@braintwopoint0/playback-commons 0.2.4 → 0.2.6

package/dist/api/index.d.ts

@@ -0,0 +1,34 @@
+type CorsOptions = {
+    /** Comma-separated method list. Default: 'POST, OPTIONS'. */
+    methods?: string;
+    /** Comma-separated header allowlist. Default: 'Content-Type'. */
+    headers?: string;
+    /** Preflight cache duration in seconds. Default: 86400 (24h). */
+    maxAge?: number;
+};
+/**
+ * Build CORS response headers.
+ *
+ * Always returns `Vary: Origin` so caches don't serve a CORS-allowed response
+ * to a different origin. Only emits `Access-Control-*` headers when the request
+ * Origin is in the allowlist — exact-match, no wildcards, so a typo'd subdomain
+ * or rogue preview URL can't post into a production endpoint.
+ *
+ * Same-origin requests have no Origin header on POST in some browsers and never
+ * preflight, so an absent or unknown origin returning the empty CORS set is the
+ * correct behavior.
+ */
+declare function corsHeaders(origin: string | null, allowed: ReadonlySet<string>, opts?: CorsOptions): Record<string, string>;
+/**
+ * Build a preflight (OPTIONS) Response. Use directly as the route's OPTIONS export:
+ *
+ *   export const OPTIONS = (req: NextRequest) => corsPreflight(req, ALLOWED_ORIGINS)
+ *
+ * Returns 204 No Content with the CORS headers built from the request's Origin
+ * against the allowlist. If the origin isn't allowed, the response still returns
+ * 204 but without the `Access-Control-Allow-*` headers — which is what the browser
+ * needs to see in order to block the subsequent real request.
+ */
+declare function corsPreflight(req: Request, allowed: ReadonlySet<string>, opts?: CorsOptions): Response;
+
+export { type CorsOptions, corsHeaders, corsPreflight };

package/dist/api/index.js

@@ -0,0 +1,26 @@
+// src/api/index.ts
+var DEFAULT_METHODS = "POST, OPTIONS";
+var DEFAULT_HEADERS = "Content-Type";
+var DEFAULT_MAX_AGE = 86400;
+function corsHeaders(origin, allowed, opts = {}) {
+  const headers = { Vary: "Origin" };
+  if (origin && allowed.has(origin)) {
+    headers["Access-Control-Allow-Origin"] = origin;
+    headers["Access-Control-Allow-Methods"] = opts.methods ?? DEFAULT_METHODS;
+    headers["Access-Control-Allow-Headers"] = opts.headers ?? DEFAULT_HEADERS;
+    headers["Access-Control-Max-Age"] = String(opts.maxAge ?? DEFAULT_MAX_AGE);
+  }
+  return headers;
+}
+function corsPreflight(req, allowed, opts) {
+  const origin = req.headers.get("origin");
+  return new Response(null, {
+    status: 204,
+    headers: corsHeaders(origin, allowed, opts)
+  });
+}
+export {
+  corsHeaders,
+  corsPreflight
+};
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/index.ts"],"sourcesContent":["// CORS primitives for cross-origin API routes between PLAYBACK / PLAYHUB / future\n// PLAYBACK-suite apps.\n//\n// The mechanism (header construction, preflight response) lives here. The policy\n// — i.e. which origins are allowed to call a given endpoint — is intentionally\n// per-route, since \"who can hit my newsletter endpoint\" is a different decision\n// from \"who can hit my admin endpoint\".\n\nexport type CorsOptions = {\n  /** Comma-separated method list. Default: 'POST, OPTIONS'. */\n  methods?: string\n  /** Comma-separated header allowlist. Default: 'Content-Type'. */\n  headers?: string\n  /** Preflight cache duration in seconds. Default: 86400 (24h). */\n  maxAge?: number\n}\n\nconst DEFAULT_METHODS = 'POST, OPTIONS'\nconst DEFAULT_HEADERS = 'Content-Type'\nconst DEFAULT_MAX_AGE = 86400\n\n/**\n * Build CORS response headers.\n *\n * Always returns `Vary: Origin` so caches don't serve a CORS-allowed response\n * to a different origin. Only emits `Access-Control-*` headers when the request\n * Origin is in the allowlist — exact-match, no wildcards, so a typo'd subdomain\n * or rogue preview URL can't post into a production endpoint.\n *\n * Same-origin requests have no Origin header on POST in some browsers and never\n * preflight, so an absent or unknown origin returning the empty CORS set is the\n * correct behavior.\n */\nexport function corsHeaders(\n  origin: string | null,\n  allowed: ReadonlySet<string>,\n  opts: CorsOptions = {}\n): Record<string, string> {\n  const headers: Record<string, string> = { Vary: 'Origin' }\n  if (origin && allowed.has(origin)) {\n    headers['Access-Control-Allow-Origin'] = origin\n    headers['Access-Control-Allow-Methods'] = opts.methods ?? DEFAULT_METHODS\n    headers['Access-Control-Allow-Headers'] = opts.headers ?? DEFAULT_HEADERS\n    headers['Access-Control-Max-Age'] = String(opts.maxAge ?? DEFAULT_MAX_AGE)\n  }\n  return headers\n}\n\n/**\n * Build a preflight (OPTIONS) Response. Use directly as the route's OPTIONS export:\n *\n *   export const OPTIONS = (req: NextRequest) => corsPreflight(req, ALLOWED_ORIGINS)\n *\n * Returns 204 No Content with the CORS headers built from the request's Origin\n * against the allowlist. If the origin isn't allowed, the response still returns\n * 204 but without the `Access-Control-Allow-*` headers — which is what the browser\n * needs to see in order to block the subsequent real request.