@eifi1/ui-kit 0.30.0 → 0.31.1

package/README.md

@@ -382,16 +382,16 @@ columns, strings and permissions (see the note at the top of `src/feedback/feedb
 
 <!-- BEGIN GENERATED: exports — node scripts/gen-export-inventory.mjs -->
 
-**1577 names from 231 modules** — 724 values and 853 types. _Italic_ is a type-only export.
+**1690 names from 253 modules** — 779 values and 911 types. _Italic_ is a type-only export.
 
 Generated from `dist/index.d.ts` by `node scripts/gen-export-inventory.mjs`; the count
 is pinned by `src/__tests__/public-surface.test.ts`. Do not edit between the markers.
 
 | Entry point | Names |
 |---|---|
-| `@eifi1/ui-kit` | 1577 |
+| `@eifi1/ui-kit` | 1690 |
 | `@eifi1/ui-kit/chart` | 104 |
-| `@eifi1/ui-kit/shell` | 24 |
+| `@eifi1/ui-kit/shell` | 72 |
 | `@eifi1/ui-kit/data-table` | 51 |
 | `@eifi1/ui-kit/wizard` | 25 |
 | `@eifi1/ui-kit/tour` | 7 |
@@ -513,7 +513,7 @@ re-slicing of it, never a second API.
 | `components/multi-select` | `MultiSelect`, _`MultiSelectOption`_, _`MultiSelectProps`_ |
 | `components/tooltip` | `placeTooltip`, `Tooltip`, _`TooltipPlacement`_, _`TooltipProps`_, _`TooltipSide`_, _`TooltipSize`_, _`TooltipTap`_, _`TooltipViewport`_ |
 | `components/user-avatar` | `avatarInitials`, `UserAvatar`, _`UserAvatarBadge`_, _`UserAvatarProps`_ |
-| `components/settings-fields` | `LanguageSetting`, `ThemeSetting`, _`LanguageSettingProps`_, _`ThemeSettingProps`_ |
+| `components/settings-fields` | `LanguageSetting`, `ThemeSetting`, _`LanguageSettingProps`_, _`ThemeSettingProps`_, _`ThemeSettingToggleProps`_ |
 | `components/field-sync` | `DEFAULT_FIELD_SYNC_LABELS`, `FIELD_SYNC_FRAME`, `FIELD_SYNC_SAVED_MS`, `FieldSyncIndicator`, `FieldSyncRow`, `resolveFieldSyncLabels`, `useFieldSync`, _`FieldSyncIndicatorProps`_, _`FieldSyncLabels`_, _`FieldSyncRowProps`_, _`FieldSyncState`_, _`UseFieldSyncOptions`_, _`UseFieldSyncReturn`_ |
 | `components/month-picker` | `DEFAULT_MONTH_PICKER_LABELS`, `MonthPicker`, _`MonthPickerLabels`_, _`MonthPickerProps`_ |
 | `components/checkbox` | `Checkbox`, _`CheckboxProps`_ |
@@ -652,7 +652,7 @@ re-slicing of it, never a second API.
 | `auth/sign-in-form` | `DEFAULT_SIGN_IN_LABELS`, `SignInForm`, _`SignInAction`_, _`SignInAnswer`_, _`SignInCodeValues`_, _`SignInCredentials`_, _`SignInFormProps`_, _`SignInLabels`_, _`SignInNewPasswordValues`_, _`SignInStep`_ |
 | `auth/complete-name-dialog` | `CompleteNameDialog`, `DEFAULT_COMPLETE_NAME_LABELS`, _`CompleteNameDialogProps`_, _`CompleteNameLabels`_, _`CompleteNameValues`_ |
 | `auth/email-tag` | `taggedEmail` |
-| `auth/auth-errors` | `authErrorCode`, `isAuthError`, `isRateLimited`, `retryAfterSeconds`, _`AccountErrorCode`_, _`AuthErrorCode`_, _`KitErrorCode`_ |
+| `auth/auth-errors` | `authErrorCode`, `isAuthError`, `isRateLimited`, `retryAfterSeconds`, _`AccountErrorCode`_, _`AuthErrorCode`_, _`DemoErrorCode`_, _`KitErrorCode`_ |
 | `auth/forgot-password-form` | `DEFAULT_FORGOT_PASSWORD_LABELS`, `ForgotPasswordForm`, _`ForgotPasswordFormProps`_, _`ForgotPasswordLabels`_ |
 | `auth/reset-password-form` | `DEFAULT_RESET_PASSWORD_LABELS`, `ResetPasswordForm`, _`ResetPasswordCheck`_, _`ResetPasswordFormProps`_, _`ResetPasswordLabels`_, _`ResetPasswordResult`_, _`ResetPasswordValues`_ |
 | `auth/verify-email` | `DEFAULT_VERIFY_EMAIL_LABELS`, `EmailVerificationBanner`, `VerifyEmailStatus`, _`EmailVerificationBannerProps`_, _`VerifyEmailFailure`_, _`VerifyEmailLabels`_, _`VerifyEmailStatusProps`_ |
@@ -700,6 +700,43 @@ re-slicing of it, never a second API.
 | `search/search-index` | `createSearchIndex`, `matchEntries`, `normalizeSearchText`, `SEARCH_TIER_POINTS`, _`SearchEntry`_, _`SearchHit`_, _`SearchIndex`_, _`SearchIndexOptions`_, _`SearchMatchField`_ |
 | `search/global-search` | `DEFAULT_GLOBAL_SEARCH_LABELS`, `GlobalSearch`, _`GlobalSearchLabels`_, _`GlobalSearchProps`_, _`GlobalSearchSource`_, _`GlobalSearchSourceGroup`_, _`GlobalSearchSuggestion`_, _`GlobalSearchTriggerProps`_ |
 
+### settings
+
+| Module | Exports |
+|---|---|
+| `settings/settings-layout` | `SETTINGS_SEARCH_THRESHOLD`, `SettingsLayout`, _`SettingsLayoutProps`_, _`SettingsLayoutWidth`_ |
+| `settings/use-settings-route` | `resolveSettingsLocation`, `SETTINGS_FROM_LIST_STATE`, `settingsFromListState`, `useSettingsRoute`, _`SettingsLayoutMode`_, _`SettingsLocation`_, _`SettingsLocationResult`_, _`SettingsLocationRules`_, _`SettingsRoute`_, _`UseSettingsRouteOptions`_ |
+| `settings/use-settings-focus` | `SETTINGS_FOCUS_MS`, `SETTINGS_FOCUS_RING`, `useSettingsFocus` |
+| `settings/settings-section` | `SettingsSection`, _`SettingsSectionProps`_ |
+| `settings/settings-context` | `useSettingsLayout`, _`SettingsLayoutContextValue`_ |
+| `settings/settings-heading` | `SettingsHeadingLevel`, `useSettingsHeadingLevel`, _`SettingsHeadingLevelProps`_, _`SettingsHeadingTag`_ |
+| `settings/settings-catalogue` | `settingsHref`, `settingsSearchEntries`, `visibleSettingsEntries`, `visibleSettingsGroups`, _`SettingsEntry`_, _`SettingsGroup`_, _`SettingsSearchEntriesOptions`_ |
+| `settings/settings-labels` | `DEFAULT_SETTINGS_LABELS`, `useSettingsLabels`, _`SettingsCoreGroup`_, _`SettingsGroupLabels`_, _`SettingsLabels`_ |
+| `settings/use-account-language` | `matchOfferedLanguage`, `resolveAccountLanguage`, `useAccountLanguage`, _`AccountLanguage`_, _`AccountLanguageSource`_, _`ResolveAccountLanguageInput`_, _`ResolvedAccountLanguage`_, _`UseAccountLanguageOptions`_ |
+
+### landing
+
+| Module | Exports |
+|---|---|
+| `landing/landing-labels` | `DEFAULT_LANDING_LABELS`, `useLandingLabels`, _`LandingLabels`_ |
+| `landing/access` | `accessAction`, `useAccessAction`, _`AccessChoice`_, _`AccessLabels`_, _`AccessLink`_ |
+| `landing/landing-actions` | `LandingActions`, _`LandingActionsProps`_, _`LandingSession`_ |
+| `landing/landing-sections` | `CtaBand`, `FeatureRow`, `FeatureRows`, `Hero`, `PublicFooter`, `TrustStrip`, _`CtaBandProps`_, _`FeatureRowProps`_, _`FeatureRowsProps`_, _`HeroProps`_, _`PublicFooterProps`_, _`TrustItem`_, _`TrustStripProps`_ |
+| `landing/page-seo` | `metaContent`, `seoCopyProblems`, `usePageSeo`, _`SeoCopy`_, _`SeoCopyLimits`_, _`SeoCopyProblem`_, _`SeoCopyProblemCode`_ |
+| `landing/routing` | `clearLastVisitedPage`, `DEFAULT_LAST_VISITED_EXCLUDES`, `NEXT_PARAM`, `readLastVisitedPage`, `RedirectIfAuthed`, `RootEntry`, `safeNextPath`, `useLastVisitedPage`, _`LastVisitedPageOptions`_, _`PathPattern`_, _`RedirectIfAuthedProps`_, _`RootEntryProps`_, _`RoutingSession`_ |
+| `landing/public-header` | `PublicHeader`, _`PublicHeaderBrand`_, _`PublicHeaderProps`_ |
+
+### demo
+
+| Module | Exports |
+|---|---|
+| `demo/demo-labels` | `DEFAULT_DEMO_LABELS`, `useDemoLabels`, _`DemoLabels`_ |
+| `demo/demo-session` | `isDemoSession`, _`DemoModel`_, _`DemoSessionUser`_ |
+| `demo/demo-countdown` | `DEMO_MINUTES_ONLY`, `DEMO_WARNING_MINUTES`, `demoCountdown`, `useDemoCountdown`, _`DemoCountdown`_, _`DemoCountdownOptions`_, _`DemoExpiry`_ |
+| `demo/demo-start` | `DemoStart`, _`DemoStartProps`_ |
+| `demo/demo-banner` | `DemoBanner`, _`DemoBannerProps`_ |
+| `demo/demo-ended` | `DemoEnded`, _`DemoEndedProps`_ |
+
 <!-- END GENERATED: exports -->
 
 ## Forms / refs

package/dist/account/data-export-setting.js

@@ -9,7 +9,8 @@ import { hasMessage } from "../components/choice-parts.js";
 import { TextLink } from "../components/text-link.js";
 import { Button, Card } from "../components/ui.js";
 import { englishWait, isRateLimited, retryAfterSeconds } from "../auth/auth-errors.js";
-import { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, settle, useMounted } from "./account-parts.js";
+import { CARD_DESCRIPTION_CLASS, settle, useMounted } from "./account-parts.js";
+import { SettingsCardTitle } from "../settings/settings-heading.js";
 const DEFAULT_DATA_EXPORT_LABELS = {
   title: "Export your data",
   description: "Download a copy of your account\u2019s data as a JSON file.",
@@ -88,7 +89,7 @@ function DataExportSetting({
   };
   return /* @__PURE__ */ jsxs(Card, { ...rest, className: cn("p-4 space-y-3", className), children: [
     /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
-      /* @__PURE__ */ jsx("div", { className: CARD_TITLE_CLASS, children: labels.title }),
+      /* @__PURE__ */ jsx(SettingsCardTitle, { children: labels.title }),
       /* @__PURE__ */ jsx("div", { className: CARD_DESCRIPTION_CLASS, children: labels.description }),
       hasMessage(description) && /* @__PURE__ */ jsx("div", { className: CARD_DESCRIPTION_CLASS, children: description })
     ] }),

