@eifi1/ui-kit 0.28.0 → 0.29.0

package/dist/auth/new-password-fields.js

@@ -0,0 +1,54 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { PasswordStrengthMeter } from "../components/password-strength.js";
+import { Input } from "../components/ui.js";
+import { PASSWORD_MAX_BYTES, PASSWORD_MIN_LENGTH } from "./form-rules.js";
+function NewPasswordFields({
+  password,
+  confirm,
+  onPasswordChange,
+  onConfirmChange,
+  text,
+  busy = false,
+  passwordRef
+}) {
+  const mismatch = confirm !== "" && confirm !== password;
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx(
+        Input,
+        {
+          ref: passwordRef,
+          type: "password",
+          name: "new-password",
+          autoComplete: "new-password",
+          label: text.password,
+          value: password,
+          onChange: (e) => onPasswordChange(e.target.value),
+          minLength: PASSWORD_MIN_LENGTH,
+          readOnly: busy,
+          required: true
+        }
+      ),
+      /* @__PURE__ */ jsx(PasswordStrengthMeter, { value: password, minLength: PASSWORD_MIN_LENGTH, maxBytes: PASSWORD_MAX_BYTES })
+    ] }),
+    /* @__PURE__ */ jsx(
+      Input,
+      {
+        type: "password",
+        name: "confirm-password",
+        autoComplete: "new-password",
+        label: text.confirm,
+        value: confirm,
+        onChange: (e) => onConfirmChange(e.target.value),
+        readOnly: busy,
+        error: mismatch ? text.mismatch : void 0,
+        required: true
+      }
+    )
+  ] });
+}
+export {
+  NewPasswordFields
+};
+//# sourceMappingURL=new-password-fields.js.map

package/dist/auth/new-password-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/new-password-fields.tsx"],"sourcesContent":["import type { ReactNode, Ref } from \"react\";\nimport { PasswordStrengthMeter } from \"../components/password-strength\";\nimport { Input } from \"../components/ui\";\nimport { PASSWORD_MAX_BYTES, PASSWORD_MIN_LENGTH } from \"./form-rules\";\n\n/** @internal The words the fields show — the host form's own labels. */\nexport interface NewPasswordFieldsText {\n  password: ReactNode;\n  confirm: ReactNode;\n  mismatch: ReactNode;\n}\n\n/** @internal */\nexport interface NewPasswordFieldsProps {\n  password: string;\n  confirm: string;\n  onPasswordChange: (value: string) => void;\n  onConfirmChange: (value: string) => void;\n  text: NewPasswordFieldsText;\n  /** A request is running: both fields `readOnly` (not `disabled`, which would drop\n   *  the focus of the one being typed in). */\n  busy?: boolean;\n  passwordRef?: Ref<HTMLInputElement>;\n}\n\n/**\n * \"Choose a password\": the field, the strength meter with its advisory checklist, and\n * the confirmation — keksdose's `PasswordFields`, which its register form, its reset\n * page and its forced-change step share so that every screen choosing a password does\n * it under the same rules and the same feedback. Here `RegisterForm` and\n * `SignInForm`'s set-a-new-password step share it.\n *\n * Both fields are `new-password`: a password manager offers to generate one and never\n * fills in the current one. The confirmation carries the mismatch as its own `error`,\n * attached with `aria-describedby`; the key is always passed, so the message coming and\n * going never remounts the field under the typist.\n *\n * @internal Not part of the barrel; the forms are.\n */\nexport function NewPasswordFields({\n  password,\n  confirm,\n  onPasswordChange,\n  onConfirmChange,\n  text,\n  busy = false,\n  passwordRef,\n}: NewPasswordFieldsProps) {\n  const mismatch = confirm !== \"\" && confirm !== password;\n  return (\n    <>\n      <div>\n        <Input\n          ref={passwordRef}\n          type=\"password\"\n          name=\"new-password\"\n          autoComplete=\"new-password\"\n          label={text.password}\n          value={password}\n          onChange={(e) => onPasswordChange(e.target.value)}\n          minLength={PASSWORD_MIN_LENGTH}\n          readOnly={busy}\n          required\n        />\n        {/* The 72-byte cap is passed because a SIGN-IN password has one (bcrypt); the\n            minimum is passed rather than left to the meter's own default 8, so the two\n            cannot drift apart. */}\n        <PasswordStrengthMeter value={password} minLength={PASSWORD_MIN_LENGTH} maxBytes={PASSWORD_MAX_BYTES} />\n      </div>\n      {/* A typo'd password costs a reset mail — and under keksdose's end-to-end\n          encryption, data (feedback #124) — so it is typed twice. */}\n      <Input\n        type=\"password\"\n        name=\"confirm-password\"\n        autoComplete=\"new-password\"\n        label={text.confirm}\n        value={confirm}\n        onChange={(e) => onConfirmChange(e.target.value)}\n        readOnly={busy}\n        error={mismatch ? text.mismatch : undefined}\n        required\n      />\n    </>\n  );\n}\n"],"mappings":";AAkDI,mBAEI,KADF,YADF;AAjDJ,SAAS,6BAA6B;AACtC,SAAS,aAAa;AACtB,SAAS,oBAAoB,2BAA2B;AAoCjD,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AACF,GAA2B;AACzB,QAAM,WAAW,YAAY,MAAM,YAAY;AAC/C,SACE,iCACE;AAAA,yBAAC,SACC;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,MAAK;AAAA,UACL,cAAa;AAAA,UACb,OAAO,KAAK;AAAA,UACZ,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,iBAAiB,EAAE,OAAO,KAAK;AAAA,UAChD,WAAW;AAAA,UACX,UAAU;AAAA,UACV,UAAQ;AAAA;AAAA,MACV;AAAA,MAIA,oBAAC,yBAAsB,OAAO,UAAU,WAAW,qBAAqB,UAAU,oBAAoB;AAAA,OACxG;AAAA,IAGA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAK;AAAA,QACL,cAAa;AAAA,QACb,OAAO,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,UAAU,CAAC,MAAM,gBAAgB,EAAE,OAAO,KAAK;AAAA,QAC/C,UAAU;AAAA,QACV,OAAO,WAAW,KAAK,WAAW;AAAA,QAClC,UAAQ;AAAA;AAAA,IACV;AAAA,KACF;AAEJ;","names":[]}

package/dist/auth/not-found-page.d.ts

@@ -0,0 +1,57 @@
+import * as react from 'react';
+import { ComponentPropsWithoutRef, ReactNode } from 'react';
+import { AuthHeadingLevel } from './status-parts.js';
+
+/** Every string the page renders — the `notFound` namespace. keksdose's words
+ *  (`error.not_found_*`), which kastlan took over. */
+interface NotFoundLabels {
+    /** The heading. */
+    title: string;
+    /** Under it. */
+    body: string;
+    /** The way out for everyone — to `homeHref`. */
+    home: string;
+    /** The second way out for someone signed in — to `appHref`. */
+    app: string;
+}
+declare const DEFAULT_NOT_FOUND_LABELS: NotFoundLabels;
+interface NotFoundPageProps extends Omit<ComponentPropsWithoutRef<"div">, "children" | "title"> {
+    /** "Go to the start page". Default `/`, which takes a signed-in user into the app and
+     *  anyone else to sign-in in all three apps. */
+    homeHref?: string;
+    /**
+     * "Back to the app", beside it — pass it while someone is signed in. A LITERAL page
+     * (keksdose's `/budget`), never the "last visited page" an app restores on start: a
+     * stale one of those pointing at a route that is gone is the likeliest way a
+     * signed-in user lands here (keksdose's not-found-page.tsx).
