@zitadel/components 0.1.0-alpha.4 → 0.1.0-alpha.8

package/dist/manifest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;KAClC,CAAC;IACF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,CAAC"}

package/dist/manifests.d.ts

@@ -1,6 +0,0 @@
-import type { AtomManifest } from "./manifest.js";
-export declare const manifestRegistry: readonly AtomManifest[];
-export declare function findManifest(tag: string): AtomManifest | undefined;
-export declare function listKnownTags(): readonly string[];
-export type { AtomManifest } from "./manifest.js";
-//# sourceMappingURL=manifests.d.ts.map

package/dist/manifests.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifests.d.ts","sourceRoot":"","sources":["../src/manifests.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,eAAO,MAAM,gBAAgB,EAAE,SAAS,YAAY,EAS1C,CAAC;AAEX,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAElE;AAED,wBAAgB,aAAa,IAAI,SAAS,MAAM,EAAE,CAEjD;AAED,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/orchestrator/api-client.d.ts

@@ -1,33 +0,0 @@
-/**
- * Thin wrappers around the orval-generated `@zitadel/api` fetch
- * functions for the API operations the orchestrator drives:
- *
- * - `POST /flow`              — `createFlow`
- * - `POST /flow/{id}/submit`  — `submitFlowStep`
- * - `GET  /flow/{id}`         — `getFlowStep`
- * - `POST /sessions/exchange` — `exchangeHandoff`
- *
- * The wrappers exist for one reason: every API call must run with
- * `credentials: "include"` so the stateless `_zflow` HttpOnly cookie
- * round-trips. Centralising that here keeps every call site honest.
- *
- * Types come straight from `@zitadel/api/generated/model`. Orval
- * emits per-operation aliases (`CreateFlow201`, `GetFlowStep200`,
- * `SubmitFlowStep200`) for what is structurally the same response; the
- * orchestrator stores them as `CreateFlow201` because that is the alias
- * orval gives the start-of-flow response.
- */
-import type { ZitadelApi } from "@zitadel/api/config";
-import type { CreateFlow201, CreateFlowBody, ExchangeHandoff200, ExchangeHandoffBody, ExchangeHandoffParams, SubmitFlowStepBody } from "@zitadel/api/generated/model";
-export declare function startFlow(api: ZitadelApi, input: CreateFlowBody): Promise<CreateFlow201>;
-export declare function submitStep(api: ZitadelApi, id: string, body: SubmitFlowStepBody): Promise<CreateFlow201>;
-export declare function getCurrentStep(api: ZitadelApi, id: string): Promise<CreateFlow201>;
-/**
- * Exchange a terminal-flow `handoff_token` for an authenticated session.
- * The server sets the `__nextgen_session` HttpOnly cookie on success.
- *
- * Uses the generated `exchangeHandoff` client which handles the
- * `project_id` query parameter via {@link ExchangeHandoffParams}.
- */
-export declare function exchangeSession(api: ZitadelApi, body: ExchangeHandoffBody, params: ExchangeHandoffParams): Promise<ExchangeHandoff200>;
-//# sourceMappingURL=api-client.d.ts.map

package/dist/orchestrator/api-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/orchestrator/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAKtC,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAE9F;AAKD,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,aAAa,CAAC,CASxB;AAMD,wBAAsB,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAExF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/dist/orchestrator/branding-to-tokens.d.ts

@@ -1,28 +0,0 @@
-import type { ResolvedTheme } from "./theme-controller.js";
-import type { Branding } from "./branding.js";
-export type BrandingToTokensOptions = {
-    resolvedTheme?: ResolvedTheme;
-};
-/**
- * Build a CSS string of `:host { --zl-* }` declarations from a Branding
- * payload. Light values land on `:host`; dark overrides land on
- * `:host([data-theme="dark"])`.
- */
-export declare function buildBrandingStylesheet(branding: Branding | undefined, options?: BrandingToTokensOptions): string;
-/**
- * Adopt the design-system base token layer onto a `ShadowRoot`. Safe to call
- * many times — the underlying constructable sheet is shared across every
- * orchestrator instance and de-duplicated in the adopted list.
- */
-export declare function applyBaseTokens(shadowRoot: ShadowRoot): void;
-/**
- * Apply a branding payload as a `--zl-*` overrides layer on top of the base
- * token sheet. Subsequent calls replace the previous override sheet so a new
- * branding payload paints cleanly without leaking older declarations.
- *
- * Callers should run `applyBaseTokens(shadowRoot)` first (once per shadow
- * root) so the base values exist before branding patches them.
- */
-export declare function applyBrandingTokens(shadowRoot: ShadowRoot, branding: Branding | undefined, resolvedTheme: ResolvedTheme): void;
-export declare function resolveTheme(branding: Branding | undefined): ResolvedTheme;
-//# sourceMappingURL=branding-to-tokens.d.ts.map

