@zitadel/components 0.1.0-alpha.15 → 0.1.0-alpha.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +5 -1
  2. package/dist/atoms/index.d.mts +1 -1
  3. package/dist/atoms/index.mjs +1 -1
  4. package/dist/{atoms-BSwVl736.mjs → atoms-KC7OJWXZ.mjs} +138 -12
  5. package/dist/atoms-KC7OJWXZ.mjs.map +1 -0
  6. package/dist/default-CfF7GoLv.mjs +6 -0
  7. package/dist/default-CfF7GoLv.mjs.map +1 -0
  8. package/dist/{index-EC-BnGsx.d.mts → index-BniwXaIC.d.mts} +3 -1
  9. package/dist/{index-EC-BnGsx.d.mts.map → index-BniwXaIC.d.mts.map} +1 -1
  10. package/dist/{index-Bypr00UG.d.mts → index-DSZnfOJH.d.mts} +368 -17
  11. package/dist/index-DSZnfOJH.d.mts.map +1 -0
  12. package/dist/{index-BP3l3mje.d.mts → index-DjYJwejg.d.mts} +51 -4
  13. package/dist/index-DjYJwejg.d.mts.map +1 -0
  14. package/dist/index.d.mts +4 -4
  15. package/dist/index.mjs +4 -4
  16. package/dist/manifests.mjs +1 -1
  17. package/dist/orchestrator/index.d.mts +2 -2
  18. package/dist/orchestrator/index.mjs +2 -2
  19. package/dist/{orchestrator-Ty4uM5n_.mjs → orchestrator-BWqJw4Yl.mjs} +348 -25
  20. package/dist/orchestrator-BWqJw4Yl.mjs.map +1 -0
  21. package/dist/standalone.mjs +485 -34
  22. package/dist/tokens/index.d.mts +1 -1
  23. package/dist/tokens/index.mjs +1 -1
  24. package/dist/{tokens-C0j4iCrs.mjs → tokens-CbH2s1jV.mjs} +6 -4
  25. package/dist/tokens-CbH2s1jV.mjs.map +1 -0
  26. package/package.json +3 -2
  27. package/dist/atoms-BSwVl736.mjs.map +0 -1
  28. package/dist/default-BmX2ZEbg.mjs +0 -6
  29. package/dist/default-BmX2ZEbg.mjs.map +0 -1
  30. package/dist/index-BP3l3mje.d.mts.map +0 -1
  31. package/dist/index-Bypr00UG.d.mts.map +0 -1
  32. package/dist/orchestrator-Ty4uM5n_.mjs.map +0 -1
  33. package/dist/tokens-C0j4iCrs.mjs.map +0 -1
@@ -1,6 +1,6 @@
1
1
  import { t as AtomManifest } from "./manifest-DN5Al_Ur.mjs";
2
2
  import * as _$lit from "lit";
3
- import { LitElement, PropertyValues } from "lit";
3
+ import { LitElement, PropertyValues, nothing } from "lit";
4
4
 
5
5
  //#region src/atoms/zl-icon.d.ts
6
6
  /**
@@ -326,7 +326,7 @@ declare global {
326
326
  }
327
327
  } //# sourceMappingURL=zl-checkbox.d.ts.map
328
328
  //#endregion
329
- //#region ../api/dist/index-4CTwhwmD.d.mts
329
+ //#region ../api/dist/index-C4jNq61U.d.mts
330
330
  //#endregion
331
331
  //#region src/generated/model/activateFlowDefinitionParams.d.ts
332
332
  /**
@@ -1255,7 +1255,18 @@ type CreateFlow201Step = {
1255
1255
  /** Step-level localization keys. Resolved client-side via the `| t` LiquidJS filter.
1256
1256
  The backend never sends display text — only semantic keys.
1257
1257
  */
1258
- texts?: CreateFlow201StepTexts; /** Error message from a previous failed submission. */
1258
+ texts?: CreateFlow201StepTexts;
1259
+ /** Error from a previous failed submission. Field-validation failures
1260
+ carry localisation text keys: `error.<field>_<rule>` per violation
1261
+ (e.g. `error.email_required`; the `format` rule is spelled
1262
+ `error.<field>_invalid`), multiple violations joined with `"; "`.
1263
+ Field names appear verbatim, so clients localise unknown keys via
1264
+ the generic `error.field_<rule>` catalog entries. Other engine
1265
+ failures carry `error.*` catalog keys as well (e.g.
1266
+ `error.invalid_credentials`, `error.passkey_invalid`); a
1267
+ non-`error.` payload is an outcome token (e.g. `user_not_found`)
1268
+ that clients keep verbatim.
