@aglyn/plugins-commerce 1.0.0-beta.143

package/src/lib/components/member-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/components/member-recovery.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiLockReset } from '@aglyn/shared-data-mdi'\nimport Alert from '@mui/material/Alert'\nimport Box from '@mui/material/Box'\nimport Button from '@mui/material/Button'\nimport Link from '@mui/material/Link'\nimport TextField from '@mui/material/TextField'\nimport Typography from '@mui/material/Typography'\nimport { forwardRef, useCallback, useEffect, useState } from 'react'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport { generatePresetId } from '../utils/generate-preset-id'\n\n// Component ids are persisted in screen documents; never rename.\nexport const ID: Aglyn.ComponentId = 'member-recovery'\n\nexport interface MemberRecoveryProps {\n  heading?: string\n  signinPath?: string\n}\n\n/**\n * Password recovery block (AGL-552), styled to match the customer-account\n * forms. Two modes on one block: without a `token` query param it shows\n * the request-email form (/api/membership/recover — always \"sent\", no\n * account-existence leak); with one it shows the new-password form\n * (/api/membership/reset) and links to sign-in on success. Drop it on the\n * screen designated as the site's recovery page (AGL-553) — the built-in\n * /recover route renders the same flows when no screen is designated.\n */\nconst MemberRecovery = forwardRef<HTMLDivElement, MemberRecoveryProps>(\n  (props, ref) => {\n    const { heading, signinPath, ...rest } = props\n    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).\n    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [props['sx']]\n    const { hostId } = Aglyn.useSite()\n    const siteFetch = Aglyn.useSiteFetch()\n    // Read post-hydration only: the block server-renders inside published\n    // screens, where the query string is unavailable.\n    const [token, setToken] = useState('')\n    const [email, setEmail] = useState('')\n    const [password, setPassword] = useState('')\n    const [busy, setBusy] = useState(false)\n    const [error, setError] = useState('')\n    const [done, setDone] = useState<'requested' | 'reset' | null>(null)\n    useEffect(() => {\n      setToken(\n        new URLSearchParams(window.location.search).get('token') ?? '',\n      )\n    }, [])\n\n    const signinHref = signinPath || '/signin'\n\n    const handleRequest = useCallback(async () => {\n      if (!hostId || busy) return\n      setBusy(true)\n      setError('')\n      try {\n        const response = await siteFetch('/api/membership/recover', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ hostId, email }),\n        })\n        if (!response.ok) {\n          const payload = await response.json().catch(() => ({}))\n          setError(String(payload?.error ?? 'Something went wrong'))\n          return\n        }\n        setDone('requested')\n      } finally {\n        setBusy(false)\n      }\n    }, [hostId, busy, email, siteFetch])\n\n    const handleReset = useCallback(async () => {\n      if (!hostId || busy) return\n      setBusy(true)\n      setError('')\n      try {\n        const response = await siteFetch('/api/membership/reset', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ hostId, token, password }),\n        })\n        if (!response.ok) {\n          const payload = await response.json().catch(() => ({}))\n          setError(String(payload?.error ?? 'Something went wrong'))\n          return\n        }\n        setDone('reset')\n      } finally {\n        setBusy(false)\n      }\n    }, [hostId, busy, token, password, siteFetch])\n\n    if (!hostId) {\n      return (\n        <Box\n          ref={ref}\n          {...rest}\n          sx={[\n            {\n              p: 3,\n              border: '1px dashed',\n              borderColor: 'divider',\n              borderRadius: 1,\n              color: 'text.secondary',\n              fontSize: 13,\n              fontFamily: 'system-ui, sans-serif',\n            },\n            ...nodeSx,\n          ]}\n        >\n          {'Password recovery — request and reset forms render here'}\n        </Box>\n      )\n    }\n\n    return (\n      <Box ref={ref} {...rest} sx={[{ maxWidth: 420 }, ...nodeSx]}>\n        <Typography variant=\"h5\" gutterBottom>\n          {heading || 'Reset your password'}\n        </Typography>\n        {done === 'reset' ? (\n          <Box sx={{ display: 'flex', flexDirection: 'column', gap: 1.5 }}>\n            <Alert severity=\"success\">\n              {'Your password has been updated.'