({ code })` (or `{ backup_code }`).
+ */
+export function PasswordLogin(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const session = useAuthSession();
+    const flow = useMemo(() => createPasswordLoginFlow({
+        api,
+        analytics,
+        onAuthenticated: (r) => session.adopt(r),
+    }), [api, analytics, session]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        login: (loginId, password) => {
+            void flow.login(loginId, password);
+        },
+        submitTotp: (proof) => {
+            void flow.submitTotp(proof);
+        },
+        reset: flow.reset,
+    });
+}
+//# sourceMappingURL=PasswordLogin.js.map

package/dist/headless/PasswordLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordLogin.js","sourceRoot":"","sources":["../../src/headless/PasswordLogin.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAKxE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AASnF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAE7B;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,uBAAuB,CAAC;QACtB,GAAG;QACH,SAAS;QACT,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;KACzC,CAAC,EACJ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC3B,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/PasswordReset.d.ts

@@ -0,0 +1,19 @@
+import type { ReactNode } from "react";
+import type { OtpChannel } from "../api/types.js";
+import type { PasswordResetState } from "../flows/passwordResetFlow.js";
+export interface PasswordResetBag {
+    readonly state: PasswordResetState;
+    request(channel: OtpChannel, value: string): void;
+    resend(): void;
+    submit(code: string, newPassword: string): void;
+    reset(): void;
+}
+/**
+ * Headless unauthenticated password reset (auth-sa.md §5). The `codeSent`
+ * human-wait collects the code AND the new password together, then the user
+ * lands in a fresh session (`authenticated`).
+ */
+export declare function PasswordReset(props: {
+    children: (bag: PasswordResetBag) => ReactNode;
+}): ReactNode;
+//# sourceMappingURL=PasswordReset.d.ts.map

package/dist/headless/PasswordReset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordReset.d.ts","sourceRoot":"","sources":["../../src/headless/PasswordReset.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAIxE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,MAAM,IAAI,IAAI,CAAC;IACf,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,QAAQ,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,CAAC;CAChD,GAAG,SAAS,CA2BZ"}

package/dist/headless/PasswordReset.js

@@ -0,0 +1,34 @@
+import { useMemo } from "react";
+import { createPasswordResetFlow } from "../flows/passwordResetFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi, useAuthSession } from "../model/context.js";
+/**
+ * Headless unauthenticated password reset (auth-sa.md §5). The `codeSent`
+ * human-wait collects the code AND the new password together, then the user
+ * lands in a fresh session (`authenticated`).
+ */
+export function PasswordReset(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const session = useAuthSession();
+    const flow = useMemo(() => createPasswordResetFlow({
+        api,
+        analytics,
+        onAuthenticated: (r) => session.adopt(r),
+    }), [api, analytics, session]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        request: (channel, value) => {
+            void flow.request(channel, value);
+        },
+        resend: () => {
+            void flow.resend();
+        },
+        submit: (code, newPassword) => {
+            void flow.submit(code, newPassword);
+        },
+        reset: flow.reset,
+    });
+}
+//# sourceMappingURL=PasswordReset.js.map

package/dist/headless/PasswordReset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordReset.js","sourceRoot":"","sources":["../../src/headless/PasswordReset.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGhC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAUnF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAE7B;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,uBAAuB,CAAC;QACtB,GAAG;QACH,SAAS;QACT,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;KACzC,CAAC,EACJ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAC1B,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,EAAE,GAAG,EAAE;YACX,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE;YAC5B,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/PasswordlessLogin.d.ts