1269
+ */
1259
1270
  error?: string | null;
1260
1271
  /** Present only on terminal steps. Tells the frontend what to do:
1261
1272
  - redirect: navigate to redirect_uri immediately (OIDC/SAML done)
@@ -2247,7 +2258,8 @@ type CreateHandoff200 = {
2247
2258
  * OpenAPI spec version: 0.0.1
2248
2259
  */
2249
2260
  type CreateProject201 = {
2250
- /** The unique identifier of the project. */id: string;
2261
+ /** The unique identifier of the project. */id: string; /** The name of the project. */
2262
+ name: string;
2251
2263
  /** Secret which can be used for authentication when modifying the project.
2252
2264
  */
2253
2265
  projectSecret: string;
@@ -2280,6 +2292,7 @@ type CreateProject201 = {
2280
2292
  * OpenAPI spec version: 0.0.1
2281
2293
  */
2282
2294
  type CreateProjectBody = {
2295
+ /** The name of the project. */name: string;
2283
2296
  /** Origins which are allowed for previewing and testing the project.
2284
2297
  */
2285
2298
  previewOrigins?: string[];
@@ -2576,6 +2589,23 @@ type CreateSession201Session = {
2576
2589
  factor has been verified through an `auth_attempt`.
2577
2590
  */
2578
2591
  user_id?: string | null;
2592
+ /** Human-readable name of the authenticated user, resolved from the
2593
+ conventional user-schema properties: `name` when defined, otherwise
2594
+ the given and family name parts joined — `givenName`/`familyName`
2595
+ (the shipped presets' spelling) or `given_name`/`family_name`. Only
2596
+ present on reads that hydrate the user's identity
2597
+ (`GET /sessions/me`) and only when the session has an authenticated
2598
+ user whose schema carries those properties; clients fall back to
2599
+ `email`, then `user_id`.
2600
+ */
2601
+ name?: string;
2602
+ /** Email address of the authenticated user, resolved from the
2603
+ conventional `email` user-schema property. Only present on reads
2604
+ that hydrate the user's identity (`GET /sessions/me`) and only when
2605
+ the session has an authenticated user whose schema carries that
2606
+ property.
2607
+ */
2608
+ email?: string;
2579
2609
  /** Verified authentication factors accumulated by this session.
2580
2610
  Each key is a factor type (e.g. `password`, `totp`, `passkey`).
2581
2611
  Each value is a factor event object with at least `verified_at` and
@@ -3069,6 +3099,23 @@ type ExchangeHandoff200Session = {
3069
3099
  factor has been verified through an `auth_attempt`.
3070
3100
  */
3071
3101
  user_id?: string | null;
3102
+ /** Human-readable name of the authenticated user, resolved from the
3103
+ conventional user-schema properties: `name` when defined, otherwise
3104
+ the given and family name parts joined — `givenName`/`familyName`
3105
+ (the shipped presets' spelling) or `given_name`/`family_name`. Only
3106
+ present on reads that hydrate the user's identity
3107
+ (`GET /sessions/me`) and only when the session has an authenticated
3108
+ user whose schema carries those properties; clients fall back to
3109
+ `email`, then `user_id`.
3110
+ */
3111
+ name?: string;
3112
+ /** Email address of the authenticated user, resolved from the
3113
+ conventional `email` user-schema property. Only present on reads
3114
+ that hydrate the user's identity (`GET /sessions/me`) and only when
3115
+ the session has an authenticated user whose schema carries that
3116
+ property.
3117
+ */
3118
+ email?: string;
3072
3119
  /** Verified authentication factors accumulated by this session.
3073
3120
  Each key is a factor type (e.g. `password`, `totp`, `passkey`).
3074
3121
  Each value is a factor event object with at least `verified_at` and
@@ -4245,7 +4292,18 @@ type GetFlowStep200Step = {
4245
4292
  /** Step-level localization keys. Resolved client-side via the `| t` LiquidJS filter.
4246
4293
  The backend never sends display text — only semantic keys.
4247
4294
  */
4248
- texts?: GetFlowStep200StepTexts; /** Error message from a previous failed submission. */
4295
+ texts?: GetFlowStep200StepTexts;
4296
+ /** Error from a previous failed submission. Field-validation failures
4297
+ carry localisation text keys: `error.<field>_<rule>` per violation
4298
+ (e.g. `error.email_required`; the `format` rule is spelled
4299
+ `error.<field>_invalid`), multiple violations joined with `"; "`.
4300
+ Field names appear verbatim, so clients localise unknown keys via
4301
+ the generic `error.field_<rule>` catalog entries. Other engine
4302
+ failures carry `error.*` catalog keys as well (e.g.
4303
+ `error.invalid_credentials`, `error.passkey_invalid`); a
4304
+ non-`error.` payload is an outcome token (e.g. `user_not_found`)
4305
+ that clients keep verbatim.
