@akinon/pz-theme 2.0.95-beta.1 → 2.0.95-rc.0

package/CHANGELOG.md

@@ -1,20 +1,38 @@
 # @akinon/pz-theme
 
-## 2.0.95-beta.1
-
-### Patch Changes
-
-- Updated dependencies [cbbbfd757]
-  - @akinon/next@2.0.95-beta.1
-  - @akinon/theme-contract@2.0.95-beta.1
-
-## 2.0.95-beta.0
-
-### Patch Changes
-
-- Updated dependencies [cbbbfd757]
-  - @akinon/next@2.0.95-beta.0
-  - @akinon/theme-contract@2.0.95-beta.0
+## 2.0.95-rc.0
+
+### Patch Changes
+
+- Updated dependencies [86187b1c]
+- Updated dependencies [0cf9ea239]
+- Updated dependencies [324f97d55]
+- Updated dependencies [51ea06888]
+- Updated dependencies
+- Updated dependencies [2fea41430]
+- Updated dependencies [b55acb768]
+- Updated dependencies [760258c1c]
+- Updated dependencies [143be2b9d]
+- Updated dependencies [7889b08fe]
+- Updated dependencies [9f8cd3bc5]
+- Updated dependencies [bfafa3f49]
+- Updated dependencies [57d7eb305]
+- Updated dependencies [d99a6a7d5]
+- Updated dependencies [9db81a714]
+- Updated dependencies [591e345e1]
+- Updated dependencies [4de5303c5]
+- Updated dependencies [95b139dc1]
+- Updated dependencies [1d00f2d06]
+- Updated dependencies [4ac7b2a1e]
+- Updated dependencies [e9598c71d]
+- Updated dependencies [4998a9631]
+- Updated dependencies [804d2bd6c]
+- Updated dependencies [3909d3224]
+- Updated dependencies [6a3d8a631]
+- Updated dependencies [e18836b20]
+- Updated dependencies [b1111d7b]
+  - @akinon/next@2.0.95-rc.0
+  - @akinon/theme-contract@2.0.95-rc.0
 
 ## 2.0.94
 

package/package.json

@@ -1,19 +1,19 @@
 {
   "name": "@akinon/pz-theme",
   "description": "Theme package for Project Zero Next — ThemePlaceholder system and theme editor infrastructure",
-  "version": "2.0.95-beta.1",
+  "version": "2.0.95-rc.0",
   "license": "MIT",
   "main": "src/index.ts",
   "scripts": {
     "test": "jest"
   },
   "peerDependencies": {
-    "@akinon/next": "2.0.95-beta.1",
+    "@akinon/next": "2.0.95-rc.0",
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0"
   },
   "dependencies": {
-    "@akinon/theme-contract": "2.0.95-beta.1",
+    "@akinon/theme-contract": "2.0.95-rc.0",
     "clsx": "2.1.1",
     "lottie-web": "^5.13.0",
     "react-multi-carousel": "2.8.4",
@@ -21,7 +21,7 @@
     "zod": "4.4.1"
   },
   "devDependencies": {
-    "@akinon/next": "2.0.95-beta.1",
+    "@akinon/next": "2.0.95-rc.0",
     "@testing-library/jest-dom": "5.16.4",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.1.1",

package/src/__tests__/auth-commerce-events.test.tsx

@@ -32,11 +32,7 @@ jest.mock('next/navigation', () => ({
     refresh: jest.fn(),
     replace: jest.fn()
   }),
-  usePathname: () => '/account/orders',
-  // The login form reads the query too, since where a sign-in leaves the
-  // shopper can come from `?callbackUrl`/`?next` — a double without this
-  // throws before a single event can be measured.
-  useSearchParams: () => new URLSearchParams()
+  usePathname: () => '/account/orders'
 }));
 
 jest.mock('@akinon/next/data/client/user', () => ({

package/src/__tests__/auth-form-error-block.test.tsx

@@ -34,8 +34,6 @@ jest.mock('next-auth/react', () => ({
 }));
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn(), replace: jest.fn() })
 }));
 

package/src/__tests__/auth-form-validation.test.tsx

@@ -22,8 +22,6 @@ jest.mock('next-auth/react', () => ({
 }));
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn(), replace: jest.fn() })
 }));
 

package/src/__tests__/auth-slot-coverage.test.ts

@@ -23,12 +23,7 @@ const APP_DIR = path.resolve(
 /** Placeholder key -> the file (relative to `[pz]`) mounting it. */
 const EXPECTED_MOUNTS: Record<string, string> = {
   auth: 'auth/(login)/layout.tsx',
-  forgotPassword: 'users/password/reset/layout.tsx',
-  // The screen the reset MAIL lands on, which is a different page from the one
-  // that asks for the mail. It was the last auth slug the editor offered and
-  // nothing mounted: a designer could compose the screen, publish it, and the
-  // shopper coming out of their inbox still met the hand-written page.
-  resetPassword: 'users/reset/[[...id]]/layout.tsx'
+  forgotPassword: 'users/password/reset/layout.tsx'
 };
 