\n */\nexport function corsPreflight(\n  req: Request,\n  allowed: ReadonlySet<string>,\n  opts?: CorsOptions\n): Response {\n  const origin = req.headers.get('origin')\n  return new Response(null, {\n    status: 204,\n    headers: corsHeaders(origin, allowed, opts),\n  })\n}\n"],"mappings":";AAiBA,IAAM,kBAAkB;AACxB,IAAM,kBAAkB;AACxB,IAAM,kBAAkB;AAcjB,SAAS,YACd,QACA,SACA,OAAoB,CAAC,GACG;AACxB,QAAM,UAAkC,EAAE,MAAM,SAAS;AACzD,MAAI,UAAU,QAAQ,IAAI,MAAM,GAAG;AACjC,YAAQ,6BAA6B,IAAI;AACzC,YAAQ,8BAA8B,IAAI,KAAK,WAAW;AAC1D,YAAQ,8BAA8B,IAAI,KAAK,WAAW;AAC1D,YAAQ,wBAAwB,IAAI,OAAO,KAAK,UAAU,eAAe;AAAA,EAC3E;AACA,SAAO;AACT;AAYO,SAAS,cACd,KACA,SACA,MACU;AACV,QAAM,SAAS,IAAI,QAAQ,IAAI,QAAQ;AACvC,SAAO,IAAI,SAAS,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR,SAAS,YAAY,QAAQ,SAAS,IAAI;AAAA,EAC5C,CAAC;AACH;","names":[]}

package/dist/ui/index.js

@@ -2744,7 +2744,7 @@ function NewsletterForm2({
     const trimmed = email.trim();
     const ok = /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(trimmed);
     if (!ok) {
-      setState("error");
+      setState("invalid_format");
       return;
     }
     inFlight.current = true;
@@ -2765,11 +2765,13 @@ function NewsletterForm2({
         setEmail("");
       } else if (res.status === 429) {
         setState("rate_limited");
+      } else if (res.status === 400) {
+        setState("invalid_format");
       } else {
-        setState("error");
+        setState("server_error");
       }
     } catch {
-      setState("error");
+      setState("server_error");
     } finally {
       inFlight.current = false;
     }
@@ -2820,16 +2822,17 @@ function NewsletterForm2({
               value: email,
               onChange: (e) => {
                 setEmail(e.target.value);
-                if (state === "error" || state === "rate_limited") setState("idle");
+                if (state === "invalid_format" || state === "server_error" || state === "rate_limited")
+                  setState("idle");
               },
               placeholder,
-              "aria-invalid": state === "error",
+              "aria-invalid": state === "invalid_format",
               "aria-describedby": feedbackId,
               className: cn(
                 "w-full sm:flex-1 h-12 sm:h-11 rounded-full bg-[var(--surface-1,#0f1512)] border px-5 text-[16px] sm:text-[14px] text-[var(--timberwolf)] placeholder:text-[rgba(214,213,201,0.44)]",
                 "focus:outline-none focus-visible:ring-2 focus-visible:ring-[var(--timberwolf)] focus-visible:ring-offset-2 focus-visible:ring-offset-[var(--night)]",
                 "disabled:opacity-60",
-                state === "error" ? "border-[rgba(237,106,106,0.5)]" : "border-[rgba(214,213,201,0.08)]"
+                state === "invalid_format" || state === "server_error" ? "border-[rgba(237,106,106,0.5)]" : "border-[rgba(214,213,201,0.08)]"
               )
             }
           ),
@@ -2851,13 +2854,14 @@ function NewsletterForm2({
             className: cn(
               "mt-2 -ml-0.5 text-[13px] min-h-[1.25rem]",
               state === "sent" && "text-[var(--timberwolf)]",
-              (state === "error" || state === "rate_limited") && "text-[rgb(237,106,106)]",
+              (state === "invalid_format" || state === "server_error" || state === "rate_limited") && "text-[rgb(237,106,106)]",
               (state === "idle" || state === "sending") && "text-[rgba(214,213,201,0.44)]"
             ),
-            role: state === "error" || state === "rate_limited" ? "alert" : void 0,
+            role: state === "invalid_format" || state === "server_error" || state === "rate_limited" ? "alert" : void 0,
             children: [
               state === "sent" && "Thanks \u2014 we\u2019ll be in touch.",
-              state === "error" && "Please enter a valid email address.",
+              state === "invalid_format" && "Please enter a valid email address.",
+              state === "server_error" && "Could not subscribe right now. Please try again in a moment.",
               state === "rate_limited" && "Too many attempts. Try again in a minute."