package/dist/account/data-export-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/data-export-setting.tsx"],"sourcesContent":["import { useEffect, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { Download } from \"lucide-react\";\n\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button, Card } from \"../components/ui\";\nimport { englishWait, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, settle, useMounted } from \"./account-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link DataExportSetting} renders — the `dataExport` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. */\nexport interface DataExportLabels {\n  /** The card's title. */\n  title: string;\n  /** What the download is. The app's own sentence (`description`) follows it. */\n  description: string;\n  /** The button. */\n  download: string;\n  /** Said once the file was handed to the browser. */\n  started: string;\n  /** The link under it that saves the same file again, for a browser that held the\n   *  download back. */\n  saveAgain: string;\n  /** The export was throttled — HTTP 429 (§6.5: once a minute) — given its\n   *  `Retry-After` wait in seconds, or `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure. */\n  failed: string;\n}\n\nexport const DEFAULT_DATA_EXPORT_LABELS: DataExportLabels = {\n  title: \"Export your data\",\n  description: \"Download a copy of your account’s data as a JSON file.\",\n  download: \"Download my data\",\n  started: \"Your download has started.\",\n  saveAgain: \"Didn’t start? Save the file\",\n  rateLimited: (seconds) =>\n    seconds && seconds > 0\n      ? `You exported your data a moment ago. Try again in ${englishWait(seconds)}.`\n      : \"You exported your data a moment ago. Please try again in a minute.\",\n  failed: \"The export failed. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/**\n * What {@link DataExportSettingProps.onExport} resolves with: the file itself — a `Blob`\n * (axios' `responseType: \"blob\"`, `await res.blob()`) — or a URL the browser fetches\n * itself (a signed link), with the file name to save it under.\n */\nexport type DataExportFile = Blob | { url: string; filename?: string };\n\nexport interface DataExportSettingProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /**\n   * Fetch the export (`GET /auth/me/export`, §6.5). Resolve with the file — the card\n   * saves it under `filename` — or reject with the client's error: a 429 (the export is\n   * throttled to once a minute) says `rateLimited`, anything else (a demo account's 403)\n   * goes through `describeError`, else `failed`.\n   */\n  onExport: () => Promise<DataExportFile>;\n  /**\n   * The app's sentence under the kit's — what the export holds and what it doesn't.\n   * kastlan's: \"Your account; your company's records are your company's, ask them.\"\n   */\n  description?: ReactNode;\n  /** The name the file is saved under. Default `account-export-YYYY-MM-DD.json` (the\n   *  local day); a `{ url, filename }` answer's own name wins. */\n  filename?: string;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: Partial<DataExportLabels>;\n}\n\ninterface Saved {\n  href: string;\n  filename: string;\n  /** An object URL of ours, revoked when it is replaced or the card goes. */\n  owned: boolean;\n}\n\n/** `account-export-2026-10-07.json`, the local day — the one a person looks for. */\nfunction defaultFilename(now = new Date()): string {\n  const pad = (n: number) => String(n).padStart(2, \"0\");\n  return `account-export-${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}.json`;\n}\n\n/** A `{ url }` answer, as opposed to a Blob or anything else. */\nfunction isUrlAnswer(value: unknown): value is { url: string; filename?: string } {\n  return typeof value === \"object\" && value !== null && typeof (value as { url?: unknown }).url === \"string\";\n}\n\n/** Hand `href` to the browser as a download named `filename`: a link with `download`,\n *  clicked once and taken out again — the one way a page saves a file without a new\n *  tab that would show the JSON instead. */\nfunction startDownload(href: string, filename: string) {\n  const link = document.createElement(\"a\");\n  link.href = href;\n  link.download = filename;\n  link.rel = \"noopener\";\n  link.hidden = true;\n  document.body.appendChild(link);\n  link.click();\n  link.remove();\n}\n\n/**\n * The account's data as a download (docs/user-admin-harmonization.md §6.5, §2.2): what it\n * is, the app's sentence on what it holds, and one button.\n *\n * **The kit saves the file.** `onExport` fetches it — the request is the app's, with its\n * auth (auth §8) — and resolves with a `Blob` or a `{ url }`; the card hands it to the\n * browser through a link with a `download` name, so it lands as `account-export-….json`\n * rather than opening as a page of JSON. A `Blob` becomes an object URL, revoked when\n * the next export replaces it or the card unmounts.\n *\n * The click comes after an `await`, which some browsers count as no longer the\n * person's: \"Didn't start? Save the file\" stays under the confirmation, a real link to\n * the same file that the person clicks themselves.\n *\n * **The throttle** (once a minute, §6.5) is a 429, said as such; the app's\n * `describeError` comes first (keksdose's demo account answers 403).\n */\nexport function DataExportSetting({\n  onExport,\n  description,\n  filename,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: DataExportSettingProps) {\n  const labels = useKitLabels(\"dataExport\", DEFAULT_DATA_EXPORT_LABELS, labelsProp);\n  const [busy, setBusy] = useState(false);\n  const [saved, setSaved] = useState<Saved | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  // Our object URL lives as long as the \"Save the file\" link that points at it.\n  useEffect(() => {\n    if (!saved?.owned) return;\n    const href = saved.href;\n    return () => URL.revokeObjectURL(href);\n  }, [saved]);\n\n  const run = () => {\n    if (busy) return;\n    setBusy(true);\n    setFailure(null);\n    // The last file's link goes (and its object URL with it): it would sit beside this\n    // export's answer as if it were it.\n    setSaved(null);\n    settle(onExport).then(\n      (answer) => {\n        if (!mounted.current) return;\n        setBusy(false);\n        let next: Saved;\n        if (answer instanceof Blob) {\n          next = { href: URL.createObjectURL(answer), filename: filename ?? defaultFilename(), owned: true };\n        } else if (isUrlAnswer(answer)) {\n          next = { href: answer.url, filename: answer.filename ?? filename ?? defaultFilename(), owned: false };\n        } else {\n          // Nothing to save: an app that resolved with its response object, say.\n          setFailure(labels.failed);\n          return;\n        }\n        setSaved(next);\n        startDownload(next.href, next.filename);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(false);\n        const own = describeError?.(error);\n        setFailure(\n          hasMessage(own) ? own : isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed,\n        );\n      },\n    );\n  };\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div className=\"space-y-1\">\n        <div className={CARD_TITLE_CLASS}>{labels.title}</div>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n        {hasMessage(description) && <div className={CARD_DESCRIPTION_CLASS}>{description}</div>}\n      </div>\n      <div className=\"flex flex-wrap items-center gap-x-3 gap-y-2\">\n        <Button type=\"button\" variant=\"secondary\" pending={busy} onClick={run}>\n          <Download aria-hidden className=\"size-4\" />\n          {labels.download}\n        </Button>\n        {/* Always in the tree, so the confirmation that appears in it is announced; in\n            the button's row, so an empty one takes no line of its own. */}\n        <span role=\"status\" className=\"text-xs text-[var(--text-secondary)]\">\n          {saved && (\n            <>\n              {labels.started}{\" \"}\n              <TextLink href={saved.href} download={saved.filename} reloadDocument tone=\"secondary\">\n                {labels.saveAgain}\n              </TextLink>\n            </>\n          )}\n        </span>\n      </div>\n      {hasMessage(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AA2LM,SAcM,UAbJ,KADF;AA3LN,SAAS,WAAW,gBAAgB;AAEpC,SAAS,gBAAgB;AAEzB,SAAS,oBAAoB;AAC7B,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,YAAY;AAC7B,SAAS,aAAa,eAAe,yBAAyB;AAC9D,SAAS,wBAAwB,kBAAkB,QAAQ,kBAAkB;AAyBtE,MAAM,6BAA+C;AAAA,EAC1D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AAAA,EACV,SAAS;AAAA,EACT,WAAW;AAAA,EACX,aAAa,CAAC,YACZ,WAAW,UAAU,IACjB,qDAAqD,YAAY,OAAO,CAAC,MACzE;AAAA,EACN,QAAQ;AACV;AAwCA,SAAS,gBAAgB,MAAM,oBAAI,KAAK,GAAW;AACjD,QAAM,MAAM,CAAC,MAAc,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG;AACpD,SAAO,kBAAkB,IAAI,YAAY,CAAC,IAAI,IAAI,IAAI,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC;AAC7F;AAGA,SAAS,YAAY,OAA6D;AAChF,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAQ,MAA4B,QAAQ;AACpG;AAKA,SAAS,cAAc,MAAc,UAAkB;AACrD,QAAM,OAAO,SAAS,cAAc,GAAG;AACvC,OAAK,OAAO;AACZ,OAAK,WAAW;AAChB,OAAK,MAAM;AACX,OAAK,SAAS;AACd,WAAS,KAAK,YAAY,IAAI;AAC9B,OAAK,MAAM;AACX,OAAK,OAAO;AACd;AAmBO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AACrD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAG3B,YAAU,MAAM;AACd,QAAI,CAAC,OAAO,MAAO;AACnB,UAAM,OAAO,MAAM;AACnB,WAAO,MAAM,IAAI,gBAAgB,IAAI;AAAA,EACvC,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,MAAM,MAAM;AAChB,QAAI,KAAM;AACV,YAAQ,IAAI;AACZ,eAAW,IAAI;AAGf,aAAS,IAAI;AACb,WAAO,QAAQ,EAAE;AAAA,MACf,CAAC,WAAW;AACV,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,KAAK;AACb,YAAI;AACJ,YAAI,kBAAkB,MAAM;AAC1B,iBAAO,EAAE,MAAM,IAAI,gBAAgB,MAAM,GAAG,UAAU,YAAY,gBAAgB,GAAG,OAAO,KAAK;AAAA,QACnG,WAAW,YAAY,MAAM,GAAG;AAC9B,iBAAO,EAAE,MAAM,OAAO,KAAK,UAAU,OAAO,YAAY,YAAY,gBAAgB,GAAG,OAAO,MAAM;AAAA,QACtG,OAAO;AAEL,qBAAW,OAAO,MAAM;AACxB;AAAA,QACF;AACA,iBAAS,IAAI;AACb,sBAAc,KAAK,MAAM,KAAK,QAAQ;AAAA,MACxC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,KAAK;AACb,cAAM,MAAM,gBAAgB,KAAK;AACjC;AAAA,UACE,WAAW,GAAG,IAAI,MAAM,cAAc,KAAK,IAAI,OAAO,YAAY,kBAAkB,KAAK,CAAC,IAAI,OAAO;AAAA,QACvG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,SAAI,WAAW,kBAAmB,iBAAO,OAAM;AAAA,MAChD,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,MAC3D,WAAW,WAAW,KAAK,oBAAC,SAAI,WAAW,wBAAyB,uBAAY;AAAA,OACnF;AAAA,IACA,qBAAC,SAAI,WAAU,+CACb;AAAA,2BAAC,UAAO,MAAK,UAAS,SAAQ,aAAY,SAAS,MAAM,SAAS,KAChE;AAAA,4BAAC,YAAS,eAAW,MAAC,WAAU,UAAS;AAAA,QACxC,OAAO;AAAA,SACV;AAAA,MAGA,oBAAC,UAAK,MAAK,UAAS,WAAU,wCAC3B,mBACC,iCACG;AAAA,eAAO;AAAA,QAAS;AAAA,QACjB,oBAAC,YAAS,MAAM,MAAM,MAAM,UAAU,MAAM,UAAU,gBAAc,MAAC,MAAK,aACvE,iBAAO,WACV;AAAA,SACF,GAEJ;AAAA,OACF;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/data-export-setting.tsx"],"sourcesContent":["import { useEffect, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { Download } from \"lucide-react\";\n\nimport { useKitLabels } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button, Card } from \"../components/ui\";\nimport { englishWait, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link DataExportSetting} renders — the `dataExport` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. */\nexport interface DataExportLabels {\n  /** The card's title. */\n  title: string;\n  /** What the download is. The app's own sentence (`description`) follows it. */\n  description: string;\n  /** The button. */\n  download: string;\n  /** Said once the file was handed to the browser. */\n  started: string;\n  /** The link under it that saves the same file again, for a browser that held the\n   *  download back. */\n  saveAgain: string;\n  /** The export was throttled — HTTP 429 (§6.5: once a minute) — given its\n   *  `Retry-After` wait in seconds, or `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure. */\n  failed: string;\n}\n\nexport const DEFAULT_DATA_EXPORT_LABELS: DataExportLabels = {\n  title: \"Export your data\",\n  description: \"Download a copy of your account’s data as a JSON file.\",\n  download: \"Download my data\",\n  started: \"Your download has started.\",\n  saveAgain: \"Didn’t start? Save the file\",\n  rateLimited: (seconds) =>\n    seconds && seconds > 0\n      ? `You exported your data a moment ago. Try again in ${englishWait(seconds)}.`\n      : \"You exported your data a moment ago. Please try again in a minute.\",\n  failed: \"The export failed. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/**\n * What {@link DataExportSettingProps.onExport} resolves with: the file itself — a `Blob`\n * (axios' `responseType: \"blob\"`, `await res.blob()`) — or a URL the browser fetches\n * itself (a signed link), with the file name to save it under.\n */\nexport type DataExportFile = Blob | { url: string; filename?: string };\n\nexport interface DataExportSettingProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /**\n   * Fetch the export (`GET /auth/me/export`, §6.5). Resolve with the file — the card\n   * saves it under `filename` — or reject with the client's error: a 429 (the export is\n   * throttled to once a minute) says `rateLimited`, anything else (a demo account's 403)\n   * goes through `describeError`, else `failed`.\n   */\n  onExport: () => Promise<DataExportFile>;\n  /**\n   * The app's sentence under the kit's — what the export holds and what it doesn't.\n   * kastlan's: \"Your account; your company's records are your company's, ask them.\"\n   */\n  description?: ReactNode;\n  /** The name the file is saved under. Default `account-export-YYYY-MM-DD.json` (the\n   *  local day); a `{ url, filename }` answer's own name wins. */\n  filename?: string;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: Partial<DataExportLabels>;\n}\n\ninterface Saved {\n  href: string;\n  filename: string;\n  /** An object URL of ours, revoked when it is replaced or the card goes. */\n  owned: boolean;\n}\n\n/** `account-export-2026-10-07.json`, the local day — the one a person looks for. */\nfunction defaultFilename(now = new Date()): string {\n  const pad = (n: number) => String(n).padStart(2, \"0\");\n  return `account-export-${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}.json`;\n}\n\n/** A `{ url }` answer, as opposed to a Blob or anything else. */\nfunction isUrlAnswer(value: unknown): value is { url: string; filename?: string } {\n  return typeof value === \"object\" && value !== null && typeof (value as { url?: unknown }).url === \"string\";\n}\n\n/** Hand `href` to the browser as a download named `filename`: a link with `download`,\n *  clicked once and taken out again — the one way a page saves a file without a new\n *  tab that would show the JSON instead. */\nfunction startDownload(href: string, filename: string) {\n  const link = document.createElement(\"a\");\n  link.href = href;\n  link.download = filename;\n  link.rel = \"noopener\";\n  link.hidden = true;\n  document.body.appendChild(link);\n  link.click();\n  link.remove();\n}\n\n/**\n * The account's data as a download (docs/user-admin-harmonization.md §6.5, §2.2): what it\n * is, the app's sentence on what it holds, and one button.\n *\n * **The kit saves the file.** `onExport` fetches it — the request is the app's, with its\n * auth (auth §8) — and resolves with a `Blob` or a `{ url }`; the card hands it to the\n * browser through a link with a `download` name, so it lands as `account-export-….json`\n * rather than opening as a page of JSON. A `Blob` becomes an object URL, revoked when\n * the next export replaces it or the card unmounts.\n *\n * The click comes after an `await`, which some browsers count as no longer the\n * person's: \"Didn't start? Save the file\" stays under the confirmation, a real link to\n * the same file that the person clicks themselves.\n *\n * **The throttle** (once a minute, §6.5) is a 429, said as such; the app's\n * `describeError` comes first (keksdose's demo account answers 403).\n */\nexport function DataExportSetting({\n  onExport,\n  description,\n  filename,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: DataExportSettingProps) {\n  const labels = useKitLabels(\"dataExport\", DEFAULT_DATA_EXPORT_LABELS, labelsProp);\n  const [busy, setBusy] = useState(false);\n  const [saved, setSaved] = useState<Saved | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  // Our object URL lives as long as the \"Save the file\" link that points at it.\n  useEffect(() => {\n    if (!saved?.owned) return;\n    const href = saved.href;\n    return () => URL.revokeObjectURL(href);\n  }, [saved]);\n\n  const run = () => {\n    if (busy) return;\n    setBusy(true);\n    setFailure(null);\n    // The last file's link goes (and its object URL with it): it would sit beside this\n    // export's answer as if it were it.\n    setSaved(null);\n    settle(onExport).then(\n      (answer) => {\n        if (!mounted.current) return;\n        setBusy(false);\n        let next: Saved;\n        if (answer instanceof Blob) {\n          next = { href: URL.createObjectURL(answer), filename: filename ?? defaultFilename(), owned: true };\n        } else if (isUrlAnswer(answer)) {\n          next = { href: answer.url, filename: answer.filename ?? filename ?? defaultFilename(), owned: false };\n        } else {\n          // Nothing to save: an app that resolved with its response object, say.\n          setFailure(labels.failed);\n          return;\n        }\n        setSaved(next);\n        startDownload(next.href, next.filename);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(false);\n        const own = describeError?.(error);\n        setFailure(\n          hasMessage(own) ? own : isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed,\n        );\n      },\n    );\n  };\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div className=\"space-y-1\">\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n        {hasMessage(description) && <div className={CARD_DESCRIPTION_CLASS}>{description}</div>}\n      </div>\n      <div className=\"flex flex-wrap items-center gap-x-3 gap-y-2\">\n        <Button type=\"button\" variant=\"secondary\" pending={busy} onClick={run}>\n          <Download aria-hidden className=\"size-4\" />\n          {labels.download}\n        </Button>\n        {/* Always in the tree, so the confirmation that appears in it is announced; in\n            the button's row, so an empty one takes no line of its own. */}\n        <span role=\"status\" className=\"text-xs text-[var(--text-secondary)]\">\n          {saved && (\n            <>\n              {labels.started}{\" \"}\n              <TextLink href={saved.href} download={saved.filename} reloadDocument tone=\"secondary\">\n                {labels.saveAgain}\n              </TextLink>\n            </>\n          )}\n        </span>\n      </div>\n      {hasMessage(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AA4LM,SAcM,UAbJ,KADF;AA5LN,SAAS,WAAW,gBAAgB;AAEpC,SAAS,gBAAgB;AAEzB,SAAS,oBAAoB;AAC7B,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,YAAY;AAC7B,SAAS,aAAa,eAAe,yBAAyB;AAC9D,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAyB3B,MAAM,6BAA+C;AAAA,EAC1D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,UAAU;AAAA,EACV,SAAS;AAAA,EACT,WAAW;AAAA,EACX,aAAa,CAAC,YACZ,WAAW,UAAU,IACjB,qDAAqD,YAAY,OAAO,CAAC,MACzE;AAAA,EACN,QAAQ;AACV;AAwCA,SAAS,gBAAgB,MAAM,oBAAI,KAAK,GAAW;AACjD,QAAM,MAAM,CAAC,MAAc,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG;AACpD,SAAO,kBAAkB,IAAI,YAAY,CAAC,IAAI,IAAI,IAAI,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC;AAC7F;AAGA,SAAS,YAAY,OAA6D;AAChF,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAQ,MAA4B,QAAQ;AACpG;AAKA,SAAS,cAAc,MAAc,UAAkB;AACrD,QAAM,OAAO,SAAS,cAAc,GAAG;AACvC,OAAK,OAAO;AACZ,OAAK,WAAW;AAChB,OAAK,MAAM;AACX,OAAK,SAAS;AACd,WAAS,KAAK,YAAY,IAAI;AAC9B,OAAK,MAAM;AACX,OAAK,OAAO;AACd;AAmBO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,cAAc,4BAA4B,UAAU;AAChF,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AACrD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAG3B,YAAU,MAAM;AACd,QAAI,CAAC,OAAO,MAAO;AACnB,UAAM,OAAO,MAAM;AACnB,WAAO,MAAM,IAAI,gBAAgB,IAAI;AAAA,EACvC,GAAG,CAAC,KAAK,CAAC;AAEV,QAAM,MAAM,MAAM;AAChB,QAAI,KAAM;AACV,YAAQ,IAAI;AACZ,eAAW,IAAI;AAGf,aAAS,IAAI;AACb,WAAO,QAAQ,EAAE;AAAA,MACf,CAAC,WAAW;AACV,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,KAAK;AACb,YAAI;AACJ,YAAI,kBAAkB,MAAM;AAC1B,iBAAO,EAAE,MAAM,IAAI,gBAAgB,MAAM,GAAG,UAAU,YAAY,gBAAgB,GAAG,OAAO,KAAK;AAAA,QACnG,WAAW,YAAY,MAAM,GAAG;AAC9B,iBAAO,EAAE,MAAM,OAAO,KAAK,UAAU,OAAO,YAAY,YAAY,gBAAgB,GAAG,OAAO,MAAM;AAAA,QACtG,OAAO;AAEL,qBAAW,OAAO,MAAM;AACxB;AAAA,QACF;AACA,iBAAS,IAAI;AACb,sBAAc,KAAK,MAAM,KAAK,QAAQ;AAAA,MACxC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,KAAK;AACb,cAAM,MAAM,gBAAgB,KAAK;AACjC;AAAA,UACE,WAAW,GAAG,IAAI,MAAM,cAAc,KAAK,IAAI,OAAO,YAAY,kBAAkB,KAAK,CAAC,IAAI,OAAO;AAAA,QACvG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,MAC3D,WAAW,WAAW,KAAK,oBAAC,SAAI,WAAW,wBAAyB,uBAAY;AAAA,OACnF;AAAA,IACA,qBAAC,SAAI,WAAU,+CACb;AAAA,2BAAC,UAAO,MAAK,UAAS,SAAQ,aAAY,SAAS,MAAM,SAAS,KAChE;AAAA,4BAAC,YAAS,eAAW,MAAC,WAAU,UAAS;AAAA,QACxC,OAAO;AAAA,SACV;AAAA,MAGA,oBAAC,UAAK,MAAK,UAAS,WAAU,wCAC3B,mBACC,iCACG;AAAA,eAAO;AAAA,QAAS;AAAA,QACjB,oBAAC,YAAS,MAAM,MAAM,MAAM,UAAU,MAAM,UAAU,gBAAc,MAAC,MAAK,aACvE,iBAAO,WACV;AAAA,SACF,GAEJ;AAAA,OACF;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/account/delete-account-setting.d.ts