}\n            </Alert>\n            <Button\n              variant=\"contained\"\n              color=\"primary\"\n              href={signinHref}\n              sx={{ alignSelf: 'flex-start' }}\n            >\n              {'Sign in'}\n            </Button>\n          </Box>\n        ) : done === 'requested' ? (\n          <Alert severity=\"success\">\n            {'If that email belongs to an account here, a reset link is on ' +\n              'its way. The link works once and expires in an hour.'}\n          </Alert>\n        ) : token ? (\n          <Box\n            sx={{ display: 'flex', flexDirection: 'column', gap: 1.5, mt: 1 }}\n          >\n            <TextField\n              label=\"New password\"\n              type=\"password\"\n              value={password}\n              onChange={(event) => setPassword(event.target.value)}\n              size=\"small\"\n              helperText=\"At least 8 characters\"\n            />\n            {error ? <Alert severity=\"error\">{error}</Alert> : null}\n            <Button\n              variant=\"contained\"\n              color=\"primary\"\n              disabled={busy || password.length < 8}\n              onClick={handleReset}\n            >\n              {busy ? 'Working…' : 'Set new password'}\n            </Button>\n          </Box>\n        ) : (\n          <Box\n            sx={{ display: 'flex', flexDirection: 'column', gap: 1.5, mt: 1 }}\n          >\n            <Typography variant=\"body2\" color=\"text.secondary\">\n              {'Enter your account email and we will send you a reset link.'}\n            </Typography>\n            <TextField\n              label=\"Email\"\n              type=\"email\"\n              value={email}\n              onChange={(event) => setEmail(event.target.value)}\n              size=\"small\"\n            />\n            {error ? <Alert severity=\"error\">{error}</Alert> : null}\n            <Button\n              variant=\"contained\"\n              color=\"primary\"\n              disabled={busy || !email}\n              onClick={handleRequest}\n            >\n              {busy ? 'Working…' : 'Email me a reset link'}\n            </Button>\n            <Typography variant=\"body2\">\n              <Link href={signinHref} underline=\"hover\">\n                {'Back to sign in'}\n              </Link>\n            </Typography>\n          </Box>\n        )}\n      </Box>\n    )\n  },\n)\nMemberRecovery.displayName = 'AglynMemberRecovery'\n\nexport const schema: Aglyn.ComponentSchema<MemberRecoveryProps> = {\n  $id: ID,\n  pluginId: BUNDLE_ID,\n  displayName: 'Password recovery',\n  description:\n    'Forgot-password request, and the reset form the emailed link opens.',\n  category: Aglyn.ComponentCategory.MEMBERS,\n  icon: { path: mdiLockReset.path, sx: { color: '#2e7d32' } },\n  flags: { selfClosing: Aglyn.FEATURE_FLAG.ENABLED },\n  attributes: [\n    {\n      name: 'heading',\n      label: 'Heading',\n      description: 'Shown above the recovery forms.',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n    {\n      name: 'signinPath',\n      label: 'Sign-in path',\n      description: 'Where \"Back to sign in\" points (default /signin).',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n  ],\n}\n\nexport const presets: Aglyn.PresetSchema[] = [\n  {\n    $id: generatePresetId(ID),\n    type: Aglyn.NodeType.PRESET,\n    displayName: 'Password recovery',\n    pluginId: BUNDLE_ID,\n    description: 'Forgot-password request and reset forms',\n    category: Aglyn.ComponentCategory.MEMBERS,\n    icon: { path: mdiLockReset.path, sx: { color: '#2e7d32' } },\n    data: {\n      $id: null,\n      componentId: ID,\n      pluginId: BUNDLE_ID,\n      props: {},\n    },\n  },\n]\n\nexport default