@tern-secure/types 1.1.0-canary.v20251008131428 → 1.1.0-canary.v20251019190011

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * TernSecure User
  */
-interface IdTokenResult {
+interface IdTokenResult_DEPRECATED {
     authTime: string;
     expirationTime: string;
     issuedAtTime: string;
@@ -10,6 +10,55 @@ interface IdTokenResult {
     token: string;
     claims: Record<string, any>;
 }
+/**
+ * parsed can be replaced with
+ */
+interface ParsedToken {
+    /** Expiration time of the token. */
+    exp?: string;
+    /** UID of the user. */
+    sub?: string;
+    /** Time at which authentication was performed. */
+    auth_time?: string;
+    /** Issuance time of the token. */
+    iat?: string;
+    /** Firebase specific claims, containing the provider(s) used to authenticate the user. */
+    firebase?: {
+        sign_in_provider?: string;
+        sign_in_second_factor?: string;
+        identities?: Record<string, string>;
+    };
+    /** Map of any additional custom claims. */
+    [key: string]: unknown;
+}
+/**
+ * Core properties for any session that is or was authenticated.
+ * These properties are guaranteed to exist for active, expired, or revoked sessions.
+ */
+interface IdTokenResult {
+    /** Time at which authentication was performed (from token claims). */
+    authTime: string;
+    /** The ID token expiration time (e.g., UTC string or Unix timestamp). */
+    expirationTime: string;
+    /** The ID token issuance time. */
+    issuedAtTime: string;
+    /** signInProvider */
+    signInProvider: string | null;
+    /** signInSecondFactor */
+    signInSecondFactor: string | null;
+    /** The Firebase Auth ID token JWT string. */
+    token: string;
+    /**
+     * The entire payload claims of the ID token including the standard reserved claims
+     * as well as custom claims.
+     */
+    claims: ParsedToken;
+}
+declare const OperationType: {
+    readonly SIGN_IN: "signIn";
+    readonly LINK: "link";
+    readonly REAUTHENTICATE: "reauthenticate";
+};
 interface UserInfo {
     displayName: string | null;
     email: string | null;
@@ -34,11 +83,32 @@ interface TernSecureUser extends UserInfo {
     reload(): Promise<void>;
     toJSON(): object;
 }
-type TernSecureUserData = {
-    uid: string;
-    email: string | null;
-    emailVerified?: boolean;
-    displayName?: string | null;
+interface ProviderUserInfo {
+    rawId: string;
+    displayName?: string;
+    email?: string;
+    photoUrl?: string;
+    phoneNumber?: string;
+    providerId: string;
+    federatedId?: string;
+}
+interface TernSecureUserData {
+    localId: string;
+    email: string;
+    emailVerified: boolean;
+    displayName: string;
+    providerUserInfo: ProviderUserInfo[];
+    photoUrl: string;
+    validSince: string;
+    disabled: boolean;
+    lastLoginAt: string;
+    createdAt: string;
+    customAuth: boolean;
+}
+type UserCredential = {
+    user?: any;
+    providerId?: string | null;
+    operationType?: (typeof OperationType)[keyof typeof OperationType] | null;
 };
 /**
  * TernSecure Firebase configuration interface
@@ -145,6 +215,12 @@ interface CookieOptions {
     sameSite?: 'strict' | 'lax' | 'none' | undefined;
     secure?: boolean | undefined;
 }
+interface CookieResource {
+    idToken?: string;
+    sessionToken?: string;
+    refreshToken?: string;
+    customToken?: string;
+}
 
 type AuthErrorCode = keyof typeof ERRORS;
 type ErrorCode = keyof typeof ERRORS;
@@ -183,7 +259,8 @@ declare const ERRORS: {
     readonly REDIRECT_LOOP: "Redirect loop detected.";
 };
 
-type AuthEndpoint = 'sessions' | 'users';
+type AuthEndpoint = 'cookies' | 'sessions' | 'users';
+type CookieSubEndpoint = 'get' | 'set' | 'delete' | 'clear' | 'list';
 type SessionSubEndpoint = 'verify' | 'createsession' | 'refresh' | 'revoke';
 interface CorsOptions {
     allowedOrigins: string[] | '*';
@@ -239,6 +316,11 @@ interface EndpointConfig {
     security?: SecurityOptions;
     cors?: Partial<CorsOptions>;
 }
+interface CookieEndpointConfig extends EndpointConfig {
+    subEndpoints?: {
+        [K in CookieSubEndpoint]?: Partial<EndpointConfig>;
+    };
+}
 interface SessionEndpointConfig extends EndpointConfig {
     subEndpoints?: {
         [K in SessionSubEndpoint]?: Partial<EndpointConfig>;
@@ -250,6 +332,7 @@ interface TernSecureHandlerOptions {
     rateLimit?: RateLimitOptions;
     security?: SecurityOptions;
     endpoints?: {
+        cookies?: CookieEndpointConfig;
         sessions?: SessionEndpointConfig;
     };
     tenantId?: string | null;
@@ -259,325 +342,25 @@ interface TernSecureHandlerOptions {
     basePath?: string;
 }
 
-/**
- * Defines the basic structure for color theming.
