ForgeRock · ryanbas21 · Sep 29, 2025 · Sep 15, 2025 · Sep 15, 2025 · Sep 18, 2025
diff --git a/.changeset/breezy-actors-sell.md b/.changeset/breezy-actors-sell.md
@@ -0,0 +1,8 @@
+---
+'@forgerock/storage': minor
+---
+
+feat: Update storage package
+
+- Updated ESLint configurations for consistent code style and linting rules.
+- Ensured compatibility with `verbatimModuleSyntax` by correcting type-only imports and module exports.
diff --git a/.changeset/bright-lights-yawn.md b/.changeset/bright-lights-yawn.md
@@ -0,0 +1,7 @@
+---
+'@forgerock/sdk-utilities': minor
+---
+
+feat: Update SDK utilities
+
+- Inlined `REQUESTED_WITH` and `X_REQUESTED_PLATFORM` constants with literal types for better tree-shaking and type narrowing.
diff --git a/.changeset/good-games-accept.md b/.changeset/good-games-accept.md
@@ -0,0 +1,8 @@
+---
+'@forgerock/iframe-manager': minor
+---
+
+feat: Update iframe-manager
+
+- Updated ESLint configurations for consistent code style and linting rules.
+- Ensured compatibility with `verbatimModuleSyntax` by correcting type-only imports and module exports.
diff --git a/.changeset/kind-guests-sneeze.md b/.changeset/kind-guests-sneeze.md
@@ -0,0 +1,11 @@
+---
+'@forgerock/journey-client': minor
+---
+
+feat: Implement new journey client
+
+- Implemented a new `journey()` factory function for creating stateful client instances.
+- Integrated Redux Toolkit and RTK Query for robust state management and API interactions.
+- Refactored `resume` logic to correctly persist and retrieve plain `Step` payloads, resolving prototype loss issues during serialization.
+- Improved error handling and type safety within the client.
+- Updated internal callback handling and device profiling integration.
diff --git a/.changeset/orange-peaches-warn.md b/.changeset/orange-peaches-warn.md
@@ -0,0 +1,11 @@
+---
+'@forgerock/journey-client': minor
+---
+
+feat(journey-client): Add WebAuthn, QR Code, and Recovery Code support
+
+- Introduces new utility modules (`FRWebAuthn`, `FRQRCode`, `FRRecoveryCodes`) to handle advanced authentication methods within authentication journeys.
+- Adds comprehensive parsing and handling for WebAuthn registration and authentication steps, including a fix for a type error where `TextOutputCallback` was being incorrectly inferred as `TextInputCallback`.
+- Implements support for displaying QR codes (for both OTP and Push) and for displaying and using recovery codes.
+- Includes extensive unit tests for the new callback types and utility modules to ensure correctness.
+- Updates documentation to reflect the new capabilities and architectural changes.
diff --git a/.changeset/tender-schools-scream.md b/.changeset/tender-schools-scream.md
@@ -0,0 +1,8 @@
+---
+'@forgerock/sdk-types': minor
+---
+
+feat: Update SDK types
+
+- Updated ESLint configurations for consistent code style and linting rules.
+- Ensured compatibility with `verbatimModuleSyntax` by correcting type-only imports and module exports.
diff --git a/.changeset/wild-items-stop.md b/.changeset/wild-items-stop.md
@@ -0,0 +1,8 @@
+---
+'@forgerock/sdk-logger': minor
+---
+
+feat: Update SDK logger
+
+- Updated ESLint configurations for consistent code style and linting rules.
+- Ensured compatibility with `verbatimModuleSyntax` by correcting type-only imports and module exports.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -63,7 +63,7 @@ jobs:
 
       - uses: codecov/codecov-action@v5
         with:
-          files: ./packages/**/coverage/*.xml
+          directory: ./packages/
           token: ${{ secrets.CODECOV_TOKEN }}
 
       - uses: actions/upload-artifact@v4

diff --git a/.gitignore b/.gitignore
@@ -79,3 +79,7 @@ packages/davinci-client/src/lib/mock-data/*.d.ts.map
 test-output
 .cursor/rules/nx-rules.mdc
 .github/instructions/nx.instructions.md
+
+# Gemini local knowledge base files
+GEMINI.md
+**/GEMINI.md
diff --git a/.whitesource b/.whitesource
@@ -15,7 +15,7 @@
     "enableScan": true,
     "scanPullRequests": true,
     "incrementalScan": false,
-    "baseBranches": ["integration"]
+    "baseBranches": ["main"]
   },
   "checkRunSettingsSAST": {
     "checkRunConclusionLevel": "failure",

diff --git a/CLAUDE.md b/CLAUDE.md
diff --git a/codecov.yml b/codecov.yml
@@ -1,23 +1,36 @@
+# A more comprehensive Codecov configuration
 codecov:
-  require_ci_to_pass: false
+  # Require CI to pass before Codecov processes reports. This ensures that
+  # coverage is only measured on successful builds.
+  require_ci_to_pass: true
   notify:
-    wait_for_ci: false
+    # Wait for CI to finish before sending notifications.
+    wait_for_ci: true
+
 coverage:
+  # Set a higher default target for project and patch coverage.
+  # This encourages a better testing culture.
   status:
     project:
       default:
-        target: 40%
-        threshold: 1%
+        target: 70%
+        threshold: 2% # Allow for a small drop in coverage
     patch:
       default:
-        target: 40%
-        threshold: 1%
+        target: 80% # New code should be well-tested
+        threshold: 0% # Do not allow new code to decrease coverage
+
   parsers:
     v1:
       include_full_missed_files: true
+
+  # Configure how coverage is displayed.
   range: '70...100'
   round: down
   precision: 2
+
+# Ignore files that are not relevant for code coverage.
+# This keeps the coverage report clean and focused on the source code.
 ignore:
   - '**/dist/**/*'
   - '**/*.mock*'
@@ -35,33 +48,37 @@ ignore:
   - '**/*.md'
   - '**/LICENSE'
   - '**/*.json'
+  - 'e2e/**/*' # E2E tests are not unit tests
+  - 'tools/**/*' # Tooling scripts
+  - 'scripts/**/*' # Other scripts
 
