@dreamtree-org/landing-kit 0.10.0 → 0.10.1

package/dist/platform.cjs

@@ -107,7 +107,7 @@ function readPlatformCsrf(cookieString, name) {
   return null;
 }
 function joinUrl(basePath, path, query) {
-  const base2 = basePath.replace(/\/+$/, "");
+  const base3 = basePath.replace(/\/+$/, "");
   const rel = path ? `/${String(path).replace(/^\/+/, "")}` : "";
   const params = new URLSearchParams();
   for (const [k, v] of Object.entries(query != null ? query : {})) {
@@ -115,7 +115,7 @@ function joinUrl(basePath, path, query) {
     params.append(k, String(v));
   }
   const qs = params.toString();
-  return `${base2}${rel}${qs ? `?${qs}` : ""}`;
+  return `${base3}${rel}${qs ? `?${qs}` : ""}`;
 }
 function createPlatformClient(opts = {}) {
   var _a, _b, _c, _d, _e;
@@ -2839,10 +2839,10 @@ function PlatformConsole({
   const browser = useBrowserLocation(!routed);
   const pathname = routed ? givenPath : browser.pathname;
   const navigate = givenNavigate != null ? givenNavigate : browser.navigate;
-  const base2 = `/${trim(basePath)}`.replace(/\/$/, "") || "";
+  const base3 = `/${trim(basePath)}`.replace(/\/$/, "") || "";
   const client = (0, import_react16.useMemo)(
-    () => given != null ? given : createPlatformClient({ basePath: apiBasePath, loginPath: loginPath != null ? loginPath : `${base2}/login` }),
-    [given, apiBasePath, loginPath, base2]
+    () => given != null ? given : createPlatformClient({ basePath: apiBasePath, loginPath: loginPath != null ? loginPath : `${base3}/login` }),
+    [given, apiBasePath, loginPath, base3]
   );
   const Link = (0, import_react16.useMemo)(() => makeLink(linkAs, navigate), [linkAs, navigate]);
   const [me, setMe] = (0, import_react16.useState)(initialMe);
@@ -2856,7 +2856,7 @@ function PlatformConsole({
   (0, import_react16.useEffect)(() => {
     void reloadMe();
   }, [reloadMe]);
-  const href = (0, import_react16.useCallback)((rel2 = "") => `${base2}/${trim(rel2)}`.replace(/\/$/, "") || "/", [base2]);
+  const href = (0, import_react16.useCallback)((rel2 = "") => `${base3}/${trim(rel2)}`.replace(/\/$/, "") || "/", [base3]);
   const companyLoginPath = (0, import_react16.useCallback)(
     (slug) => {
       var _a2, _b2;
@@ -2874,10 +2874,10 @@ function PlatformConsole({
       await client.post("auth/logout", {}, { skipAuthRedirect: true });
     } finally {
       if (onSignOut) onSignOut();
-      else if (typeof window !== "undefined") window.location.assign(loginPath != null ? loginPath : `${base2}/login`);
+      else if (typeof window !== "undefined") window.location.assign(loginPath != null ? loginPath : `${base3}/login`);
     }
   };
-  const rel = pathname.startsWith(base2) ? pathname.slice(base2.length) : pathname;
+  const rel = pathname.startsWith(base3) ? pathname.slice(base3.length) : pathname;
   const route = matchConsoleRoute(rel, visiblePages);
   const gate = me && me.access && me.access.console === false;
   const active = (prefix) => prefix === "" ? route.view === "overview" : trim(rel) === prefix || trim(rel).startsWith(`${prefix}/`);
@@ -2903,7 +2903,7 @@ function PlatformConsole({
     features: enabled,
     companyLoginPath,
     companyLoginUrl: (slug) => `${origin}${companyLoginPath(slug)}`,
-    loginUrl: `${origin}${loginPath != null ? loginPath : `${base2}/login`}`,
+    loginUrl: `${origin}${loginPath != null ? loginPath : `${base3}/login`}`,
     brand,
     appName: appName != null ? appName : (_a = me == null ? void 0 : me.app) == null ? void 0 : _a.name
   };
@@ -2925,11 +2925,11 @@ function PlatformConsole({
 }
 
 // src/platform/PlatformLogin.jsx
-var import_react20 = __toESM(require("react"), 1);
+var import_react22 = __toESM(require("react"), 1);
 var import_twreact_ui16 = require("@dreamtree-org/twreact-ui");
 
 // src/AuthShell.jsx
-var import_react19 = require("react");
+var import_react21 = require("react");
 
 // src/DemoAccounts.jsx
 var import_react17 = require("react");
@@ -2987,13 +2987,116 @@ function DemoAccounts({ load, onSelect, className = "" }) {
   ] });
 }
 
-// src/useTapReveal.js
+// src/DreamtreeSso.jsx
+var import_react19 = require("react");
+
+// src/sso.js
+function decodeKey(part) {
+  const key = part.split("=")[0];
+  try {
+    return decodeURIComponent(key.replace(/\+/g, " "));
+  } catch {
+    return key;
+  }
+}
+function buildSsoUrl(startUrl, { returnTo, companySlug } = {}) {
+  const raw = String(startUrl != null ? startUrl : "");
+  const hashAt = raw.indexOf("#");
+  const hash = hashAt === -1 ? "" : raw.slice(hashAt);
+  const beforeHash = hashAt === -1 ? raw : raw.slice(0, hashAt);
+  const queryAt = beforeHash.indexOf("?");
+  const path = queryAt === -1 ? beforeHash : beforeHash.slice(0, queryAt);
+  const query = queryAt === -1 ? "" : beforeHash.slice(queryAt + 1);