4306
+ */
4249
4307
  error?: string | null;
4250
4308
  /** Present only on terminal steps. Tells the frontend what to do:
4251
4309
  - redirect: navigate to redirect_uri immediately (OIDC/SAML done)
@@ -4565,6 +4623,23 @@ type GetMySession200 = {
4565
4623
  factor has been verified through an `auth_attempt`.
4566
4624
  */
4567
4625
  user_id?: string | null;
4626
+ /** Human-readable name of the authenticated user, resolved from the
4627
+ conventional user-schema properties: `name` when defined, otherwise
4628
+ the given and family name parts joined — `givenName`/`familyName`
4629
+ (the shipped presets' spelling) or `given_name`/`family_name`. Only
4630
+ present on reads that hydrate the user's identity
4631
+ (`GET /sessions/me`) and only when the session has an authenticated
4632
+ user whose schema carries those properties; clients fall back to
4633
+ `email`, then `user_id`.
4634
+ */
4635
+ name?: string;
4636
+ /** Email address of the authenticated user, resolved from the
4637
+ conventional `email` user-schema property. Only present on reads
4638
+ that hydrate the user's identity (`GET /sessions/me`) and only when
4639
+ the session has an authenticated user whose schema carries that
4640
+ property.
4641
+ */
4642
+ email?: string;
4568
4643
  /** Verified authentication factors accumulated by this session.
4569
4644
  Each key is a factor type (e.g. `password`, `totp`, `passkey`).
4570
4645
  Each value is a factor event object with at least `verified_at` and
@@ -4742,7 +4817,11 @@ type GetOpenIDConfiguration200 = {
4742
4817
  * The current state of a project.
4743
4818
  */
4744
4819
  type GetProject200 = {
4745
- /** The unique identifier of the project. */id: string; /** The time when the project was created. */
4820
+ /** The unique identifier of the project. */id: string; /** The name of the project. */
4821
+ name: string;
4822
+ /** Origins which are allowed for previewing and testing the project.
4823
+ */
4824
+ previewOrigins?: string[]; /** The time when the project was created. */
4746
4825
  createdAt: string; /** The time when the project was last updated. */
4747
4826
  updatedAt: string;
4748
4827
  }; //#endregion
@@ -5030,6 +5109,23 @@ type GetSession200 = {
5030
5109
  factor has been verified through an `auth_attempt`.
5031
5110
  */
5032
5111
  user_id?: string | null;
5112
+ /** Human-readable name of the authenticated user, resolved from the
5113
+ conventional user-schema properties: `name` when defined, otherwise
5114
+ the given and family name parts joined — `givenName`/`familyName`
5115
+ (the shipped presets' spelling) or `given_name`/`family_name`. Only
5116
+ present on reads that hydrate the user's identity
5117
+ (`GET /sessions/me`) and only when the session has an authenticated
5118
+ user whose schema carries those properties; clients fall back to
5119
+ `email`, then `user_id`.
5120
+ */
5121
+ name?: string;
5122
+ /** Email address of the authenticated user, resolved from the
5123
+ conventional `email` user-schema property. Only present on reads
5124
+ that hydrate the user's identity (`GET /sessions/me`) and only when
5125
+ the session has an authenticated user whose schema carries that
5126
+ property.
5127
+ */
5128
+ email?: string;
5033
5129
  /** Verified authentication factors accumulated by this session.
5034
5130
  Each key is a factor type (e.g. `password`, `totp`, `passkey`).
5035
5131
  Each value is a factor event object with at least `verified_at` and
@@ -5819,6 +5915,23 @@ type ListSessions200SessionsItem = {
5819
5915
  factor has been verified through an `auth_attempt`.
5820
5916
  */
5821
5917
  user_id?: string | null;
5918
+ /** Human-readable name of the authenticated user, resolved from the
5919
+ conventional user-schema properties: `name` when defined, otherwise
5920
+ the given and family name parts joined — `givenName`/`familyName`
5921
+ (the shipped presets' spelling) or `given_name`/`family_name`. Only
5922
+ present on reads that hydrate the user's identity
5923
+ (`GET /sessions/me`) and only when the session has an authenticated
5924
+ user whose schema carries those properties; clients fall back to
5925
+ `email`, then `user_id`.
5926
+ */
5927
+ name?: string;
5928
+ /** Email address of the authenticated user, resolved from the
5929
+ conventional `email` user-schema property. Only present on reads
5930
+ that hydrate the user's identity (`GET /sessions/me`) and only when
5931
+ the session has an authenticated user whose schema carries that
5932
+ property.
5933
+ */
5934
+ email?: string;
5822
5935
  /** Verified authentication factors accumulated by this session.
5823
5936
  Each key is a factor type (e.g. `password`, `totp`, `passkey`).
