@base316/react 0.2.0 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,120 @@
 # @base316/react
 
+## 0.5.0 — 2026-10-14
+
+Needs `@base316/sdk` 0.6.0 (`invitationToken` on `auth.signUp`).
+
+### Added
+
+- `<SignUp />` accepts an invitation as part of signing up: it reads
+  `?invitation=` from the page (or the new `invitationToken` prop; `null`
+  ignores the URL), says "You are joining Acme as Member", fills in the address
+  the invitation went to and sends the token, so the account joins that team
+  instead of getting a personal workspace. `onJoined(organizationId)` is
+  called when it did. Wording: `labels.joining`.
+- `<AcceptInvitation />`'s "Create an account" link carries `?invitation=` to
+  `signUpUrl`, so the sign-up page above picks it up.
+
+### Fixed
+
+- `<SignUp />` shows the server's sentence for a `409` refusal (a team with no
+  free seat) instead of the generic failure.
+
+## 0.4.0 — 2026-10-13
+
+Requires `@base316/sdk` 0.5.0.
+
+### Fixed — signing in when a second factor is required
+
+- Under an environment that requires a second factor, `<SignIn />` showed
+  "From your authenticator app" to somebody with no factor, `<SignUp />`
+  stopped silently after creating the account, and the magic-link landing set
+  an undefined token, which looked like being signed out. All three now go
+  into the new second-factor step.
+- `<SignUp />` shows the server's reason for a refusal ("Password needs a
+  symbol.", "That email is already registered.") rather than "The email may
+  already be registered" for everything, and the environment's own password
+  rules under the box (read with `auth.passwordPolicy()`) instead of a fixed
+  "At least 8 characters". An account created under a policy that requires a
+  confirmed address says to check the inbox instead of reporting a failure.
+
+### Added
+
+- **`<SecondFactorStep />`** — the second half of a sign-in that returned
+  `mfaRequired`. With a factor: a code box naming where the code went, resend,
+  recovery codes accepted. With none, under a required policy: choose
+  **Authenticator app** (QR code, setup key, link, six-digit confirm), **Email
+  me a code** or **Text me a code** — only what the server lists in
+  `enrollMethods` — then the recovery codes once, with copy and download, and an
+  "I have saved these codes" confirmation before the session is handed over.
+  Focus moves to each step's heading; errors are announced. `<SignIn />` and
+  `<SignUp />` use it; use it directly after a first step of your own.
+- Wording props for translation: `labels` on `<SecondFactorStep />` and
+  `<SignUp />`, `secondFactorLabels` on `<SignIn />` and `<SignUp />`
+  (`SecondFactorLabels`, `SignUpLabels`). English when omitted.
+
+- **`<BillingPortal />`** — a whole billing page for the signed-in user: plan
+  and status, next invoice, a scheduled change with its undo, a plan picker
+  whose choice opens a review step, seats on a per-seat plan, the card on file,
+  invoices with PDF and Pay, and cancel and resume. `billingDetails` is a slot
+  for your own address or tax-ID form. Composed from the components below, so a
+  different layout uses them directly.
+- **`<PlanChangeReview />`** — the step between picking a plan and changing to
+  it: features gained and lost, the prorated credit and charge now or the date
+  it waits for, the other timing when it is open, then confirm. A change now
+  with no card on file asks for one.
+- **`<PaymentMethod />`** — the card on file and a button that replaces it on a
+  Stripe-hosted page, and any other saved cards with **Make default** and
+  **Remove**. No card field is rendered anywhere.
+- **`<CreditBalances />`** — each credit balance, **Buy now** (the hosted pay
+  page) and auto-recharge with a threshold, pack and monthly maximum.
+  `<BillingPortal />` includes it when credit packs are on sale.
+- `SubscriptionManager` offers **Resume** on a cancelled subscription, confirms
+  a cancel in the page, and takes `onChange`. `Invoices` adds **PDF** (the
+  server's rendering, downloaded) and **Pay** on an open invoice.
+- **`<SeatManager />`** — the signed-in user changes how many seats their
+  subscription is for, with the price previewed before anything is charged:
+  adding seats is charged now for the rest of the period, removing them takes
+  effect at the period end with no refund. The user only picks the number;
+  each confirmed change carries its own idempotency key. Shows the plan's seat
+  limit when it has one, and that the plan is provided by their organization
+  for a managed tenant. `unitLabel` renames "seats"; `onChange` reports what a
+  change did.
+- **`<UpcomingInvoice />`** — the signed-in user's next bill: when it is
+  issued, its lines, discount, tax, wallet balance and the amount due. Reads
+  `billing.upcomingInvoice` from `@base316/sdk`; nothing is stored or charged
+  by showing it. `showLines={false}` gives a one-line card. Says "No upcoming
+  invoice" when nothing will bill the user, and that the plan is provided by
+  their organization for a managed tenant.
+- **Scheduled plan changes** — `<SubscriptionManager />` says when a scheduled
+  downgrade or ramp step takes effect ("Moves to Basic on 1 Nov") with a
+  "Keep Pro" button that withdraws it. `usePlans().selectPlan` returns
+  `{ status: "scheduled", effectiveAt }` for a downgrade, which now waits for
+  the renewal by default, and keeps the current plan marked current;
+  `<PricingTable />` says when the new plan starts.
+
+## 0.3.0 — 2026-10-03
+
+Requires `@base316/sdk` 0.3.0.
+
+### Added
+
+- **White-label for a tenant**: `Base316Provider` takes `tenant` —
+  `{ organizationId }` or `{ organizationExternalId }` — and every component
+  under it shows that tenant's branding (its own, then its parent's, then the
+  environment's). Changing it restyles without a reload; an inline object does
+  not refetch.
+- `TeamMembers` says when a team is reached through the organization that
+  manages it rather than by membership.
+- `SubscriptionManager` and `PricingTable` know when an account's plan is
+  provided by the organization that manages it: the plan is shown with the
+  provider named, and nothing can be bought, changed or cancelled.
+  `usePlans()` returns `managedBy`.
+- `PricingTable` says what a reverse trial turns into: a plan version whose
+  `trialEndAction` is `DOWNGRADE` reads "14-day free trial, then Free unless
+  you add a card", naming the downgrade plan when it is among the published
+  plans. `CONVERT` trials read as before.
+
 ## 0.2.0
 
 The first release since `0.1.0` on 13 September. The package shipped **8

package/README.md

@@ -79,6 +79,20 @@ inherits your application's styles automatically — silently absorbing whatever
 `body { font }` and `button { }` rules happen to exist produces components that
 look broken in ways neither side can predict.
 
+## White-label for a tenant
+
+When one business runs your product for others — a firm and its clients — show
+the firm's brand on the screens its clients see:
+
+```tsx
+<Base316Provider publishableKey={key} tenant={{ organizationExternalId: firm.id }}>
+```
+
+The tenant's own branding, then its parent's, then your environment's, field
+by field. Change `tenant` when the person switches team and every component
+restyles. `TeamMembers` says so when a team is reached through the firm rather
+than by membership.
+
 ## Reading the session
 
 ```tsx