package/dist/orchestrator/branding-to-tokens.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"branding-to-tokens.d.ts","sourceRoot":"","sources":["../../src/orchestrator/branding-to-tokens.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAsD,MAAM,eAAe,CAAC;AA8ClG,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAC9B,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAuBR;AAgGD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAa5D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAC9B,aAAa,EAAE,aAAa,GAC3B,IAAI,CAaN;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,CAa1E"}

package/dist/orchestrator/branding-validator.d.ts

@@ -1,7 +0,0 @@
-import type { Branding } from "./branding.js";
-export type BrandingValidationResult = {
-    branding: Branding | undefined;
-    issues: readonly string[];
-};
-export declare function validateBranding(input: Branding | undefined): BrandingValidationResult;
-//# sourceMappingURL=branding-validator.d.ts.map

package/dist/orchestrator/branding-validator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"branding-validator.d.ts","sourceRoot":"","sources":["../../src/orchestrator/branding-validator.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAI9C,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC/B,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,wBAAwB,CA6BtF"}

package/dist/orchestrator/branding.d.ts

@@ -1,76 +0,0 @@
-/**
- * Client-side branding shape consumed by the orchestrator.
- *
- * The five baseline wire fields (`layout`, `liquid_template`, `logo_url`,
- * `font_url`, `hero_url`) come straight from the orval-generated
- * `CreateFlow201Branding`. The v2 "structured extension" blocks (palette /
- * typography / shape / assets / theme) are deliberately client-only — see
- * `docs/design/branding/schema.md` "Proposed structured extension". Once
- * those land on the wire we drop the extension blocks here too.
- *
- * The validator (`branding-validator.ts`) strips fields the OpenAPI doesn't
- * model if a misconfigured tenant ever leaks them down through the wire.
- */
-import type { CreateFlow201Branding, CreateFlow201BrandingLayout } from "@zitadel/api/generated/model";
-export type FlowLayout = CreateFlow201BrandingLayout;
-export type BrandingPalette = {
-    primary?: string;
-    on_primary?: string;
-    background?: string;
-    surface?: string;
-    muted?: string;
-    border?: string;
-    text?: string;
-    text_muted?: string;
-    link?: string;
-    success?: string;
-    warning?: string;
-    error?: string;
-};
-export type BrandingTypography = {
-    font_family?: string;
-    font_family_mono?: string;
-    scale?: number;
-};
-export type BrandingShape = {
-    radius?: "none" | "sm" | "md" | "lg" | "full";
-    density?: "compact" | "regular" | "comfortable";
-};
-export type BrandingTheme = {
-    mode?: "light" | "dark" | "auto";
-    dark?: {
-        palette?: BrandingPalette;
-    };
-};
-export type BrandingAssets = {
-    logo_dark?: string;
-    favicon?: string;
-    background_image?: string;
-};
-/**
- * Wire shape (`CreateFlow201Branding`) plus the v2 client-only extension.
- * Structurally a superset, so any `CreateFlow201Branding` payload from the
- * wire is assignable to `Branding` without a cast.
- *
- * `attribution.show_zitadel` controls the "Secured with Zitadel" pill in
- * the orchestrator footer. Tenants set it to `false` only when they have a
- * licence that permits removing attribution (community / OSS deployments
- * always show it). The flag intentionally lives on `Branding` so it can
- * be overridden per-flow alongside the rest of the visual surface.
- */
-export type Branding = CreateFlow201Branding & {
-    palette?: BrandingPalette;
-    typography?: BrandingTypography;
-    shape?: BrandingShape;
-    assets?: BrandingAssets;
-    theme?: BrandingTheme;
-    attribution?: BrandingAttribution;
-};
-export type BrandingAttribution = {
-    show_zitadel?: boolean;
-    custom_link?: {
-        label: string;
-        href: string;
-    };
-};
-//# sourceMappingURL=branding.d.ts.map

package/dist/orchestrator/branding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/orchestrator/branding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC9C,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,eAAe,CAAC;KAC3B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG,qBAAqB,GAAG;IAC7C,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C,CAAC"}

