@zitadel/sdk-core 0.1.0-alpha.9 → 1.0.0-alpha.21

package/dist/types.d.ts

@@ -1,206 +1,215 @@
+import type { ZitadelProject } from "@zitadel/api/config";
+import type { CreateFlow201Step, CreateFlow201StepComplete, CreateFlowBodyPurpose } from "@zitadel/api/generated/model";
+/** Re-exported so consumers can type the `purpose` prop without a deep import. */
+export type { CreateFlowBodyPurpose } from "@zitadel/api/generated/model";
 /**
- * Shared types for the Nextgen SDK middleware layer.
- *
- * These types are consumed by both `sdk-next` and `sdk-nuxt`. Each SDK
- * re-exports them from its own public surface so consumers don't need
- * to add a direct `sdk-core` dependency.
+ * The SPA widget contract shared by every SPA SDK (`sdk-react`, `sdk-vue`,
+ * `sdk-angular`, `sdk-solid`, `sdk-svelte`, `sdk-qwik`): the widget event detail
+ * types plus the config/handler/props types derived from them. Each SPA SDK
+ * re-exports these from its own public surface so consumers don't need a direct
+ * `sdk-core` dependency. The middleware-layer types (`sdk-next`, `sdk-nuxt`) now
+ * live in `@zitadel/sdk-core/middleware`.
  */
+/** Payload of the `zitadel-flow-step` event. */
+export interface ZitadelFlowStepDetail {
+    readonly step: CreateFlow201Step;
+}
+/** Payload of the `zitadel-flow-input` event. */
+export interface ZitadelFlowInputDetail {
+    readonly name: string;
+    readonly value: string;
+}
+/** Payload of the `zitadel-flow-complete` event. */
+export interface ZitadelFlowCompleteDetail {
+    readonly behavior: CreateFlow201StepComplete;
+    readonly redirect_uri?: string;
+    readonly handoff_token?: string;
+    readonly handoff_token_expires_at?: string;
+}
+/** Payload of the `zitadel-flow-error` event. */
+export interface ZitadelFlowErrorDetail {
+    readonly message: string;
+}
+/** Payload of the `zitadel-signout` event. */
+export interface ZitadelSignoutDetail {
+    /** The signed-out user's display rendering ("" when none was resolved). */
+    readonly display: string;
+    /** The signed-out user's login identifier ("" when none was resolved). */
+    readonly identifier: string;
+}
+/** Events emitted by `<zitadel-login>`, keyed to their detail payload. */
+export interface ZitadelLoginEventMap {
+    "zitadel-flow-step": ZitadelFlowStepDetail;
+    "zitadel-flow-input": ZitadelFlowInputDetail;
+    "zitadel-flow-complete": ZitadelFlowCompleteDetail;
+    "zitadel-flow-error": ZitadelFlowErrorDetail;
+}
+/** Events emitted by `<zitadel-logout>`, keyed to their detail payload. */
+export interface ZitadelLogoutEventMap {
+    "zitadel-signout": ZitadelSignoutDetail;
+}
 /**
- * The authenticated session for a signed-in user.
+ * Events emitted by `<zitadel-session>`, keyed to their detail payload.
+ * `zitadel-signout` reuses {@link ZitadelSignoutDetail} so the post-sign-in
+ * card and the avatar menu speak the same sign-out contract.
  */
-export type NextgenSession = {
-    /** The user's unique identifier (`sub` claim). */
-    userId: string;
-    /** The user's email address, or `null` if not present in the token. */
-    email: string | null;
-    /** The user's display name, or `null` if not present in the token. */
-    name: string | null;
-    /** The raw verified JWT. */
-    token: string;
+export interface ZitadelSessionEventMap {
+    "zitadel-signout": ZitadelSignoutDetail;
+}
+/**
+ * Maps each `<zitadel-login>` event to the callback prop the SDKs expose. The
+ * `satisfies Record<keyof ZitadelLoginEventMap, …>` is the drift lock: every
+ * event needs exactly one handler entry — a missing one, or an extra one left
+ * behind for a removed event, fails `tsc`. Everything below derives from this.
