@aglyn/plugins-commerce 1.0.0-beta.143

package/src/lib/components/gated-video.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/components/gated-video.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiPlayCircleOutline } from '@aglyn/shared-data-mdi'\nimport Box from '@mui/material/Box'\nimport Button from '@mui/material/Button'\nimport Typography from '@mui/material/Typography'\nimport { forwardRef, useCallback, useEffect, useRef, useState } from 'react'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { generatePresetId } from '../utils/generate-preset-id'\n\n// Component ids are persisted in screen documents; never rename.\nexport const ID: Aglyn.ComponentId = 'gated-video'\n\n/**\n * How many fresh links the player asks for in a row, with no playback in\n * between, before it stops and asks the viewer to reload (AGL-2814).\n *\n * Two covers the two links that can expire under a playing video: the stream\n * link itself, for a browser that re-requests the element's own `src`, and the\n * signed media session behind it. A third failure with nothing played means\n * the problem is not an expiry, and asking again would only loop.\n */\nconst MAX_SILENT_RECOVERIES = 2\n\n/**\n * Seconds of playback on a fresh link that prove it works. Past this the\n * budget above resets, so an expiry hours later recovers as quietly as the\n * first one did.\n */\nconst RECOVERED_AFTER_SECONDS = 5\n\n/**\n * The `MediaError` codes a fresh link can cure: `MEDIA_ERR_NETWORK` (2), which\n * a refused byte-range request raises mid-play, and\n * `MEDIA_ERR_SRC_NOT_SUPPORTED` (4), which a refused first request raises.\n * An abort (1) is the page or the viewer stopping the load, and a decode error (3) is\n * a broken file that no new link can fix.\n */\nconst RECOVERABLE_MEDIA_ERRORS = new Set([2, 4])\n\nexport interface GatedVideoProps {\n  /** Product whose gatedVideos list this plays from. */\n  productId?: string\n  /** Index into the product's gatedVideos (default 0). */\n  videoIndex?: number\n  lockedText?: string\n}\n\n/**\n * Gated video block (AGL-315): entitled members get a short-TTL signed\n * stream URL from the server (the gate is the mint step); playback\n * resumes from the last position. SiteC's training-program player.\n *\n * Every link behind the player expires (AGL-2814), so a long sitting outlives\n * the one it started with. When a request under an expired link fails, the\n * player asks the stream endpoint for a new one, which re-checks the member's\n * entitlement, and resumes at the second it stopped. A member who has lost\n * the entitlement gets the locked state instead.\n */\nconst GatedVideo = forwardRef<HTMLDivElement, GatedVideoProps>(\n  (props, ref) => {\n    const { productId, videoIndex, lockedText, ...rest } = props\n    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).\n    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [props['sx']]\n    const { hostId } = Aglyn.useSite()\n    const siteFetch = Aglyn.useSiteFetch()\n    const [src, setSrc] = useState<string | null>(null)\n    const [state, setState] = useState<\n      'loading' | 'locked' | 'ready' | 'stalled'\n    >('loading')\n    const videoRef = useRef<HTMLVideoElement | null>(null)\n    /**\n     * Where a recovery stands. A ref, not state: the media events that read\n     * and write it fire many times a second, and none of it is rendered.\n     */\n    const recovery = useRef({\n      attempts: 0,\n      resumeAt: 0,\n      resume: false,\n      playing: false,\n      playedFrom: 0,\n    })\n    const resumeKey = `aglyn_video_${hostId}_${productId}_${videoIndex ?? 0}`\n\n    /** One POST to the stream endpoint: a link, or why there is none. */\n    const requestLink = useCallback(async (): Promise<string | 'locked' | 'failed'> => {\n      try {\n        const response = await siteFetch('/api/commerce/stream', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({\n            hostId,\n            productId,\n            video: videoIndex ?? 0,\n          }),\n        })\n        if (response.status === 401 || response.status === 403) return 'locked'\n        if (!response.ok) return 'failed'\n        const payload = await response.json()\n        return typeof payload?.url === 'string' && payload.url\n          ? payload.url\n          : 'failed'\n      } catch {\n        return 'failed'\n      }\n    }, [hostId, productId, videoIndex, siteFetch])\n\n    useEffect(() => {\n      if (!hostId || !productId) return\n      let active = true\n      recovery.current = {\n        attempts: 0,\n        resumeAt: 0,\n        resume: false,\n        playing: false,\n        playedFrom: 0,\n      }\n      void requestLink().then((link) => {\n        if (!active) return\n        // Before anything has played, every refusal reads as the lock: the\n        // viewer's next step is to sign in or to buy.