MemberRecovery\n"],"names":["Aglyn","mdiLockReset","Alert","Box","Button","Link","TextField","Typography","forwardRef","useCallback","useEffect","useState","BUNDLE_ID","generatePresetId","ID","MemberRecovery","props","ref","heading","signinPath","rest","nodeSx","Array","isArray","hostId","useSite","siteFetch","useSiteFetch","token","setToken","email","setEmail","password","setPassword","busy","setBusy","error","setError","done","setDone","URLSearchParams","window","location","search","get","signinHref","handleRequest","response","method","headers","body","JSON","stringify","ok","payload","json","catch","String","handleReset","sx","p","border","borderColor","borderRadius","color","fontSize","fontFamily","maxWidth","variant","gutterBottom","display","flexDirection","gap","severity","href","alignSelf","mt","label","type","value","onChange","event","target","size","helperText","disabled","length","onClick","underline","displayName","schema","$id","pluginId","description","category","ComponentCategory","MEMBERS","icon","path","flags","selfClosing","FEATURE_FLAG","ENABLED","attributes","name","component","FieldComponentType","TEXT_FIELD","presets","NodeType","PRESET","data","componentId"],"mappings":";;;AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,YAAY,QAAQ,yBAAwB;AACrD,OAAOC,WAAW,sBAAqB;AACvC,OAAOC,SAAS,oBAAmB;AACnC,OAAOC,YAAY,uBAAsB;AACzC,OAAOC,UAAU,qBAAoB;AACrC,OAAOC,eAAe,0BAAyB;AAC/C,OAAOC,gBAAgB,2BAA0B;AACjD,SAASC,UAAU,EAAEC,WAAW,EAAEC,SAAS,EAAEC,QAAQ,QAAQ,QAAO;AACpE,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SAASC,gBAAgB,QAAQ,iCAA6B;AAE9D,iEAAiE;AACjE,OAAO,MAAMC,KAAwB,kBAAiB;AAOtD;;;;;;;;CAQC,GACD,MAAMC,+BAAiBP,WACrB,CAACQ,OAAOC;IACN,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAW,GAAGH,OAATI,wCAASJ;;;;IACzC,yEAAyE;IACzE,MAAMK,SAASC,MAAMC,OAAO,CAACP,KAAK,CAAC,KAAK,IAAIA,KAAK,CAAC,KAAK,GAAG;QAACA,KAAK,CAAC,KAAK;KAAC;IACvE,MAAM,EAAEQ,MAAM,EAAE,GAAGxB,MAAMyB,OAAO;IAChC,MAAMC,YAAY1B,MAAM2B,YAAY;IACpC,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,CAACC,OAAOC,SAAS,GAAGlB,SAAS;IACnC,MAAM,CAACmB,OAAOC,SAAS,GAAGpB,SAAS;IACnC,MAAM,CAACqB,UAAUC,YAAY,GAAGtB,SAAS;IACzC,MAAM,CAACuB,MAAMC,QAAQ,GAAGxB,SAAS;IACjC,MAAM,CAACyB,OAAOC,SAAS,GAAG1B,SAAS;IACnC,MAAM,CAAC2B,MAAMC,QAAQ,GAAG5B,SAAuC;IAC/DD,UAAU;YAEN;QADFmB,UACE,OAAA,IAAIW,gBAAgBC,OAAOC,QAAQ,CAACC,MAAM,EAAEC,GAAG,CAAC,oBAAhD,OAA4D;IAEhE,GAAG,EAAE;IAEL,MAAMC,aAAa1B,cAAc;IAEjC,MAAM2B,gBAAgBrC,YAAY;QAChC,IAAI,CAACe,UAAUU,MAAM;QACrBC,QAAQ;QACRE,SAAS;QACT,IAAI;YACF,MAAMU,WAAW,MAAMrB,UAAU,2BAA2B;gBAC1DsB,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBAAE5B;oBAAQM;gBAAM;YACvC;YACA,IAAI,CAACiB,SAASM,EAAE,EAAE;;gBAChB,MAAMC,UAAU,MAAMP,SAASQ,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;gBACpDnB,SAASoB,eAAOH,2BAAAA,QAASlB,KAAK,mBAAI;gBAClC;YACF;YACAG,QAAQ;QACV,SAAU;YACRJ,QAAQ;QACV;IACF,GAAG;QAACX;QAAQU;QAAMJ;QAAOJ;KAAU;IAEnC,MAAMgC,cAAcjD,YAAY;QAC9B,IAAI,CAACe,UAAUU,MAAM;QACrBC,QAAQ;QACRE,SAAS;QACT,IAAI;YACF,MAAMU,WAAW,MAAMrB,UAAU,yBAAyB;gBACxDsB,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBAAE5B;oBAAQI;oBAAOI;gBAAS;YACjD;YACA,IAAI,CAACe,SAASM,EAAE,EAAE;;gBAChB,MAAMC,UAAU,MAAMP,SAASQ,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;gBACpDnB,SAASoB,eAAOH,2BAAAA,QAASlB,KAAK,mBAAI;gBAClC;YACF;YACAG,QAAQ;QACV,SAAU;YACRJ,QAAQ;QACV;IACF,GAAG;QAACX;QAAQU;QAAMN;QAAOI;QAAUN;KAAU;IAE7C,IAAI,CAACF,QAAQ;QACX,qBACE,KAACrB;YACCc,KAAKA;WACDG;YACJuC,IAAI;gBACF;oBACEC,GAAG;oBACHC,QAAQ;oBACRC,aAAa;oBACbC,cAAc;oBACdC,OAAO;oBACPC,UAAU;oBACVC,YAAY;gBACd;mBACG7C;aACJ;sBAEA;;IAGP;IAEA,qBACE,MAAClB;QAAIc,KAAKA;OAASG;QAAMuC,IAAI;YAAC;gBAAEQ,UAAU;YAAI;eAAM9C;SAAO;;0BACzD,KAACd;gBAAW6D,SAAQ;gBAAKC,YAAY;0BAClCnD,WAAW;;YAEboB,SAAS,wBACR,MAACnC;gBAAIwD,IAAI;oBAAEW,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;gBAAI;;kCAC5D,KAACtE;wBAAMuE,UAAS;kCACb;;kCAEH,KAACrE;wBACCgE,SAAQ;wBACRJ,OAAM;wBACNU,MAAM7B;wBACNc,IAAI;4BAAEgB,WAAW;wBAAa;kCAE7B;;;iBAGHrC,SAAS,4BACX,KAACpC;gBAAMuE,UAAS;0BACb,kEACC;iBAEF7C,sBACF,MAACzB;gBACCwD,IAAI;oBAAEW,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;oBAAKI,IAAI;gBAAE;;kCAEhE,KAACtE;wBACCuE,OAAM;wBACNC,MAAK;wBACLC,OAAO/C;wBACPgD,UAAU,CAACC,QAAUhD,YAAYgD,MAAMC,MAAM,CAACH,KAAK;wBACnDI,MAAK;wBACLC,YAAW;;oBAEZhD,sBAAQ,KAAClC;wBAAMuE,UAAS;kCAASrC;yBAAiB;kCACnD,KAAChC;wBACCgE,SAAQ;wBACRJ,OAAM;wBACNqB,UAAUnD,QAAQF,SAASsD,MAAM,GAAG;wBACpCC,SAAS7B;kCAERxB,OAAO,aAAa;;;+BAIzB,MAAC/B;gBACCwD,IAAI;oBAAEW,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;oBAAKI,IAAI;gBAAE;;kCAEhE,KAACrE;wBAAW6D,SAAQ;wBAAQJ,OAAM;kCAC/B;;kCAEH,KAAC1D;wBACCuE,OAAM;wBACNC,MAAK;wBACLC,OAAOjD;wBACPkD,UAAU,CAACC,QAAUlD,SAASkD,MAAMC,MAAM,CAACH,KAAK;wBAChDI,MAAK;;oBAEN/C,sBAAQ,KAAClC;wBAAMuE,UAAS;kCAASrC;yBAAiB;kCACnD,KAAChC;wBACCgE,SAAQ;wBACRJ,OAAM;wBACNqB,UAAUnD,QAAQ,CAACJ;wBACnByD,SAASzC;kCAERZ,OAAO,aAAa;;kCAEvB,KAAC3B;wBAAW6D,SAAQ;kCAClB,cAAA,KAAC/D;4BAAKqE,MAAM7B;4BAAY2C,WAAU;sCAC/B;;;;;;;AAOf;AAEFzE,eAAe0E,WAAW,GAAG;AAE7B,OAAO,MAAMC,SAAqD;IAChEC,KAAK7E;IACL8E,UAAUhF;IACV6E,aAAa;IACbI,aACE;IACFC,UAAU9F,MAAM+F,iBAAiB,CAACC,OAAO;IACzCC,MAAM;QAAEC,MAAMjG,aAAaiG,IAAI;QAAEvC,IAAI;YAAEK,OAAO;QAAU;IAAE;IAC1DmC,OAAO;QAAEC,aAAapG,MAAMqG,YAAY,CAACC,OAAO;IAAC;IACjDC,YAAY;QACV;YACEC,MAAM;YACN3B,OAAO;YACPgB,aAAa;YACbY,WAAWzG,MAAM0G,kBAAkB,CAACC,UAAU;QAChD;QACA;YACEH,MAAM;YACN3B,OAAO;YACPgB,aAAa;YACbY,WAAWzG,MAAM0G,kBAAkB,CAACC,UAAU;QAChD;KACD;AACH,EAAC;AAED,OAAO,MAAMC,UAAgC;IAC3C;QACEjB,KAAK9E,iBAAiBC;QACtBgE,MAAM9E,MAAM6G,QAAQ,CAACC,MAAM;QAC3BrB,aAAa;QACbG,UAAUhF;QACViF,aAAa;QACbC,UAAU9F,MAAM+F,iBAAiB,CAACC,OAAO;QACzCC,MAAM;YAAEC,MAAMjG,aAAaiG,IAAI;YAAEvC,IAAI;gBAAEK,OAAO;YAAU;QAAE;QAC1D+C,MAAM;YACJpB,KAAK;YACLqB,aAAalG;YACb8E,UAAUhF;YACVI,OAAO,CAAC;QACV;IACF;CACD,CAAA;AAED,eAAeD,eAAc"}

