@vef-framework-react/starter 2.1.12 → 2.2.1

package/dist/es/components/n-progress/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { Bar as e } from "./components/bar.js";
 import { Container as t } from "./components/container.js";
 import { nProgressEventEmitter as n } from "./event.js";

package/dist/es/components/not-found/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "../../constants/router.js";
 import { NotFoundIcon as e } from "./not-found-icon.js";
 import { Button as t, Center as n, Icon as r, Result as i } from "@vef-framework-react/components";

package/dist/es/components/not-found/not-found-icon.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { jsx as e, jsxs as t } from "@emotion/react/jsx-runtime";
 //#region src/components/not-found/not-found-icon.tsx
 function n(n) {

package/dist/es/components/router-provider/context.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { createContext as e, use as t } from "react";
 //#region src/components/router-provider/context.ts
 var n = e(null);

package/dist/es/components/router-provider/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useRouterContextHook as e } from "./context.js";
 import { useMemo as t } from "react";
 import { jsx as n } from "@emotion/react/jsx-runtime";

package/dist/es/components/theme-config-provider/global-style.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "@emotion/react";
 //#region src/components/theme-config-provider/global-style.ts
 function e() {

package/dist/es/components/theme-config-provider/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useColorModeEffect as e } from "./use-color-mode-effect.js";
 import { useThemeConfig as t } from "./use-theme-config.js";
 import { ConfigProvider as n } from "@vef-framework-react/components";

package/dist/es/components/theme-config-provider/use-color-mode-effect.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useThemeStore as e } from "../../stores/theme.js";
 import { useEffect as t } from "react";
 //#region src/components/theme-config-provider/use-color-mode-effect.ts

package/dist/es/components/theme-config-provider/use-theme-config.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useThemeStore as e } from "../../stores/theme.js";
 import { globalStyle as t } from "./global-style.js";
 import { useShallow as n } from "@vef-framework-react/core";

package/dist/es/constants/event.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 //#region src/constants/event.ts
 var e = "__vef_access_denied_event", t = "__vef_unauthenticated_event";
 //#endregion

package/dist/es/constants/index.js

@@ -1,3 +1,3 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "./event.js";
 import "./router.js";

package/dist/es/constants/router.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 //#region src/constants/router.ts
 var e = "/login", t = "/_common/login", n = "/", r = "/_layout", i = "/access-denied", a = "/_common/access-denied";
 //#endregion

package/dist/es/constants/storage.js

@@ -1 +1,2 @@
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 //#endregion

package/dist/es/helpers/api.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useAppStore as e } from "../stores/app.js";
 import { emitAccessDenied as t, emitUnauthenticated as n } from "./event.js";
 import { showErrorMessage as r, showInfoMessage as i, showSuccessMessage as a, showWarningMessage as o } from "@vef-framework-react/components";

package/dist/es/helpers/app-version.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { Button as e, Group as t, Icon as n, Text as r, globalCssVars as i, showInfoNotification as a } from "@vef-framework-react/components";
 import { joinPaths as o } from "@vef-framework-react/shared";
 import { Fragment as s, jsx as c, jsxs as l } from "@emotion/react/jsx-runtime";

package/dist/es/helpers/app.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { RouterContextHookProvider as e } from "../components/router-provider/context.js";
 import { App as t } from "../components/app/index.js";
 import { StrictMode as n } from "react";

package/dist/es/helpers/auth.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { LOGIN_ROUTE_PATH as e } from "../constants/router.js";
 import { useAppStore as t } from "../stores/app.js";
 //#region src/helpers/auth.ts

package/dist/es/helpers/event.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { ACCESS_DENIED_EVENT as e, UNAUTHENTICATED_EVENT as t } from "../constants/event.js";
 import { createEventEmitter as n } from "@vef-framework-react/shared";
 //#region src/helpers/event.ts

package/dist/es/helpers/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "./event.js";
 import "./api.js";
 import "./app-version.js";