package/dist/orchestrator/font-loader.d.ts

@@ -1,2 +0,0 @@
-export declare function applyFontUrl(shadowRoot: ShadowRoot, fontUrl: string | null | undefined): void;
-//# sourceMappingURL=font-loader.d.ts.map

package/dist/orchestrator/font-loader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"font-loader.d.ts","sourceRoot":"","sources":["../../src/orchestrator/font-loader.ts"],"names":[],"mappings":"AAaA,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAgB7F"}

package/dist/orchestrator/index.d.ts

@@ -1,23 +0,0 @@
-/**
- * Orchestrator surface: the `<zitadel-login>` and `<zitadel-logout>`
- * elements and their supporting primitives. Importing this barrel
- * side-effect-registers the elements.
- */
-import "./zitadel-login.js";
-import "./zitadel-logout.js";
-export { ZitadelLogin } from "./zitadel-login.js";
-export { ZitadelLogout } from "./zitadel-logout.js";
-export { applyBrandingTokens, buildBrandingStylesheet, resolveTheme, } from "./branding-to-tokens.js";
-export { ThemeController, type ResolvedTheme } from "./theme-controller.js";
-export { applyFontUrl } from "./font-loader.js";
-export { TEMPLATE_NAMES } from "./template-names.js";
-export { en, de, it, builtinLocales, type Locale } from "./locales/index.js";
-export { patchMandatoryGates, mandatoryGatesMarkerComment, MANDATORY_GATES_MARKER, } from "./mandatory-gates.js";
-export { createSanitiser } from "./sanitiser.js";
-export { default as defaultTemplate } from "./templates/default.liquid";
-export { default as layoutChromeCss } from "./templates/layout-chrome.css?inline";
-export { startFlow, submitStep, getCurrentStep } from "./api-client.js";
-export { validateBranding, type BrandingValidationResult } from "./branding-validator.js";
-export type { Branding, BrandingAssets, BrandingAttribution, BrandingPalette, BrandingShape, BrandingTheme, BrandingTypography, FlowLayout, } from "./branding.js";
-export type { FlowError, FlowIdentity, FlowMessage, LiquidContext, } from "./template-context.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/orchestrator/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/orchestrator/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,oBAAoB,CAAC;AAC5B,OAAO,qBAAqB,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAShD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,YAAY,EACV,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,uBAAuB,CAAC"}

package/dist/orchestrator/liquid.d.ts

@@ -1,31 +0,0 @@
-/**
- * LiquidJS engine factory for the `<zitadel-login>` orchestrator.
- *
- * Configures the engine per the security pipeline in
- * `docs/design/flowengine/template-security.md` and registers the
- * `| t` filter and `{% mandatory_gates %}` tag from
- * `docs/design/branding/templates.md`.
- *
- * Hard rules:
- *
- * - `{{ }}` output is HTML-escaped (LiquidJS default since v10).
- * - The `| raw` filter is overridden to a no-op string passthrough that still
- *   escapes (Layer 1 of the security pipeline).
- * - Partials are loaded from an in-memory map; no filesystem access.
- */
-import { Liquid } from "liquidjs";
-import type { Locale } from "./locales/en.js";
-export declare const TEMPLATE_NAMES: {
-    readonly default: "default";
-};
-export type CreateLiquidOptions = {
-    locale: Locale;
-    /**
-     * Additional in-memory templates merged on top of the bundled defaults.
-     * Useful for tests and for tenant-supplied `branding.liquid_template`
-     * (registered under {@link TEMPLATE_NAMES.default}).
-     */
-    templates?: Record<string, string>;
-};
-export declare function createLiquidEngine(options: CreateLiquidOptions): Liquid;
-//# sourceMappingURL=liquid.d.ts.map

package/dist/orchestrator/liquid.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"liquid.d.ts","sourceRoot":"","sources":["../../src/orchestrator/liquid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGlC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAI9C,eAAO,MAAM,cAAc;aACzB,OAAO,EAAE,SAAS;CACV,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAsGvE"}

package/dist/orchestrator/locales/de.d.ts

@@ -1,16 +0,0 @@
-/**
- * German locale dictionary.
- *
- * Structure mirrors {@link en} — same keys, translated values.
- *
- * Text keys are auto-generated by the server from the flow definition:
- *   - Step titles:       `<step>.title`
- *   - Step descriptions: `<step>.description`
- *   - Field labels:      `<step>.field.<field>`
- *   - Action labels:     `<step>.action.<action>`
- *
- * Copy aligned to Figma screens file `xkvBjkOJ8ENuHdTGZHXezK` (May 2026).
- */
-import type { Locale } from "./en.js";
-export declare const de: Locale;
-//# sourceMappingURL=de.d.ts.map

