@eifi1/ui-kit 0.29.0 → 0.31.0

package/dist/auth/auth-errors.d.ts

@@ -23,9 +23,53 @@
  *   password would confirm a leaked one. It stays in the union only for a future server
  *   step that is past the password (an admin view, a signed-in refresh) and may say so.
  */
-type AuthErrorCode = "invalid_credentials" | "registration_closed" | "email_taken" | "invitation_invalid" | "invitation_expired" | "token_invalid" | "account_inactive";
+type AuthErrorCode = "invalid_credentials" | "registration_closed" | "email_taken" | "invitation_invalid" | "invitation_expired" | "token_invalid"
+/** 0.29.1: a link that WAS valid and ran out (verification, reset) — keksdose's step-3
+ *  refusals tell it from `token_invalid`, so a page can say "expired, ask for a new one". */
+ | "token_expired" | "account_inactive";
 /**
- * The {@link AuthErrorCode} an error carries, or `undefined` when it carries none.
+ * 0.30.0: the coded refusals of user administration and the account's own settings
+ * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,
+ * value for value. The same family of answer as the sign-in codes (`{detail, code}`,
+ * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.
+ *
+ * - `last_admin` — the action would leave no active admin: deactivating, demoting or
+ *   deleting the last one (in kastlan, of a company; the answer names the `companies`).
+ * - `self_action` — an admin acting on their own account where that is never allowed.
+ * - `other_companies` — kastlan: the account belongs to other companies too, so a
+ *   company admin may not deactivate it; "Remove from company" instead (§9.6).
+ * - `household_has_members` — keksdose's guard on a deletion request (§6.4).
+ * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level
+ *   asked for a typed address (or a tick), and the request carried none, or another
+ *   address (§4.2).
+ * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email
+ *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an
+ *   ended session and signs the user out, the wrong answer to a typo. Every other one
+ *   is a `409`.
+ */
+type AccountErrorCode = "last_admin" | "self_action" | "other_companies" | "household_has_members" | "confirmation_required" | "confirmation_mismatch" | "password_incorrect";
+/**
+ * 0.31.0: the demo's coded refusals (docs/landing-demo-harmonization.md §6.2) —
+ * server-kit 0.5's `DemoErrorCode`, value for value, answered as `{detail, code}` like
+ * the others and read by the same {@link authErrorCode}.
+ *
+ * - `demo_disabled` — `404`: the demo switch is off (it is "not there", not forbidden).
+ * - `demo_rate_limited` — `429` with `Retry-After`: the per-IP window of demo starts.
+ * - `demo_capacity` — `429`, no `Retry-After`: the cap of live demo users.
+ * - `demo_not_ready` — `503`: the demo data has not been seeded yet.
+ * - `demo_read_only` — `403`, model R: any write by a demo user. The app's write lock
+ *   already explains it, so it shows no toast (§5.4).
+ * - `demo_refused` — `403`, both models: an action a demo never may — a way in or out,
+ *   mail, uploads, the account export (§6.4).
+ */
+type DemoErrorCode = "demo_disabled" | "demo_rate_limited" | "demo_capacity" | "demo_not_ready" | "demo_read_only" | "demo_refused";
+/** Every code the kit reads: the sign-in refusals, the account ones (0.30.0) and the
+ *  demo's (0.31.0). */
+type KitErrorCode = AuthErrorCode | AccountErrorCode | DemoErrorCode;
+/**
+ * The code an error carries — an {@link AuthErrorCode}, since 0.30.0 an
+ * {@link AccountErrorCode}, since 0.31.0 a {@link DemoErrorCode} — or `undefined` when it
+ * carries none.
  *
  * Reads the parsed response body wherever the apps' HTTP clients put it, without
  * depending on any of them:
@@ -42,7 +86,7 @@ type AuthErrorCode = "invalid_credentials" | "registration_closed" | "email_take
  * read as a refusal. The HTTP status is not checked: the code is the contract, and the
  * status differs per refusal (401, 403, 409, 410).
  */
-declare function authErrorCode(err: unknown): AuthErrorCode | undefined;
+declare function authErrorCode(err: unknown): KitErrorCode | undefined;
 /**
  * Whether `err` is a coded auth refusal — any of them, or the one named:
  *
@@ -53,8 +97,61 @@ declare function authErrorCode(err: unknown): AuthErrorCode | undefined;
  *
  * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject
  * with, so an app's `onSubmit` can simply let its client's error through. See
- * {@link authErrorCode} for the shapes it reads.
+ * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes
+ * too: `isAuthError(err, "last_admin")`; since 0.31.0 the demo's:
+ * `isAuthError(err, "demo_read_only")`.
+ */
+declare function isAuthError(err: unknown, code?: KitErrorCode): boolean;
+/**
+ * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the
+ * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through
+ * its own `describeError`, with three wordings of one sentence).
+ *
+ * A throttle carries no `code` in the contract — the STATUS is the answer, set by the
+ * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads
+ * the status, wherever the apps' HTTP clients put it, without depending on any of them:
+ *
+ *  1. `err.response.status` — axios (all three apps' clients);
+ *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and
+ *     a `Response` thrown as it came;
+ *  3. `err.statusCode` — ofetch's alias, and Node-style errors.
+ *
+ * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a
+ * `Retry-After` header, and the status is the one signal every limiter gives.
+ *
+ * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`
+ * call it AFTER the app's `describeError` — an app with words of its own keeps them —
+ * and before their generic failure, so "Too many attempts. Try again in 30 s." (with
+ * {@link retryAfterSeconds}) or "… Wait a moment and try again." needs no app code.
+ */
+declare function isRateLimited(err: unknown): boolean;
+/**
+ * How long a throttled request asks to wait, in whole seconds — its `Retry-After`
+ * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`
+ * when there is none, or none that parses.
+ *
+ * Read where the apps' clients keep the response headers, without depending on any of
+ * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's
+ * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as
+ * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`
+ * (default: the present moment) — never below 0.
+ *
+ * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:
+ * "Too many attempts. Try again in 30 s." — and, without one, "… Wait a moment and try
+ * again." A browser only exposes `Retry-After` to a cross-origin page when the server
+ * lists it in `Access-Control-Expose-Headers`.
+ */
+declare function retryAfterSeconds(err: unknown, now?: number | Date): number | undefined;
+/**
+ * The English of every `rateLimited` label (0.30.0): "Too many attempts. Try again in
+ * 30 s." with a wait under a minute, in whole minutes from one minute up (keksdose's
+ * reset throttle answers in hours, and "3600 s" is a number nobody reads), and "Wait a
+ * moment and try again." without one — or with a `0`.
+ *
+ * @internal The namespaces' English; not part of the barrel.
  */
-declare function isAuthError(err: unknown, code?: AuthErrorCode): boolean;
+declare function englishRateLimited(seconds?: number): string;
+/** "30 s", "2 min" — a wait in English, rounded up. @internal */
+declare function englishWait(seconds: number): string;
 