\n        if (link === 'locked' || link === 'failed') return setState('locked')\n        setSrc(link)\n        setState('ready')\n      })\n      return () => {\n        active = false\n      }\n    }, [hostId, productId, requestLink])\n\n    const handleError = () => {\n      const element = videoRef.current\n      if (!element || !RECOVERABLE_MEDIA_ERRORS.has(Number(element.error?.code))) {\n        return\n      }\n      const progress = recovery.current\n      if (progress.attempts >= MAX_SILENT_RECOVERIES) {\n        setState('stalled')\n        return\n      }\n      progress.attempts += 1\n      progress.resumeAt = element.currentTime || progress.resumeAt\n      progress.resume = progress.playing || !element.paused\n      void requestLink().then((link) => {\n        if (link === 'locked') return setState('locked')\n        if (link === 'failed') return setState('stalled')\n        setSrc(link)\n      })\n    }\n\n    const handleLoadedMetadata = () => {\n      const element = videoRef.current\n      if (!element) return\n      const progress = recovery.current\n      const saved = Number(window.localStorage.getItem(resumeKey) ?? 0)\n      const target =\n        progress.resumeAt > 0 ? progress.resumeAt : saved > 5 ? saved : 0\n      if (target > 0) element.currentTime = target\n      progress.playedFrom = target\n      if (progress.resume) {\n        progress.resume = false\n        try {\n          void Promise.resolve(element.play()).catch(() => undefined)\n        } catch {\n          // A refused autoplay leaves the video paused at the right second,\n          // which is the useful half of a resume.\n        }\n      }\n    }\n\n    const handleTimeUpdate = () => {\n      const element = videoRef.current\n      if (!element) return\n      window.localStorage.setItem(\n        resumeKey,\n        String(Math.floor(element.currentTime)),\n      )\n      const progress = recovery.current\n      if (\n        progress.attempts &&\n        element.currentTime - progress.playedFrom >= RECOVERED_AFTER_SECONDS\n      ) {\n        progress.attempts = 0\n        progress.resumeAt = 0\n      }\n    }\n\n    if (!hostId) {\n      return (\n        <Box\n          ref={ref}\n          {...rest}\n          sx={[\n            {\n              aspectRatio: '16 / 9',\n              bgcolor: 'action.hover',\n              borderRadius: 1,\n              display: 'flex',\n              alignItems: 'center',\n              justifyContent: 'center',\n              color: 'text.secondary',\n              fontSize: 13,\n              fontFamily: 'system-ui, sans-serif',\n            },\n            ...nodeSx,\n          ]}\n        >\n          {'▶ Members-only video'}\n        </Box>\n      )\n    }\n    if (state === 'loading') return <Box ref={ref} {...rest} />\n    if (state === 'stalled') {\n      return (\n        <Box\n          ref={ref}\n          {...rest}\n          sx={[\n            {\n              aspectRatio: '16 / 9',\n              bgcolor: 'action.hover',\n              borderRadius: 1,\n              display: 'flex',\n              flexDirection: 'column',\n              gap: 1,\n              alignItems: 'center',\n              justifyContent: 'center',\n              px: 2,\n              textAlign: 'center',\n            },\n            ...nodeSx,\n          ]}\n        >\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {'Playback stopped. Reload the page to keep watching.'}\n          </Typography>\n          <Button\n            size=\"small\"\n            variant=\"contained\"\n            onClick={() => window.location.reload()}\n          >\n            {'Reload'}\n          </Button>\n        </Box>\n      )\n    }\n    if (state === 'locked' || !src) {\n      return (\n        <Box\n          ref={ref}\n          {...rest}\n          sx={[\n            {\n              aspectRatio: '16 / 9',\n              bgcolor: 'action.hover',\n              borderRadius: 1,\n              display: 'flex',\n              flexDirection: 'column',\n              gap: 1,\n              alignItems: 'center',\n              justifyContent: 'center',\n            },\n            ...nodeSx,\n          ]}\n        >\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {lockedText || '🔒 Sign in with an active subscription to watch'}\n          </Typography>\n          <Button size=\"small\" variant=\"contained\" href=\"/account\">\n            {'Sign in'}\n          </Button>\n        </Box>\n      )\n    }\n    return (\n      <Box ref={ref} {...rest}>\n        <video\n          ref={videoRef}\n          src={src}\n          controls\n          controlsList=\"nodownload\"\n          style={{ width: '100%', borderRadius: 8 }}\n          onLoadedMetadata={handleLoadedMetadata}\n          onTimeUpdate={handleTimeUpdate}\n          onPlay={() => {\n            recovery.current.playing = true\n          }}\n          onPause={() => {\n            recovery.current.playing = false\n          }}\n          onError={handleError}\n        />\n      </Box>\n    )\n  },\n)\nGatedVideo.displayName = 'AglynGatedVideo'\n\nexport const schema: Aglyn.ComponentSchema<GatedVideoProps> = {\n  $id: ID,\n  pluginId: BUNDLE_ID,\n  displayName: 'Members video',\n  description:\n    'A video only entitled members can play, resuming where they left off.',\n  category: Aglyn.ComponentCategory.COMMERCE,\n  