package/dist/orchestrator/locales/de.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"de.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/locales/de.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEtC,eAAO,MAAM,EAAE,EAAE,MAyJhB,CAAC"}

package/dist/orchestrator/locales/en.d.ts

@@ -1,19 +0,0 @@
-/**
- * Minimal English locale dictionary.
- *
- * The `| t` filter looks up `text_key` strings here. Missing keys fall through
- * to the raw key (matches the spec in
- * `docs/design/flowengine/flow-engine-guide.md`).
- *
- * Text keys are auto-generated by the server from the flow definition:
- *   - Step titles:       `<step>.title`
- *   - Step descriptions: `<step>.description`
- *   - Field labels:      `<step>.field.<field>`
- *   - Action labels:     `<step>.action.<action>`
- *
- * Copy aligned to Figma screens file `xkvBjkOJ8ENuHdTGZHXezK` (May 2026).
- * MVP only — multi-locale support is deferred.
- */
-export declare const en: Record<string, string>;
-export type Locale = Record<string, string>;
-//# sourceMappingURL=en.d.ts.map

package/dist/orchestrator/locales/en.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/locales/en.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA4JrC,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC"}

package/dist/orchestrator/locales/index.d.ts

@@ -1,13 +0,0 @@
-/**
- * Built-in locale registry.
- *
- * Re-exports the individual dictionaries and provides a `builtinLocales`
- * map so the orchestrator can resolve a BCP 47 language tag to the
- * matching dictionary at runtime.
- */
-export { en, type Locale } from "./en.js";
-export { de } from "./de.js";
-export { it } from "./it.js";
-import { type Locale } from "./en.js";
-export declare const builtinLocales: Readonly<Record<string, Locale>>;
-//# sourceMappingURL=index.d.ts.map

package/dist/orchestrator/locales/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/locales/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAM,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAI1C,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAkB,CAAC"}

package/dist/orchestrator/locales/it.d.ts

@@ -1,14 +0,0 @@
-/**
- * Italian locale dictionary.
- *
- * Structure mirrors {@link en} — same keys, translated values.
- *
- * Text keys are auto-generated by the server from the flow definition:
- *   - Step titles:       `<step>.title`
- *   - Step descriptions: `<step>.description`
- *   - Field labels:      `<step>.field.<field>`
- *   - Action labels:     `<step>.action.<action>`
- */
-import type { Locale } from "./en.js";
-export declare const it: Locale;
-//# sourceMappingURL=it.d.ts.map

package/dist/orchestrator/locales/it.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"it.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/locales/it.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEtC,eAAO,MAAM,EAAE,EAAE,MAyJhB,CAAC"}

package/dist/orchestrator/mandatory-gates.d.ts

@@ -1,26 +0,0 @@
-/**
- * `{% mandatory_gates %}` runtime patcher.
- *
- * Per `docs/design/branding/validator.md` §Runtime safety net:
- *
- *   "After the template finishes rendering, the tag inspects the produced DOM
- *    and appends:
- *      - Any required `fields[*]` without a matching `<zl-field>`.
- *      - Any required `gates[*]` without a matching consumer.
- *      - A primary `<zl-button type="submit">` if none was reached."
- *
- * Implementation: the LiquidJS `{% mandatory_gates %}` tag emits a unique
- * marker comment. After Liquid renders, this patcher parses the produced
- * HTML into a `<template>`, builds any missing atoms as real DOM elements,
- * replaces the marker with them, and serialises back to a string.
- *
- * Building elements via the DOM (`document.createElement` + `setAttribute`)
- * delegates HTML attribute escaping to the browser's serialiser — no manual
- * string-escaping in this module.
- */
-import type { CreateFlow201Step } from "@zitadel/api/generated/model";
-import type { Locale } from "./locales/en.js";
-export declare const MANDATORY_GATES_MARKER = "ZL_MANDATORY_GATES";
-export declare const mandatoryGatesMarkerComment = "<!--ZL_MANDATORY_GATES-->";
-export declare function patchMandatoryGates(html: string, step: CreateFlow201Step, locale: Locale): string;
-//# sourceMappingURL=mandatory-gates.d.ts.map