5824
5937
  Each value is a factor event object with at least `verified_at` and
@@ -5951,7 +6064,200 @@ type ListUsersParams = {
5951
6064
  */
5952
6065
  limit?: number;
5953
6066
  }; //#endregion
5954
- //#region src/generated/model/revokeMySession401Details.d.ts
6067
+ //#region src/generated/model/patchProject200.d.ts
6068
+ /**
6069
+ * Generated by orval v8.10.0 🍺
6070
+ * Do not edit manually.
6071
+ * Zitadel NextGen
6072
+ * This is the next generation of the Zitadel identity platform.
6073
+ * OpenAPI spec version: 0.0.1
6074
+ */
6075
+ /**
6076
+ * The current state of a project.
6077
+ */
6078
+ type PatchProject200 = {
6079
+ /** The unique identifier of the project. */id: string; /** The name of the project. */
6080
+ name: string;
6081
+ /** Origins which are allowed for previewing and testing the project.
6082
+ */
6083
+ previewOrigins?: string[]; /** The time when the project was created. */
6084
+ createdAt: string; /** The time when the project was last updated. */
6085
+ updatedAt: string;
6086
+ }; //#endregion
6087
+ //#region src/generated/model/patchProject400Details.d.ts
6088
+ /**
6089
+ * Generated by orval v8.10.0 🍺
6090
+ * Do not edit manually.
6091
+ * Zitadel NextGen
6092
+ * This is the next generation of the Zitadel identity platform.
6093
+ * OpenAPI spec version: 0.0.1
6094
+ */
6095
+ /**
6096
+ * Additional error-specific context.
6097
+ */
6098
+ //#endregion
6099
+ //#region src/generated/model/patchProjectBody.d.ts
6100
+ /**
6101
+ * Generated by orval v8.10.0 🍺
6102
+ * Do not edit manually.
6103
+ * Zitadel NextGen
6104
+ * This is the next generation of the Zitadel identity platform.
6105
+ * OpenAPI spec version: 0.0.1
6106
+ */
6107
+ type PatchProjectBody = {
6108
+ /** The name of the project. */name?: null | string;
6109
+ }; //#endregion
6110
+ //#region src/generated/model/patchProjectDefaultDetails.d.ts
6111
+ /**
6112
+ * Generated by orval v8.10.0 🍺
6113
+ * Do not edit manually.
6114
+ * Zitadel NextGen
6115
+ * This is the next generation of the Zitadel identity platform.
6116
+ * OpenAPI spec version: 0.0.1
6117
+ */
6118
+ /**
6119
+ * Additional error-specific context.
6120
+ */
6121
+ //#endregion
6122
+ //#region src/generated/model/queryProjects200ProjectsItem.d.ts
6123
+ /**
6124
+ * Generated by orval v8.10.0 🍺
6125
+ * Do not edit manually.
6126
+ * Zitadel NextGen
6127
+ * This is the next generation of the Zitadel identity platform.
6128
+ * OpenAPI spec version: 0.0.1
6129
+ */
6130
+ /**
6131
+ * The current state of a project.
6132
+ */
6133
+ type QueryProjects200ProjectsItem = {
6134
+ /** The unique identifier of the project. */id: string; /** The name of the project. */
6135
+ name: string;
6136
+ /** Origins which are allowed for previewing and testing the project.
6137
+ */
6138
+ previewOrigins?: string[]; /** The time when the project was created. */
6139
+ createdAt: string; /** The time when the project was last updated. */
6140
+ updatedAt: string;
6141
+ }; //#endregion
6142
+ //#region src/generated/model/queryProjects200.d.ts
6143
+ /**
6144
+ * Paginated list of projects.
6145
+ */
6146
+ type QueryProjects200 = {
6147
+ projects: QueryProjects200ProjectsItem[];
6148
+ /** Token to pass as `page_token` in the next request to fetch the following page.
6149
+ Absent when there are no more results.
6150
+ */
6151
+ next_page_token?: string | null;
6152
+ }; //#endregion
6153
+ //#region src/generated/model/queryProjects400Details.d.ts
6154
+ /**
6155
+ * Generated by orval v8.10.0 🍺
6156
+ * Do not edit manually.
6157
+ * Zitadel NextGen
6158
+ * This is the next generation of the Zitadel identity platform.
6159
+ * OpenAPI spec version: 0.0.1
6160
+ */
6161
+ /**
6162
+ * Additional error-specific context.
6163
+ */
6164
+ //#endregion
6165
+ //#region src/generated/model/queryProjectsBodyFilterItemField.d.ts
6166
+ /**
6167
+ * Generated by orval v8.10.0 🍺
6168
+ * Do not edit manually.
6169
+ * Zitadel NextGen
6170
+ * This is the next generation of the Zitadel identity platform.