@@ -1,5 +1,5 @@
 import 'react';
-export { cq as DEFAULT_DELETE_ACCOUNT_LABELS, cQ as DeleteAccountConsequence, cR as DeleteAccountLabels, cS as DeleteAccountSetting, cT as DeleteAccountSettingProps, cU as DeleteAccountValues, cV as DeletionMode } from '../delete-account-setting-CGVMckMw.js';
+export { cq as DEFAULT_DELETE_ACCOUNT_LABELS, cQ as DeleteAccountConsequence, cR as DeleteAccountLabels, cS as DeleteAccountSetting, cT as DeleteAccountSettingProps, cU as DeleteAccountValues, cV as DeletionMode } from '../delete-account-setting-CpIhzxxZ.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
 import '../lib/clipping.js';
@@ -54,6 +54,8 @@ import '../components/image-grid.js';
 import '../components/lightbox.js';
 import '../components/write-lock.js';
 import '../auth/sign-in-form.js';
+import '../landing/access.js';
+import '../landing/landing-labels.js';
 import '../shell/topbar-controls.js';
 import '../theme/palette-presets.js';
 import '../theme/chart-palette.js';
@@ -75,6 +77,8 @@ import './data-export-setting.js';
 import '../components/account-chips.js';
 import '../admin/admin-parts.js';
 import '../admin/admin-action-log.js';
+import '../settings/settings-labels.js';
+import '../demo/demo-labels.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';

package/dist/account/delete-account-setting.js

@@ -16,7 +16,8 @@ import {
 import { Card } from "../components/ui.js";
 import { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from "../auth/auth-errors.js";
 import { useFocusWhen } from "../auth/status-parts.js";
-import { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, refusalCompanies, settle, useMounted } from "./account-parts.js";
+import { CARD_DESCRIPTION_CLASS, refusalCompanies, settle, useMounted } from "./account-parts.js";
+import { SettingsCardTitle } from "../settings/settings-heading.js";
 const DEFAULT_DELETE_ACCOUNT_LABELS = {
   title: "Delete account",
   afterDays: (days) => days === 1 ? "Your account is deactivated at once and erased for good 1 day later." : `Your account is deactivated at once and erased for good ${days} days later.`,
@@ -135,7 +136,7 @@ function DeleteAccountSetting({
       className: cn("p-4 space-y-3", className),
       children: [
         /* @__PURE__ */ jsxs("div", { children: [
-          /* @__PURE__ */ jsx("div", { className: CARD_TITLE_CLASS, children: labels.title }),
+          /* @__PURE__ */ jsx(SettingsCardTitle, { children: labels.title }),
           /* @__PURE__ */ jsx("div", { className: CARD_DESCRIPTION_CLASS, children: modeSentence })
         ] }),
         done ? /* @__PURE__ */ jsxs("div", { ref: doneRef, tabIndex: -1, role: "status", className: "flex items-start gap-2 text-sm outline-none", children: [