package/src/lib/components/member-signin.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import * as Aglyn from '@aglyn/aglyn';
+export declare const ID: Aglyn.ComponentId;
+export interface MemberSigninProps {
+    heading?: string;
+    signupPath?: string;
+    recoveryPath?: string;
+    continueFallback?: string;
+}
+/**
+ * Standalone sign-in block (AGL-553), extracted from the customer-account
+ * sign-in tab so besigner-built auth screens can be designed like any
+ * other page. Same AGL-109 membership API; on success the visitor lands
+ * on the validated `continue` query param (relative paths only) or the
+ * configured fallback.
+ */
+declare const MemberSignin: import("react").ForwardRefExoticComponent<MemberSigninProps & import("react").RefAttributes<HTMLDivElement>>;
+export declare const schema: Aglyn.ComponentSchema<MemberSigninProps>;
+export declare const presets: Aglyn.PresetSchema[];
+export default MemberSignin;

package/src/lib/components/member-signin.js

@@ -0,0 +1,257 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+import { trackEventBeforeNavigation } from "@aglyn/aglyn/app-utils/analytics-events";
+import { mdiLoginVariant } from "@aglyn/shared-data-mdi";
+import Alert from "@mui/material/Alert";
+import Box from "@mui/material/Box";
+import Button from "@mui/material/Button";
+import Link from "@mui/material/Link";
+import TextField from "@mui/material/TextField";
+import Typography from "@mui/material/Typography";
+import { forwardRef, useCallback, useState } from "react";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+import { continuePathFromLocation, memberNavigation } from "../utils/member-continue.js";
+import { generatePresetId } from "../utils/generate-preset-id.js";
+// Component ids are persisted in screen documents; never rename.
+export const ID = 'member-signin';
+/**
+ * Standalone sign-in block (AGL-553), extracted from the customer-account
+ * sign-in tab so besigner-built auth screens can be designed like any
+ * other page. Same AGL-109 membership API; on success the visitor lands
+ * on the validated `continue` query param (relative paths only) or the
+ * configured fallback.
+ */ const MemberSignin = /*#__PURE__*/ forwardRef((props, ref)=>{
+    const { heading, signupPath, recoveryPath, continueFallback } = props, rest = _object_without_properties_loose(props, [
+        "heading",
+        "signupPath",
+        "recoveryPath",
+        "continueFallback"
+    ]);
+    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).
+    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [
+        props['sx']
+    ];
+    const { hostId } = Aglyn.useSite();
+    const siteFetch = Aglyn.useSiteFetch();
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const [error, setError] = useState('');
+    const [busy, setBusy] = useState(false);
+    const handleSignin = useCallback(async ()=>{
+        if (!hostId || busy) return;
+        setBusy(true);
+        setError('');
+        try {
+            const response = await siteFetch('/api/membership/login', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    hostId,
+                    email,
+                    password
+                })
+            });
+            if (!response.ok) {
+                var _ref;
+                const payload = await response.json().catch(()=>({}));
+                setError(String((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Sign-in failed'));
+                return;
+            }
+            /*
+         * The host's own GA4 property, not Aglyn's (AGL-1591). Awaited for the
+         * same reason the sign-up block awaits its own: the line below tears
+         * the document down, and the property that makes a bare call safe —
+         * that delivery on this surface is a synchronous `window.gtag` — is
+         * invisible from here and would stop being true the day a host
+         * registers an async transport.