- */
-interface ThemeColors {
-    primary?: string;
-    secondary?: string;
-    accent?: string;
-    background?: string;
-    text?: string;
-    error?: string;
-    success?: string;
-}
-/**
- * Defines the basic structure for font theming.
- */
-interface ThemeFonts {
-    primary?: string;
-    secondary?: string;
-}
-/**
- * Defines the basic structure for spacing and layout theming.
- */
-interface ThemeSpacing {
-    small?: string | number;
-    medium?: string | number;
-    large?: string | number;
-}
-/**
- * Defines the basic structure for border radius theming.
- */
-interface ThemeBorderRadius {
-    small?: string | number;
-    medium?: string | number;
-    large?: string | number;
-}
-/**
- * Allows for overriding styles of specific UI components.
- * Properties can be CSS-in-JS objects or class names, depending on implementation.
- */
-interface ThemeComponentStyles {
-    button?: Record<string, any> | string;
-    input?: Record<string, any> | string;
-    card?: Record<string, any> | string;
-    label?: Record<string, any> | string;
-}
-/**
- * Defines the overall appearance/theme configuration.
- * This allows for broad customization of the UI components.
- */
-interface Appearance {
-    colors?: ThemeColors;
-    fonts?: ThemeFonts;
-    spacing?: ThemeSpacing;
-    borderRadius?: ThemeBorderRadius;
-    componentStyles?: ThemeComponentStyles;
-    variables?: Record<string, string | number>;
-}
-/**
- * Base UI configuration shared between SignIn and SignUp
- */
-interface BaseAuthUIConfig {
-    /** Visual appearance configuration */
-    appearance?: Appearance;
-    /** Application logo URL or SVG string */
-    logo?: string;
-    /** Application name for display */
-    appName?: string;
-    /** Render mode for cross-platform support */
-    renderMode?: 'modal' | 'page' | 'embedded';
-    /** Layout direction */
-    layout?: 'vertical' | 'horizontal';
-    /** Custom loading message */
-    loadingMessage?: string;
-    /** Loading spinner variant */
-    loadingSpinnerVariant?: 'circular' | 'linear' | 'dots';
-    /** Accessibility configuration */
-    a11y?: {
-        /** ARIA labels and descriptions */
-        labels?: Record<string, string>;
-        /** Element to receive initial focus */
-        initialFocus?: string;
-        /** Whether to trap focus within the auth UI */
-        trapFocus?: boolean;
-    };
-}
-/**
- * Sign-in specific UI configuration
- */
-interface SignInUIConfig extends BaseAuthUIConfig {
-    /** Social sign-in buttons configuration */
-    socialButtons?: {
-        google?: boolean;
-        microsoft?: boolean;
-        github?: boolean;
-        facebook?: boolean;
-        twitter?: boolean;
-        apple?: boolean;
-        linkedin?: boolean;
-        layout?: 'vertical' | 'horizontal';
-        size?: 'small' | 'medium' | 'large';
-    };
-    /** "Remember me" checkbox configuration */
-    rememberMe?: {
-        enabled?: boolean;
-        defaultChecked?: boolean;
-    };
-    /** Sign-up link configuration */
-    signUpLink?: {
-        enabled?: boolean;
-        text?: string;
-        href?: string;
-    };
-}
-/**
- * Sign-up specific UI configuration
- */
-interface SignUpUIConfig extends BaseAuthUIConfig {
-    /** Password requirements display configuration */
-    passwordRequirements?: {
-        show?: boolean;
-        rules?: Array<{
-            rule: string;
-            description: string;
-        }>;
-    };
-    /** Terms and conditions configuration */
-    terms?: {
-        enabled?: boolean;
-        text?: string;
-        link?: string;
-    };
-}
-
-interface TernSecureSession {
-    token: string | null;
-    expiresAt?: number;
-}
-type SignInFormValues = {
-    email: string;
-    password: string;
-    phoneNumber?: string;
-};
-type SignInInitialValue = Partial<SignInFormValues>;
-type SignUpFormValues = {
-    email: string;
-    password: string;
-    confirmPassword?: string;
-    displayName?: string;
-};
-type SignUpInitialValue = Partial<SignUpFormValues>;
-interface SignInResponse {
-    success: boolean;
-    message?: string;
-    error?: any | undefined;
-    user?: any;
-}
-interface AuthError extends Error {
-    code?: any | string;
-    message: string;
-    response?: SignInResponse;
-}
-declare function isSignInResponse(value: any): value is SignInResponse;
-interface AuthActions {
-    signInWithEmail: (email: string, password: string) => Promise<SignInResponse>;
-    signInWithGoogle: () => Promise<void>;
-    signInWithMicrosoft: () => Promise<void>;
-    signOut: () => Promise<void>;
-    getRedirectResult: () => Promise<any>;
-    getIdToken: () => Promise<string | null>;
-    createUserWithEmailAndPassword?: (email: string, password: string) => Promise<SignInResponse>;
-    sendEmailVerification?: (user: TernSecureUser) => Promise<void>;
-}
-interface RedirectConfig {
-    redirectUrl?: string;
-    isReturn?: boolean;
-    priority?: number;
-}
-interface SignInProps extends RedirectConfig {
-    initialValue?: SignInInitialValue;
-    logo?: string;
-    appName?: string;
-    appearance?: Appearance;
-    onError?: (error: AuthError) => void;
-    onSuccess?: (user: TernSecureUser | null) => void;
-}
-/**
- * SignUpProps interface defines the properties for the sign-up component.