icon: { path: mdiPlayCircleOutline.path, sx: { color: '#2e7d32' } },\n  flags: { selfClosing: Aglyn.FEATURE_FLAG.ENABLED },\n  attributes: [\n    {\n      name: 'productId',\n      label: 'Product id',\n      description:\n        'Members entitled to this product can watch its gated videos.',\n      component: Aglyn.FieldComponentType.PRODUCT_SELECT,\n    },\n    {\n      name: 'videoIndex',\n      label: 'Video number',\n      description: 'Which of the product’s videos to play (1st = 0).',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n      type: 'number',\n    },\n    {\n      name: 'lockedText',\n      label: 'Locked text',\n      description:\n        'The message over the poster frame when the viewer cannot play ' +\n        'this video. The poster image still shows, so this only has to ' +\n        'explain the lock.',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n  ],\n}\n\nexport const presets: Aglyn.PresetSchema[] = [\n  {\n    $id: generatePresetId(ID),\n    type: Aglyn.NodeType.PRESET,\n    displayName: 'Members video',\n    pluginId: BUNDLE_ID,\n    description: 'Subscription-gated video with resume',\n    category: Aglyn.ComponentCategory.COMMERCE,\n    icon: { path: mdiPlayCircleOutline.path, sx: { color: '#2e7d32' } },\n    data: {\n      $id: null,\n      componentId: ID,\n      pluginId: BUNDLE_ID,\n      props: {},\n    },\n  },\n]\n\nexport default GatedVideo\n"],"names":["Aglyn","mdiPlayCircleOutline","Box","Button","Typography","forwardRef","useCallback","useEffect","useRef","useState","BUNDLE_ID","generatePresetId","ID","MAX_SILENT_RECOVERIES","RECOVERED_AFTER_SECONDS","RECOVERABLE_MEDIA_ERRORS","Set","GatedVideo","props","ref","productId","videoIndex","lockedText","rest","nodeSx","Array","isArray","hostId","useSite","siteFetch","useSiteFetch","src","setSrc","state","setState","videoRef","recovery","attempts","resumeAt","resume","playing","playedFrom","resumeKey","requestLink","response","method","headers","body","JSON","stringify","video","status","ok","payload","json","url","active","current","then","link","handleError","element","has","Number","error","code","progress","currentTime","paused","handleLoadedMetadata","window","saved","localStorage","getItem","target","Promise","resolve","play","catch","undefined","handleTimeUpdate","setItem","String","Math","floor","sx","aspectRatio","bgcolor","borderRadius","display","alignItems","justifyContent","color","fontSize","fontFamily","flexDirection","gap","px","textAlign","variant","size","onClick","location","reload","href","controls","controlsList","style","width","onLoadedMetadata","onTimeUpdate","onPlay","onPause","onError","displayName","schema","$id","pluginId","description","category","ComponentCategory","COMMERCE","icon","path","flags","selfClosing","FEATURE_FLAG","ENABLED","attributes","name","label","component","FieldComponentType","PRODUCT_SELECT","TEXT_FIELD","type","presets","NodeType","PRESET","data","componentId"],"mappings":";;;AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,OAAOC,SAAS,oBAAmB;AACnC,OAAOC,YAAY,uBAAsB;AACzC,OAAOC,gBAAgB,2BAA0B;AACjD,SAASC,UAAU,EAAEC,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,QAAO;AAC5E,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,gBAAgB,QAAQ,iCAA6B;AAE9D,iEAAiE;AACjE,OAAO,MAAMC,KAAwB,cAAa;AAElD;;;;;;;;CAQC,GACD,MAAMC,wBAAwB;AAE9B;;;;CAIC,GACD,MAAMC,0BAA0B;AAEhC;;;;;;CAMC,GACD,MAAMC,2BAA2B,IAAIC,IAAI;IAAC;IAAG;CAAE;AAU/C;;;;;;;;;;CAUC,GACD,MAAMC,2BAAaZ,WACjB,CAACa,OAAOC;IACN,MAAM,EAAEC,SAAS,EAAEC,UAAU,EAAEC,UAAU,EAAW,GAAGJ,OAATK,wCAASL;;;;;IACvD,yEAAyE;IACzE,MAAMM,SAASC,MAAMC,OAAO,CAACR,KAAK,CAAC,KAAK,IAAIA,KAAK,CAAC,KAAK,GAAG;QAACA,KAAK,CAAC,KAAK;KAAC;IACvE,MAAM,EAAES,MAAM,EAAE,GAAG3B,MAAM4B,OAAO;IAChC,MAAMC,YAAY7B,MAAM8B,YAAY;IACpC,MAAM,CAACC,KAAKC,OAAO,GAAGvB,SAAwB;IAC9C,MAAM,CAACwB,OAAOC,SAAS,GAAGzB,SAExB;IACF,MAAM0B,WAAW3B,OAAgC;IACjD;;;KAGC,GACD,MAAM4B,WAAW5B,OAAO;QACtB6B,UAAU;QACVC,UAAU;QACVC,QAAQ;QACRC,SAAS;QACTC,YAAY;IACd;IACA,MAAMC,YAAY,CAAC,YAAY,EAAEf,OAAO,CAAC,EAAEP,UAAU,CAAC,EAAEC,qBAAAA,aAAc,GAAG;IAEzE,mEAAmE,GACnE,MAAMsB,cAAcrC,YAAY;QAC9B,IAAI;YACF,MAAMsC,WAAW,MAAMf,UAAU,wBAAwB;gBACvDgB,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBACnBtB;oBACAP;oBACA8B,KAAK,EAAE7B,qBAAAA,aAAc;gBACvB;YACF;YACA,IAAIuB,SAASO,MAAM,KAAK,OAAOP,SAASO,MAAM,KAAK,KAAK,OAAO;YAC/D,IAAI,CAACP,SAASQ,EAAE,EAAE,OAAO;YACzB,MAAMC,UAAU,MAAMT,SAASU,IAAI;YACnC,OAAO,QAAOD,2BAAAA,QAASE,GAAG,MAAK,YAAYF,QAAQE,GAAG,GAClDF,QAAQE,GAAG,GACX;QACN,EAAE,eAAM;YACN,OAAO;QACT;IACF,GAAG;QAAC5B;QAAQP;QAAWC;QAAYQ;KAAU;IAE7CtB,UAAU;QACR,IAAI,CAACoB,UAAU,CAACP,WAAW;QAC3B,IAAIoC,SAAS;QACbpB,SAASqB,OAAO,GAAG;YACjBpB,UAAU;YACVC,UAAU;YACVC,QAAQ;YACRC,SAAS;YACTC,YAAY;QACd;QACA,KAAKE,cAAce,IAAI,CAAC,CAACC;YACvB,IAAI,CAACH,QAAQ;YACb,mEAAmE;YACnE,8CAA8C;YAC9C,IAAIG,SAAS,YAAYA,SAAS,UAAU,OAAOzB,SAAS;YAC5DF,OAAO2B;YACPzB,SAAS;QACX;QACA,OAAO;YACLsB,SAAS;QACX;IACF,GAAG;QAAC7B;QAAQP;QAAWuB;KAAY;IAEnC,MAAMiB,cAAc;YAEmCC;QADrD,MAAMA,UAAU1B,SAASsB,OAAO;QAChC,IAAI,CAACI,WAAW,CAAC9C,yBAAyB+C,GAAG,CAACC,QAAOF,iBAAAA,QAAQG,KAAK,qBAAbH,eAAeI,IAAI,IAAI;YAC1E;QACF;QACA,MAAMC,WAAW9B,SAASqB,OAAO;QACjC,IAAIS,SAAS7B,QAAQ,