+     */
+    appHref?: string;
+    /** App content under the text — a search field, a support address. */
+    children?: ReactNode;
+    /** `false` adds no `noindex` — for a preview inside another page. Default `true`. */
+    noIndex?: boolean;
+    /** The heading's level. Default `h2`, under `AuthLayout`'s `h1`; `h1` where the page
+     *  stands alone (inside the app shell). */
+    headingAs?: AuthHeadingLevel;
+    labels?: Partial<NotFoundLabels>;
+}
+/**
+ * What an unknown address renders (the router's catch-all), signed out and signed in —
+ * keksdose's `NotFoundPage` (app/not-found-page.tsx, feedback #129), which kastlan took
+ * over on `AuthLayout` (docs/auth-harmonization.md §7).
+ *
+ * In place of the silent `<Navigate to="/">` keksdose had: bouncing every typo, dead link
+ * and fabricated URL to the start page is what Search Console reports as a soft 404, and
+ * it hid broken links. An SPA cannot send a real 404 status — the web server answers
+ * every path with index.html — so the page says it in words and calls
+ * {@link useNoIndex}, which makes a crawler drop it (the server's `X-Robots-Tag` is the
+ * authoritative half).
+ *
+ * It is the page's CONTENT, not a frame, so it sits in either: as `AuthLayout`'s child
+ * for a visitor (`headingAs` default `h2`, under the layout's title), or bare inside the
+ * app shell for someone signed in (`headingAs="h1"`, and `appHref`). The large "404" is
+ * decoration — the heading says it in words — and hidden from a screen reader.
+ */
+declare function NotFoundPage({ homeHref, appHref, children, noIndex, headingAs: Heading, labels: labelsProp, className, ...rest }: NotFoundPageProps): react.JSX.Element;
+
+export { DEFAULT_NOT_FOUND_LABELS, type NotFoundLabels, NotFoundPage, type NotFoundPageProps };

package/dist/auth/not-found-page.js

@@ -0,0 +1,40 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { cn } from "../lib/cn.js";
+import { useKitLabels } from "../i18n/kit-labels.js";
+import { useNoIndex } from "../hooks/use-noindex.js";
+import { Button } from "../components/ui.js";
+const DEFAULT_NOT_FOUND_LABELS = {
+  title: "Page not found",
+  body: "This address doesn\u2019t exist (any more). It may be a typo, or the page has moved.",
+  home: "Go to the start page",
+  app: "Back to the app"
+};
+function NotFoundPage({
+  homeHref = "/",
+  appHref,
+  children,
+  noIndex = true,
+  headingAs: Heading = "h2",
+  labels: labelsProp,
+  className,
+  ...rest
+}) {
+  const labels = useKitLabels("notFound", DEFAULT_NOT_FOUND_LABELS, labelsProp);
+  useNoIndex(noIndex);
+  return /* @__PURE__ */ jsxs("div", { ...rest, className: cn("flex flex-col items-center gap-2 py-4 text-center", className), children: [
+    /* @__PURE__ */ jsx("p", { "aria-hidden": true, className: "text-6xl font-bold leading-none tracking-tight text-[var(--text-placeholder)]", children: "404" }),
+    /* @__PURE__ */ jsx(Heading, { className: "mt-2 text-xl font-semibold text-[var(--text-primary)]", children: labels.title }),
+    /* @__PURE__ */ jsx("p", { className: "max-w-prose text-sm text-[var(--text-secondary)]", children: labels.body }),
+    children,
+    /* @__PURE__ */ jsxs("div", { className: "mt-4 flex flex-wrap justify-center gap-3", children: [
+      /* @__PURE__ */ jsx(Button, { href: homeHref, variant: "brand", children: labels.home }),
+      appHref !== void 0 && /* @__PURE__ */ jsx(Button, { href: appHref, variant: "secondary", children: labels.app })
+    ] })
+  ] });
+}
+export {
+  DEFAULT_NOT_FOUND_LABELS,
+  NotFoundPage
+};
+//# sourceMappingURL=not-found-page.js.map

package/dist/auth/not-found-page.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/not-found-page.tsx"],"sourcesContent":["import type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { useNoIndex } from \"../hooks/use-noindex\";\nimport { Button } from \"../components/ui\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\n\n/** Every string the page renders — the `notFound` namespace. keksdose's words\n *  (`error.not_found_*`), which kastlan took over. */\nexport interface NotFoundLabels {\n  /** The heading. */\n  title: string;\n  /** Under it. */\n  body: string;\n  /** The way out for everyone — to `homeHref`. */\n  home: string;\n  /** The second way out for someone signed in — to `appHref`. */\n  app: string;\n}\n\nexport const DEFAULT_NOT_FOUND_LABELS: NotFoundLabels = {\n  title: \"Page not found\",\n  body: \"This address doesn’t exist (any more). It may be a typo, or the page has moved.\",\n  home: \"Go to the start page\",\n  app: \"Back to the app\",\n};\n\nexport interface NotFoundPageProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\" | \"title\"> {\n  /** \"Go to the start page\". Default `/`, which takes a signed-in user into the app and\n   *  anyone else to sign-in in all three apps. */\n  homeHref?: string;\n  /**\n   * \"Back to the app\", beside it — pass it while someone is signed in. A LITERAL page\n   * (keksdose's `/budget`), never the \"last visited page\" an app restores on start: a\n   * stale one of those pointing at a route that is gone is the likeliest way a\n   * signed-in user lands here (keksdose's not-found-page.tsx).\n   */\n  appHref?: string;\n  /** App content under the text — a search field, a support address. */\n  children?: ReactNode;\n  /** `false` adds no `noindex` — for a preview inside another page. Default `true`. */\n  noIndex?: boolean;\n  /** The heading's level. Default `h2`, under `AuthLayout`'s `h1`; `h1` where the page\n   *  stands alone (inside the app shell). */\n  headingAs?: AuthHeadingLevel;\n  labels?: Partial<NotFoundLabels>;\n}\n\n/**\n * What an unknown address renders (the router's catch-all), signed out and signed in —\n * keksdose's `NotFoundPage` (app/not-found-page.tsx, feedback #129), which kastlan took\n * over on `AuthLayout` (docs/auth-harmonization.md §7).\n *\n * In place of the silent `<Navigate to=\"/\">` keksdose had: bouncing every typo, dead link\n * and fabricated URL to the start page is what Search Console reports as a soft 404, and\n * it hid broken links. An SPA cannot send a real 404 status — the web server answers\n * every path with index.html — so the page says it in words and calls\n * {@link useNoIndex}, which makes a crawler drop it (the server's `X-Robots-Tag` is the\n * authoritative half).