 /**
@@ -57,9 +52,6 @@ const AUTH_PICKER_PATHS = [
   '/register',
   '/auth/forgot-password',
   '/users/password/reset',
-  // The mail's own link, token and all — a catch-all route, so the path has
-  // segments the rule has to see past.
-  '/users/reset/tok/abc123',
   '/auth/guest',
   '/users/auth/guest'
 ];

package/src/__tests__/auth-step-title.test.tsx

@@ -18,8 +18,6 @@ import { Block } from '../theme-block';
  */
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn() })
 }));
 

package/src/__tests__/detached-submit-state.test.tsx

@@ -59,8 +59,6 @@ jest.mock('@akinon/next/data/client/user', () => {
 });
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn(), replace: jest.fn() })
 }));
 
@@ -74,15 +72,10 @@ const blockOf = (type: string, properties: Record<string, unknown>): Block => ({
   hidden: false
 });
 
-const renderCta = (properties: string | Record<string, unknown>) =>
+const renderCta = (submitFormId: string) =>
   render(
     <ButtonBlock
-      block={blockOf(
-        'button',
-        typeof properties === 'string'
-          ? { text: 'Continue', submitFormId: properties }
-          : { text: 'Continue', ...properties }
-      )}
+      block={blockOf('button', { text: 'Continue', submitFormId })}
       placeholderId="placeholder-1"
       sectionId="section-1"
       currentBreakpoint="desktop"
@@ -221,74 +214,3 @@ describe('a detached submit CTA', () => {
     expect(forgotPassword).not.toHaveBeenCalled();
   });
 });
-
-/**
- * What the shopper SEES while the request is in flight.
- *
- * `disabled` alone changed nothing visible: a Button carries an authored
- * background and colour, and those override what a browser paints on a
- * disabled button — so a drawer's bottom-bar CTA stayed bright and
- * clickable-looking for the whole POST, which is what makes someone press it
- * twice. The state now travels as part state (so a designer can dress it) and
- * carries a default dimming (so it reads as busy with nothing authored).
- */
-describe('a detached CTA while its form is working', () => {
-  it('says so in its part state and dims itself', () => {
-    const { container } = renderCta({ submitFormId: 'login-form' });
-
-    const button = container.querySelector('button') as HTMLButtonElement;
-
-    expect(button.getAttribute('data-state')).toBeNull();
-
-    act(() => {
-      publishFormSubmitState('login-form', true);
-    });
-
-    expect(button.getAttribute('data-state')).toContain('loading');
-    expect(button.getAttribute('data-state')).toContain('disabled');
-    expect(button.style.opacity).toBe('0.7');
-    expect(button.style.cursor).toBe('not-allowed');
-    expect(button).toBeDisabled();
-
-    act(() => {
-      publishFormSubmitState('login-form', false);
-    });
-
-    expect(button.getAttribute('data-state')).toBeNull();
-    expect(button.style.opacity).not.toBe('0.7');
-  });
-
-  it('swaps its caption only when the designer authored one', () => {
-    const { container } = renderCta({
-      submitFormId: 'login-form',
-      text: 'Devam Et',
-      busyText: 'Gönderiliyor…'
-    });
-
-    act(() => {
-      publishFormSubmitState('login-form', true);
-    });
-
-    expect(container.textContent).toContain('Gönderiliyor…');
-
-    act(() => {
-      publishFormSubmitState('login-form', false);
-    });
-
-    expect(container.textContent).toContain('Devam Et');
-  });
-
-  it('keeps the caption put when no busy text was authored', () => {
-    const { container } = renderCta({
-      submitFormId: 'login-form',
-      text: 'Devam Et'
-    });
-
-    act(() => {
-      publishFormSubmitState('login-form', true);
-    });
-
-    // Absence-preserving, exactly like the forms' own `busyLabel`.
-    expect(container.textContent).toContain('Devam Et');
-  });
-});

package/src/__tests__/forgot-password-composed.test.tsx

@@ -67,8 +67,6 @@ jest.mock('@akinon/next/data/client/user', () => {
 });
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn(), replace: jest.fn() })
 }));
 