package/dist/account/delete-account-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/delete-account-setting.tsx"],"sourcesContent":["import { isValidElement, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { UserX } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport {\n  CurrentPasswordInput,\n  DangerConfirm,\n  DEFAULT_DANGER_CONFIRM_LABELS,\n  TypedConfirmField,\n  typedMatches,\n} from \"../components/danger-confirm\";\nimport type { DangerConsequence } from \"../components/danger-confirm\";\nimport { Card } from \"../components/ui\";\nimport { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { useFocusWhen } from \"../auth/status-parts\";\nimport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, refusalCompanies, settle, useMounted } from \"./account-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/**\n * Every string {@link DeleteAccountSetting} renders — the `deleteAccount` namespace of\n * `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n * Cancel, \"Password\" and \"Type … to confirm\" are `dangerConfirm`'s.\n */\nexport interface DeleteAccountLabels {\n  /** The card's title. */\n  title: string;\n  /** Mode `after_days`, given the days: what happens and when. */\n  afterDays: (days: number) => string;\n  /** Mode `operator`: what happens, and who erases it. */\n  operator: string;\n  /** The button that opens the confirm. */\n  arm: string;\n  /** The confirm's warning, over the consequences. */\n  prompt: string;\n  /** The line in the consequences when `handOverCount` is given (Kurvenschmiede, §2.7),\n   *  given the count. */\n  handOver: (count: number) => string;\n  /** The button that sends it. */\n  confirm: string;\n  /** Said once the request is accepted — the app signs out next. */\n  done: string;\n  /** `password_incorrect` (server-kit's `400` for a wrong current password), under the\n   *  password field. */\n  wrongPassword: string;\n  /** `confirmation_mismatch` — the server did not take the typed address as the\n   *  account's — under the address field. */\n  confirmationMismatch: string;\n  /** `last_admin` — the account is the last active admin. */\n  lastAdmin: string;\n  /** `last_admin` naming the companies (kastlan checks per company), given them as one\n   *  list in the reader's language (\"Example AG and Sample GmbH\"). */\n  lastAdminOf: (companies: string) => string;\n  /** `household_has_members` — keksdose's guard (§6.4). */\n  householdHasMembers: string;\n  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or\n   *  `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure. */\n  failed: string;\n}\n\nexport const DEFAULT_DELETE_ACCOUNT_LABELS: DeleteAccountLabels = {\n  title: \"Delete account\",\n  afterDays: (days) =>\n    days === 1\n      ? \"Your account is deactivated at once and erased for good 1 day later.\"\n      : `Your account is deactivated at once and erased for good ${days} days later.`,\n  operator: \"Your account is deactivated at once, and an operator will erase it for good.\",\n  arm: \"Delete account…\",\n  prompt: \"You will be signed out on every device, and your account can no longer be used.\",\n  handOver: (count) =>\n    count === 1\n      ? \"1 item others can see will pass to an administrator.\"\n      : `${count} items others can see will pass to an administrator.`,\n  confirm: \"Delete my account\",\n  done: \"Your account is deactivated. You are being signed out.\",\n  wrongPassword: \"The password is incorrect.\",\n  confirmationMismatch: \"This is not your account’s address.\",\n  lastAdmin: \"You are the last administrator. Make someone else an administrator first.\",\n  lastAdminOf: (companies) =>\n    `You are the last administrator of ${companies}. Make someone else an administrator there first.`,\n  householdHasMembers:\n    \"Your household has other members, so the account can’t be deleted here. Please write to the operator.\",\n  rateLimited: englishRateLimited,\n  failed: \"Your account could not be deleted. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What happens after the deactivation (§2.1, §6.4) — the app's setting. */\nexport type DeletionMode = \"after_days\" | \"operator\";\n\n/** What {@link DeleteAccountSettingProps.onRequest} gets: the `POST /auth/me/deletion`\n *  body. */\nexport interface DeleteAccountValues {\n  /** As typed. */\n  password: string;\n  /** The address as TYPED, trimmed — the server re-checks it against the account\n   *  (server-kit's `confirm_email_matches`), as keksdose's admin actions do. */\n  confirmEmail: string;\n}\n\n/** One line of the consequences: a node of the app's, or a {@link DangerConsequence}\n *  for a key of its own and the `severe` mark. */\nexport type DeleteAccountConsequence = ReactNode | DangerConsequence;\n\nexport interface DeleteAccountSettingProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /** The account's address — the text to type. */\n  email: string;\n  /** `\"after_days\"` (keksdose, Kurvenschmiede: erased by a scheduled job) or\n   *  `\"operator\"` (kastlan: company data is involved, an operator erases it). */\n  mode: DeletionMode;\n  /** With `after_days`: how many. Default 30 (§2.1). */\n  days?: number;\n  /**\n   * What goes, in the app's words (§6.4: \"the app's own list\") — derived from the\n   * account's own facts where it can be: keksdose's \"Budget X will be deleted; its 2\n   * guests are told\", rather than the worst case for everybody.\n   */\n  consequences?: readonly DeleteAccountConsequence[];\n  /** Kurvenschmiede (§2.7): how many owned items others can see — they pass to the\n   *  first active admin at erasure. A line of its own in the consequences; 0 or left\n   *  out, none. */\n  handOverCount?: number;\n  /**\n   * The confirm was answered: send `POST /auth/me/deletion {password, confirm_email}`.\n   * Resolve once it is accepted — the card says \"You are being signed out\" — and then\n   * sign the user out: the server ended every session with the deactivation. Reject\n   * with the client's error: `password_incorrect` under the password,\n   * `confirmation_mismatch` under the address, `last_admin` (with kastlan's\n   * `companies`) and `household_has_members` above the buttons, a 429 as\n   * `rateLimited`, anything else (a demo account's 403, an app's own code) through\n   * `describeError`, else `failed`. The confirm stays open with what was typed, for a\n   * retry.\n   */\n  onRequest: (values: DeleteAccountValues) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for\n   *  every failure — kastlan's `last_admin` names the companies. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: Partial<DeleteAccountLabels>;\n}\n\n/** Whether an item is a `{ text }` line rather than a node — a React element is an\n *  object too, and so would a `{ text }` lookalike be, so the element test comes first. */\nfunction isConsequence(item: DeleteAccountConsequence): item is DangerConsequence {\n  return typeof item === \"object\" && item !== null && !isValidElement(item) && \"text\" in item;\n}\n\n/**\n * Deleting one's own account (docs/user-admin-harmonization.md §6.4, §2.1): what it does,\n * the password, the typed address — then the app signs out.\n *\n * **Two stages, said before the button.** The request DEACTIVATES the account at once\n * (no sign-in, every session ended, marked for deletion); the erasure follows per the\n * app's `mode` — \"erased for good 30 days later\" (`after_days`, a scheduled job) or \"an\n * operator will erase it\" (`operator`, kastlan, where company records are involved).\n * The sentence is under the title, so it is read before anything is pressed.\n *\n * **The confirm is a {@link DangerConfirm}** with the two guards of every \"type the\n * address\" rule in the apps: the address typed (compared caseless, as in all of them)\n * and the password. They are the tile's own {@link TypedConfirmField} and\n * {@link CurrentPasswordInput}, drawn in its fields slot and held by\n * `confirmDisabledReason` with the tile's own sentences, rather than its built-in\n * `phrase` / `requirePassword` — those have no error of their own, and a wrong password\n * belongs under the password. Its consequences are the app's list, plus\n * Kurvenschmiede's hand-over line (`handOverCount`, §2.7: shared work goes to an\n * administrator, never a refusal). The typed address goes to `onRequest` as typed, so\n * the server re-checks it (`confirm_email_matches`).\n *\n * **Refusals** (§6.4) are read by code ({@link authErrorCode}): `password_incorrect` (a\n * `400`, so an app's 401 handling never signs the person out over a typo) under the\n * password, `confirmation_mismatch` under the address, `last_admin` — naming kastlan's\n * companies when the answer lists them — and keksdose's `household_has_members` guard\n * above the buttons; a 429; and the rest in the app's words. The confirm stays open with\n * what was typed, for a retry; Cancel wipes it.\n *\n * **After success** the card says the account is deactivated and the person is being\n * signed out — the app's to do, since the kit sends nothing (auth §8).\n */\nexport function DeleteAccountSetting({\n  email,\n  mode,\n  days = 30,\n  consequences,\n  handOverCount,\n  onRequest,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: DeleteAccountSettingProps) {\n  const labels = useKitLabels(\"deleteAccount\", DEFAULT_DELETE_ACCOUNT_LABELS, labelsProp);\n  // The guards speak the tile's words, so \"Type “…” to confirm\" and \"Enter your password\n  // to confirm\" are translated once, in `dangerConfirm`.\n  const guardLabels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS);\n  const locale = useKitLocale();\n  const [typed, setTyped] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [busy, setBusy] = useState(false);\n  const [fieldError, setFieldError] = useState<\"email\" | \"password\" | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [done, setDone] = useState(false);\n  const mounted = useMounted();\n  const typedRef = useRef<HTMLInputElement>(null);\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const doneRef = useRef<HTMLDivElement>(null);\n  // The tile went with the press; the answer takes the focus, so it is read out.\n  useFocusWhen(done, doneRef);\n\n  const modeSentence = mode === \"operator\" ? labels.operator : labels.afterDays(days);\n\n  const lines: (string | DangerConsequence)[] = (consequences ?? [])\n    // `{cond && \"…\"}` lines that came out empty are no lines.\n    .filter((item) => item !== null && item !== undefined && item !== false && item !== \"\")\n    .map((item, index) => (isConsequence(item) ? item : { key: `app-${index}`, text: item }));\n  if (handOverCount !== undefined && handOverCount > 0) {\n    lines.push({ key: \"hand-over\", text: labels.handOver(handOverCount) });\n  }\n\n  // The first guard still open, in the order the fields are drawn — DangerConfirm's rule.\n  const held = !typedMatches(typed, email, \"caseless\")\n    ? typeof guardLabels.needsPhrase === \"function\"\n      ? guardLabels.needsPhrase(email)\n      : guardLabels.needsPhrase\n    : password === \"\"\n      ? guardLabels.needsPassword\n      : undefined;\n\n  const present = (error: unknown) => {\n    const own = describeError?.(error);\n    if (hasMessage(own)) {\n      setFailure(own);\n      return;\n    }\n    if (isRateLimited(error)) {\n      setFailure(labels.rateLimited(retryAfterSeconds(error)));\n      return;\n    }\n    const code = authErrorCode(error);\n    // `invalid_credentials` too, for a server that answered a wrong password so before\n    // server-kit 0.4.0 named `password_incorrect`.\n    if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n      setFieldError(\"password\");\n      passwordRef.current?.focus();\n      return;\n    }\n    if (code === \"confirmation_mismatch\" || code === \"confirmation_required\") {\n      setFieldError(\"email\");\n      typedRef.current?.focus();\n      return;\n    }\n    if (code === \"last_admin\") {\n      const companies = refusalCompanies(error);\n      setFailure(\n        companies\n          ? labels.lastAdminOf(new Intl.ListFormat(locale, { type: \"conjunction\" }).format(companies))\n          : labels.lastAdmin,\n      );\n      return;\n    }\n    setFailure(code === \"household_has_members\" ? labels.householdHasMembers : labels.failed);\n  };\n\n  const confirm = () => {\n    setFailure(null);\n    setFieldError(null);\n    setBusy(true);\n    const values: DeleteAccountValues = { password, confirmEmail: typed.trim() };\n    return settle(() => onRequest(values)).then(\n      () => {\n        if (!mounted.current) return;\n        setBusy(false);\n        setDone(true);\n      },\n      (error: unknown) => {\n        if (mounted.current) {\n          setBusy(false);\n          present(error);\n        }\n        // Rejected again, so DangerConfirm stays armed with what was typed.\n        throw error;\n      },\n    );\n  };\n\n  // A disarmed tile holds no password — DangerConfirm's own rule, for the fields it\n  // does not own here.\n  const disarmed = (armed: boolean) => {\n    if (armed) return;\n    setTyped(\"\");\n    setPassword(\"\");\n    setFieldError(null);\n    setFailure(null);\n  };\n\n  return (\n    <Card\n      {...rest}\n      data-state={done ? \"done\" : \"form\"}\n      tone=\"danger\"\n      className={cn(\"p-4 space-y-3\", className)}\n    >\n      <div>\n        <div className={CARD_TITLE_CLASS}>{labels.title}</div>\n        <div className={CARD_DESCRIPTION_CLASS}>{modeSentence}</div>\n      </div>\n      {done ? (\n        <div ref={doneRef} tabIndex={-1} role=\"status\" className=\"flex items-start gap-2 text-sm outline-none\">\n          <UserX aria-hidden className=\"mt-0.5 size-4 shrink-0 text-[var(--text-muted)]\" />\n          <span>{labels.done}</span>\n        </div>\n      ) : (\n        <>\n          <DangerConfirm\n            commit\n            armLabel={labels.arm}\n            prompt={labels.prompt}\n            consequences={lines}\n            confirmLabel={labels.confirm}\n            confirmDisabledReason={held}\n            busy={busy}\n            onArmedChange={disarmed}\n            onConfirm={confirm}\n          >\n            <TypedConfirmField\n              ref={typedRef}\n              target={email}\n              match=\"caseless\"\n              value={typed}\n              onValueChange={(next) => {\n                setTyped(next);\n                if (fieldError === \"email\") setFieldError(null);\n              }}\n              error={fieldError === \"email\" ? labels.confirmationMismatch : undefined}\n              busy={busy}\n            />\n            <CurrentPasswordInput\n              ref={passwordRef}\n              value={password}\n              onValueChange={(next) => {\n                setPassword(next);\n                if (fieldError === \"password\") setFieldError(null);\n              }}\n              error={fieldError === \"password\" ? labels.wrongPassword : undefined}\n              busy={busy}\n            />\n          </DangerConfirm>\n          {hasMessage(failure) && (\n            <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n              {failure}\n            </AlertBanner>\n          )}\n        </>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAmTM,SAUE,UATA,KADF;AAnTN,SAAS,gBAAgB,QAAQ,gBAAgB;AAEjD,SAAS,aAAa;AAEtB,SAAS,cAAc,oBAAoB;AAC3C,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY;AACrB,SAAS,eAAe,oBAAoB,eAAe,yBAAyB;AACpF,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB,kBAAkB,kBAAkB,QAAQ,kBAAkB;AA+CxF,MAAM,gCAAqD;AAAA,EAChE,OAAO;AAAA,EACP,WAAW,CAAC,SACV,SAAS,IACL,yEACA,2DAA2D,IAAI;AAAA,EACrE,UAAU;AAAA,EACV,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,UAAU,CAAC,UACT,UAAU,IACN,yDACA,GAAG,KAAK;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,EACN,eAAe;AAAA,EACf,sBAAsB;AAAA,EACtB,WAAW;AAAA,EACX,aAAa,CAAC,cACZ,qCAAqC,SAAS;AAAA,EAChD,qBACE;AAAA,EACF,aAAa;AAAA,EACb,QAAQ;AACV;AA2DA,SAAS,cAAc,MAA2D;AAChF,SAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,eAAe,IAAI,KAAK,UAAU;AACzF;AAiCO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA8B;AAC5B,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AAGtF,QAAM,cAAc,aAAa,iBAAiB,6BAA6B;AAC/E,QAAM,SAAS,aAAa;AAC5B,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,YAAY,aAAa,IAAI,SAAsC,IAAI;AAC9E,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,UAAU,WAAW;AAC3B,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,UAAU,OAAuB,IAAI;AAE3C,eAAa,MAAM,OAAO;AAE1B,QAAM,eAAe,SAAS,aAAa,OAAO,WAAW,OAAO,UAAU,IAAI;AAElF,QAAM,SAAyC,gBAAgB,CAAC,GAE7D,OAAO,CAAC,SAAS,SAAS,QAAQ,SAAS,UAAa,SAAS,SAAS,SAAS,EAAE,EACrF,IAAI,CAAC,MAAM,UAAW,cAAc,IAAI,IAAI,OAAO,EAAE,KAAK,OAAO,KAAK,IAAI,MAAM,KAAK,CAAE;AAC1F,MAAI,kBAAkB,UAAa,gBAAgB,GAAG;AACpD,UAAM,KAAK,EAAE,KAAK,aAAa,MAAM,OAAO,SAAS,aAAa,EAAE,CAAC;AAAA,EACvE;AAGA,QAAM,OAAO,CAAC,aAAa,OAAO,OAAO,UAAU,IAC/C,OAAO,YAAY,gBAAgB,aACjC,YAAY,YAAY,KAAK,IAC7B,YAAY,cACd,aAAa,KACX,YAAY,gBACZ;AAEN,QAAM,UAAU,CAAC,UAAmB;AAClC,UAAM,MAAM,gBAAgB,KAAK;AACjC,QAAI,WAAW,GAAG,GAAG;AACnB,iBAAW,GAAG;AACd;AAAA,IACF;AACA,QAAI,cAAc,KAAK,GAAG;AACxB,iBAAW,OAAO,YAAY,kBAAkB,KAAK,CAAC,CAAC;AACvD;AAAA,IACF;AACA,UAAM,OAAO,cAAc,KAAK;AAGhC,QAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,oBAAc,UAAU;AACxB,kBAAY,SAAS,MAAM;AAC3B;AAAA,IACF;AACA,QAAI,SAAS,2BAA2B,SAAS,yBAAyB;AACxE,oBAAc,OAAO;AACrB,eAAS,SAAS,MAAM;AACxB;AAAA,IACF;AACA,QAAI,SAAS,cAAc;AACzB,YAAM,YAAY,iBAAiB,KAAK;AACxC;AAAA,QACE,YACI,OAAO,YAAY,IAAI,KAAK,WAAW,QAAQ,EAAE,MAAM,cAAc,CAAC,EAAE,OAAO,SAAS,CAAC,IACzF,OAAO;AAAA,MACb;AACA;AAAA,IACF;AACA,eAAW,SAAS,0BAA0B,OAAO,sBAAsB,OAAO,MAAM;AAAA,EAC1F;AAEA,QAAM,UAAU,MAAM;AACpB,eAAW,IAAI;AACf,kBAAc,IAAI;AAClB,YAAQ,IAAI;AACZ,UAAM,SAA8B,EAAE,UAAU,cAAc,MAAM,KAAK,EAAE;AAC3E,WAAO,OAAO,MAAM,UAAU,MAAM,CAAC,EAAE;AAAA,MACrC,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,KAAK;AACb,gBAAQ,IAAI;AAAA,MACd;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,QAAQ,SAAS;AACnB,kBAAQ,KAAK;AACb,kBAAQ,KAAK;AAAA,QACf;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAIA,QAAM,WAAW,CAAC,UAAmB;AACnC,QAAI,MAAO;AACX,aAAS,EAAE;AACX,gBAAY,EAAE;AACd,kBAAc,IAAI;AAClB,eAAW,IAAI;AAAA,EACjB;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,cAAY,OAAO,SAAS;AAAA,MAC5B,MAAK;AAAA,MACL,WAAW,GAAG,iBAAiB,SAAS;AAAA,MAExC;AAAA,6BAAC,SACC;AAAA,8BAAC,SAAI,WAAW,kBAAmB,iBAAO,OAAM;AAAA,UAChD,oBAAC,SAAI,WAAW,wBAAyB,wBAAa;AAAA,WACxD;AAAA,QACC,OACC,qBAAC,SAAI,KAAK,SAAS,UAAU,IAAI,MAAK,UAAS,WAAU,+CACvD;AAAA,8BAAC,SAAM,eAAW,MAAC,WAAU,mDAAkD;AAAA,UAC/E,oBAAC,UAAM,iBAAO,MAAK;AAAA,WACrB,IAEA,iCACE;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,QAAM;AAAA,cACN,UAAU,OAAO;AAAA,cACjB,QAAQ,OAAO;AAAA,cACf,cAAc;AAAA,cACd,cAAc,OAAO;AAAA,cACrB,uBAAuB;AAAA,cACvB;AAAA,cACA,eAAe;AAAA,cACf,WAAW;AAAA,cAEX;AAAA;AAAA,kBAAC;AAAA;AAAA,oBACC,KAAK;AAAA,oBACL,QAAQ;AAAA,oBACR,OAAM;AAAA,oBACN,OAAO;AAAA,oBACP,eAAe,CAAC,SAAS;AACvB,+BAAS,IAAI;AACb,0BAAI,eAAe,QAAS,eAAc,IAAI;AAAA,oBAChD;AAAA,oBACA,OAAO,eAAe,UAAU,OAAO,uBAAuB;AAAA,oBAC9D;AAAA;AAAA,gBACF;AAAA,gBACA;AAAA,kBAAC;AAAA;AAAA,oBACC,KAAK;AAAA,oBACL,OAAO;AAAA,oBACP,eAAe,CAAC,SAAS;AACvB,kCAAY,IAAI;AAChB,0BAAI,eAAe,WAAY,eAAc,IAAI;AAAA,oBACnD;AAAA,oBACA,OAAO,eAAe,aAAa,OAAO,gBAAgB;AAAA,oBAC1D;AAAA;AAAA,gBACF;AAAA;AAAA;AAAA,UACF;AAAA,UACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,WAEJ;AAAA;AAAA;AAAA,EAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/delete-account-setting.tsx"],"sourcesContent":["import { isValidElement, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { UserX } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport {\n  CurrentPasswordInput,\n  DangerConfirm,\n  DEFAULT_DANGER_CONFIRM_LABELS,\n  TypedConfirmField,\n  typedMatches,\n} from \"../components/danger-confirm\";\nimport type { DangerConsequence } from \"../components/danger-confirm\";\nimport { Card } from \"../components/ui\";\nimport { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { useFocusWhen } from \"../auth/status-parts\";\nimport { CARD_DESCRIPTION_CLASS, refusalCompanies, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/**\n * Every string {@link DeleteAccountSetting} renders — the `deleteAccount` namespace of\n * `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n * Cancel, \"Password\" and \"Type … to confirm\" are `dangerConfirm`'s.