@eifi1/ui-kit 0.28.1 → 0.30.0

package/dist/auth/accept-invitation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/accept-invitation.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { CheckCircle2, LogIn, TimerOff, XCircle } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { useAnnounce } from \"../hooks/use-announce\";\nimport { LoadingState } from \"../components/loading-state\";\nimport { Button, EmptyState } from \"../components/ui\";\nimport { authErrorCode } from \"./auth-errors\";\nimport { OUTCOME_CLASS, STATUS_HEADING_CLASS, useOncePerKey } from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the page renders — the `acceptInvitation` namespace. keksdose's words\n *  where its `/join` page has them (`budget_share.join*`). */\nexport interface AcceptInvitationLabels {\n  /** The heading. */\n  title: string;\n  /** While the invitation is accepted. */\n  accepting: string;\n  /** Accepted, when the app did not say into what. */\n  accepted: string;\n  /** Accepted, given what it attached the account to — a company, a team, a budget. */\n  joined: (name: string) => string;\n  /** Into the app, from every outcome but \"sign in first\". */\n  continue: string;\n  /** The token is unknown, spent, or for another address. */\n  invalid: string;\n  expired: string;\n  /** The page was opened without a `token`. */\n  noToken: string;\n  /** Under `invalid` and `expired`: an invitation is re-sent as a new one (§4.4). */\n  askAgain: string;\n  /** Nobody is signed in: an existing account accepts after sign-in (§4.4). */\n  signInFirst: string;\n  /** Under it. */\n  signInHint: string;\n  signIn: string;\n  /** Beside \"Sign in\", with `registerHref`. */\n  register: string;\n}\n\nexport const DEFAULT_ACCEPT_INVITATION_LABELS: AcceptInvitationLabels = {\n  title: \"Accept invitation\",\n  accepting: \"Joining…\",\n  accepted: \"Invitation accepted.\",\n  joined: (name) => `You’ve joined ${name}.`,\n  continue: \"Continue\",\n  invalid: \"Could not join with this link\",\n  expired: \"This invitation has expired\",\n  noToken: \"This link is missing its invite token.\",\n  askAgain: \"Ask the person who invited you to send a new invitation.\",\n  signInFirst: \"Sign in to accept this invitation\",\n  signInHint: \"Use the account the invitation was sent to.\",\n  signIn: \"Sign in\",\n  register: \"Create account\",\n};\n\n/* ── Types ───────────────────────────────────────────────────────────────── */\n\n/** What `onAccept` may resolve with. */\nexport interface AcceptInvitationResult {\n  /** What the invitation attached the account to, by name — \"Example Property Ltd\",\n   *  \"Team North\", a budget. Said in the confirmation. */\n  name?: string;\n}\n\n/** What became of an invitation that was not accepted. `signIn`: the server wants a\n *  session first (a `401`), which `signedIn` did not know about. */\nexport type AcceptInvitationFailure = \"invalid\" | \"expired\" | \"signIn\";\n\ntype Outcome = \"accepted\" | AcceptInvitationFailure;\n\nexport interface AcceptInvitationProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\" | \"title\"> {\n  /** The invitation's token — the app's `?invite=` / `?token=`. Empty: the link was cut\n   *  short, and the page says so without asking anyone. */\n  token: string;\n  /** Someone is signed in on this device. Until then the page asks for a sign-in and\n   *  sends nothing: accepting attaches the invitation to the SIGNED-IN account. */\n  signedIn: boolean;\n  /**\n   * Accept it — `POST /auth/invitations/accept {token}`, once per token, as soon as\n   * someone is signed in. Resolve (with what it attached the account to, if the app\n   * knows); reject with the client's error.\n   */\n  onAccept: (token: string) => Promise<AcceptInvitationResult | void | undefined>;\n  /** Which dead end a rejection is. Default: `invitation_expired` is `expired`,\n   *  anything else `invalid` (§5.2's codes). Map a `401` to `signIn` here. */\n  classifyError?: (error: unknown) => AcceptInvitationFailure;\n  /** \"Continue\" — into the app. Default `/`. */\n  continueHref?: string;\n  /** \"Sign in\" — the app's `/login`, with a way back here (`?next=…`). Default\n   *  `/login`. */\n  signInHref?: string;\n  /** \"Create account\" beside \"Sign in\", for an invitation that may lead to a new\n   *  account — the app's `/register?invite=…`. Left out, none. */\n  registerHref?: string;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it in\n   *  `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: Partial<AcceptInvitationLabels>;\n}\n\n/**\n * Accept an invitation with an EXISTING account (docs/auth-harmonization.md §4.4): the\n * link leads here, the person signs in if they are not, and the app attaches the\n * invitation — a kastlan user joining a second company, a Kurvenschmiede member a team,\n * a keksdose user a shared budget. A new address never needs this page: its link opens\n * the sign-up form, which spends the invitation itself.\n *\n * keksdose's `JoinSharePage` (features/budgets/join-page.tsx) is the model: it accepts\n * on load, once (the token is single-use, and StrictMode's double effect would send it\n * twice), and shows the outcome where its spinner was. The outcomes: accepted, with the\n * way into the app; not valid; expired (both say to ask for a new invitation, since\n * \"resend\" mints a new token); or \"sign in first\", with nothing sent. \"Continue\" REPLACES\n * this page in the history: the token is spent, so Back must not land here again.\n */\nexport function AcceptInvitation({\n  token,\n  signedIn,\n  onAccept,\n  classifyError,\n  continueHref = \"/\",\n  signInHref = \"/login\",\n  registerHref,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: AcceptInvitationProps) {\n  const labels = useKitLabels(\"acceptInvitation\", DEFAULT_ACCEPT_INVITATION_LABELS, labelsProp);\n  const [settled, setSettled] = useState<{ token: string; outcome: Outcome; name?: string } | null>(null);\n  const { announce, regionProps } = useAnnounce();\n\n  useOncePerKey(token !== \"\" && signedIn ? token : null, onAccept, (key, result) => {\n    if (result.ok) {\n      const name = result.value?.name?.trim() || undefined;\n      setSettled({ token: key, outcome: \"accepted\", name });\n      announce(name ? labels.joined(name) : labels.accepted);\n      return;\n    }\n    const failure: AcceptInvitationFailure =\n      classifyError?.(result.error) ?? (authErrorCode(result.error) === \"invitation_expired\" ? \"expired\" : \"invalid\");\n    setSettled({ token: key, outcome: failure });\n    announce(failure === \"signIn\" ? labels.signInFirst : labels[failure]);\n  });\n\n  const outcome: Outcome | \"accepting\" =\n    token === \"\"\n      ? \"invalid\"\n      : settled?.token === token\n        ? settled.outcome\n        : signedIn\n          ? \"accepting\"\n          : \"signIn\";\n\n  const continueButton = (variant: \"brand\" | \"secondary\") => (\n    <Button href={continueHref} replace variant={variant}>\n      {labels.continue}\n    </Button>\n  );\n\n  let body: ReactNode;\n  if (outcome === \"accepting\") {\n    body = <LoadingState size=\"sm\" label={labels.accepting} />;\n  } else if (outcome === \"accepted\") {\n    body = (\n      <EmptyState\n        tone=\"success\"\n        icon={<CheckCircle2 />}\n        title={settled?.name ? labels.joined(settled.name) : labels.accepted}\n        action={continueButton(\"brand\")}\n        className={OUTCOME_CLASS}\n      />\n    );\n  } else if (outcome === \"signIn\") {\n    body = (\n      <EmptyState\n        icon={<LogIn />}\n        title={labels.signInFirst}\n        hint={labels.signInHint}\n        action={\n          <>\n            <Button href={signInHref} variant=\"brand\">\n              {labels.signIn}\n            </Button>\n            {registerHref !== undefined && (\n              <Button href={registerHref} variant=\"secondary\">\n                {labels.register}\n              </Button>\n            )}\n          </>\n        }\n        className={OUTCOME_CLASS}\n      />\n    );\n  } else {\n    body = (\n      <EmptyState\n        tone=\"danger\"\n        icon={outcome === \"expired\" ? <TimerOff /> : <XCircle />}\n        title={token === \"\" ? labels.noToken : labels[outcome]}\n        hint={labels.askAgain}\n        action={signedIn ? continueButton(\"secondary\") : undefined}\n        className={OUTCOME_CLASS}\n      />\n    );\n  }\n\n  return (\n    <div\n      {...rest}\n      data-state={outcome}\n      aria-busy={outcome === \"accepting\" || undefined}\n      className={cn(\"space-y-3\", className)}\n    >\n      {title === null ? null : <Heading className={STATUS_HEADING_CLASS}>{title ?? labels.title}</Heading>}\n      {body}\n      {/* Rendered from the start, so the outcome is read when it arrives. */}\n      <div {...regionProps} />\n    </div>\n  );\n}\n"],"mappings":";AAiKI,SAyBM,UAzBN,KAyBM,YAzBN;AAjKJ,SAAS,gBAAgB;AAEzB,SAAS,cAAc,OAAO,UAAU,eAAe;AACvD,SAAS,UAAU;AACnB,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,QAAQ,kBAAkB;AACnC,SAAS,qBAAqB;AAC9B,SAAS,eAAe,sBAAsB,qBAAqB;AAkC5D,MAAM,mCAA2D;AAAA,EACtE,OAAO;AAAA,EACP,WAAW;AAAA,EACX,UAAU;AAAA,EACV,QAAQ,CAAC,SAAS,sBAAiB,IAAI;AAAA,EACvC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,UAAU;AACZ;AA+DO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EACf,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA0B;AACxB,QAAM,SAAS,aAAa,oBAAoB,kCAAkC,UAAU;AAC5F,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoE,IAAI;AACtG,QAAM,EAAE,UAAU,YAAY,IAAI,YAAY;AAE9C,gBAAc,UAAU,MAAM,WAAW,QAAQ,MAAM,UAAU,CAAC,KAAK,WAAW;AAChF,QAAI,OAAO,IAAI;AACb,YAAM,OAAO,OAAO,OAAO,MAAM,KAAK,KAAK;AAC3C,iBAAW,EAAE,OAAO,KAAK,SAAS,YAAY,KAAK,CAAC;AACpD,eAAS,OAAO,OAAO,OAAO,IAAI,IAAI,OAAO,QAAQ;AACrD;AAAA,IACF;AACA,UAAM,UACJ,gBAAgB,OAAO,KAAK,MAAM,cAAc,OAAO,KAAK,MAAM,uBAAuB,YAAY;AACvG,eAAW,EAAE,OAAO,KAAK,SAAS,QAAQ,CAAC;AAC3C,aAAS,YAAY,WAAW,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,EACtE,CAAC;AAED,QAAM,UACJ,UAAU,KACN,YACA,SAAS,UAAU,QACjB,QAAQ,UACR,WACE,cACA;AAEV,QAAM,iBAAiB,CAAC,YACtB,oBAAC,UAAO,MAAM,cAAc,SAAO,MAAC,SACjC,iBAAO,UACV;AAGF,MAAI;AACJ,MAAI,YAAY,aAAa;AAC3B,WAAO,oBAAC,gBAAa,MAAK,MAAK,OAAO,OAAO,WAAW;AAAA,EAC1D,WAAW,YAAY,YAAY;AACjC,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,gBAAa;AAAA,QACpB,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,IAAI,IAAI,OAAO;AAAA,QAC5D,QAAQ,eAAe,OAAO;AAAA,QAC9B,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ,WAAW,YAAY,UAAU;AAC/B,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,oBAAC,SAAM;AAAA,QACb,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,QACE,iCACE;AAAA,8BAAC,UAAO,MAAM,YAAY,SAAQ,SAC/B,iBAAO,QACV;AAAA,UACC,iBAAiB,UAChB,oBAAC,UAAO,MAAM,cAAc,SAAQ,aACjC,iBAAO,UACV;AAAA,WAEJ;AAAA,QAEF,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ,OAAO;AACL,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,YAAY,YAAY,oBAAC,YAAS,IAAK,oBAAC,WAAQ;AAAA,QACtD,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO,OAAO;AAAA,QACrD,MAAM,OAAO;AAAA,QACb,QAAQ,WAAW,eAAe,WAAW,IAAI;AAAA,QACjD,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,cAAY;AAAA,MACZ,aAAW,YAAY,eAAe;AAAA,MACtC,WAAW,GAAG,aAAa,SAAS;AAAA,MAEnC;AAAA,kBAAU,OAAO,OAAO,oBAAC,WAAQ,WAAW,sBAAuB,mBAAS,OAAO,OAAM;AAAA,QACzF;AAAA,QAED,oBAAC,SAAK,GAAG,aAAa;AAAA;AAAA;AAAA,EACxB;AAEJ;","names":[]}