+  const add = [
+    ["return_to", returnTo],
+    ["dt_company", companySlug]
+  ].filter(([, v]) => v != null && v !== "");
+  const replaced = new Set(add.map(([k]) => k));
+  const params = query.split("&").filter((p) => p && !replaced.has(decodeKey(p))).concat(add.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`));
+  return `${path}${params.length ? `?${params.join("&")}` : ""}${hash}`;
+}
+
+// src/icons.jsx
 var import_react18 = require("react");
+var import_jsx_runtime19 = require("react/jsx-runtime");
+var base2 = {
+  viewBox: "0 0 24 24",
+  fill: "none",
+  stroke: "currentColor",
+  strokeWidth: 2,
+  strokeLinecap: "round",
+  strokeLinejoin: "round",
+  "aria-hidden": "true",
+  focusable: "false"
+};
+var make2 = (paths) => function Icon({ size = 16, className = "dt-lp-icon" }) {
+  return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("svg", { ...base2, width: size, height: size, className, children: paths });
+};
+var ArrowRight = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M5 12h14M13 6l6 6-6 6" }));
+var ChevronRight = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "m9 6 6 6-6 6" }));
+var Check = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M20 6 9 17l-5-5" }));
+var Help = make2(
+  /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("circle", { cx: "12", cy: "12", r: "10" }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M9.1 9a3 3 0 0 1 5.8 1c0 2-3 3-3 3M12 17h.01" })
+  ] })
+);
+var Alert9 = make2(
+  /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M10.3 3.9 1.8 18a2 2 0 0 0 1.7 3h17a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0Z" }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M12 9v4M12 17h.01" })
+  ] })
+);
+var MenuIcon = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M4 6h16M4 12h16M4 18h16" }));
+var Close = make2(/* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M18 6 6 18M6 6l12 12" }));
+var Calendar = make2(
+  /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(import_jsx_runtime19.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("rect", { x: "3", y: "4", width: "18", height: "18", rx: "2" }),
+    /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("path", { d: "M16 2v4M8 2v4M3 10h18m-12 6 2 2 4-4" })
+  ] })
+);
+
+// src/DreamtreeSso.jsx
+var import_jsx_runtime20 = require("react/jsx-runtime");
+var DEFAULT_SSO_LABEL = "Continue with Dreamtree";
+function DreamtreeSso({ provider, children }) {
+  const { startUrl, mode, label = DEFAULT_SSO_LABEL, companySlug, returnTo } = provider;
+  const isSso = mode === "sso";
+  const autoRedirect = isSso && provider.autoRedirect !== false;
+  const href = buildSsoUrl(startUrl, { returnTo, companySlug });
+  const redirected = (0, import_react19.useRef)(false);
+  (0, import_react19.useEffect)(() => {
+    if (!autoRedirect || redirected.current) return;
+    redirected.current = true;
+    window.location.assign(href);
+  }, [autoRedirect, href]);
+  const button = /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("a", { className: "dt-auth-sso-btn", href, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { children: label }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(ArrowRight, { size: 16, className: "dt-auth-sso-icon" })
+  ] });
+  if (isSso) {
+    return /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("div", { className: "dt-auth-sso dt-auth-sso--only", children: [
+      autoRedirect ? /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("p", { className: "dt-auth-sso-status", role: "status", "aria-live": "polite", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { className: "dt-auth-sso-spinner", "aria-hidden": "true" }),
+        "Redirecting to Dreamtree ID\u2026"
+      ] }) : null,
+      button
+    ] });
+  }
+  return /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)(import_jsx_runtime20.Fragment, { children: [
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "dt-auth-sso", children: button }),
+    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("div", { className: "dt-auth-or", children: /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("span", { children: "or" }) }),
+    children
+  ] });
+}
+
+// src/useTapReveal.js
+var import_react20 = require("react");
 function useTapReveal({ taps = 4, windowMs = 1500 } = {}) {
-  const [revealed, setRevealed] = (0, import_react18.useState)(false);
-  const count = (0, import_react18.useRef)(0);
-  const last = (0, import_react18.useRef)(0);
-  const onClick = (0, import_react18.useCallback)(() => {
+  const [revealed, setRevealed] = (0, import_react20.useState)(false);
+  const count = (0, import_react20.useRef)(0);
+  const last = (0, import_react20.useRef)(0);
+  const onClick = (0, import_react20.useCallback)(() => {
