@connextar/house 0.11.0 → 0.13.0

package/dist/password/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@connextar/house/password` — the password field every form uses, and the
+ * strength meter for the ones where a password is being chosen.
+ *
+ * Ten apps had password fields and not one could show what had been typed.
+ * One showed a strength meter — a hand-rolled checklist, with an unused copy in
+ * a second app — and "Password1!" ticks every box on it. This is one toggle and
+ * one honest estimate, so a person meets the same field and the same judgement
+ * in every app.
+ *
+ * React is the only peer it needs. Nothing here imports a form library — the
+ * input forwards its ref and every prop, so react-hook-form's `register`, a
+ * `Controller` and plain state all fit — and nothing imports a design system:
+ * the look is theme-token classes replaced through `classNames`, as in
+ * `wizard` and `markdown`. The estimator alone, for a server, is
+ * `@connextar/house/password/estimate`.
+ */
+export { estimatePasswordStrength, MAX_ANALYSED_LENGTH, PASSWORD_STRENGTH_MESSAGES, type EstimatePasswordStrengthOptions, type PasswordScore, type PasswordStrengthEstimate, type PasswordStrengthMessages, type PasswordWeakness, } from "./estimate.js";
+export { PASSWORD_INPUT_CLASS_NAMES, PasswordInput, type PasswordInputClassNames, type PasswordInputProps, } from "./password-input.js";
+export { PASSWORD_STRENGTH_CLASS_NAMES, PasswordStrength, type PasswordStrengthClassNames, type PasswordStrengthProps, } from "./password-strength.js";
+export { usePasswordReveal, type PasswordReveal, type PasswordRevealOptions } from "./reveal.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/password/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/password/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,+BAA+B,EACpC,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EACb,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/password/index.js

@@ -0,0 +1,22 @@
+/**
+ * `@connextar/house/password` — the password field every form uses, and the
+ * strength meter for the ones where a password is being chosen.
+ *
+ * Ten apps had password fields and not one could show what had been typed.
+ * One showed a strength meter — a hand-rolled checklist, with an unused copy in
+ * a second app — and "Password1!" ticks every box on it. This is one toggle and
+ * one honest estimate, so a person meets the same field and the same judgement
+ * in every app.
+ *
+ * React is the only peer it needs. Nothing here imports a form library — the
+ * input forwards its ref and every prop, so react-hook-form's `register`, a
+ * `Controller` and plain state all fit — and nothing imports a design system:
+ * the look is theme-token classes replaced through `classNames`, as in
+ * `wizard` and `markdown`. The estimator alone, for a server, is
+ * `@connextar/house/password/estimate`.
+ */
+export { estimatePasswordStrength, MAX_ANALYSED_LENGTH, PASSWORD_STRENGTH_MESSAGES, } from "./estimate.js";
+export { PASSWORD_INPUT_CLASS_NAMES, PasswordInput, } from "./password-input.js";
+export { PASSWORD_STRENGTH_CLASS_NAMES, PasswordStrength, } from "./password-strength.js";
+export { usePasswordReveal } from "./reveal.js";
+//# sourceMappingURL=index.js.map

package/dist/password/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/password/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,GAM3B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,aAAa,GAGd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAmD,MAAM,aAAa,CAAC"}