IAAIxB,uBAAuB;YAC9CqB,SAAS;YACT;QACF;QACAgC,SAAS7B,QAAQ,IAAI;QACrB6B,SAAS5B,QAAQ,GAAGuB,QAAQM,WAAW,IAAID,SAAS5B,QAAQ;QAC5D4B,SAAS3B,MAAM,GAAG2B,SAAS1B,OAAO,IAAI,CAACqB,QAAQO,MAAM;QACrD,KAAKzB,cAAce,IAAI,CAAC,CAACC;YACvB,IAAIA,SAAS,UAAU,OAAOzB,SAAS;YACvC,IAAIyB,SAAS,UAAU,OAAOzB,SAAS;YACvCF,OAAO2B;QACT;IACF;IAEA,MAAMU,uBAAuB;YAINC;QAHrB,MAAMT,UAAU1B,SAASsB,OAAO;QAChC,IAAI,CAACI,SAAS;QACd,MAAMK,WAAW9B,SAASqB,OAAO;QACjC,MAAMc,QAAQR,QAAOO,+BAAAA,OAAOE,YAAY,CAACC,OAAO,CAAC/B,sBAA5B4B,+BAA0C;QAC/D,MAAMI,SACJR,SAAS5B,QAAQ,GAAG,IAAI4B,SAAS5B,QAAQ,GAAGiC,QAAQ,IAAIA,QAAQ;QAClE,IAAIG,SAAS,GAAGb,QAAQM,WAAW,GAAGO;QACtCR,SAASzB,UAAU,GAAGiC;QACtB,IAAIR,SAAS3B,MAAM,EAAE;YACnB2B,SAAS3B,MAAM,GAAG;YAClB,IAAI;gBACF,KAAKoC,QAAQC,OAAO,CAACf,QAAQgB,IAAI,IAAIC,KAAK,CAAC,IAAMC;YACnD,EAAE,eAAM;YACN,kEAAkE;YAClE,wCAAwC;YAC1C;QACF;IACF;IAEA,MAAMC,mBAAmB;QACvB,MAAMnB,UAAU1B,SAASsB,OAAO;QAChC,IAAI,CAACI,SAAS;QACdS,OAAOE,YAAY,CAACS,OAAO,CACzBvC,WACAwC,OAAOC,KAAKC,KAAK,CAACvB,QAAQM,WAAW;QAEvC,MAAMD,WAAW9B,SAASqB,OAAO;QACjC,IACES,SAAS7B,QAAQ,IACjBwB,QAAQM,WAAW,GAAGD,SAASzB,UAAU,IAAI3B,yBAC7C;YACAoD,SAAS7B,QAAQ,GAAG;YACpB6B,SAAS5B,QAAQ,GAAG;QACtB;IACF;IAEA,IAAI,CAACX,QAAQ;QACX,qBACE,KAACzB;YACCiB,KAAKA;WACDI;YACJ8D,IAAI;gBACF;oBACEC,aAAa;oBACbC,SAAS;oBACTC,cAAc;oBACdC,SAAS;oBACTC,YAAY;oBACZC,gBAAgB;oBAChBC,OAAO;oBACPC,UAAU;oBACVC,YAAY;gBACd;mBACGtE;aACJ;sBAEA;;IAGP;IACA,IAAIS,UAAU,WAAW,qBAAO,KAAC/B;QAAIiB,KAAKA;OAASI;IACnD,IAAIU,UAAU,WAAW;QACvB,qBACE,MAAC/B;YACCiB,KAAKA;WACDI;YACJ8D,IAAI;gBACF;oBACEC,aAAa;oBACbC,SAAS;oBACTC,cAAc;oBACdC,SAAS;oBACTM,eAAe;oBACfC,KAAK;oBACLN,YAAY;oBACZC,gBAAgB;oBAChBM,IAAI;oBACJC,WAAW;gBACb;mBACG1E;aACJ;;8BAED,KAACpB;oBAAW+F,SAAQ;oBAAQP,OAAM;8BAC/B;;8BAEH,KAACzF;oBACCiG,MAAK;oBACLD,SAAQ;oBACRE,SAAS,IAAM/B,OAAOgC,QAAQ,CAACC,MAAM;8BAEpC;;;;IAIT;IACA,IAAItE,UAAU,YAAY,CAACF,KAAK;QAC9B,qBACE,MAAC7B;YACCiB,KAAKA;WACDI;YACJ8D,IAAI;gBACF;oBACEC,aAAa;oBACbC,SAAS;oBACTC,cAAc;oBACdC,SAAS;oBACTM,eAAe;oBACfC,KAAK;oBACLN,YAAY;oBACZC,gBAAgB;gBAClB;mBACGnE;aACJ;;8BAED,KAACpB;oBAAW+F,SAAQ;oBAAQP,OAAM;8BAC/BtE,cAAc;;8BAEjB,KAACnB;oBAAOiG,MAAK;oBAAQD,SAAQ;oBAAYK,MAAK;8BAC3C;;;;IAIT;IACA,qBACE,KAACtG;QAAIiB,KAAKA;OAASI;kBACjB,cAAA,KAAC2B;YACC/B,KAAKgB;YACLJ,KAAKA;YACL0E,QAAQ;YACRC,cAAa;YACbC,OAAO;gBAAEC,OAAO;gBAAQpB,cAAc;YAAE;YACxCqB,kBAAkBxC;YAClByC,cAAc9B;YACd+B,QAAQ;gBACN3E,SAASqB,OAAO,CAACjB,OAAO,GAAG;YAC7B;YACAwE,SAAS;gBACP5E,SAASqB,OAAO,CAACjB,OAAO,GAAG;YAC7B;YACAyE,SAASrD;;;AAIjB;AAEF3C,WAAWiG,WAAW,GAAG;AAEzB,OAAO,MAAMC,SAAiD;IAC5DC,KAAKxG;IACLyG,UAAU3G;IACVwG,aAAa;IACbI,aACE;IACFC,UAAUvH,MAAMwH,iBAAiB,CAACC,QAAQ;IAC1CC,MAAM;QAAEC,MAAM1H,qBAAqB0H,IAAI;QAAEtC,IAAI;YAAEO,OAAO;QAAU;IAAE;IAClEgC,OAAO;QAAEC,aAAa7H,MAAM8H,YAAY,CAACC,OAAO;IAAC;IACjDC,YAAY;QACV;YACEC,MAAM;YACNC,OAAO;YACPZ,aACE;YACFa,WAAWnI,MAAMoI,kBAAkB,CAACC,cAAc;QACpD;QACA;YACEJ,MAAM;YACNC,OAAO;YACPZ,aAAa;YACba,WAAWnI,MAAMoI,kBAAkB,CAACE,UAAU;YAC9CC,MAAM;QACR;QACA;YACEN,MAAM;YACNC,OAAO;YACPZ,aACE,mEACA,mEACA;YACFa,WAAWnI,MAAMoI,kBAAkB,CAACE,UAAU;QAChD;KACD;AACH,EAAC;AAED,OAAO,MAAME,UAAgC;IAC3C;QACEpB,KAAKzG,iBAAiBC;QACtB2H,MAAMvI,MAAMyI,QAAQ,CAACC,MAAM;QAC3BxB,aAAa;QACbG,UAAU3G;QACV4G,aAAa;QACbC,UAAUvH,MAAMwH,iBAAiB,CAACC,QAAQ;QAC1CC,MAAM;YAAEC,MAAM1H,qBAAqB0H,IAAI;YAAEtC,IAAI;gBAAEO,OAAO;YAAU;QAAE;QAClE+C,MAAM;YACJvB,KAAK;YACLwB,aAAahI;YACbyG,UAAU3G;YACVQ,OAAO,CAAC;QACV;IACF;CACD,CAAA;AAED,eAAeD,WAAU"}

package/src/lib/components/member-feed.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import * as Aglyn from '@aglyn/aglyn';
+export declare const ID: Aglyn.ComponentId;
+export interface MemberFeedProps {
+    heading?: string;
+    emptyText?: string;
+    maxItems?: number;
+}
+/**
+ * Member updates feed (AGL-316): entitlement-filtered posts from the
+ * server-enforced feed API. Non-members get the sign-in nudge — the
+ * bodies never reach them.
+ */
+declare const MemberFeed: import("react").ForwardRefExoticComponent<MemberFeedProps & import("react").RefAttributes<HTMLDivElement>>;
+export declare const schema: Aglyn.ComponentSchema<MemberFeedProps>;
+export declare const presets: Aglyn.PresetSchema[];
+export default MemberFeed;

package/src/lib/components/member-feed.js

@@ -0,0 +1,198 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+import { mdiBellRingOutline } from "@aglyn/shared-data-mdi";
+import Box from "@mui/material/Box";
+import Divider from "@mui/material/Divider";
+import Typography from "@mui/material/Typography";
+import { forwardRef, useEffect, useState } from "react";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+import { generatePresetId } from "../utils/generate-preset-id.js";
+// Component ids are persisted in screen documents; never rename.
+export const ID = 'member-feed';
+/**
+ * Member updates feed (AGL-316): entitlement-filtered posts from the
+ * server-enforced feed API. Non-members get the sign-in nudge — the
+ * bodies never reach them.
+ */ const MemberFeed = /*#__PURE__*/ forwardRef((props, ref)=>{
+    const { heading, emptyText, maxItems } = props, rest = _object_without_properties_loose(props, [
+        "heading",
+        "emptyText",
+        "maxItems"
+    ]);
+    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).
