@djangocfg/layouts 2.1.454 → 2.1.456

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/layouts",
-  "version": "2.1.454",
+  "version": "2.1.456",
   "description": "Simple, straightforward layout components for Next.js - import and use with props",
   "keywords": [
     "layouts",
@@ -89,12 +89,12 @@
     "check": "tsc --noEmit"
   },
   "peerDependencies": {
-    "@djangocfg/api": "^2.1.454",
-    "@djangocfg/centrifugo": "^2.1.454",
-    "@djangocfg/debuger": "^2.1.454",
-    "@djangocfg/i18n": "^2.1.454",
-    "@djangocfg/monitor": "^2.1.454",
-    "@djangocfg/ui-core": "^2.1.454",
+    "@djangocfg/api": "^2.1.456",
+    "@djangocfg/centrifugo": "^2.1.456",
+    "@djangocfg/debuger": "^2.1.456",
+    "@djangocfg/i18n": "^2.1.456",
+    "@djangocfg/monitor": "^2.1.456",
+    "@djangocfg/ui-core": "^2.1.456",
     "@hookform/resolvers": "^5.2.2",
     "consola": "^3.4.2",
     "lucide-react": "^0.545.0",
@@ -125,14 +125,14 @@
     "uuid": "^11.1.0"
   },
   "devDependencies": {
-    "@djangocfg/api": "^2.1.454",
-    "@djangocfg/centrifugo": "^2.1.454",
-    "@djangocfg/debuger": "^2.1.454",
-    "@djangocfg/i18n": "^2.1.454",
-    "@djangocfg/monitor": "^2.1.454",
-    "@djangocfg/typescript-config": "^2.1.454",
-    "@djangocfg/ui-core": "^2.1.454",
-    "@djangocfg/ui-tools": "^2.1.454",
+    "@djangocfg/api": "^2.1.456",
+    "@djangocfg/centrifugo": "^2.1.456",
+    "@djangocfg/debuger": "^2.1.456",
+    "@djangocfg/i18n": "^2.1.456",
+    "@djangocfg/monitor": "^2.1.456",
+    "@djangocfg/typescript-config": "^2.1.456",
+    "@djangocfg/ui-core": "^2.1.456",
+    "@djangocfg/ui-tools": "^2.1.456",
     "@types/node": "^25.2.3",
     "@types/react": "^19.2.15",
     "@types/react-dom": "^19.2.3",

package/src/components/RedirectPage/RedirectPage.tsx

@@ -1,4 +1,5 @@
 'use client';
+import { DEFAULT_AUTH_PATH } from '@djangocfg/api/auth';
 
 import { useEffect } from 'react';
 
@@ -46,7 +47,7 @@ export interface RedirectPageProps {
  */
 export function RedirectPage({
   authenticatedPath = '/private',
-  unauthenticatedPath = '/auth',
+  unauthenticatedPath = DEFAULT_AUTH_PATH,
   loadingText = 'Loading...',
 }: RedirectPageProps) {
   const { isAuthenticated } = useAuth();

package/src/layouts/AuthLayout/components/oauth/OAuthCallback.tsx

@@ -1,4 +1,5 @@
 'use client';
+import { DEFAULT_AUTH_PATH } from '@djangocfg/api/auth';
 
 import { AlertCircle, Loader2 } from 'lucide-react';
 import { useSearchParams } from 'next/navigation';
@@ -165,7 +166,7 @@ function OAuthCallbackRaw({
         {status === 'error' && (
           <CardContent className="text-center">
             <a
-              href="/auth"
+              href={DEFAULT_AUTH_PATH}
               className="text-primary hover:underline text-sm"
             >
               Try again

package/src/layouts/PrivateLayout/hooks/useAuthGuard.ts

@@ -5,6 +5,7 @@
  */
 
 'use client';
+import { DEFAULT_AUTH_PATH } from '@djangocfg/api/auth';
 
 import { useEffect, useState } from 'react';
 import { useRouter } from 'next/navigation';
@@ -39,7 +40,7 @@ interface UseAuthGuardResult {
 
 export function useAuthGuard({
   requireAuth = true,
-  authPath = '/auth',
+  authPath = DEFAULT_AUTH_PATH,
   loadingTimeoutMs = 8000,
 }: UseAuthGuardOptions): UseAuthGuardResult {
   const { isAuthenticated, isLoading: authLoading, saveRedirectUrl } = useAuth();

package/src/layouts/PublicLayout/components/UserMenu.tsx

@@ -29,6 +29,7 @@
  */
 
 'use client';
+import { DEFAULT_AUTH_PATH } from '@djangocfg/api/auth';
 