- * It extends RedirectConfig to include redirect-related properties.
- */
-interface SignUpProps extends RedirectConfig {
-    initialValue?: SignUpInitialValue;
-    logo?: string;
-    appName?: string;
-    appearance?: Appearance;
-    onError?: (error: AuthError) => void;
-    onSuccess?: (user: TernSecureUser | null) => void;
-}
-/**
- * Defines the contract for a TernSecure instance.
- * This instance provides authentication state, user information, and methods
- * for managing the authentication lifecycle. It is designed to be used by
- * UI packages like tern-ui, which act as "dumb" renderers.
- */
-interface TernSecureInstanceOld {
-    /** Indicates if the user is currently signed in. */
-    isSignedIn: () => boolean;
-    /** The current authenticated user object, or null if not signed in. */
-    user: TernSecureUser | null;
-    /** The current user session information, or null if not signed in. */
-    session: TernSecureSession | null;
-    /** Initiates the sign-out process for the current user. */
-    signOut: () => Promise<void>;
-    /**
-     * Prepares or signals to mount the sign-in interface.
-     * @param options Optional configuration or initial state for the sign-in UI, conforming to SignInProps.
-     */
-    mountSignIn: (options?: SignInProps) => void;
-    /** Cleans up or signals to unmount the sign-in interface. */
-    unmountSignIn: () => void;
-    /**
-     * Prepares or signals to mount the sign-up interface.
-     * @param options Optional configuration or initial state for the sign-up UI, conforming to SignUpProps.
-     */
-    mountSignUp: (options?: SignUpProps) => void;
-    /** Cleans up or signals to unmount the sign-up interface. */
-    unmountSignUp: () => void;
-    /**
-     * Determines if a redirect is necessary based on the current authentication
-     * state and the given path.
-     * @param currentPath The current URL path.
-     * @returns True if a redirect is needed, false otherwise, or a string path to redirect to.
-     */
-    shouldRedirect: (currentPath: string) => boolean | string;
-    /**
-     * Constructs a URL, appending necessary redirect parameters.
-     * Useful for redirecting back to the original page after authentication.
-     * @param baseUrl The base URL to which redirect parameters should be added.
-     * @returns The new URL string with redirect parameters.
-     */
-    constructUrlWithRedirect: (baseUrl: string) => string;
-    /**
-     * Redirects the user to the configured login page.
-     * @param redirectUrl Optional URL to redirect to after successful login.
-     */
-    redirectToLogin: (redirectUrl?: string) => void;
-    /** Indicates if an authentication operation is currently in progress. */
-    isLoading: boolean;
-    /** Holds any error that occurred during an authentication operation, or null otherwise. */
-    error: Error | null;
-    /** Indicates if the user has verified their email address. */
-    sendVerificationEmail: () => Promise<void>;
-}
-
 type SessionStatus = 'active' | 'expired' | 'revoked' | 'pending';
-/**
- * parsed can be replaced with
- */
-interface ParsedToken {
-    /** Expiration time of the token. */
-    'exp'?: string;
-    /** UID of the user. */
-    'sub'?: string;
-    /** Time at which authentication was performed. */
-    'auth_time'?: string;
-    /** Issuance time of the token. */
-    'iat'?: string;
-    /** Firebase specific claims, containing the provider(s) used to authenticate the user. */
-    'firebase'?: {
-        'sign_in_provider'?: string;
-        'sign_in_second_factor'?: string;
-        'identities'?: Record<string, string>;
-    };
-    /** Map of any additional custom claims. */
-    [key: string]: unknown;
-}
-/**
- * Core properties for any session that is or was authenticated.
- * These properties are guaranteed to exist for active, expired, or revoked sessions.