+ */
+export declare const ZITADEL_LOGIN_EVENT_HANDLERS: {
+    readonly "zitadel-flow-step": "onFlowStep";
+    readonly "zitadel-flow-input": "onFlowInput";
+    readonly "zitadel-flow-complete": "onFlowComplete";
+    readonly "zitadel-flow-error": "onFlowError";
 };
-/** Auth state when the user is signed in. */
-export type AuthState = {
-    isAuthenticated: true;
-    session: NextgenSession;
+/** Maps the `<zitadel-logout>` event to the callback prop the SDKs expose. */
+export declare const ZITADEL_LOGOUT_EVENT_HANDLERS: {
+    readonly "zitadel-signout": "onSignout";
 };
-/** Auth state when the user is not signed in. */
-export type UnauthState = {
-    isAuthenticated: false;
-    session: null;
+/** Maps the `<zitadel-session>` event to the callback prop the SDKs expose. */
+export declare const ZITADEL_SESSION_EVENT_HANDLERS: {
+    readonly "zitadel-signout": "onSignout";
 };
-/** Union of all possible auth states. */
-export type AuthResult = AuthState | UnauthState;
-/**
- * Options passed to the SDK middleware factory (`nextgenMiddleware` in
- * sdk-next, `createNextgenMiddleware` in sdk-nuxt).
- */
-export type NextgenMiddlewareOptions = {
-    /**
-     * Full URL of the Zitadel auth backend.
-     * @default process.env.ZITADEL_URL ?? "http://localhost:8080"
-     */
-    url?: string;
-    /**
-     * URL path prefix that is reverse-proxied to the auth backend.
-     * @default "/__nextgen"
-     */
-    proxyPath?: string;
+/** Runtime list of `<zitadel-login>` event names (drives wiring + drift tests). */
+export declare const ZITADEL_LOGIN_EVENTS: (keyof ZitadelLoginEventMap)[];
+/** Runtime list of `<zitadel-logout>` event names. */
+export declare const ZITADEL_LOGOUT_EVENTS: (keyof ZitadelLogoutEventMap)[];
+/** Runtime list of `<zitadel-session>` event names. */
+export declare const ZITADEL_SESSION_EVENTS: (keyof ZitadelSessionEventMap)[];
+/** Configuration props shared by every `ZitadelLogin` wrapper. */
+export interface ZitadelLoginConfig {
+    /** The SDK handle from `configureZitadel(...)`. */
+    readonly project?: ZitadelProject;
+    /** Discrete project id, read when no {@link project} handle is supplied. */
+    readonly projectId?: string;
+    /** Reverse-proxy path prefix the widget calls. */
+    readonly proxyPath?: string;
     /**
-     * Pathnames that require a valid session. Requests to these routes without
-     * a valid token are redirected to {@link loginPath}.
-     * Entries ending with `*` match any sub-path (e.g. `"/admin*"`).
-     * @default []
+     * Sizing/chrome mode. `widget` (default) is content-sized and paints no
+     * page chrome — for embedding inside an existing layout. `page` claims
+     * the viewport, paints the surface background, loads the brand font, and
+     * focuses the first field — for dedicated login routes.
+     * @default "widget"
      */
-    protectedRoutes?: string[];
+    readonly variant?: "widget" | "page";
     /**
-     * Pathnames that are completely skipped by the middleware — no JWT
-     * verification, no protection check, no header tunnelling.
-     * Useful for webhooks, health-check endpoints, or any route where
-     * running auth logic is undesirable.
-     * Entries ending with `*` match any sub-path (e.g. `"/public*"`).
-     * @default []
+     * Colour mode. Unset defers to the tenant's `branding.theme.mode`, then to
+     * the variant default — `dark` for `page`, `auto` (follow
+     * `prefers-color-scheme`) for `widget`. Set it when your app's surface is
+     * fixed so the widget doesn't render a dark card on a light page.
      */
-    ignoredRoutes?: string[];
+    readonly theme?: "light" | "dark" | "auto";
     /**
-     * Pathname to redirect unauthenticated users to.
-     * A `next` query parameter is appended with the originally requested path.