+         */ await trackEventBeforeNavigation('login', {
+                method: 'password'
+            });
+            memberNavigation.assign(continuePathFromLocation(continueFallback || '/'));
+        } finally{
+            setBusy(false);
+        }
+    }, [
+        hostId,
+        busy,
+        email,
+        password,
+        continueFallback,
+        siteFetch
+    ]);
+    if (!hostId) {
+        return /*#__PURE__*/ _jsx(Box, _extends({
+            ref: ref
+        }, rest, {
+            sx: [
+                {
+                    p: 3,
+                    border: '1px dashed',
+                    borderColor: 'divider',
+                    borderRadius: 1,
+                    color: 'text.secondary',
+                    fontSize: 13,
+                    fontFamily: 'system-ui, sans-serif'
+                },
+                ...nodeSx
+            ],
+            children: 'Member sign-in — the email/password form renders here'
+        }));
+    }
+    return /*#__PURE__*/ _jsxs(Box, _extends({
+        ref: ref
+    }, rest, {
+        sx: [
+            {
+                maxWidth: 420
+            },
+            ...nodeSx
+        ],
+        children: [
+            heading ? /*#__PURE__*/ _jsx(Typography, {
+                variant: "h5",
+                gutterBottom: true,
+                children: heading
+            }) : null,
+            /*#__PURE__*/ _jsxs(Box, {
+                sx: {
+                    display: 'flex',
+                    flexDirection: 'column',
+                    gap: 1.5
+                },
+                children: [
+                    /*#__PURE__*/ _jsx(TextField, {
+                        label: "Email",
+                        type: "email",
+                        value: email,
+                        onChange: (event)=>setEmail(event.target.value),
+                        size: "small"
+                    }),
+                    /*#__PURE__*/ _jsx(TextField, {
+                        label: "Password",
+                        type: "password",
+                        value: password,
+                        onChange: (event)=>setPassword(event.target.value),
+                        size: "small"
+                    }),
+                    error ? /*#__PURE__*/ _jsx(Alert, {
+                        severity: "error",
+                        children: error
+                    }) : null,
+                    /*#__PURE__*/ _jsx(Button, {
+                        variant: "contained",
+                        color: "primary",
+                        disabled: busy || !email || !password,
+                        onClick: handleSignin,
+                        children: busy ? 'Working…' : 'Sign in'
+                    }),
+                    /*#__PURE__*/ _jsxs(Typography, {
+                        variant: "body2",
+                        children: [
+                            /*#__PURE__*/ _jsx(Link, {
+                                href: signupPath || '/signup',
+                                underline: "hover",
+                                children: 'New here? Create an account'
+                            }),
+                            ' · ',
+                            /*#__PURE__*/ _jsx(Link, {
+                                href: recoveryPath || '/recover',
+                                underline: "hover",
+                                children: 'Forgot password?'
+                            })
+                        ]
+                    })
+                ]
+            })
+        ]
+    }));
+});
+MemberSignin.displayName = 'AglynMemberSignin';
+export const schema = {
+    $id: ID,
+    pluginId: BUNDLE_ID,
+    displayName: 'Member sign-in',
+    description: 'An email and password sign-in form for site members.',
+    category: Aglyn.ComponentCategory.MEMBERS,
+    icon: {
+        path: mdiLoginVariant.path,
+        sx: {
+            color: '#2e7d32'
+        }
+    },
+    flags: {
+        selfClosing: Aglyn.FEATURE_FLAG.ENABLED
+    },
+    attributes: [
+        {
+            name: 'heading',
+            label: 'Heading',
+            description: 'The title above the sign-in fields — "Welcome back" rather than ' + '"Sign up". Blank renders no heading at all.',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        },
+        {
+            name: 'signupPath',
+            label: 'Sign-up path',
+            description: 'Where "Create an account" points (default /signup).',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        },
+        {
+            name: 'recoveryPath',
+            label: 'Recovery path',