\n *\n * It is the page's CONTENT, not a frame, so it sits in either: as `AuthLayout`'s child\n * for a visitor (`headingAs` default `h2`, under the layout's title), or bare inside the\n * app shell for someone signed in (`headingAs=\"h1\"`, and `appHref`). The large \"404\" is\n * decoration — the heading says it in words — and hidden from a screen reader.\n */\nexport function NotFoundPage({\n  homeHref = \"/\",\n  appHref,\n  children,\n  noIndex = true,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: NotFoundPageProps) {\n  const labels = useKitLabels(\"notFound\", DEFAULT_NOT_FOUND_LABELS, labelsProp);\n  useNoIndex(noIndex);\n  return (\n    <div {...rest} className={cn(\"flex flex-col items-center gap-2 py-4 text-center\", className)}>\n      <p aria-hidden className=\"text-6xl font-bold leading-none tracking-tight text-[var(--text-placeholder)]\">\n        404\n      </p>\n      <Heading className=\"mt-2 text-xl font-semibold text-[var(--text-primary)]\">{labels.title}</Heading>\n      <p className=\"max-w-prose text-sm text-[var(--text-secondary)]\">{labels.body}</p>\n      {children}\n      <div className=\"mt-4 flex flex-wrap justify-center gap-3\">\n        <Button href={homeHref} variant=\"brand\">\n          {labels.home}\n        </Button>\n        {appHref !== undefined && (\n          <Button href={appHref} variant=\"secondary\">\n            {labels.app}\n          </Button>\n        )}\n      </div>\n    </div>\n  );\n}\n"],"mappings":";AA+EM,cAMA,YANA;AA9EN,SAAS,UAAU;AACnB,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AAgBhB,MAAM,2BAA2C;AAAA,EACtD,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AACP;AAwCO,SAAS,aAAa;AAAA,EAC3B,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAsB;AACpB,QAAM,SAAS,aAAa,YAAY,0BAA0B,UAAU;AAC5E,aAAW,OAAO;AAClB,SACE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,qDAAqD,SAAS,GACzF;AAAA,wBAAC,OAAE,eAAW,MAAC,WAAU,iFAAgF,iBAEzG;AAAA,IACA,oBAAC,WAAQ,WAAU,yDAAyD,iBAAO,OAAM;AAAA,IACzF,oBAAC,OAAE,WAAU,oDAAoD,iBAAO,MAAK;AAAA,IAC5E;AAAA,IACD,qBAAC,SAAI,WAAU,4CACb;AAAA,0BAAC,UAAO,MAAM,UAAU,SAAQ,SAC7B,iBAAO,MACV;AAAA,MACC,YAAY,UACX,oBAAC,UAAO,MAAM,SAAS,SAAQ,aAC5B,iBAAO,KACV;AAAA,OAEJ;AAAA,KACF;AAEJ;","names":[]}

package/dist/auth/register-form.d.ts

@@ -0,0 +1,86 @@
+import 'react';
+export { cr as DEFAULT_REGISTER_LABELS, dS as RegisterForm, dT as RegisterFormProps, dU as RegisterLabels, dV as RegisterValues } from '../register-form-V1OeNlMr.js';
+import '../data-table-labels-DUELeXpa.js';
+import '../components/data-table-sort.js';
+import '../components/swipeable-row.js';
+import '../components/mini-calendar.js';
+import '../components/calendar-heatmap.js';
+import '../components/popover.js';
+import '../components/chip.js';
+import 'lucide-react';
+import '../components/field-sync.js';
+import '../components/tooltip.js';
+import '../hooks/use-anchored-rect.js';
+import '../lib/clipping.js';
+import '../components/field-parts.js';
+import '../wizard/types.js';
+import '../tour/tour.js';
+import '../search/command-palette.js';
+import '../search/global-search.js';
+import '../search/search-index.js';
+import '../components/month-picker.js';
+import '../components/page-contents.js';
+import '../components/series-chart-labels.js';
+import '../components/pie-chart-labels.js';
+import '../components/sparkline.js';
+import '../components/stat-tile.js';
+import '../components/signature-pad.js';
+import '../components/password-strength.js';
+import '../components/swatch-picker.js';
+import '../components/tile-radio.js';
+import '../components/icon-picker.js';
+import '../components/dialog-frame.js';
+import '../components/modal.js';
+import '../hooks/use-search-param-state.js';
+import '../components/measured-grid.js';
+import '../components/user-avatar.js';
+import '../lib/person-name.js';
+import '../components/status-dot.js';
+import '../components/progress-bar.js';
+import '../components/signed-amount.js';
+import '../shell/topbar-action-menu.js';
+import '../components/menu-item.js';
+import '../components/floating-panel.js';
+import '../hooks/use-authed-src.js';
+import '../components/account-settings-labels.js';
+import '../components/bulk-action-bar.js';
+import '../components/list.js';
+import '../components/breadcrumbs.js';
+import '../components/toast.js';
+import '../components/description-list.js';
+import '../components/line-items.js';
+import '../components/error-boundary.js';
+import '../components/authed-image.js';
+import '../components/image-grid.js';
+import '../components/lightbox.js';
+import '../components/write-lock.js';
+import './sign-in-form.js';
+import './complete-name-dialog.js';
+import './forgot-password-form.js';
+import './status-parts.js';
+import './reset-password-form.js';
+import './verify-email.js';
+import './not-found-page.js';
+import './accept-invitation.js';
+import '../shell/company-switcher.js';
+import '../components/account-chips.js';
+import '../lib/format.js';
+import '../components/reauth-dialog.js';
+import '../components/server-wake.js';
+import '../lib/server-wake.js';
+import '../components/translation-review-labels.js';
+import '../lib/translation-review.js';
+import '../components/country-select.js';
+import '../components/inline-edit-field.js';
+import '../lib/iban.js';
+import '../lib/phone.js';
+import '../components/sign-chip.js';
+import '../components/column-mapper.js';
+import '../lib/column-mapping.js';
+import '../lib/table-text.js';
+import '../shell/topbar-controls.js';
+import '../theme/palette-presets.js';
+import '../theme/chart-palette.js';
+import '../theme/theme-store.js';
+import 'zustand/middleware';
+import 'zustand';

package/dist/auth/register-form.js

@@ -0,0 +1,268 @@
+"use client";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { useEffect, useId, useRef, useState } from "react";
+import { useKitLabels, useKitLocale } from "../i18n/kit-labels.js";
+import { KIT_LANGUAGES, resolveLanguage } from "../i18n/languages.js";
+import { cn } from "../lib/cn.js";