-export { type AuthErrorCode, authErrorCode, isAuthError };
+export { type AccountErrorCode, type AuthErrorCode, type DemoErrorCode, type KitErrorCode, authErrorCode, englishRateLimited, englishWait, isAuthError, isRateLimited, retryAfterSeconds };

package/dist/auth/auth-errors.js

@@ -6,7 +6,21 @@ const CODES = /* @__PURE__ */ new Set([
   "invitation_invalid",
   "invitation_expired",
   "token_invalid",
-  "account_inactive"
+  "token_expired",
+  "account_inactive",
+  "last_admin",
+  "self_action",
+  "other_companies",
+  "household_has_members",
+  "confirmation_required",
+  "confirmation_mismatch",
+  "password_incorrect",
+  "demo_disabled",
+  "demo_rate_limited",
+  "demo_capacity",
+  "demo_not_ready",
+  "demo_read_only",
+  "demo_refused"
 ]);
 const isBag = (value) => typeof value === "object" && value !== null;
 function known(value) {
@@ -25,8 +39,60 @@ function isAuthError(err, code) {
   const found = authErrorCode(err);
   return found !== void 0 && (code === void 0 || found === code);
 }
+function statusOf(value) {
+  return typeof value === "number" && Number.isInteger(value) ? value : void 0;
+}
+function isRateLimited(err) {
+  if (!isBag(err)) return false;
+  const response = err.response;
+  const status = (isBag(response) ? statusOf(response.status) : void 0) ?? statusOf(err.status) ?? statusOf(err.statusCode);
+  return status === 429;
+}
+function headerOf(headers, name) {
+  if (!isBag(headers)) return void 0;
+  if (typeof headers.get === "function") {
+    try {
+      const value = headers.get.call(headers, name);
+      if (value !== void 0 && value !== null) return value;
+    } catch {
+    }
+  }
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === name) return value;
+  }
+  return void 0;
+}
+function parseRetryAfter(value, now) {
+  const raw = Array.isArray(value) ? value[0] : value;
+  if (typeof raw === "number") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : void 0;
+  if (typeof raw !== "string") return void 0;
+  const text = raw.trim();
+  if (/^\d+$/.test(text)) return Number(text);
+  if (!/[a-z]/i.test(text)) return void 0;
+  const at = Date.parse(text);
+  if (Number.isNaN(at)) return void 0;
+  return Math.max(0, Math.ceil((at - now) / 1e3));
+}
+function retryAfterSeconds(err, now = Date.now()) {
+  if (!isBag(err)) return void 0;
+  const at = typeof now === "number" ? now : now.getTime();
+  const response = err.response;
+  const value = (isBag(response) ? headerOf(response.headers, "retry-after") : void 0) ?? headerOf(err.headers, "retry-after");
+  return value === void 0 ? void 0 : parseRetryAfter(value, at);
+}
+function englishRateLimited(seconds) {
+  if (!seconds || seconds <= 0) return "Too many attempts. Wait a moment and try again.";
+  return `Too many attempts. Try again in ${englishWait(seconds)}.`;
+}
+function englishWait(seconds) {
+  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;
+}
 export {
   authErrorCode,
-  isAuthError
+  englishRateLimited,
+  englishWait,
+  isAuthError,
+  isRateLimited,
+  retryAfterSeconds
 };
 //# sourceMappingURL=auth-errors.js.map