 import { ArrowRight, Languages, LogOut } from 'lucide-react';
 import { Link } from '@djangocfg/ui-core/components';
@@ -69,7 +70,7 @@ export interface UserMenuProps {
 export function UserMenu({
   variant = 'desktop',
   groups,
-  authPath = '/auth',
+  authPath = DEFAULT_AUTH_PATH,
   disableAuth = false,
   i18n,
 }: UserMenuProps) {

package/src/layouts/PublicLayout/shared/MobileDrawerShell.tsx

@@ -6,6 +6,7 @@
  */
 
 'use client';
+import { DEFAULT_AUTH_PATH } from '@djangocfg/api/auth';
 
 import { ArrowRight } from 'lucide-react';
 import React, { useMemo } from 'react';
@@ -211,7 +212,7 @@ export function MobileDrawerShell(props: MobileDrawerShellProps) {
           {showSignInFooter && (
             <div className="shrink-0 border-t border-border/50 p-4">
               <Link
-                href={userMenu?.authPath || '/auth'}
+                href={userMenu?.authPath || DEFAULT_AUTH_PATH}
                 onClick={closeMobileMenu}
                 className="block"
               >

package/src/layouts/SettingsLayout/hooks/useSettingsUrl.ts

@@ -16,13 +16,15 @@
  *   store → URL : when the user opens/closes/switches section via the UI, we
  *                  push or replace the hash so it stays shareable.
  *
- * We lean on ui-core's `useLocation` (a `useSyncExternalStore` over a patched
- * history + `hashchange`) so this is framework-agnostic — no next/router import.
+ * The URL fragment is read/written via ui-core's `useHashState`, which writes
+ * straight to the History API (bypassing the router adapter) so the hash is set
+ * absolutely — this is what avoids the `#settings#settings/…` doubling under
+ * Next.js App Router + next-intl. It's framework-agnostic (Next / Wails / Vite).
  */
 
 import { useEffect, useRef } from 'react';
 
-import { useLocation, useNavigate } from '@djangocfg/ui-core/hooks';
+import { useHashState } from '@djangocfg/ui-core/hooks';
 
 import { useSettingsDialogStore } from '../store';
 
@@ -44,36 +46,30 @@ interface ParsedHash {
   section: string | null;
 }
 
-/** Parse `#settings/usage` → { open: true, section: 'usage' }. */
-function parseHash(hash: string, urlKey: string): ParsedHash {
-  // hash includes the leading '#': "#settings/usage"
-  const raw = hash.startsWith('#') ? hash.slice(1) : hash;
-  if (!raw) return { open: false, section: null };
+/**
+ * Parse a bare fragment (no leading '#', as `useHashState` yields):
+ * `"settings/usage"` → { open: true, section: 'usage' }.
+ */
+function parseHash(fragment: string, urlKey: string): ParsedHash {
+  if (!fragment) return { open: false, section: null };
 
-  const [key, ...rest] = raw.split('/');
+  const [key, ...rest] = fragment.split('/');
   if (key !== urlKey) return { open: false, section: null };
 
   const section = rest.join('/') || null;
   return { open: true, section };
 }
 
-/** Build `#settings/usage` (or `#settings` when no section). */
+/** Build the bare fragment `"settings/usage"` (or `"settings"` when no section). */
 function buildHash(urlKey: string, section: string | null): string {
-  return section ? `#${urlKey}/${section}` : `#${urlKey}`;
-}
-
-/** Strip a trailing hash, keeping pathname + search intact. */
-function urlWithoutHash(): string {
-  if (typeof window === 'undefined') return '/';
-  const { pathname, search } = window.location;
-  return `${pathname}${search}`;
+  return section ? `${urlKey}/${section}` : urlKey;
 }
 
 export function useSettingsUrl(options: UseSettingsUrlOptions = {}): void {
   const { urlKey = 'settings', enabled = true, resolveSection } = options;
 
-  const { hash } = useLocation();
-  const { navigate } = useNavigate();
+  // Bare fragment (without '#'); '' when there is no hash.
+  const [fragment, setFragment] = useHashState();
 
   const isOpen = useSettingsDialogStore((s) => s.isOpen);
   const activeSection = useSettingsDialogStore((s) => s.activeSection);
@@ -81,21 +77,21 @@ export function useSettingsUrl(options: UseSettingsUrlOptions = {}): void {
   const close = useSettingsDialogStore((s) => s.close);
 