@@ -0,0 +1,28 @@
+import type { ReactNode } from "react";
+import type { OtpChannel } from "../api/types.js";
+import type { OtpState } from "../flows/otpFlow.js";
+/** Render-prop bag for {@link PasswordlessLogin}. */
+export interface PasswordlessLoginBag {
+    readonly state: OtpState;
+    requestCode(channel: OtpChannel, value: string, captchaToken?: string): void;
+    resend(captchaToken?: string): void;
+    submitCode(code: string): void;
+    reset(): void;
+}
+/**
+ * Headless Email/Phone OTP login (auth-sa.md §1–2). Owns an `otpFlow` machine
+ * and hands its state + actions to a render prop — you supply the markup.
+ *
+ * ```tsx
+ * <PasswordlessLogin>
+ *   {({ state, requestCode, submitCode }) =>
+ *     state.step === "codeSent"
+ *       ? <CodeForm onSubmit={submitCode} />
+ *       : <EmailForm onSubmit={(e) => requestCode("email", e)} />}
+ * </PasswordlessLogin>
+ * ```
+ */
+export declare function PasswordlessLogin(props: {
+    children: (bag: PasswordlessLoginBag) => ReactNode;
+}): ReactNode;
+//# sourceMappingURL=PasswordlessLogin.d.ts.map

package/dist/headless/PasswordlessLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordlessLogin.d.ts","sourceRoot":"","sources":["../../src/headless/PasswordlessLogin.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7E,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,SAAS,CAAC;CACpD,GAAG,SAAS,CA2BZ"}

package/dist/headless/PasswordlessLogin.js

@@ -0,0 +1,42 @@
+import { useMemo } from "react";
+import { createOtpFlow } from "../flows/otpFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi, useAuthSession } from "../model/context.js";
+/**
+ * Headless Email/Phone OTP login (auth-sa.md §1–2). Owns an `otpFlow` machine
+ * and hands its state + actions to a render prop — you supply the markup.
+ *
+ * ```tsx
+ * <PasswordlessLogin>
+ *   {({ state, requestCode, submitCode }) =>
+ *     state.step === "codeSent"
+ *       ? <CodeForm onSubmit={submitCode} />
+ *       : <EmailForm onSubmit={(e) => requestCode("email", e)} />}
+ * </PasswordlessLogin>
+ * ```
+ */
+export function PasswordlessLogin(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const session = useAuthSession();
+    const flow = useMemo(() => createOtpFlow({
+        api,
+        analytics,
+        onAuthenticated: (r) => session.adopt(r),
+    }), [api, analytics, session]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        requestCode: (channel, value, captchaToken) => {
+            void flow.requestCode(channel, value, captchaToken);
+        },
+        resend: (captchaToken) => {
+            void flow.resend(captchaToken);
+        },
+        submitCode: (code) => {
+            void flow.submitCode(code);
+        },
+        reset: flow.reset,
+    });
+}
+//# sourceMappingURL=PasswordlessLogin.js.map

package/dist/headless/PasswordlessLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordlessLogin.js","sourceRoot":"","sources":["../../src/headless/PasswordlessLogin.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGhC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAWnF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAEjC;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,aAAa,CAAC;QACZ,GAAG;QACH,SAAS;QACT,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;KACzC,CAAC,EACJ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,WAAW,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAC5C,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE;YACvB,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;QACD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YACnB,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/QrLogin.d.ts

@@ -0,0 +1,19 @@
+import type { ReactNode } from "react";
+import type { QrType } from "../api/types.js";
+import type { QrLoginState } from "../flows/qrLoginFlow.js";
+export interface QrLoginBag {
+    readonly state: QrLoginState;
+    start(type: QrType, redirectUrl: string, allowUnauthenticatedScanner?: boolean): void;
+    dispose(): void;
+}
+/**
+ * Headless QR authentication with background polling (auth-sa.md §8). Render
+ * the `awaitingScan` state's `scanUrl` as a QR image. The poll loop starts on
+ * `start()` and is torn down on unmount. For `login_request`, delivered tokens
+ * are adopted into the session automatically.
+ */
+export declare function QrLogin(props: {
+    children: (bag: QrLoginBag) => ReactNode;
+    pollIntervalMs?: number;
+}): ReactNode;
+//# sourceMappingURL=QrLogin.d.ts.map