     if (revealed) return;
     const now = Date.now();
     count.current = now - last.current <= windowMs ? count.current + 1 : 1;
@@ -3004,7 +3107,7 @@ function useTapReveal({ taps = 4, windowMs = 1500 } = {}) {
 }
 
 // src/AuthShell.jsx
-var import_jsx_runtime19 = require("react/jsx-runtime");
+var import_jsx_runtime21 = require("react/jsx-runtime");
 var DEFAULT_LEGAL = [
   { label: "Privacy Policy", href: "/privacy" },
   { label: "Terms", href: "/terms" },
@@ -3012,10 +3115,10 @@ var DEFAULT_LEGAL = [
 ];
 function BrandMark({ brand, size }) {
   if (brand.logoSrc) {
-    return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("img", { className: "dt-auth-mark-img", src: brand.logoSrc, alt: "", width: size, height: size });
+    return /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("img", { className: "dt-auth-mark-img", src: brand.logoSrc, alt: "", width: size, height: size });
   }
-  if (brand.mark) return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "dt-auth-mark-node", children: brand.mark });
-  return /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "dt-auth-monogram", style: { width: size, height: size }, "aria-hidden": "true", children: brand.name.charAt(0) });
+  if (brand.mark) return /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-mark-node", children: brand.mark });
+  return /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-monogram", style: { width: size, height: size }, "aria-hidden": "true", children: brand.name.charAt(0) });
 }
 function brandStyle(brand) {
   return {
@@ -3034,52 +3137,53 @@ function AuthShell({
   legalLinks = DEFAULT_LEGAL,
   linkComponent: LinkComponent,
   className = "",
-  demoAccounts
+  demoAccounts,
+  ssoProvider
 }) {
   var _a, _b;
-  const headingId = (0, import_react19.useId)();
+  const headingId = (0, import_react21.useId)();
   const { revealed, tapProps } = useTapReveal({ taps: (_a = demoAccounts == null ? void 0 : demoAccounts.taps) != null ? _a : 4 });
   const isPlatform = variant === "platform";
   const headline = isPlatform ? brand.platformHeadline || "Platform administration" : brand.headline;
   const pitch = isPlatform ? brand.platformPitch || `Super administrator console for ${brand.name}. Every action here is audited.` : brand.pitch;
-  const renderLink = (l) => LinkComponent ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(LinkComponent, { to: l.href, href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href) : /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("a", { href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href);
-  return /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)(
+  const renderLink = (l) => LinkComponent ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(LinkComponent, { to: l.href, href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href) : /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("a", { href: l.href, className: "dt-auth-legal-link", children: l.label }, l.href);
+  return /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)(
     "div",
     {
       className: `dt-auth ${isPlatform ? "dt-auth--platform" : ""} ${className}`,
       style: brandStyle(brand),
       "data-product": brand.id,
       children: [
-        /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("aside", { className: "dt-auth-panel", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("a", { href: "/", className: "dt-auth-brand", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(BrandMark, { brand, size: 28 }),
-            /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
-            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("aside", { className: "dt-auth-panel", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("a", { href: "/", className: "dt-auth-brand", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(BrandMark, { brand, size: 28 }),
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
+            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "dt-auth-pitch", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("h2", { children: headline }),
-            pitch ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { children: pitch }) : null,
-            !isPlatform && ((_b = brand.points) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("ul", { children: brand.points.map((p) => /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("li", { children: p }, p)) }) : null
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("div", { className: "dt-auth-pitch", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("h2", { children: headline }),
+            pitch ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("p", { children: pitch }) : null,