- */
-interface AuthenticatedSessionBase {
-    /** The Firebase Auth ID token JWT string. */
-    token: string;
-    /** The ID token expiration time (e.g., UTC string or Unix timestamp). */
-    expirationTime: string;
-    /** The ID token issuance time. */
-    issuedAtTime: string;
-    /** Time at which authentication was performed (from token claims). */
-    authTime: string;
-    /**
-    * The entire payload claims of the ID token including the standard reserved claims
-    * as well as custom claims.
-    */
-    claims: ParsedToken;
-    /**
-    * Time the user last signed in.
-    * This could be from Firebase User metadata or persisted by TernSecure.
-    */
-    lastSignedAt?: number;
-    /** signInProvider */
-    signInProvider: string;
-}
 /**
  * Represents a session when the user is authenticated and the token is considered active.
  */
-interface ActiveSession extends AuthenticatedSessionBase {
+interface ActiveSession extends IdTokenResult {
     status: 'active';
     user?: TernSecureUser;
 }
 /**
  * Represents a session when the user was authenticated, but the token has expired.
  */
-interface ExpiredSession extends AuthenticatedSessionBase {
+interface ExpiredSession extends IdTokenResult {
     status: 'expired';
     user?: TernSecureUser;
 }
 /**
  * Represents a session that is awaiting some action.
  */
-interface PendingSession extends AuthenticatedSessionBase {
+interface PendingSession extends IdTokenResult {
     status: 'pending';
     user?: TernSecureUser;
 }
@@ -600,9 +383,15 @@ interface SessionResult {
     error?: string;
     cookieSet?: boolean;
 }
+interface SessionResource extends IdTokenResult {
+    status: SessionStatus;
+    user?: TernSecureUser;
+    create: (csrfToken: string) => Promise<void>;
+    getIdAndRefreshToken: (idToken: string, csrfToken: string) => Promise<void>;
+}
 
 type SignInStatus = 'idle' | 'pending_email_password' | 'pending_social' | 'pending_mfa' | 'redirecting' | 'success' | 'error';
-type SignInFormValuesTree = {
+type SignInFormValues = {
     email: string;
     password: string;
     phoneNumber?: string;
@@ -617,17 +406,26 @@ interface AuthErrorTree extends Error {
     message: string;
     response?: any | string;
 }
-interface SignInResponseTree {
-    success: boolean;
+interface BaseSignInResponse {
+    status?: SignInStatus;
     message?: string;
     error?: any | undefined;
-    user?: any;
 }
-type SignInInitialValueTree = Partial<SignInFormValuesTree>;
-interface ResendEmailVerification extends SignInResponseTree {
+interface SignInSuccessResponse extends BaseSignInResponse, UserCredential {
+    status: 'success';
+}
+interface SignInErrorResponse extends BaseSignInResponse {
+    status: 'error';
+}
+interface SignInPendingResponse extends BaseSignInResponse {
+    status: 'redirecting' | 'pending_social' | 'pending_email_password';
+}
+type SignInResponse = SignInSuccessResponse | SignInErrorResponse | SignInPendingResponse;
+type SignInInitialValue = Partial<SignInFormValues>;
+interface ResendEmailVerification {
     isVerified?: boolean;
 }
-declare function isSignInResponseTree(value: any): value is SignInResponseTree;
+declare function isSignInResponseTree(value: any): value is SignInResponse;
 interface SignInResource {
     /**
      * The current status of the sign-in process.
@@ -638,7 +436,7 @@ interface SignInResource {
      * @param params - The sign-in form values.
      * @returns A promise that resolves with the sign-in response.
      */
-    withEmailAndPassword: (params: SignInFormValuesTree) => Promise<SignInResponseTree>;
+    withEmailAndPassword: (params: SignInFormValues) => Promise<SignInResponse>;
     /**
      * @param provider - The identifier of the social provider (e.g., 'google', 'microsoft', 'github').
      * @param options - Optional configuration for the social sign-in flow.
@@ -646,14 +444,14 @@ interface SignInResource {
      */
     withSocialProvider: (provider: string, options?: {
         mode?: 'popup' | 'redirect';
-    }) => Promise<SignInResponseTree | void>;
+    }) => Promise<SignInResponse | void>;
     /**
      * Completes an MFA (Multi-Factor Authentication) step after a primary authentication attempt.
      * @param mfaToken - The MFA token or code submitted by the user.
      * @param mfaContext - Optional context or session data from the MFA initiation step.
      * @returns A promise that resolves with the sign-in response upon successful MFA verification.
      */
-    completeMfaSignIn: (mfaToken: string, mfaContext?: any) => Promise<SignInResponseTree>;
+    completeMfaSignIn: (mfaToken: string, mfaContext?: any) => Promise<SignInResponse>;
     /**
      * Sends a password reset email to the given email address.
      * @param email - The user's email address.