package/dist/password/password-input.d.ts

@@ -0,0 +1,55 @@
+import * as React from "react";
+/** Every element the input draws. Each value replaces the default for that part. */
+export interface PasswordInputClassNames {
+    wrapper: string;
+    input: string;
+    toggle: string;
+    icon: string;
+}
+/**
+ * The house look: the shadcn input on the shared theme tokens, with room on the
+ * right for the toggle. An app whose own `Input` differs passes its classes as
+ * `classNames.input`; one without theme tokens replaces the parts it needs.
+ *
+ * `[&::-ms-reveal]:hidden` removes the eye Edge draws in every password field,
+ * which would otherwise sit beside ours.
+ */
+export declare const PASSWORD_INPUT_CLASS_NAMES: PasswordInputClassNames;
+export interface PasswordInputProps extends Omit<React.ComponentPropsWithoutRef<"input">, "type"> {
+    /**
+     * What the field is for, which decides `autoComplete`: `"current"` for
+     * signing in and for confirming who you are (two-factor, deleting an
+     * account); `"new"` wherever a password is being chosen, confirm fields
+     * included. An explicit `autoComplete` wins.
+     */
+    purpose?: "current" | "new";
+    /** Controlled reveal — one toggle shared by a new and a confirm field, say. */
+    revealed?: boolean;
+    defaultRevealed?: boolean;
+    onRevealedChange?: (revealed: boolean) => void;
+    /** The toggle's accessible name. Constant: the pressed state says whether it is on. */
+    toggleLabel?: string;
+    /** Appended to the input's classes, as with the app's own `Input`. */
+    className?: string;
+    classNames?: Partial<PasswordInputClassNames>;
+}
+/**
+ * A password field with a show/hide toggle — the one every form in every app
+ * uses, whatever it is asking for.
+ *
+ * A drop-in for `<Input type="password">`: every input prop and the ref pass
+ * straight through, so `{...register("password")}`, a `Controller`'s `field`
+ * and plain `value`/`onChange` state all work unchanged.
+ *
+ * The toggle is a real `<button type="button">` inside the field, so it never
+ * submits the form and is reached with Tab. Its accessible name stays
+ * "Show password" and `aria-pressed` carries the state — a toggle whose label
+ * changed as well would be read as "Hide password, pressed", which says the
+ * opposite of what is on screen. The eye becomes a struck-through eye for
+ * everyone else.
+ *
+ * See `usePasswordReveal` for what else the toggle takes care of: focus and
+ * caret kept, hidden again on submit, no spellcheck.
+ */
+export declare const PasswordInput: React.ForwardRefExoticComponent<PasswordInputProps & React.RefAttributes<HTMLInputElement>>;
+//# sourceMappingURL=password-input.d.ts.map

package/dist/password/password-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-input.d.ts","sourceRoot":"","sources":["../../src/password/password-input.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAK/B,oFAAoF;AACpF,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,uBAOxC,CAAC;AAEF,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC/F;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,6FA6CxB,CAAC"}

package/dist/password/password-input.js

@@ -0,0 +1,54 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Eye, EyeOff } from "lucide-react";
+import * as React from "react";
+import { cx } from "../internal/cx.js";
+import { mergeRefs, usePasswordReveal } from "./reveal.js";
+/**
+ * The house look: the shadcn input on the shared theme tokens, with room on the
+ * right for the toggle. An app whose own `Input` differs passes its classes as
+ * `classNames.input`; one without theme tokens replaces the parts it needs.
+ *
+ * `[&::-ms-reveal]:hidden` removes the eye Edge draws in every password field,
+ * which would otherwise sit beside ours.
+ */
+export const PASSWORD_INPUT_CLASS_NAMES = {
+    wrapper: "relative w-full",
+    input: "flex h-9 w-full min-w-0 rounded-md border border-input bg-transparent py-1 pr-10 pl-3 text-base shadow-xs transition-[color,box-shadow] outline-none placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 aria-invalid:border-destructive md:text-sm [&::-ms-reveal]:hidden",
+    toggle: "absolute inset-y-0 right-0 flex w-9 items-center justify-center rounded-r-md text-muted-foreground transition-colors hover:text-foreground focus-visible:ring-2 focus-visible:ring-ring focus-visible:outline-none disabled:pointer-events-none disabled:opacity-50",
+    icon: "size-4",
+};
+/**
+ * A password field with a show/hide toggle — the one every form in every app
+ * uses, whatever it is asking for.
+ *
+ * A drop-in for `<Input type="password">`: every input prop and the ref pass
+ * straight through, so `{...register("password")}`, a `Controller`'s `field`
+ * and plain `value`/`onChange` state all work unchanged.
+ *
+ * The toggle is a real `<button type="button">` inside the field, so it never
+ * submits the form and is reached with Tab. Its accessible name stays
+ * "Show password" and `aria-pressed` carries the state — a toggle whose label
+ * changed as well would be read as "Hide password, pressed", which says the
+ * opposite of what is on screen. The eye becomes a struck-through eye for
+ * everyone else.
+ *
+ * See `usePasswordReveal` for what else the toggle takes care of: focus and
+ * caret kept, hidden again on submit, no spellcheck.
+ */
+export const PasswordInput = React.forwardRef(function PasswordInput({ purpose = "current", revealed: revealedProp, defaultRevealed, onRevealedChange, toggleLabel = "Show password", className, classNames, id: idProp, autoComplete, disabled, ...props }, ref) {
+    const c = { ...PASSWORD_INPUT_CLASS_NAMES, ...classNames };
+    const generatedId = React.useId();
+    const id = idProp ?? generatedId;
+    const reveal = usePasswordReveal({
+        revealed: revealedProp,
+        defaultRevealed,
+        onRevealedChange,
+        inputId: id,
+        disabled,
+    });
+    const inputRef = React.useMemo(() => mergeRefs(ref, reveal.inputRef), [ref, reveal.inputRef]);
+    const Icon = reveal.revealed ? EyeOff : Eye;
+    return (_jsxs("div", { className: c.wrapper, children: [_jsx("input", { ...props, ...reveal.inputProps, ref: inputRef, id: id, disabled: disabled, autoComplete: autoComplete ?? (purpose === "new" ? "new-password" : "current-password"), className: cx(c.input, className) }), _jsx("button", { ...reveal.toggleProps, "aria-label": toggleLabel, className: c.toggle, children: _jsx(Icon, { "aria-hidden": "true", className: c.icon }) })] }));
+});
+//# sourceMappingURL=password-input.js.map