+import { AlertBanner } from "../components/alert-banner.js";
+import { hasMessage } from "../components/choice-parts.js";
+import { LanguageSelect } from "../components/language-select.js";
+import { LegalAcceptCheckbox } from "../components/legal-page.js";
+import { TextLink } from "../components/text-link.js";
+import { Button, Input } from "../components/ui.js";
+import { authErrorCode } from "./auth-errors.js";
+import { emailParts, taggedEmail } from "./email-tag.js";
+import { newPasswordProblem, personNameOk, PERSON_NAME_MAX_LENGTH } from "./form-rules.js";
+import { NewPasswordFields } from "./new-password-fields.js";
+const DEFAULT_REGISTER_LABELS = {
+  firstName: "First name",
+  lastName: "Last name",
+  email: "Email",
+  emailTagUse: (address) => `Use ${address}`,
+  emailTagHint: "Many providers deliver name+tag@\u2026 to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.",
+  invitedEmailHint: "The address your invitation was sent to.",
+  invitedTagNote: "The tagged address gets a confirmation mail of its own.",
+  password: "Password",
+  confirmPassword: "Repeat password",
+  passwordMismatch: "The passwords don't match.",
+  language: "Language",
+  submit: "Create account",
+  haveAccount: "Already have an account?",
+  signIn: "Sign in",
+  emailTaken: "An account with this email address already exists.",
+  registrationClosed: "New accounts are by invitation only. Ask the operator to invite your email address.",
+  invitationInvalid: "This invitation link is not valid.",
+  invitationExpired: "This invitation has expired. Ask for a new one.",
+  failed: "Registration failed. Please try again."
+};
+const ALL_CODES = KIT_LANGUAGES.map((language) => language.code);
+function browserLanguages() {
+  if (typeof navigator === "undefined") return [];
+  return navigator.languages?.length ? navigator.languages : [navigator.language];
+}
+function RegisterForm({
+  onSubmit,
+  emailTag,
+  invitedEmail,
+  locale: localeProp,
+  defaultLocale,
+  onLocaleChange,
+  languages = ALL_CODES,
+  languageField,
+  aboveForm,
+  underEmail,
+  appFields,
+  afterFields,
+  appFieldsComplete = true,
+  termsHref,
+  privacyHref,
+  signInHref,
+  describeError,
+  labels: labelsProp,
+  className,
+  ...rest
+}) {
+  const labels = useKitLabels("register", DEFAULT_REGISTER_LABELS, labelsProp);
+  const kitLocale = useKitLocale();
+  const invited = invitedEmail !== void 0;
+  const [firstName, setFirstName] = useState("");
+  const [lastName, setLastName] = useState("");
+  const [email, setEmail] = useState(invitedEmail ?? "");
+  const [password, setPassword] = useState("");
+  const [confirm, setConfirm] = useState("");
+  const [ownLocale, setOwnLocale] = useState(
+    () => defaultLocale ?? resolveLanguage([kitLocale, ...browserLanguages()], languages)
+  );
+  const [accepted, setAccepted] = useState(false);
+  const [busy, setBusy] = useState(null);
+  const [taken, setTaken] = useState(null);
+  const [failure, setFailure] = useState(null);
+  const emailRef = useRef(null);
+  const tagHintId = useId();
+  const mounted = useRef(true);
+  useEffect(() => {
+    mounted.current = true;
+    return () => {
+      mounted.current = false;
+    };
+  }, []);
+  const locale = resolveLanguage([localeProp ?? ownLocale], languages);
+  const changeLocale = (code) => {
+    if (localeProp === void 0) setOwnLocale(code);
+    onLocaleChange?.(code);
+  };
+  const working = busy !== null;
+  const suggestion = emailTag ? taggedEmail(email, emailTag) : null;
+  const backToInvited = invitedEmail !== void 0 && email.trim() !== invitedEmail.trim() ? invitedEmail.trim() : null;
+  const canSubmit = personNameOk(firstName) && personNameOk(lastName) && emailParts(email) !== null && newPasswordProblem(password, confirm) === null && accepted && appFieldsComplete;
+  const submit = (e) => {
+    e.preventDefault();
+    if (!canSubmit || working) return;
+    const values = {
+      firstName: firstName.trim(),
+      lastName: lastName.trim(),
+      email: email.trim(),
+      password,
+      locale
+    };
+    setBusy("sending");
+    setFailure(null);
+    setTaken(null);
+    let result;
+    try {
+      result = Promise.resolve(onSubmit(values));
+    } catch (error) {
+      result = Promise.reject(error);
+    }
+    result.then(
+      () => {
+        if (mounted.current) setBusy("done");
+      },
+      (error) => {
+        if (!mounted.current) return;
+        setBusy(null);
+        const own = describeError?.(error);
+        const code = authErrorCode(error);
+        if (code === "email_taken" && !hasMessage(own)) {
+          setTaken(values.email);
+          emailRef.current?.focus();
+          return;
+        }
+        setFailure(
+          hasMessage(own) ? own : code === "registration_closed" ? labels.registrationClosed : code === "invitation_invalid" ? labels.invitationInvalid : code === "invitation_expired" ? labels.invitationExpired : labels.failed
+        );
+      }
+    );
+  };
+  return /* @__PURE__ */ jsxs("div", { ...rest, className: cn("@container space-y-4", className), children: [
+    aboveForm,
+    /* @__PURE__ */ jsxs("form", { className: "space-y-3", noValidate: true, onSubmit: submit, children: [
+      /* @__PURE__ */ jsxs("div", { className: "grid gap-3 @xs:grid-cols-2", children: [
+        /* @__PURE__ */ jsx(
+          Input,
+          {
+            name: "given-name",
+            autoComplete: "given-name",
+            label: labels.firstName,
+            value: firstName,
+            onChange: (e) => setFirstName(e.target.value),
+            maxLength: PERSON_NAME_MAX_LENGTH,
+            readOnly: working,
+            required: true
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Input,
+          {
+            name: "family-name",
+            autoComplete: "family-name",
+            label: labels.lastName,
+            value: lastName,
+            onChange: (e) => setLastName(e.target.value),
+            maxLength: PERSON_NAME_MAX_LENGTH,
+            readOnly: working,
+            required: true
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs("div", { children: [