@@ -669,7 +467,7 @@ interface SignInResource {
      * Checks the result of a redirect-based sign-in flow, typically used in OAuth or SSO scenarios.
      * @returns A promise that resolves with the sign-in response or null if no result is available.
      */
-    checkRedirectResult: () => Promise<SignInResponseTree | null>;
+    checkRedirectResult: () => Promise<SignInResponse | null>;
 }
 
 interface SignUpResource {
@@ -687,7 +485,7 @@ interface SignUpResource {
      */
     withSocialProvider: (provider: string, options?: {
         mode?: 'popup' | 'redirect';
-    }) => Promise<SignInResponseTree | void>;
+    }) => Promise<SignInResponse | void>;
 }
 type SignUpStatus = 'missing_requirements' | 'complete' | 'abandoned';
 
@@ -782,10 +580,16 @@ interface TernSecureState {
     isAuthenticated: boolean;
     token: any | null;
     email: string | null;
-    status: "loading" | "authenticated" | "unauthenticated" | "unverified";
+    status: 'loading' | 'authenticated' | 'unauthenticated' | 'unverified';
     user?: TernSecureUser | null;
 }
-type AuthProviderStatus = "idle" | "pending" | "error" | "success";
+type TernSecureStateExtended = {
+    sessionClaims: DecodedIdToken | null;
+    userId: string | null;
+    token: string | null;
+    user?: TernSecureUser | null;
+};
+type AuthProviderStatus = 'idle' | 'pending' | 'error' | 'success';
 declare const DEFAULT_TERN_SECURE_STATE: TernSecureState;
 interface TernSecureAuthProvider {
     /** Current auth state */
@@ -805,8 +609,8 @@ interface TernSecureAuthProvider {
     /** Sign out the current user */
     signOut(): Promise<void>;
 }
-type Persistence = "local" | "session" | "browserCookie" | "none";
-type Mode$1 = "browser" | "server";
+type Persistence = 'local' | 'session' | 'browserCookie' | 'none';
+type Mode$1 = 'browser' | 'server';
 type TernAuthSDK = {
     /** SDK package name (e.g., @tern-secure/auth) */
     name: string;
@@ -828,6 +632,11 @@ interface TernSecureResources {
     user?: TernSecureUser | null;
     session?: SignedInSession | null;
 }
+type CreateActiveSessionParams = {
+    session?: TernSecureUser | null;
+    redirectUrl?: string;
+};
+type CreateActiveSession = (params: CreateActiveSessionParams) => Promise<void>;
 type TernSecureAuthOptions = {
     apiUrl?: string;
     sdkMetadata?: TernAuthSDK;
@@ -858,7 +667,7 @@ type EventHandler<Events extends TernSecureEvent> = (payload: TernAuthEventPaylo
 type TernAuthEventPayload = {
     status: TernSecureAuthStatus;
 };
-type TernSecureAuthStatus = "error" | "loading" | "ready";
+type TernSecureAuthStatus = 'error' | 'loading' | 'ready';
 type onEventListener = <E extends TernSecureEvent>(event: E, handler: EventHandler<E>, opt?: {
     notify?: boolean;
 }) => void;
@@ -897,6 +706,14 @@ interface TernSecureAuth {
     requiresVerification: boolean;
     /** Initialize TernSecureAuth */
     initialize(options?: TernSecureAuthOptions): Promise<void>;
+    /**
+     * @internal
+     */
+    _internal_getOption<K extends keyof TernSecureAuthOptions>(key: K): TernSecureAuthOptions[K];
+    /**
+     * @internal
+     */
+    _internal_getAllOptions(): Readonly<TernSecureAuthOptions>;
     /** Current user*/
     user: TernSecureUser | null | undefined;
     /** Current session */
@@ -915,8 +732,26 @@ interface TernSecureAuth {
     on: onEventListener;
     /** Remove event listener */
     off: OffEventListener;
+    /** Subscribe to all auth state changes */
     addListener: (callback: ListenerCallback) => UnsubscribeCallback;
+    /** Get redirect result from OAuth flows */
+    getRedirectResult: () => Promise<any>;
+    /** Create an active session */
+    createActiveSession: CreateActiveSession;
+    /** Navigate to SignIn page */
+    redirectToSignIn(options?: SignInRedirectOptions): Promise<unknown>;
+    /** Navigate to SignUp page */
+    redirectToSignUp(options?: SignUpRedirectOptions): Promise<unknown>;
+    redirectAfterSignIn: () => void;
+    redirectAfterSignUp: () => void;
 }
+type SignUpFormValues = {
+    email: string;
+    password: string;
+    confirmPassword?: string;
+    displayName?: string;
+};
+type SignUpInitialValue = Partial<SignUpFormValues>;
 interface TernSecureAuthFactory {
     create(options?: TernSecureAuthOptions): TernSecureAuth;
 }
@@ -938,6 +773,166 @@ type TernVerificationResult = (DecodedIdToken & {
     valid: false;
     error: AuthErrorResponse;
 };
+/**
+ * Props for SignIn component focusing on UI concerns
+ */
+type SignInProps = {
+    /** Routing Path */
+    path?: string;
+    /** URL to navigate to after successfully sign-in */
+    forceRedirectUrl?: string | null;
+    /** Initial form values */
+    initialValue?: SignInInitialValue;
+    /** Callbacks */
+    onSuccess?: (user: TernSecureUser | null) => void;
+} & SignUpRedirectUrl;
+/**
+ * Props for SignUp component focusing on UI concerns
+ */
+type SignUpProps = {
+    /** URL to navigate to after successfully sign-up */
+    forceRedirectUrl?: string | null;
+    /** Initial form values */
+    initialValue?: SignUpInitialValue;
+    /** Callbacks */
+    onSubmit?: (values: SignUpFormValues) => Promise<void>;
+    onSuccess?: (user: TernSecureUser | null) => void;
+} & SignInRedirectUrl;
+type SignInRedirectOptions = RedirectOptions;
+type SignUpRedirectOptions = RedirectOptions;
+
+/**
+ * Defines the basic structure for color theming.