+    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [
+        props['sx']
+    ];
+    const { hostId } = Aglyn.useSite();
+    const [posts, setPosts] = useState(null);
+    useEffect(()=>{
+        if (!hostId) return;
+        let active = true;
+        void fetch(`/api/commerce/member-feed?hostId=${encodeURIComponent(hostId)}`).then(async (response)=>{
+            var _ref;
+            if (!active) return;
+            if (response.status === 401) return setPosts('anonymous');
+            const payload = await response.json();
+            setPosts((_ref = payload == null ? void 0 : payload.posts) != null ? _ref : []);
+        }).catch(()=>{
+            if (active) setPosts([]);
+        });
+        return ()=>{
+            active = false;
+        };
+    }, [
+        hostId
+    ]);
+    if (!hostId) {
+        return /*#__PURE__*/ _jsx(Box, _extends({
+            ref: ref
+        }, rest, {
+            sx: [
+                {
+                    p: 3,
+                    border: '1px dashed',
+                    borderColor: 'divider',
+                    borderRadius: 1,
+                    color: 'text.secondary',
+                    fontSize: 13,
+                    fontFamily: 'system-ui, sans-serif'
+                },
+                ...nodeSx
+            ],
+            children: 'Member feed — updates for subscribers render here'
+        }));
+    }
+    if (posts === null) return /*#__PURE__*/ _jsx(Box, _extends({
+        ref: ref
+    }, rest));
+    return /*#__PURE__*/ _jsxs(Box, _extends({
+        ref: ref
+    }, rest, {
+        children: [
+            heading ? /*#__PURE__*/ _jsx(Typography, {
+                variant: "h5",
+                gutterBottom: true,
+                children: heading
+            }) : null,
+            posts === 'anonymous' ? /*#__PURE__*/ _jsx(Typography, {
+                variant: "body2",
+                color: "text.secondary",
+                children: 'Sign in with your membership to see updates.'
+            }) : posts.length === 0 ? /*#__PURE__*/ _jsx(Typography, {
+                variant: "body2",
+                color: "text.secondary",
+                children: emptyText || 'No updates yet — check back soon.'
+            }) : posts.slice(0, maxItems && maxItems > 0 ? maxItems : 20).map((post, index)=>/*#__PURE__*/ _jsxs(Box, {
+                    sx: {
+                        py: 1.5
+                    },
+                    children: [
+                        index > 0 ? /*#__PURE__*/ _jsx(Divider, {
+                            sx: {
+                                mb: 1.5
+                            }
+                        }) : null,
+                        /*#__PURE__*/ _jsx(Typography, {
+                            variant: "subtitle1",
+                            children: post.title
+                        }),
+                        /*#__PURE__*/ _jsx(Typography, {
+                            variant: "caption",
+                            color: "text.secondary",
+                            children: new Date(post.createdAtMs).toLocaleDateString()
+                        }),
+                        post.body ? /*#__PURE__*/ _jsx(Typography, {
+                            variant: "body2",
+                            sx: {
+                                mt: 0.5,
+                                whiteSpace: 'pre-wrap'
+                            },
+                            children: post.body
+                        }) : null
+                    ]
+                }, post.id))
+        ]
+    }));
+});
+MemberFeed.displayName = 'AglynMemberFeed';
+export const schema = {
+    $id: ID,
+    pluginId: BUNDLE_ID,
+    displayName: 'Member feed',
+    description: 'Updates only entitled members can see. Non-members never receive them.',
+    category: Aglyn.ComponentCategory.COMMERCE,
+    icon: {
+        path: mdiBellRingOutline.path,
+        sx: {
+            color: '#2e7d32'
+        }
+    },
+    flags: {
+        selfClosing: Aglyn.FEATURE_FLAG.ENABLED
+    },
+    attributes: [
+        {
+            name: 'heading',
+            label: 'Heading',
+            description: 'Shown above the feed.',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        },
+        {
+            name: 'emptyText',
+            label: 'Empty text',
+            description: 'Copy when there are no posts.',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        },
+        {
+            name: 'maxItems',
+            label: 'Max posts',
+            description: 'Cap the number shown (default 20).',
+            component: Aglyn.FieldComponentType.TEXT_FIELD,
+            type: 'number'
+        }
+    ]
+};
+export const presets = [
+    {
+        $id: generatePresetId(ID),
+        type: Aglyn.NodeType.PRESET,
+        displayName: 'Member feed',
+        pluginId: BUNDLE_ID,
+        description: 'Updates visible only to entitled members',
+        category: Aglyn.ComponentCategory.COMMERCE,
+        icon: {
+            path: mdiBellRingOutline.path,
+            sx: {
+                color: '#2e7d32'
+            }
+        },
+        data: {
+            $id: null,
+            componentId: ID,
+            pluginId: BUNDLE_ID,
+            props: {
+                heading: 'Member updates'
+            }
+        }
+    }
+];
+export default MemberFeed;
+
+//# sourceMappingURL=member-feed.js.map