             ]
           }
@@ -2969,45 +2973,6 @@ import {
   Mail
 } from "lucide-react";
 
-// src/auth/context.tsx
-import {
-  createContext as createContext2,
-  useContext as useContext2,
-  useEffect as useEffect6,
-  useState as useState14,
-  useMemo as useMemo2,
-  useCallback as useCallback2,
-  useRef as useRef6
-} from "react";
-import { useRouter } from "next/navigation";
-
-// src/supabase/client.ts
-import { createBrowserClient } from "@supabase/ssr";
-function createClient() {
-  const cookieDomain = process.env.NEXT_PUBLIC_COOKIE_DOMAIN;
-  return createBrowserClient(
-    process.env.NEXT_PUBLIC_SUPABASE_URL,
-    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY,
-    {
-      ...cookieDomain && {
-        cookieOptions: { domain: cookieDomain }
-      }
-    }
-  );
-}
-
-// src/auth/context.tsx
-import { jsx as jsx39 } from "react/jsx-runtime";
-var AuthContext = createContext2(void 0);
-var CACHE_TIMEOUT = 5 * 60 * 1e3;
-function useAuth() {
-  const context = useContext2(AuthContext);
-  if (context === void 0) {
-    throw new Error("useAuth must be used within an AuthProvider");
-  }
-  return context;
-}
-
 // src/auth/shared.ts
 function validateEmail(email) {
   const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -3048,8 +3013,23 @@ function getAuthErrorMessage(error) {
   return errorMappings[message] || message;
 }
 
+// src/supabase/client.ts
+import { createBrowserClient } from "@supabase/ssr";
+function createClient() {
+  const cookieDomain = process.env.NEXT_PUBLIC_COOKIE_DOMAIN;
+  return createBrowserClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL,
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY,
+    {
+      ...cookieDomain && {
+        cookieOptions: { domain: cookieDomain }
+      }
+    }
+  );
+}
+
 // src/ui/sign-in-form.tsx
-import { Fragment as Fragment6, jsx as jsx40, jsxs as jsxs23 } from "react/jsx-runtime";
+import { Fragment as Fragment6, jsx as jsx39, jsxs as jsxs23 } from "react/jsx-runtime";
 var COOLDOWN_THRESHOLD = 3;
 var COOLDOWN_DURATION_MS = 3e4;
 function SignInForm({
@@ -3068,7 +3048,7 @@ function SignInForm({
   const [loading, setLoading] = React28.useState(false);
   const [consecutiveErrors, setConsecutiveErrors] = React28.useState(0);
   const [cooldownUntil, setCooldownUntil] = React28.useState(null);
-  const { signIn } = useAuth();
+  const [supabase] = React28.useState(() => createClient());
   React28.useEffect(() => {
     if (initialError) setError(initialError);
   }, [initialError]);
@@ -3090,7 +3070,10 @@ function SignInForm({
     }
     setLoading(true);
     try {
-      const { error: signInError } = await signIn(email, password);
+      const { error: signInError } = await supabase.auth.signInWithPassword({
+        email,
+        password
+      });
       if (signInError) {
         setError(getAuthErrorMessage(signInError));
         const newCount = consecutiveErrors + 1;
@@ -3112,11 +3095,11 @@ function SignInForm({
   };
   return /* @__PURE__ */ jsxs23("div", { className: "bg-card border border-border rounded-xl p-8 space-y-6", children: [
     /* @__PURE__ */ jsxs23("div", { className: "text-center", children: [
-      /* @__PURE__ */ jsx40("h1", { className: "text-2xl font-bold text-[var(--timberwolf)] mb-2", children: title }),
-      /* @__PURE__ */ jsx40("p", { className: "text-sm text-muted-foreground", children: subtitle })
+      /* @__PURE__ */ jsx39("h1", { className: "text-2xl font-bold text-[var(--timberwolf)] mb-2", children: title }),
+      /* @__PURE__ */ jsx39("p", { className: "text-sm text-muted-foreground", children: subtitle })
     ] }),