6171
+ * OpenAPI spec version: 0.0.1
6172
+ */
6173
+ type QueryProjectsBodyFilterItemField = (typeof QueryProjectsBodyFilterItemField)[keyof typeof QueryProjectsBodyFilterItemField];
6174
+ declare const QueryProjectsBodyFilterItemField: {
6175
+ readonly name: "name";
6176
+ readonly createdAt: "createdAt";
6177
+ }; //#endregion
6178
+ //#region src/generated/model/queryProjectsBodyFilterItemOperation.d.ts
6179
+ /**
6180
+ * Generated by orval v8.10.0 🍺
6181
+ * Do not edit manually.
6182
+ * Zitadel NextGen
6183
+ * This is the next generation of the Zitadel identity platform.
6184
+ * OpenAPI spec version: 0.0.1
6185
+ */
6186
+ /**
6187
+ * Filter operation defines the operations which can be used when filtering on a
6188
+ query endpoint.
6189
+
6190
+ */
6191
+ type QueryProjectsBodyFilterItemOperation = (typeof QueryProjectsBodyFilterItemOperation)[keyof typeof QueryProjectsBodyFilterItemOperation];
6192
+ declare const QueryProjectsBodyFilterItemOperation: {
6193
+ readonly equals: "equals";
6194
+ readonly not_equals: "not_equals";
6195
+ readonly contains: "contains";
6196
+ readonly not_contains: "not_contains";
6197
+ readonly less_than: "less_than";
6198
+ readonly less_than_or_equal: "less_than_or_equal";
6199
+ readonly greater_than: "greater_than";
6200
+ readonly greater_than_or_equal: "greater_than_or_equal";
6201
+ }; //#endregion
6202
+ //#region src/generated/model/queryProjectsBodyFilterItem.d.ts
6203
+ type QueryProjectsBodyFilterItem = {
6204
+ field: QueryProjectsBodyFilterItemField;
6205
+ /** Filter-value specifies which values can be filtered by a query endpoint. This
6206
+ is a union of types. When a value is specified which is not assignable to the
6207
+ field which is being filtered, a 400 error will be returned.
6208
+ */
6209
+ value?: string | number | boolean | null;
6210
+ /** Filter operation defines the operations which can be used when filtering on a
6211
+ query endpoint.
6212
+ */
6213
+ operation: QueryProjectsBodyFilterItemOperation;
6214
+ }; //#endregion
6215
+ //#region src/generated/model/queryProjectsBodySortingDirection.d.ts
6216
+ /**
6217
+ * Generated by orval v8.10.0 🍺
6218
+ * Do not edit manually.
6219
+ * Zitadel NextGen
6220
+ * This is the next generation of the Zitadel identity platform.
6221
+ * OpenAPI spec version: 0.0.1
6222
+ */
6223
+ type QueryProjectsBodySortingDirection = (typeof QueryProjectsBodySortingDirection)[keyof typeof QueryProjectsBodySortingDirection];
6224
+ declare const QueryProjectsBodySortingDirection: {
6225
+ readonly asc: "asc";
6226
+ readonly desc: "desc";
6227
+ }; //#endregion
6228
+ //#region src/generated/model/queryProjectsBodySortingField.d.ts
6229
+ /**
6230
+ * Generated by orval v8.10.0 🍺
6231
+ * Do not edit manually.
6232
+ * Zitadel NextGen
6233
+ * This is the next generation of the Zitadel identity platform.
6234
+ * OpenAPI spec version: 0.0.1
6235
+ */
6236
+ type QueryProjectsBodySortingField = (typeof QueryProjectsBodySortingField)[keyof typeof QueryProjectsBodySortingField];
6237
+ declare const QueryProjectsBodySortingField: {
6238
+ readonly name: "name";
6239
+ readonly createdAt: "createdAt";
6240
+ }; //#endregion
6241
+ //#region src/generated/model/queryProjectsBodySorting.d.ts
6242
+ type QueryProjectsBodySorting = {
6243
+ field: QueryProjectsBodySortingField;
6244
+ direction: QueryProjectsBodySortingDirection;
6245
+ }; //#endregion
6246
+ //#region src/generated/model/queryProjectsBody.d.ts
6247
+ /**
6248
+ * Request to query projects.
6249
+ */
6250
+ type QueryProjectsBody = {
6251
+ /**
6252
+ * @minimum 1
6253
+ * @maximum 100
6254
+ */
6255
+ limit?: number; /** Token to retrieve the next page of results. */
6256
+ page_token?: string | null;
6257
+ sorting?: QueryProjectsBodySorting; /** Filter criteria for querying projects. */
6258
+ filter?: QueryProjectsBodyFilterItem[];
6259
+ }; //#endregion
6260
+ //#region src/generated/model/queryProjectsDefaultDetails.d.ts
5955
6261
  /**
5956
6262
  * Generated by orval v8.10.0 🍺
5957
6263
  * Do not edit manually.