package/dist/password/password-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-input.js","sourceRoot":"","sources":["../../src/password/password-input.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAU3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA4B;IACjE,OAAO,EAAE,iBAAiB;IAC1B,KAAK,EACH,wXAAwX;IAC1X,MAAM,EACJ,qQAAqQ;IACvQ,IAAI,EAAE,QAAQ;CACf,CAAC;AAqBF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAuC,SAAS,aAAa,CACxG,EACE,OAAO,GAAG,SAAS,EACnB,QAAQ,EAAE,YAAY,EACtB,eAAe,EACf,gBAAgB,EAChB,WAAW,GAAG,eAAe,EAC7B,SAAS,EACT,UAAU,EACV,EAAE,EAAE,MAAM,EACV,YAAY,EACZ,QAAQ,EACR,GAAG,KAAK,EACT,EACD,GAAG;IAEH,MAAM,CAAC,GAA4B,EAAE,GAAG,0BAA0B,EAAE,GAAG,UAAU,EAAE,CAAC;IACpF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,MAAM,IAAI,WAAW,CAAC;IACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,QAAQ,EAAE,YAAY;QACtB,eAAe;QACf,gBAAgB;QAChB,OAAO,EAAE,EAAE;QACX,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAE5C,OAAO,CACL,eAAK,SAAS,EAAE,CAAC,CAAC,OAAO,aACvB,mBACM,KAAK,KACL,MAAM,CAAC,UAAU,EACrB,GAAG,EAAE,QAAQ,EACb,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,YAAY,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,EACvF,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,GACjC,EACF,oBAAY,MAAM,CAAC,WAAW,gBAAc,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,YAC1E,KAAC,IAAI,mBAAa,MAAM,EAAC,SAAS,EAAE,CAAC,CAAC,IAAI,GAAI,GACvC,IACL,CACP,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/password/password-strength.d.ts

@@ -0,0 +1,59 @@
+import * as React from "react";
+import { type PasswordStrengthMessages } from "./estimate.js";
+/** Every element the meter draws. Each value replaces the default for that part. */
+export interface PasswordStrengthClassNames {
+    root: string;
+    bar: string;
+    segment: string;
+    /** A filled segment, by score. */
+    score0: string;
+    score1: string;
+    score2: string;
+    score3: string;
+    score4: string;
+    text: string;
+    label: string;
+}
+/**
+ * The house look on the shared theme tokens, with amber and green for the two
+ * scores no theme token names. The root also carries `data-score`, for an app
+ * that styles the meter from its own stylesheet instead.
+ */
+export declare const PASSWORD_STRENGTH_CLASS_NAMES: PasswordStrengthClassNames;
+export interface PasswordStrengthProps {
+    /** The password being typed — the field's current value. */
+    password: string;
+    /** The person's email, name, username, organisation, the app's name. */
+    userInputs?: ReadonlyArray<string | null | undefined>;
+    /** The app's own minimum, so the sentence can say it while the password is shorter. */
+    minLength?: number;
+    messages?: Partial<PasswordStrengthMessages>;
+    /**
+     * Put on the sentence, for the field's `aria-describedby`, so the strength is
+     * read with the field when someone returns to it.
+     */
+    id?: string;
+    /** How long typing must pause before a screen reader hears the new strength. */
+    announceDelay?: number;
+    className?: string;
+    classNames?: Partial<PasswordStrengthClassNames>;
+}
+/**
+ * How guessable a new password is: four bars and one plain sentence.
+ *
+ * **Only where a password is being chosen** — sign-up, reset, set, change, and a
+ * person setting one for someone else. Never on sign-in or a "confirm it's you"
+ * field: rating a password someone already has tells them nothing they can act
+ * on, and tells anyone watching the screen something about it.
+ *
+ * **It refuses nothing.** The meter is advice; whether a password is allowed is
+ * the app's rule — its minimum length, and a server check with
+ * `estimatePasswordStrength` if it chooses to refuse the weakest. So there is no
+ * `valid` here to wire a submit button to.
+ *
+ * Nothing shows for an empty field. Screen readers hear the strength once typing
+ * pauses and only when it has changed, through a polite live region — never a
+ * word per keystroke.
+ */
+export declare function PasswordStrength({ password, userInputs, minLength, messages, id, announceDelay, className, classNames, }: PasswordStrengthProps): React.JSX.Element;
+//# sourceMappingURL=password-strength.d.ts.map

package/dist/password/password-strength.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-strength.d.ts","sourceRoot":"","sources":["../../src/password/password-strength.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAG/B,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,eAAe,CAAC;AAEvB,oFAAoF;AACpF,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,0BAW3C,CAAC;AAeF,MAAM,WAAW,qBAAqB;IACpC,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACtD,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC7C;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAClD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,QAAQ,EACR,UAAU,EACV,SAAS,EACT,QAAQ,EACR,EAAE,EACF,aAAoB,EACpB,SAAS,EACT,UAAU,GACX,EAAE,qBAAqB,qBA8CvB"}