package/dist/es/helpers/query.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { SYMBOL_PAGINATION as e, SYMBOL_SORT as t } from "@vef-framework-react/components";
 //#region src/helpers/query.ts
 function n(...e) {

package/dist/es/helpers/router.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { ACCESS_DENIED_ROUTE_PATH as e } from "../constants/router.js";
 import { useAppStore as t } from "../stores/app.js";
 import { useTabStore as n } from "../stores/tab.js";

package/dist/es/hooks/index.js

@@ -1,2 +1,2 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "./use-route-full-path.js";

package/dist/es/hooks/use-route-full-path.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useMemo as e } from "react";
 import { useLocation as t, useRouter as n } from "@tanstack/react-router";
 //#region src/hooks/use-route-full-path.ts

package/dist/es/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { ACCESS_DENIED_ROUTE_ID as e, ACCESS_DENIED_ROUTE_PATH as t, INDEX_ROUTE_ID as n, INDEX_ROUTE_PATH as r, LOGIN_ROUTE_ID as i, LOGIN_ROUTE_PATH as a } from "./constants/router.js";
 import { useAppStore as o } from "./stores/app.js";
 import { useTabStore as s } from "./stores/tab.js";

package/dist/es/routes/access-denied.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "../constants/router.js";
 import { AccessDenied as e } from "../components/access-denied/index.js";
 //#region src/routes/access-denied.ts

package/dist/es/routes/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "./access-denied.js";
 import "./layout.js";
 import "./login.js";

package/dist/es/routes/layout.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { ACCESS_DENIED_ROUTE_PATH as e, LOGIN_ROUTE_PATH as t } from "../constants/router.js";
 import { useAppStore as n } from "../stores/app.js";
 import { Error as r } from "../components/error/index.js";

package/dist/es/routes/login.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "../constants/router.js";
 import { useAppStore as e } from "../stores/app.js";
 import { Login as t } from "../components/login/index.js";

package/dist/es/routes/root.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { useAppStore as e } from "../stores/app.js";
 import { jsx as t } from "@emotion/react/jsx-runtime";
 import { Outlet as n, useLocation as r, useRouteContext as i } from "@tanstack/react-router";

package/dist/es/stores/app.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { createPersistedStore as e } from "@vef-framework-react/core";
 //#region src/stores/app.ts
 var t = e(() => ({ isAuthenticated: !1 }), {

package/dist/es/stores/index.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "./app.js";
 import "./tab.js";
 import "./theme.js";

package/dist/es/stores/tab.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import "../constants/router.js";
 import { createPersistedStore as e, originalState as t } from "@vef-framework-react/core";
 //#region src/stores/tab.ts

package/dist/es/stores/theme.js

@@ -1,4 +1,4 @@
-/*! @vef-framework-react/starter v2.1.12 made by Venus | 2026-05-07T08:00:51.476Z */
+/*! @vef-framework-react/starter v2.2.1 made by Venus | 2026-05-18T08:56:01.320Z */
 import { createPersistedStore as e } from "@vef-framework-react/core";
 import { omit as t } from "@vef-framework-react/shared";
 //#region src/stores/theme.ts

package/dist/types/components/index.d.ts

@@ -3,7 +3,7 @@ export { App, type AppProps } from './app';
 export { BaseLayout, type BaseLayoutProps } from './base-layout';
 export { Error } from './error';
 export { Layout, type LayoutProps } from './layout';
-export { Login, type LoginChallenge, type LoginParams, type LoginProps, type LoginResult, type PasswordLoginParams } from './login';
+export { Login, type LoginChallenge, type LoginChallengeRenderer, type LoginChallengeRendererProps, type LoginChallengeRenderers, type LoginParams, type LoginProps, type LoginResult, type PasswordLoginParams, type ResolveChallengeParams } from './login';
 export { NProgress, nProgressEventEmitter } from './n-progress';
 export { NotFound } from './not-found';
 export { RouterContextHookProvider, RouterProvider, type RouterProviderProps, type UseRouterContext } from './router-provider';