package/dist/orchestrator/mandatory-gates.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mandatory-gates.d.ts","sourceRoot":"","sources":["../../src/orchestrator/mandatory-gates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,eAAO,MAAM,2BAA2B,8BAAqC,CAAC;AAE9E,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,MAAM,GACb,MAAM,CAoBR"}

package/dist/orchestrator/resolve-api.d.ts

@@ -1,37 +0,0 @@
-import { type ZitadelApi, type ZitadelProject } from "@zitadel/api/config";
-/**
- * Declarative configuration read from an element's HTML attributes
- * (`project-id` / `proxy-path` / `url`). Empty strings mean "unset".
- */
-export interface ProjectAttrs {
-    readonly projectId: string;
-    readonly proxyPath: string;
-    readonly url: string;
-}
-/**
- * Resolves the effective SDK project handle and its typed API client for an
- * orchestrator element. Precedence, highest first:
- *
- * 1. the element's `project` property (an SDK handle set from JS / a framework),
- * 2. the global handle from `configureZitadel()`,
- * 3. the `project-id` / `proxy-path` / `url` attributes set declaratively in HTML.
- *
- * Both JS paths (property and global) win over the declarative attributes, so a
- * deliberate `configureZitadel()` is never silently overridden by fallback or
- * stale HTML attributes; the attributes are the no-JS fallback.
- *
- * Both `<zitadel-login>` and `<zitadel-logout>` need the same resolution and
- * the same "no config" failure, so it lives here rather than being copied
- * into each element. Callers run this inside their try/catch so a missing
- * configuration surfaces through the element's normal error path rather than
- * as an unhandled rejection.
- *
- * @param project Optional per-element override handle.
- * @param attrs Declarative config read from the element's attributes.
- * @param element Tag name used in the thrown error (e.g. `<zitadel-login>`).
- */
-export declare function resolveApi(project: ZitadelProject | undefined, attrs: ProjectAttrs, element: string): {
-    project: ZitadelProject;
-    api: ZitadelApi;
-};
-//# sourceMappingURL=resolve-api.d.ts.map

package/dist/orchestrator/resolve-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve-api.d.ts","sourceRoot":"","sources":["../../src/orchestrator/resolve-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAK7B;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAuCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,cAAc,GAAG,SAAS,EACnC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAS9C"}

package/dist/orchestrator/sanitiser.d.ts

@@ -1,6 +0,0 @@
-/**
- * Returns a sanitiser bound to the current manifest registry. Callers should
- * cache the result; rebuilding is cheap but allocates a fresh DOMPurify config.
- */
-export declare function createSanitiser(): (html: string) => string;
-//# sourceMappingURL=sanitiser.d.ts.map

package/dist/orchestrator/sanitiser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitiser.d.ts","sourceRoot":"","sources":["../../src/orchestrator/sanitiser.ts"],"names":[],"mappings":"AA0GA;;;GAGG;AACH,wBAAgB,eAAe,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAsB1D"}

package/dist/orchestrator/template-context.d.ts

@@ -1,55 +0,0 @@
-/**
- * Liquid template context contract.
- *
- * The orchestrator feeds tenant Liquid templates a stable, renderer-friendly
- * projection of the wire `CreateFlow201` shape. Capability dictionaries
- * (`fields`, `actions`, `gates`, `sso_providers`) are typed straight from
- * the orval-generated wire so templates iterate over the same schema the
- * server promises.
- *
- * The orchestrator owns three projections that don't exist on the wire:
- *
- * 1. `errors` — lifted from `step.error: string | null` so templates iterate
- *    uniformly even though the wire only carries one error string.
- * 2. `messages` — populated by orchestrator decoration hooks (info banners,
- *    sticky notices); not on the wire.
- * 3. `identity` — resolved client-side for greet-by-name; not on the wire.
- */
-import type { CreateFlow201Step, CreateFlow201StepActions, CreateFlow201StepChallenge, CreateFlow201StepFields, CreateFlow201StepGates, CreateFlow201StepSsoProvidersItem } from "@zitadel/api/generated/model";
-import type { Branding } from "./branding.js";
-export type FlowMessage = {
-    level: "info" | "warning";
-    text_key: string;
-};
-export type FlowError = {
-    code?: string;
-    text_key?: string;
-    message?: string;
-};
-export type FlowIdentity = {
-    display_name?: string;
-    email_address?: string;
-    avatar_url?: string;
-};
-/**
- * Liquid render context. The orchestrator builds this from the wire
- * `CreateFlow201` payload before invoking the engine.
- *
- * Capability dictionaries point at the orval wire shapes directly. The only
- * client-only pieces are `messages`, `identity`, `errors`, the resolved
- * `branding` (v2 superset), and `loading`.
- */
-export type LiquidContext = {
-    step: Pick<CreateFlow201Step, "name" | "complete" | "texts">;
-    fields: CreateFlow201StepFields;
-    actions: CreateFlow201StepActions;
-    gates: CreateFlow201StepGates;
-    sso_providers: readonly CreateFlow201StepSsoProvidersItem[];
-    challenge: CreateFlow201StepChallenge | null;
-    messages: readonly FlowMessage[];
-    identity: FlowIdentity | null;
-    errors: readonly FlowError[];
-    branding: Branding | Record<string, never>;
-    loading: boolean;
-};
-//# sourceMappingURL=template-context.d.ts.map