package/dist/password/password-strength.js

@@ -0,0 +1,74 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import * as React from "react";
+import { cx } from "../internal/cx.js";
+import { estimatePasswordStrength, } from "./estimate.js";
+/**
+ * The house look on the shared theme tokens, with amber and green for the two
+ * scores no theme token names. The root also carries `data-score`, for an app
+ * that styles the meter from its own stylesheet instead.
+ */
+export const PASSWORD_STRENGTH_CLASS_NAMES = {
+    root: "mt-2 space-y-1.5",
+    bar: "grid grid-cols-4 gap-1",
+    segment: "h-1 rounded-full bg-muted transition-colors",
+    score0: "bg-destructive",
+    score1: "bg-destructive",
+    score2: "bg-amber-500",
+    score3: "bg-emerald-500",
+    score4: "bg-emerald-600",
+    text: "text-xs text-muted-foreground",
+    label: "font-medium text-foreground",
+};
+/** Visually hidden, from inline style so it cannot depend on the app's CSS. */
+const VISUALLY_HIDDEN = {
+    position: "absolute",
+    width: 1,
+    height: 1,
+    padding: 0,
+    margin: -1,
+    overflow: "hidden",
+    clip: "rect(0, 0, 0, 0)",
+    whiteSpace: "nowrap",
+    border: 0,
+};
+/**
+ * How guessable a new password is: four bars and one plain sentence.
+ *
+ * **Only where a password is being chosen** — sign-up, reset, set, change, and a
+ * person setting one for someone else. Never on sign-in or a "confirm it's you"
+ * field: rating a password someone already has tells them nothing they can act
+ * on, and tells anyone watching the screen something about it.
+ *
+ * **It refuses nothing.** The meter is advice; whether a password is allowed is
+ * the app's rule — its minimum length, and a server check with
+ * `estimatePasswordStrength` if it chooses to refuse the weakest. So there is no
+ * `valid` here to wire a submit button to.
+ *
+ * Nothing shows for an empty field. Screen readers hear the strength once typing
+ * pauses and only when it has changed, through a polite live region — never a
+ * word per keystroke.
+ */
+export function PasswordStrength({ password, userInputs, minLength, messages, id, announceDelay = 1000, className, classNames, }) {
+    const c = { ...PASSWORD_STRENGTH_CLASS_NAMES, ...classNames };
+    const inputsKey = (userInputs ?? []).join("\u0000");
+    const estimate = React.useMemo(() => estimatePasswordStrength(password, {
+        userInputs: inputsKey ? inputsKey.split("\u0000") : [],
+        minLength,
+        messages,
+    }), [password, inputsKey, minLength, messages]);
+    const message = password ? `${estimate.label}. ${estimate.sentence}` : "";
+    const [announced, setAnnounced] = React.useState("");
+    React.useEffect(() => {
+        if (!message) {
+            setAnnounced("");
+            return;
+        }
+        const timer = setTimeout(() => setAnnounced(message), announceDelay);
+        return () => clearTimeout(timer);
+    }, [message, announceDelay]);
+    const filled = Math.max(estimate.score, 1);
+    const tone = c[`score${estimate.score}`];
+    return (_jsxs("div", { className: cx(c.root, className), "data-score": password ? estimate.score : undefined, hidden: !password, children: [password ? (_jsxs(_Fragment, { children: [_jsx("div", { className: c.bar, "aria-hidden": "true", children: [0, 1, 2, 3].map((segment) => (_jsx("span", { className: cx(c.segment, segment < filled && tone) }, segment))) }), _jsxs("p", { id: id, className: c.text, children: [_jsxs("span", { className: c.label, children: [estimate.label, "."] }), " ", estimate.sentence] })] })) : null, _jsx("span", { role: "status", "aria-live": "polite", style: VISUALLY_HIDDEN, children: announced })] }));
+}
+//# sourceMappingURL=password-strength.js.map

package/dist/password/password-strength.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-strength.js","sourceRoot":"","sources":["../../src/password/password-strength.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EACL,wBAAwB,GAIzB,MAAM,eAAe,CAAC;AAiBvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA+B;IACvE,IAAI,EAAE,kBAAkB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,OAAO,EAAE,6CAA6C;IACtD,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,IAAI,EAAE,+BAA+B;IACrC,KAAK,EAAE,6BAA6B;CACrC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,eAAe,GAAwB;IAC3C,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,QAAQ;IAClB,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,CAAC;CACV,CAAC;AAqBF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,QAAQ,EACR,UAAU,EACV,SAAS,EACT,QAAQ,EACR,EAAE,EACF,aAAa,GAAG,IAAI,EACpB,SAAS,EACT,UAAU,GACY;IACtB,MAAM,CAAC,GAA+B,EAAE,GAAG,6BAA6B,EAAE,GAAG,UAAU,EAAE,CAAC;IAC1F,MAAM,SAAS,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAA6B,KAAK,CAAC,OAAO,CACtD,GAAG,EAAE,CACH,wBAAwB,CAAC,QAAQ,EAAE;QACjC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QACtD,SAAS;QACT,QAAQ;KACT,CAAC,EACJ,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAC3C,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC;QACrE,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,QAAQ,CAAC,KAAK,EAA6B,CAAC,CAAC;IAEpE,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,gBAAc,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,QAAQ,aACxG,QAAQ,CAAC,CAAC,CAAC,CACV,8BACE,cAAK,SAAS,EAAE,CAAC,CAAC,GAAG,iBAAc,MAAM,YACtC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAC7B,eAAoB,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,IAA3D,OAAO,CAAwD,CAC3E,CAAC,GACE,EACN,aAAG,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,aAC1B,gBAAM,SAAS,EAAE,CAAC,CAAC,KAAK,aAAG,QAAQ,CAAC,KAAK,SAAS,OAAE,QAAQ,CAAC,QAAQ,IACnE,IACH,CACJ,CAAC,CAAC,CAAC,IAAI,EACR,eAAM,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,KAAK,EAAE,eAAe,YAC1D,SAAS,GACL,IACH,CACP,CAAC;AACJ,CAAC"}