package/dist/headless/QrLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"QrLogin.d.ts","sourceRoot":"","sources":["../../src/headless/QrLogin.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAI5D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,2BAA2B,CAAC,EAAE,OAAO,GACpC,IAAI,CAAC;IACR,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE;IAC7B,QAAQ,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,SAAS,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,SAAS,CAwBZ"}

package/dist/headless/QrLogin.js

@@ -0,0 +1,32 @@
+import { useEffect, useMemo } from "react";
+import { createQrLoginFlow } from "../flows/qrLoginFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi, useAuthSession } from "../model/context.js";
+/**
+ * Headless QR authentication with background polling (auth-sa.md §8). Render
+ * the `awaitingScan` state's `scanUrl` as a QR image. The poll loop starts on
+ * `start()` and is torn down on unmount. For `login_request`, delivered tokens
+ * are adopted into the session automatically.
+ */
+export function QrLogin(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const session = useAuthSession();
+    const { pollIntervalMs } = props;
+    const flow = useMemo(() => createQrLoginFlow({
+        api,
+        analytics,
+        onAuthenticated: (tokens) => session.setTokens(tokens),
+        ...(pollIntervalMs !== undefined ? { pollIntervalMs } : {}),
+    }), [api, analytics, session, pollIntervalMs]);
+    const state = useFlow(flow.machine);
+    useEffect(() => () => flow.dispose(), [flow]);
+    return props.children({
+        state,
+        start: (type, redirectUrl, allow) => {
+            void flow.start(type, redirectUrl, allow);
+        },
+        dispose: flow.dispose,
+    });
+}
+//# sourceMappingURL=QrLogin.js.map

package/dist/headless/QrLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QrLogin.js","sourceRoot":"","sources":["../../src/headless/QrLogin.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAYnF;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,KAGvB;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,iBAAiB,CAAC;QAChB,GAAG;QACH,SAAS;QACT,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;QACtD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,EACJ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAC1C,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAClC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/TotpSetup.d.ts

@@ -0,0 +1,17 @@
+import type { ReactNode } from "react";
+import type { TotpSetupState } from "../flows/totpSetupFlow.js";
+export interface TotpSetupBag {
+    readonly state: TotpSetupState;
+    start(): void;
+    confirm(code: string): void;
+    reset(): void;
+}
+/**
+ * Headless TOTP enrollment (auth-sa.md §11). Render the `enrolling` state's
+ * `qrUri` as a QR image and `secret` for manual entry; on `done`, surface the
+ * one-time `backupCodes` with a copy/warn affordance (shown ONCE).
+ */
+export declare function TotpSetup(props: {
+    children: (bag: TotpSetupBag) => ReactNode;
+}): ReactNode;
+//# sourceMappingURL=TotpSetup.d.ts.map

package/dist/headless/TotpSetup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpSetup.d.ts","sourceRoot":"","sources":["../../src/headless/TotpSetup.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,KAAK,IAAI,IAAI,CAAC;IACd,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE;IAC/B,QAAQ,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC;CAC5C,GAAG,SAAS,CAkBZ"}

package/dist/headless/TotpSetup.js

@@ -0,0 +1,26 @@
+import { useMemo } from "react";
+import { createTotpSetupFlow } from "../flows/totpSetupFlow.js";
+import { useFlow } from "../flows/useFlow.js";
+import { useAuthAnalytics, useAuthApi } from "../model/context.js";
+/**
+ * Headless TOTP enrollment (auth-sa.md §11). Render the `enrolling` state's
+ * `qrUri` as a QR image and `secret` for manual entry; on `done`, surface the
+ * one-time `backupCodes` with a copy/warn affordance (shown ONCE).
+ */
+export function TotpSetup(props) {
+    const api = useAuthApi();
+    const analytics = useAuthAnalytics();
+    const flow = useMemo(() => createTotpSetupFlow({ api, analytics }), [api, analytics]);
+    const state = useFlow(flow.machine);
+    return props.children({
+        state,
+        start: () => {
+            void flow.start();
+        },
+        confirm: (code) => {
+            void flow.confirm(code);
+        },
+        reset: flow.reset,
+    });
+}
+//# sourceMappingURL=TotpSetup.js.map