package/dist/types/components/login/index.d.ts

@@ -1,4 +1,4 @@
 import { LoginProps } from './props';
-export declare function Login({ logo, title, description, publicKey, onLogin }: LoginProps): React.ReactNode;
-export { type LoginChallenge, type LoginParams, type LoginResult, type PasswordLoginParams } from './payload';
-export { type LoginProps } from './props';
+export declare function Login({ logo, title, description, publicKey, onLogin, onResolveChallenge, challengeRenderers }: LoginProps): import("@emotion/react/jsx-runtime").JSX.Element;
+export { type LoginChallenge, type LoginParams, type LoginResult, type PasswordLoginParams, type ResolveChallengeParams } from './payload';
+export { type LoginChallengeRenderer, type LoginChallengeRendererProps, type LoginChallengeRenderers, type LoginProps } from './props';

package/dist/types/components/login/payload.d.ts

@@ -1,4 +1,5 @@
 import { AuthTokens } from '../../models';
+import { ResolvedChallenges } from '../../types/common';
 /**
  * The payload for login
  */
@@ -31,21 +32,19 @@ export interface PasswordLoginParams extends BaseLoginParams<string> {
 }
 /**
  * A challenge the user must complete during login (e.g., 2FA, department selection).
+ *
+ * When `Register['challenges']` is augmented by the consuming project, this becomes
+ * a discriminated union narrowed per `type`, with `data` typed to the augmented
+ * spec. Without augmentation, it degrades to `{ type: string; data: unknown }` —
+ * exactly today's wire shape.
  */
-export interface LoginChallenge {
-    /**
-     * The challenge type identifier (e.g., "totp", "select_department")
-     */
-    type: string;
-    /**
-     * Optional challenge-specific data
-     */
-    data?: unknown;
-    /**
-     * Whether the challenge is required
-     */
-    required: boolean;
-}
+export type LoginChallenge = {
+    [K in keyof ResolvedChallenges]: {
+        type: K;
+        data: ResolvedChallenges[K]["data"];
+        required: boolean;
+    };
+}[keyof ResolvedChallenges];
 /**
  * The result of a login attempt.
  * When a challenge is pending, tokens is undefined and challengeToken + challenge are set.
@@ -69,4 +68,24 @@ export interface LoginResult {
      */
     challenge?: LoginChallenge;
 }
+/**
+ * The payload for submitting a challenge response back to the server.
+ * Shape mirrors the backend security/auth.resolve_challenge action.
+ */
+export interface ResolveChallengeParams {
+    /**
+     * The token returned with the pending challenge that carries intermediate state.
+     */
+    challengeToken: string;
+    /**
+     * The challenge type identifier being resolved (must match the pending challenge).
+     */
+    type: string;
+    /**
+     * The user's answer to the challenge. The concrete shape is decided by each
+     * challenge type — e.g. a department id string for "department_selection",
+     * a TOTP code string for "totp", etc.
+     */
+    response: unknown;
+}
 export {};