     /* @__PURE__ */ jsxs23("form", { onSubmit: handleSubmit, className: "space-y-4", children: [
-      error && /* @__PURE__ */ jsx40(
+      error && /* @__PURE__ */ jsx39(
         "div",
         {
           id: "signin-error",
@@ -3124,15 +3107,15 @@ function SignInForm({
           "aria-live": "polite",
           className: "bg-red-900/20 border border-red-700/30 rounded-lg p-3",
           children: /* @__PURE__ */ jsxs23("div", { className: "flex items-center gap-2 text-red-400 text-sm", children: [
-            /* @__PURE__ */ jsx40(AlertCircle, { className: "h-4 w-4 flex-shrink-0" }),
-            /* @__PURE__ */ jsx40("span", { children: error })
+            /* @__PURE__ */ jsx39(AlertCircle, { className: "h-4 w-4 flex-shrink-0" }),
+            /* @__PURE__ */ jsx39("span", { children: error })
           ] })
         }
       ),
       /* @__PURE__ */ jsxs23("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx40(Label, { htmlFor: "email", className: "text-[var(--timberwolf)]", children: "Email" }),
+        /* @__PURE__ */ jsx39(Label, { htmlFor: "email", className: "text-[var(--timberwolf)]", children: "Email" }),
         /* @__PURE__ */ jsxs23("div", { className: "relative", children: [
-          /* @__PURE__ */ jsx40(
+          /* @__PURE__ */ jsx39(
             Input,
             {
               id: "email",
@@ -3147,13 +3130,13 @@ function SignInForm({
               "aria-describedby": error ? "signin-error" : void 0
             }
           ),
-          /* @__PURE__ */ jsx40(Mail, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" })
+          /* @__PURE__ */ jsx39(Mail, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" })
         ] })
       ] }),
       /* @__PURE__ */ jsxs23("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx40(Label, { htmlFor: "password", className: "text-[var(--timberwolf)]", children: "Password" }),
+        /* @__PURE__ */ jsx39(Label, { htmlFor: "password", className: "text-[var(--timberwolf)]", children: "Password" }),
         /* @__PURE__ */ jsxs23("div", { className: "relative", children: [
-          /* @__PURE__ */ jsx40(
+          /* @__PURE__ */ jsx39(
             Input,
             {
               id: "password",
@@ -3168,8 +3151,8 @@ function SignInForm({
               "aria-describedby": error ? "signin-error" : void 0
             }
           ),
-          /* @__PURE__ */ jsx40(Lock, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" }),
-          /* @__PURE__ */ jsx40(
+          /* @__PURE__ */ jsx39(Lock, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" }),
+          /* @__PURE__ */ jsx39(
             "button",
             {
               type: "button",
@@ -3178,12 +3161,12 @@ function SignInForm({
               disabled: loading,
               "aria-label": showPassword ? "Hide password" : "Show password",
               "aria-pressed": showPassword,
-              children: showPassword ? /* @__PURE__ */ jsx40(EyeOff, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx40(Eye, { className: "h-4 w-4" })
+              children: showPassword ? /* @__PURE__ */ jsx39(EyeOff, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx39(Eye, { className: "h-4 w-4" })
             }
           )
         ] })
       ] }),
-      forgotPasswordHref ? /* @__PURE__ */ jsx40("div", { className: "flex justify-end -mt-1", children: /* @__PURE__ */ jsx40(
+      forgotPasswordHref ? /* @__PURE__ */ jsx39("div", { className: "flex justify-end -mt-1", children: /* @__PURE__ */ jsx39(
         Link4,
         {
           href: forgotPasswordHref,
@@ -3191,23 +3174,23 @@ function SignInForm({
           children: "Forgot your password?"