+ */
+interface ThemeColors {
+    primary?: string;
+    secondary?: string;
+    accent?: string;
+    background?: string;
+    text?: string;
+    error?: string;
+    success?: string;
+}
+/**
+ * Defines the basic structure for font theming.
+ */
+interface ThemeFonts {
+    primary?: string;
+    secondary?: string;
+}
+/**
+ * Defines the basic structure for spacing and layout theming.
+ */
+interface ThemeSpacing {
+    small?: string | number;
+    medium?: string | number;
+    large?: string | number;
+}
+/**
+ * Defines the basic structure for border radius theming.
+ */
+interface ThemeBorderRadius {
+    small?: string | number;
+    medium?: string | number;
+    large?: string | number;
+}
+/**
+ * Allows for overriding styles of specific UI components.
+ * Properties can be CSS-in-JS objects or class names, depending on implementation.
+ */
+interface ThemeComponentStyles {
+    button?: Record<string, any> | string;
+    input?: Record<string, any> | string;
+    card?: Record<string, any> | string;
+    label?: Record<string, any> | string;
+}
+/**
+ * Defines the overall appearance/theme configuration.
+ * This allows for broad customization of the UI components.
+ */
+interface Appearance {
+    colors?: ThemeColors;
+    fonts?: ThemeFonts;
+    spacing?: ThemeSpacing;
+    borderRadius?: ThemeBorderRadius;
+    componentStyles?: ThemeComponentStyles;
+    variables?: Record<string, string | number>;
+}
+/**
+ * Base UI configuration shared between SignIn and SignUp
+ */
+interface BaseAuthUIConfig {
+    /** Visual appearance configuration */
+    appearance?: Appearance;
+    /** Application logo URL or SVG string */
+    logo?: string;
+    /** Application name for display */
+    appName?: string;
+    /** Render mode for cross-platform support */
+    renderMode?: 'modal' | 'page' | 'embedded';
+    /** Layout direction */
+    layout?: 'vertical' | 'horizontal';
+    /** Custom loading message */
+    loadingMessage?: string;
+    /** Loading spinner variant */
+    loadingSpinnerVariant?: 'circular' | 'linear' | 'dots';
+    /** Accessibility configuration */
+    a11y?: {
+        /** ARIA labels and descriptions */
+        labels?: Record<string, string>;
+        /** Element to receive initial focus */
+        initialFocus?: string;
+        /** Whether to trap focus within the auth UI */
+        trapFocus?: boolean;
+    };
+}
+/**
+ * Sign-in specific UI configuration
+ */
+interface SignInUIConfig extends BaseAuthUIConfig {
+    /** Social sign-in buttons configuration */
+    socialButtons?: {
+        google?: boolean;
+        microsoft?: boolean;
+        github?: boolean;
+        facebook?: boolean;
+        twitter?: boolean;
+        apple?: boolean;
+        linkedin?: boolean;
+        layout?: 'vertical' | 'horizontal';
+        size?: 'small' | 'medium' | 'large';
+    };
+    /** "Remember me" checkbox configuration */
+    rememberMe?: {
+        enabled?: boolean;
+        defaultChecked?: boolean;
+    };
+    /** Sign-up link configuration */
+    signUpLink?: {
+        enabled?: boolean;
+        text?: string;
+        href?: string;
+    };
+}
+/**
+ * Sign-up specific UI configuration
+ */
+interface SignUpUIConfig extends BaseAuthUIConfig {
+    /** Password requirements display configuration */
+    passwordRequirements?: {
+        show?: boolean;
+        rules?: Array<{
+            rule: string;
+            description: string;
+        }>;
+    };
+    /** Terms and conditions configuration */
+    terms?: {
+        enabled?: boolean;
+        text?: string;
+        link?: string;
+    };
+}
 
 type Mode = 'browser' | 'server';
 type TernSecureSDK = {
@@ -1025,9 +1020,9 @@ interface TernSecureInstanceTree {
     /** Construct URL with redirect parameters */
     constructUrlWithAuthRedirect: (to: string) => string;
     /** Navigate to SignIn page */
-    redirectToSignIn(options?: SignInRedirectOptions): Promise<unknown>;