+            description: 'Where "Forgot password?" points (default /recover).',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        },
+        {
+            name: 'continueFallback',
+            label: 'After sign-in',
+            description: 'Where a member goes after signing IN, when nothing sent them here. ' + 'A `?continue=` on the URL — added by the page that turned them ' + 'away — always wins, so this is the plain "went to sign in" case. ' + 'Blank is the home page.',
+            component: Aglyn.FieldComponentType.TEXT_FIELD
+        }
+    ]
+};
+export const presets = [
+    {
+        $id: generatePresetId(ID),
+        type: Aglyn.NodeType.PRESET,
+        displayName: 'Member sign-in',
+        pluginId: BUNDLE_ID,
+        description: 'Email/password sign-in with recovery link',
+        category: Aglyn.ComponentCategory.MEMBERS,
+        icon: {
+            path: mdiLoginVariant.path,
+            sx: {
+                color: '#2e7d32'
+            }
+        },
+        data: {
+            $id: null,
+            componentId: ID,
+            pluginId: BUNDLE_ID,
+            props: {
+                heading: 'Welcome back'
+            }
+        }
+    }
+];
+export default MemberSignin;
+
+//# sourceMappingURL=member-signin.js.map

package/src/lib/components/member-signin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/components/member-signin.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { trackEventBeforeNavigation } from '@aglyn/aglyn/app-utils/analytics-events'\nimport { mdiLoginVariant } from '@aglyn/shared-data-mdi'\nimport Alert from '@mui/material/Alert'\nimport Box from '@mui/material/Box'\nimport Button from '@mui/material/Button'\nimport Link from '@mui/material/Link'\nimport TextField from '@mui/material/TextField'\nimport Typography from '@mui/material/Typography'\nimport { forwardRef, useCallback, useState } from 'react'\nimport { BUNDLE_ID } from '../constants/bundle-common'\nimport {\n  continuePathFromLocation,\n  memberNavigation,\n} from '../utils/member-continue'\nimport { generatePresetId } from '../utils/generate-preset-id'\n\n// Component ids are persisted in screen documents; never rename.\nexport const ID: Aglyn.ComponentId = 'member-signin'\n\nexport interface MemberSigninProps {\n  heading?: string\n  signupPath?: string\n  recoveryPath?: string\n  continueFallback?: string\n}\n\n/**\n * Standalone sign-in block (AGL-553), extracted from the customer-account\n * sign-in tab so besigner-built auth screens can be designed like any\n * other page. Same AGL-109 membership API; on success the visitor lands\n * on the validated `continue` query param (relative paths only) or the\n * configured fallback.\n */\nconst MemberSignin = forwardRef<HTMLDivElement, MemberSigninProps>(\n  (props, ref) => {\n    const { heading, signupPath, recoveryPath, continueFallback, ...rest } =\n      props\n    // Node styles ride the renderer-merged sx; recompose (stack.ts pattern).\n    const nodeSx = Array.isArray(props['sx']) ? props['sx'] : [props['sx']]\n    const { hostId } = Aglyn.useSite()\n    const siteFetch = Aglyn.useSiteFetch()\n    const [email, setEmail] = useState('')\n    const [password, setPassword] = useState('')\n    const [error, setError] = useState('')\n    const [busy, setBusy] = useState(false)\n\n    const handleSignin = useCallback(async () => {\n      if (!hostId || busy) return\n      setBusy(true)\n      setError('')\n      try {\n        const response = await siteFetch('/api/membership/login', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ hostId, email, password }),\n        })\n        if (!response.ok) {\n          const payload = await response.json().catch(() => ({}))\n          setError(String(payload?.error ?? 'Sign-in failed'))\n          return\n        }\n        /*\n         * The host's own GA4 property, not Aglyn's (AGL-1591). Awaited for the\n         * same reason the sign-up block awaits its own: the line below tears\n         * the document down, and the property that makes a bare call safe —\n         * that delivery on this surface is a synchronous `window.gtag` — is\n         * invisible from here and would stop being true the day a host\n         * registers an async transport.