+# Configure the comment that Codecov posts on pull requests.
 comment:
-  layout: 'header, diff, files'
+  layout: 'header, diff, components, files'
   behavior: default
-  require_changes: false
-  require_base: false
-  require_head: true
-  hide_project_coverage: false
-
-bundle_analysis:
-  status: 'informational'
+  require_changes: false # Post a comment even if there are no coverage changes
+  require_head: true # Only post a comment if there is a coverage report for the head commit
 
-flag_management:
+component_management:
   default_rules:
+    # Carry forward coverage from previous commits for all components.
     carryforward: true
-    statuses:
-      - type: project
-        target: 40%
-      - type: patch
-        target: 40%
-  individual_flags:
-    - name: package-*
+  individual_components:
+    # This rule applies to all components that start with "package-".
+    # It is expected that the CI script uploads coverage reports with components
+    # like "package-davinci-client", "package-oidc-client", etc.
+    # This makes the configuration future-proof for new packages.
+    - component_id: package-*
       paths:
-        - packages/*/
-      carryforward: true
+        - packages/ # Only consider files in the packages directory for these components
       statuses:
         - type: project
-          target: 40%
+          target: 80% # Higher target for packages
+          threshold: 2%
         - type: patch
-          target: 40%
+          target: 90% # New code in packages should be very well-tested
+          threshold: 0%
+
+# Enable bundle analysis to track the size of the published packages.
+bundle_analysis:
+  status: 'informational'
diff --git a/e2e/mock-api-v2/GEMINI.md b/e2e/mock-api-v2/GEMINI.md
diff --git a/eslint.config.mjs b/eslint.config.mjs
@@ -24,6 +24,9 @@ export default [
     ignores: [
       '**/dist',
       '**/docs',
+      '**/node_modules',
+      '**/coverage',
+      '**/tmp',
       '**/vite.config.*.timestamp*',
       '**/vitest.config.*.timestamp*',
       '**/out-tsc',

diff --git a/nx.json b/nx.json
@@ -133,24 +133,26 @@
         "watchDepsTargetName": "vite:watch-deps"
       },
       "include": ["packages/**/**/*", "e2e/**/**/*", "tools/**/**/*"]
+    },
+    {
+      "plugin": "@nx/js/typescript",
+      "include": ["packages/journey-client/**"],
+      "options": {
+        "typecheck": {
+          "targetName": "typecheck"
+        },
+        "build": {
+          "targetName": "build",
+          "configName": "tsconfig.lib.json"
+        }
+      }
     }
   ],
   "parallel": 1,
   "workspaceLayout": {
     "appsDir": "",
     "libsDir": ""
   },
-  "generators": {
-    "@nx/js:library": {
-      "outDir": "{projectRoot}/dist",
-      "unitTestRunner": "vitest"
-    },
-    "@nx/web:application": {
-      "style": "css",
-      "unitTestRunner": "none",
-      "e2eTestRunner": "playwright"
-    }
-  },
   "useDaemonProcess": true,
   "useInferencePlugins": true,
   "defaultBase": "main",

diff --git a/package.json b/package.json
@@ -18,7 +18,7 @@
     "ci:release": "pnpm publish -r --no-git-checks && changeset tag",
     "ci:version": "changeset version && pnpm install --no-frozen-lockfile && pnpm nx format:write --uncommitted",
     "circular-dep-check": "madge --circular .",
-    "clean": "shx rm -rf ./{coverage,dist,docs,node_modules,tmp}/ ./{packages,e2e}/*/{dist,node_modules}/ && git clean -fX -e \"!.env*,nx-cloud.env\"",
+    "clean": "shx rm -rf ./{coverage,dist,docs,node_modules,tmp}/ ./{packages,e2e}/*/{dist,node_modules}/ && git clean -fX -e \"!.env*,nx-cloud.env\" -e \"!**/GEMINI.md\"",
     "commit": "git cz",
     "commitlint": "commitlint --edit",
     "create-package": "nx g @nx/js:library",

diff --git a/packages/davinci-client/vite.config.ts b/packages/davinci-client/vite.config.ts
@@ -46,14 +46,10 @@ export default defineConfig({
         '**/vitest.{workspace,projects}.[jt]s?(on)',
         '**/.{eslint,mocha,prettier}rc.{?(c|m)js,yml}',
       ],
-      reporter: [
-        ['text', { skipEmpty: true }],
-        ['html', { skipEmpty: true }],
-        ['json', { skipEmpty: true }],
-      ],
+      reporter: ['text', 'html', 'json'],
       enabled: Boolean(process.env['CI']),
       reportsDirectory: './coverage',
-      provider: 'v8',
+      provider: 'v8' as const,
     },
   },
 });
diff --git a/packages/device-client/vite.config.ts b/packages/device-client/vite.config.ts