+            !isPlatform && ((_b = brand.points) == null ? void 0 : _b.length) ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("ul", { children: brand.points.map((p) => /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("li", { children: p }, p)) }) : null
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { className: "dt-auth-panel-foot", children: brand.category || "by Dreamtree-Org" })
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("p", { className: "dt-auth-panel-foot", children: brand.category || "by Dreamtree-Org" })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("main", { className: "dt-auth-main", children: /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("div", { className: "dt-auth-column", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("a", { href: "/", className: "dt-auth-brand dt-auth-brand--mobile", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(BrandMark, { brand, size: 24 }),
-            /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
-            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("main", { className: "dt-auth-main", children: /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("div", { className: "dt-auth-column", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("a", { href: "/", className: "dt-auth-brand dt-auth-brand--mobile", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(BrandMark, { brand, size: 24 }),
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-brand-name", children: brand.name }),
+            isPlatform ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { className: "dt-auth-badge", children: "Platform" }) : null
           ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("section", { className: "dt-auth-card", "aria-labelledby": headingId, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("header", { className: "dt-auth-head", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("h1", { id: headingId, ...demoAccounts ? tapProps : {}, children: title }),
-              subtitle ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("p", { children: subtitle }) : null
+          /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("section", { className: "dt-auth-card", "aria-labelledby": headingId, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("header", { className: "dt-auth-head", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("h1", { id: headingId, ...demoAccounts ? tapProps : {}, children: title }),
+              subtitle ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("p", { children: subtitle }) : null
             ] }),
-            children,
-            demoAccounts && revealed ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)(DemoAccounts, { load: demoAccounts.load, onSelect: demoAccounts.onSelect }) : null
+            ssoProvider ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(DreamtreeSso, { provider: ssoProvider, children }) : children,
+            demoAccounts && revealed && (ssoProvider == null ? void 0 : ssoProvider.mode) !== "sso" ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)(DemoAccounts, { load: demoAccounts.load, onSelect: demoAccounts.onSelect }) : null
           ] }),
-          footer ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("div", { className: "dt-auth-footer", children: footer }) : null,
-          (legalLinks == null ? void 0 : legalLinks.length) ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("nav", { className: "dt-auth-legal", "aria-label": "Legal", children: legalLinks.map((l, i) => /* @__PURE__ */ (0, import_jsx_runtime19.jsxs)("span", { className: "dt-auth-legal-item", children: [
-            i > 0 ? /* @__PURE__ */ (0, import_jsx_runtime19.jsx)("span", { "aria-hidden": "true", children: "\xB7" }) : null,
+          footer ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("div", { className: "dt-auth-footer", children: footer }) : null,
+          (legalLinks == null ? void 0 : legalLinks.length) ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("nav", { className: "dt-auth-legal", "aria-label": "Legal", children: legalLinks.map((l, i) => /* @__PURE__ */ (0, import_jsx_runtime21.jsxs)("span", { className: "dt-auth-legal-item", children: [
+            i > 0 ? /* @__PURE__ */ (0, import_jsx_runtime21.jsx)("span", { "aria-hidden": "true", children: "\xB7" }) : null,
             renderLink(l)
           ] }, l.href)) }) : null
         ] }) })
@@ -3089,17 +3193,17 @@ function AuthShell({
 }
 
 // src/platform/PlatformLogin.jsx
-var import_jsx_runtime20 = require("react/jsx-runtime");
+var import_jsx_runtime22 = require("react/jsx-runtime");
 function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo = "/platform", title = "Platform administration", subtitle = "Administrator sign-in", linkComponent, legalLinks }) {