-     * @default "/login"
+     * Visually hide the widget's own heading block while keeping it in the
+     * accessibility tree — for embeds whose page already carries the heading
+     * (a brand-voice title above the card) so the card doesn't repeat it.
+     * @default false
      */
-    loginPath?: string;
+    readonly suppressHeader?: boolean;
+    /** Flow purpose. @default "login" */
+    readonly purpose?: CreateFlowBodyPurpose;
     /**
-     * Reserved for future use. Local PEM public key for offline JWT verification.
+     * Selects a specific flow definition by its `name` (the `name` field in
+     * the flow file). Omit to run the project's default flow for the purpose.
      */
-    jwtKey?: string;
+    readonly flowName?: string;
+    /** Where to navigate after a completed sign-in. */
+    readonly postSignInUrl?: string;
     /**
-     * Restrict accepted JWT `alg` header values. Tokens whose algorithm is not
-     * in this list are rejected before JWKS is fetched.
-     * @default ["RS256", "ES256"]
-     */
-    allowedAlgorithms?: string[];
-    /**
-     * Clock skew tolerance in milliseconds applied to `exp`, `nbf`, and `iat`
-     * claim validation.
-     * @default 5000
-     */
-    clockSkewMs?: number;
-    /**
-     * Expected value(s) of the `aud` claim. When omitted, audience is not
-     * validated. Pass a single string or an array when a token may carry
-     * multiple audiences.
+     * Copy overrides merged over the builtin locale dictionaries, keyed by
+     * primary language subtag. Each dictionary may be partial — the widget
+     * merges it over the builtin copy — so presets like the components'
+     * `businessLocales` overlay are directly assignable. This is how custom
+     * flow steps and actions get labels (keys follow `<step>.title`,
+     * `<step>.action.<name>`, `<step>.field.<field>`):
+     *
+     * ```tsx
+     * <ZitadelLogin locales={{ en: { "identifier.title": "Welcome back" } }} />
+     * ```
      */
-    audience?: string | string[];
+    readonly locales?: Record<string, Partial<Record<string, string>>>;
+    /** BCP-47 language override; defaults to the browser language. */
+    readonly lang?: string;
+}
+/** Configuration props shared by every `ZitadelLogout` wrapper. */
+export interface ZitadelLogoutConfig {
+    /** The SDK handle from `configureZitadel(...)`. */
+    readonly project?: ZitadelProject;
+    /** Discrete project id, read when no {@link project} handle is supplied. */
+    readonly projectId?: string;
+    /** Reverse-proxy path prefix the widget calls. */
+    readonly proxyPath?: string;
+    /** Where to navigate after sign-out. */
+    readonly postSignOutUrl?: string;
     /**
-     * Accepted values for the JWT header `typ` claim (case-insensitive).
-     * Tokens whose `typ` is not in this list are rejected.
-     * Set to `[]` to disable token-type checking entirely.
-     * @default ["JWT", "at+JWT"]
+     * Colour mode. Unset defaults to `auto` (follow `prefers-color-scheme`) —
+     * the control lives inside the app's own chrome. Set it when the
+     * surrounding surface is fixed.
      */
-    allowedTokenTypes?: string[];
+    readonly theme?: "light" | "dark" | "auto";
+}
+/** Configuration props shared by every `ZitadelSession` wrapper. */
+export interface ZitadelSessionConfig {
+    /** The SDK handle from `configureZitadel(...)`. */
+    readonly project?: ZitadelProject;
+    /** Discrete project id, read when no {@link project} handle is supplied. */
+    readonly projectId?: string;
+    /** Reverse-proxy path prefix the widget calls. */
+    readonly proxyPath?: string;
+    /** Where to navigate after sign-out. */
+    readonly postSignOutUrl?: string;
+    /** Heading text override. */
+    readonly heading?: string;
+    /** Logout action label override. */
+    readonly logoutLabel?: string;
     /**
-     * Timeout in milliseconds for JWKS endpoint requests.
-     * Requests that do not complete within this window are aborted and the
-     * token is rejected, treating the request as unauthenticated.