package/dist/headless/TotpSetup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpSetup.js","sourceRoot":"","sources":["../../src/headless/TotpSetup.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AASnE;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAEzB;IACC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAC7C,CAAC,GAAG,EAAE,SAAS,CAAC,CACjB,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,KAAK,EAAE,GAAG,EAAE;YACV,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/VerificationChallenge.d.ts

@@ -0,0 +1,37 @@
+import type { ReactNode } from "react";
+import type { VerificationFactorId } from "../api/types.js";
+import type { VerificationState } from "../flows/verificationFlow.js";
+export interface VerificationChallengeBag {
+    readonly state: VerificationState;
+    chooseFactor(factor: VerificationFactorId): void;
+    submitCode(proof: {
+        code?: string;
+        backup_code?: string;
+    }): void;
+    submitPasskey(credential: unknown): void;
+    cancel(): void;
+}
+/**
+ * THE FLAGSHIP headless component (frontend-standard §2). Mount it ONCE at the
+ * app root. It renders the app's step-up modal by driving the singleton
+ * {@link VerificationController} that `createAuthRuntime` wired into
+ * `client.onVerificationChallenge`. When any sensitive request 403s with a
+ * verification envelope, `state.step` leaves `"idle"` and this render prop
+ * fires — pick a factor, submit the proof, and core transparently retries the
+ * original request with `X-Verification-Token`.
+ *
+ * Renders nothing while idle, so it is safe to leave mounted:
+ * ```tsx
+ * <VerificationChallenge>
+ *   {({ state, chooseFactor, submitCode, cancel }) => (
+ *     <Modal open={state.step !== "idle"}>… </Modal>
+ *   )}
+ * </VerificationChallenge>
+ * ```
+ */
+export declare function VerificationChallenge(props: {
+    children: (bag: VerificationChallengeBag) => ReactNode;
+    /** Render even when idle (default false — returns null while idle). */
+    renderWhenIdle?: boolean;
+}): ReactNode;
+//# sourceMappingURL=VerificationChallenge.d.ts.map

package/dist/headless/VerificationChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerificationChallenge.d.ts","sourceRoot":"","sources":["../../src/headless/VerificationChallenge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACjD,UAAU,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjE,aAAa,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,EAAE,CAAC,GAAG,EAAE,wBAAwB,KAAK,SAAS,CAAC;IACvD,uEAAuE;IACvE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,SAAS,CAiBZ"}

package/dist/headless/VerificationChallenge.js

@@ -0,0 +1,40 @@
+import { useFlow } from "../flows/useFlow.js";
+import { useVerification } from "../model/context.js";
+/**
+ * THE FLAGSHIP headless component (frontend-standard §2). Mount it ONCE at the
+ * app root. It renders the app's step-up modal by driving the singleton
+ * {@link VerificationController} that `createAuthRuntime` wired into
+ * `client.onVerificationChallenge`. When any sensitive request 403s with a
+ * verification envelope, `state.step` leaves `"idle"` and this render prop
+ * fires — pick a factor, submit the proof, and core transparently retries the
+ * original request with `X-Verification-Token`.
+ *
+ * Renders nothing while idle, so it is safe to leave mounted:
+ * ```tsx
+ * <VerificationChallenge>
+ *   {({ state, chooseFactor, submitCode, cancel }) => (
+ *     <Modal open={state.step !== "idle"}>… </Modal>
+ *   )}
+ * </VerificationChallenge>
+ * ```
+ */
+export function VerificationChallenge(props) {
+    const controller = useVerification();
+    const state = useFlow(controller.machine);
+    if (state.step === "idle" && props.renderWhenIdle !== true)
+        return null;
+    return props.children({
+        state,
+        chooseFactor: (factor) => {
+            void controller.chooseFactor(factor);
+        },
+        submitCode: (proof) => {
+            void controller.submitCode(proof);
+        },
+        submitPasskey: (credential) => {
+            void controller.submitPasskey(credential);
+        },
+        cancel: controller.cancel,
+    });
+}
+//# sourceMappingURL=VerificationChallenge.js.map