package/dist/auth/auth-errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  | \"account_inactive\";\n\nconst CODES: ReadonlySet<string> = new Set<AuthErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"account_inactive\",\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): AuthErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as AuthErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): AuthErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The {@link AuthErrorCode} an error carries, or `undefined` when it carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 403, 409, 410).\n */\nexport function authErrorCode(err: unknown): AuthErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads.\n */\nexport function isAuthError(err: unknown, code?: AuthErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n"],"mappings":";AAkCA,MAAM,QAA6B,oBAAI,IAAmB;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA2C;AACxD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAA0B;AACpF;AAIA,SAAS,WAAW,MAA0C;AAC5D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAoBO,SAAS,cAAc,KAAyC;AACrE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAcO,SAAS,YAAY,KAAc,MAA+B;AACvE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;","names":[]}
+{"version":3,"sources":["../../src/auth/auth-errors.ts"],"sourcesContent":["/**\n * The coded refusals of sign-in and sign-up (docs/auth-harmonization.md §5.2): every\n * refusal the auth routes answer carries a machine-readable `code`, and the pages\n * recognise the CODE, never the server's sentence.\n *\n * Today each app's pages print the server's `detail` string (keksdose's\n * `extractApiErrorMessage`), which is English on every locale and, on a credential\n * check, would be an account-enumeration oracle if it ever said more than one thing.\n * keksdose already keys one refusal on a code (`features/budgets/plan-limit.ts`,\n * `402 {detail, code: \"plan_budget_limit\"}`); §5.2 makes that the rule for auth. Each\n * app switches its server and its pages together (§9).\n *\n * - `invalid_credentials` — unknown address, wrong password AND deactivated account:\n *   one answer, in the same time (§2.10). `401`.\n * - `registration_closed` — the sign-up gate refused the address. `403`.\n * - `email_taken` — an account with this address exists. `409`.\n * - `invitation_invalid`, `invitation_expired` — the `invite` token of a sign-up or an\n *   accept (§4.4).\n * - `token_invalid` — a one-time token (reset, verification, a sign-in challenge) is\n *   unknown, spent or expired.\n * - `account_inactive` — **no server answers it.** §2.10 decided that a deactivated\n *   account gets `invalid_credentials`, because a separate answer after a correct\n *   password would confirm a leaked one. It stays in the union only for a future server\n *   step that is past the password (an admin view, a signed-in refresh) and may say so.\n */\nexport type AuthErrorCode =\n  | \"invalid_credentials\"\n  | \"registration_closed\"\n  | \"email_taken\"\n  | \"invitation_invalid\"\n  | \"invitation_expired\"\n  | \"token_invalid\"\n  /** 0.29.1: a link that WAS valid and ran out (verification, reset) — keksdose's step-3\n   *  refusals tell it from `token_invalid`, so a page can say \"expired, ask for a new one\". */\n  | \"token_expired\"\n  | \"account_inactive\";\n\n/**\n * 0.30.0: the coded refusals of user administration and the account's own settings\n * (docs/user-admin-harmonization.md §4, §6) — server-kit 0.4.0's `AccountErrorCode`,\n * value for value. The same family of answer as the sign-in codes (`{detail, code}`,\n * plus `companies` on kastlan's `last_admin`), read by the same {@link authErrorCode}.\n *\n * - `last_admin` — the action would leave no active admin: deactivating, demoting or\n *   deleting the last one (in kastlan, of a company; the answer names the `companies`).\n * - `self_action` — an admin acting on their own account where that is never allowed.\n * - `other_companies` — kastlan: the account belongs to other companies too, so a\n *   company admin may not deactivate it; \"Remove from company\" instead (§9.6).\n * - `household_has_members` — keksdose's guard on a deletion request (§6.4).\n * - `confirmation_required`, `confirmation_mismatch` — the action's confirmation level\n *   asked for a typed address (or a tick), and the request carried none, or another\n *   address (§4.2).\n * - `password_incorrect` — the CURRENT password is wrong on a signed-in route (the email\n *   change, the deletion request). `400`, not `401`: an app's client reads a 401 as an\n *   ended session and signs the user out, the wrong answer to a typo. Every other one\n *   is a `409`.\n */\nexport type AccountErrorCode =\n  | \"last_admin\"\n  | \"self_action\"\n  | \"other_companies\"\n  | \"household_has_members\"\n  | \"confirmation_required\"\n  | \"confirmation_mismatch\"\n  | \"password_incorrect\";\n\n/**\n * 0.31.0: the demo's coded refusals (docs/landing-demo-harmonization.md §6.2) —\n * server-kit 0.5's `DemoErrorCode`, value for value, answered as `{detail, code}` like\n * the others and read by the same {@link authErrorCode}.\n *\n * - `demo_disabled` — `404`: the demo switch is off (it is \"not there\", not forbidden).\n * - `demo_rate_limited` — `429` with `Retry-After`: the per-IP window of demo starts.\n * - `demo_capacity` — `429`, no `Retry-After`: the cap of live demo users.\n * - `demo_not_ready` — `503`: the demo data has not been seeded yet.\n * - `demo_read_only` — `403`, model R: any write by a demo user. The app's write lock\n *   already explains it, so it shows no toast (§5.4).\n * - `demo_refused` — `403`, both models: an action a demo never may — a way in or out,\n *   mail, uploads, the account export (§6.4).\n */\nexport type DemoErrorCode =\n  | \"demo_disabled\"\n  | \"demo_rate_limited\"\n  | \"demo_capacity\"\n  | \"demo_not_ready\"\n  | \"demo_read_only\"\n  | \"demo_refused\";\n\n/** Every code the kit reads: the sign-in refusals, the account ones (0.30.0) and the\n *  demo's (0.31.0). */\nexport type KitErrorCode = AuthErrorCode | AccountErrorCode | DemoErrorCode;\n\nconst CODES: ReadonlySet<string> = new Set<KitErrorCode>([\n  \"invalid_credentials\",\n  \"registration_closed\",\n  \"email_taken\",\n  \"invitation_invalid\",\n  \"invitation_expired\",\n  \"token_invalid\",\n  \"token_expired\",\n  \"account_inactive\",\n  \"last_admin\",\n  \"self_action\",\n  \"other_companies\",\n  \"household_has_members\",\n  \"confirmation_required\",\n  \"confirmation_mismatch\",\n  \"password_incorrect\",\n  \"demo_disabled\",\n  \"demo_rate_limited\",\n  \"demo_capacity\",\n  \"demo_not_ready\",\n  \"demo_read_only\",\n  \"demo_refused\",\n]);\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** A known code, or undefined. */\nfunction known(value: unknown): KitErrorCode | undefined {\n  return typeof value === \"string\" && CODES.has(value) ? (value as KitErrorCode) : undefined;\n}\n\n/** `{code}` on a parsed body, or FastAPI's `{detail: {code}}` — what an\n *  `HTTPException(detail={\"code\": …})` serialises to. */\nfunction codeOfBody(body: unknown): KitErrorCode | undefined {\n  if (!isBag(body)) return undefined;\n  return known(body.code) ?? (isBag(body.detail) ? known(body.detail.code) : undefined);\n}\n\n/**\n * The code an error carries — an {@link AuthErrorCode}, since 0.30.0 an\n * {@link AccountErrorCode}, since 0.31.0 a {@link DemoErrorCode} — or `undefined` when it\n * carries none.\n *\n * Reads the parsed response body wherever the apps' HTTP clients put it, without\n * depending on any of them:\n *\n *  1. `err.response.data` — axios (keksdose's, kastlan's and Kurvenschmiede's clients;\n *     keksdose's `isPlanBudgetLimitRefusal` reads the same path);\n *  2. `err.data` — ofetch's `FetchError`, and most `fetch` wrappers that parse the body;\n *  3. `err.body` — the generated OpenAPI clients' `ApiError`;\n *  4. `err` itself — a body thrown as it came (`throw await res.json()`).\n *\n * In each, `code` or FastAPI's nested `detail.code`. Last, `err.code` — but only when\n * it is one of the codes above: axios writes its OWN codes there (`ERR_NETWORK`,\n * `ECONNABORTED`, `ERR_BAD_REQUEST`), and so does Node, so an unknown value is never\n * read as a refusal. The HTTP status is not checked: the code is the contract, and the\n * status differs per refusal (401, 403, 409, 410).\n */\nexport function authErrorCode(err: unknown): KitErrorCode | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? codeOfBody(response.data) : undefined) ??\n    codeOfBody(err.data) ??\n    codeOfBody(err.body) ??\n    codeOfBody(err)\n  );\n}\n\n/**\n * Whether `err` is a coded auth refusal — any of them, or the one named:\n *\n * ```ts\n * try { await api.register(values) }\n * catch (err) { if (isAuthError(err, \"email_taken\")) … }\n * ```\n *\n * The kit's `SignInForm` and `RegisterForm` call it on what their callbacks reject\n * with, so an app's `onSubmit` can simply let its client's error through. See\n * {@link authErrorCode} for the shapes it reads. Since 0.30.0 it knows the account codes\n * too: `isAuthError(err, \"last_admin\")`; since 0.31.0 the demo's:\n * `isAuthError(err, \"demo_read_only\")`.\n */\nexport function isAuthError(err: unknown, code?: KitErrorCode): boolean {\n  const found = authErrorCode(err);\n  return found !== undefined && (code === undefined || found === code);\n}\n\n/** An HTTP status as a number, or undefined. */\nfunction statusOf(value: unknown): number | undefined {\n  return typeof value === \"number\" && Number.isInteger(value) ? value : undefined;\n}\n\n/**\n * Whether `err` is a throttled request — HTTP `429 Too Many Requests` (0.30.0, from the\n * apps' 0.29 adoption: every app answered a throttled sign-in, sign-up or reset through\n * its own `describeError`, with three wordings of one sentence).\n *\n * A throttle carries no `code` in the contract — the STATUS is the answer, set by the\n * apps' limiters (server-kit's `AuthLimiters`, keksdose's per-IP limit) — so this reads\n * the status, wherever the apps' HTTP clients put it, without depending on any of them:\n *\n *  1. `err.response.status` — axios (all three apps' clients);\n *  2. `err.status` — ofetch's `FetchError`, the generated OpenAPI clients' `ApiError`, and\n *     a `Response` thrown as it came;\n *  3. `err.statusCode` — ofetch's alias, and Node-style errors.\n *\n * There is no `rate_limited` code: keksdose answers its 429s uncoded, with a\n * `Retry-After` header, and the status is the one signal every limiter gives.\n *\n * The kit's `SignInForm`, `RegisterForm`, `ForgotPasswordForm` and `ResetPasswordForm`\n * call it AFTER the app's `describeError` — an app with words of its own keeps them —\n * and before their generic failure, so \"Too many attempts. Try again in 30 s.\" (with\n * {@link retryAfterSeconds}) or \"… Wait a moment and try again.\" needs no app code.\n */\nexport function isRateLimited(err: unknown): boolean {\n  if (!isBag(err)) return false;\n  const response = err.response;\n  const status =\n    (isBag(response) ? statusOf(response.status) : undefined) ?? statusOf(err.status) ?? statusOf(err.statusCode);\n  return status === 429;\n}\n\n/** A header's value from a `Headers` (fetch, ofetch's `response`), axios' `AxiosHeaders`\n *  or a plain record — whose keys may come in any case. */\nfunction headerOf(headers: unknown, name: string): unknown {\n  if (!isBag(headers)) return undefined;\n  if (typeof headers.get === \"function\") {\n    try {\n      const value: unknown = (headers.get as (key: string) => unknown).call(headers, name);\n      if (value !== undefined && value !== null) return value;\n    } catch {\n      // A `get` that is not a header lookup; the record below is.\n    }\n  }\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === name) return value;\n  }\n  return undefined;\n}\n\n/** `Retry-After` as seconds from `now`: delta-seconds (\"30\"), or an HTTP date\n *  (\"Wed, 07 Oct 2026 10:00:00 GMT\") counted from now, never below 0 (RFC 9110 §10.2.3). */\nfunction parseRetryAfter(value: unknown, now: number): number | undefined {\n  const raw = Array.isArray(value) ? (value as unknown[])[0] : value;\n  if (typeof raw === \"number\") return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : undefined;\n  if (typeof raw !== \"string\") return undefined;\n  const text = raw.trim();\n  if (/^\\d+$/.test(text)) return Number(text);\n  // An HTTP date names its day and month (\"Wed, 07 Oct 2026 …\"). Without a letter it is\n  // a malformed number (\"-5\", \"1.5\"), which `Date.parse` would happily read as a year.\n  if (!/[a-z]/i.test(text)) return undefined;\n  const at = Date.parse(text);\n  if (Number.isNaN(at)) return undefined;\n  return Math.max(0, Math.ceil((at - now) / 1000));\n}\n\n/**\n * How long a throttled request asks to wait, in whole seconds — its `Retry-After`\n * header (0.30.0, keksdose: its 429s carry no code, only the header) — or `undefined`\n * when there is none, or none that parses.\n *\n * Read where the apps' clients keep the response headers, without depending on any of\n * them: `err.response.headers` (axios' `AxiosHeaders` or a plain record; ofetch's\n * `FetchError.response`, a fetch `Headers`), then `err.headers` (a `Response` thrown as\n * it came). The value is delta-seconds, or an HTTP date turned into seconds from `now`\n * (default: the present moment) — never below 0.\n *\n * The forms hand it to their `rateLimited` label when {@link isRateLimited} is true:\n * \"Too many attempts. Try again in 30 s.\" — and, without one, \"… Wait a moment and try\n * again.\" A browser only exposes `Retry-After` to a cross-origin page when the server\n * lists it in `Access-Control-Expose-Headers`.\n */\nexport function retryAfterSeconds(err: unknown, now: number | Date = Date.now()): number | undefined {\n  if (!isBag(err)) return undefined;\n  const at = typeof now === \"number\" ? now : now.getTime();\n  const response = err.response;\n  const value =\n    (isBag(response) ? headerOf(response.headers, \"retry-after\") : undefined) ?? headerOf(err.headers, \"retry-after\");\n  return value === undefined ? undefined : parseRetryAfter(value, at);\n}\n\n/**\n * The English of every `rateLimited` label (0.30.0): \"Too many attempts. Try again in\n * 30 s.\" with a wait under a minute, in whole minutes from one minute up (keksdose's\n * reset throttle answers in hours, and \"3600 s\" is a number nobody reads), and \"Wait a\n * moment and try again.\" without one — or with a `0`.\n *\n * @internal The namespaces' English; not part of the barrel.\n */\nexport function englishRateLimited(seconds?: number): string {\n  if (!seconds || seconds <= 0) return \"Too many attempts. Wait a moment and try again.\";\n  return `Too many attempts. Try again in ${englishWait(seconds)}.`;\n}\n\n/** \"30 s\", \"2 min\" — a wait in English, rounded up. @internal */\nexport function englishWait(seconds: number): string {\n  return seconds < 60 ? `${Math.ceil(seconds)} s` : `${Math.ceil(seconds / 60)} min`;\n}\n"],"mappings":";AA4FA,MAAM,QAA6B,oBAAI,IAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,MAAM,OAA0C;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,IAAI,KAAK,IAAK,QAAyB;AACnF;AAIA,SAAS,WAAW,MAAyC;AAC3D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,SAAO,MAAM,KAAK,IAAI,MAAM,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI;AAC7E;AAsBO,SAAS,cAAc,KAAwC;AACpE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,WAAW,SAAS,IAAI,IAAI,WAC/C,WAAW,IAAI,IAAI,KACnB,WAAW,IAAI,IAAI,KACnB,WAAW,GAAG;AAElB;AAgBO,SAAS,YAAY,KAAc,MAA8B;AACtE,QAAM,QAAQ,cAAc,GAAG;AAC/B,SAAO,UAAU,WAAc,SAAS,UAAa,UAAU;AACjE;AAGA,SAAS,SAAS,OAAoC;AACpD,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,IAAI,QAAQ;AACxE;AAwBO,SAAS,cAAc,KAAuB;AACnD,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,QAAM,UACH,MAAM,QAAQ,IAAI,SAAS,SAAS,MAAM,IAAI,WAAc,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9G,SAAO,WAAW;AACpB;AAIA,SAAS,SAAS,SAAkB,MAAuB;AACzD,MAAI,CAAC,MAAM,OAAO,EAAG,QAAO;AAC5B,MAAI,OAAO,QAAQ,QAAQ,YAAY;AACrC,QAAI;AACF,YAAM,QAAkB,QAAQ,IAAiC,KAAK,SAAS,IAAI;AACnF,UAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAAA,IACpD,QAAQ;AAAA,IAER;AAAA,EACF;AACA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,KAAM,QAAO;AAAA,EACzC;AACA,SAAO;AACT;AAIA,SAAS,gBAAgB,OAAgB,KAAiC;AACxE,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAK,MAAoB,CAAC,IAAI;AAC7D,MAAI,OAAO,QAAQ,SAAU,QAAO,OAAO,SAAS,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI;AACxF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO,OAAO,IAAI;AAG1C,MAAI,CAAC,SAAS,KAAK,IAAI,EAAG,QAAO;AACjC,QAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,OAAO,GAAI,CAAC;AACjD;AAkBO,SAAS,kBAAkB,KAAc,MAAqB,KAAK,IAAI,GAAuB;AACnG,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,KAAK,OAAO,QAAQ,WAAW,MAAM,IAAI,QAAQ;AACvD,QAAM,WAAW,IAAI;AACrB,QAAM,SACH,MAAM,QAAQ,IAAI,SAAS,SAAS,SAAS,aAAa,IAAI,WAAc,SAAS,IAAI,SAAS,aAAa;AAClH,SAAO,UAAU,SAAY,SAAY,gBAAgB,OAAO,EAAE;AACpE;AAUO,SAAS,mBAAmB,SAA0B;AAC3D,MAAI,CAAC,WAAW,WAAW,EAAG,QAAO;AACrC,SAAO,mCAAmC,YAAY,OAAO,CAAC;AAChE;AAGO,SAAS,YAAY,SAAyB;AACnD,SAAO,UAAU,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG,KAAK,KAAK,UAAU,EAAE,CAAC;AAC9E;","names":[]}

