@vef-framework-react/starter 2.1.11 → 2.2.0

package/dist/es/components/n-progress/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { Bar as e } from "./components/bar.js";
 import { Container as t } from "./components/container.js";
 import { nProgressEventEmitter as n } from "./event.js";

package/dist/es/components/not-found/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "../../constants/router.js";
 import { NotFoundIcon as e } from "./not-found-icon.js";
 import { Button as t, Center as n, Icon as r, Result as i } from "@vef-framework-react/components";

package/dist/es/components/not-found/not-found-icon.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { jsx as e, jsxs as t } from "@emotion/react/jsx-runtime";
 //#region src/components/not-found/not-found-icon.tsx
 function n(n) {

package/dist/es/components/router-provider/context.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { createContext as e, use as t } from "react";
 //#region src/components/router-provider/context.ts
 var n = e(null);

package/dist/es/components/router-provider/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useRouterContextHook as e } from "./context.js";
 import { useMemo as t } from "react";
 import { jsx as n } from "@emotion/react/jsx-runtime";

package/dist/es/components/theme-config-provider/global-style.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "@emotion/react";
 //#region src/components/theme-config-provider/global-style.ts
 function e() {

package/dist/es/components/theme-config-provider/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useColorModeEffect as e } from "./use-color-mode-effect.js";
 import { useThemeConfig as t } from "./use-theme-config.js";
 import { ConfigProvider as n } from "@vef-framework-react/components";

package/dist/es/components/theme-config-provider/use-color-mode-effect.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useThemeStore as e } from "../../stores/theme.js";
 import { useEffect as t } from "react";
 //#region src/components/theme-config-provider/use-color-mode-effect.ts

package/dist/es/components/theme-config-provider/use-theme-config.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useThemeStore as e } from "../../stores/theme.js";
 import { globalStyle as t } from "./global-style.js";
 import { useShallow as n } from "@vef-framework-react/core";

package/dist/es/constants/event.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 //#region src/constants/event.ts
 var e = "__vef_access_denied_event", t = "__vef_unauthenticated_event";
 //#endregion

package/dist/es/constants/index.js

@@ -1,3 +1,3 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "./event.js";
 import "./router.js";

package/dist/es/constants/router.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 //#region src/constants/router.ts
 var e = "/login", t = "/_common/login", n = "/", r = "/_layout", i = "/access-denied", a = "/_common/access-denied";
 //#endregion

package/dist/es/constants/storage.js

@@ -1 +1,2 @@
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 //#endregion

package/dist/es/helpers/api.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useAppStore as e } from "../stores/app.js";
 import { emitAccessDenied as t, emitUnauthenticated as n } from "./event.js";
 import { showErrorMessage as r, showInfoMessage as i, showSuccessMessage as a, showWarningMessage as o } from "@vef-framework-react/components";

package/dist/es/helpers/app-version.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { Button as e, Group as t, Icon as n, Text as r, globalCssVars as i, showInfoNotification as a } from "@vef-framework-react/components";
 import { joinPaths as o } from "@vef-framework-react/shared";
 import { Fragment as s, jsx as c, jsxs as l } from "@emotion/react/jsx-runtime";

package/dist/es/helpers/app.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { RouterContextHookProvider as e } from "../components/router-provider/context.js";
 import { App as t } from "../components/app/index.js";
 import { StrictMode as n } from "react";

package/dist/es/helpers/auth.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { LOGIN_ROUTE_PATH as e } from "../constants/router.js";
 import { useAppStore as t } from "../stores/app.js";
 //#region src/helpers/auth.ts

package/dist/es/helpers/event.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { ACCESS_DENIED_EVENT as e, UNAUTHENTICATED_EVENT as t } from "../constants/event.js";
 import { createEventEmitter as n } from "@vef-framework-react/shared";
 //#region src/helpers/event.ts

package/dist/es/helpers/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "./event.js";
 import "./api.js";
 import "./app-version.js";