\n */\nexport interface DeleteAccountLabels {\n  /** The card's title. */\n  title: string;\n  /** Mode `after_days`, given the days: what happens and when. */\n  afterDays: (days: number) => string;\n  /** Mode `operator`: what happens, and who erases it. */\n  operator: string;\n  /** The button that opens the confirm. */\n  arm: string;\n  /** The confirm's warning, over the consequences. */\n  prompt: string;\n  /** The line in the consequences when `handOverCount` is given (Kurvenschmiede, §2.7),\n   *  given the count. */\n  handOver: (count: number) => string;\n  /** The button that sends it. */\n  confirm: string;\n  /** Said once the request is accepted — the app signs out next. */\n  done: string;\n  /** `password_incorrect` (server-kit's `400` for a wrong current password), under the\n   *  password field. */\n  wrongPassword: string;\n  /** `confirmation_mismatch` — the server did not take the typed address as the\n   *  account's — under the address field. */\n  confirmationMismatch: string;\n  /** `last_admin` — the account is the last active admin. */\n  lastAdmin: string;\n  /** `last_admin` naming the companies (kastlan checks per company), given them as one\n   *  list in the reader's language (\"Example AG and Sample GmbH\"). */\n  lastAdminOf: (companies: string) => string;\n  /** `household_has_members` — keksdose's guard (§6.4). */\n  householdHasMembers: string;\n  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or\n   *  `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure. */\n  failed: string;\n}\n\nexport const DEFAULT_DELETE_ACCOUNT_LABELS: DeleteAccountLabels = {\n  title: \"Delete account\",\n  afterDays: (days) =>\n    days === 1\n      ? \"Your account is deactivated at once and erased for good 1 day later.\"\n      : `Your account is deactivated at once and erased for good ${days} days later.`,\n  operator: \"Your account is deactivated at once, and an operator will erase it for good.\",\n  arm: \"Delete account…\",\n  prompt: \"You will be signed out on every device, and your account can no longer be used.\",\n  handOver: (count) =>\n    count === 1\n      ? \"1 item others can see will pass to an administrator.\"\n      : `${count} items others can see will pass to an administrator.`,\n  confirm: \"Delete my account\",\n  done: \"Your account is deactivated. You are being signed out.\",\n  wrongPassword: \"The password is incorrect.\",\n  confirmationMismatch: \"This is not your account’s address.\",\n  lastAdmin: \"You are the last administrator. Make someone else an administrator first.\",\n  lastAdminOf: (companies) =>\n    `You are the last administrator of ${companies}. Make someone else an administrator there first.`,\n  householdHasMembers:\n    \"Your household has other members, so the account can’t be deleted here. Please write to the operator.\",\n  rateLimited: englishRateLimited,\n  failed: \"Your account could not be deleted. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What happens after the deactivation (§2.1, §6.4) — the app's setting. */\nexport type DeletionMode = \"after_days\" | \"operator\";\n\n/** What {@link DeleteAccountSettingProps.onRequest} gets: the `POST /auth/me/deletion`\n *  body. */\nexport interface DeleteAccountValues {\n  /** As typed. */\n  password: string;\n  /** The address as TYPED, trimmed — the server re-checks it against the account\n   *  (server-kit's `confirm_email_matches`), as keksdose's admin actions do. */\n  confirmEmail: string;\n}\n\n/** One line of the consequences: a node of the app's, or a {@link DangerConsequence}\n *  for a key of its own and the `severe` mark. */\nexport type DeleteAccountConsequence = ReactNode | DangerConsequence;\n\nexport interface DeleteAccountSettingProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /** The account's address — the text to type. */\n  email: string;\n  /** `\"after_days\"` (keksdose, Kurvenschmiede: erased by a scheduled job) or\n   *  `\"operator\"` (kastlan: company data is involved, an operator erases it). */\n  mode: DeletionMode;\n  /** With `after_days`: how many. Default 30 (§2.1). */\n  days?: number;\n  /**\n   * What goes, in the app's words (§6.4: \"the app's own list\") — derived from the\n   * account's own facts where it can be: keksdose's \"Budget X will be deleted; its 2\n   * guests are told\", rather than the worst case for everybody.\n   */\n  consequences?: readonly DeleteAccountConsequence[];\n  /** Kurvenschmiede (§2.7): how many owned items others can see — they pass to the\n   *  first active admin at erasure. A line of its own in the consequences; 0 or left\n   *  out, none. */\n  handOverCount?: number;\n  /**\n   * The confirm was answered: send `POST /auth/me/deletion {password, confirm_email}`.\n   * Resolve once it is accepted — the card says \"You are being signed out\" — and then\n   * sign the user out: the server ended every session with the deactivation. Reject\n   * with the client's error: `password_incorrect` under the password,\n   * `confirmation_mismatch` under the address, `last_admin` (with kastlan's\n   * `companies`) and `household_has_members` above the buttons, a 429 as\n   * `rateLimited`, anything else (a demo account's 403, an app's own code) through\n   * `describeError`, else `failed`. The confirm stays open with what was typed, for a\n   * retry.\n   */\n  onRequest: (values: DeleteAccountValues) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for\n   *  every failure — kastlan's `last_admin` names the companies. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: Partial<DeleteAccountLabels>;\n}\n\n/** Whether an item is a `{ text }` line rather than a node — a React element is an\n *  object too, and so would a `{ text }` lookalike be, so the element test comes first. */\nfunction isConsequence(item: DeleteAccountConsequence): item is DangerConsequence {\n  return typeof item === \"object\" && item !== null && !isValidElement(item) && \"text\" in item;\n}\n\n/**\n * Deleting one's own account (docs/user-admin-harmonization.md §6.4, §2.1): what it does,\n * the password, the typed address — then the app signs out.\n *\n * **Two stages, said before the button.** The request DEACTIVATES the account at once\n * (no sign-in, every session ended, marked for deletion); the erasure follows per the\n * app's `mode` — \"erased for good 30 days later\" (`after_days`, a scheduled job) or \"an\n * operator will erase it\" (`operator`, kastlan, where company records are involved).\n * The sentence is under the title, so it is read before anything is pressed.\n *\n * **The confirm is a {@link DangerConfirm}** with the two guards of every \"type the\n * address\" rule in the apps: the address typed (compared caseless, as in all of them)\n * and the password. They are the tile's own {@link TypedConfirmField} and\n * {@link CurrentPasswordInput}, drawn in its fields slot and held by\n * `confirmDisabledReason` with the tile's own sentences, rather than its built-in\n * `phrase` / `requirePassword` — those have no error of their own, and a wrong password\n * belongs under the password. Its consequences are the app's list, plus\n * Kurvenschmiede's hand-over line (`handOverCount`, §2.7: shared work goes to an\n * administrator, never a refusal). The typed address goes to `onRequest` as typed, so\n * the server re-checks it (`confirm_email_matches`).\n *\n * **Refusals** (§6.4) are read by code ({@link authErrorCode}): `password_incorrect` (a\n * `400`, so an app's 401 handling never signs the person out over a typo) under the\n * password, `confirmation_mismatch` under the address, `last_admin` — naming kastlan's\n * companies when the answer lists them — and keksdose's `household_has_members` guard\n * above the buttons; a 429; and the rest in the app's words. The confirm stays open with\n * what was typed, for a retry; Cancel wipes it.\n *\n * **After success** the card says the account is deactivated and the person is being\n * signed out — the app's to do, since the kit sends nothing (auth §8).\n */\nexport function DeleteAccountSetting({\n  email,\n  mode,\n  days = 30,\n  consequences,\n  handOverCount,\n  onRequest,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: DeleteAccountSettingProps) {\n  const labels = useKitLabels(\"deleteAccount\", DEFAULT_DELETE_ACCOUNT_LABELS, labelsProp);\n  // The guards speak the tile's words, so \"Type “…” to confirm\" and \"Enter your password\n  // to confirm\" are translated once, in `dangerConfirm`.\n  const guardLabels = useKitLabels(\"dangerConfirm\", DEFAULT_DANGER_CONFIRM_LABELS);\n  const locale = useKitLocale();\n  const [typed, setTyped] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [busy, setBusy] = useState(false);\n  const [fieldError, setFieldError] = useState<\"email\" | \"password\" | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [done, setDone] = useState(false);\n  const mounted = useMounted();\n  const typedRef = useRef<HTMLInputElement>(null);\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const doneRef = useRef<HTMLDivElement>(null);\n  // The tile went with the press; the answer takes the focus, so it is read out.\n  useFocusWhen(done, doneRef);\n\n  const modeSentence = mode === \"operator\" ? labels.operator : labels.afterDays(days);\n\n  const lines: (string | DangerConsequence)[] = (consequences ?? [])\n    // `{cond && \"…\"}` lines that came out empty are no lines.\n    .filter((item) => item !== null && item !== undefined && item !== false && item !== \"\")\n    .map((item, index) => (isConsequence(item) ? item : { key: `app-${index}`, text: item }));\n  if (handOverCount !== undefined && handOverCount > 0) {\n    lines.push({ key: \"hand-over\", text: labels.handOver(handOverCount) });\n  }\n\n  // The first guard still open, in the order the fields are drawn — DangerConfirm's rule.\n  const held = !typedMatches(typed, email, \"caseless\")\n    ? typeof guardLabels.needsPhrase === \"function\"\n      ? guardLabels.needsPhrase(email)\n      : guardLabels.needsPhrase\n    : password === \"\"\n      ? guardLabels.needsPassword\n      : undefined;\n\n  const present = (error: unknown) => {\n    const own = describeError?.(error);\n    if (hasMessage(own)) {\n      setFailure(own);\n      return;\n    }\n    if (isRateLimited(error)) {\n      setFailure(labels.rateLimited(retryAfterSeconds(error)));\n      return;\n    }\n    const code = authErrorCode(error);\n    // `invalid_credentials` too, for a server that answered a wrong password so before\n    // server-kit 0.4.0 named `password_incorrect`.\n    if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n      setFieldError(\"password\");\n      passwordRef.current?.focus();\n      return;\n    }\n    if (code === \"confirmation_mismatch\" || code === \"confirmation_required\") {\n      setFieldError(\"email\");\n      typedRef.current?.focus();\n      return;\n    }\n    if (code === \"last_admin\") {\n      const companies = refusalCompanies(error);\n      setFailure(\n        companies\n          ? labels.lastAdminOf(new Intl.ListFormat(locale, { type: \"conjunction\" }).format(companies))\n          : labels.lastAdmin,\n      );\n      return;\n    }\n    setFailure(code === \"household_has_members\" ? labels.householdHasMembers : labels.failed);\n  };\n\n  const confirm = () => {\n    setFailure(null);\n    setFieldError(null);\n    setBusy(true);\n    const values: DeleteAccountValues = { password, confirmEmail: typed.trim() };\n    return settle(() => onRequest(values)).then(\n      () => {\n        if (!mounted.current) return;\n        setBusy(false);\n        setDone(true);\n      },\n      (error: unknown) => {\n        if (mounted.current) {\n          setBusy(false);\n          present(error);\n        }\n        // Rejected again, so DangerConfirm stays armed with what was typed.\n        throw error;\n      },\n    );\n  };\n\n  // A disarmed tile holds no password — DangerConfirm's own rule, for the fields it\n  // does not own here.\n  const disarmed = (armed: boolean) => {\n    if (armed) return;\n    setTyped(\"\");\n    setPassword(\"\");\n    setFieldError(null);\n    setFailure(null);\n  };\n\n  return (\n    <Card\n      {...rest}\n      data-state={done ? \"done\" : \"form\"}\n      tone=\"danger\"\n      className={cn(\"p-4 space-y-3\", className)}\n    >\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{modeSentence}</div>\n      </div>\n      {done ? (\n        <div ref={doneRef} tabIndex={-1} role=\"status\" className=\"flex items-start gap-2 text-sm outline-none\">\n          <UserX aria-hidden className=\"mt-0.5 size-4 shrink-0 text-[var(--text-muted)]\" />\n          <span>{labels.done}</span>\n        </div>\n      ) : (\n        <>\n          <DangerConfirm\n            commit\n            armLabel={labels.arm}\n            prompt={labels.prompt}\n            consequences={lines}\n            confirmLabel={labels.confirm}\n            confirmDisabledReason={held}\n            busy={busy}\n            onArmedChange={disarmed}\n            onConfirm={confirm}\n          >\n            <TypedConfirmField\n              ref={typedRef}\n              target={email}\n              match=\"caseless\"\n              value={typed}\n              onValueChange={(next) => {\n                setTyped(next);\n                if (fieldError === \"email\") setFieldError(null);\n              }}\n              error={fieldError === \"email\" ? labels.confirmationMismatch : undefined}\n              busy={busy}\n            />\n            <CurrentPasswordInput\n              ref={passwordRef}\n              value={password}\n              onValueChange={(next) => {\n                setPassword(next);\n                if (fieldError === \"password\") setFieldError(null);\n              }}\n              error={fieldError === \"password\" ? labels.wrongPassword : undefined}\n              busy={busy}\n            />\n          </DangerConfirm>\n          {hasMessage(failure) && (\n            <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n              {failure}\n            </AlertBanner>\n          )}\n        </>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAoTM,SAUE,UATA,KADF;AApTN,SAAS,gBAAgB,QAAQ,gBAAgB;AAEjD,SAAS,aAAa;AAEtB,SAAS,cAAc,oBAAoB;AAC3C,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY;AACrB,SAAS,eAAe,oBAAoB,eAAe,yBAAyB;AACpF,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB,kBAAkB,QAAQ,kBAAkB;AAC7E,SAAS,yBAAyB;AA+C3B,MAAM,gCAAqD;AAAA,EAChE,OAAO;AAAA,EACP,WAAW,CAAC,SACV,SAAS,IACL,yEACA,2DAA2D,IAAI;AAAA,EACrE,UAAU;AAAA,EACV,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,UAAU,CAAC,UACT,UAAU,IACN,yDACA,GAAG,KAAK;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,EACN,eAAe;AAAA,EACf,sBAAsB;AAAA,EACtB,WAAW;AAAA,EACX,aAAa,CAAC,cACZ,qCAAqC,SAAS;AAAA,EAChD,qBACE;AAAA,EACF,aAAa;AAAA,EACb,QAAQ;AACV;AA2DA,SAAS,cAAc,MAA2D;AAChF,SAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,eAAe,IAAI,KAAK,UAAU;AACzF;AAiCO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA8B;AAC5B,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AAGtF,QAAM,cAAc,aAAa,iBAAiB,6BAA6B;AAC/E,QAAM,SAAS,aAAa;AAC5B,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,YAAY,aAAa,IAAI,SAAsC,IAAI;AAC9E,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,UAAU,WAAW;AAC3B,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,UAAU,OAAuB,IAAI;AAE3C,eAAa,MAAM,OAAO;AAE1B,QAAM,eAAe,SAAS,aAAa,OAAO,WAAW,OAAO,UAAU,IAAI;AAElF,QAAM,SAAyC,gBAAgB,CAAC,GAE7D,OAAO,CAAC,SAAS,SAAS,QAAQ,SAAS,UAAa,SAAS,SAAS,SAAS,EAAE,EACrF,IAAI,CAAC,MAAM,UAAW,cAAc,IAAI,IAAI,OAAO,EAAE,KAAK,OAAO,KAAK,IAAI,MAAM,KAAK,CAAE;AAC1F,MAAI,kBAAkB,UAAa,gBAAgB,GAAG;AACpD,UAAM,KAAK,EAAE,KAAK,aAAa,MAAM,OAAO,SAAS,aAAa,EAAE,CAAC;AAAA,EACvE;AAGA,QAAM,OAAO,CAAC,aAAa,OAAO,OAAO,UAAU,IAC/C,OAAO,YAAY,gBAAgB,aACjC,YAAY,YAAY,KAAK,IAC7B,YAAY,cACd,aAAa,KACX,YAAY,gBACZ;AAEN,QAAM,UAAU,CAAC,UAAmB;AAClC,UAAM,MAAM,gBAAgB,KAAK;AACjC,QAAI,WAAW,GAAG,GAAG;AACnB,iBAAW,GAAG;AACd;AAAA,IACF;AACA,QAAI,cAAc,KAAK,GAAG;AACxB,iBAAW,OAAO,YAAY,kBAAkB,KAAK,CAAC,CAAC;AACvD;AAAA,IACF;AACA,UAAM,OAAO,cAAc,KAAK;AAGhC,QAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,oBAAc,UAAU;AACxB,kBAAY,SAAS,MAAM;AAC3B;AAAA,IACF;AACA,QAAI,SAAS,2BAA2B,SAAS,yBAAyB;AACxE,oBAAc,OAAO;AACrB,eAAS,SAAS,MAAM;AACxB;AAAA,IACF;AACA,QAAI,SAAS,cAAc;AACzB,YAAM,YAAY,iBAAiB,KAAK;AACxC;AAAA,QACE,YACI,OAAO,YAAY,IAAI,KAAK,WAAW,QAAQ,EAAE,MAAM,cAAc,CAAC,EAAE,OAAO,SAAS,CAAC,IACzF,OAAO;AAAA,MACb;AACA;AAAA,IACF;AACA,eAAW,SAAS,0BAA0B,OAAO,sBAAsB,OAAO,MAAM;AAAA,EAC1F;AAEA,QAAM,UAAU,MAAM;AACpB,eAAW,IAAI;AACf,kBAAc,IAAI;AAClB,YAAQ,IAAI;AACZ,UAAM,SAA8B,EAAE,UAAU,cAAc,MAAM,KAAK,EAAE;AAC3E,WAAO,OAAO,MAAM,UAAU,MAAM,CAAC,EAAE;AAAA,MACrC,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,KAAK;AACb,gBAAQ,IAAI;AAAA,MACd;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,QAAQ,SAAS;AACnB,kBAAQ,KAAK;AACb,kBAAQ,KAAK;AAAA,QACf;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAIA,QAAM,WAAW,CAAC,UAAmB;AACnC,QAAI,MAAO;AACX,aAAS,EAAE;AACX,gBAAY,EAAE;AACd,kBAAc,IAAI;AAClB,eAAW,IAAI;AAAA,EACjB;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,cAAY,OAAO,SAAS;AAAA,MAC5B,MAAK;AAAA,MACL,WAAW,GAAG,iBAAiB,SAAS;AAAA,MAExC;AAAA,6BAAC,SACC;AAAA,8BAAC,qBAAmB,iBAAO,OAAM;AAAA,UACjC,oBAAC,SAAI,WAAW,wBAAyB,wBAAa;AAAA,WACxD;AAAA,QACC,OACC,qBAAC,SAAI,KAAK,SAAS,UAAU,IAAI,MAAK,UAAS,WAAU,+CACvD;AAAA,8BAAC,SAAM,eAAW,MAAC,WAAU,mDAAkD;AAAA,UAC/E,oBAAC,UAAM,iBAAO,MAAK;AAAA,WACrB,IAEA,iCACE;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,QAAM;AAAA,cACN,UAAU,OAAO;AAAA,cACjB,QAAQ,OAAO;AAAA,cACf,cAAc;AAAA,cACd,cAAc,OAAO;AAAA,cACrB,uBAAuB;AAAA,cACvB;AAAA,cACA,eAAe;AAAA,cACf,WAAW;AAAA,cAEX;AAAA;AAAA,kBAAC;AAAA;AAAA,oBACC,KAAK;AAAA,oBACL,QAAQ;AAAA,oBACR,OAAM;AAAA,oBACN,OAAO;AAAA,oBACP,eAAe,CAAC,SAAS;AACvB,+BAAS,IAAI;AACb,0BAAI,eAAe,QAAS,eAAc,IAAI;AAAA,oBAChD;AAAA,oBACA,OAAO,eAAe,UAAU,OAAO,uBAAuB;AAAA,oBAC9D;AAAA;AAAA,gBACF;AAAA,gBACA;AAAA,kBAAC;AAAA;AAAA,oBACC,KAAK;AAAA,oBACL,OAAO;AAAA,oBACP,eAAe,CAAC,SAAS;AACvB,kCAAY,IAAI;AAChB,0BAAI,eAAe,WAAY,eAAc,IAAI;AAAA,oBACnD;AAAA,oBACA,OAAO,eAAe,aAAa,OAAO,gBAAgB;AAAA,oBAC1D;AAAA;AAAA,gBACF;AAAA;AAAA;AAAA,UACF;AAAA,UACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,WAEJ;AAAA;AAAA;AAAA,EAEJ;AAEJ;","names":[]}