package/dist/password/reveal.d.ts

@@ -0,0 +1,56 @@
+import * as React from "react";
+export interface PasswordRevealOptions {
+    /** Controlled: whether the password is shown. Pair with `onRevealedChange`. */
+    revealed?: boolean;
+    /** Uncontrolled starting state. Hidden unless said otherwise. */
+    defaultRevealed?: boolean;
+    onRevealedChange?: (revealed: boolean) => void;
+    /** The input's id, for the toggle's `aria-controls`. */
+    inputId: string;
+    disabled?: boolean;
+}
+export interface PasswordReveal {
+    revealed: boolean;
+    setRevealed: (revealed: boolean) => void;
+    toggle: () => void;
+    /** Attach to the password input, merged with any ref of the host's own. */
+    inputRef: React.RefCallback<HTMLInputElement>;
+    /** Spread onto the input, after the host's own props. */
+    inputProps: {
+        type: "password" | "text";
+        spellCheck: false;
+        autoCapitalize: "off";
+        autoCorrect: "off";
+        "data-revealed": boolean;
+    };
+    /** Spread onto the toggle button. It supplies no label: give it one. */
+    toggleProps: {
+        type: "button";
+        "aria-pressed": boolean;
+        "aria-controls": string;
+        disabled: boolean | undefined;
+        onClick: () => void;
+        onMouseDown: (event: React.MouseEvent) => void;
+    };
+}
+/**
+ * Show and hide a password, with everything a bare `type` switch gets wrong.
+ * `PasswordInput` is built on this; an app whose field is not a plain input —
+ * an MUI `TextField`, a floating-label row — spreads the two prop sets itself
+ * and keeps the same behaviour.
+ *
+ * - **The field keeps focus and the caret stays put.** Clicking the toggle
+ *   would move focus to it, and switching `type` resets the selection in some
+ *   browsers; so a pointer press never takes focus, and the caret is put back
+ *   where it was. A keyboard user who tabbed to the toggle stays on it.
+ * - **It is hidden again the moment its form submits**, synchronously, before
+ *   the browser reads the form. A password submitted from a text field is a
+ *   value the browser may keep in its ordinary autofill history and offer in
+ *   any other text box — the odd autocomplete a reveal must never cause.
+ * - **Spellcheck and autocorrect are off, always.** A revealed field is a text
+ *   field, and enhanced spellcheck sends the text of text fields to a server.
+ */
+export declare function usePasswordReveal({ revealed: controlled, defaultRevealed, onRevealedChange, inputId, disabled, }: PasswordRevealOptions): PasswordReveal;
+/** One ref from several — the host's (react-hook-form's `register`, say) and ours. */
+export declare function mergeRefs<T>(...refs: Array<React.Ref<T> | undefined>): React.RefCallback<T>;
+//# sourceMappingURL=reveal.d.ts.map

package/dist/password/reveal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reveal.d.ts","sourceRoot":"","sources":["../../src/password/reveal.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,2EAA2E;IAC3E,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC9C,yDAAyD;IACzD,UAAU,EAAE;QACV,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;QAC1B,UAAU,EAAE,KAAK,CAAC;QAClB,cAAc,EAAE,KAAK,CAAC;QACtB,WAAW,EAAE,KAAK,CAAC;QACnB,eAAe,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF,wEAAwE;IACxE,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,cAAc,EAAE,OAAO,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9B,OAAO,EAAE,MAAM,IAAI,CAAC;QACpB,WAAW,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;KAChD,CAAC;CACH;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,QAAQ,EAAE,UAAU,EACpB,eAAuB,EACvB,gBAAgB,EAChB,OAAO,EACP,QAAQ,GACT,EAAE,qBAAqB,GAAG,cAAc,CA6ExC;AAED,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAO3F"}