         }
       ) }) : null,
-      /* @__PURE__ */ jsx40(
+      /* @__PURE__ */ jsx39(
         Button,
         {
           type: "submit",
           className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]",
           disabled: loading,
           children: loading ? /* @__PURE__ */ jsxs23(Fragment6, { children: [
-            /* @__PURE__ */ jsx40(Loader2, { className: "h-4 w-4 mr-2 animate-spin" }),
+            /* @__PURE__ */ jsx39(Loader2, { className: "h-4 w-4 mr-2 animate-spin" }),
             "Signing in..."
           ] }) : "Sign in"
         }
       )
     ] }),
-    signUpHref ? /* @__PURE__ */ jsx40("div", { className: "text-center text-sm", children: /* @__PURE__ */ jsxs23("p", { className: "text-muted-foreground", children: [
+    signUpHref ? /* @__PURE__ */ jsx39("div", { className: "text-center text-sm", children: /* @__PURE__ */ jsxs23("p", { className: "text-muted-foreground", children: [
       "Don't have an account?",
       " ",
-      /* @__PURE__ */ jsx40(
+      /* @__PURE__ */ jsx39(
         Link4,
         {
           href: signUpHref,
@@ -3229,7 +3212,7 @@ import {
   Loader2 as Loader22,
   Mail as Mail2
 } from "lucide-react";
-import { Fragment as Fragment7, jsx as jsx41, jsxs as jsxs24 } from "react/jsx-runtime";
+import { Fragment as Fragment7, jsx as jsx40, jsxs as jsxs24 } from "react/jsx-runtime";
 var RESEND_COOLDOWN_MS = 3e4;
 var COOLDOWN_STORAGE_KEY = "playback:pwreset-cooldown-until";
 function ForgotPasswordForm({
@@ -3308,18 +3291,18 @@ function ForgotPasswordForm({
   };
   if (emailSent) {
     return /* @__PURE__ */ jsxs24("div", { className: "bg-card border border-border rounded-xl p-8 space-y-6 text-center", children: [
-      /* @__PURE__ */ jsx41("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx41("div", { className: "h-12 w-12 rounded-full bg-[var(--timberwolf)]/10 border border-[var(--timberwolf)]/20 flex items-center justify-center", children: /* @__PURE__ */ jsx41(CheckCircle, { className: "h-6 w-6 text-[var(--timberwolf)]" }) }) }),
+      /* @__PURE__ */ jsx40("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx40("div", { className: "h-12 w-12 rounded-full bg-[var(--timberwolf)]/10 border border-[var(--timberwolf)]/20 flex items-center justify-center", children: /* @__PURE__ */ jsx40(CheckCircle, { className: "h-6 w-6 text-[var(--timberwolf)]" }) }) }),
       /* @__PURE__ */ jsxs24("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx41("h1", { className: "text-2xl font-bold text-[var(--timberwolf)]", children: "Check your email" }),
+        /* @__PURE__ */ jsx40("h1", { className: "text-2xl font-bold text-[var(--timberwolf)]", children: "Check your email" }),
         /* @__PURE__ */ jsxs24("p", { className: "text-sm text-muted-foreground", children: [
           "We sent a reset link to",
           " ",
-          /* @__PURE__ */ jsx41("span", { className: "text-[var(--timberwolf)] font-medium", children: email }),
+          /* @__PURE__ */ jsx40("span", { className: "text-[var(--timberwolf)] font-medium", children: email }),
           ". If it's not in your inbox, check spam."