package/dist/auth/auth-errors.d.ts

@@ -0,0 +1,139 @@
+/**
+ * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every
+ * refusal the auth routes answer carries a machine-readable `code`, and the pages
+ * recognise the CODE, never the server's sentence.
+ *
+ * Today each app's pages print the server's `detail` string (keksdose's
+ * `extractApiErrorMessage`), which is English on every locale and, on a credential
+ * check, would be an account-enumeration oracle if it ever said more than one thing.
+ * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,
+ * `402 {detail, code: "plan_budget_limit"}`); §5.2 makes that the rule for auth. Each
+ * app switches its server and its pages together (§9).
+ *
+ * - `invalid_credentials` — unknown address, wrong password AND deactivated account:
+ *   one answer, in the same time (§2.10). `401`.
+ * - `registration_closed` — the sign-up gate refused the address. `403`.
+ * - `email_taken` — an account with this address exists. `409`.
+ * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an
+ *   accept (§4.4).
+ * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is
+ *   unknown, spent or expired.
+ * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated
+ *   account gets `invalid_credentials`, because a separate answer after a correct
+ *   password would confirm a leaked one. It stays in the union only for a future server
+ *   step that is past the password (an admin view, a signed-in refresh) and may say so.
+ */
+type AuthErrorCode = "invalid_credentials" | "registration_closed" | "email_taken" | "invitation_invalid" | "invitation_expired" | "token_invalid"
+/** 0.29.1: a link that WAS valid and ran out (verification, reset) — keksdose's step-3
+ *  refusals tell it from `token_invalid`, so a page can say "expired, ask for a new one". */
+ | "token_expired" | "account_inactive";
+/**
+ * 0.30.0: the coded refusals of user administration and the account's own settings
+ * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,
+ * value for value. The same family of answer as the sign-in codes (`{detail, code}`,
+ * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.
+ *
+ * - `last_admin` — the action would leave no active admin: deactivating, demoting or
+ *   deleting the last one (in kastlan, of a company; the answer names the `companies`).
+ * - `self_action` — an admin acting on their own account where that is never allowed.
+ * - `other_companies` — kastlan: the account belongs to other companies too, so a
+ *   company admin may not deactivate it; "Remove from company" instead (§9.6).
+ * - `household_has_members` — keksdose's guard on a deletion request (§6.4).
+ * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level
+ *   asked for a typed address (or a tick), and the request carried none, or another
+ *   address (§4.2).
+ * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email
+ *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an
+ *   ended session and signs the user out, the wrong answer to a typo. Every other one
+ *   is a `409`.
+ */
+type AccountErrorCode = "last_admin" | "self_action" | "other_companies" | "household_has_members" | "confirmation_required" | "confirmation_mismatch" | "password_incorrect";
+/** Every code the kit reads: the sign-in refusals and the account ones (0.30.0). */
+type KitErrorCode = AuthErrorCode | AccountErrorCode;
+/**
+ * The code an error carries — an {@link AuthErrorCode}, or since 0.30.0 an
+ * {@link AccountErrorCode} — or `undefined` when it carries none.
+ *
+ * Reads the parsed response body wherever the apps' HTTP clients put it, without
+ * depending on any of them:
+ *
+ *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;
+ *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);
+ *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;
+ *  3. `err.body` — the generated OpenAPI clients' `ApiError`;
+ *  4. `err` itself — a body thrown as it came (`throw await res.json()`).
+ *
+ * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when
+ * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,
+ * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never
+ * read as a refusal. The HTTP status is not checked: the code is the contract, and the
+ * status differs per refusal (401, 403, 409, 410).
+ */
+declare function authErrorCode(err: unknown): KitErrorCode | undefined;
+/**
+ * Whether `err` is a coded auth refusal — any of them, or the one named:
+ *
+ * ```ts
+ * try { await api.register(values) }
+ * catch (err) { if (isAuthError(err, "email_taken")) … }
+ * ```
+ *
+ * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject
+ * with, so an app's `onSubmit` can simply let its client's error through. See
+ * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes
+ * too: `isAuthError(err, "last_admin")`.
+ */
+declare function isAuthError(err: unknown, code?: KitErrorCode): boolean;
+/**
+ * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the
+ * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through
+ * its own `describeError`, with three wordings of one sentence).
+ *
+ * A throttle carries no `code` in the contract — the STATUS is the answer, set by the
+ * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads
+ * the status, wherever the apps' HTTP clients put it, without depending on any of them:
+ *
+ *  1. `err.response.status` — axios (all three apps' clients);
+ *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and
+ *     a `Response` thrown as it came;
+ *  3. `err.statusCode` — ofetch's alias, and Node-style errors.
+ *
+ * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a
+ * `Retry-After` header, and the status is the one signal every limiter gives.
+ *
+ * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`
+ * call it AFTER the app's `describeError` — an app with words of its own keeps them —
+ * and before their generic failure, so "Too many attempts. Try again in 30 s." (with
+ * {@link retryAfterSeconds}) or "… Wait a moment and try again." needs no app code.
+ */
+declare function isRateLimited(err: unknown): boolean;
+/**
+ * How long a throttled request asks to wait, in whole seconds — its `Retry-After`
+ * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`
+ * when there is none, or none that parses.
+ *
+ * Read where the apps' clients keep the response headers, without depending on any of
+ * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's
+ * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as
+ * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`
+ * (default: the present moment) — never below 0.
+ *
+ * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:
+ * "Too many attempts. Try again in 30 s." — and, without one, "… Wait a moment and try
+ * again." A browser only exposes `Retry-After` to a cross-origin page when the server
+ * lists it in `Access-Control-Expose-Headers`.
+ */
+declare function retryAfterSeconds(err: unknown, now?: number | Date): number | undefined;
+/**
+ * The English of every `rateLimited` label (0.30.0): "Too many attempts. Try again in
+ * 30 s." with a wait under a minute, in whole minutes from one minute up (keksdose's
+ * reset throttle answers in hours, and "3600 s" is a number nobody reads), and "Wait a
+ * moment and try again." without one — or with a `0`.
+ *
+ * @internal The namespaces' English; not part of the barrel.
+ */
+declare function englishRateLimited(seconds?: number): string;
+/** "30 s", "2 min" — a wait in English, rounded up. @internal */
+declare function englishWait(seconds: number): string;
+
+export { type AccountErrorCode, type AuthErrorCode, type KitErrorCode, authErrorCode, englishRateLimited, englishWait, isAuthError, isRateLimited, retryAfterSeconds };

package/dist/auth/auth-errors.js

@@ -0,0 +1,92 @@
+"use client";
+const CODES = /* @__PURE__ */ new Set([
+  "invalid_credentials",
+  "registration_closed",
+  "email_taken",
+  "invitation_invalid",
+  "invitation_expired",
+  "token_invalid",
+  "token_expired",
+  "account_inactive",
+  "last_admin",
+  "self_action",
+  "other_companies",
+  "household_has_members",
+  "confirmation_required",
+  "confirmation_mismatch",
+  "password_incorrect"
+]);
+const isBag = (value) => typeof value === "object" && value !== null;
+function known(value) {
+  return typeof value === "string" && CODES.has(value) ? value : void 0;
+}
+function codeOfBody(body) {
+  if (!isBag(body)) return void 0;
+  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : void 0);
+}
+function authErrorCode(err) {
+  if (!isBag(err)) return void 0;
+  const response = err.response;
+  return (isBag(response) ? codeOfBody(response.data) : void 0) ?? codeOfBody(err.data) ?? codeOfBody(err.body) ?? codeOfBody(err);
+}
+function isAuthError(err, code) {
+  const found = authErrorCode(err);
+  return found !== void 0 && (code === void 0 || found === code);
+}
+function statusOf(value) {
+  return typeof value === "number" && Number.isInteger(value) ? value : void 0;
+}
+function isRateLimited(err) {
+  if (!isBag(err)) return false;
+  const response = err.response;
+  const status = (isBag(response) ? statusOf(response.status) : void 0) ?? statusOf(err.status) ?? statusOf(err.statusCode);
+  return status === 429;
+}
+function headerOf(headers, name) {
+  if (!isBag(headers)) return void 0;
+  if (typeof headers.get === "function") {
+    try {
+      const value = headers.get.call(headers, name);
+      if (value !== void 0 && value !== null) return value;
+    } catch {
+    }
+  }
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === name) return value;
+  }
+  return void 0;
+}
+function parseRetryAfter(value, now) {
+  const raw = Array.isArray(value) ? value[0] : value;
+  if (typeof raw === "number") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : void 0;
+  if (typeof raw !== "string") return void 0;
+  const text = raw.trim();
+  if (/^\d+$/.test(text)) return Number(text);
+  if (!/[a-z]/i.test(text)) return void 0;
+  const at = Date.parse(text);
+  if (Number.isNaN(at)) return void 0;
+  return Math.max(0, Math.ceil((at - now) / 1e3));
+}
+function retryAfterSeconds(err, now = Date.now()) {
+  if (!isBag(err)) return void 0;
+  const at = typeof now === "number" ? now : now.getTime();
+  const response = err.response;
+  const value = (isBag(response) ? headerOf(response.headers, "retry-after") : void 0) ?? headerOf(err.headers, "retry-after");
+  return value === void 0 ? void 0 : parseRetryAfter(value, at);
+}
+function englishRateLimited(seconds) {
+  if (!seconds || seconds <= 0) return "Too many attempts. Wait a moment and try again.";
+  return `Too many attempts. Try again in ${englishWait(seconds)}.`;
+}
+function englishWait(seconds) {
+  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;
+}
+export {
+  authErrorCode,
+  englishRateLimited,
+  englishWait,
+  isAuthError,
+  isRateLimited,
+  retryAfterSeconds
+};
+//# sourceMappingURL=auth-errors.js.map