-     * @default 5000
+     * Sizing/chrome mode. `widget` (default) is content-sized and paints no
+     * page chrome — for embedding the signed-in card inside an existing
+     * layout. `page` claims the viewport and paints the surface background —
+     * for dedicated signed-in routes.
+     * @default "widget"
      */
-    jwksTimeoutMs?: number;
+    readonly variant?: "widget" | "page";
     /**
-     * Timeout in milliseconds for upstream proxy requests.
-     * Requests that do not complete within this window are aborted with a
-     * network error. Defaults to 5 000 ms.
-     * @default 5000
+     * Colour mode. Unset defers to the variant default — `dark` for `page`,
+     * `auto` (follow `prefers-color-scheme`) for `widget`. Set it when your
+     * app's surface is fixed so the card doesn't render dark on a light page.
      */
-    proxyTimeoutMs?: number;
+    readonly theme?: "light" | "dark" | "auto";
     /**
-     * Timeout in milliseconds for opaque (non-JWT) session token validation
-     * via the backend's `GET /sessions/me` endpoint. Tokens that cannot be
-     * validated within this window are treated as invalid.
-     * @default 5000
+     * Visually hide the widget's own heading block while keeping it in the
+     * accessibility tree — for embeds whose page already carries the heading
+     * (a brand-voice title above the card) so the card doesn't repeat it.
+     * @default false
      */
-    opaqueTokenTimeoutMs?: number;
-    /**
-     * Optional hook called when a `POST /sessions/exchange` response is
-     * proxied back to the browser. Receives the upstream `Response` after
-     * hop-by-hop stripping and cookie upgrading. Return a modified
-     * `Response` to add custom headers, extra `Set-Cookie` values, or
-     * transform the body.
-     *
-     * The callback runs on the server — it has access to the full response
-     * including `Set-Cookie` headers that are `HttpOnly` and invisible to
-     * client-side JavaScript. It fires **after** the upstream has processed
-     * the exchange; it cannot prevent the exchange itself (return a 403
-     * `Response` to block the browser from receiving it).
-     *
-     * **Capabilities:**
-     *
-     * - **Add or modify cookies** — append `Set-Cookie` headers for
-     *   user-preferences, analytics IDs, or any server-side state.
-     * - **Make additional fetch calls** — enrich the session by calling
-     *   your own backend, a profile service, or any external API. The
-     *   response body can be read with `response.json()` to extract
-     *   session details like `user_id`.
-     * - **Map or transform response properties** — reshape the JSON body
-     *   before it reaches the browser (e.g. strip internal fields, add
-     *   computed properties).
-     * - **Logging and auditing** — clone the response, read its body for
-     *   audit trails, and return the original unchanged.
-     *
-     * @example Add a cookie
-     * ```ts
-     * onExchangeResponse: async (response) => {
-     *   const headers = new Headers(response.headers);
-     *   headers.append("Set-Cookie", "theme=dark; Path=/; SameSite=Lax");
-     *   return new Response(response.body, {
-     *     status: response.status,
-     *     headers,
-     *   });
-     * },
-     * ```
-     *
-     * @example Fetch additional data and set a cookie from it
-     * ```ts
-     * onExchangeResponse: async (response) => {
-     *   const body = await response.json();
-     *   const profile = await fetch(
-     *     `https://api.example.com/users/${body.session.user_id}`,
-     *   );
-     *   const { locale } = await profile.json();
-     *   const headers = new Headers(response.headers);
-     *   headers.append("Set-Cookie", `locale=${locale}; Path=/; SameSite=Lax`);
-     *   return new Response(JSON.stringify(body), {
-     *     status: response.status,
-     *     headers,
-     *   });
-     * },
-     * ```
-     *
-     * @example Log the exchange for auditing (pass-through)
-     * ```ts
-     * onExchangeResponse: async (response) => {
-     *   const cloned = response.clone();
-     *   const body = await cloned.json();
-     *   await auditLog.record("session_exchange", body.session.session_id);
-     *   return response;
-     * },
-     * ```
-     *
-     * @example Modify existing cookies (e.g. tighten the session cookie path)
-     * ```ts
-     * onExchangeResponse: async (response) => {
-     *   const headers = new Headers();
-     *   for (const [key, value] of response.headers.entries()) {
-     *     if (key.toLowerCase() !== "set-cookie") headers.set(key, value);
-     *   }
-     *   for (const cookie of response.headers.getSetCookie()) {
-     *     if (cookie.startsWith("__nextgen_session=")) {
-     *       headers.append("set-cookie", cookie.replace("Path=/", "Path=/app"));
-     *     } else {
-     *       headers.append("set-cookie", cookie);
-     *     }
-     *   }
-     *   return new Response(response.body, { status: response.status, headers });
-     * },
-     * ```
-     */
-    onExchangeResponse?: (response: Response) => Response | Promise<Response>;
+    readonly suppressHeader?: boolean;
+}
+/**
+ * Plain-callback handlers for the `<zitadel-login>` events, derived from
+ * {@link ZitadelLoginEventMap} and {@link ZITADEL_LOGIN_EVENT_HANDLERS} so the
+ * prop set can never drift from the events it forwards.