package/src/lib/components/member-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/components/member-feed.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiBellRingOutline } from '@aglyn/shared-data-mdi'\nimport Box from '@mui/material/Box'\nimport Divider from '@mui/material/Divider'\nimport Typography from '@mui/material/Typography'\nimport { forwardRef, useEffect, useState } from 'react'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { generatePresetId } from '../utils/generate-preset-id'\n\n// Component ids are persisted in screen documents; never rename.\nexport const ID: Aglyn.ComponentId = 'member-feed'\n\nexport interface MemberFeedProps {\n  heading?: string\n  emptyText?: string\n  maxItems?: number\n}\n\ninterface FeedPost {\n  id: string\n  title: string\n  body: string\n  createdAtMs: number\n}\n\n/**\n * Member updates feed (AGL-316): entitlement-filtered posts from the\n * server-enforced feed API. Non-members get the sign-in nudge — the\n * bodies never reach them.\n */\nconst MemberFeed = forwardRef<HTMLDivElement, MemberFeedProps>(\n  (props, ref) => {\n    const { heading, emptyText, maxItems, ...rest } = props\n    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).\n    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [props['sx']]\n    const { hostId } = Aglyn.useSite()\n    const [posts, setPosts] = useState<FeedPost[] | null | 'anonymous'>(null)\n\n    useEffect(() => {\n      if (!hostId) return\n      let active = true\n      void fetch(\n        `/api/commerce/member-feed?hostId=${encodeURIComponent(hostId)}`,\n      )\n        .then(async (response) => {\n          if (!active) return\n          if (response.status === 401) return setPosts('anonymous')\n          const payload = await response.json()\n          setPosts(payload?.posts ?? [])\n        })\n        .catch(() => {\n          if (active) setPosts([])\n        })\n      return () => {\n        active = false\n      }\n    }, [hostId])\n\n    if (!hostId) {\n      return (\n        <Box\n          ref={ref}\n          {...rest}\n          sx={[\n            {\n              p: 3,\n              border: '1px dashed',\n              borderColor: 'divider',\n              borderRadius: 1,\n              color: 'text.secondary',\n              fontSize: 13,\n              fontFamily: 'system-ui, sans-serif',\n            },\n            ...nodeSx,\n          ]}\n        >\n          {'Member feed — updates for subscribers render here'}\n        </Box>\n      )\n    }\n    if (posts === null) return <Box ref={ref} {...rest} />\n\n    return (\n      <Box ref={ref} {...rest}>\n        {heading ? (\n          <Typography variant=\"h5\" gutterBottom>\n            {heading}\n          </Typography>\n        ) : null}\n        {posts === 'anonymous' ? (\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {'Sign in with your membership to see updates.'}\n          </Typography>\n        ) : posts.length === 0 ? (\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {emptyText || 'No updates yet — check back soon.'}\n          </Typography>\n        ) : (\n          posts\n            .slice(0, maxItems && maxItems > 0 ? maxItems : 20)\n            .map((post, index) => (\n              <Box key={post.id} sx={{ py: 1.5 }}>\n                {index > 0 ? <Divider sx={{ mb: 1.5 }} /> : null}\n                <Typography variant=\"subtitle1\">{post.title}</Typography>\n                <Typography variant=\"caption\" color=\"text.secondary\">\n                  {new Date(post.createdAtMs).toLocaleDateString()}\n                </Typography>\n                {post.body ? (\n                  <Typography\n                    variant=\"body2\"\n                    sx={{ mt: 0.5, whiteSpace: 'pre-wrap' }}\n                  >\n                    {post.body}\n                  </Typography>\n                ) : null}\n              </Box>\n            ))\n        )}\n      </Box>\n    )\n  },\n)\nMemberFeed.displayName = 'AglynMemberFeed'\n\nexport const schema: Aglyn.ComponentSchema<MemberFeedProps> = {\n  $id: ID,\n  pluginId: BUNDLE_ID,\n  displayName: 'Member feed',\n  description:\n    'Updates only entitled members can see. Non-members never receive them.',\n  category: Aglyn.ComponentCategory.COMMERCE,\n  icon: { path: mdiBellRingOutline.path, sx: { color: '#2e7d32' } },\n  flags: { selfClosing: Aglyn.FEATURE_FLAG.ENABLED },\n  attributes: [\n    {\n      name: 'heading',\n      label: 'Heading',\n      description: 'Shown above the feed.',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n    {\n      name: 'emptyText',\n      label: 'Empty text',\n      description: 'Copy when there are no posts.',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n    {\n      name: 'maxItems',\n      label: 'Max posts',\n      description: 'Cap the number shown (default 20).',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n      type: 'number',\n    },\n  ],\n}\n\nexport const presets: Aglyn.PresetSchema[] = [\n  {\n    $id: generatePresetId(ID),\n    type: Aglyn.NodeType.PRESET,\n    displayName: 'Member feed',\n    pluginId: BUNDLE_ID,\n    description: 'Updates visible only to entitled members',\n    category: Aglyn.ComponentCategory.COMMERCE,\n    icon: { path: mdiBellRingOutline.path, sx: { color: '#2e7d32' } },\n    data: {\n      $id: null,\n      componentId: ID,\n      pluginId: BUNDLE_ID,\n      props: { heading: 'Member updates' },\n    },\n  },\n]\n\nexport default