package/dist/account/email-change-setting.js

@@ -10,7 +10,8 @@ import { CurrentPasswordInput } from "../components/danger-confirm.js";
 import { Button, Card, Input } from "../components/ui.js";
 import { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from "../auth/auth-errors.js";
 import { emailParts, taggedEmail } from "../auth/email-tag.js";
-import { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, settle, useMounted } from "./account-parts.js";
+import { CARD_DESCRIPTION_CLASS, settle, useMounted } from "./account-parts.js";
+import { SettingsCardTitle } from "../settings/settings-heading.js";
 const DEFAULT_EMAIL_CHANGE_LABELS = {
   title: "Email address",
   current: "Current address",
@@ -107,7 +108,7 @@ function EmailChangeSetting({
     };
     return /* @__PURE__ */ jsxs(Card, { ...rest, "data-state": "pending", className: cn("p-4 space-y-3", className), children: [
       /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("div", { id: titleId, className: CARD_TITLE_CLASS, children: labels.title }),
+        /* @__PURE__ */ jsx(SettingsCardTitle, { id: titleId, children: labels.title }),
         /* @__PURE__ */ jsx("div", { className: cn(CARD_DESCRIPTION_CLASS, "break-all"), children: common.fieldValue(labels.current, currentEmail) })
       ] }),
       /* @__PURE__ */ jsxs("div", { ref: pendingRef, tabIndex: -1, className: "flex gap-2 outline-none", children: [
@@ -202,7 +203,7 @@ function EmailChangeSetting({
   };
   return /* @__PURE__ */ jsxs(Card, { ...rest, "data-state": confirmed ? "confirmed" : "form", className: cn("p-4 space-y-3", className), children: [
     /* @__PURE__ */ jsxs("div", { children: [
-      /* @__PURE__ */ jsx("div", { id: titleId, className: CARD_TITLE_CLASS, children: labels.title }),
+      /* @__PURE__ */ jsx(SettingsCardTitle, { id: titleId, children: labels.title }),
       /* @__PURE__ */ jsx("div", { className: cn(CARD_DESCRIPTION_CLASS, "break-all"), children: common.fieldValue(labels.current, currentEmail) })
     ] }),
     confirmed && /* @__PURE__ */ jsxs(AlertBanner, { tone: "success", size: "sm", children: [