+ */
+export type ZitadelLoginHandlers = {
+    readonly [E in keyof ZitadelLoginEventMap as (typeof ZITADEL_LOGIN_EVENT_HANDLERS)[E]]?: (detail: ZitadelLoginEventMap[E]) => void;
+};
+/** Plain-callback handler for the `<zitadel-logout>` event (derived, as above). */
+export type ZitadelLogoutHandlers = {
+    readonly [E in keyof ZitadelLogoutEventMap as (typeof ZITADEL_LOGOUT_EVENT_HANDLERS)[E]]?: (detail: ZitadelLogoutEventMap[E]) => void;
+};
+/** Plain-callback handlers for the `<zitadel-session>` events (derived, as above). */
+export type ZitadelSessionHandlers = {
+    readonly [E in keyof ZitadelSessionEventMap as (typeof ZITADEL_SESSION_EVENT_HANDLERS)[E]]?: (detail: ZitadelSessionEventMap[E]) => void;
 };
+/** Full prop set for a `ZitadelLogin` wrapper (config + plain-callback handlers). */
+export type ZitadelLoginProps = ZitadelLoginConfig & ZitadelLoginHandlers;
+/** Full prop set for a `ZitadelLogout` wrapper (config + plain-callback handlers). */
+export type ZitadelLogoutProps = ZitadelLogoutConfig & ZitadelLogoutHandlers;
+/** Full prop set for a `ZitadelSession` wrapper (config + plain-callback handlers). */
+export type ZitadelSessionProps = ZitadelSessionConfig & ZitadelSessionHandlers;
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,sEAAsE;IACtE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IAAE,eAAe,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3E,iDAAiD;AACjD,MAAM,MAAM,WAAW,GAAG;IAAE,eAAe,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC;AAEpE,yCAAyC;AACzC,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAEjD;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAEzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmFG;IACH,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC3E,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,kFAAkF;AAClF,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAE1E;;;;;;;GAOG;AAEH,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC;AAED,iDAAiD;AACjD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,oDAAoD;AACpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAC5C;AAED,iDAAiD;AACjD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAYD,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,mBAAmB,EAAE,qBAAqB,CAAC;IAC3C,oBAAoB,EAAE,sBAAsB,CAAC;IAC7C,uBAAuB,EAAE,yBAAyB,CAAC;IACnD,oBAAoB,EAAE,sBAAsB,CAAC;CAC9C;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,oBAAoB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,EAAE,oBAAoB,CAAC;CACzC;AAED;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;CAK6B,CAAC;AAEvE,8EAA8E;AAC9E,eAAO,MAAM,6BAA6B;;CAE6B,CAAC;AAExE,+EAA+E;AAC/E,eAAO,MAAM,8BAA8B;;CAE6B,CAAC;AAEzE,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,EAE5B,CAAC,MAAM,oBAAoB,CAAC,EAAE,CAAC;AAEpC,sDAAsD;AACtD,eAAO,MAAM,qBAAqB,EAE7B,CAAC,MAAM,qBAAqB,CAAC,EAAE,CAAC;AAErC,uDAAuD;AACvD,eAAO,MAAM,sBAAsB,EAE9B,CAAC,MAAM,sBAAsB,CAAC,EAAE,CAAC;AAEtC,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,qCAAqC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnE,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CAC5C;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6BAA6B;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,CAAC,IAAI,MAAM,oBAAoB,IAAI,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CACvF,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAC5B,IAAI;CACV,CAAC;AAEF,mFAAmF;AACnF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,CAAC,IAAI,MAAM,qBAAqB,IAAI,CAAC,OAAO,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CACzF,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAC7B,IAAI;CACV,CAAC;AAEF,sFAAsF;AACtF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,CAAC,IAAI,MAAM,sBAAsB,IAAI,CAAC,OAAO,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3F,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAC9B,IAAI;CACV,CAAC;AAEF,qFAAqF;AACrF,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAE1E,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAE7E,uFAAuF;AACvF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,sBAAsB,CAAC"}

package/dist/types.js

@@ -1,8 +1,26 @@
 /**
- * Shared types for the Nextgen SDK middleware layer.