package/dist/auth/forgot-password-form.d.ts

@@ -21,8 +21,14 @@ interface ForgotPasswordLabels {
     /** A request that did not go through: a throttle, an outage. Never "unknown
      *  address" — the endpoint does not say. */
     error: string;
+    /** 0.30.0: the request was throttled — HTTP 429 ({@link isRateLimited}) — given the
+     *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key
+     *  added to a shipped interface; the provider's `forgotPassword`, then English, fill
+     *  it. */
+    rateLimited?: (seconds?: number) => string;
 }
-declare const DEFAULT_FORGOT_PASSWORD_LABELS: ForgotPasswordLabels;
+/** `Required`: every key, the 0.30 one included, has its English here. */
+declare const DEFAULT_FORGOT_PASSWORD_LABELS: Required<ForgotPasswordLabels>;
 interface ForgotPasswordFormProps extends Omit<ComponentPropsWithoutRef<"div">, "onSubmit" | "children" | "title"> {
     /**
      * The address was submitted, trimmed: send `POST /auth/password-reset/request`.
@@ -38,8 +44,9 @@ interface ForgotPasswordFormProps extends Omit<ComponentPropsWithoutRef<"div">,
      *  whose password just failed need not type it twice. */
     defaultEmail?: string;
     /**
-     * The app's words for a failed request (a `429`: "Too many requests — try again in
-     * an hour"), or `undefined` for the kit's `error`. The same hook as `SignInForm`'s.
+     * The app's words for a failed request ("Too many requests — try again in an hour"),
+     * or `undefined` for the kit's: `rateLimited` for a bare `429` (0.30.0), else `error`.
+     * The same hook as `SignInForm`'s.
      */
     describeError?: (error: unknown) => ReactNode | undefined;
     /** App content under the intro — a notice, a support address. */

