Bccorb · Oct 18, 2026 · Oct 18, 2026
diff --git a/.changeset/magic-link-confirm-step.md b/.changeset/magic-link-confirm-step.md
diff --git a/.changeset/react-readme-nextjs-package.md b/.changeset/react-readme-nextjs-package.md
diff --git a/.changeset/seamless-service-token-env.md b/.changeset/seamless-service-token-env.md
diff --git a/packages/angular/CHANGELOG.md b/packages/angular/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @seamless-auth/angular
 
+## 0.3.0
+
+### Minor Changes
+
+- 59802e2: Add a confirmation step for magic links opened on another device.
+
+  A magic link opened on a device other than the one that asked for it now waits for the reader to approve it (auth API 0.19.0 and later). The bundled verify screens show which kind of device asked and when, and offer "Yes, sign in that device" or "No, this wasn't me". Approving signs in the requesting device and tells the reader to return to it; declining changes nothing.
+
+  `@seamless-auth/client` adds `client.confirmMagicLink(token)`, the `getMagicLinkConfirmation`, `isMagicLinkConfirmationRequired`, `describeMagicLinkDevice`, `magicLinkConfirmationPrompt` and `confirmMagicLinkSignIn` helpers, and the `MagicLinkConfirmation` and `MagicLinkDeviceClass` types. In bearer mode the verify call now sends the sign-in's ephemeral token when one is held. A custom verify screen that treats every failure as an invalid link should check `getMagicLinkConfirmation(error)` first.
+
+  The React Native README describes the new step for apps that handle magic links.
+
+### Patch Changes
+
+- Updated dependencies [59802e2]
+  - @seamless-auth/client@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes

diff --git a/packages/angular/package.json b/packages/angular/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/angular",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Angular bindings for Seamless Auth: a signal-based auth service, route guards, and optional sign-in screens.",
   "type": "module",
   "engines": {
@@ -43,7 +43,7 @@
     "rxjs": "^7.4.0"
   },
   "dependencies": {
-    "@seamless-auth/client": "^0.5.0",
+    "@seamless-auth/client": "^0.6.0",
     "tslib": "^2.7.0"
   },
   "sideEffects": [

diff --git a/packages/client/CHANGELOG.md b/packages/client/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @seamless-auth/client
 
+## 0.6.0
+
+### Minor Changes
+
+- 59802e2: Add a confirmation step for magic links opened on another device.
+
+  A magic link opened on a device other than the one that asked for it now waits for the reader to approve it (auth API 0.19.0 and later). The bundled verify screens show which kind of device asked and when, and offer "Yes, sign in that device" or "No, this wasn't me". Approving signs in the requesting device and tells the reader to return to it; declining changes nothing.
+
+  `@seamless-auth/client` adds `client.confirmMagicLink(token)`, the `getMagicLinkConfirmation`, `isMagicLinkConfirmationRequired`, `describeMagicLinkDevice`, `magicLinkConfirmationPrompt` and `confirmMagicLinkSignIn` helpers, and the `MagicLinkConfirmation` and `MagicLinkDeviceClass` types. In bearer mode the verify call now sends the sign-in's ephemeral token when one is held. A custom verify screen that treats every failure as an invalid link should check `getMagicLinkConfirmation(error)` first.
+
+  The React Native README describes the new step for apps that handle magic links.
+
 ## 0.5.0
 
 ### Minor Changes

diff --git a/packages/client/package.json b/packages/client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/client",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Framework-agnostic client core for Seamless Auth: the HTTP client, session store, and result types the framework bindings share.",
   "type": "module",
   "exports": {

diff --git a/packages/react-native/CHANGELOG.md b/packages/react-native/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @seamless-auth/react-native
 
+## 0.3.1
+
+### Patch Changes
+
+- 59802e2: Add a confirmation step for magic links opened on another device.
+
+  A magic link opened on a device other than the one that asked for it now waits for the reader to approve it (auth API 0.19.0 and later). The bundled verify screens show which kind of device asked and when, and offer "Yes, sign in that device" or "No, this wasn't me". Approving signs in the requesting device and tells the reader to return to it; declining changes nothing.
+
+  `@seamless-auth/client` adds `client.confirmMagicLink(token)`, the `getMagicLinkConfirmation`, `isMagicLinkConfirmationRequired`, `describeMagicLinkDevice`, `magicLinkConfirmationPrompt` and `confirmMagicLinkSignIn` helpers, and the `MagicLinkConfirmation` and `MagicLinkDeviceClass` types. In bearer mode the verify call now sends the sign-in's ephemeral token when one is held. A custom verify screen that treats every failure as an invalid link should check `getMagicLinkConfirmation(error)` first.
+
+  The React Native README describes the new step for apps that handle magic links.
+
+- Updated dependencies [59802e2]
+  - @seamless-auth/client@0.6.0
+
 ## 0.3.0
 
 ### Minor Changes

diff --git a/packages/react-native/package.json b/packages/react-native/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/react-native",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Headless React Native binding for Seamless Auth: provider, hooks, and the native ports for passkeys, secure token storage, and in-app browser OAuth.",
   "type": "module",
   "exports": {
@@ -45,7 +45,7 @@
     "react": "^18.0.0 || ^19.0.0"
   },
   "dependencies": {
-    "@seamless-auth/client": "^0.5.0",
+    "@seamless-auth/client": "^0.6.0",
     "@seamless-auth/types": "^0.28.0"
   },
   "sideEffects": false

diff --git a/packages/react/CHANGELOG.md b/packages/react/CHANGELOG.md
@@ -1,5 +1,24 @@
 # @seamless-auth/react
 