- *
- * These types are consumed by both `sdk-next` and `sdk-nuxt`. Each SDK
- * re-exports them from its own public surface so consumers don't need
- * to add a direct `sdk-core` dependency.
+ * Maps each `<zitadel-login>` event to the callback prop the SDKs expose. The
+ * `satisfies Record<keyof ZitadelLoginEventMap, …>` is the drift lock: every
+ * event needs exactly one handler entry — a missing one, or an extra one left
+ * behind for a removed event, fails `tsc`. Everything below derives from this.
  */
-export {};
+export const ZITADEL_LOGIN_EVENT_HANDLERS = {
+    "zitadel-flow-step": "onFlowStep",
+    "zitadel-flow-input": "onFlowInput",
+    "zitadel-flow-complete": "onFlowComplete",
+    "zitadel-flow-error": "onFlowError",
+};
+/** Maps the `<zitadel-logout>` event to the callback prop the SDKs expose. */
+export const ZITADEL_LOGOUT_EVENT_HANDLERS = {
+    "zitadel-signout": "onSignout",
+};
+/** Maps the `<zitadel-session>` event to the callback prop the SDKs expose. */
+export const ZITADEL_SESSION_EVENT_HANDLERS = {
+    "zitadel-signout": "onSignout",
+};
+/** Runtime list of `<zitadel-login>` event names (drives wiring + drift tests). */
+export const ZITADEL_LOGIN_EVENTS = Object.keys(ZITADEL_LOGIN_EVENT_HANDLERS);
+/** Runtime list of `<zitadel-logout>` event names. */
+export const ZITADEL_LOGOUT_EVENTS = Object.keys(ZITADEL_LOGOUT_EVENT_HANDLERS);
+/** Runtime list of `<zitadel-session>` event names. */
+export const ZITADEL_SESSION_EVENTS = Object.keys(ZITADEL_SESSION_EVENT_HANDLERS);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zitadel/sdk-core",
-  "version": "0.1.0-alpha.9",
+  "version": "1.0.0-alpha.21",
   "description": "Core types and shared utilities for Zitadel SDKs",
   "homepage": "https://github.com/zitadel/nextgen/tree/main/packages/sdk-core#readme",
   "bugs": {
@@ -41,10 +41,29 @@
   "publishConfig": {
     "access": "public"
   },
+  "dependencies": {
+    "@zitadel/api": "1.0.0-alpha.21"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.0.0",
+    "@eslint/json": "^0.11.0",
+    "@eslint/markdown": "^6.0.0",
+    "eslint": "^9.0.0",
+    "eslint-config-prettier": "^10.0.0",
+    "eslint-import-resolver-typescript": "^3.7.0",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-perfectionist": "^4.0.0",
+    "eslint-plugin-prettier": "^5.0.0",
+    "prettier": "^3.0.0",
+    "typescript": "^6.0.3",
+    "typescript-eslint": "^8.0.0",
+    "vite": "^7.3.5",
+    "vitest": "^3.0.0"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.lib.json",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "test": "vitest run",
-    "lint": "oxlint ."
+    "lint": "eslint ."
   }
 }