package/dist/auth/auth-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  /** 0.29.1: a link that WAS valid and ran out (verification, reset) — keksdose's step-3\n   *  refusals tell it from `token_invalid`, so a page can say \"expired, ask for a new one\". */\n  | \"token_expired\"\n  | \"account_inactive\";\n\n/**\n * 0.30.0: the coded refusals of user administration and the account's own settings\n * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,\n * value for value. The same family of answer as the sign-in codes (`{detail, code}`,\n * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.\n *\n * - `last_admin` — the action would leave no active admin: deactivating, demoting or\n *   deleting the last one (in kastlan, of a company; the answer names the `companies`).\n * - `self_action` — an admin acting on their own account where that is never allowed.\n * - `other_companies` — kastlan: the account belongs to other companies too, so a\n *   company admin may not deactivate it; \"Remove from company\" instead (§9.6).\n * - `household_has_members` — keksdose's guard on a deletion request (§6.4).\n * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level\n *   asked for a typed address (or a tick), and the request carried none, or another\n *   address (§4.2).\n * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email\n *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an\n *   ended session and signs the user out, the wrong answer to a typo. Every other one\n *   is a `409`.\n */\nexport type AccountErrorCode =\n  | \"last_admin\"\n  | \"self_action\"\n  | \"other_companies\"\n  | \"household_has_members\"\n  | \"confirmation_required\"\n  | \"confirmation_mismatch\"\n  | \"password_incorrect\";\n\n/** Every code the kit reads: the sign-in refusals and the account ones (0.30.0). */\nexport type KitErrorCode = AuthErrorCode | AccountErrorCode;\n\nconst CODES: ReadonlySet<string> = new Set<KitErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"token_expired\",\n  \"account_inactive\",\n  \"last_admin\",\n  \"self_action\",\n  \"other_companies\",\n  \"household_has_members\",\n  \"confirmation_required\",\n  \"confirmation_mismatch\",\n  \"password_incorrect\",\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): KitErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as KitErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): KitErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The code an error carries — an {@link AuthErrorCode}, or since 0.30.0 an\n * {@link AccountErrorCode} — or `undefined` when it carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 403, 409, 410).\n */\nexport function authErrorCode(err: unknown): KitErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes\n * too: `isAuthError(err, \"last_admin\")`.\n */\nexport function isAuthError(err: unknown, code?: KitErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n\n/** An HTTP status as a number, or undefined. */\nfunction statusOf(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isInteger(value) ? value : undefined;\n}\n\n/**\n * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the\n * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through\n * its own `describeError`, with three wordings of one sentence).\n *\n * A throttle carries no `code` in the contract — the STATUS is the answer, set by the\n * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads\n * the status, wherever the apps' HTTP clients put it, without depending on any of them:\n *\n *  1. `err.response.status` — axios (all three apps' clients);\n *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and\n *     a `Response` thrown as it came;\n *  3. `err.statusCode` — ofetch's alias, and Node-style errors.\n *\n * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a\n * `Retry-After` header, and the status is the one signal every limiter gives.\n *\n * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`\n * call it AFTER the app's `describeError` — an app with words of its own keeps them —\n * and before their generic failure, so \"Too many attempts. Try again in 30 s.\" (with\n * {@link retryAfterSeconds}) or \"… Wait a moment and try again.\" needs no app code.\n */\nexport function isRateLimited(err: unknown): boolean {\n  if (!isBag(err)) return false;\n  const response = err.response;\n  const status =\n    (isBag(response) ? statusOf(response.status) : undefined) ?? statusOf(err.status) ?? statusOf(err.statusCode);\n  return status === 429;\n}\n\n/** A header's value from a `Headers` (fetch, ofetch's `response`), axios' `AxiosHeaders`\n *  or a plain record — whose keys may come in any case. */\nfunction headerOf(headers: unknown, name: string): unknown {\n  if (!isBag(headers)) return undefined;\n  if (typeof headers.get === \"function\") {\n    try {\n      const value: unknown = (headers.get as (key: string) => unknown).call(headers, name);\n      if (value !== undefined && value !== null) return value;\n    } catch {\n      // A `get` that is not a header lookup; the record below is.\n    }\n  }\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === name) return value;\n  }\n  return undefined;\n}\n\n/** `Retry-After` as seconds from `now`: delta-seconds (\"30\"), or an HTTP date\n *  (\"Wed, 07 Oct 2026 10:00:00 GMT\") counted from now, never below 0 (RFC 9110 §10.2.3). */\nfunction parseRetryAfter(value: unknown, now: number): number | undefined {\n  const raw = Array.isArray(value) ? (value as unknown[])[0] : value;\n  if (typeof raw === \"number\") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : undefined;\n  if (typeof raw !== \"string\") return undefined;\n  const text = raw.trim();\n  if (/^\\d+$/.test(text)) return Number(text);\n  // An HTTP date names its day and month (\"Wed, 07 Oct 2026 …\"). Without a letter it is\n  // a malformed number (\"-5\", \"1.5\"), which `Date.parse` would happily read as a year.\n  if (!/[a-z]/i.test(text)) return undefined;\n  const at = Date.parse(text);\n  if (Number.isNaN(at)) return undefined;\n  return Math.max(0, Math.ceil((at - now) / 1000));\n}\n\n/**\n * How long a throttled request asks to wait, in whole seconds — its `Retry-After`\n * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`\n * when there is none, or none that parses.\n *\n * Read where the apps' clients keep the response headers, without depending on any of\n * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's\n * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as\n * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`\n * (default: the present moment) — never below 0.\n *\n * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:\n * \"Too many attempts. Try again in 30 s.\" — and, without one, \"… Wait a moment and try\n * again.\" A browser only exposes `Retry-After` to a cross-origin page when the server\n * lists it in `Access-Control-Expose-Headers`.\n */\nexport function retryAfterSeconds(err: unknown, now: number | Date = Date.now()): number | undefined {\n  if (!isBag(err)) return undefined;\n  const at = typeof now === \"number\" ? now : now.getTime();\n  const response = err.response;\n  const value =\n    (isBag(response) ? headerOf(response.headers, \"retry-after\") : undefined) ?? headerOf(err.headers, \"retry-after\");\n  return value === undefined ? undefined : parseRetryAfter(value, at);\n}\n\n/**\n * The English of every `rateLimited` label (0.30.0): \"Too many attempts. Try again in\n * 30 s.\" with a wait under a minute, in whole minutes from one minute up (keksdose's\n * reset throttle answers in hours, and \"3600 s\" is a number nobody reads), and \"Wait a\n * moment and try again.\" without one — or with a `0`.\n *\n * @internal The namespaces' English; not part of the barrel.\n */\nexport function englishRateLimited(seconds?: number): string {\n  if (!seconds || seconds <= 0) return \"Too many attempts. Wait a moment and try again.\";\n  return `Too many attempts. Try again in ${englishWait(seconds)}.`;\n}\n\n/** \"30 s\", \"2 min\" — a wait in English, rounded up. @internal */\nexport function englishWait(seconds: number): string {\n  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;\n}\n"],"mappings":";AAqEA,MAAM,QAA6B,oBAAI,IAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA0C;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAAyB;AACnF;AAIA,SAAS,WAAW,MAAyC;AAC3D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAqBO,SAAS,cAAc,KAAwC;AACpE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAeO,SAAS,YAAY,KAAc,MAA8B;AACtE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;AAGA,SAAS,SAAS,OAAoC;AACpD,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,IAAI,QAAQ;AACxE;AAwBO,SAAS,cAAc,KAAuB;AACnD,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,QAAM,UACH,MAAM,QAAQ,IAAI,SAAS,SAAS,MAAM,IAAI,WAAc,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9G,SAAO,WAAW;AACpB;AAIA,SAAS,SAAS,SAAkB,MAAuB;AACzD,MAAI,CAAC,MAAM,OAAO,EAAG,QAAO;AAC5B,MAAI,OAAO,QAAQ,QAAQ,YAAY;AACrC,QAAI;AACF,YAAM,QAAkB,QAAQ,IAAiC,KAAK,SAAS,IAAI;AACnF,UAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAAA,IACpD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,KAAM,QAAO;AAAA,EACzC;AACA,SAAO;AACT;AAIA,SAAS,gBAAgB,OAAgB,KAAiC;AACxE,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAK,MAAoB,CAAC,IAAI;AAC7D,MAAI,OAAO,QAAQ,SAAU,QAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI;AACxF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO,OAAO,IAAI;AAG1C,MAAI,CAAC,SAAS,KAAK,IAAI,EAAG,QAAO;AACjC,QAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,GAAI,CAAC;AACjD;AAkBO,SAAS,kBAAkB,KAAc,MAAqB,KAAK,IAAI,GAAuB;AACnG,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,KAAK,OAAO,QAAQ,WAAW,MAAM,IAAI,QAAQ;AACvD,QAAM,WAAW,IAAI;AACrB,QAAM,SACH,MAAM,QAAQ,IAAI,SAAS,SAAS,SAAS,aAAa,IAAI,WAAc,SAAS,IAAI,SAAS,aAAa;AAClH,SAAO,UAAU,SAAY,SAAY,gBAAgB,OAAO,EAAE;AACpE;AAUO,SAAS,mBAAmB,SAA0B;AAC3D,MAAI,CAAC,WAAW,WAAW,EAAG,QAAO;AACrC,SAAO,mCAAmC,YAAY,OAAO,CAAC;AAChE;AAGO,SAAS,YAAY,SAAyB;AACnD,SAAO,UAAU,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG,KAAK,KAAK,UAAU,EAAE,CAAC;AAC9E;","names":[]}