@@ -6524,7 +6830,18 @@ type SubmitFlowStep200Step = {
6524
6830
  /** Step-level localization keys. Resolved client-side via the `| t` LiquidJS filter.
6525
6831
  The backend never sends display text — only semantic keys.
6526
6832
  */
6527
- texts?: SubmitFlowStep200StepTexts; /** Error message from a previous failed submission. */
6833
+ texts?: SubmitFlowStep200StepTexts;
6834
+ /** Error from a previous failed submission. Field-validation failures
6835
+ carry localisation text keys: `error.<field>_<rule>` per violation
6836
+ (e.g. `error.email_required`; the `format` rule is spelled
6837
+ `error.<field>_invalid`), multiple violations joined with `"; "`.
6838
+ Field names appear verbatim, so clients localise unknown keys via
6839
+ the generic `error.field_<rule>` catalog entries. Other engine
6840
+ failures carry `error.*` catalog keys as well (e.g.
6841
+ `error.invalid_credentials`, `error.passkey_invalid`); a
6842
+ non-`error.` payload is an outcome token (e.g. `user_not_found`)
6843
+ that clients keep verbatim.
6844
+ */
6528
6845
  error?: string | null;
6529
6846
  /** Present only on terminal steps. Tells the frontend what to do:
6530
6847
  - redirect: navigate to redirect_uri immediately (OIDC/SAML done)
@@ -7951,19 +8268,33 @@ type ZlPasskeyResultDetail = {
7951
8268
  };
7952
8269
  /**
7953
8270
  * Detail shape emitted by the `zl-passkey-error` event.
8271
+ *
8272
+ * `aborted` covers both programmatic aborts and the browser's
8273
+ * `NotAllowedError` (user dismissed the prompt — or the ceremony timed
8274
+ * out, which browsers report identically). `timed_out` refines that:
8275
+ * true when the rejection arrived at/after the server's `options.timeout`,
8276
+ * so callers can show timeout copy instead of "cancelled".
7954
8277
  */
7955
8278
  type ZlPasskeyErrorDetail = {
7956
8279
  challenge_id: string;
7957
8280
  error: string;
7958
8281
  aborted: boolean;
8282
+ timed_out: boolean;
7959
8283
  };
7960
8284
  /**
7961
- * Atom: `<zl-passkey>` — invisible WebAuthn ceremony handler.
8285
+ * Atom: `<zl-passkey>` — WebAuthn ceremony handler.
8286
+ *
8287
+ * It is mounted by the Liquid template when
8288
+ * `step.challenge.type === "passkey"`. On mount, it reads the challenge
8289
+ * options from attributes, triggers the appropriate `navigator.credentials`
8290
+ * ceremony, and emits the result.
7962
8291
  *
7963
- * This component is intentionally invisible. It is mounted by the Liquid
7964
- * template when `step.challenge.type === "passkey"`. On mount, it reads
7965
- * the challenge options from attributes, triggers the appropriate
7966
- * `navigator.credentials` ceremony, and emits the result.
8292
+ * While the ceremony is in flight it renders a small pending UI (status
8293
+ * line + cancel button) into its light DOM — light DOM so the markup the
8294
+ * orchestrator renders through `unsafeHTML` stays byte-identical and the
8295
+ * step subtree is never rebuilt mid-ceremony (a rebuild would reconnect
8296
+ * this atom and restart the ceremony). Set `silent` to suppress the
8297
+ * pending UI entirely.
7967
8298
  *
7968
8299
  * The orchestrator listens for `zl-passkey-result` to auto-submit the
7969
8300
  * proof via `challenge_response` on the flow submit body.
@@ -8010,12 +8341,24 @@ declare class ZlPasskey extends LitElement {
8010
8341
  * The consumer must call `startCeremony()` manually.
8011
8342
  */
8012
8343
  accessor manual: boolean;
8344
+ /** Status line shown while the ceremony is in flight. Template-owned copy. */
8345
+ accessor pendingLabel: string;
8346
+ /** Label of the cancel button shown while the ceremony is in flight. */
8347
+ accessor cancelLabel: string;
8348
+ /** Suppresses the built-in pending UI (headless / custom-template use). */
8349
+ accessor silent: boolean;
8350
+ /** True from ceremony start until it resolves, rejects, or is aborted. */
8351
+ accessor pending: boolean;
8013
8352
  private abortController;
8353
+ /** `Date.now()` at ceremony start, for timeout classification on reject. */
8354
+ private startedAt;
8014
8355
  connectedCallback(): void;
8015
8356
  disconnectedCallback(): void;
8016
8357
  /**
8017
8358
  * Abort any in-flight WebAuthn ceremony. Called automatically when the
8018
- * component disconnects (step change, page navigation).