+    redirectToSignIn(options?: SignInRedirectOptionss): Promise<unknown>;
     /** Navigate to SignUp page */
-    redirectToSignUp(options?: SignUpRedirectOptions): Promise<unknown>;
+    redirectToSignUp(options?: SignUpRedirectOptionss): Promise<unknown>;
     redirectAfterSignIn: () => void;
     redirectAfterSignUp: () => void;
     /** Error and Event Handling */
@@ -1073,7 +1068,7 @@ type SignInPropsTree = {
     /** URL to navigate to after successfully sign-in */
     forceRedirectUrl?: string | null;
     /** Initial form values */
-    initialValue?: SignInInitialValueTree;
+    initialValue?: SignInInitialValue;
     /** UI configuration */
     ui?: SignInUIConfig;
     /** Callbacks */
@@ -1095,8 +1090,8 @@ type SignUpPropsTree = {
     onError?: (error: AuthErrorTree) => void;
     onSuccess?: (user: TernSecureUser | null) => void;
 } & SignInRedirectUrl;
-type SignInRedirectOptions = RedirectOptions;
-type SignUpRedirectOptions = RedirectOptions;
+type SignInRedirectOptionss = RedirectOptions;
+type SignUpRedirectOptionss = RedirectOptions;
 
 interface TernSecureApiErrorJSON {
     code: string;
@@ -1106,6 +1101,10 @@ interface TernSecureFireRestErrorJSON extends TernSecureApiErrorJSON {
     domain: string;
     reason: string;
 }
+interface SessionJson extends IdTokenResult {
+    status: SessionStatus;
+    user?: TernSecureUser;
+}
 
 type UseAuthReturn = {
     userId: string | null | undefined;
@@ -1113,10 +1112,9 @@ type UseAuthReturn = {
     isValid: boolean;
     isVerified: boolean;
     isAuthenticated: boolean;
-    token: any | null;
-    email: string | null;
     status: "loading" | "authenticated" | "unauthenticated" | "unverified";
     user?: TernSecureUser | null;
+    sessionClaims?: DecodedIdToken | null | undefined;
     signOut: SignOut;
 };
 type UseSignInReturn = {
@@ -1142,4 +1140,4 @@ type DomainOrProxyUrl = {
  */
 type Autocomplete<U extends T, T = string> = U | (T & Record<never, never>);
 
-export { type ActiveSession, type AdminConfigValidationResult, type AfterSignOutUrl, type Appearance, type AuthActions, type AuthEndpoint, type AuthError, type AuthErrorCode, type AuthErrorResponse, type AuthErrorTree, type AuthProviderStatus, type Autocomplete, type BaseAuthUIConfig, type CheckAuthorizationFromSessionClaims, type CheckCustomClaims, type ConfigValidationResult, type CookieOptions, type CookieOpts, type CookieStore, type CorsOptions, DEFAULT_TERN_SECURE_STATE, type DecodedIdToken, type DomainOrProxyUrl, ERRORS, type EndpointConfig, type ErrorCode, type ExpiredSession, type FirebaseClaims, type FirebaseState, type IdTokenResult, type InitialState, type InstanceType, type JWTPayload, type JWTProtectedHeader, type Jwt, type ListenerCallback, type ParsedToken, type PendingSession, type Persistence, type RateLimitOptions, type RedirectConfig, type RedirectOptions, type ResendEmailVerification, type SecurityOptions, type ServerConfigValidationResult, type SessionCookieConfig, type SessionEndpointConfig, type SessionParams, type SessionResult, type SessionStatus, type SessionSubEndpoint, type SharedSignInAuthObjectProperties, type SignInFormValuesTree, type SignInInitialValue, type SignInInitialValueTree, type SignInProps, type SignInPropsTree, type SignInRedirectOptions, type SignInRedirectUrl, type SignInResource, type SignInResponse, type SignInResponseTree, type SignInStatus, type SignInUIConfig, type SignOut, type SignOutOptions, type SignOutOptionsTree, type SignUpFormValuesTree, type SignUpInitialValue, type SignUpInitialValueTree, type SignUpProps, type SignUpPropsTree, type SignUpRedirectOptions, type SignUpRedirectUrl, type SignUpResource, type SignUpStatus, type SignUpUIConfig, type SignedInSession, type TernAuthEventPayload, type TernAuthListenerEvent, type TernAuthListenerEventPayload, type TernAuthSDK, type TernSecureAPIError, type TernSecureAdminConfig, type TernSecureApiErrorJSON, type TernSecureAuth, type TernSecureAuthFactory, type TernSecureAuthOptions, type