package/dist/auth/complete-name-dialog.d.ts

@@ -0,0 +1,71 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+
+/** What `CompleteNameDialog` hands `onSave`: both names, trimmed, 1–120 characters —
+ *  `PATCH /auth/me {first_name, last_name}` (§6.1). */
+interface CompleteNameValues {
+    firstName: string;
+    lastName: string;
+}
+/**
+ * Every string the dialog renders — the `completeName` namespace of `<UiKitProvider
+ * labels>`, overridable per instance through `labels`.
+ */
+interface CompleteNameLabels {
+    title: string;
+    description: string;
+    firstName: string;
+    lastName: string;
+    save: string;
+    /** Dismisses the dialog until the next sign-in. */
+    later: string;
+    /** Under the fields when `onSave` rejected and the app passed no `error`. */
+    failed: string;
+}
+declare const DEFAULT_COMPLETE_NAME_LABELS: CompleteNameLabels;
+interface CompleteNameDialogProps {
+    /** What the account holds now — after the migration, the old display name (§3.3). */
+    firstName?: string;
+    /** Usually empty: that is why the dialog is up. */
+    lastName?: string;
+    /**
+     * Save the names (`PATCH /auth/me`). Resolve and the dialog closes (`onClose(true)`);
+     * reject and it stays open with the names kept and `error` — or "Your name could not
+     * be saved" — under them.
+     */
+    onSave: (values: CompleteNameValues) => Promise<unknown>;
+    /**
+     * The dialog has closed: `true` after a resolved `onSave`, `false` for "Later", Escape,
+     * the backdrop and Back. `false` only DEFERS it: the app shows it again after the
+     * next sign-in while `/auth/me` still answers `name_incomplete: true`.
+     */
+    onClose: (saved: boolean) => void;
+    /** The app's words for the last failed save, instead of `labels.failed`. Hidden again
+     *  once a name is edited. */
+    error?: ReactNode;
+    /** Kept-mounted mode, as on `Modal`: left out, the dialog is open while mounted. */
+    open?: boolean;
+    labels?: Partial<CompleteNameLabels>;
+}
+/**
+ * "Complete your name" — asked once after sign-in of a user whose name was migrated
+ * (docs/auth-harmonization.md §3.3). keksdose's and Kurvenschmiede's accounts had one
+ * `display_name`; it moved whole into `first_name`, `last_name` stayed empty, and
+ * nothing was split by guesswork (§2.4). The app shows this while `/auth/me` answers
+ * `name_incomplete: true` — never for a demo user.
+ *
+ * Both names prefilled with what is there; "Save" waits until both have 1–120
+ * characters after trimming. **"Later" only defers it**: nothing else waits on a
+ * complete name, no page is blocked, and the app asks again at the next sign-in.
+ *
+ * The promise handling is `ReauthDialog`'s: busy while `onSave` runs (the fields
+ * read-only, "Later" disabled, Escape held — a request that has left cannot be called
+ * back by closing the dialog), closed on resolve, kept open on reject. Save is a
+ * `commit` control, so a `WriteLockProvider` above it locks it with its reason.
+ *
+ * Focus starts in the first EMPTY field — the last name, as a rule — because filling it
+ * in is the whole of what the dialog is for.
+ */
+declare function CompleteNameDialog({ firstName: initialFirst, lastName: initialLast, onSave, onClose, error, open, labels: labelsProp, }: CompleteNameDialogProps): react.JSX.Element;
+
+export { CompleteNameDialog, type CompleteNameDialogProps, type CompleteNameLabels, type CompleteNameValues, DEFAULT_COMPLETE_NAME_LABELS };