package/src/__tests__/otp-form-composed.test.tsx

@@ -33,8 +33,6 @@ jest.mock('next-auth/react', () => ({
 }));
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn(), replace: jest.fn() })
 }));
 

package/src/__tests__/password-reset-step.test.tsx

@@ -34,8 +34,6 @@ jest.mock('next-auth/react', () => ({
 }));
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push: jest.fn(), refresh: jest.fn(), replace: jest.fn() })
 }));
 

package/src/__tests__/register-form-composed.test.tsx

@@ -1,16 +1,7 @@
-import { act, fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
 import React from 'react';
 
 import RegisterFormBlock from '../blocks/register-form-block';
-import ThemeModalMount from '../overlays/theme-modal-mount';
-import { readThemeModals } from '../overlays/modal-registry';
-import {
-  __resetOverlayBusForTests,
-  isModalOpen,
-  openModal,
-  registerModalHost
-} from '../overlays/overlay-bus';
-import { __resetModalPreviewForTests } from '../overlays/use-modal-preview';
 import { AUTH_CONSENT_NAMES } from '../blocks/auth-consent-block';
 import {
   __resetAuthFlowBusForTests,
@@ -45,8 +36,6 @@ const push = jest.fn();
 const refresh = jest.fn();
 
 jest.mock('next/navigation', () => ({
-  usePathname: () => '/',
-  useSearchParams: () => new URLSearchParams(),
   useRouter: () => ({ push, refresh, replace: jest.fn() })
 }));
 
@@ -132,8 +121,6 @@ beforeEach(() => {
   push.mockClear();
   refresh.mockClear();
   __resetAuthFlowBusForTests();
-  __resetOverlayBusForTests();
-  __resetModalPreviewForTests();
 });
 
 describe('a composed register form', () => {
@@ -171,10 +158,7 @@ describe('a composed register form', () => {
     await waitFor(() => expect(signIn).toHaveBeenCalled());
 
     expect(submitted()).toMatchObject({
-      // `register`, not `registration`: the credentials provider resolves the
-      // endpoint as `user[formType]` and that map has only `register`, so the
-      // old value POSTed to `${commerceUrl}undefined`.
-      formType: 'register',
+      formType: 'registration',
       first_name: 'Ada',
       last_name: 'Lovelace',
       email: 'ada@example.com',
@@ -353,7 +337,7 @@ describe('the SMS handoff from a composed registration', () => {
     // the sign-up used — password included, which is why it never outlives the
     // journey (see `registerAuthFlowMount`).
     expect(pending.payload).toMatchObject({
-      formType: 'register',
+      formType: 'registration',
       email: 'ada@example.com',
       is_allowed: true
     });
@@ -637,7 +621,7 @@ describe('the body a composition posts', () => {
     fireEvent.submit(container.querySelector('form')!);
 