+        /* @__PURE__ */ jsx(
+          Input,
+          {
+            ref: emailRef,
+            type: "email",
+            name: "email",
+            autoComplete: "email",
+            label: labels.email,
+            value: email,
+            onChange: (e) => setEmail(e.target.value),
+            readOnly: invited || working,
+            hint: invited ? labels.invitedEmailHint : void 0,
+            error: taken !== null && taken === email.trim() ? labels.emailTaken : void 0,
+            required: true
+          }
+        ),
+        suggestion && /* @__PURE__ */ jsxs("p", { className: "mt-1 text-xs text-[var(--text-muted)]", children: [
+          /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "link",
+              size: "sm",
+              className: "h-auto p-0 align-baseline",
+              disabled: working,
+              "aria-describedby": tagHintId,
+              onClick: () => setEmail(suggestion),
+              children: labels.emailTagUse(suggestion)
+            }
+          ),
+          " ",
+          /* @__PURE__ */ jsx("span", { id: tagHintId, children: labels.emailTagHint })
+        ] }),
+        backToInvited !== null && /* @__PURE__ */ jsxs("p", { className: "mt-1 text-xs text-[var(--text-muted)]", children: [
+          /* @__PURE__ */ jsx("span", { children: labels.invitedTagNote }),
+          " ",
+          /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "link",
+              size: "sm",
+              className: "h-auto p-0 align-baseline",
+              disabled: working,
+              onClick: () => setEmail(backToInvited),
+              children: labels.emailTagUse(backToInvited)
+            }
+          )
+        ] }),
+        underEmail
+      ] }),
+      /* @__PURE__ */ jsx(
+        NewPasswordFields,
+        {
+          password,
+          confirm,
+          onPasswordChange: setPassword,
+          onConfirmChange: setConfirm,
+          busy: working,
+          text: { password: labels.password, confirm: labels.confirmPassword, mismatch: labels.passwordMismatch }
+        }
+      ),
+      languageField === void 0 ? /* @__PURE__ */ jsx(
+        LanguageSelect,
+        {
+          name: "locale",
+          label: labels.language,
+          value: locale,
+          codes: languages,
+          onChange: changeLocale,
+          disabled: working
+        }
+      ) : languageField,
+      appFields,
+      afterFields,
+      /* @__PURE__ */ jsx(
+        LegalAcceptCheckbox,
+        {
+          checked: accepted,
+          onCheckedChange: setAccepted,
+          termsHref,
+          privacyHref,
+          disabled: working
+        }
+      ),
+      hasMessage(failure) && /* @__PURE__ */ jsx(AlertBanner, { tone: "danger", size: "sm", role: "alert", children: failure }),
+      /* @__PURE__ */ jsx(Button, { type: "submit", className: "w-full", disabled: !working && !canSubmit, pending: working, children: labels.submit })
+    ] }),
+    signInHref !== void 0 && /* @__PURE__ */ jsxs("p", { className: "text-center text-sm text-[var(--text-secondary)]", children: [
+      labels.haveAccount,
+      " ",
+      /* @__PURE__ */ jsx(TextLink, { href: signInHref, tone: "primary", children: labels.signIn })
+    ] })
+  ] });
+}
+export {
+  DEFAULT_REGISTER_LABELS,
+  RegisterForm
+};
+//# sourceMappingURL=register-form.js.map

package/dist/auth/register-form.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/register-form.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, FormEvent, ReactNode } from \"react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { KIT_LANGUAGES, resolveLanguage } from \"../i18n/languages\";\nimport type { KitLanguageCode } from \"../i18n/languages\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { LanguageSelect } from \"../components/language-select\";\nimport { LegalAcceptCheckbox } from \"../components/legal-page\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button, Input } from \"../components/ui\";\nimport { authErrorCode } from \"./auth-errors\";\nimport { emailParts, taggedEmail } from \"./email-tag\";\nimport { newPasswordProblem, personNameOk, PERSON_NAME_MAX_LENGTH } from \"./form-rules\";\nimport { NewPasswordFields } from \"./new-password-fields\";\n\n/** What `RegisterForm` hands `onSubmit` — the core of `POST /auth/register` (§4.2). The\n *  app adds its own fields (kastlan's company, keksdose's currency) and the\n *  `invite_token` it read from the URL. */\nexport interface RegisterValues {\n  /** Trimmed, 1–120 characters. */\n  firstName: string;\n  /** Trimmed, 1–120 characters. */\n  lastName: string;\n  /** Trimmed. Lower-casing is the server's (§3.1); a tag is never stripped (§4.5). */\n  email: string;\n  /** As typed: at least 8 characters, at most 72 bytes. */\n  password: string;\n  /** The language picked — one of `languages` — for every mail to the user (§3.1). */\n  locale: KitLanguageCode;\n}\n\n/**\n * Every string `RegisterForm` renders — the `register` namespace of `<UiKitProvider\n * labels>`, overridable per instance through `labels`. keksdose's words where it has\n * them. The terms checkbox speaks `legal.accept`, the strength meter `passwordStrength`.\n */\nexport interface RegisterLabels {\n  firstName: string;\n  lastName: string;\n  email: string;\n  /** The address-tag button (§4.5), given the exact address it would use — and, with an\n   *  invitation, the button back to the invited address. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** Under an invited (read-only) email field. */\n  invitedEmailHint: string;\n  /** Once the invitee took the tagged address: it is not the invited one, so it is\n   *  confirmed by a mail of its own (§4.3). */\n  invitedTagNote: string;\n  password: string;\n  confirmPassword: string;\n  passwordMismatch: string;\n  language: string;\n  /** The submit button. */\n  submit: string;\n  /** Before the link to `signInHref`. */\n  haveAccount: string;\n  /** The link to `signInHref`. */\n  signIn: string;\n  /** `email_taken`, under the email field. */\n  emailTaken: string;\n  /** `registration_closed` — the gate refused the address (§4.3). */\n  registrationClosed: string;\n  /** `invitation_invalid` — the invitation link is unknown or spent. */\n  invitationInvalid: string;\n  /** `invitation_expired`. */\n  invitationExpired: string;\n  /** Any other failure. */\n  failed: string;\n}\n\nexport const DEFAULT_REGISTER_LABELS: RegisterLabels = {\n  firstName: \"First name\",\n  lastName: \"Last name\",\n  email: \"Email\",\n  emailTagUse: (address) => `Use ${address}`,\n  emailTagHint:\n    \"Many providers deliver name+tag@… to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.