package/dist/password/reveal.js

@@ -0,0 +1,109 @@
+"use client";
+import * as React from "react";
+/**
+ * Show and hide a password, with everything a bare `type` switch gets wrong.
+ * `PasswordInput` is built on this; an app whose field is not a plain input —
+ * an MUI `TextField`, a floating-label row — spreads the two prop sets itself
+ * and keeps the same behaviour.
+ *
+ * - **The field keeps focus and the caret stays put.** Clicking the toggle
+ *   would move focus to it, and switching `type` resets the selection in some
+ *   browsers; so a pointer press never takes focus, and the caret is put back
+ *   where it was. A keyboard user who tabbed to the toggle stays on it.
+ * - **It is hidden again the moment its form submits**, synchronously, before
+ *   the browser reads the form. A password submitted from a text field is a
+ *   value the browser may keep in its ordinary autofill history and offer in
+ *   any other text box — the odd autocomplete a reveal must never cause.
+ * - **Spellcheck and autocorrect are off, always.** A revealed field is a text
+ *   field, and enhanced spellcheck sends the text of text fields to a server.
+ */
+export function usePasswordReveal({ revealed: controlled, defaultRevealed = false, onRevealedChange, inputId, disabled, }) {
+    const [uncontrolled, setUncontrolled] = React.useState(defaultRevealed);
+    const revealed = controlled ?? uncontrolled;
+    const input = React.useRef(null);
+    const selection = React.useRef(null);
+    const latest = React.useRef({ controlled, onRevealedChange });
+    latest.current = { controlled, onRevealedChange };
+    const setRevealed = React.useCallback((next) => {
+        if (latest.current.controlled === undefined)
+            setUncontrolled(next);
+        latest.current.onRevealedChange?.(next);
+    }, []);
+    const toggle = React.useCallback(() => {
+        const node = input.current;
+        selection.current =
+            node && node.ownerDocument.activeElement === node ? [node.selectionStart, node.selectionEnd] : null;
+        setRevealed(!revealed);
+    }, [revealed, setRevealed]);
+    // Put the caret back after the type switch, while the field still has focus.
+    React.useLayoutEffect(() => {
+        const node = input.current;
+        const kept = selection.current;
+        selection.current = null;
+        if (!node || !kept || node.ownerDocument.activeElement !== node)
+            return;
+        const [start, end] = kept;
+        if (start !== null && end !== null)
+            node.setSelectionRange(start, end);
+    }, [revealed]);
+    const hideOnSubmit = React.useRef(null);
+    hideOnSubmit.current = () => {
+        // Before React re-renders: the browser reads the form as soon as this returns.
+        if (input.current)
+            input.current.type = "password";
+        if (revealed)
+            setRevealed(false);
+    };
+    const [form, setForm] = React.useState(null);
+    const inputRef = React.useCallback((node) => {
+        input.current = node;
+        // Only on attach: a ref detached and re-attached between renders must not churn state.
+        if (node)
+            setForm(node.form);
+    }, []);
+    React.useEffect(() => {
+        if (!form)
+            return;
+        const hide = () => hideOnSubmit.current?.();
+        form.addEventListener("submit", hide);
+        form.addEventListener("reset", hide);
+        return () => {
+            form.removeEventListener("submit", hide);
+            form.removeEventListener("reset", hide);
+        };
+    }, [form]);
+    return {
+        revealed,
+        setRevealed,
+        toggle,
+        inputRef,
+        inputProps: {
+            type: revealed ? "text" : "password",
+            spellCheck: false,
+            autoCapitalize: "off",
+            autoCorrect: "off",
+            "data-revealed": revealed,
+        },
+        toggleProps: {
+            type: "button",
+            "aria-pressed": revealed,
+            "aria-controls": inputId,
+            disabled,
+            onClick: toggle,
+            // A pointer press must not take focus from the field.
+            onMouseDown: (event) => event.preventDefault(),
+        },
+    };
+}
+/** One ref from several — the host's (react-hook-form's `register`, say) and ours. */
+export function mergeRefs(...refs) {
+    return (node) => {
+        for (const ref of refs) {
+            if (typeof ref === "function")
+                ref(node);
+            else if (ref)
+                ref.current = node;
+        }
+    };
+}
+//# sourceMappingURL=reveal.js.map