package/dist/auth/forgot-password-form.js

@@ -7,6 +7,7 @@ import { useKitLabels } from "../i18n/kit-labels.js";
 import { AlertBanner } from "../components/alert-banner.js";
 import { TextLink } from "../components/text-link.js";
 import { Button, Input } from "../components/ui.js";
+import { englishRateLimited, isRateLimited, retryAfterSeconds } from "./auth-errors.js";
 import { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, isThenable, useFocusWhen } from "./status-parts.js";
 const DEFAULT_FORGOT_PASSWORD_LABELS = {
   title: "Forgot password",
@@ -16,7 +17,8 @@ const DEFAULT_FORGOT_PASSWORD_LABELS = {
   sent: (email) => `If an account exists for ${email}, the link is on its way.`,
   sentHint: "The link is valid for one hour and works exactly once. Check your spam folder too.",
   backToSignIn: "Back to sign in",
-  error: "The request failed. Please try again later."
+  error: "The request failed. Please try again later.",
+  rateLimited: englishRateLimited
 };
 function ForgotPasswordForm({
   onSubmit,
@@ -50,6 +52,7 @@ function ForgotPasswordForm({
       back
     ] });
   }
+  const failureFor = (error) => describeError?.(error) ?? (isRateLimited(error) ? (labels.rateLimited ?? DEFAULT_FORGOT_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error)) : labels.error);
   const submit = (e) => {
     e.preventDefault();
     const address = email.trim();
@@ -59,7 +62,7 @@ function ForgotPasswordForm({
     try {
       result = onSubmit(address);
     } catch (error) {
-      setFailure(describeError?.(error) ?? labels.error);
+      setFailure(failureFor(error));
       return;
     }
     if (!isThenable(result)) {
@@ -74,7 +77,7 @@ function ForgotPasswordForm({
       },
       (error) => {
         setPending(false);
-        setFailure(describeError?.(error) ?? labels.error);
+        setFailure(failureFor(error));
       }
     );
   };