+## 0.17.0
+
+### Minor Changes
+
+- 59802e2: Add a confirmation step for magic links opened on another device.
+
+  A magic link opened on a device other than the one that asked for it now waits for the reader to approve it (auth API 0.19.0 and later). The bundled verify screens show which kind of device asked and when, and offer "Yes, sign in that device" or "No, this wasn't me". Approving signs in the requesting device and tells the reader to return to it; declining changes nothing.
+
+  `@seamless-auth/client` adds `client.confirmMagicLink(token)`, the `getMagicLinkConfirmation`, `isMagicLinkConfirmationRequired`, `describeMagicLinkDevice`, `magicLinkConfirmationPrompt` and `confirmMagicLinkSignIn` helpers, and the `MagicLinkConfirmation` and `MagicLinkDeviceClass` types. In bearer mode the verify call now sends the sign-in's ephemeral token when one is held. A custom verify screen that treats every failure as an invalid link should check `getMagicLinkConfirmation(error)` first.
+
+  The React Native README describes the new step for apps that handle magic links.
+
+### Patch Changes
+
+- bd62b41: Point the README's Next.js section at `@seamless-auth/nextjs`, which serves the `/auth` routes from a route handler and resolves the session with `getSeamlessSession`. It no longer says a Next.js server package is still planned.
+- 9852bd4: The README's Next.js example reads the service token from `SEAMLESS_SERVICE_TOKEN` instead of `API_SERVICE_TOKEN`. The auth server still reads `API_SERVICE_TOKEN`; both hold the same value.
+- Updated dependencies [59802e2]
+  - @seamless-auth/client@0.6.0
+
 ## 0.16.0
 
 ### Minor Changes

diff --git a/packages/react/package.json b/packages/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/react",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "A drop-in authentication solution for modern React applications.",
   "type": "module",
   "exports": {
@@ -56,7 +56,7 @@
     }
   },
   "dependencies": {
-    "@seamless-auth/client": "^0.5.0",
+    "@seamless-auth/client": "^0.6.0",
     "@seamless-auth/types": "^0.28.0",
     "@simplewebauthn/browser": "^13.1.0",
     "libphonenumber-js": "^1.12.7"

diff --git a/packages/svelte/CHANGELOG.md b/packages/svelte/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @seamless-auth/svelte
 
+## 0.2.0
+
+### Minor Changes
+
+- 59802e2: Add a confirmation step for magic links opened on another device.
+
+  A magic link opened on a device other than the one that asked for it now waits for the reader to approve it (auth API 0.19.0 and later). The bundled verify screens show which kind of device asked and when, and offer "Yes, sign in that device" or "No, this wasn't me". Approving signs in the requesting device and tells the reader to return to it; declining changes nothing.
+
+  `@seamless-auth/client` adds `client.confirmMagicLink(token)`, the `getMagicLinkConfirmation`, `isMagicLinkConfirmationRequired`, `describeMagicLinkDevice`, `magicLinkConfirmationPrompt` and `confirmMagicLinkSignIn` helpers, and the `MagicLinkConfirmation` and `MagicLinkDeviceClass` types. In bearer mode the verify call now sends the sign-in's ephemeral token when one is held. A custom verify screen that treats every failure as an invalid link should check `getMagicLinkConfirmation(error)` first.
+
+  The React Native README describes the new step for apps that handle magic links.
+
+### Patch Changes
+
+- Updated dependencies [59802e2]
+  - @seamless-auth/client@0.6.0
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/svelte/package.json b/packages/svelte/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/svelte",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Svelte bindings for Seamless Auth: a rune-based session, SvelteKit guards, and optional sign-in screens.",
   "type": "module",
   "svelte": "./dist/index.js",
@@ -70,7 +70,7 @@
     }
   },
   "dependencies": {
-    "@seamless-auth/client": "^0.5.0"
+    "@seamless-auth/client": "^0.6.0"
   },
   "sideEffects": [
     "*.css"

diff --git a/packages/vue/CHANGELOG.md b/packages/vue/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @seamless-auth/vue
 
+## 0.2.0
+
+### Minor Changes
+
+- 59802e2: Add a confirmation step for magic links opened on another device.
+
+  A magic link opened on a device other than the one that asked for it now waits for the reader to approve it (auth API 0.19.0 and later). The bundled verify screens show which kind of device asked and when, and offer "Yes, sign in that device" or "No, this wasn't me". Approving signs in the requesting device and tells the reader to return to it; declining changes nothing.
+
+  `@seamless-auth/client` adds `client.confirmMagicLink(token)`, the `getMagicLinkConfirmation`, `isMagicLinkConfirmationRequired`, `describeMagicLinkDevice`, `magicLinkConfirmationPrompt` and `confirmMagicLinkSignIn` helpers, and the `MagicLinkConfirmation` and `MagicLinkDeviceClass` types. In bearer mode the verify call now sends the sign-in's ephemeral token when one is held. A custom verify screen that treats every failure as an invalid link should check `getMagicLinkConfirmation(error)` first.
+
+  The React Native README describes the new step for apps that handle magic links.
+
+### Patch Changes
+
+- Updated dependencies [59802e2]
+  - @seamless-auth/client@0.6.0
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/vue/package.json b/packages/vue/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/vue",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Vue bindings for Seamless Auth: a plugin and composable for session state, route guards, and optional sign-in screens.",
   "type": "module",
   "exports": {
@@ -63,7 +63,7 @@
     }
   },
   "dependencies": {
-    "@seamless-auth/client": "^0.5.0"
+    "@seamless-auth/client": "^0.6.0"
   },
   "sideEffects": [
     "*.css"