package/dist/auth/complete-name-dialog.js

@@ -0,0 +1,168 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { useContext, useEffect, useId, useRef, useState } from "react";
+import { useKitLabels } from "../i18n/kit-labels.js";
+import { usePromisePending } from "../components/danger-confirm.js";
+import { DialogFrame } from "../components/dialog-frame.js";
+import { ModalCloseContext } from "../components/modal.js";
+import { Button, Input } from "../components/ui.js";
+import { personNameOk, PERSON_NAME_MAX_LENGTH } from "./form-rules.js";
+const DEFAULT_COMPLETE_NAME_LABELS = {
+  title: "Complete your name",
+  description: "First and last name are now asked for separately. Check what is filled in and add what is missing.",
+  firstName: "First name",
+  lastName: "Last name",
+  save: "Save",
+  later: "Later",
+  failed: "Your name could not be saved. Please try again."
+};
+function CompleteNameDialog({
+  firstName: initialFirst = "",
+  lastName: initialLast = "",
+  onSave,
+  onClose,
+  error,
+  open,
+  labels: labelsProp
+}) {
+  const labels = useKitLabels("completeName", DEFAULT_COMPLETE_NAME_LABELS, labelsProp);
+  const [first, setFirst] = useState(initialFirst);
+  const [last, setLast] = useState(initialLast);
+  const [failed, setFailed] = useState(false);
+  const { pending, run } = usePromisePending();
+  const [done, setDone] = useState(false);
+  const saved = useRef(false);
+  const formId = useId();
+  const firstRef = useRef(null);
+  const lastRef = useRef(null);
+  const isOpen = open ?? true;
+  const [wasOpen, setWasOpen] = useState(isOpen);
+  if (wasOpen !== isOpen) {
+    setWasOpen(isOpen);
+    if (isOpen) {
+      setFirst(initialFirst);
+      setLast(initialLast);
+      setFailed(false);
+      setDone(false);
+    }
+  }
+  useEffect(() => {
+    if (!isOpen) return;
+    saved.current = false;
+    const target = firstRef.current?.value.trim() ? lastRef.current : firstRef.current;
+    target?.focus();
+  }, [isOpen]);
+  const canSave = personNameOk(first) && personNameOk(last);
+  const submit = () => {
+    if (pending || !canSave) return;
+    setFailed(false);
+    const values = { firstName: first.trim(), lastName: last.trim() };
+    let result;
+    try {
+      result = Promise.resolve(onSave(values));
+    } catch (err) {
+      result = Promise.reject(err);
+    }
+    result.catch(() => setFailed(true));
+    run(result, () => {
+      saved.current = true;
+      setDone(true);
+    });
+  };
+  const edit = (set) => (value) => {
+    set(value);
+    setFailed(false);
+  };
+  const message = failed ? error ?? labels.failed : void 0;
+  return /* @__PURE__ */ jsx(
+    DialogFrame,
+    {
+      open,
+      title: labels.title,
+      description: labels.description,
+      onClose: () => onClose(saved.current),
+      onKeyDown: (e) => {
+        if (pending && e.key === "Escape") e.preventDefault();
+      },
+      "aria-busy": pending || void 0,
+      actions: /* @__PURE__ */ jsx(
+        CompleteNameActions,
+        {
+          formId,
+          done,
+          busy: pending,
+          canSave,
+          laterLabel: labels.later,
+          saveLabel: labels.save
+        }
+      ),
+      children: /* @__PURE__ */ jsxs(
+        "form",
+        {
+          id: formId,
+          noValidate: true,
+          className: "grid gap-3 @container",
+          onSubmit: (e) => {
+            e.preventDefault();
+            submit();
+          },
+          children: [
+            /* @__PURE__ */ jsxs("div", { className: "grid gap-3 @xs:grid-cols-2", children: [
+              /* @__PURE__ */ jsx(
+                Input,
+                {
+                  ref: firstRef,
+                  name: "given-name",
+                  autoComplete: "given-name",
+                  label: labels.firstName,
+                  value: first,
+                  onChange: (e) => edit(setFirst)(e.target.value),
+                  maxLength: PERSON_NAME_MAX_LENGTH,
+                  readOnly: pending,
+                  required: true
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Input,
+                {
+                  ref: lastRef,
+                  name: "family-name",
+                  autoComplete: "family-name",
+                  label: labels.lastName,
+                  value: last,
+                  onChange: (e) => edit(setLast)(e.target.value),
+                  maxLength: PERSON_NAME_MAX_LENGTH,
+                  readOnly: pending,
+                  required: true
+                }
+              )
+            ] }),
+            message !== void 0 && /* @__PURE__ */ jsx("p", { role: "alert", className: "text-xs text-[var(--danger)]", children: message })
+          ]
+        }
+      )
+    }
+  );
+}
+function CompleteNameActions({
+  formId,
+  done,
+  busy,
+  canSave,
+  laterLabel,
+  saveLabel
+}) {
+  const close = useContext(ModalCloseContext);
+  useEffect(() => {
+    if (done) close?.();
+  }, [done, close]);
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", disabled: busy, onClick: () => close?.(), children: laterLabel }),
+    /* @__PURE__ */ jsx(Button, { type: "submit", form: formId, commit: true, disabled: !busy && !canSave, pending: busy, children: saveLabel })
+  ] });
+}
+export {
+  CompleteNameDialog,
+  DEFAULT_COMPLETE_NAME_LABELS
+};
+//# sourceMappingURL=complete-name-dialog.js.map