\",\n  invitedEmailHint: \"The address your invitation was sent to.\",\n  invitedTagNote: \"The tagged address gets a confirmation mail of its own.\",\n  password: \"Password\",\n  confirmPassword: \"Repeat password\",\n  passwordMismatch: \"The passwords don't match.\",\n  language: \"Language\",\n  submit: \"Create account\",\n  haveAccount: \"Already have an account?\",\n  signIn: \"Sign in\",\n  emailTaken: \"An account with this email address already exists.\",\n  registrationClosed: \"New accounts are by invitation only. Ask the operator to invite your email address.\",\n  invitationInvalid: \"This invitation link is not valid.\",\n  invitationExpired: \"This invitation has expired. Ask for a new one.\",\n  failed: \"Registration failed. Please try again.\",\n};\n\nexport interface RegisterFormProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"onSubmit\" | \"children\"> {\n  /**\n   * The form was submitted with everything filled in. Send it (`POST /auth/register`,\n   * §4.2) and resolve once the user is signed in, or reject with the client's error:\n   * `email_taken` shows under the email field, `registration_closed` and the\n   * invitation codes above the button, anything else as \"Registration failed\". The form\n   * never sends a request itself (§8): keksdose must see the password on its way.\n   *\n   * On resolve the form stays busy while the app navigates.\n   */\n  onSubmit: (values: RegisterValues) => Promise<unknown>;\n  /**\n   * The app's address tag (`\"kastlan\"`, §4.5). Once the email is plausible, a button\n   * under it offers the tagged address — \"Use ada+kastlan@example.com\" — with a line on\n   * why; one click puts it in the field. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /**\n   * The address of the invitation this sign-up comes from (§4.4): the field starts with\n   * it and is read-only. With `emailTag`, the invitee may still take the tagged form of\n   * it — the server accepts exactly that variant — and go back.\n   */\n  invitedEmail?: string;\n  /**\n   * The language field's value — controlled. Pass the app's UI language\n   * (`i18n.resolvedLanguage`) with `onLocaleChange` switching it, and the field IS the\n   * app's language switch, with no copy of its own to drift from a second switcher on\n   * the page (keksdose's register page has one in its header). Any tag; it shows (and\n   * submits) the offered code it resolves to. Left out, the form keeps its own, starting\n   * from `defaultLocale`, else the provider's language, else the browser's.\n   */\n  locale?: string;\n  /** The uncontrolled language field's start value. */\n  defaultLocale?: string;\n  /** A language was picked. */\n  onLocaleChange?: (code: KitLanguageCode) => void;\n  /** The languages to offer, in order. Default all seven. */\n  languages?: readonly KitLanguageCode[];\n  /**\n   * The app's own language field in place of the kit's select — keksdose's\n   * `LanguageSetting` bound to its i18n. `null` draws none (an app with one language);\n   * the submitted `locale` is then `locale`'s.\n   */\n  languageField?: ReactNode;\n  /** Above the form — keksdose's closed-beta banner. */\n  aboveForm?: ReactNode;\n  /** Under the email field and its tag offer — an app's own hint. */\n  underEmail?: ReactNode;\n  /** The app's sign-up fields (§4.1 item 7): kastlan's Company, keksdose's reporting\n   *  currency. Their values are the app's; say whether they are complete with\n   *  `appFieldsComplete`. */\n  appFields?: ReactNode;\n  /** After the app fields, before the terms — keksdose's privacy-mode note. */\n  afterFields?: ReactNode;\n  /** Whether the app fields are filled in as required — kastlan's Company without an\n   *  invitation. The submit waits for it. Default `true`. */\n  appFieldsComplete?: boolean;\n  /** The terms checkbox's links. Default `/terms` and `/privacy`. */\n  termsHref?: string;\n  privacyHref?: string;\n  /** \"Already have an account? Sign in\" goes here — `/login`. Left out, no line. */\n  signInHref?: string;\n  /** The app's own words for a failure the kit cannot know (a throttled attempt), or\n   *  `undefined` for the kit's. Asked first, for every failure. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: Partial<RegisterLabels>;\n}\n\nconst ALL_CODES: readonly KitLanguageCode[] = KIT_LANGUAGES.map((language) => language.code);\n\n/** The browser's languages, in its order — absent outside a browser. */\nfunction browserLanguages(): readonly string[] {\n  if (typeof navigator === \"undefined\") return [];\n  return navigator.languages?.length ? navigator.languages : [navigator.language];\n}\n\ntype Busy = \"sending\" | \"done\" | null;\n\n/**\n * Sign-up for every app (docs/auth-harmonization.md §4.1, §8): first and last name,\n * email with the address-tag offer, password with the strength meter and its\n * confirmation, language, the app's own fields in a slot, and the terms. keksdose's\n * `RegisterPage` (features/auth/register-page.tsx) with its slots made props.\n *\n * **It never sends a request.** `onSubmit` gets the values; what the request carries\n * besides them (kastlan's company, keksdose's currency, the `invite_token`) is the\n * app's, as are the role and the associations, which never come from the form (§4.3).\n *\n * **The submit waits for a complete form**: both names (1–120 characters after\n * trimming), a plausible address, a password of at least 8 characters and at most 72\n * bytes, the same password again, the terms ticked, and `appFieldsComplete`. Nothing\n * else is a rule — the strength checklist is advice (keksdose #124), and the kit adds\n * none of its own (§8). So there is never a failed attempt for a missing field, and no\n * field error to show for one.