package/dist/auth/forgot-password-form.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/forgot-password-form.tsx"],"sourcesContent":["import { useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button, Input } from \"../components/ui\";\nimport { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, isThenable, useFocusWhen } from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the form renders — the `forgotPassword` namespace. keksdose's words\n *  (`auth.forgot.*`), which kastlan took over unchanged. */\nexport interface ForgotPasswordLabels {\n  /** The heading. */\n  title: string;\n  /** Under the heading, before the field. */\n  intro: string;\n  /** The email field's label. */\n  email: string;\n  submit: string;\n  /** The one answer, whatever the server knows — given the address as typed. */\n  sent: (email: string) => string;\n  /** Under it: how long the link lives, and where else to look. */\n  sentHint: string;\n  /** The link back to the sign-in page, on both states. */\n  backToSignIn: string;\n  /** A request that did not go through: a throttle, an outage. Never \"unknown\n   *  address\" — the endpoint does not say. */\n  error: string;\n}\n\nexport const DEFAULT_FORGOT_PASSWORD_LABELS: ForgotPasswordLabels = {\n  title: \"Forgot password\",\n  intro: \"Enter your account’s email address. We’ll send you a link to choose a new password.\",\n  email: \"Email\",\n  submit: \"Send the link\",\n  sent: (email) => `If an account exists for ${email}, the link is on its way.`,\n  sentHint: \"The link is valid for one hour and works exactly once. Check your spam folder too.\",\n  backToSignIn: \"Back to sign in\",\n  error: \"The request failed. Please try again later.\",\n};\n\n/* ── The form ────────────────────────────────────────────────────────────── */\n\nexport interface ForgotPasswordFormProps\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"onSubmit\" | \"children\" | \"title\"> {\n  /**\n   * The address was submitted, trimmed: send `POST /auth/password-reset/request`.\n   * Resolve when the server answered — whatever it answered: it is `204` whether or not\n   * an account exists. Reject only when the request did not go through (a throttle, an\n   * outage); the form then stays, with the address, and says so. The form never sends a\n   * request itself (§8).\n   */\n  onSubmit: (email: string) => Promise<unknown> | void;\n  /** \"Back to sign in\" — the app's `/login`. Default `/login`. */\n  signInHref?: string;\n  /** The field's start value — the address the sign-in form already had, so someone\n   *  whose password just failed need not type it twice. */\n  defaultEmail?: string;\n  /**\n   * The app's words for a failed request (a `429`: \"Too many requests — try again in\n   * an hour\"), or `undefined` for the kit's `error`. The same hook as `SignInForm`'s.\n   */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** App content under the intro — a notice, a support address. */\n  formContent?: ReactNode;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it\n   *  in `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: Partial<ForgotPasswordLabels>;\n}\n\n/**\n * \"I forgot my password\" for every app (docs/auth-harmonization.md §7): one field, then\n * the same sentence whatever the answer — keksdose's `ForgotPasswordPage`\n * (features/auth/forgot-password-page.tsx), kastlan's copy of it, as one component.\n *\n * **It always ends on the same message**: \"If an account exists for …, the link is on\n * its way.\" The server answers `204` whether or not the address has an account — so the\n * page cannot be used to find out who has one — and the page must not undo that by\n * saying more than the server knows. Worded as a promise (\"we sent you a link\"), a typo\n * would look like a mail-delivery problem and send the person waiting instead of trying\n * their other address (keksdose #198). The address shown is the one they typed, so a\n * typo is visible.\n *\n * The only failure it can show is a request that did not go through (throttled, the\n * server down), never \"unknown address\". §4.5's fallback to a tagged address\n * (`you+kastlan@…` when `you@…` has no account) is the server's and changes nothing here.\n *\n * The submit is not disabled while the field is empty — a browser that autofills\n * withholds the value until the first interaction, and a disabled button would swallow\n * that first click; the field's own `required` answers an empty submit instead. After a\n * submit the confirmation takes focus, because the button that had it is gone with the\n * form.\n */\nexport function ForgotPasswordForm({\n  onSubmit,\n  signInHref = \"/login\",\n  defaultEmail = \"\",\n  describeError,\n  formContent,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: ForgotPasswordFormProps) {\n  const labels = useKitLabels(\"forgotPassword\", DEFAULT_FORGOT_PASSWORD_LABELS, labelsProp);\n  const [email, setEmail] = useState(defaultEmail);\n  const [pending, setPending] = useState(false);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [sentTo, setSentTo] = useState<string | null>(null);\n  const headingId = useId();\n  const sentRef = useRef<HTMLDivElement>(null);\n  useFocusWhen(sentTo !== null, sentRef);\n\n  const heading =\n    title === null ? null : (\n      <Heading id={headingId} className={FORM_HEADING_CLASS}>\n        {title ?? labels.title}\n      </Heading>\n    );\n  const back = (\n    <p className=\"text-center text-sm\">\n      <TextLink href={signInHref} tone=\"primary\">\n        {labels.backToSignIn}\n      </TextLink>\n    </p>\n  );\n\n  if (sentTo !== null) {\n    return (\n      <div {...rest} data-state=\"sent\" className={cn(\"space-y-3\", className)}>\n        {heading}\n        <OutcomeMessage icon={<MailCheck className=\"text-[var(--success)]\" />} focusRef={sentRef}>\n          <p className={INTRO_CLASS}>{labels.sent(sentTo)}</p>\n          <p className=\"text-xs text-[var(--text-muted)]\">{labels.sentHint}</p>\n        </OutcomeMessage>\n        {back}\n      </div>\n    );\n  }\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    const address = email.trim();\n    if (pending || address === \"\") return;\n    setFailure(null);\n    let result: unknown;\n    try {\n      result = onSubmit(address);\n    } catch (error) {\n      setFailure(describeError?.(error) ?? labels.error);\n      return;\n    }\n    if (!isThenable(result)) {\n      setSentTo(address);\n      return;\n    }\n    setPending(true);\n    result.then(\n      () => {\n        setPending(false);\n        setSentTo(address);\n      },\n      (error: unknown) => {\n        setPending(false);\n        setFailure(describeError?.(error) ?? labels.error);\n      },\n    );\n  };\n\n  return (\n    <div {...rest} data-state=\"form\" className={cn(\"space-y-3\", className)}>\n      <form\n        className=\"space-y-3\"\n        aria-labelledby={title === null ? undefined : headingId}\n        onSubmit={submit}\n      >\n        {heading}\n        <p className={INTRO_CLASS}>{labels.intro}</p>\n        {formContent}\n        <Input\n          type=\"email\"\n          name=\"email\"\n          autoComplete=\"email\"\n          label={labels.email}\n          value={email}\n          onChange={(e) => {\n            setEmail(e.target.value);\n            if (failure) setFailure(null);\n          }}\n          readOnly={pending}\n          required\n        />\n        {failure != null && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" className=\"w-full\" pending={pending}>\n          {labels.submit}\n        </Button>\n      </form>\n      {back}\n    </div>\n  );\n}\n"],"mappings":";AA2HM,cAgBE,YAhBF;AA3HN,SAAS,OAAO,QAAQ,gBAAgB;AAExC,SAAS,iBAAiB;AAC1B,SAAS,UAAU;AACnB,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,aAAa;AAC9B,SAAS,oBAAoB,aAAa,gBAAgB,YAAY,oBAAoB;AA0BnF,MAAM,iCAAuD;AAAA,EAClE,OAAO;AAAA,EACP,OAAO;AAAA,EACP,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM,CAAC,UAAU,4BAA4B,KAAK;AAAA,EAClD,UAAU;AAAA,EACV,cAAc;AAAA,EACd,OAAO;AACT;AAyDO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,kBAAkB,gCAAgC,UAAU;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,QAAM,YAAY,MAAM;AACxB,QAAM,UAAU,OAAuB,IAAI;AAC3C,eAAa,WAAW,MAAM,OAAO;AAErC,QAAM,UACJ,UAAU,OAAO,OACf,oBAAC,WAAQ,IAAI,WAAW,WAAW,oBAChC,mBAAS,OAAO,OACnB;AAEJ,QAAM,OACJ,oBAAC,OAAE,WAAU,uBACX,8BAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,cACV,GACF;AAGF,MAAI,WAAW,MAAM;AACnB,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GAClE;AAAA;AAAA,MACD,qBAAC,kBAAe,MAAM,oBAAC,aAAU,WAAU,yBAAwB,GAAI,UAAU,SAC/E;AAAA,4BAAC,OAAE,WAAW,aAAc,iBAAO,KAAK,MAAM,GAAE;AAAA,QAChD,oBAAC,OAAE,WAAU,oCAAoC,iBAAO,UAAS;AAAA,SACnE;AAAA,MACC;AAAA,OACH;AAAA,EAEJ;AAEA,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,WAAW,YAAY,GAAI;AAC/B,eAAW,IAAI;AACf,QAAI;AACJ,QAAI;AACF,eAAS,SAAS,OAAO;AAAA,IAC3B,SAAS,OAAO;AACd,iBAAW,gBAAgB,KAAK,KAAK,OAAO,KAAK;AACjD;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,gBAAU,OAAO;AACjB;AAAA,IACF;AACA,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,mBAAW,KAAK;AAChB,kBAAU,OAAO;AAAA,MACnB;AAAA,MACA,CAAC,UAAmB;AAClB,mBAAW,KAAK;AAChB,mBAAW,gBAAgB,KAAK,KAAK,OAAO,KAAK;AAAA,MACnD;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GACnE;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,WAAU;AAAA,QACV,mBAAiB,UAAU,OAAO,SAAY;AAAA,QAC9C,UAAU;AAAA,QAET;AAAA;AAAA,UACD,oBAAC,OAAE,WAAW,aAAc,iBAAO,OAAM;AAAA,UACxC;AAAA,UACD;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,MAAK;AAAA,cACL,cAAa;AAAA,cACb,OAAO,OAAO;AAAA,cACd,OAAO;AAAA,cACP,UAAU,CAAC,MAAM;AACf,yBAAS,EAAE,OAAO,KAAK;AACvB,oBAAI,QAAS,YAAW,IAAI;AAAA,cAC9B;AAAA,cACA,UAAU;AAAA,cACV,UAAQ;AAAA;AAAA,UACV;AAAA,UACC,WAAW,QACV,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,UAEF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,SACtC,iBAAO,QACV;AAAA;AAAA;AAAA,IACF;AAAA,IACC;AAAA,KACH;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/auth/forgot-password-form.tsx"],"sourcesContent":["import { useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button, Input } from \"../components/ui\";\nimport { englishRateLimited, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, isThenable, useFocusWhen } from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the form renders — the `forgotPassword` namespace. keksdose's words\n *  (`auth.forgot.