package/dist/auth/complete-name-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/complete-name-dialog.tsx"],"sourcesContent":["import { useContext, useEffect, useId, useRef, useState } from \"react\";\nimport type { KeyboardEvent, ReactNode } from \"react\";\n\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { usePromisePending } from \"../components/danger-confirm\";\nimport { DialogFrame } from \"../components/dialog-frame\";\nimport { ModalCloseContext } from \"../components/modal\";\nimport { Button, Input } from \"../components/ui\";\nimport { personNameOk, PERSON_NAME_MAX_LENGTH } from \"./form-rules\";\n\n/** What `CompleteNameDialog` hands `onSave`: both names, trimmed, 1–120 characters —\n *  `PATCH /auth/me {first_name, last_name}` (§6.1). */\nexport interface CompleteNameValues {\n  firstName: string;\n  lastName: string;\n}\n\n/**\n * Every string the dialog renders — the `completeName` namespace of `<UiKitProvider\n * labels>`, overridable per instance through `labels`.\n */\nexport interface CompleteNameLabels {\n  title: string;\n  description: string;\n  firstName: string;\n  lastName: string;\n  save: string;\n  /** Dismisses the dialog until the next sign-in. */\n  later: string;\n  /** Under the fields when `onSave` rejected and the app passed no `error`. */\n  failed: string;\n}\n\nexport const DEFAULT_COMPLETE_NAME_LABELS: CompleteNameLabels = {\n  title: \"Complete your name\",\n  description: \"First and last name are now asked for separately. Check what is filled in and add what is missing.\",\n  firstName: \"First name\",\n  lastName: \"Last name\",\n  save: \"Save\",\n  later: \"Later\",\n  failed: \"Your name could not be saved. Please try again.\",\n};\n\nexport interface CompleteNameDialogProps {\n  /** What the account holds now — after the migration, the old display name (§3.3). */\n  firstName?: string;\n  /** Usually empty: that is why the dialog is up. */\n  lastName?: string;\n  /**\n   * Save the names (`PATCH /auth/me`). Resolve and the dialog closes (`onClose(true)`);\n   * reject and it stays open with the names kept and `error` — or \"Your name could not\n   * be saved\" — under them.\n   */\n  onSave: (values: CompleteNameValues) => Promise<unknown>;\n  /**\n   * The dialog has closed: `true` after a resolved `onSave`, `false` for \"Later\", Escape,\n   * the backdrop and Back. `false` only DEFERS it: the app shows it again after the\n   * next sign-in while `/auth/me` still answers `name_incomplete: true`.\n   */\n  onClose: (saved: boolean) => void;\n  /** The app's words for the last failed save, instead of `labels.failed`. Hidden again\n   *  once a name is edited. */\n  error?: ReactNode;\n  /** Kept-mounted mode, as on `Modal`: left out, the dialog is open while mounted. */\n  open?: boolean;\n  labels?: Partial<CompleteNameLabels>;\n}\n\n/**\n * \"Complete your name\" — asked once after sign-in of a user whose name was migrated\n * (docs/auth-harmonization.md §3.3). keksdose's and Kurvenschmiede's accounts had one\n * `display_name`; it moved whole into `first_name`, `last_name` stayed empty, and\n * nothing was split by guesswork (§2.4). The app shows this while `/auth/me` answers\n * `name_incomplete: true` — never for a demo user.\n *\n * Both names prefilled with what is there; \"Save\" waits until both have 1–120\n * characters after trimming. **\"Later\" only defers it**: nothing else waits on a\n * complete name, no page is blocked, and the app asks again at the next sign-in.\n *\n * The promise handling is `ReauthDialog`'s: busy while `onSave` runs (the fields\n * read-only, \"Later\" disabled, Escape held — a request that has left cannot be called\n * back by closing the dialog), closed on resolve, kept open on reject. Save is a\n * `commit` control, so a `WriteLockProvider` above it locks it with its reason.\n *\n * Focus starts in the first EMPTY field — the last name, as a rule — because filling it\n * in is the whole of what the dialog is for.\n */\nexport function CompleteNameDialog({\n  firstName: initialFirst = \"\",\n  lastName: initialLast = \"\",\n  onSave,\n  onClose,\n  error,\n  open,\n  labels: labelsProp,\n}: CompleteNameDialogProps) {\n  const labels = useKitLabels(\"completeName\", DEFAULT_COMPLETE_NAME_LABELS, labelsProp);\n  const [first, setFirst] = useState(initialFirst);\n  const [last, setLast] = useState(initialLast);\n  // A failed save describes the names that were sent; an edit makes it stale.\n  const [failed, setFailed] = useState(false);\n  const { pending, run } = usePromisePending();\n  const [done, setDone] = useState(false);\n  const saved = useRef(false);\n  const formId = useId();\n  const firstRef = useRef<HTMLInputElement>(null);\n  const lastRef = useRef<HTMLInputElement>(null);\n  const isOpen = open ?? true;\n\n  // Reopened (kept-mounted): start again from what the account holds. During render,\n  // as ReauthDialog wipes its password, so no frame shows the old draft.\n  const [wasOpen, setWasOpen] = useState(isOpen);\n  if (wasOpen !== isOpen) {\n    setWasOpen(isOpen);\n    if (isOpen) {\n      setFirst(initialFirst);\n      setLast(initialLast);\n      setFailed(false);\n      setDone(false);\n    }\n  }\n\n  // After Modal's own effect, so its trap has recorded the trigger before focus moves.\n  useEffect(() => {\n    if (!isOpen) return;\n    saved.current = false;\n    const target = firstRef.current?.value.trim() ? lastRef.current : firstRef.current;\n    target?.focus();\n  }, [isOpen]);\n\n  const canSave = personNameOk(first) && personNameOk(last);\n\n  const submit = () => {\n    if (pending || !canSave) return;\n    setFailed(false);\n    const values = { firstName: first.trim(), lastName: last.trim() };\n    let result: Promise<unknown>;\n    try {\n      result = Promise.resolve(onSave(values));\n    } catch (err) {\n      result = Promise.reject(err);\n    }\n    // A rejection must not go unhandled; usePromisePending clears `pending` on it.