package/dist/password/reveal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reveal.js","sourceRoot":"","sources":["../../src/password/reveal.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAsC/B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,QAAQ,EAAE,UAAU,EACpB,eAAe,GAAG,KAAK,EACvB,gBAAgB,EAChB,OAAO,EACP,QAAQ,GACc;IACtB,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,IAAI,YAAY,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAA0B,IAAI,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAwC,IAAI,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAElD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAa,EAAE,EAAE;QACtD,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3B,SAAS,CAAC,OAAO;YACf,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE5B,6EAA6E;IAC7E,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC;QAC/B,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO;QACxE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAsB,IAAI,CAAC,CAAC;IAC7D,YAAY,CAAC,OAAO,GAAG,GAAG,EAAE;QAC1B,+EAA+E;QAC/E,IAAI,KAAK,CAAC,OAAO;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC;QACnD,IAAI,QAAQ;YAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAyB,IAAI,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAA6B,EAAE,EAAE;QACnE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,uFAAuF;QACvF,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,OAAO;QACL,QAAQ;QACR,WAAW;QACX,MAAM;QACN,QAAQ;QACR,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;YACpC,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,QAAQ;SAC1B;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,cAAc,EAAE,QAAQ;YACxB,eAAe,EAAE,OAAO;YACxB,QAAQ;YACR,OAAO,EAAE,MAAM;YACf,sDAAsD;YACtD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE;SAC/C;KACF,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAI,GAAG,IAAqC;IACnE,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,KAAK,UAAU;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC;iBACpC,IAAI,GAAG;gBAAG,GAAiC,CAAC,OAAO,GAAG,IAAI,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@connextar/house",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "The pieces every app we build needs and none of them should own a copy of.",
   "license": "MIT",
   "repository": {
@@ -30,6 +30,10 @@
       "types": "./dist/auth/index.d.ts",
       "default": "./dist/auth/index.js"
     },
+    "./auth/second-factor": {
+      "types": "./dist/auth/second-factor-index.d.ts",
+      "default": "./dist/auth/second-factor-index.js"
+    },
     "./account": {
       "types": "./dist/account/index.d.ts",
       "default": "./dist/account/index.js"
@@ -98,6 +102,14 @@
       "types": "./dist/editor/emoji-index.d.ts",
       "default": "./dist/editor/emoji-index.js"
     },
+    "./password": {
+      "types": "./dist/password/index.d.ts",
+      "default": "./dist/password/index.js"
+    },
+    "./password/estimate": {
+      "types": "./dist/password/estimate-index.d.ts",
+      "default": "./dist/password/estimate-index.js"
+    },
     "./house.css": {
       "style": "./dist/house.css",
       "default": "./dist/house.css"
@@ -120,6 +132,7 @@
   },
   "peerDependencies": {
     "@anthropic-ai/sdk": ">=0.122.0",
+    "better-auth": ">=1.6.33 <1.8.0",
     "next": "^16.0.0",
     "openai": ">=7.10.0",
     "react": "^19.0.0",
@@ -142,6 +155,9 @@
     },
     "zod": {
       "optional": true
+    },
+    "better-auth": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -153,6 +169,8 @@
     "@types/react-dom": "^19.3.0",
     "@typescript-eslint/eslint-plugin": "^8.0.0",
     "@typescript-eslint/parser": "^8.0.0",
+    "better-auth": "1.7.2",
+    "better-auth-1-6": "npm:better-auth@1.6.33",
     "eslint": "^9.0.0",
     "jsdom": "^27.4.0",
     "next": "^16.3.3",