         ] })
       ] }),
       /* @__PURE__ */ jsxs24("div", { className: "space-y-3 pt-2", children: [
-        /* @__PURE__ */ jsx41(
+        /* @__PURE__ */ jsx40(
           Button,
           {
             onClick: () => {
@@ -3333,8 +3316,8 @@ function ForgotPasswordForm({
             children: cooldownSecondsLeft > 0 ? `Send another email in ${cooldownSecondsLeft}s` : "Send another email"
           }
         ),
-        /* @__PURE__ */ jsx41(Link5, { href: loginHref, className: "block", children: /* @__PURE__ */ jsxs24(Button, { className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]", children: [
-          /* @__PURE__ */ jsx41(ArrowLeft, { className: "h-4 w-4 mr-2" }),
+        /* @__PURE__ */ jsx40(Link5, { href: loginHref, className: "block", children: /* @__PURE__ */ jsxs24(Button, { className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]", children: [
+          /* @__PURE__ */ jsx40(ArrowLeft, { className: "h-4 w-4 mr-2" }),
           "Back to sign in"
         ] }) })
       ] })
@@ -3342,11 +3325,11 @@ function ForgotPasswordForm({
   }
   return /* @__PURE__ */ jsxs24("div", { className: "bg-card border border-border rounded-xl p-8 space-y-6", children: [
     /* @__PURE__ */ jsxs24("div", { className: "text-center", children: [
-      /* @__PURE__ */ jsx41("h1", { className: "text-2xl font-bold text-[var(--timberwolf)] mb-2", children: title }),
-      /* @__PURE__ */ jsx41("p", { className: "text-sm text-muted-foreground", children: subtitle })
+      /* @__PURE__ */ jsx40("h1", { className: "text-2xl font-bold text-[var(--timberwolf)] mb-2", children: title }),
+      /* @__PURE__ */ jsx40("p", { className: "text-sm text-muted-foreground", children: subtitle })
     ] }),
     /* @__PURE__ */ jsxs24("form", { onSubmit: handleSubmit, className: "space-y-4", children: [
-      error && /* @__PURE__ */ jsx41(
+      error && /* @__PURE__ */ jsx40(
         "div",
         {
           id: "forgot-error",
@@ -3354,15 +3337,15 @@ function ForgotPasswordForm({
           "aria-live": "polite",
           className: "bg-red-900/20 border border-red-700/30 rounded-lg p-3",
           children: /* @__PURE__ */ jsxs24("div", { className: "flex items-center gap-2 text-red-400 text-sm", children: [
-            /* @__PURE__ */ jsx41(AlertCircle2, { className: "h-4 w-4 flex-shrink-0" }),
-            /* @__PURE__ */ jsx41("span", { children: error })
+            /* @__PURE__ */ jsx40(AlertCircle2, { className: "h-4 w-4 flex-shrink-0" }),
+            /* @__PURE__ */ jsx40("span", { children: error })
           ] })
         }
       ),
       /* @__PURE__ */ jsxs24("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx41(Label, { htmlFor: "email", className: "text-[var(--timberwolf)]", children: "Email" }),
+        /* @__PURE__ */ jsx40(Label, { htmlFor: "email", className: "text-[var(--timberwolf)]", children: "Email" }),
         /* @__PURE__ */ jsxs24("div", { className: "relative", children: [
-          /* @__PURE__ */ jsx41(
+          /* @__PURE__ */ jsx40(
             Input,
             {
               id: "email",
@@ -3378,29 +3361,29 @@ function ForgotPasswordForm({
               "aria-describedby": error ? "forgot-error" : void 0
             }
           ),
-          /* @__PURE__ */ jsx41(Mail2, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" })
+          /* @__PURE__ */ jsx40(Mail2, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" })
         ] })
       ] }),
-      /* @__PURE__ */ jsx41(
+      /* @__PURE__ */ jsx40(
         Button,
         {
           type: "submit",
           className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]",
           disabled: loading || cooldownSecondsLeft > 0,
           children: loading ? /* @__PURE__ */ jsxs24(Fragment7, { children: [
-            /* @__PURE__ */ jsx41(Loader22, { className: "h-4 w-4 mr-2 animate-spin" }),
+            /* @__PURE__ */ jsx40(Loader22, { className: "h-4 w-4 mr-2 animate-spin" }),
             "Sending email..."
           ] }) : cooldownSecondsLeft > 0 ? `Try again in ${cooldownSecondsLeft}s` : "Send reset link"
         }
       )
     ] }),
-    /* @__PURE__ */ jsx41("div", { className: "text-center text-sm", children: /* @__PURE__ */ jsxs24(
+    /* @__PURE__ */ jsx40("div", { className: "text-center text-sm", children: /* @__PURE__ */ jsxs24(
       Link5,
       {
         href: loginHref,
         className: "inline-flex items-center gap-1.5 text-muted-foreground hover:text-[var(--timberwolf)] transition-colors",
         children: [
