@tinycloud/web-sdk 3.0.0-beta.10 → 3.0.0-beta.11

package/dist/credentials/element.d.ts

@@ -1,16 +1,31 @@
 import { type CredentialFlowDescriptor } from "@tinycloud/sdk-core";
-import type { CredentialAcquisitionTheme, CredentialInteractionSurface, InlineCredentialProofRequest, PrimitiveStepResult } from "./types";
+import type { CredentialAcquisitionTheme, CredentialInteractionSurface, CredentialProofSubject, InlineCredentialProofRequest, PrimitiveStepResult } from "./types";
 export declare const TINYCLOUD_CREDENTIAL_ACQUISITION_TAG = "tinycloud-credential-acquisition";
+/** Length of the mailbox code OpenCredentials issues for the `mailbox_otp` step. */
+export declare const MAILBOX_OTP_LENGTH = 8;
 declare const ElementBase: typeof HTMLElement;
+/**
+ * Reduces typed, pasted, or autofilled text to the mailbox code digits.
+ * Full-width digits are folded to ASCII, and a pasted sentence contributes
+ * only its first eight-digit group (optionally split as `1234 5678`).
+ */
+export declare function normalizeMailboxCode(value: string): string;
 /** SDK-owned Shadow-DOM view. It is deliberately unaware of locators, verifiers, sessions, and transport. */
 export declare class TinyCloudCredentialAcquisitionElement extends ElementBase {
     private root?;
     private resolver?;
     private rejecter?;
     private closed;
+    private subject?;
+    private codeTtlSeconds?;
     connectedCallback(): void;
     disconnectedCallback(): void;
     configure(theme?: CredentialAcquisitionTheme): void;
+    /** Context known before the first proof request, used for the opening state. */
+    prepare(input: {
+        readonly subject?: CredentialProofSubject;
+        readonly codeTtlSeconds?: number;
+    }): void;
     requestProof(request: InlineCredentialProofRequest): Promise<PrimitiveStepResult>;
     report(state: "signing" | "verifying" | "saving" | "success" | "recovery", message?: string): void;
     finish(): void;
@@ -18,6 +33,10 @@ export declare class TinyCloudCredentialAcquisitionElement extends ElementBase {
     isClosed(): boolean;
     private renderShell;
     private renderPrompt;
+    private settle;
+    private actions;
+    private mailboxForm;
+    private inputForm;
 }
 /** Registers the element once in a browser document. */
 export declare function defineTinyCloudCredentialAcquisitionElement(): void;
@@ -29,6 +48,7 @@ export declare class CredentialAcquisitionController {
         readonly descriptor: CredentialFlowDescriptor;
         readonly mountTarget?: Element | string;
         readonly theme?: CredentialAcquisitionTheme;
+        readonly subject?: CredentialProofSubject;
     });
     start(input: {
         readonly signal?: AbortSignal;

package/dist/credentials/interpreter.d.ts

@@ -1,5 +1,7 @@
 import { type CredentialFlowDescriptor, type CredentialProgressEvent, type CredentialRequirement } from "@tinycloud/sdk-core";
-import type { CredentialAcquisitionTransport, CredentialSigningAdapter, InlineCredentialProofHandler, PrimitiveStepHandler } from "./types";
+import type { CredentialAcquisitionTransport, CredentialProofSubject, CredentialSigningAdapter, InlineCredentialProofHandler, PrimitiveStepHandler } from "./types";
+/** The mailbox named by an email requirement, which the issuer delivers the code to. */
+export declare function mailboxSubject(requirement: CredentialRequirement): CredentialProofSubject | undefined;
 /** Finite step interpreter. Dispatch is exclusively by registered primitive and version. */
 export declare function interpretCredentialFlow(input: {
     readonly descriptor: CredentialFlowDescriptor;

package/dist/credentials/types.d.ts

@@ -72,8 +72,22 @@ export interface InlineCredentialProofRequest {
         readonly label: string;
         readonly schema: CredentialFlowDescriptor["inputs"][number]["schema"];
     }[];
+    /** Present when this step's previous proof was rejected and may be retried. */
+    readonly feedback?: {
+        readonly kind: "rejected";
+        readonly attemptsRemaining: number;
+    };
     readonly signal?: AbortSignal;
 }
+/**
+ * The mailbox a `mailbox_otp` code is sent to, copied from the digest-bound
+ * credential requirement. Only the SDK-owned inline view receives it; host
+ * proof handlers never see requirement values.
+ */
+export interface CredentialProofSubject {
+    readonly kind: "email";
+    readonly value: string;
+}
 export type InlineCredentialProofHandler = (input: InlineCredentialProofRequest) => Promise<PrimitiveStepResult>;
 export type CredentialInteractionKind = "popup" | "redirect" | "headless" | "inline";
 export interface CredentialInteractionSurface {