package/dist/account/email-change-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/email-change-setting.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\n\nimport { DEFAULT_COMMON_LABELS, useKitLabels } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { CurrentPasswordInput } from \"../components/danger-confirm\";\nimport { Button, Card, Input } from \"../components/ui\";\nimport { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { emailParts, taggedEmail } from \"../auth/email-tag\";\nimport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, settle, useMounted } from \"./account-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link EmailChangeSetting} renders — the `emailChange` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. */\nexport interface EmailChangeLabels {\n  /** The card's title. */\n  title: string;\n  /** Names the address the account has now: \"Current address: ada@example.com\". */\n  current: string;\n  /** The new address's field. */\n  newEmail: string;\n  /** The password field. */\n  password: string;\n  /** Under the password field: why it is asked again. */\n  passwordHint: string;\n  /** The address-tag button (auth §4.5), given the exact address it would use. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** The submit button. */\n  submit: string;\n  /** Under the new address while it is the current one. */\n  sameAsCurrent: string;\n  /** `email_taken`, under the new address. */\n  emailTaken: string;\n  /** `password_incorrect`, under the password. */\n  wrongPassword: string;\n  /** The pending state, given the new address the link went to. */\n  pending: (newEmail: string) => string;\n  /** Under it, given the current address — which still signs in until the link is\n   *  confirmed. */\n  pendingHint: (currentEmail: string) => string;\n  /** Mails the link again. */\n  resend: string;\n  /** Said once it went. */\n  resent: string;\n  /** Drops the change; the current address stays. */\n  cancel: string;\n  /** The done state (`confirmed`), given the address the account has now. */\n  confirmed: (email: string) => string;\n  /** Under it (`passkeyNote`): a passkey's label in the authenticator keeps the old\n   *  address (§6.2). */\n  passkeyNote: string;\n  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or\n   *  `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure, of any of the three requests. */\n  failed: string;\n}\n\nexport const DEFAULT_EMAIL_CHANGE_LABELS: EmailChangeLabels = {\n  title: \"Email address\",\n  current: \"Current address\",\n  newEmail: \"New email address\",\n  password: \"Current password\",\n  passwordHint: \"Your address is how you sign in, so changing it takes your password.\",\n  emailTagUse: (address) => `Use ${address}`,\n  emailTagHint:\n    \"Many providers deliver name+tag@… to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.\",\n  submit: \"Change email address\",\n  sameAsCurrent: \"This is already your address.\",\n  emailTaken: \"An account with this email address already exists.\",\n  wrongPassword: \"The password is incorrect.\",\n  pending: (newEmail) => `Confirm the link we sent to ${newEmail}.`,\n  pendingHint: (currentEmail) =>\n    `Until you do, you keep signing in with ${currentEmail}. Check your spam folder too.`,\n  resend: \"Send the link again\",\n  resent: \"We sent the link again.\",\n  cancel: \"Cancel the change\",\n  confirmed: (email) => `Your email address is now ${email}.`,\n  passkeyNote: \"Your passkeys keep working. Your device may still list them under your old address.\",\n  rateLimited: englishRateLimited,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What {@link EmailChangeSettingProps.onRequest} gets: the `POST /auth/me/email` body. */\nexport interface EmailChangeValues {\n  /** Trimmed. A `+tag` stays (auth §4.5); lower-casing is the server's. */\n  newEmail: string;\n  /** As typed. */\n  password: string;\n}\n\n/** Which request failed — {@link EmailChangeSettingProps.describeError}'s second\n *  argument. */\nexport type EmailChangeAction = \"request\" | \"resend\" | \"cancel\";\n\nexport interface EmailChangeSettingProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\" | \"onSubmit\"> {\n  /** The account's address now. */\n  currentEmail: string;\n  /**\n   * The address a change waits on, from the app's server state — so a reload, or\n   * another tab, shows the pending state. `null`: none, whatever the card did. Left out\n   * (`undefined`), the card keeps its own: pending from a resolved `onRequest` until a\n   * resolved `onCancel`.\n   */\n  pendingEmail?: string | null;\n  /**\n   * The form was submitted: send `POST /auth/me/email {new_email, password}` (§6.2).\n   * Resolve once the link is mailed — refresh `pendingEmail` first if the app passes\n   * it — and the card shows \"Confirm the link we sent to …\". Reject with the client's\n   * error: `email_taken` shows under the new address, `password_incorrect` (server-kit's\n   * `400` for a wrong current password; an older `invalid_credentials` too) under the\n   * password, a 429 as `rateLimited`, anything else as `failed` unless `describeError`\n   * has the app's words.\n   */\n  onRequest: (values: EmailChangeValues) => Promise<unknown> | void;\n  /** Mail the link again. Left out, no button. */\n  onResend?: () => Promise<unknown> | void;\n  /** Drop the pending change. Left out, no button. */\n  onCancel?: () => Promise<unknown> | void;\n  /**\n   * The change was just confirmed — the app's confirm route (`POST /auth/me/email/confirm`)\n   * came back here. Says \"Your email address is now …\" over the form, with\n   * `passkeyNote`.\n   */\n  confirmed?: boolean;\n  /** With `confirmed`: say that a passkey's label keeps the old address (§6.2). Default\n   *  `true`; `false` for an account without passkeys. */\n  passkeyNote?: boolean;\n  /**\n   * The app's address tag (`\"kastlan\"`, auth §4.5): once the new address is plausible a\n   * button under it offers the tagged form — the rule of `RegisterForm`, since this is\n   * the person's own address. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for\n   *  every failure (a demo account's 403, the device offline). */\n  describeError?: (error: unknown, action: EmailChangeAction) => ReactNode | undefined;\n  labels?: Partial<EmailChangeLabels>;\n}\n\ninterface Failure {\n  action: EmailChangeAction;\n  message: ReactNode;\n}\n\n/**\n * Changing the account's email address (docs/user-admin-harmonization.md §6.2, §2.5):\n * the current address, the new one, the password — then a pending state until the new\n * address confirms its link.\n *\n * **The new address must confirm before it takes effect.** The server mails a one-time\n * link to the NEW address (and a notice to the old one); until it is opened, the account\n * keeps the old address and signs in with it. So the card's answer to a request is not\n * \"changed\" but \"Confirm the link we sent to …\", with \"Send the link again\" and \"Cancel\n * the change\". The state is the server's: pass `pendingEmail` and a reload shows it too.\n *\n * **The password is asked again** because the address is the identity: whoever holds the\n * session must not move the account to a mailbox of their own. It is a\n * {@link CurrentPasswordInput}, so a password manager fills it and offers no new one.\n *\n * **The `+tag` offer** (`emailTag`) is RegisterForm's: the address is the person's own,\n * so `you+kastlan@…` is offered under the field, applied only on a click.\n *\n * **It never sends a request** (auth §8): `onRequest`, `onResend` and `onCancel` are the\n * app's, and their refusals are read by code — `email_taken` and `password_incorrect`\n * under their fields, which take the focus; a 429 as \"Too many attempts\". A wrong\n * password is a `400 password_incorrect`, never a 401: an app's client reads a 401 on a\n * signed-in route as an ended session, and would sign the person out for a typo.\n *\n * **Done** (`confirmed`): \"Your email address is now …\" and, unless `passkeyNote` is\n * off, that a passkey keeps its old label in the device's list — the authenticator\n * stored the name it was given, and only a new passkey carries the new one.\n */\nexport function EmailChangeSetting({\n  currentEmail,\n  pendingEmail,\n  onRequest,\n  onResend,\n  onCancel,\n  confirmed,\n  passkeyNote = true,\n  emailTag,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: EmailChangeSettingProps) {\n  const labels = useKitLabels(\"emailChange\", DEFAULT_EMAIL_CHANGE_LABELS, labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const [newEmail, setNewEmail] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [ownPending, setOwnPending] = useState<string | null>(null);\n  const [busy, setBusy] = useState<EmailChangeAction | null>(null);\n  const [failure, setFailure] = useState<Failure | null>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [wrongPassword, setWrongPassword] = useState(false);\n  const [resent, setResent] = useState(false);\n  const mounted = useMounted();\n  const titleId = useId();\n  const tagHintId = useId();\n  const emailRef = useRef<HTMLInputElement>(null);\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const pendingRef = useRef<HTMLDivElement>(null);\n\n  const pending = pendingEmail !== undefined ? pendingEmail : ownPending;\n  const isPending = pending !== null && pending !== \"\";\n\n  // The state swapped under the button that was pressed (the form for the pending\n  // message, or back): the focus goes to what came in, never down to <body>. Only after\n  // the person's own request — a pending state that arrives with the page takes nothing.\n  const focusNext = useRef<\"pending\" | \"form\" | null>(null);\n  useEffect(() => {\n    const target = focusNext.current;\n    if (target === \"pending\" && isPending) {\n      focusNext.current = null;\n      pendingRef.current?.focus();\n    } else if (target === \"form\" && !isPending) {\n      focusNext.current = null;\n      emailRef.current?.focus();\n    }\n  }, [isPending]);\n\n  const messageFor = (error: unknown, action: EmailChangeAction): ReactNode => {\n    const own = describeError?.(error, action);\n    if (hasMessage(own)) return own;\n    return isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed;\n  };\n\n  /* ── The pending state ── */\n  if (isPending) {\n    const run = (action: \"resend\" | \"cancel\", call: () => unknown) => {\n      if (busy) return;\n      setBusy(action);\n      setFailure(null);\n      setResent(false);\n      settle(call).then(\n        () => {\n          if (!mounted.current) return;\n          setBusy(null);\n          if (action === \"resend\") {\n            setResent(true);\n            return;\n          }\n          focusNext.current = \"form\";\n          setOwnPending(null);\n        },\n        (error: unknown) => {\n          if (!mounted.current) return;\n          setBusy(null);\n          setFailure({ action, message: messageFor(error, action) });\n        },\n      );\n    };\n    return (\n      <Card {...rest} data-state=\"pending\" className={cn(\"p-4 space-y-3\", className)}>\n        <div>\n          <div id={titleId} className={CARD_TITLE_CLASS}>\n            {labels.title}\n          </div>\n          <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n        </div>\n        {/* Focusable, not a control: the request's answer is read out when it takes the\n            focus from the submit that went with the form. */}\n        <div ref={pendingRef} tabIndex={-1} className=\"flex gap-2 outline-none\">\n          <MailCheck aria-hidden className=\"mt-0.5 size-4 shrink-0 text-[var(--success)]\" />\n          <div className=\"min-w-0 space-y-1\">\n            <p className=\"break-words text-sm\">{labels.pending(pending)}</p>\n            <p className={CARD_DESCRIPTION_CLASS}>{labels.pendingHint(currentEmail)}</p>\n          </div>\n        </div>\n        {(onResend || onCancel) && (\n          <div className=\"flex flex-wrap items-center gap-2\">\n            {onResend && (\n              <Button\n                type=\"button\"\n                variant=\"secondary\"\n                size=\"sm\"\n                commit\n                pending={busy === \"resend\"}\n                disabled={busy === \"cancel\"}\n                onClick={() => run(\"resend\", onResend)}\n              >\n                {labels.resend}\n              </Button>\n            )}\n            {onCancel && (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                commit\n                pending={busy === \"cancel\"}\n                disabled={busy === \"resend\"}\n                onClick={() => run(\"cancel\", onCancel)}\n              >\n                {labels.cancel}\n              </Button>\n            )}\n            {/* Always in the tree, so the \"sent again\" that appears in it is announced\n                (VerifyEmailStatus's resend line). */}\n            <span role=\"status\" className=\"text-xs text-[var(--success)]\">\n              {resent ? labels.resent : null}\n            </span>\n          </div>\n        )}\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n      </Card>\n    );\n  }\n\n  /* ── The form ── */\n  const typed = newEmail.trim();\n  const same = typed !== \"\" && typed.toLowerCase() === currentEmail.trim().toLowerCase();\n  const working = busy !== null;\n  const canSubmit = emailParts(newEmail) !== null && !same && password !== \"\";\n  const suggestion = emailTag ? taggedEmail(newEmail, emailTag) : null;\n  const emailError = same ? labels.sameAsCurrent : taken !== null && taken === typed ? labels.emailTaken : undefined;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: EmailChangeValues = { newEmail: typed, password };\n    setBusy(\"request\");\n    setFailure(null);\n    setTaken(null);\n    setWrongPassword(false);\n    settle(() => onRequest(values)).then(\n      () => {\n        if (!mounted.current) return;\n        setBusy(null);\n        // The password has done its work; nothing of the form stays in state.\n        setNewEmail(\"\");\n        setPassword(\"\");\n        setResent(false);\n        focusNext.current = \"pending\";\n        setOwnPending(values.newEmail);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error, \"request\");\n        if (hasMessage(own)) {\n          setFailure({ action: \"request\", message: own });\n          return;\n        }\n        if (isRateLimited(error)) {\n          setFailure({ action: \"request\", message: labels.rateLimited(retryAfterSeconds(error)) });\n          return;\n        }\n        const code = authErrorCode(error);\n        if (code === \"email_taken\") {\n          setTaken(values.newEmail);\n          emailRef.current?.focus();\n          return;\n        }\n        // `invalid_credentials` too, for a server that answered a wrong password so\n        // before server-kit 0.4.0 named `password_incorrect`.