package/dist/es/helpers/query.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { SYMBOL_PAGINATION as e, SYMBOL_SORT as t } from "@vef-framework-react/components";
 //#region src/helpers/query.ts
 function n(...e) {

package/dist/es/helpers/router.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { ACCESS_DENIED_ROUTE_PATH as e } from "../constants/router.js";
 import { useAppStore as t } from "../stores/app.js";
 import { useTabStore as n } from "../stores/tab.js";

package/dist/es/hooks/index.js

@@ -1,2 +1,2 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "./use-route-full-path.js";

package/dist/es/hooks/use-route-full-path.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useMemo as e } from "react";
 import { useLocation as t, useRouter as n } from "@tanstack/react-router";
 //#region src/hooks/use-route-full-path.ts

package/dist/es/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { ACCESS_DENIED_ROUTE_ID as e, ACCESS_DENIED_ROUTE_PATH as t, INDEX_ROUTE_ID as n, INDEX_ROUTE_PATH as r, LOGIN_ROUTE_ID as i, LOGIN_ROUTE_PATH as a } from "./constants/router.js";
 import { useAppStore as o } from "./stores/app.js";
 import { useTabStore as s } from "./stores/tab.js";

package/dist/es/routes/access-denied.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "../constants/router.js";
 import { AccessDenied as e } from "../components/access-denied/index.js";
 //#region src/routes/access-denied.ts

package/dist/es/routes/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "./access-denied.js";
 import "./layout.js";
 import "./login.js";

package/dist/es/routes/layout.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { ACCESS_DENIED_ROUTE_PATH as e, LOGIN_ROUTE_PATH as t } from "../constants/router.js";
 import { useAppStore as n } from "../stores/app.js";
 import { Error as r } from "../components/error/index.js";

package/dist/es/routes/login.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "../constants/router.js";
 import { useAppStore as e } from "../stores/app.js";
 import { Login as t } from "../components/login/index.js";

package/dist/es/routes/root.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { useAppStore as e } from "../stores/app.js";
 import { jsx as t } from "@emotion/react/jsx-runtime";
 import { Outlet as n, useLocation as r, useRouteContext as i } from "@tanstack/react-router";

package/dist/es/stores/app.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { createPersistedStore as e } from "@vef-framework-react/core";
 //#region src/stores/app.ts
 var t = e(() => ({ isAuthenticated: !1 }), {

package/dist/es/stores/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "./app.js";
 import "./tab.js";
 import "./theme.js";

package/dist/es/stores/tab.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import "../constants/router.js";
 import { createPersistedStore as e, originalState as t } from "@vef-framework-react/core";
 //#region src/stores/tab.ts

package/dist/es/stores/theme.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.11 made by Venus | 2026-04-29T08:23:57.110Z */
+/*! @vef-framework-react/starter v2.2.0 made by Venus | 2026-05-18T05:49:20.358Z */
 import { createPersistedStore as e } from "@vef-framework-react/core";
 import { omit as t } from "@vef-framework-react/shared";
 //#region src/stores/theme.ts

package/dist/types/components/index.d.ts

@@ -3,7 +3,7 @@ export { App, type AppProps } from './app';
 export { BaseLayout, type BaseLayoutProps } from './base-layout';
 export { Error } from './error';
 export { Layout, type LayoutProps } from './layout';
-export { Login, type LoginChallenge, type LoginParams, type LoginProps, type LoginResult, type PasswordLoginParams } from './login';
+export { Login, type LoginChallenge, type LoginChallengeRenderer, type LoginChallengeRendererProps, type LoginParams, type LoginProps, type LoginResult, type PasswordLoginParams, type ResolveChallengeParams } from './login';
 export { NProgress, nProgressEventEmitter } from './n-progress';
 export { NotFound } from './not-found';
 export { RouterContextHookProvider, RouterProvider, type RouterProviderProps, type UseRouterContext } from './router-provider';