MemberFeed\n"],"names":["Aglyn","mdiBellRingOutline","Box","Divider","Typography","forwardRef","useEffect","useState","BUNDLE_ID","generatePresetId","ID","MemberFeed","props","ref","heading","emptyText","maxItems","rest","nodeSx","Array","isArray","hostId","useSite","posts","setPosts","active","fetch","encodeURIComponent","then","response","status","payload","json","catch","sx","p","border","borderColor","borderRadius","color","fontSize","fontFamily","variant","gutterBottom","length","slice","map","post","index","py","mb","title","Date","createdAtMs","toLocaleDateString","body","mt","whiteSpace","id","displayName","schema","$id","pluginId","description","category","ComponentCategory","COMMERCE","icon","path","flags","selfClosing","FEATURE_FLAG","ENABLED","attributes","name","label","component","FieldComponentType","TEXT_FIELD","type","presets","NodeType","PRESET","data","componentId"],"mappings":";;;AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,kBAAkB,QAAQ,yBAAwB;AAC3D,OAAOC,SAAS,oBAAmB;AACnC,OAAOC,aAAa,wBAAuB;AAC3C,OAAOC,gBAAgB,2BAA0B;AACjD,SAASC,UAAU,EAAEC,SAAS,EAAEC,QAAQ,QAAQ,QAAO;AACvD,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,gBAAgB,QAAQ,iCAA6B;AAE9D,iEAAiE;AACjE,OAAO,MAAMC,KAAwB,cAAa;AAelD;;;;CAIC,GACD,MAAMC,2BAAaN,WACjB,CAACO,OAAOC;IACN,MAAM,EAAEC,OAAO,EAAEC,SAAS,EAAEC,QAAQ,EAAW,GAAGJ,OAATK,wCAASL;;;;;IAClD,yEAAyE;IACzE,MAAMM,SAASC,MAAMC,OAAO,CAACR,KAAK,CAAC,KAAK,IAAIA,KAAK,CAAC,KAAK,GAAG;QAACA,KAAK,CAAC,KAAK;KAAC;IACvE,MAAM,EAAES,MAAM,EAAE,GAAGrB,MAAMsB,OAAO;IAChC,MAAM,CAACC,OAAOC,SAAS,GAAGjB,SAA0C;IAEpED,UAAU;QACR,IAAI,CAACe,QAAQ;QACb,IAAII,SAAS;QACb,KAAKC,MACH,CAAC,iCAAiC,EAAEC,mBAAmBN,SAAS,EAE/DO,IAAI,CAAC,OAAOC;;YACX,IAAI,CAACJ,QAAQ;YACb,IAAII,SAASC,MAAM,KAAK,KAAK,OAAON,SAAS;YAC7C,MAAMO,UAAU,MAAMF,SAASG,IAAI;YACnCR,iBAASO,2BAAAA,QAASR,KAAK,mBAAI,EAAE;QAC/B,GACCU,KAAK,CAAC;YACL,IAAIR,QAAQD,SAAS,EAAE;QACzB;QACF,OAAO;YACLC,SAAS;QACX;IACF,GAAG;QAACJ;KAAO;IAEX,IAAI,CAACA,QAAQ;QACX,qBACE,KAACnB;YACCW,KAAKA;WACDI;YACJiB,IAAI;gBACF;oBACEC,GAAG;oBACHC,QAAQ;oBACRC,aAAa;oBACbC,cAAc;oBACdC,OAAO;oBACPC,UAAU;oBACVC,YAAY;gBACd;mBACGvB;aACJ;sBAEA;;IAGP;IACA,IAAIK,UAAU,MAAM,qBAAO,KAACrB;QAAIW,KAAKA;OAASI;IAE9C,qBACE,MAACf;QAAIW,KAAKA;OAASI;;YAChBH,wBACC,KAACV;gBAAWsC,SAAQ;gBAAKC,YAAY;0BAClC7B;iBAED;YACHS,UAAU,4BACT,KAACnB;gBAAWsC,SAAQ;gBAAQH,OAAM;0BAC/B;iBAEDhB,MAAMqB,MAAM,KAAK,kBACnB,KAACxC;gBAAWsC,SAAQ;gBAAQH,OAAM;0BAC/BxB,aAAa;iBAGhBQ,MACGsB,KAAK,CAAC,GAAG7B,YAAYA,WAAW,IAAIA,WAAW,IAC/C8B,GAAG,CAAC,CAACC,MAAMC,sBACV,MAAC9C;oBAAkBgC,IAAI;wBAAEe,IAAI;oBAAI;;wBAC9BD,QAAQ,kBAAI,KAAC7C;4BAAQ+B,IAAI;gCAAEgB,IAAI;4BAAI;6BAAQ;sCAC5C,KAAC9C;4BAAWsC,SAAQ;sCAAaK,KAAKI,KAAK;;sCAC3C,KAAC/C;4BAAWsC,SAAQ;4BAAUH,OAAM;sCACjC,IAAIa,KAAKL,KAAKM,WAAW,EAAEC,kBAAkB;;wBAE/CP,KAAKQ,IAAI,iBACR,KAACnD;4BACCsC,SAAQ;4BACRR,IAAI;gCAAEsB,IAAI;gCAAKC,YAAY;4BAAW;sCAErCV,KAAKQ,IAAI;6BAEV;;mBAbIR,KAAKW,EAAE;;;AAmB7B;AAEF/C,WAAWgD,WAAW,GAAG;AAEzB,OAAO,MAAMC,SAAiD;IAC5DC,KAAKnD;IACLoD,UAAUtD;IACVmD,aAAa;IACbI,aACE;IACFC,UAAUhE,MAAMiE,iBAAiB,CAACC,QAAQ;IAC1CC,MAAM;QAAEC,MAAMnE,mBAAmBmE,IAAI;QAAElC,IAAI;YAAEK,OAAO;QAAU;IAAE;IAChE8B,OAAO;QAAEC,aAAatE,MAAMuE,YAAY,CAACC,OAAO;IAAC;IACjDC,YAAY;QACV;YACEC,MAAM;YACNC,OAAO;YACPZ,aAAa;YACba,WAAW5E,MAAM6E,kBAAkB,CAACC,UAAU;QAChD;QACA;YACEJ,MAAM;YACNC,OAAO;YACPZ,aAAa;YACba,WAAW5E,MAAM6E,kBAAkB,CAACC,UAAU;QAChD;QACA;YACEJ,MAAM;YACNC,OAAO;YACPZ,aAAa;YACba,WAAW5E,MAAM6E,kBAAkB,CAACC,UAAU;YAC9CC,MAAM;QACR;KACD;AACH,EAAC;AAED,OAAO,MAAMC,UAAgC;IAC3C;QACEnB,KAAKpD,iBAAiBC;QACtBqE,MAAM/E,MAAMiF,QAAQ,CAACC,MAAM;QAC3BvB,aAAa;QACbG,UAAUtD;QACVuD,aAAa;QACbC,UAAUhE,MAAMiE,iBAAiB,CAACC,QAAQ;QAC1CC,MAAM;YAAEC,MAAMnE,mBAAmBmE,IAAI;YAAElC,IAAI;gBAAEK,OAAO;YAAU;QAAE;QAChE4C,MAAM;YACJtB,KAAK;YACLuB,aAAa1E;YACboD,UAAUtD;YACVI,OAAO;gBAAEE,SAAS;YAAiB;QACrC;IACF;CACD,CAAA;AAED,eAAeH,WAAU"}

package/src/lib/components/member-recovery.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import * as Aglyn from '@aglyn/aglyn';
+export declare const ID: Aglyn.ComponentId;
+export interface MemberRecoveryProps {
+    heading?: string;
+    signinPath?: string;
+}
+/**
+ * Password recovery block (AGL-552), styled to match the customer-account
+ * forms. Two modes on one block: without a `token` query param it shows
+ * the request-email form (/api/membership/recover — always "sent", no
+ * account-existence leak); with one it shows the new-password form
+ * (/api/membership/reset) and links to sign-in on success. Drop it on the
+ * screen designated as the site's recovery page (AGL-553) — the built-in
+ * /recover route renders the same flows when no screen is designated.
+ */
+declare const MemberRecovery: import("react").ForwardRefExoticComponent<MemberRecoveryProps & import("react").RefAttributes<HTMLDivElement>>;
+export declare const schema: Aglyn.ComponentSchema<MemberRecoveryProps>;
+export declare const presets: Aglyn.PresetSchema[];
+export default MemberRecovery;

package/src/lib/components/member-recovery.js

@@ -0,0 +1,313 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+import { mdiLockReset } from "@aglyn/shared-data-mdi";
+import Alert from "@mui/material/Alert";
+import Box from "@mui/material/Box";
+import Button from "@mui/material/Button";
+import Link from "@mui/material/Link";
+import TextField from "@mui/material/TextField";
+import Typography from "@mui/material/Typography";
+import { forwardRef, useCallback, useEffect, useState } from "react";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+import { generatePresetId } from "../utils/generate-preset-id.js";
+// Component ids are persisted in screen documents; never rename.
+export const ID = 'member-recovery';
+/**
+ * Password recovery block (AGL-552), styled to match the customer-account
+ * forms. Two modes on one block: without a `token` query param it shows
+ * the request-email form (/api/membership/recover — always "sent", no
+ * account-existence leak); with one it shows the new-password form
+ * (/api/membership/reset) and links to sign-in on success. Drop it on the
+ * screen designated as the site's recovery page (AGL-553) — the built-in
+ * /recover route renders the same flows when no screen is designated.
+ */ const MemberRecovery = /*#__PURE__*/ forwardRef((props, ref)=>{
+    const { heading, signinPath } = props, rest = _object_without_properties_loose(props, [
+        "heading",
+        "signinPath"
+    ]);
+    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).
+    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [
+        props['sx']
+    ];
+    const { hostId } = Aglyn.useSite();
+    const siteFetch = Aglyn.useSiteFetch();
+    // Read post-hydration only: the block server-renders inside published
+    // screens, where the query string is unavailable.