8359
+ * component disconnects (step change, page navigation) and by the
8360
+ * pending UI's cancel button. Clears `pending` immediately — the
8361
+ * ceremony's own `finally` no longer owns it (its controller is gone).
8019
8362
  */
8020
8363
  abort(): void;
8021
8364
  /**
@@ -8023,6 +8366,8 @@ declare class ZlPasskey extends LitElement {
8023
8366
  * or rejects on error/abort.
8024
8367
  */
8025
8368
  startCeremony(): Promise<void>;
8369
+ private handleCancelSubmit;
8370
+ render(): _$lit.TemplateResult<1> | typeof nothing;
8026
8371
  /**
8027
8372
  * `navigator.credentials.get()` — authentication ceremony.
8028
8373
  */
@@ -8043,7 +8388,13 @@ declare class ZlPasskey extends LitElement {
8043
8388
  private serializeCredential;
8044
8389
  private emitResult;
8045
8390
  private emitError;
8046
- /** Invisible component — no shadow DOM rendering needed. */
8391
+ private emitStarted;
8392
+ /**
8393
+ * Light DOM on purpose: the pending UI must land inside the
8394
+ * orchestrator's shadow root (where the step's adopted styles apply)
8395
+ * without altering the `unsafeHTML` step markup — runtime children don't
8396
+ * participate in its string comparison, so the ceremony never restarts.
8397
+ */
8047
8398
  createRenderRoot(): this;
8048
8399
  }
8049
8400
  declare const zlPasskeyManifest: AtomManifest;
@@ -8199,5 +8550,5 @@ declare global {
8199
8550
  }
8200
8551
  } //# sourceMappingURL=zl-select.d.ts.map
8201
8552
  //#endregion
8202
- export { ExchangeHandoff200 as $, zlCardManifest as $t, CreateFlow201StepGates as A, ListFlowDefinitionsParams as At, CreateSchemaBody as B, SetUserPasswordParams as Bt, CreateFlow201 as C, GetUserByIDParams as Ct, CreateFlow201StepActionsItem as D, IssueChallenge201 as Dt, CreateFlow201Step as E, IntrospectBody as Et, CreateFlowDefinitionBody as F, ListUsers200Item as Ft, CreateTeamBody as G, UpdateFlowDefinitionBody as Gt, CreateSession201 as H, SubmitFlowStep200 as Ht, CreateHandoff200 as I, ListUsersParams as It, CreateUserBody as J, VerifyChallengeProofBody as Jt, CreateTeamParams as K, UpdateFlowDefinitionParams as Kt, CreateProject201 as L, RevokeSessionParams as Lt, CreateFlowBody as M, ListSchemasParams as Mt, CreateFlowBodyPurpose as N, ListSessions200 as Nt, CreateFlow201StepChallenge as O, IssueChallengeBody as Ot, CreateFlowDefinition201 as P, ListSessionsParams as Pt, EndSessionParams as Q, ZlCard as Qt, CreateProjectBody as R, RevokeTokenBody as Rt, CreateAuthAttemptBody as S, GetUserByID200 as St, CreateFlow201BrandingLayout as T, Introspect200 as Tt, CreateSessionBody as U, SubmitFlowStepBody as Ut, CreateSchemaParams as V, SubmitFlowEventBody as Vt, CreateTeam201 as W, UpdateFlowDefinition200 as Wt, DeactivateFlowDefinitionParams as X, ZlCheckboxChangeDetail as Xt, CreateUserParams as Y, ZlCheckbox as Yt, DeleteFlowDefinitionParams as Z, zlCheckboxManifest as Zt, AuthorizeDevice200 as _, GetSessionParams as _t, ZlPill as a, ZlIcon as an, GetFlowStep200 as at, AuthorizeGetParams as b, GetToken200 as bt, ZlPasskeyErrorDetail as c, GetLiveDefault as ct, ZlPageShell as d, GetOpenIDConfiguration200 as dt, ZlButton as en, ExchangeHandoffBody as et, zlPageShellManifest as f, GetProject200 as ft, ActivateFlowDefinitionParams as g, GetSession200 as gt, zlFieldManifest as h, GetSchemaByIdParams as ht, zlSelectManifest as i, IconName as in, GetFlowDefinitionParams as it, CreateFlow201StepSsoProvidersItem as j, ListSchemas200Item as jt, CreateFlow201StepFieldsItem as k, ListFlowDefinitions200 as kt, ZlPasskeyResultDetail as l, GetMySession200 as lt, ZlFieldType as m, GetSchemaById200 as mt, ZlSelectChangeDetail as n, ZlAlert as