package/dist/types/components/login/index.d.ts

@@ -1,4 +1,4 @@
 import { LoginProps } from './props';
-export declare function Login({ logo, title, description, publicKey, onLogin }: LoginProps): React.ReactNode;
-export { type LoginChallenge, type LoginParams, type LoginResult, type PasswordLoginParams } from './payload';
-export { type LoginProps } from './props';
+export declare function Login({ logo, title, description, publicKey, onLogin, onResolveChallenge, challengeRenderers }: LoginProps): import("@emotion/react/jsx-runtime").JSX.Element;
+export { type LoginChallenge, type LoginParams, type LoginResult, type PasswordLoginParams, type ResolveChallengeParams } from './payload';
+export { type LoginChallengeRenderer, type LoginChallengeRendererProps, type LoginProps } from './props';

package/dist/types/components/login/payload.d.ts

@@ -69,4 +69,24 @@ export interface LoginResult {
      */
     challenge?: LoginChallenge;
 }
+/**
+ * The payload for submitting a challenge response back to the server.
+ * Shape mirrors the backend security/auth.resolve_challenge action.
+ */
+export interface ResolveChallengeParams {
+    /**
+     * The token returned with the pending challenge that carries intermediate state.
+     */
+    challengeToken: string;
+    /**
+     * The challenge type identifier being resolved (must match the pending challenge).
+     */
+    type: string;
+    /**
+     * The user's answer to the challenge. The concrete shape is decided by each
+     * challenge type — e.g. a department id string for "department_selection",
+     * a TOTP code string for "totp", etc.
+     */
+    response: unknown;
+}
 export {};

package/dist/types/components/login/props.d.ts

@@ -1,9 +1,57 @@
 import { ReactNode } from 'react';
-import { LoginParams, LoginResult } from './payload';
+import { LoginChallenge, LoginParams, LoginResult, ResolveChallengeParams } from './payload';
 /**
- * The props of the Login component.
+ * Arguments passed to a challenge renderer. Renderers are stateless from the
+ * Login component's perspective — they consume `challenge` for prompt data
+ * and call `resolve` / `cancel` to drive the flow forward or backward.
  */
-export interface LoginProps {
+export interface LoginChallengeRendererProps {
+    /**
+     * The pending challenge to present (type identifier and challenge-specific data).
+     */
+    challenge: LoginChallenge;
+    /**
+     * Submit the user's answer to the current challenge. The concrete shape of
+     * `response` is decided by each challenge type — renderers narrow it
+     * internally before calling this.
+     * Returns once the resulting `LoginResult` has been applied — either the
+     * next challenge is shown or authentication completes and navigation runs.
+     */
+    resolve: (response: unknown) => Promise<void>;
+    /**
+     * Abandon the challenge and return to the initial credentials form.
+     * The held challenge token is discarded; the user must log in again.
+     */
+    cancel: () => void;
+    /**
+     * Whether a resolve call is currently in flight. Useful for disabling
+     * submit buttons inside the renderer.
+     */
+    pending: boolean;
+    /**
+     * Encrypts a sensitive plaintext using the same scheme the initial login
+     * uses for credentials. Present only when the Login component received a
+     * `publicKey`; renderers handling sensitive responses (e.g. a new password
+     * for `password_change`) should call this before invoking `resolve`.
+     * Absent when no `publicKey` was configured.
+     *
+     * May throw if the underlying RSA encryption fails (invalid key, empty
+     * plaintext, etc.). Renderers should catch in their submit handler and
+     * surface a user-visible error rather than letting the rejection escape.
+     */
+    encrypt?: (plaintext: string) => string;
+}
+/**
+ * A renderer responsible for displaying and resolving a single challenge type.
+ * Business apps register one per challenge type they support; the Login
+ * component looks up the renderer by `challenge.type` at runtime.
+ */
+export type LoginChallengeRenderer = (props: LoginChallengeRendererProps) => ReactNode;
+/**
+ * The shared subset of LoginProps, independent of whether the flow may
+ * surface challenges.
+ */
+interface BaseLoginProps {
     /**
      * The logo of the login page.
      */
@@ -17,7 +65,8 @@ export interface LoginProps {
      */
     description?: string;
     /**
-     * The public key for encrypting the password.
+     * The public key for encrypting credentials (and sensitive challenge
+     * responses via `LoginChallengeRendererProps.encrypt`).
      */
     publicKey?: string;
     /**
@@ -25,3 +74,26 @@ export interface LoginProps {
      */
     onLogin: (params: LoginParams) => Promise<LoginResult>;
 }
+/**
+ * Challenge-aware Login wiring. `onResolveChallenge` and `challengeRenderers`
+ * are required together: a server that can return challenges needs both a
+ * transport (`onResolveChallenge`) and a presenter (`challengeRenderers`).
+ */
+interface LoginPropsWithChallenge {
+    onResolveChallenge: (params: ResolveChallengeParams) => Promise<LoginResult>;
+    challengeRenderers: Record<string, LoginChallengeRenderer>;
+}
+/**
+ * Login wiring for backends that never issue challenges.
+ */
+interface LoginPropsWithoutChallenge {
+    onResolveChallenge?: never;
+    challengeRenderers?: never;
+}
+/**
+ * The props of the Login component. Either both challenge hooks are wired
+ * up, or neither is — partial wiring would leave the UI stranded on a
+ * challenge it cannot dispatch.
+ */
+export type LoginProps = BaseLoginProps & (LoginPropsWithChallenge | LoginPropsWithoutChallenge);
+export {};