-          /* @__PURE__ */ jsx41(ArrowLeft, { className: "h-3.5 w-3.5" }),
+          /* @__PURE__ */ jsx40(ArrowLeft, { className: "h-3.5 w-3.5" }),
           "Back to sign in"
         ]
       }
@@ -3411,7 +3394,7 @@ function ForgotPasswordForm({
 // src/ui/reset-password-form.tsx
 import * as React30 from "react";
 import Link6 from "next/link";
-import { useRouter as useRouter2 } from "next/navigation";
+import { useRouter } from "next/navigation";
 import {
   AlertCircle as AlertCircle3,
   CheckCircle as CheckCircle2,
@@ -3420,7 +3403,7 @@ import {
   Loader2 as Loader23,
   Lock as Lock2
 } from "lucide-react";
-import { Fragment as Fragment8, jsx as jsx42, jsxs as jsxs25 } from "react/jsx-runtime";
+import { Fragment as Fragment8, jsx as jsx41, jsxs as jsxs25 } from "react/jsx-runtime";
 function ResetPasswordForm({
   loginHref = "/auth/login",
   initialError,
@@ -3435,7 +3418,7 @@ function ResetPasswordForm({
   const [error, setError] = React30.useState(initialError ?? "");
   const [loading, setLoading] = React30.useState(false);
   const [passwordReset, setPasswordReset] = React30.useState(false);
-  const router = useRouter2();
+  const router = useRouter();
   const [supabase] = React30.useState(() => createClient());
   React30.useEffect(() => {
     if (initialError) setError(initialError);
@@ -3489,21 +3472,21 @@ function ResetPasswordForm({
   };
   if (passwordReset) {
     return /* @__PURE__ */ jsxs25("div", { className: "bg-card border border-border rounded-xl p-8 space-y-6 text-center", children: [
-      /* @__PURE__ */ jsx42("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx42("div", { className: "h-12 w-12 rounded-full bg-[var(--timberwolf)]/10 border border-[var(--timberwolf)]/20 flex items-center justify-center", children: /* @__PURE__ */ jsx42(CheckCircle2, { className: "h-6 w-6 text-[var(--timberwolf)]" }) }) }),
+      /* @__PURE__ */ jsx41("div", { className: "flex justify-center", children: /* @__PURE__ */ jsx41("div", { className: "h-12 w-12 rounded-full bg-[var(--timberwolf)]/10 border border-[var(--timberwolf)]/20 flex items-center justify-center", children: /* @__PURE__ */ jsx41(CheckCircle2, { className: "h-6 w-6 text-[var(--timberwolf)]" }) }) }),
       /* @__PURE__ */ jsxs25("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx42("h1", { className: "text-2xl font-bold text-[var(--timberwolf)]", children: "Password updated" }),
-        /* @__PURE__ */ jsx42("p", { className: "text-sm text-muted-foreground", children: "Redirecting you to sign in\u2026" })
+        /* @__PURE__ */ jsx41("h1", { className: "text-2xl font-bold text-[var(--timberwolf)]", children: "Password updated" }),
+        /* @__PURE__ */ jsx41("p", { className: "text-sm text-muted-foreground", children: "Redirecting you to sign in\u2026" })
       ] }),
-      /* @__PURE__ */ jsx42(Link6, { href: loginHref, className: "block pt-2", children: /* @__PURE__ */ jsx42(Button, { className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]", children: "Continue to sign in" }) })
+      /* @__PURE__ */ jsx41(Link6, { href: loginHref, className: "block pt-2", children: /* @__PURE__ */ jsx41(Button, { className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]", children: "Continue to sign in" }) })
     ] });
   }
   return /* @__PURE__ */ jsxs25("div", { className: "bg-card border border-border rounded-xl p-8 space-y-6", children: [
     /* @__PURE__ */ jsxs25("div", { className: "text-center", children: [
-      /* @__PURE__ */ jsx42("h1", { className: "text-2xl font-bold text-[var(--timberwolf)] mb-2", children: title }),
-      /* @__PURE__ */ jsx42("p", { className: "text-sm text-muted-foreground", children: subtitle })
+      /* @__PURE__ */ jsx41("h1", { className: "text-2xl font-bold text-[var(--timberwolf)] mb-2", children: title }),
+      /* @__PURE__ */ jsx41("p", { className: "text-sm text-muted-foreground", children: subtitle })
     ] }),
     /* @__PURE__ */ jsxs25("form", { onSubmit: handleSubmit, className: "space-y-4", children: [
-      error && /* @__PURE__ */ jsx42(
+      error && /* @__PURE__ */ jsx41(
         "div",
         {
           id: "reset-error",
@@ -3511,15 +3494,15 @@ function ResetPasswordForm({
           "aria-live": "polite",
           className: "bg-red-900/20 border border-red-700/30 rounded-lg p-3",
           children: /* @__PURE__ */ jsxs25("div", { className: "flex items-center gap-2 text-red-400 text-sm", children: [
-            /* @__PURE__ */ jsx42(AlertCircle3, { className: "h-4 w-4 flex-shrink-0" }),
-            /* @__PURE__ */ jsx42("span", { children: error })