     await waitFor(() => expect(signIn).toHaveBeenCalled());
-    expect(submitted()).toMatchObject({ formType: 'register' });
+    expect(submitted()).toMatchObject({ formType: 'registration' });
     // False, not the string: a truthy `redirect` navigates away instead of
     // answering, and the form would never see its own errors again.
     expect(submitted().redirect).toBe(false);
@@ -753,236 +737,3 @@ describe('a field the design has taken off this breakpoint', () => {
     expect(submitted()).not.toHaveProperty('phone');
   });
 });
-
-/**
- * The four marketing channels commerce records separately.
- *
- * They used to be fanned out from the single marketing tick, which turned a
- * composition that asks per channel into a lie: a shopper who ticked e-mail and
- * left SMS alone was recorded as refusing all four. A consent record is a legal
- * record, so what travels is what the shopper actually answered.
- */
-describe('per-channel marketing permissions', () => {
-  const channel = (name: string, order: number): Block =>
-    block({
-      id: `consent-${name}`,
-      type: 'auth-consent',
-      label: name,
-      properties: { consentType: 'custom', name, tickedValue: 'true' },
-      order
-    });
-
-  it('sends each channel its own answer when the composition asks per channel', async () => {
-    const { container } = renderComposed([
-      field('email', 0),
-      field('password', 1),
-      consent('legal', 2),
-      channel('email_allowed', 3),
-      channel('sms_allowed', 4)
-    ]);
-
-    fill(container, { email: 'ada@example.com', password: 'hunter2' });
-    tick(container, AUTH_CONSENT_NAMES.legal);
-    tick(container, 'email_allowed');
-
-    fireEvent.submit(container.querySelector('form')!);
-
-    await waitFor(() => expect(signIn).toHaveBeenCalled());
-
-    const body = submitted();
-
-    expect(body.email_allowed).toBe(true);
-    // The refusal the shopper actually gave, not the one the blanket tick
-    // would have written over it.
-    expect(body.sms_allowed).toBe(false);
-    // Channels nobody asked about keep falling back to the blanket answer,
-    // which is what a fixed form and every published composition send.
-    expect(body.call_allowed).toBe(false);
-    expect(body.whatsapp_allowed).toBe(false);
-    // A flag re-expressed as a boolean must not also travel as `'true'`.
-    expect(body.email_allowed).not.toBe('true');
-  });
-
-  it('keeps the blanket tick for a composition that asks once', async () => {
-    const { container } = renderComposed(COMPOSED);
-
-    fill(container, {
-      first_name: 'Ada',
-      last_name: 'Lovelace',
-      email: 'ada@example.com',
-      password: 'hunter2',
-      phone: '5551234567'
-    });
-    tick(container, AUTH_CONSENT_NAMES.legal);
-    tick(container, AUTH_CONSENT_NAMES.marketing);
-
-    fireEvent.submit(container.querySelector('form')!);
-
-    await waitFor(() => expect(signIn).toHaveBeenCalled());
-
-    expect(submitted()).toMatchObject({
-      email_allowed: true,
-      sms_allowed: true,
-      call_allowed: true,
-      whatsapp_allowed: true
-    });
-  });
-
-  it('lets a composition answer `confirm` on its own', async () => {
-    const { container } = renderComposed([
-      field('email', 0),
-      field('password', 1),
-      consent('legal', 2),
-      channel('confirm', 3)
-    ]);
-
-    fill(container, { email: 'ada@example.com', password: 'hunter2' });
-    tick(container, AUTH_CONSENT_NAMES.legal);
-
-    fireEvent.submit(container.querySelector('form')!);
-
-    await waitFor(() => expect(signIn).toHaveBeenCalled());
-
-    // The agreement was accepted; the separate confirmation was not, and that
-    // is the answer commerce is told — rather than a copy of `is_allowed`.
-    expect(submitted()).toMatchObject({ is_allowed: true, confirm: false });
-  });
-});
-
-/**
- * A refusal that names a field belongs under that field.
- *
- * "This e-mail is already registered" used to reach the shopper as the raw
- * `[{"type":"field_errors",…}]` above the form, because the reader kept a
- * message only when it was a string and commerce sends `string[]`.
- */
-describe('a refusal commerce hangs on a field', () => {
-  const refuse = (entries: { name: string; value: unknown }[]) =>
-    signIn.mockImplementationOnce(() =>
-      Promise.resolve({
-        error: 'CredentialsSignin',
-        code: JSON.stringify([{ type: 'field_errors', data: entries }])
-      })
-    );
-
-  const fillValid = (container: HTMLElement) => {
-    fill(container, { email: 'ada@example.com', password: 'hunter2' });
-    tick(container, AUTH_CONSENT_NAMES.legal);
-    fireEvent.submit(container.querySelector('form')!);
-  };
-
-  it('reads under the field, and leaves the form-level slot empty', async () => {
-    refuse([{ name: 'email', value: ['A user with this e-mail exists.'] }]);
-
-    const { container } = renderComposed([
-      field('email', 0),
-      field('password', 1),
-      consent('legal', 2)
-    ]);
-
-    fillValid(container);
-
-    await waitFor(() =>
-      expect(
-        screen.getByText('A user with this e-mail exists.')
-      ).toBeInTheDocument()
-    );
-
-    const emailInput = container.querySelector(
-      'input[name="email"]'
-    ) as HTMLInputElement;
-
-    expect(emailInput.getAttribute('aria-invalid')).toBe('true');
-    // The authored fallback is for a refusal nobody could read, not for one
-    // whose every sentence already found a field.
-    expect(screen.queryByText('Registration failed.')).toBeNull();
-    // And the caret goes where the work is, as it does after client validation.
-    expect(document.activeElement).toBe(emailInput);
-  });
-
-  it('lifts a message for a field this composition never authored', async () => {
-    refuse([{ name: 'tckn', value: ['This field is required.'] }]);
-
-    const { container } = renderComposed([
-      field('email', 0),
-      field('password', 1),
-      consent('legal', 2)
-    ]);
-
-    fillValid(container);
-
-    // Not silently dropped into a provider nothing reads: the shopper is told,
-    // in the one slot that always exists.
-    await waitFor(() =>
-      expect(
-        screen.getByText('This field is required.')
-      ).toBeInTheDocument()
-    );
-  });
-});
-
-/**
- * A sign-up that commerce escalates to SMS must NOT close the drawer.
- *
- * The parked payload is what an `otp-form` finishes the registration with, so
- * closing the surface would strand it: the shopper never reaches the code
- * screen and the account is never created. Safe today by one `return` before
- * the close, which is exactly the kind of ordering that a later edit breaks
- * silently — hence this case.
- */
-describe('an SMS escalation inside a drawer', () => {
-  it('moves to the verification step and leaves the drawer open', async () => {
-    signIn.mockImplementationOnce(() =>
-      Promise.resolve({
-        error: 'CredentialsSignin',
-        code: JSON.stringify([{ type: 'otp' }])
-      })
-    );
-
-    const modal = readThemeModals([
-      { id: 'auth-drawer', name: 'Auth', presentation: 'drawer' }
-    ])[0];
-
-    registerModalHost();
-
-    const { container } = render(
-      <ThemeModalMount modal={modal}>
-        <RegisterFormBlock
-          block={
-            block({
-              id: 'register-1',
-              type: 'register-form',
-              label: 'Register Form',
-              properties: { otpStepTarget: 'auth:verify' },
-              blocks: COMPOSED
-            }) as Block
-          }
-          placeholderId="placeholder-1"
-          sectionId="section-1"
-          currentBreakpoint="desktop"
-        />
-      </ThemeModalMount>
-    );
-
-    act(() => {
-      openModal('auth-drawer');
-    });
-
-    fill(container, {
-      first_name: 'Ada',
-      last_name: 'Lovelace',
-      email: 'ada@example.com',
-      password: 'hunter2',
-      phone: '5551234567'
-    });
-    tick(container, AUTH_CONSENT_NAMES.legal);
-    fireEvent.submit(container.querySelector('form')!);
-
-    await waitFor(() =>
-      expect(getAuthFlowState('auth')?.active).toBe('verify')
-    );
-
-    expect(isModalOpen('auth-drawer')).toBe(true);
-    expect(getPendingOtp()?.kind).toBe('register');
-  });
-});