\n *\n * **The address tag** (§4.5) is offered under the email field as one click with the\n * exact result on the button, never applied: sub-addressing is a convention the\n * receiving server may or may not implement, and a silent rewrite would send the\n * verification mail down a path nobody checked. With an invitation the field is fixed\n * to the invited address; the invitee may still take its tagged form, and is told it\n * will be confirmed by a mail of its own (§4.3).\n *\n * **Refusals** are read by code ({@link authErrorCode}): `email_taken` under the email\n * field, which takes the focus; `registration_closed`, `invitation_invalid` and\n * `invitation_expired` above the button; anything else as \"Registration failed\", unless\n * `describeError` has the app's words.\n *\n * Laid out for a 390 px phone: the names sit side by side only where the form is at\n * least 20rem wide (a container query), which the narrow `AuthLayout` card is on a\n * desktop and a phone is not.\n */\nexport function RegisterForm({\n  onSubmit,\n  emailTag,\n  invitedEmail,\n  locale: localeProp,\n  defaultLocale,\n  onLocaleChange,\n  languages = ALL_CODES,\n  languageField,\n  aboveForm,\n  underEmail,\n  appFields,\n  afterFields,\n  appFieldsComplete = true,\n  termsHref,\n  privacyHref,\n  signInHref,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: RegisterFormProps) {\n  const labels = useKitLabels(\"register\", DEFAULT_REGISTER_LABELS, labelsProp);\n  const kitLocale = useKitLocale();\n  const invited = invitedEmail !== undefined;\n  const [firstName, setFirstName] = useState(\"\");\n  const [lastName, setLastName] = useState(\"\");\n  const [email, setEmail] = useState(invitedEmail ?? \"\");\n  const [password, setPassword] = useState(\"\");\n  const [confirm, setConfirm] = useState(\"\");\n  const [ownLocale, setOwnLocale] = useState<string>(\n    () => defaultLocale ?? resolveLanguage([kitLocale, ...browserLanguages()], languages),\n  );\n  const [accepted, setAccepted] = useState(false);\n  const [busy, setBusy] = useState<Busy>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const emailRef = useRef<HTMLInputElement>(null);\n  const tagHintId = useId();\n\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // What the field shows is what is submitted: the offered code the value resolves to.\n  const locale = resolveLanguage([localeProp ?? ownLocale], languages);\n  const changeLocale = (code: KitLanguageCode) => {\n    if (localeProp === undefined) setOwnLocale(code);\n    onLocaleChange?.(code);\n  };\n\n  const working = busy !== null;\n  const suggestion = emailTag ? taggedEmail(email, emailTag) : null;\n  // The invitee took the tagged address: offer the way back to the invited one.\n  const backToInvited =\n    invitedEmail !== undefined && email.trim() !== invitedEmail.trim() ? invitedEmail.trim() : null;\n  const canSubmit =\n    personNameOk(firstName) &&\n    personNameOk(lastName) &&\n    emailParts(email) !== null &&\n    newPasswordProblem(password, confirm) === null &&\n    accepted &&\n    appFieldsComplete;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: RegisterValues = {\n      firstName: firstName.trim(),\n      lastName: lastName.trim(),\n      email: email.trim(),\n      password,\n      locale,\n    };\n    setBusy(\"sending\");\n    setFailure(null);\n    setTaken(null);\n    let result: Promise<unknown>;\n    try {\n      result = Promise.resolve(onSubmit(values));\n    } catch (error) {\n      result = Promise.reject(error);\n    }\n    result.then(\n      () => {\n        if (mounted.current) setBusy(\"done\");\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error);\n        const code = authErrorCode(error);\n        if (code === \"email_taken\" && !hasMessage(own)) {\n          setTaken(values.email);\n          emailRef.current?.focus();\n          return;\n        }\n        setFailure(\n          hasMessage(own)\n            ? own\n            : code === \"registration_closed\"\n              ? labels.registrationClosed\n              : code === \"invitation_invalid\"\n                ? labels.invitationInvalid\n                : code === \"invitation_expired\"\n                  ? labels.invitationExpired\n                  : labels.failed,\n        );\n      },\n    );\n  };\n\n  return (\n    <div {...rest} className={cn(\"@container space-y-4\", className)}>\n      {aboveForm}\n      <form className=\"space-y-3\" noValidate onSubmit={submit}>\n        <div className=\"grid gap-3 @xs:grid-cols-2\">\n          <Input\n            name=\"given-name\"\n            autoComplete=\"given-name\"\n            label={labels.firstName}\n            value={firstName}\n            onChange={(e) => setFirstName(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={working}\n            required\n          />\n          <Input\n            name=\"family-name\"\n            autoComplete=\"family-name\"\n            label={labels.lastName}\n            value={lastName}\n            onChange={(e) => setLastName(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={working}\n            required\n          />\n        </div>\n\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.email}\n            value={email}\n            onChange={(e) => setEmail(e.target.value)}\n            readOnly={invited || working}\n            hint={invited ? labels.invitedEmailHint : undefined}\n            error={taken !== null && taken === email.trim() ? labels.emailTaken : undefined}\n            required\n          />\n          {/* The tag, offered rather than applied (§4.5): one click, the exact address\n              on the button, reversible by typing — or, invited, by the button back. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-[var(--text-muted)]\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n          {backToInvited !