package/dist/types/components/login/props.d.ts

@@ -1,9 +1,73 @@
 import { ReactNode } from 'react';
-import { LoginParams, LoginResult } from './payload';
+import { ResolvedChallenges } from '../../types/common';
+import { LoginChallenge, LoginParams, LoginResult, ResolveChallengeParams } from './payload';
 /**
- * The props of the Login component.
+ * Arguments passed to a challenge renderer. Renderers are stateless from the
+ * Login component's perspective — they consume `challenge` for prompt data
+ * and call `resolve` / `cancel` to drive the flow forward or backward.
+ *
+ * Parameterised by `K`, the specific challenge type the renderer is bound to.
+ * When projects augment `Register['challenges']`, `challenge.data` and the
+ * `resolve` argument are both narrowed to the corresponding spec entry.
  */
-export interface LoginProps {
+export interface LoginChallengeRendererProps<K extends keyof ResolvedChallenges = keyof ResolvedChallenges> {
+    /**
+     * The pending challenge to present (type identifier and challenge-specific data).
+     */
+    challenge: Extract<LoginChallenge, {
+        type: K;
+    }>;
+    /**
+     * Submit the user's answer to the current challenge. The concrete shape of
+     * `response` is dictated by the augmented `ResolvedChallenges[K]['response']`;
+     * without augmentation, it falls back to `unknown`.
+     * Returns once the resulting `LoginResult` has been applied — either the
+     * next challenge is shown or authentication completes and navigation runs.
+     */
+    resolve: (response: ResolvedChallenges[K]["response"]) => Promise<void>;
+    /**
+     * Abandon the challenge and return to the initial credentials form.
+     * The held challenge token is discarded; the user must log in again.
+     */
+    cancel: () => void;
+    /**
+     * Whether a resolve call is currently in flight. Useful for disabling
+     * submit buttons inside the renderer.
+     */
+    pending: boolean;
+    /**
+     * Encrypts a sensitive plaintext using the same scheme the initial login
+     * uses for credentials. Present only when the Login component received a
+     * `publicKey`; renderers handling sensitive responses (e.g. a new password
+     * for `password_change`) should call this before invoking `resolve`.
+     * Absent when no `publicKey` was configured.
+     *
+     * May throw if the underlying RSA encryption fails (invalid key, empty
+     * plaintext, etc.). Renderers should catch in their submit handler and
+     * surface a user-visible error rather than letting the rejection escape.
+     */
+    encrypt?: (plaintext: string) => string;
+}
+/**
+ * A renderer responsible for displaying and resolving a single challenge type.
+ * Business apps register one per challenge type they support; the Login
+ * component looks up the renderer by `challenge.type` at runtime.
+ */
+export type LoginChallengeRenderer<K extends keyof ResolvedChallenges = keyof ResolvedChallenges> = (props: LoginChallengeRendererProps<K>) => ReactNode;
+/**
+ * The full renderer registry — one renderer per known challenge type. When
+ * `Register['challenges']` is augmented, TypeScript enforces exhaustiveness
+ * (every declared challenge must have a renderer) and per-key typing of the
+ * `challenge.data` / `resolve` payloads.
+ */
+export type LoginChallengeRenderers = {
+    [K in keyof ResolvedChallenges]: LoginChallengeRenderer<K>;
+};
+/**
+ * The shared subset of LoginProps, independent of whether the flow may
+ * surface challenges.
+ */
+interface BaseLoginProps {
     /**
      * The logo of the login page.
      */
@@ -17,7 +81,8 @@ export interface LoginProps {
      */
     description?: string;
     /**
-     * The public key for encrypting the password.
+     * The public key for encrypting credentials (and sensitive challenge
+     * responses via `LoginChallengeRendererProps.encrypt`).
      */
     publicKey?: string;
     /**
@@ -25,3 +90,26 @@ export interface LoginProps {
      */
     onLogin: (params: LoginParams) => Promise<LoginResult>;
 }
+/**
+ * Challenge-aware Login wiring. `onResolveChallenge` and `challengeRenderers`
+ * are required together: a server that can return challenges needs both a
+ * transport (`onResolveChallenge`) and a presenter (`challengeRenderers`).
+ */
+interface LoginPropsWithChallenge {
+    onResolveChallenge: (params: ResolveChallengeParams) => Promise<LoginResult>;
+    challengeRenderers: LoginChallengeRenderers;
+}
+/**
+ * Login wiring for backends that never issue challenges.
+ */
+interface LoginPropsWithoutChallenge {
+    onResolveChallenge?: never;
+    challengeRenderers?: never;
+}
+/**
+ * The props of the Login component. Either both challenge hooks are wired
+ * up, or neither is — partial wiring would leave the UI stranded on a
+ * challenge it cannot dispatch.
+ */
+export type LoginProps = BaseLoginProps & (LoginPropsWithChallenge | LoginPropsWithoutChallenge);
+export {};