TernSecureAuthProvider, type TernSecureAuthStatus, type TernSecureConfig, type TernSecureFireRestError, type TernSecureFireRestErrorJSON, type TernSecureHandlerOptions, type TernSecureInstance, type TernSecureInstanceOld, type TernSecureInstanceTree, type TernSecureInstanceTreeOptions, type TernSecureInstanceTreeStatus, type TernSecureOptions, type TernSecureResources, type TernSecureSDK, type TernSecureServerConfig, type TernSecureSession, type TernSecureSessionTree, type TernSecureState, type TernSecureUser, type TernSecureUserData, type TernVerificationResult, type ThemeBorderRadius, type ThemeColors, type ThemeComponentStyles, type ThemeFonts, type ThemeSpacing, type TokenCookieConfig, type UnsubscribeCallback, type UseAuthReturn, type UseSignInReturn, type UserInfo, type VerifiedTokens, isSignInResponse, isSignInResponseTree };
+export { type ActiveSession, type AdminConfigValidationResult, type AfterSignOutUrl, type Appearance, type AuthEndpoint, type AuthErrorCode, type AuthErrorResponse, type AuthErrorTree, type AuthProviderStatus, type Autocomplete, type BaseAuthUIConfig, type CheckAuthorizationFromSessionClaims, type CheckCustomClaims, type ConfigValidationResult, type CookieEndpointConfig, type CookieOptions, type CookieOpts, type CookieResource, type CookieStore, type CookieSubEndpoint, type CorsOptions, type CreateActiveSession, type CreateActiveSessionParams, DEFAULT_TERN_SECURE_STATE, type DecodedIdToken, type DomainOrProxyUrl, ERRORS, type EndpointConfig, type ErrorCode, type ExpiredSession, type FirebaseClaims, type FirebaseState, type IdTokenResult, type IdTokenResult_DEPRECATED, type InitialState, type InstanceType, type JWTPayload, type JWTProtectedHeader, type Jwt, type ListenerCallback, type ParsedToken, type PendingSession, type Persistence, type ProviderUserInfo, type RateLimitOptions, type RedirectOptions, type ResendEmailVerification, type SecurityOptions, type ServerConfigValidationResult, type SessionCookieConfig, type SessionEndpointConfig, type SessionJson, type SessionParams, type SessionResource, type SessionResult, type SessionStatus, type SessionSubEndpoint, type SharedSignInAuthObjectProperties, type SignInErrorResponse, type SignInFormValues, type SignInInitialValue, type SignInPendingResponse, type SignInProps, type SignInPropsTree, type SignInRedirectOptions, type SignInRedirectOptionss, type SignInRedirectUrl, type SignInResource, type SignInResponse, type SignInStatus, type SignInSuccessResponse, type SignInUIConfig, type SignOut, type SignOutOptions, type SignOutOptionsTree, type SignUpFormValues, type SignUpFormValuesTree, type SignUpInitialValue, type SignUpInitialValueTree, type SignUpProps, type SignUpPropsTree, type SignUpRedirectOptions, type SignUpRedirectOptionss, type SignUpRedirectUrl, type SignUpResource, type SignUpStatus, type SignUpUIConfig, type SignedInSession, type TernAuthEventPayload, type TernAuthListenerEvent, type TernAuthListenerEventPayload, type TernAuthSDK, type TernSecureAPIError, type TernSecureAdminConfig, type TernSecureApiErrorJSON, type TernSecureAuth, type TernSecureAuthFactory, type TernSecureAuthOptions, type TernSecureAuthProvider, type TernSecureAuthStatus, type TernSecureConfig, type TernSecureFireRestError, type TernSecureFireRestErrorJSON, type TernSecureHandlerOptions, type TernSecureInstance, type TernSecureInstanceTree, type TernSecureInstanceTreeOptions, type TernSecureInstanceTreeStatus, type TernSecureOptions, type TernSecureResources, type TernSecureSDK, type TernSecureServerConfig, type TernSecureSessionTree, type TernSecureState, type TernSecureStateExtended, type TernSecureUser, type TernSecureUserData, type TernVerificationResult, type ThemeBorderRadius, type ThemeColors, type ThemeComponentStyles, type ThemeFonts, type ThemeSpacing, type TokenCookieConfig, type UnsubscribeCallback, type UseAuthReturn, type UseSignInReturn, type UserCredential, type UserInfo, type VerifiedTokens, isSignInResponseTree };