nn, GetAuthAttempt200 as nt, zlPillManifest as o, zlIconManifest as on, GetHealthDefault as ot, ZlField as p, GetReadyDefault as pt, CreateUser201 as q, VerifyChallengeProof200 as qt, ZlSelectOption as r, zlAlertManifest as rn, GetFlowDefinition200 as rt, ZlPasskey as s, GetKeys200 as st, ZlSelect as t, zlButtonManifest as tn, ExchangeHandoffParams as tt, zlPasskeyManifest as u, GetMyUser200 as ut, AuthorizeDeviceParams as v, GetTeam200 as vt, CreateFlow201Branding as w, GetUserInfo200 as wt, CreateAuthAttempt201 as x, GetTokenBody as xt, AuthorizeGetDefault as y, GetTeamParams as yt, CreateSchema201 as z, SetUserPasswordBody as zt };
8203
- //# sourceMappingURL=index-Bypr00UG.d.mts.map
8553
+ export { ExchangeHandoff200 as $, ZlCheckbox as $t, CreateFlow201StepGates as A, ListFlowDefinitionsParams as At, CreateSchemaBody as B, QueryProjectsBody as Bt, CreateFlow201 as C, GetUserByIDParams as Ct, CreateFlow201StepActionsItem as D, IssueChallenge201 as Dt, CreateFlow201Step as E, IntrospectBody as Et, CreateFlowDefinitionBody as F, ListUsers200Item as Ft, CreateTeamBody as G, SubmitFlowEventBody as Gt, CreateSession201 as H, RevokeTokenBody as Ht, CreateHandoff200 as I, ListUsersParams as It, CreateUserBody as J, UpdateFlowDefinition200 as Jt, CreateTeamParams as K, SubmitFlowStep200 as Kt, CreateProject201 as L, PatchProject200 as Lt, CreateFlowBody as M, ListSchemasParams as Mt, CreateFlowBodyPurpose as N, ListSessions200 as Nt, CreateFlow201StepChallenge as O, IssueChallengeBody as Ot, CreateFlowDefinition201 as P, ListSessionsParams as Pt, EndSessionParams as Q, VerifyChallengeProofBody as Qt, CreateProjectBody as R, PatchProjectBody as Rt, CreateAuthAttemptBody as S, GetUserByID200 as St, CreateFlow201BrandingLayout as T, Introspect200 as Tt, CreateSessionBody as U, SetUserPasswordBody as Ut, CreateSchemaParams as V, RevokeSessionParams as Vt, CreateTeam201 as W, SetUserPasswordParams as Wt, DeactivateFlowDefinitionParams as X, UpdateFlowDefinitionParams as Xt, CreateUserParams as Y, UpdateFlowDefinitionBody as Yt, DeleteFlowDefinitionParams as Z, VerifyChallengeProof200 as Zt, AuthorizeDevice200 as _, GetSessionParams as _t, ZlPill as a, zlButtonManifest as an, GetFlowStep200 as at, AuthorizeGetParams as b, GetToken200 as bt, ZlPasskeyErrorDetail as c, IconName as cn, GetLiveDefault as ct, ZlPageShell as d, GetOpenIDConfiguration200 as dt, ZlCheckboxChangeDetail as en, ExchangeHandoffBody as et, zlPageShellManifest as f, GetProject200 as ft, ActivateFlowDefinitionParams as g, GetSession200 as gt, zlFieldManifest as h, GetSchemaByIdParams as ht, zlSelectManifest as i, ZlButton as in, GetFlowDefinitionParams as it, CreateFlow201StepSsoProvidersItem as j, ListSchemas200Item as jt, CreateFlow201StepFieldsItem as k, ListFlowDefinitions200 as kt, ZlPasskeyResultDetail as l, ZlIcon as ln, GetMySession200 as lt, ZlFieldType as m, GetSchemaById200 as mt, ZlSelectChangeDetail as n, ZlCard as nn, GetAuthAttempt200 as nt, zlPillManifest as o, ZlAlert as on, GetHealthDefault as ot, ZlField as p, GetReadyDefault as pt, CreateUser201 as q, SubmitFlowStepBody as qt, ZlSelectOption as r, zlCardManifest as rn, GetFlowDefinition200 as rt, ZlPasskey as s, zlAlertManifest as sn, GetKeys200 as st, ZlSelect as t, zlCheckboxManifest as tn, ExchangeHandoffParams as tt, zlPasskeyManifest as u, zlIconManifest as un, GetMyUser200 as ut, AuthorizeDeviceParams as v, GetTeam200 as vt, CreateFlow201Branding as w, GetUserInfo200 as wt, CreateAuthAttempt201 as x, GetTokenBody as xt, AuthorizeGetDefault as y, GetTeamParams as yt, CreateSchema201 as z, QueryProjects200 as zt };
8554
+ //# sourceMappingURL=index-DSZnfOJH.d.mts.map