*`), which kastlan took over unchanged. */\nexport interface ForgotPasswordLabels {\n  /** The heading. */\n  title: string;\n  /** Under the heading, before the field. */\n  intro: string;\n  /** The email field's label. */\n  email: string;\n  submit: string;\n  /** The one answer, whatever the server knows — given the address as typed. */\n  sent: (email: string) => string;\n  /** Under it: how long the link lives, and where else to look. */\n  sentHint: string;\n  /** The link back to the sign-in page, on both states. */\n  backToSignIn: string;\n  /** A request that did not go through: a throttle, an outage. Never \"unknown\n   *  address\" — the endpoint does not say. */\n  error: string;\n  /** 0.30.0: the request was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface; the provider's `forgotPassword`, then English, fill\n   *  it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n/** `Required`: every key, the 0.30 one included, has its English here. */\nexport const DEFAULT_FORGOT_PASSWORD_LABELS: Required<ForgotPasswordLabels> = {\n  title: \"Forgot password\",\n  intro: \"Enter your account’s email address. We’ll send you a link to choose a new password.\",\n  email: \"Email\",\n  submit: \"Send the link\",\n  sent: (email) => `If an account exists for ${email}, the link is on its way.`,\n  sentHint: \"The link is valid for one hour and works exactly once. Check your spam folder too.\",\n  backToSignIn: \"Back to sign in\",\n  error: \"The request failed. Please try again later.\",\n  rateLimited: englishRateLimited,\n};\n\n/* ── The form ────────────────────────────────────────────────────────────── */\n\nexport interface ForgotPasswordFormProps\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"onSubmit\" | \"children\" | \"title\"> {\n  /**\n   * The address was submitted, trimmed: send `POST /auth/password-reset/request`.\n   * Resolve when the server answered — whatever it answered: it is `204` whether or not\n   * an account exists. Reject only when the request did not go through (a throttle, an\n   * outage); the form then stays, with the address, and says so. The form never sends a\n   * request itself (§8).\n   */\n  onSubmit: (email: string) => Promise<unknown> | void;\n  /** \"Back to sign in\" — the app's `/login`. Default `/login`. */\n  signInHref?: string;\n  /** The field's start value — the address the sign-in form already had, so someone\n   *  whose password just failed need not type it twice. */\n  defaultEmail?: string;\n  /**\n   * The app's words for a failed request (\"Too many requests — try again in an hour\"),\n   * or `undefined` for the kit's: `rateLimited` for a bare `429` (0.30.0), else `error`.\n   * The same hook as `SignInForm`'s.\n   */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** App content under the intro — a notice, a support address. */\n  formContent?: ReactNode;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it\n   *  in `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: Partial<ForgotPasswordLabels>;\n}\n\n/**\n * \"I forgot my password\" for every app (docs/auth-harmonization.md §7): one field, then\n * the same sentence whatever the answer — keksdose's `ForgotPasswordPage`\n * (features/auth/forgot-password-page.tsx), kastlan's copy of it, as one component.\n *\n * **It always ends on the same message**: \"If an account exists for …, the link is on\n * its way.\" The server answers `204` whether or not the address has an account — so the\n * page cannot be used to find out who has one — and the page must not undo that by\n * saying more than the server knows. Worded as a promise (\"we sent you a link\"), a typo\n * would look like a mail-delivery problem and send the person waiting instead of trying\n * their other address (keksdose #198). The address shown is the one they typed, so a\n * typo is visible.\n *\n * The only failure it can show is a request that did not go through (throttled, the\n * server down), never \"unknown address\". §4.5's fallback to a tagged address\n * (`you+kastlan@…` when `you@…` has no account) is the server's and changes nothing here.\n *\n * The submit is not disabled while the field is empty — a browser that autofills\n * withholds the value until the first interaction, and a disabled button would swallow\n * that first click; the field's own `required` answers an empty submit instead. After a\n * submit the confirmation takes focus, because the button that had it is gone with the\n * form.\n */\nexport function ForgotPasswordForm({\n  onSubmit,\n  signInHref = \"/login\",\n  defaultEmail = \"\",\n  describeError,\n  formContent,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: ForgotPasswordFormProps) {\n  const labels = useKitLabels(\"forgotPassword\", DEFAULT_FORGOT_PASSWORD_LABELS, labelsProp);\n  const [email, setEmail] = useState(defaultEmail);\n  const [pending, setPending] = useState(false);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [sentTo, setSentTo] = useState<string | null>(null);\n  const headingId = useId();\n  const sentRef = useRef<HTMLDivElement>(null);\n  useFocusWhen(sentTo !== null, sentRef);\n\n  const heading =\n    title === null ? null : (\n      <Heading id={headingId} className={FORM_HEADING_CLASS}>\n        {title ?? labels.title}\n      </Heading>\n    );\n  const back = (\n    <p className=\"text-center text-sm\">\n      <TextLink href={signInHref} tone=\"primary\">\n        {labels.backToSignIn}\n      </TextLink>\n    </p>\n  );\n\n  if (sentTo !== null) {\n    return (\n      <div {...rest} data-state=\"sent\" className={cn(\"space-y-3\", className)}>\n        {heading}\n        <OutcomeMessage icon={<MailCheck className=\"text-[var(--success)]\" />} focusRef={sentRef}>\n          <p className={INTRO_CLASS}>{labels.sent(sentTo)}</p>\n          <p className=\"text-xs text-[var(--text-muted)]\">{labels.sentHint}</p>\n        </OutcomeMessage>\n        {back}\n      </div>\n    );\n  }\n\n  // The app's words first, then the throttle's, then the kit's catch-all.\n  const failureFor = (error: unknown): ReactNode =>\n    describeError?.(error) ??\n    (isRateLimited(error)\n      ? (labels.rateLimited ?? DEFAULT_FORGOT_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))\n      : labels.error);\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    const address = email.trim();\n    if (pending || address === \"\") return;\n    setFailure(null);\n    let result: unknown;\n    try {\n      result = onSubmit(address);\n    } catch (error) {\n      setFailure(failureFor(error));\n      return;\n    }\n    if (!isThenable(result)) {\n      setSentTo(address);\n      return;\n    }\n    setPending(true);\n    result.then(\n      () => {\n        setPending(false);\n        setSentTo(address);\n      },\n      (error: unknown) => {\n        setPending(false);\n        setFailure(failureFor(error));\n      },\n    );\n  };\n\n  return (\n    <div {...rest} data-state=\"form\" className={cn(\"space-y-3\", className)}>\n      <form\n        className=\"space-y-3\"\n        aria-labelledby={title === null ? undefined : headingId}\n        onSubmit={submit}\n      >\n        {heading}\n        <p className={INTRO_CLASS}>{labels.intro}</p>\n        {formContent}\n        <Input\n          type=\"email\"\n          name=\"email\"\n          autoComplete=\"email\"\n          label={labels.email}\n          value={email}\n          onChange={(e) => {\n            setEmail(e.target.value);\n            if (failure) setFailure(null);\n          }}\n          readOnly={pending}\n          required\n        />\n        {failure != null && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" className=\"w-full\" pending={pending}>\n          {labels.submit}\n        </Button>\n      </form>\n      {back}\n    </div>\n  );\n}\n"],"mappings":";AAoIM,cAgBE,YAhBF;AApIN,SAAS,OAAO,QAAQ,gBAAgB;AAExC,SAAS,iBAAiB;AAC1B,SAAS,UAAU;AACnB,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,aAAa;AAC9B,SAAS,oBAAoB,eAAe,yBAAyB;AACrE,SAAS,oBAAoB,aAAa,gBAAgB,YAAY,oBAAoB;AAgCnF,MAAM,iCAAiE;AAAA,EAC5E,OAAO;AAAA,EACP,OAAO;AAAA,EACP,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM,CAAC,UAAU,4BAA4B,KAAK;AAAA,EAClD,UAAU;AAAA,EACV,cAAc;AAAA,EACd,OAAO;AAAA,EACP,aAAa;AACf;AA0DO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,kBAAkB,gCAAgC,UAAU;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,QAAM,YAAY,MAAM;AACxB,QAAM,UAAU,OAAuB,IAAI;AAC3C,eAAa,WAAW,MAAM,OAAO;AAErC,QAAM,UACJ,UAAU,OAAO,OACf,oBAAC,WAAQ,IAAI,WAAW,WAAW,oBAChC,mBAAS,OAAO,OACnB;AAEJ,QAAM,OACJ,oBAAC,OAAE,WAAU,uBACX,8BAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,cACV,GACF;AAGF,MAAI,WAAW,MAAM;AACnB,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GAClE;AAAA;AAAA,MACD,qBAAC,kBAAe,MAAM,oBAAC,aAAU,WAAU,yBAAwB,GAAI,UAAU,SAC/E;AAAA,4BAAC,OAAE,WAAW,aAAc,iBAAO,KAAK,MAAM,GAAE;AAAA,QAChD,oBAAC,OAAE,WAAU,oCAAoC,iBAAO,UAAS;AAAA,SACnE;AAAA,MACC;AAAA,OACH;AAAA,EAEJ;AAGA,QAAM,aAAa,CAAC,UAClB,gBAAgB,KAAK,MACpB,cAAc,KAAK,KACf,OAAO,eAAe,+BAA+B,aAAa,kBAAkB,KAAK,CAAC,IAC3F,OAAO;AAEb,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,WAAW,YAAY,GAAI;AAC/B,eAAW,IAAI;AACf,QAAI;AACJ,QAAI;AACF,eAAS,SAAS,OAAO;AAAA,IAC3B,SAAS,OAAO;AACd,iBAAW,WAAW,KAAK,CAAC;AAC5B;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,gBAAU,OAAO;AACjB;AAAA,IACF;AACA,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,mBAAW,KAAK;AAChB,kBAAU,OAAO;AAAA,MACnB;AAAA,MACA,CAAC,UAAmB;AAClB,mBAAW,KAAK;AAChB,mBAAW,WAAW,KAAK,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GACnE;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,WAAU;AAAA,QACV,mBAAiB,UAAU,OAAO,SAAY;AAAA,QAC9C,UAAU;AAAA,QAET;AAAA;AAAA,UACD,oBAAC,OAAE,WAAW,aAAc,iBAAO,OAAM;AAAA,UACxC;AAAA,UACD;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,MAAK;AAAA,cACL,cAAa;AAAA,cACb,OAAO,OAAO;AAAA,cACd,OAAO;AAAA,cACP,UAAU,CAAC,MAAM;AACf,yBAAS,EAAE,OAAO,KAAK;AACvB,oBAAI,QAAS,YAAW,IAAI;AAAA,cAC9B;AAAA,cACA,UAAU;AAAA,cACV,UAAQ;AAAA;AAAA,UACV;AAAA,UACC,WAAW,QACV,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,UAEF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,SACtC,iBAAO,QACV;AAAA;AAAA;AAAA,IACF;AAAA,IACC;AAAA,KACH;AAEJ;","names":[]}