== null && (\n            <p className=\"mt-1 text-xs text-[var(--text-muted)]\">\n              <span>{labels.invitedTagNote}</span>{\" \"}\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                onClick={() => setEmail(backToInvited)}\n              >\n                {labels.emailTagUse(backToInvited)}\n              </Button>\n            </p>\n          )}\n          {underEmail}\n        </div>\n\n        <NewPasswordFields\n          password={password}\n          confirm={confirm}\n          onPasswordChange={setPassword}\n          onConfirmChange={setConfirm}\n          busy={working}\n          text={{ password: labels.password, confirm: labels.confirmPassword, mismatch: labels.passwordMismatch }}\n        />\n\n        {languageField === undefined ? (\n          <LanguageSelect\n            name=\"locale\"\n            label={labels.language}\n            value={locale}\n            codes={languages}\n            onChange={changeLocale}\n            disabled={working}\n          />\n        ) : (\n          languageField\n        )}\n\n        {appFields}\n        {afterFields}\n\n        {/* The kit's terms checkbox (legal contract §3.4). Never an error: an unticked\n            box keeps the submit disabled, so there is no failed attempt to explain. */}\n        <LegalAcceptCheckbox\n          checked={accepted}\n          onCheckedChange={setAccepted}\n          termsHref={termsHref}\n          privacyHref={privacyHref}\n          disabled={working}\n        />\n\n        {hasMessage(failure) && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n\n        <Button type=\"submit\" className=\"w-full\" disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n      {signInHref !== undefined && (\n        <p className=\"text-center text-sm text-[var(--text-secondary)]\">\n          {labels.haveAccount}{\" \"}\n          <TextLink href={signInHref} tone=\"primary\">\n            {labels.signIn}\n          </TextLink>\n        </p>\n      )}\n    </div>\n  );\n}\n"],"mappings":";AA0UQ,SACE,KADF;AA1UR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAGnD,SAAS,cAAc,oBAAoB;AAC3C,SAAS,eAAe,uBAAuB;AAE/C,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,gBAAgB;AACzB,SAAS,QAAQ,aAAa;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,YAAY,mBAAmB;AACxC,SAAS,oBAAoB,cAAc,8BAA8B;AACzE,SAAS,yBAAyB;AA2D3B,MAAM,0BAA0C;AAAA,EACrD,WAAW;AAAA,EACX,UAAU;AAAA,EACV,OAAO;AAAA,EACP,aAAa,CAAC,YAAY,OAAO,OAAO;AAAA,EACxC,cACE;AAAA,EACF,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,oBAAoB;AAAA,EACpB,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,QAAQ;AACV;AAsEA,MAAM,YAAwC,cAAc,IAAI,CAAC,aAAa,SAAS,IAAI;AAG3F,SAAS,mBAAsC;AAC7C,MAAI,OAAO,cAAc,YAAa,QAAO,CAAC;AAC9C,SAAO,UAAU,WAAW,SAAS,UAAU,YAAY,CAAC,UAAU,QAAQ;AAChF;AAqCO,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAoB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAsB;AACpB,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,YAAY,aAAa;AAC/B,QAAM,UAAU,iBAAiB;AACjC,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,EAAE;AAC7C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,gBAAgB,EAAE;AACrD,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AACzC,QAAM,CAAC,WAAW,YAAY,IAAI;AAAA,IAChC,MAAM,iBAAiB,gBAAgB,CAAC,WAAW,GAAG,iBAAiB,CAAC,GAAG,SAAS;AAAA,EACtF;AACA,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAe,IAAI;AAE3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,YAAY,MAAM;AAExB,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAGL,QAAM,SAAS,gBAAgB,CAAC,cAAc,SAAS,GAAG,SAAS;AACnE,QAAM,eAAe,CAAC,SAA0B;AAC9C,QAAI,eAAe,OAAW,cAAa,IAAI;AAC/C,qBAAiB,IAAI;AAAA,EACvB;AAEA,QAAM,UAAU,SAAS;AACzB,QAAM,aAAa,WAAW,YAAY,OAAO,QAAQ,IAAI;AAE7D,QAAM,gBACJ,iBAAiB,UAAa,MAAM,KAAK,MAAM,aAAa,KAAK,IAAI,aAAa,KAAK,IAAI;AAC7F,QAAM,YACJ,aAAa,SAAS,KACtB,aAAa,QAAQ,KACrB,WAAW,KAAK,MAAM,QACtB,mBAAmB,UAAU,OAAO,MAAM,QAC1C,YACA;AAEF,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAAyB;AAAA,MAC7B,WAAW,UAAU,KAAK;AAAA,MAC1B,UAAU,SAAS,KAAK;AAAA,MACxB,OAAO,MAAM,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AACA,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACJ,QAAI;AACF,eAAS,QAAQ,QAAQ,SAAS,MAAM,CAAC;AAAA,IAC3C,SAAS,OAAO;AACd,eAAS,QAAQ,OAAO,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,QAAQ,QAAS,SAAQ,MAAM;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,KAAK;AACjC,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,iBAAiB,CAAC,WAAW,GAAG,GAAG;AAC9C,mBAAS,OAAO,KAAK;AACrB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AACA;AAAA,UACE,WAAW,GAAG,IACV,MACA,SAAS,wBACP,OAAO,qBACP,SAAS,uBACP,OAAO,oBACP,SAAS,uBACP,OAAO,oBACP,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,wBAAwB,SAAS,GAC3D;AAAA;AAAA,IACD,qBAAC,UAAK,WAAU,aAAY,YAAU,MAAC,UAAU,QAC/C;AAAA,2BAAC,SAAI,WAAU,8BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,aAAa,EAAE,OAAO,KAAK;AAAA,YAC5C,WAAW;AAAA,YACX,UAAU;AAAA,YACV,UAAQ;AAAA;AAAA,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,WAAW;AAAA,YACX,UAAU;AAAA,YACV,UAAQ;AAAA;AAAA,QACV;AAAA,SACF;AAAA,MAEA,qBAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,YACxC,UAAU,WAAW;AAAA,YACrB,MAAM,UAAU,OAAO,mBAAmB;AAAA,YAC1C,OAAO,UAAU,QAAQ,UAAU,MAAM,KAAK,IAAI,OAAO,aAAa;AAAA,YACtE,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,yCACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,SAAS,UAAU;AAAA,cAEjC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,QAED,kBAAkB,QACjB,qBAAC,OAAE,WAAU,yCACX;AAAA,8BAAC,UAAM,iBAAO,gBAAe;AAAA,UAAQ;AAAA,UACrC;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,SAAS,MAAM,SAAS,aAAa;AAAA,cAEpC,iBAAO,YAAY,aAAa;AAAA;AAAA,UACnC;AAAA,WACF;AAAA,QAED;AAAA,SACH;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA,kBAAkB;AAAA,UAClB,iBAAiB;AAAA,UACjB,MAAM;AAAA,UACN,MAAM,EAAE,UAAU,OAAO,UAAU,SAAS,OAAO,iBAAiB,UAAU,OAAO,iBAAiB;AAAA;AAAA,MACxG;AAAA,MAEC,kBAAkB,SACjB;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,OAAO;AAAA,UACP,UAAU;AAAA,UACV,UAAU;AAAA;AAAA,MACZ,IAEA;AAAA,MAGD;AAAA,MACA;AAAA,MAID;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,iBAAiB;AAAA,UACjB;AAAA,UACA;AAAA,UACA,UAAU;AAAA;AAAA,MACZ;AAAA,MAEC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,MAGF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SACjF,iBAAO,QACV;AAAA,OACF;AAAA,IACC,eAAe,UACd,qBAAC,OAAE,WAAU,oDACV;AAAA,aAAO;AAAA,MAAa;AAAA,MACrB,oBAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,QACV;AAAA,OACF;AAAA,KAEJ;AAEJ;","names":[]}