package/dist/types/index.d.ts

@@ -1,4 +1,4 @@
-export { type LoginChallenge, type LoginParams, type LoginResult, type PasswordLoginParams } from './components';
+export { type LoginChallenge, type LoginChallengeRenderer, type LoginChallengeRendererProps, type LoginChallengeRenderers, type LoginParams, type LoginProps, type LoginResult, type PasswordLoginParams, type ResolveChallengeParams } from './components';
 export { ACCESS_DENIED_ROUTE_ID, ACCESS_DENIED_ROUTE_PATH, INDEX_ROUTE_ID, INDEX_ROUTE_PATH, LOGIN_ROUTE_ID, LOGIN_ROUTE_PATH } from './constants';
 export { createApiClient, createApp, createRouter, dispatchCustomEvent, emitAccessDenied, emitUnauthenticated, extractQueryParams, handleClientLogout, noopMutationFn, setupAppVersionNotification, type ApiClientOptions, type AppChangelog, type AppVersionNotificationOptions, type RouterOptions } from './helpers';
 export { createAccessDeniedRouteOptions, createLayoutRouteOptions, createLoginRouteOptions, createRootRouteOptions } from './routes';

package/dist/types/types/common.d.ts

@@ -13,7 +13,8 @@ export interface UserMenu {
  * Extension registry for framework types.
  *
  * Projects augment this interface via `declare module` to refine
- * extensible fields such as `UserInfo['details']`.
+ * extensible fields such as `UserInfo['details']` or the set of
+ * login challenge types the backend may issue.
  *
  * @example
  * declare module "@vef-framework-react/starter" {
@@ -22,6 +23,13 @@ export interface UserMenu {
  *       department: string;
  *       organization: string;
  *     };
+ *     challenges: {
+ *       department_selection: {
+ *         data: { departments: Array<{ id: string; name: string }> };
+ *         response: string;
+ *       };
+ *       totp: { response: string };
+ *     };
  *   }
  * }
  */
@@ -34,6 +42,22 @@ export type UserDetails = Record<string, unknown>;
 type ResolvedUserDetails = Register extends {
     userDetails: infer T extends UserDetails;
 } ? T : UserDetails;
+/**
+ * Contract for a single login challenge type. `data` is the payload the
+ * server attaches to the challenge for the renderer to display; `response`
+ * is the value the renderer feeds back to `resolve`.
+ */
+export interface ChallengeSpec {
+    data?: unknown;
+    response: unknown;
+}
+/**
+ * Resolved challenge registry. Falls back to an open `Record` so codebases
+ * that never augment `Register['challenges']` retain today's loose typing.
+ */
+export type ResolvedChallenges = Register extends {
+    challenges: infer T extends Record<string, ChallengeSpec>;
+} ? T : Record<string, ChallengeSpec>;
 export interface UserInfo {
     id: string;
     name: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vef-framework-react/starter",
   "type": "module",
-  "version": "2.1.12",
+  "version": "2.2.1",
   "private": false,
   "description": "Starter for VEF framework",
   "author": {
@@ -54,20 +54,20 @@
     "react-dom": ">=19"
   },
   "dependencies": {
-    "@ant-design/icons": "^6.1.1",
+    "@ant-design/icons": "^6.2.2",
     "@emotion/react": "^11.14.0",
     "@tanem/react-nprogress": "^6.0.3",
     "compare-versions": "^6.1.1",
-    "lucide-react": "^1.9.0"
+    "lucide-react": "^1.16.0"
   },
   "devDependencies": {
-    "@tanstack/react-router": "^1.168.23",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
-    "@vef-framework-react/components": "2.1.12",
-    "@vef-framework-react/hooks": "2.1.12",
-    "@vef-framework-react/shared": "2.1.12",
-    "@vef-framework-react/core": "2.1.12"
+    "@tanstack/react-router": "^1.170.1",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
+    "@vef-framework-react/components": "2.2.1",
+    "@vef-framework-react/core": "2.2.1",
+    "@vef-framework-react/hooks": "2.2.1",
+    "@vef-framework-react/shared": "2.2.1"
   },
   "scripts": {
     "clean": "rimraf dist",