\n         */\n        await trackEventBeforeNavigation('login', { method: 'password' })\n        memberNavigation.assign(\n          continuePathFromLocation(continueFallback || '/'),\n        )\n      } finally {\n        setBusy(false)\n      }\n    }, [hostId, busy, email, password, continueFallback, siteFetch])\n\n    if (!hostId) {\n      return (\n        <Box\n          ref={ref}\n          {...rest}\n          sx={[\n            {\n              p: 3,\n              border: '1px dashed',\n              borderColor: 'divider',\n              borderRadius: 1,\n              color: 'text.secondary',\n              fontSize: 13,\n              fontFamily: 'system-ui, sans-serif',\n            },\n            ...nodeSx,\n          ]}\n        >\n          {'Member sign-in — the email/password form renders here'}\n        </Box>\n      )\n    }\n\n    return (\n      <Box ref={ref} {...rest} sx={[{ maxWidth: 420 }, ...nodeSx]}>\n        {heading ? (\n          <Typography variant=\"h5\" gutterBottom>\n            {heading}\n          </Typography>\n        ) : null}\n        <Box sx={{ display: 'flex', flexDirection: 'column', gap: 1.5 }}>\n          <TextField\n            label=\"Email\"\n            type=\"email\"\n            value={email}\n            onChange={(event) => setEmail(event.target.value)}\n            size=\"small\"\n          />\n          <TextField\n            label=\"Password\"\n            type=\"password\"\n            value={password}\n            onChange={(event) => setPassword(event.target.value)}\n            size=\"small\"\n          />\n          {error ? <Alert severity=\"error\">{error}</Alert> : null}\n          <Button\n            variant=\"contained\"\n            color=\"primary\"\n            disabled={busy || !email || !password}\n            onClick={handleSignin}\n          >\n            {busy ? 'Working…' : 'Sign in'}\n          </Button>\n          <Typography variant=\"body2\">\n            <Link href={signupPath || '/signup'} underline=\"hover\">\n              {'New here? Create an account'}\n            </Link>\n            {' · '}\n            <Link href={recoveryPath || '/recover'} underline=\"hover\">\n              {'Forgot password?'}\n            </Link>\n          </Typography>\n        </Box>\n      </Box>\n    )\n  },\n)\nMemberSignin.displayName = 'AglynMemberSignin'\n\nexport const schema: Aglyn.ComponentSchema<MemberSigninProps> = {\n  $id: ID,\n  pluginId: BUNDLE_ID,\n  displayName: 'Member sign-in',\n  description: 'An email and password sign-in form for site members.',\n  category: Aglyn.ComponentCategory.MEMBERS,\n  icon: { path: mdiLoginVariant.path, sx: { color: '#2e7d32' } },\n  flags: { selfClosing: Aglyn.FEATURE_FLAG.ENABLED },\n  attributes: [\n    {\n      name: 'heading',\n      label: 'Heading',\n      description:\n        'The title above the sign-in fields — \"Welcome back\" rather than ' +\n        '\"Sign up\". Blank renders no heading at all.',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n    {\n      name: 'signupPath',\n      label: 'Sign-up path',\n      description: 'Where \"Create an account\" points (default /signup).',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n    {\n      name: 'recoveryPath',\n      label: 'Recovery path',\n      description: 'Where \"Forgot password?\" points (default /recover).',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n    {\n      name: 'continueFallback',\n      label: 'After sign-in',\n      description:\n        'Where a member goes after signing IN, when nothing sent them here. ' +\n        'A `?continue=` on the URL — added by the page that turned them ' +\n        'away — always wins, so this is the plain \"went to sign in\" case. ' +\n        'Blank is the home page.',\n      component: Aglyn.FieldComponentType.TEXT_FIELD,\n    },\n  ],\n}\n\nexport const presets: Aglyn.PresetSchema[] = [\n  {\n    $id: generatePresetId(ID),\n    type: Aglyn.NodeType.PRESET,\n    displayName: 'Member sign-in',\n    pluginId: BUNDLE_ID,\n    description: 'Email/password sign-in with recovery link',\n    category: Aglyn.ComponentCategory.MEMBERS,\n    icon: { path: mdiLoginVariant.path, sx: { color: '#2e7d32' } },\n    data: {\n      $id: null,\n      componentId: ID,\n      pluginId: BUNDLE_ID,\n      props: { heading: 'Welcome back' },\n    },\n  },\n]\n\nexport default MemberSignin\n"],"names":["Aglyn","trackEventBeforeNavigation","mdiLoginVariant","Alert","Box","Button","Link","TextField","Typography","forwardRef","useCallback","useState","BUNDLE_ID","continuePathFromLocation","memberNavigation","generatePresetId","ID","MemberSignin","props","ref","heading","signupPath","recoveryPath","continueFallback","rest","nodeSx","Array","isArray","hostId","useSite","siteFetch","useSiteFetch","email","setEmail","password","setPassword","error","setError","busy","setBusy","handleSignin","response","method","headers","body","JSON","stringify","ok","payload","json","catch","String","assign","sx","p","border","borderColor","borderRadius","color","fontSize","fontFamily","maxWidth","variant","gutterBottom","display","flexDirection","gap","label","type","value","onChange","event","target","size","severity","disabled","onClick","href","underline","displayName","schema","$id","pluginId","description","category","ComponentCategory","MEMBERS","icon","path","flags","selfClosing","FEATURE_FLAG","ENABLED","attributes","name","component","FieldComponentType","TEXT_FIELD","presets","NodeType","PRESET","data","componentId"],"mappings":";;;AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,0BAA0B,QAAQ,0CAAyC;AACpF,SAASC,eAAe,QAAQ,yBAAwB;AACxD,OAAOC,WAAW,sBAAqB;AACvC,OAAOC,SAAS,oBAAmB;AACnC,OAAOC,YAAY,uBAAsB;AACzC,OAAOC,UAAU,qBAAoB;AACrC,OAAOC,eAAe,0BAAyB;AAC/C,OAAOC,gBAAgB,2BAA0B;AACjD,SAASC,UAAU,EAAEC,WAAW,EAAEC,QAAQ,QAAQ,QAAO;AACzD,SAASC,SAAS,QAAQ,gCAA4B;AACtD,SACEC,wBAAwB,EACxBC,gBAAgB,QACX,8BAA0B;AACjC,SAASC,gBAAgB,QAAQ,iCAA6B;AAE9D,iEAAiE;AACjE,OAAO,MAAMC,KAAwB,gBAAe;AASpD;;;;;;CAMC,GACD,MAAMC,6BAAeR,WACnB,CAACS,OAAOC;IACN,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAEC,YAAY,EAAEC,gBAAgB,EAAW,GACpEL,OAD8DM,wCAC9DN;;;;;;IACF,yEAAyE;IACzE,MAAMO,SAASC,MAAMC,OAAO,CAACT,KAAK,CAAC,KAAK,IAAIA,KAAK,CAAC,KAAK,GAAG;QAACA,KAAK,CAAC,KAAK;KAAC;IACvE,MAAM,EAAEU,MAAM,EAAE,GAAG5B,MAAM6B,OAAO;IAChC,MAAMC,YAAY9B,MAAM+B,YAAY;IACpC,MAAM,CAACC,OAAOC,SAAS,GAAGtB,SAAS;IACnC,MAAM,CAACuB,UAAUC,YAAY,GAAGxB,SAAS;IACzC,MAAM,CAACyB,OAAOC,SAAS,GAAG1B,SAAS;IACnC,MAAM,CAAC2B,MAAMC,QAAQ,GAAG5B,SAAS;IAEjC,MAAM6B,eAAe9B,YAAY;QAC/B,IAAI,CAACkB,UAAUU,MAAM;QACrBC,QAAQ;QACRF,SAAS;QACT,IAAI;YACF,MAAMI,WAAW,MAAMX,UAAU,yBAAyB;gBACxDY,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBAAElB;oBAAQI;oBAAOE;gBAAS;YACjD;YACA,IAAI,CAACO,SAASM,EAAE,EAAE;;gBAChB,MAAMC,UAAU,MAAMP,SAASQ,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;gBACpDb,SAASc,eAAOH,2BAAAA,QAASZ,KAAK,mBAAI;gBAClC;YACF;YACA;;;;;;;SAOC,GACD,MAAMnC,2BAA2B,SAAS;gBAAEyC,QAAQ;YAAW;YAC/D5B,iBAAiBsC,MAAM,CACrBvC,yBAAyBU,oBAAoB;QAEjD,SAAU;YACRgB,QAAQ;QACV;IACF,GAAG;QAACX;QAAQU;QAAMN;QAAOE;QAAUX;QAAkBO;KAAU;IAE/D,IAAI,CAACF,QAAQ;QACX,qBACE,KAACxB;YACCe,KAAKA;WACDK;YACJ6B,IAAI;gBACF;oBACEC,GAAG;oBACHC,QAAQ;oBACRC,aAAa;oBACbC,cAAc;oBACdC,OAAO;oBACPC,UAAU;oBACVC,YAAY;gBACd;mBACGnC;aACJ;sBAEA;;IAGP;IAEA,qBACE,MAACrB;QAAIe,KAAKA;OAASK;QAAM6B,IAAI;YAAC;gBAAEQ,UAAU;YAAI;eAAMpC;SAAO;;YACxDL,wBACC,KAACZ;gBAAWsD,SAAQ;gBAAKC,YAAY;0BAClC3C;iBAED;0BACJ,MAAChB;gBAAIiD,IAAI;oBAAEW,SAAS;oBAAQC,eAAe;oBAAUC,KAAK;gBAAI;;kCAC5D,KAAC3D;wBACC4D,OAAM;wBACNC,MAAK;wBACLC,OAAOrC;wBACPsC,UAAU,CAACC,QAAUtC,SAASsC,MAAMC,MAAM,CAACH,KAAK;wBAChDI,MAAK;;kCAEP,KAAClE;wBACC4D,OAAM;wBACNC,MAAK;wBACLC,OAAOnC;wBACPoC,UAAU,CAACC,QAAUpC,YAAYoC,MAAMC,MAAM,CAACH,KAAK;wBACnDI,MAAK;;oBAENrC,sBAAQ,KAACjC;wBAAMuE,UAAS;kCAAStC;yBAAiB;kCACnD,KAAC/B;wBACCyD,SAAQ;wBACRJ,OAAM;wBACNiB,UAAUrC,QAAQ,CAACN,SAAS,CAACE;wBAC7B0C,SAASpC;kCAERF,OAAO,aAAa;;kCAEvB,MAAC9B;wBAAWsD,SAAQ;;0CAClB,KAACxD;gCAAKuE,MAAMxD,cAAc;gCAAWyD,WAAU;0CAC5C;;4BAEF;0CACD,KAACxE;gCAAKuE,MAAMvD,gBAAgB;gCAAYwD,WAAU;0CAC/C;;;;;;;;AAMb;AAEF7D,aAAa8D,WAAW,GAAG;AAE3B,OAAO,MAAMC,SAAmD;IAC9DC,KAAKjE;IACLkE,UAAUtE;IACVmE,aAAa;IACbI,aAAa;IACbC,UAAUpF,MAAMqF,iBAAiB,CAACC,OAAO;IACzCC,MAAM;QAAEC,MAAMtF,gBAAgBsF,IAAI;QAAEnC,IAAI;YAAEK,OAAO;QAAU;IAAE;IAC7D+B,OAAO;QAAEC,aAAa1F,MAAM2F,YAAY,CAACC,OAAO;IAAC;IACjDC,YAAY;QACV;YACEC,MAAM;YACN3B,OAAO;YACPgB,aACE,qEACA;YACFY,WAAW/F,MAAMgG,kBAAkB,CAACC,UAAU;QAChD;QACA;YACEH,MAAM;YACN3B,OAAO;YACPgB,aAAa;YACbY,WAAW/F,MAAMgG,kBAAkB,CAACC,UAAU;QAChD;QACA;YACEH,MAAM;YACN3B,OAAO;YACPgB,aAAa;YACbY,WAAW/F,MAAMgG,kBAAkB,CAACC,UAAU;QAChD;QACA;YACEH,MAAM;YACN3B,OAAO;YACPgB,aACE,wEACA,oEACA,sEACA;YACFY,WAAW/F,MAAMgG,kBAAkB,CAACC,UAAU;QAChD;KACD;AACH,EAAC;AAED,OAAO,MAAMC,UAAgC;IAC3C;QACEjB,KAAKlE,iBAAiBC;QACtBoD,MAAMpE,MAAMmG,QAAQ,CAACC,MAAM;QAC3BrB,aAAa;QACbG,UAAUtE;QACVuE,aAAa;QACbC,UAAUpF,MAAMqF,iBAAiB,CAACC,OAAO;QACzCC,MAAM;YAAEC,MAAMtF,gBAAgBsF,IAAI;YAAEnC,IAAI;gBAAEK,OAAO;YAAU;QAAE;QAC7D2C,MAAM;YACJpB,KAAK;YACLqB,aAAatF;YACbkE,UAAUtE;YACVM,OAAO;gBAAEE,SAAS;YAAe;QACnC;IACF;CACD,CAAA;AAED,eAAeH,aAAY"}

package/src/lib/components/member-signup.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import * as Aglyn from '@aglyn/aglyn';
+export declare const ID: Aglyn.ComponentId;
+export interface MemberSignupProps {
+    heading?: string;
+    signinPath?: string;
+    continueFallback?: string;
+}
+/**
+ * Standalone sign-up block (AGL-553), extracted from the customer-account
+ * create-account tab. Registers through the AGL-109 membership API (with
+ * the same belt-and-braces follow-up login the account block does), then
+ * sends the new member to the validated `continue` query param (relative
+ * paths only) or the configured fallback.
+ */
+declare const MemberSignup: import("react").ForwardRefExoticComponent<MemberSignupProps & import("react").RefAttributes<HTMLDivElement>>;
+export declare const schema: Aglyn.ComponentSchema<MemberSignupProps>;
+export declare const presets: Aglyn.PresetSchema[];
+export default MemberSignup;