-  const client = (0, import_react20.useMemo)(() => given != null ? given : createPlatformClient({ basePath, onUnauthorized: () => {
+  const client = (0, import_react22.useMemo)(() => given != null ? given : createPlatformClient({ basePath, onUnauthorized: () => {
   } }), [given, basePath]);
-  const [step, setStep] = (0, import_react20.useState)("password");
-  const [email, setEmail] = (0, import_react20.useState)("");
-  const [password, setPassword] = (0, import_react20.useState)("");
-  const [ticket, setTicket] = (0, import_react20.useState)(null);
-  const [code, setCode] = (0, import_react20.useState)("");
-  const [busy, setBusy] = (0, import_react20.useState)(false);
-  const [error, setError] = (0, import_react20.useState)(null);
+  const [step, setStep] = (0, import_react22.useState)("password");
+  const [email, setEmail] = (0, import_react22.useState)("");
+  const [password, setPassword] = (0, import_react22.useState)("");
+  const [ticket, setTicket] = (0, import_react22.useState)(null);
+  const [code, setCode] = (0, import_react22.useState)("");
+  const [busy, setBusy] = (0, import_react22.useState)(false);
+  const [error, setError] = (0, import_react22.useState)(null);
   const done = (res) => {
     if (onSignedIn) onSignedIn(res);
     else if (typeof window !== "undefined") window.location.assign(redirectTo);
@@ -3139,17 +3243,17 @@ function PlatformLogin({ brand, basePath, client: given, onSignedIn, redirectTo
       setBusy(false);
     }
   };
-  return /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(AuthShell, { brand, variant: "platform", title, subtitle, linkComponent, legalLinks, children: step === "password" ? /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("form", { onSubmit: submitPassword, className: "flex flex-col gap-4", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Input, { label: "Admin email", type: "email", autoComplete: "username", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Input, { label: "Password", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Alert, { variant: "error", children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Button, { type: "submit", loading: busy, disabled: !email || !password, fullWidth: true, children: "Sign in" })
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime20.jsxs)("form", { onSubmit: submitCode, className: "flex flex-col gap-4", children: [
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)("p", { className: "text-sm", children: "Enter the 6-digit code from your authenticator app." }),
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Input, { label: "Authenticator code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }),
-    error && /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Alert, { variant: "error", children: error }),
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(import_twreact_ui16.Button, { type: "submit", loading: busy, disabled: code.length < 6, fullWidth: true, children: "Verify" }),
-    /* @__PURE__ */ (0, import_jsx_runtime20.jsx)(
+  return /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(AuthShell, { brand, variant: "platform", title, subtitle, linkComponent, legalLinks, children: step === "password" ? /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("form", { onSubmit: submitPassword, className: "flex flex-col gap-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Input, { label: "Admin email", type: "email", autoComplete: "username", autoFocus: true, value: email, onChange: (e) => setEmail(e.target.value) }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Input, { label: "Password", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Alert, { variant: "error", children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Button, { type: "submit", loading: busy, disabled: !email || !password, fullWidth: true, children: "Sign in" })
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime22.jsxs)("form", { onSubmit: submitCode, className: "flex flex-col gap-4", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)("p", { className: "text-sm", children: "Enter the 6-digit code from your authenticator app." }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Input, { label: "Authenticator code", otp: true, autoFocus: true, value: code, onChange: (e) => setCode(e.target.value.replace(/\s/g, "")) }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Alert, { variant: "error", children: error }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(import_twreact_ui16.Button, { type: "submit", loading: busy, disabled: code.length < 6, fullWidth: true, children: "Verify" }),
+    /* @__PURE__ */ (0, import_jsx_runtime22.jsx)(
       import_twreact_ui16.Button,
       {
         variant: "ghost",