   // Guard against the URL→store and store→URL effects fighting each other:
-  // when we write the hash ourselves we tag the value we wrote and skip the
+  // when we write the fragment ourselves we tag the value we wrote and skip the
   // next URL→store pass for that exact value.
-  const selfWrittenHash = useRef<string | null>(null);
+  const selfWrittenFragment = useRef<string | null>(null);
 
   // ── URL → store ──────────────────────────────────────────────────────────
   useEffect(() => {
     if (!enabled) return;
 
-    // Ignore the echo of a hash we just wrote ourselves.
-    if (selfWrittenHash.current === hash) {
-      selfWrittenHash.current = null;
+    // Ignore the echo of a fragment we just wrote ourselves.
+    if (selfWrittenFragment.current === fragment) {
+      selfWrittenFragment.current = null;
       return;
     }
 
-    const parsed = parseHash(hash, urlKey);
+    const parsed = parseHash(fragment, urlKey);
 
     if (parsed.open) {
       const resolved = resolveSection
@@ -108,31 +104,33 @@ export function useSettingsUrl(options: UseSettingsUrlOptions = {}): void {
       // Hash no longer points at us (back button, manual edit) → close.
       close();
     }
-    // We intentionally depend on `hash` only; isOpen is read fresh via the
+    // We intentionally depend on `fragment` only; isOpen is read fresh via the
     // store getter semantics above. Re-running on isOpen would double-fire.
     // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [hash, enabled, urlKey]);
+  }, [fragment, enabled, urlKey]);
 
   // ── store → URL ──────────────────────────────────────────────────────────
   useEffect(() => {
     if (!enabled) return;
     if (typeof window === 'undefined') return;
 
-    const current = window.location.hash;
+    const current = fragment;
 
     if (isOpen) {
       const next = buildHash(urlKey, activeSection);
       if (current !== next) {
-        selfWrittenHash.current = next;
-        // push so the back button can close; refresh keeps the section.
-        navigate(`${urlWithoutHash()}${next}`);
+        selfWrittenFragment.current = next;
+        // Push when we're *opening* (no settings fragment yet) so the back
+        // button closes the dialog; replace when only switching sections within
+        // an already-open dialog, so section clicks don't stack history entries.
+        const alreadyOurs = parseHash(current, urlKey).open;
+        setFragment(next, { replace: alreadyOurs });
       }
     } else {
-      // Only strip if the hash is *ours*; never clobber an unrelated hash.
-      const parsed = parseHash(current, urlKey);
-      if (parsed.open) {
-        selfWrittenHash.current = '';
-        navigate(urlWithoutHash(), { replace: true });
+      // Only strip if the fragment is *ours*; never clobber an unrelated hash.
+      if (parseHash(current, urlKey).open) {
+        selfWrittenFragment.current = '';
+        setFragment(null, { replace: true });
       }
     }
     // eslint-disable-next-line react-hooks/exhaustive-deps

package/src/snippets/AuthDialog/AuthDialog.tsx

@@ -3,7 +3,7 @@
 import { LogIn } from 'lucide-react';
 import React, { useMemo } from 'react';
 
-import { useCfgRouter } from '@djangocfg/api/auth';
+import { DEFAULT_AUTH_PATH, useAuth, useCfgRouter } from '@djangocfg/api/auth';
 import { useAppT } from '@djangocfg/i18n';
 import {
     Button, Dialog, DialogContent, DialogHeader, DialogTitle
@@ -17,7 +17,7 @@ interface AuthDialogProps {
 
 export const AuthDialog: React.FC<AuthDialogProps> = ({
   onAuthRequired,
-  authPath = '/auth'
+  authPath = DEFAULT_AUTH_PATH
 }) => {
   const open = useDialogStore((s) => s.authOpen);
   const authOptions = useDialogStore((s) => s.authOptions);
@@ -32,15 +32,18 @@ export const AuthDialog: React.FC<AuthDialogProps> = ({
 
   const message = authOptions?.message || labels.pleaseSignIn;
   const router = useCfgRouter();
+  const { saveRedirectUrl } = useAuth();
 
   const handleClose = () => {
     resolveAuth(false);
   };
 
   const handleGoToAuth = () => {
+    // Canonical post-login redirect persistence (the same store the guard and
+    // verifyOTP read). The old private `redirectAfterAuth` sessionStorage key
+    // was write-only — nothing ever read it.
     if (typeof window !== 'undefined') {
-      const redirect = authOptions?.redirectUrl || window.location.pathname;
-      sessionStorage.setItem('redirectAfterAuth', redirect);
+      saveRedirectUrl(authOptions?.redirectUrl || window.location.pathname);
     }
 
     if (onAuthRequired) {