+    const [token, setToken] = useState('');
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState('');
+    const [done, setDone] = useState(null);
+    useEffect(()=>{
+        var _get;
+        setToken((_get = new URLSearchParams(window.location.search).get('token')) != null ? _get : '');
+    }, []);
+    const signinHref = signinPath || '/signin';
+    const handleRequest = useCallback(async ()=>{
+        if (!hostId || busy) return;
+        setBusy(true);
+        setError('');
+        try {
+            const response = await siteFetch('/api/membership/recover', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    hostId,
+                    email
+                })
+            });
+            if (!response.ok) {
+                var _ref;
+                const payload = await response.json().catch(()=>({}));
+                setError(String((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Something went wrong'));
+                return;
+            }
+            setDone('requested');
+        } finally{
+            setBusy(false);
+        }
+    }, [
+        hostId,
+        busy,
+        email,
+        siteFetch
+    ]);
+    const handleReset = useCallback(async ()=>{
+        if (!hostId || busy) return;
+        setBusy(true);
+        setError('');
+        try {
+            const response = await siteFetch('/api/membership/reset', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    hostId,
+                    token,
+                    password
+                })
+            });
+            if (!response.ok) {
+                var _ref;
+                const payload = await response.json().catch(()=>({}));
+                setError(String((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Something went wrong'));
+                return;
+            }
+            setDone('reset');
+        } finally{
+            setBusy(false);
+        }
+    }, [
+        hostId,
+        busy,
+        token,
+        password,
+        siteFetch
+    ]);
+    if (!hostId) {
+        return /*#__PURE__*/ _jsx(Box, _extends({
+            ref: ref
+        }, rest, {
+            sx: [
+                {
+                    p: 3,
+                    border: '1px dashed',
+                    borderColor: 'divider',
+                    borderRadius: 1,
+                    color: 'text.secondary',
+                    fontSize: 13,
+                    fontFamily: 'system-ui, sans-serif'
+                },
+                ...nodeSx
+            ],
+            children: 'Password recovery — request and reset forms render here'
+        }));
+    }
+    return /*#__PURE__*/ _jsxs(Box, _extends({
+        ref: ref
+    }, rest, {
+        sx: [
+            {
+                maxWidth: 420
+            },
+            ...nodeSx
+        ],
+        children: [
+            /*#__PURE__*/ _jsx(Typography, {
+                variant: "h5",
+                gutterBottom: true,
+                children: heading || 'Reset your password'
+            }),
+            done === 'reset' ? /*#__PURE__*/ _jsxs(Box, {
+                sx: {
+                    display: 'flex',
+                    flexDirection: 'column',
+                    gap: 1.5
+                },
+                children: [
+                    /*#__PURE__*/ _jsx(Alert, {
+                        severity: "success",
+                        children: 'Your password has been updated.'
+                    }),
+                    /*#__PURE__*/ _jsx(Button, {
+                        variant: "contained",
+                        color: "primary",
+                        href: signinHref,
+                        sx: {
+                            alignSelf: 'flex-start'
+                        },
+                        children: 'Sign in'
+                    })
+                ]
+            }) : done === 'requested' ? /*#__PURE__*/ _jsx(Alert, {
+                severity: "success",
+                children: 'If that email belongs to an account here, a reset link is on ' + 'its way. The link works once and expires in an hour.'
+            }) : token ? /*#__PURE__*/ _jsxs(Box, {
+                sx: {
+                    display: 'flex',
+                    flexDirection: 'column',
+                    gap: 1.5,
+                    mt: 1
+                },
+                children: [
+                    /*#__PURE__*/ _jsx(TextField, {
+                        label: "New password",
+                        type: "password",
+                        value: password,
+                        onChange: (event)=>setPassword(event.target.value),
+                        size: "small",
+                        helperText: "At least 8 characters"
+                    }),
+                    error ? /*#__PURE__*/ _jsx(Alert, {
+                        severity: "error",
+                        children: error
+                    }) : null,
+                    /*#__PURE__*/ _jsx(Button, {
+                        variant: "contained",
+                        color: "primary",
+                        disabled: busy || password.length < 8,
+                        onClick: handleReset,
+                        children: busy ? 'Working…' : 'Set new password'
+                    })
+                ]
+            }) : /*#__PURE__*/ _jsxs(Box, {
+                sx: {
+                    display: 'flex',
+                    flexDirection: 'column',
+                    gap: 1.5,
+                    mt: 1
+                },
+                children: [
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        color: "text.secondary",
+                        children: 'Enter your account email and we will send you a reset link.'
+                    }),
+                    /*#__PURE__*/ _jsx(TextField, {
+                        label: "Email",
+                        type: "email",
+                        value: email,
+                        onChange: (event)=>setEmail(event.target.value),
+                        size: "small"
+                    }),
+                    error ? /*#__PURE__*/ _jsx(Alert, {
+                        severity: "error",
+                        children: error
+                    }) : null,
+                    /*#__PURE__*/ _jsx(Button, {
+                        variant: "contained",
+                        color: "primary",
+                        disabled: busy || !email,
+                        onClick: handleRequest,
+                        children: busy ? 'Working…' : 'Email me a reset link'
+                    }),
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        children: /*#__PURE__*/ _jsx(Link, {
+                            href: signinHref,
+                            underline: "hover",
+                            children: 'Back to sign in'
+                        })
+                    })
+                ]
+            })
+        ]
+    }));
+});
+MemberRecovery.displayName = 'AglynMemberRecovery';
+export const schema = {
+    $id: ID,
+    pluginId: BUNDLE_ID,
+    displayName: 'Password recovery',
+    description: 'Forgot-password request, and the reset form the emailed link opens.',
+    category: Aglyn.ComponentCategory.MEMBERS,
+    icon: {
+        path: mdiLockReset.path,
+        sx: {
+            color: '#2e7d32'
+        }
+    },
+    flags: {
+        selfClosing: Aglyn.FEATURE_FLAG.ENABLED
+    },
+    attributes: [
+        {
+            name: 'heading',
+            label: 'Heading',
+            description: 'Shown above the recovery forms.',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        },
+        {
+            name: 'signinPath',
+            label: 'Sign-in path',
+            description: 'Where "Back to sign in" points (default /signin).',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        }
+    ]
+};
+export const presets = [
+    {
+        $id: generatePresetId(ID),
+        type: Aglyn.NodeType.PRESET,
+        displayName: 'Password recovery',
+        pluginId: BUNDLE_ID,
+        description: 'Forgot-password request and reset forms',
+        category: Aglyn.ComponentCategory.MEMBERS,
+        icon: {
+            path: mdiLockReset.path,
+            sx: {
+                color: '#2e7d32'
+            }
+        },
+        data: {
+            $id: null,
+            componentId: ID,
+            pluginId: BUNDLE_ID,
+            props: {}
+        }
+    }
+];
+export default MemberRecovery;
+
+//# sourceMappingURL=member-recovery.js.map