package/dist/orchestrator/template-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"template-context.d.ts","sourceRoot":"","sources":["../../src/orchestrator/template-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,iCAAiC,EAClC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,CAAC;IAC7D,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,EAAE,wBAAwB,CAAC;IAClC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,aAAa,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAC5D,SAAS,EAAE,0BAA0B,GAAG,IAAI,CAAC;IAC7C,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IACjC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IAC7B,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC"}

package/dist/orchestrator/template-names.d.ts

@@ -1,16 +0,0 @@
-/**
- * Names of the bundled Liquid templates the `<zitadel-login>` orchestrator
- * registers.
- *
- * This lives in its own module — separate from `liquid.ts` — so the public
- * barrel can re-export `TEMPLATE_NAMES` without dragging LiquidJS' `Liquid`
- * type (and its Node ambient-type requirements) into the published
- * declaration surface. See `liquid.ts` / the orchestrator barrel.
- */
-export declare const TEMPLATE_NAMES: {
-    readonly default: "default";
-    readonly authForm: "auth-form";
-    readonly passkeyUpsell: "passkey-upsell";
-    readonly signedIn: "signed-in";
-};
-//# sourceMappingURL=template-names.d.ts.map

package/dist/orchestrator/template-names.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"template-names.d.ts","sourceRoot":"","sources":["../../src/orchestrator/template-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;aACzB,OAAO,EAAE,SAAS;aAClB,QAAQ,EAAE,WAAW;aACrB,aAAa,EAAE,gBAAgB;aAC/B,QAAQ,EAAE,WAAW;CACb,CAAC"}

package/dist/orchestrator/theme-controller.d.ts

@@ -1,30 +0,0 @@
-/**
- * `ThemeController` — Lit ReactiveController that resolves the active
- * `light | dark` theme from the current `Branding` payload and keeps it in
- * sync with the OS-level `prefers-color-scheme` when the tenant opts into
- * `theme.mode = "auto"`.
- *
- * Per `docs/design/branding/tokens.md` the orchestrator owns theming entirely.
- * Subscribing here is what makes "auto" actually reactive instead of a
- * one-shot read at first paint.
- */
-import type { ReactiveController, ReactiveControllerHost } from "lit";
-import type { Branding } from "./branding.js";
-export type ResolvedTheme = "light" | "dark";
-export declare class ThemeController implements ReactiveController {
-    private readonly host;
-    private branding;
-    private mediaQuery;
-    private _theme;
-    constructor(host: ReactiveControllerHost);
-    get theme(): ResolvedTheme;
-    setBranding(branding: Branding | undefined): void;
-    hostConnected(): void;
-    hostDisconnected(): void;
-    private refresh;
-    private attach;
-    private detach;
-    private onMediaChange;
-    private update;
-}
-//# sourceMappingURL=theme-controller.d.ts.map

package/dist/orchestrator/theme-controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"theme-controller.d.ts","sourceRoot":"","sources":["../../src/orchestrator/theme-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,KAAK,CAAC;AAEtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAI7C,qBAAa,eAAgB,YAAW,kBAAkB;IACxD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAE9C,OAAO,CAAC,QAAQ,CAAuB;IAEvC,OAAO,CAAC,UAAU,CAA+B;IAKjD,OAAO,CAAC,MAAM,CAAyB;IAEvC,YAAY,IAAI,EAAE,sBAAsB,EAGvC;IAED,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAGhD;IAED,aAAa,IAAI,IAAI,CAEpB;IAED,gBAAgB,IAAI,IAAI,CAEvB;IAED,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,aAAa,CAInB;IAEF,OAAO,CAAC,MAAM;CAKf"}