\n    result.catch(() => setFailed(true));\n    run(result, () => {\n      saved.current = true;\n      setDone(true);\n    });\n  };\n\n  const edit = (set: (value: string) => void) => (value: string) => {\n    set(value);\n    setFailed(false);\n  };\n\n  const message = failed ? (error ?? labels.failed) : undefined;\n\n  return (\n    <DialogFrame\n      open={open}\n      title={labels.title}\n      description={labels.description}\n      onClose={() => onClose(saved.current)}\n      onKeyDown={(e: KeyboardEvent<HTMLDivElement>) => {\n        if (pending && e.key === \"Escape\") e.preventDefault();\n      }}\n      aria-busy={pending || undefined}\n      actions={\n        <CompleteNameActions\n          formId={formId}\n          done={done}\n          busy={pending}\n          canSave={canSave}\n          laterLabel={labels.later}\n          saveLabel={labels.save}\n        />\n      }\n    >\n      <form\n        id={formId}\n        noValidate\n        className=\"grid gap-3 @container\"\n        onSubmit={(e) => {\n          e.preventDefault();\n          submit();\n        }}\n      >\n        <div className=\"grid gap-3 @xs:grid-cols-2\">\n          <Input\n            ref={firstRef}\n            name=\"given-name\"\n            autoComplete=\"given-name\"\n            label={labels.firstName}\n            value={first}\n            onChange={(e) => edit(setFirst)(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={pending}\n            required\n          />\n          <Input\n            ref={lastRef}\n            name=\"family-name\"\n            autoComplete=\"family-name\"\n            label={labels.lastName}\n            value={last}\n            onChange={(e) => edit(setLast)(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={pending}\n            required\n          />\n        </div>\n        {message !== undefined && (\n          <p role=\"alert\" className=\"text-xs text-[var(--danger)]\">\n            {message}\n          </p>\n        )}\n      </form>\n    </DialogFrame>\n  );\n}\n\n/** The actions row, inside the `Modal`, where its animated close is in context: a\n *  resolved save lowers the panel through it, as \"Later\" and Escape do. */\nfunction CompleteNameActions({\n  formId,\n  done,\n  busy,\n  canSave,\n  laterLabel,\n  saveLabel,\n}: {\n  formId: string;\n  done: boolean;\n  busy: boolean;\n  canSave: boolean;\n  laterLabel: string;\n  saveLabel: string;\n}) {\n  const close = useContext(ModalCloseContext);\n  useEffect(() => {\n    if (done) close?.();\n  }, [done, close]);\n  return (\n    <>\n      <Button type=\"button\" variant=\"ghost\" disabled={busy} onClick={() => close?.()}>\n        {laterLabel}\n      </Button>\n      <Button type=\"submit\" form={formId} commit disabled={!busy && !canSave} pending={busy}>\n        {saveLabel}\n      </Button>\n    </>\n  );\n}\n"],"mappings":";AAwKQ,SA2EJ,UA3EI,KAmBA,YAnBA;AAxKR,SAAS,YAAY,WAAW,OAAO,QAAQ,gBAAgB;AAG/D,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAClC,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,QAAQ,aAAa;AAC9B,SAAS,cAAc,8BAA8B;AAyB9C,MAAM,+BAAmD;AAAA,EAC9D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,WAAW;AAAA,EACX,UAAU;AAAA,EACV,MAAM;AAAA,EACN,OAAO;AAAA,EACP,QAAQ;AACV;AA8CO,SAAS,mBAAmB;AAAA,EACjC,WAAW,eAAe;AAAA,EAC1B,UAAU,cAAc;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AACV,GAA4B;AAC1B,QAAM,SAAS,aAAa,gBAAgB,8BAA8B,UAAU;AACpF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,WAAW;AAE5C,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,EAAE,SAAS,IAAI,IAAI,kBAAkB;AAC3C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,QAAQ,OAAO,KAAK;AAC1B,QAAM,SAAS,MAAM;AACrB,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,UAAU,OAAyB,IAAI;AAC7C,QAAM,SAAS,QAAQ;AAIvB,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,MAAM;AAC7C,MAAI,YAAY,QAAQ;AACtB,eAAW,MAAM;AACjB,QAAI,QAAQ;AACV,eAAS,YAAY;AACrB,cAAQ,WAAW;AACnB,gBAAU,KAAK;AACf,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAGA,YAAU,MAAM;AACd,QAAI,CAAC,OAAQ;AACb,UAAM,UAAU;AAChB,UAAM,SAAS,SAAS,SAAS,MAAM,KAAK,IAAI,QAAQ,UAAU,SAAS;AAC3E,YAAQ,MAAM;AAAA,EAChB,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,UAAU,aAAa,KAAK,KAAK,aAAa,IAAI;AAExD,QAAM,SAAS,MAAM;AACnB,QAAI,WAAW,CAAC,QAAS;AACzB,cAAU,KAAK;AACf,UAAM,SAAS,EAAE,WAAW,MAAM,KAAK,GAAG,UAAU,KAAK,KAAK,EAAE;AAChE,QAAI;AACJ,QAAI;AACF,eAAS,QAAQ,QAAQ,OAAO,MAAM,CAAC;AAAA,IACzC,SAAS,KAAK;AACZ,eAAS,QAAQ,OAAO,GAAG;AAAA,IAC7B;AAEA,WAAO,MAAM,MAAM,UAAU,IAAI,CAAC;AAClC,QAAI,QAAQ,MAAM;AAChB,YAAM,UAAU;AAChB,cAAQ,IAAI;AAAA,IACd,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,CAAC,QAAiC,CAAC,UAAkB;AAChE,QAAI,KAAK;AACT,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,SAAU,SAAS,OAAO,SAAU;AAEpD,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA,OAAO,OAAO;AAAA,MACd,aAAa,OAAO;AAAA,MACpB,SAAS,MAAM,QAAQ,MAAM,OAAO;AAAA,MACpC,WAAW,CAAC,MAAqC;AAC/C,YAAI,WAAW,EAAE,QAAQ,SAAU,GAAE,eAAe;AAAA,MACtD;AAAA,MACA,aAAW,WAAW;AAAA,MACtB,SACE;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA,MAAM;AAAA,UACN;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,WAAW,OAAO;AAAA;AAAA,MACpB;AAAA,MAGF;AAAA,QAAC;AAAA;AAAA,UACC,IAAI;AAAA,UACJ,YAAU;AAAA,UACV,WAAU;AAAA,UACV,UAAU,CAAC,MAAM;AACf,cAAE,eAAe;AACjB,mBAAO;AAAA,UACT;AAAA,UAEA;AAAA,iCAAC,SAAI,WAAU,8BACb;AAAA;AAAA,gBAAC;AAAA;AAAA,kBACC,KAAK;AAAA,kBACL,MAAK;AAAA,kBACL,cAAa;AAAA,kBACb,OAAO,OAAO;AAAA,kBACd,OAAO;AAAA,kBACP,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,EAAE,OAAO,KAAK;AAAA,kBAC9C,WAAW;AAAA,kBACX,UAAU;AAAA,kBACV,UAAQ;AAAA;AAAA,cACV;AAAA,cACA;AAAA,gBAAC;AAAA;AAAA,kBACC,KAAK;AAAA,kBACL,MAAK;AAAA,kBACL,cAAa;AAAA,kBACb,OAAO,OAAO;AAAA,kBACd,OAAO;AAAA,kBACP,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,EAAE,OAAO,KAAK;AAAA,kBAC7C,WAAW;AAAA,kBACX,UAAU;AAAA,kBACV,UAAQ;AAAA;AAAA,cACV;AAAA,eACF;AAAA,YACC,YAAY,UACX,oBAAC,OAAE,MAAK,SAAQ,WAAU,gCACvB,mBACH;AAAA;AAAA;AAAA,MAEJ;AAAA;AAAA,EACF;AAEJ;AAIA,SAAS,oBAAoB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,QAAQ,WAAW,iBAAiB;AAC1C,YAAU,MAAM;AACd,QAAI,KAAM,SAAQ;AAAA,EACpB,GAAG,CAAC,MAAM,KAAK,CAAC;AAChB,SACE,iCACE;AAAA,wBAAC,UAAO,MAAK,UAAS,SAAQ,SAAQ,UAAU,MAAM,SAAS,MAAM,QAAQ,GAC1E,sBACH;AAAA,IACA,oBAAC,UAAO,MAAK,UAAS,MAAM,QAAQ,QAAM,MAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,SAAS,MAC9E,qBACH;AAAA,KACF;AAEJ;","names":[]}