+            /* @__PURE__ */ jsx41(AlertCircle3, { className: "h-4 w-4 flex-shrink-0" }),
+            /* @__PURE__ */ jsx41("span", { children: error })
           ] })
         }
       ),
       /* @__PURE__ */ jsxs25("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx42(Label, { htmlFor: "password", className: "text-[var(--timberwolf)]", children: "New password" }),
+        /* @__PURE__ */ jsx41(Label, { htmlFor: "password", className: "text-[var(--timberwolf)]", children: "New password" }),
         /* @__PURE__ */ jsxs25("div", { className: "relative", children: [
-          /* @__PURE__ */ jsx42(
+          /* @__PURE__ */ jsx41(
             Input,
             {
               id: "password",
@@ -3535,8 +3518,8 @@ function ResetPasswordForm({
               "aria-describedby": error ? "reset-error" : void 0
             }
           ),
-          /* @__PURE__ */ jsx42(Lock2, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" }),
-          /* @__PURE__ */ jsx42(
+          /* @__PURE__ */ jsx41(Lock2, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" }),
+          /* @__PURE__ */ jsx41(
             "button",
             {
               type: "button",
@@ -3545,13 +3528,13 @@ function ResetPasswordForm({
               disabled: loading,
               "aria-label": showPassword ? "Hide password" : "Show password",
               "aria-pressed": showPassword,
-              children: showPassword ? /* @__PURE__ */ jsx42(EyeOff2, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx42(Eye2, { className: "h-4 w-4" })
+              children: showPassword ? /* @__PURE__ */ jsx41(EyeOff2, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx41(Eye2, { className: "h-4 w-4" })
             }
           )
         ] })
       ] }),
       /* @__PURE__ */ jsxs25("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx42(
+        /* @__PURE__ */ jsx41(
           Label,
           {
             htmlFor: "confirmPassword",
@@ -3560,7 +3543,7 @@ function ResetPasswordForm({
           }
         ),
         /* @__PURE__ */ jsxs25("div", { className: "relative", children: [
-          /* @__PURE__ */ jsx42(
+          /* @__PURE__ */ jsx41(
             Input,
             {
               id: "confirmPassword",
@@ -3575,8 +3558,8 @@ function ResetPasswordForm({
               "aria-describedby": error ? "reset-error" : void 0
             }
           ),
-          /* @__PURE__ */ jsx42(Lock2, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" }),
-          /* @__PURE__ */ jsx42(
+          /* @__PURE__ */ jsx41(Lock2, { className: "h-4 w-4 absolute left-3 top-1/2 -translate-y-1/2 text-muted-foreground" }),
+          /* @__PURE__ */ jsx41(
             "button",
             {
               type: "button",
@@ -3585,26 +3568,26 @@ function ResetPasswordForm({
               disabled: loading,
               "aria-label": showConfirmPassword ? "Hide password" : "Show password",
               "aria-pressed": showConfirmPassword,
-              children: showConfirmPassword ? /* @__PURE__ */ jsx42(EyeOff2, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx42(Eye2, { className: "h-4 w-4" })
+              children: showConfirmPassword ? /* @__PURE__ */ jsx41(EyeOff2, { className: "h-4 w-4" }) : /* @__PURE__ */ jsx41(Eye2, { className: "h-4 w-4" })
             }
           )
         ] })
       ] }),
-      /* @__PURE__ */ jsx42("p", { className: "text-xs text-muted-foreground", children: "At least 8 characters with an uppercase letter, a lowercase letter, and a number." }),
-      /* @__PURE__ */ jsx42(
+      /* @__PURE__ */ jsx41("p", { className: "text-xs text-muted-foreground", children: "At least 8 characters with an uppercase letter, a lowercase letter, and a number." }),
+      /* @__PURE__ */ jsx41(
         Button,
         {
           type: "submit",
           className: "w-full h-11 bg-[var(--timberwolf)] text-[var(--night)] hover:bg-[var(--ash-grey)]",
           disabled: loading,
           children: loading ? /* @__PURE__ */ jsxs25(Fragment8, { children: [
-            /* @__PURE__ */ jsx42(Loader23, { className: "h-4 w-4 mr-2 animate-spin" }),
+            /* @__PURE__ */ jsx41(Loader23, { className: "h-4 w-4 mr-2 animate-spin" }),
             "Updating password..."
           ] }) : "Update password"
         }
       )
     ] }),
-    /* @__PURE__ */ jsx42("div", { className: "text-center text-sm", children: /* @__PURE__ */ jsx42(
+    /* @__PURE__ */ jsx41("div", { className: "text-center text-sm", children: /* @__PURE__ */ jsx41(
       Link6,
       {
         href: loginHref,