package/dist/headless/VerificationChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerificationChallenge.js","sourceRoot":"","sources":["../../src/headless/VerificationChallenge.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAUtD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAIrC;IACC,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,KAAK,CAAC,QAAQ,CAAC;QACpB,KAAK;QACL,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;YACvB,KAAK,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,aAAa,EAAE,CAAC,UAAU,EAAE,EAAE;YAC5B,KAAK,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/misc.d.ts

@@ -0,0 +1,47 @@
+import type { ReactNode } from "react";
+import type { OtpChannel } from "../api/types.js";
+import type { AnonymousState } from "../flows/anonymousFlow.js";
+import type { AuthenticatorChangeState } from "../flows/authenticatorChangeFlow.js";
+import type { MagicLinkState } from "../flows/magicLinkFlow.js";
+import type { SsoState } from "../flows/ssoFlow.js";
+export interface MagicLinkBag {
+    readonly state: MagicLinkState;
+    request(email: string, redirectUrl?: string): void;
+    reset(): void;
+}
+/** Headless magic-link request (auth-sa.md §15). */
+export declare function MagicLink(props: {
+    children: (bag: MagicLinkBag) => ReactNode;
+}): ReactNode;
+export interface AnonymousBag {
+    readonly state: AnonymousState;
+    create(deviceId?: string): void;
+    reset(): void;
+}
+/** Headless anonymous session (auth-sa.md §6). */
+export declare function AnonymousSession(props: {
+    children: (bag: AnonymousBag) => ReactNode;
+}): ReactNode;
+export interface SsoDiscoveryBag {
+    readonly state: SsoState;
+    lookup(domain: string): void;
+    beginLogin(orgSlug: string): void;
+    reset(): void;
+}
+/** Headless SSO domain discovery + login redirect (auth-sa.md §18). */
+export declare function SsoDiscovery(props: {
+    children: (bag: SsoDiscoveryBag) => ReactNode;
+}): ReactNode;
+export interface AuthenticatorChangeBag {
+    readonly state: AuthenticatorChangeState;
+    startInstant(channel: OtpChannel): void;
+    submitOldCode(code: string): void;
+    requestNew(newValue: string): void;
+    submitNewCode(code: string): void;
+    reset(): void;
+}
+/** Headless instant email/phone change (auth-sa.md §9). */
+export declare function AuthenticatorChange(props: {
+    children: (bag: AuthenticatorChangeBag) => ReactNode;
+}): ReactNode;
+//# sourceMappingURL=misc.d.ts.map

package/dist/headless/misc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"misc.d.ts","sourceRoot":"","sources":["../../src/headless/misc.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAMpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,KAAK,IAAI,IAAI,CAAC;CACf;AAED,oDAAoD;AACpD,wBAAgB,SAAS,CAAC,KAAK,EAAE;IAC/B,QAAQ,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC;CAC5C,GAAG,SAAS,CAeZ;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,kDAAkD;AAClD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,SAAS,CAAC;CAC5C,GAAG,SAAS,CAqBZ;AAID,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,QAAQ,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,SAAS,CAAC;CAC/C,GAAG,SAAS,CAgBZ;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACxC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,2DAA2D;AAC3D,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,SAAS,CAAC;CACtD,GAAG,SAAS,CA8BZ"}