SDK Overview

Flowsta ships three npm packages, one per kind of integration: @flowsta/auth for "Sign in with Flowsta" over OAuth 2.0 with PKCE (plus Sign It file signing and verification from the browser), @flowsta/login-button for ready-made sign-in buttons that drive @flowsta/auth, and @flowsta/holochain for Holochain and desktop apps that talk to the user's Flowsta Vault on their own device. All three are TypeScript-first with no runtime dependencies; none of them needs a client secret. Pick the row that matches your app and follow its page - each page carries the install command, the API, and the error handling for that package.

Available Packages

Package	Version	What it is for	Documentation
@flowsta/auth	2.6.1	OAuth 2.0 + PKCE sign-in for web apps (React bindings included), and Sign It from the browser: hashFile(), signFile(), verifyFile(), getContentRights() - signing goes through the user's Flowsta Vault when it is running	@flowsta/auth
@flowsta/login-button	0.1.6	"Sign in with Flowsta" button components for React, Vue, Qwik, and vanilla JavaScript; generates the PKCE pair and starts the OAuth flow	@flowsta/login-button
@flowsta/holochain	3.6.1	Holochain and desktop apps (Tauri, Electron, any JS environment): agent identity linking, sign in with the Vault, document signing, and CAL-compliant encrypted backups and restore through the Vault's local IPC bridge	@flowsta/holochain

Not using npm? The button downloads and the vanilla JS guide cover static HTML pages without a build step.