package/dist/types/index.d.ts

@@ -1,4 +1,4 @@
-export { type LoginChallenge, type LoginParams, type LoginResult, type PasswordLoginParams } from './components';
+export { type LoginChallenge, type LoginChallengeRenderer, type LoginChallengeRendererProps, type LoginParams, type LoginProps, type LoginResult, type PasswordLoginParams, type ResolveChallengeParams } from './components';
 export { ACCESS_DENIED_ROUTE_ID, ACCESS_DENIED_ROUTE_PATH, INDEX_ROUTE_ID, INDEX_ROUTE_PATH, LOGIN_ROUTE_ID, LOGIN_ROUTE_PATH } from './constants';
 export { createApiClient, createApp, createRouter, dispatchCustomEvent, emitAccessDenied, emitUnauthenticated, extractQueryParams, handleClientLogout, noopMutationFn, setupAppVersionNotification, type ApiClientOptions, type AppChangelog, type AppVersionNotificationOptions, type RouterOptions } from './helpers';
 export { createAccessDeniedRouteOptions, createLayoutRouteOptions, createLoginRouteOptions, createRootRouteOptions } from './routes';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vef-framework-react/starter",
   "type": "module",
-  "version": "2.1.11",
+  "version": "2.2.0",
   "private": false,
   "description": "Starter for VEF framework",
   "author": {
@@ -54,20 +54,20 @@
     "react-dom": ">=19"
   },
   "dependencies": {
-    "@ant-design/icons": "^6.1.1",
+    "@ant-design/icons": "^6.2.2",
     "@emotion/react": "^11.14.0",
     "@tanem/react-nprogress": "^6.0.3",
     "compare-versions": "^6.1.1",
-    "lucide-react": "^1.9.0"
+    "lucide-react": "^1.16.0"
   },
   "devDependencies": {
-    "@tanstack/react-router": "^1.168.23",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
-    "@vef-framework-react/hooks": "2.1.11",
-    "@vef-framework-react/core": "2.1.11",
-    "@vef-framework-react/shared": "2.1.11",
-    "@vef-framework-react/components": "2.1.11"
+    "@tanstack/react-router": "^1.170.1",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
+    "@vef-framework-react/components": "2.2.0",
+    "@vef-framework-react/core": "2.2.0",
+    "@vef-framework-react/hooks": "2.2.0",
+    "@vef-framework-react/shared": "2.2.0"
   },
   "scripts": {
     "clean": "rimraf dist",