package/dist/auth/register-form.d.ts

@@ -1,5 +1,8 @@
 import 'react';
-export { cr as DEFAULT_REGISTER_LABELS, dS as RegisterForm, dT as RegisterFormProps, dU as RegisterLabels, dV as RegisterValues } from '../register-form-V1OeNlMr.js';
+export { cB as DEFAULT_REGISTER_LABELS, ei as RegisterForm, ej as RegisterFormProps, ek as RegisterLabels, el as RegisterValues } from '../delete-account-setting-DCFS5Vof.js';
+import '../components/tooltip.js';
+import '../hooks/use-anchored-rect.js';
+import '../lib/clipping.js';
 import '../data-table-labels-DUELeXpa.js';
 import '../components/data-table-sort.js';
 import '../components/swipeable-row.js';
@@ -9,10 +12,6 @@ import '../components/popover.js';
 import '../components/chip.js';
 import 'lucide-react';
 import '../components/field-sync.js';
-import '../components/tooltip.js';
-import '../hooks/use-anchored-rect.js';
-import '../lib/clipping.js';
-import '../components/field-parts.js';
 import '../wizard/types.js';
 import '../tour/tour.js';
 import '../search/command-palette.js';
@@ -55,6 +54,14 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import './sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
+import '../shell/topbar-controls.js';
+import '../theme/palette-presets.js';
+import '../theme/chart-palette.js';
+import '../theme/theme-store.js';
+import 'zustand/middleware';
+import 'zustand';
 import './complete-name-dialog.js';
 import './forgot-password-form.js';
 import './status-parts.js';
@@ -63,8 +70,15 @@ import './verify-email.js';
 import './not-found-page.js';
 import './accept-invitation.js';
 import '../shell/company-switcher.js';
-import '../components/account-chips.js';
+import '../account/email-change-setting.js';
+import '../account/sessions-setting.js';
 import '../lib/format.js';
+import '../account/data-export-setting.js';
+import '../components/account-chips.js';
+import '../admin/admin-parts.js';
+import '../admin/admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';
@@ -78,9 +92,4 @@ import '../components/sign-chip.js';
 import '../components/column-mapper.js';
 import '../lib/column-mapping.js';
 import '../lib/table-text.js';
-import '../shell/topbar-controls.js';
-import '../theme/palette-presets.js';
-import '../theme/chart-palette.js';
-import '../theme/theme-store.js';
-import 'zustand/middleware';
-import 'zustand';
+import '../components/field-parts.js';

package/dist/auth/register-form.js

@@ -10,7 +10,7 @@ import { LanguageSelect } from "../components/language-select.js";
 import { LegalAcceptCheckbox } from "../components/legal-page.js";
 import { TextLink } from "../components/text-link.js";
 import { Button, Input } from "../components/ui.js";
-import { authErrorCode } from "./auth-errors.js";
+import { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from "./auth-errors.js";
 import { emailParts, taggedEmail } from "./email-tag.js";
 import { newPasswordProblem, personNameOk, PERSON_NAME_MAX_LENGTH } from "./form-rules.js";
 import { NewPasswordFields } from "./new-password-fields.js";
@@ -33,7 +33,8 @@ const DEFAULT_REGISTER_LABELS = {
   registrationClosed: "New accounts are by invitation only. Ask the operator to invite your email address.",
   invitationInvalid: "This invitation link is not valid.",
   invitationExpired: "This invitation has expired. Ask for a new one.",
-  failed: "Registration failed. Please try again."
+  failed: "Registration failed. Please try again.",
+  rateLimited: englishRateLimited
 };
 const ALL_CODES = KIT_LANGUAGES.map((language) => language.code);
 function browserLanguages() {
@@ -44,6 +45,7 @@ function RegisterForm({
   onSubmit,
   emailTag,
   invitedEmail,
+  defaultEmail,
   locale: localeProp,
   defaultLocale,
   onLocaleChange,
@@ -67,7 +69,7 @@ function RegisterForm({
   const invited = invitedEmail !== void 0;
   const [firstName, setFirstName] = useState("");
   const [lastName, setLastName] = useState("");
-  const [email, setEmail] = useState(invitedEmail ?? "");
+  const [email, setEmail] = useState(invitedEmail ?? defaultEmail ?? "");
   const [password, setPassword] = useState("");
   const [confirm, setConfirm] = useState("");
   const [ownLocale, setOwnLocale] = useState(
@@ -129,7 +131,7 @@ function RegisterForm({
           return;
         }
         setFailure(
-          hasMessage(own) ? own : code === "registration_closed" ? labels.registrationClosed : code === "invitation_invalid" ? labels.invitationInvalid : code === "invitation_expired" ? labels.invitationExpired : labels.failed
+          hasMessage(own) ? own : isRateLimited(error) ? (labels.rateLimited ?? DEFAULT_REGISTER_LABELS.rateLimited)(retryAfterSeconds(error)) : code === "registration_closed" ? labels.registrationClosed : code === "invitation_invalid" ? labels.invitationInvalid : code === "invitation_expired" ? labels.invitationExpired : labels.failed
         );
       }
     );