package/dist/auth/email-tag.d.ts

@@ -0,0 +1,60 @@
+/**
+ * The address tag: `you@example.com` → `you+kastlan@example.com`, the app's own name as
+ * a sub-address of the address a person types for themselves (docs/auth-harmonization.md
+ * §4.5, Marcel 2026-10-05). Lifted from keksdose (`features/auth/email-tag.ts`, feedback
+ * dev#481), where the tag was the constant `keksdose`; here it is the app's.
+ *
+ * **Structurally valid is not the same as deliverable.** `+` is an ordinary character in
+ * the local part under RFC 5322, and sub-addressing — `user+tag@host` delivered to
+ * `user@host` — is specified (RFC 5233). But it is specified as a convention the
+ * RECEIVING server may implement: Gmail, Outlook, iCloud, Fastmail and Proton do; many
+ * Exchange installs, small hosters and corporate filters do not, and some web forms
+ * refuse the character outright.
+ *
+ * Which is why every caller OFFERS the result and never applies it. Silently registering
+ * somebody as `you+kastlan@example.com` would send the verification mail — the one
+ * message the account depends on — down a delivery path nobody checked, and make the
+ * address they sign in with one they never typed. The tag is a convenience for the
+ * person who wants it: one click, with the exact resulting address on the button
+ * (`RegisterForm` does this with its `emailTag`).
+ *
+ * The tagged address is then the identity. The server trims and lower-cases an address
+ * at every entry and never strips a tag, so `you@…` and `you+kastlan@…` are two
+ * different accounts; sign-in stays exact (§4.5), which is why `SignInForm`'s hint after
+ * a failed sign-in names the tagged address rather than trying it.
+ *
+ * Offer it only where a person types an address FOR THEMSELVES — sign-up, a later email
+ * change in the profile — never in a field for someone else's (an invite dialog, a
+ * share), where the tag would be a guess about another person's mail server.
+ */
+/**
+ * `taggedEmail("you@example.com", "kastlan")` → `"you+kastlan@example.com"`, or `null`
+ * when there is nothing to offer:
+ *
+ *  - the address is not complete enough to split — no local part, no domain, or a
+ *    domain without an inner dot (the shape the field's own `type="email"` accepts), so
+ *    the offer cannot appear before the address is plausible or linger once it stops
+ *    being one;
+ *  - the address already carries a `+` — the person's own scheme wins, and stacking a
+ *    second tag on it would be wrong;
+ *  - the tag is empty or not a plain name (see `TAG_SHAPE`).
+ *
+ * The tag is the app's name in lower case (`keksdose`, `kastlan`, `kurvenschmiede`); it
+ * is trimmed and lower-cased here, so `"Kastlan"` gives the same answer. The address is
+ * trimmed and otherwise kept as typed — normalising it is the server's job (server-kit's
+ * `normalise_email`).
+ */
+declare function taggedEmail(email: string, tag: string): string | null;
+/**
+ * The trimmed address split at its last `@`, or `null` while it is not complete enough
+ * to split: no local part, no domain, or a domain without an inner dot — the shape the
+ * field's own `type="email"` accepts.
+ *
+ * @internal `RegisterForm` gates its submit on it; not part of the barrel.
+ */
+declare function emailParts(email: string): {
+    local: string;
+    domain: string;
+} | null;
+
+export { emailParts, taggedEmail };

package/dist/auth/email-tag.js

@@ -0,0 +1,23 @@
+"use client";
+const TAG_SHAPE = /^[a-z0-9][a-z0-9._-]*$/;
+function taggedEmail(email, tag) {
+  const name = tag.trim().toLowerCase();
+  if (!TAG_SHAPE.test(name)) return null;
+  const parts = emailParts(email);
+  if (!parts || parts.local.includes("+")) return null;
+  return `${parts.local}+${name}@${parts.domain}`;
+}
+function emailParts(email) {
+  const trimmed = email.trim();
+  const at = trimmed.lastIndexOf("@");
+  if (at <= 0 || at === trimmed.length - 1) return null;
+  const local = trimmed.slice(0, at);
+  const domain = trimmed.slice(at + 1);
+  if (!domain.includes(".") || domain.startsWith(".") || domain.endsWith(".")) return null;
+  return { local, domain };
+}
+export {
+  emailParts,
+  taggedEmail
+};
+//# sourceMappingURL=email-tag.js.map