package/src/__tests__/registry-parity.test.ts

@@ -39,17 +39,9 @@ const EXPECTED_BLOCK_TYPES = [
   'auth-form',
   'auth-step',
   'auth-step-title',
-  // The confirmation as a placeable block, the success twin of 'auth-error':
-  // the two forms that have a success state publish their message and this
-  // draws it where the design put it. See `auth/form-success-context.tsx`.
-  'auth-success',
   'basket-items',
   'basket-summary',
   'button',
-  // The security check commerce escalates to, placed inside an auth form.
-  'captcha',
-  // The screen the password-reset mail lands on.
-  'reset-password',
   'change-password-form',
   'checkout-flow-outlet',
   'checkout-steps',
@@ -68,10 +60,6 @@ const EXPECTED_BLOCK_TYPES = [
   'favorite-button',
   'favourites-grid',
   'forgot-password',
-  // One screen of a composed form — the confirmation, the refusal, the busy
-  // moment — as a container the form draws when it is on that screen. See
-  // `auth/form-state-context.tsx`.
-  'form-state',
   'group',
   'hamburger-menu',
   'hotspot',

package/src/auth/auth-field-errors.tsx

@@ -132,37 +132,6 @@ export const collectAuthFieldErrors = (
   return { errors, firstInvalid };
 };
 
-/**
- * Put the caret where the work is after a SERVER refusal.
- *
- * The client-side collector already does this for what it finds itself
- * (`firstInvalid`), and a refusal that arrives from commerce deserves the same
- * treatment: a duplicate e-mail three fields up is a message the shopper has
- * to scroll for otherwise. Document order rather than the order commerce
- * listed its errors in, because the shopper reads the form, not the response.
- *
- * A control the design took off this breakpoint is skipped for the same reason
- * the collector skips it: focus cannot land on something nobody can see.
- */
-export const focusFirstAuthFieldError = (
-  form: HTMLFormElement | null | undefined,
-  errors: AuthFieldErrors
-): void => {
-  if (!form || Object.keys(errors).length === 0) return;
-
-  const controls = Array.from(
-    form.querySelectorAll<FormControl>(
-      'input[name], select[name], textarea[name]'
-    )
-  );
-
-  const first = controls.find(
-    (control) => Boolean(errors[control.name]) && isVisibleControl(control)
-  );
-
-  first?.focus();
-};
-
 /**
  * The same map with one field's message dropped — what a form does the moment
  * that field is edited, so a message never outlives the mistake it describes.