\n        if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n          setWrongPassword(true);\n          passwordRef.current?.focus();\n          return;\n        }\n        setFailure({ action: \"request\", message: labels.failed });\n      },\n    );\n  };\n\n  return (\n    <Card {...rest} data-state={confirmed ? \"confirmed\" : \"form\"} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <div id={titleId} className={CARD_TITLE_CLASS}>\n          {labels.title}\n        </div>\n        <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n      </div>\n      {confirmed && (\n        <AlertBanner tone=\"success\" size=\"sm\">\n          <span className=\"block\">{labels.confirmed(currentEmail)}</span>\n          {passkeyNote && <span className=\"mt-1 block\">{labels.passkeyNote}</span>}\n        </AlertBanner>\n      )}\n      <form className=\"space-y-3\" aria-labelledby={titleId} onSubmit={submit} noValidate>\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.newEmail}\n            value={newEmail}\n            onChange={(e) => {\n              setNewEmail(e.target.value);\n              if (failure) setFailure(null);\n            }}\n            readOnly={working}\n            error={emailError}\n            required\n          />\n          {/* RegisterForm's offer (auth §4.5): one click, the exact address on the\n              button, reversible by typing. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-[var(--text-muted)]\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setNewEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n        </div>\n        <CurrentPasswordInput\n          ref={passwordRef}\n          name=\"password\"\n          label={labels.password}\n          value={password}\n          onValueChange={(next) => {\n            setPassword(next);\n            setWrongPassword(false);\n            if (failure) setFailure(null);\n          }}\n          hint={labels.passwordHint}\n          error={wrongPassword ? labels.wrongPassword : undefined}\n          busy={working}\n          required\n        />\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" commit disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n    </Card>\n  );\n}\n"],"mappings":";AAwQQ,SACE,KADF;AAxQR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAEnD,SAAS,iBAAiB;AAE1B,SAAS,uBAAuB,oBAAoB;AACpD,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,QAAQ,MAAM,aAAa;AACpC,SAAS,eAAe,oBAAoB,eAAe,yBAAyB;AACpF,SAAS,YAAY,mBAAmB;AACxC,SAAS,wBAAwB,kBAAkB,QAAQ,kBAAkB;AAoDtE,MAAM,8BAAiD;AAAA,EAC5D,OAAO;AAAA,EACP,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,cAAc;AAAA,EACd,aAAa,CAAC,YAAY,OAAO,OAAO;AAAA,EACxC,cACE;AAAA,EACF,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS,CAAC,aAAa,+BAA+B,QAAQ;AAAA,EAC9D,aAAa,CAAC,iBACZ,0CAA0C,YAAY;AAAA,EACxD,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACxD,aAAa;AAAA,EACb,aAAa;AAAA,EACb,QAAQ;AACV;AA8FO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAmC,IAAI;AAC/D,QAAM,CAAC,SAAS,UAAU,IAAI,SAAyB,IAAI;AAE3D,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AACxD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,UAAU,WAAW;AAC3B,QAAM,UAAU,MAAM;AACtB,QAAM,YAAY,MAAM;AACxB,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,aAAa,OAAuB,IAAI;AAE9C,QAAM,UAAU,iBAAiB,SAAY,eAAe;AAC5D,QAAM,YAAY,YAAY,QAAQ,YAAY;AAKlD,QAAM,YAAY,OAAkC,IAAI;AACxD,YAAU,MAAM;AACd,UAAM,SAAS,UAAU;AACzB,QAAI,WAAW,aAAa,WAAW;AACrC,gBAAU,UAAU;AACpB,iBAAW,SAAS,MAAM;AAAA,IAC5B,WAAW,WAAW,UAAU,CAAC,WAAW;AAC1C,gBAAU,UAAU;AACpB,eAAS,SAAS,MAAM;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAEd,QAAM,aAAa,CAAC,OAAgB,WAAyC;AAC3E,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,QAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,WAAO,cAAc,KAAK,IAAI,OAAO,YAAY,kBAAkB,KAAK,CAAC,IAAI,OAAO;AAAA,EACtF;AAGA,MAAI,WAAW;AACb,UAAM,MAAM,CAAC,QAA6B,SAAwB;AAChE,UAAI,KAAM;AACV,cAAQ,MAAM;AACd,iBAAW,IAAI;AACf,gBAAU,KAAK;AACf,aAAO,IAAI,EAAE;AAAA,QACX,MAAM;AACJ,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,cAAI,WAAW,UAAU;AACvB,sBAAU,IAAI;AACd;AAAA,UACF;AACA,oBAAU,UAAU;AACpB,wBAAc,IAAI;AAAA,QACpB;AAAA,QACA,CAAC,UAAmB;AAClB,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,qBAAW,EAAE,QAAQ,SAAS,WAAW,OAAO,MAAM,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AACA,WACE,qBAAC,QAAM,GAAG,MAAM,cAAW,WAAU,WAAW,GAAG,iBAAiB,SAAS,GAC3E;AAAA,2BAAC,SACC;AAAA,4BAAC,SAAI,IAAI,SAAS,WAAW,kBAC1B,iBAAO,OACV;AAAA,QACA,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,SAC5G;AAAA,MAGA,qBAAC,SAAI,KAAK,YAAY,UAAU,IAAI,WAAU,2BAC5C;AAAA,4BAAC,aAAU,eAAW,MAAC,WAAU,gDAA+C;AAAA,QAChF,qBAAC,SAAI,WAAU,qBACb;AAAA,8BAAC,OAAE,WAAU,uBAAuB,iBAAO,QAAQ,OAAO,GAAE;AAAA,UAC5D,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,YAAY,YAAY,GAAE;AAAA,WAC1E;AAAA,SACF;AAAA,OACE,YAAY,aACZ,qBAAC,SAAI,WAAU,qCACZ;AAAA,oBACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAM;AAAA,YACN,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAED,YACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAM;AAAA,YACN,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAIF,oBAAC,UAAK,MAAK,UAAS,WAAU,iCAC3B,mBAAS,OAAO,SAAS,MAC5B;AAAA,SACF;AAAA,MAED,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,OAEJ;AAAA,EAEJ;AAGA,QAAM,QAAQ,SAAS,KAAK;AAC5B,QAAM,OAAO,UAAU,MAAM,MAAM,YAAY,MAAM,aAAa,KAAK,EAAE,YAAY;AACrF,QAAM,UAAU,SAAS;AACzB,QAAM,YAAY,WAAW,QAAQ,MAAM,QAAQ,CAAC,QAAQ,aAAa;AACzE,QAAM,aAAa,WAAW,YAAY,UAAU,QAAQ,IAAI;AAChE,QAAM,aAAa,OAAO,OAAO,gBAAgB,UAAU,QAAQ,UAAU,QAAQ,OAAO,aAAa;AAEzG,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAA4B,EAAE,UAAU,OAAO,SAAS;AAC9D,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,qBAAiB,KAAK;AACtB,WAAO,MAAM,UAAU,MAAM,CAAC,EAAE;AAAA,MAC9B,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AAEZ,oBAAY,EAAE;AACd,oBAAY,EAAE;AACd,kBAAU,KAAK;AACf,kBAAU,UAAU;AACpB,sBAAc,OAAO,QAAQ;AAAA,MAC/B;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,OAAO,SAAS;AAC5C,YAAI,WAAW,GAAG,GAAG;AACnB,qBAAW,EAAE,QAAQ,WAAW,SAAS,IAAI,CAAC;AAC9C;AAAA,QACF;AACA,YAAI,cAAc,KAAK,GAAG;AACxB,qBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,YAAY,kBAAkB,KAAK,CAAC,EAAE,CAAC;AACvF;AAAA,QACF;AACA,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,eAAe;AAC1B,mBAAS,OAAO,QAAQ;AACxB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AAGA,YAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,2BAAiB,IAAI;AACrB,sBAAY,SAAS,MAAM;AAC3B;AAAA,QACF;AACA,mBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,OAAO,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,QAAM,GAAG,MAAM,cAAY,YAAY,cAAc,QAAQ,WAAW,GAAG,iBAAiB,SAAS,GACpG;AAAA,yBAAC,SACC;AAAA,0BAAC,SAAI,IAAI,SAAS,WAAW,kBAC1B,iBAAO,OACV;AAAA,MACA,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,OAC5G;AAAA,IACC,aACC,qBAAC,eAAY,MAAK,WAAU,MAAK,MAC/B;AAAA,0BAAC,UAAK,WAAU,SAAS,iBAAO,UAAU,YAAY,GAAE;AAAA,MACvD,eAAe,oBAAC,UAAK,WAAU,cAAc,iBAAO,aAAY;AAAA,OACnE;AAAA,IAEF,qBAAC,UAAK,WAAU,aAAY,mBAAiB,SAAS,UAAU,QAAQ,YAAU,MAChF;AAAA,2BAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM;AACf,0BAAY,EAAE,OAAO,KAAK;AAC1B,kBAAI,QAAS,YAAW,IAAI;AAAA,YAC9B;AAAA,YACA,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,yCACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,YAAY,UAAU;AAAA,cAEpC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,SAEJ;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,eAAe,CAAC,SAAS;AACvB,wBAAY,IAAI;AAChB,6BAAiB,KAAK;AACtB,gBAAI,QAAS,YAAW,IAAI;AAAA,UAC9B;AAAA,UACA,MAAM,OAAO;AAAA,UACb,OAAO,gBAAgB,OAAO,gBAAgB;AAAA,UAC9C,MAAM;AAAA,UACN,UAAQ;AAAA;AAAA,MACV;AAAA,MACC,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,MAEF,oBAAC,UAAO,MAAK,UAAS,QAAM,MAAC,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SACrE,iBAAO,QACV;AAAA,OACF;AAAA,KACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/email-change-setting.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithoutRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\n\nimport { DEFAULT_COMMON_LABELS, useKitLabels } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { CurrentPasswordInput } from \"../components/danger-confirm\";\nimport { Button, Card, Input } from \"../components/ui\";\nimport { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from \"../auth/auth-errors\";\nimport { emailParts, taggedEmail } from \"../auth/email-tag\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link EmailChangeSetting} renders — the `emailChange` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. */\nexport interface EmailChangeLabels {\n  /** The card's title. */\n  title: string;\n  /** Names the address the account has now: \"Current address: ada@example.com\". */\n  current: string;\n  /** The new address's field. */\n  newEmail: string;\n  /** The password field. */\n  password: string;\n  /** Under the password field: why it is asked again. */\n  passwordHint: string;\n  /** The address-tag button (auth §4.5), given the exact address it would use. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** The submit button. */\n  submit: string;\n  /** Under the new address while it is the current one. */\n  sameAsCurrent: string;\n  /** `email_taken`, under the new address. */\n  emailTaken: string;\n  /** `password_incorrect`, under the password. */\n  wrongPassword: string;\n  /** The pending state, given the new address the link went to. */\n  pending: (newEmail: string) => string;\n  /** Under it, given the current address — which still signs in until the link is\n   *  confirmed. */\n  pendingHint: (currentEmail: string) => string;\n  /** Mails the link again. */\n  resend: string;\n  /** Said once it went. */\n  resent: string;\n  /** Drops the change; the current address stays. */\n  cancel: string;\n  /** The done state (`confirmed`), given the address the account has now. */\n  confirmed: (email: string) => string;\n  /** Under it (`passkeyNote`): a passkey's label in the authenticator keeps the old\n   *  address (§6.2). */\n  passkeyNote: string;\n  /** A request was throttled — HTTP 429 — given its `Retry-After` wait in seconds, or\n   *  `undefined` without one. */\n  rateLimited: (seconds?: number) => string;\n  /** Any other failure, of any of the three requests. */\n  failed: string;\n}\n\nexport const DEFAULT_EMAIL_CHANGE_LABELS: EmailChangeLabels = {\n  title: \"Email address\",\n  current: \"Current address\",\n  newEmail: \"New email address\",\n  password: \"Current password\",\n  passwordHint: \"Your address is how you sign in, so changing it takes your password.\",\n  emailTagUse: (address) => `Use ${address}`,\n  emailTagHint:\n    \"Many providers deliver name+tag@… to the same inbox, so mail from this app is easy to filter and trace. Check yours does before you rely on it: you would sign in with the tagged address.\",\n  submit: \"Change email address\",\n  sameAsCurrent: \"This is already your address.\",\n  emailTaken: \"An account with this email address already exists.\",\n  wrongPassword: \"The password is incorrect.\",\n  pending: (newEmail) => `Confirm the link we sent to ${newEmail}.`,\n  pendingHint: (currentEmail) =>\n    `Until you do, you keep signing in with ${currentEmail}. Check your spam folder too.`,\n  resend: \"Send the link again\",\n  resent: \"We sent the link again.\",\n  cancel: \"Cancel the change\",\n  confirmed: (email) => `Your email address is now ${email}.`,\n  passkeyNote: \"Your passkeys keep working. Your device may still list them under your old address.\",\n  rateLimited: englishRateLimited,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What {@link EmailChangeSettingProps.onRequest} gets: the `POST /auth/me/email` body. */\nexport interface EmailChangeValues {\n  /** Trimmed. A `+tag` stays (auth §4.5); lower-casing is the server's. */\n  newEmail: string;\n  /** As typed. */\n  password: string;\n}\n\n/** Which request failed — {@link EmailChangeSettingProps.describeError}'s second\n *  argument. */\nexport type EmailChangeAction = \"request\" | \"resend\" | \"cancel\";\n\nexport interface EmailChangeSettingProps extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\" | \"onSubmit\"> {\n  /** The account's address now. */\n  currentEmail: string;\n  /**\n   * The address a change waits on, from the app's server state — so a reload, or\n   * another tab, shows the pending state. `null`: none, whatever the card did. Left out\n   * (`undefined`), the card keeps its own: pending from a resolved `onRequest` until a\n   * resolved `onCancel`.\n   */\n  pendingEmail?: string | null;\n  /**\n   * The form was submitted: send `POST /auth/me/email {new_email, password}` (§6.2).\n   * Resolve once the link is mailed — refresh `pendingEmail` first if the app passes\n   * it — and the card shows \"Confirm the link we sent to …\". Reject with the client's\n   * error: `email_taken` shows under the new address, `password_incorrect` (server-kit's\n   * `400` for a wrong current password; an older `invalid_credentials` too) under the\n   * password, a 429 as `rateLimited`, anything else as `failed` unless `describeError`\n   * has the app's words.\n   */\n  onRequest: (values: EmailChangeValues) => Promise<unknown> | void;\n  /** Mail the link again. Left out, no button. */\n  onResend?: () => Promise<unknown> | void;\n  /** Drop the pending change. Left out, no button. */\n  onCancel?: () => Promise<unknown> | void;\n  /**\n   * The change was just confirmed — the app's confirm route (`POST /auth/me/email/confirm`)\n   * came back here. Says \"Your email address is now …\" over the form, with\n   * `passkeyNote`.\n   */\n  confirmed?: boolean;\n  /** With `confirmed`: say that a passkey's label keeps the old address (§6.2). Default\n   *  `true`; `false` for an account without passkeys. */\n  passkeyNote?: boolean;\n  /**\n   * The app's address tag (`\"kastlan\"`, auth §4.5): once the new address is plausible a\n   * button under it offers the tagged form — the rule of `RegisterForm`, since this is\n   * the person's own address. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /** The app's own words for a failure, or `undefined` for the kit's. Asked first, for\n   *  every failure (a demo account's 403, the device offline). */\n  describeError?: (error: unknown, action: EmailChangeAction) => ReactNode | undefined;\n  labels?: Partial<EmailChangeLabels>;\n}\n\ninterface Failure {\n  action: EmailChangeAction;\n  message: ReactNode;\n}\n\n/**\n * Changing the account's email address (docs/user-admin-harmonization.md §6.2, §2.5):\n * the current address, the new one, the password — then a pending state until the new\n * address confirms its link.\n *\n * **The new address must confirm before it takes effect.** The server mails a one-time\n * link to the NEW address (and a notice to the old one); until it is opened, the account\n * keeps the old address and signs in with it. So the card's answer to a request is not\n * \"changed\" but \"Confirm the link we sent to …\", with \"Send the link again\" and \"Cancel\n * the change\". The state is the server's: pass `pendingEmail` and a reload shows it too.\n *\n * **The password is asked again** because the address is the identity: whoever holds the\n * session must not move the account to a mailbox of their own. It is a\n * {@link CurrentPasswordInput}, so a password manager fills it and offers no new one.\n *\n * **The `+tag` offer** (`emailTag`) is RegisterForm's: the address is the person's own,\n * so `you+kastlan@…` is offered under the field, applied only on a click.\n *\n * **It never sends a request** (auth §8): `onRequest`, `onResend` and `onCancel` are the\n * app's, and their refusals are read by code — `email_taken` and `password_incorrect`\n * under their fields, which take the focus; a 429 as \"Too many attempts\". A wrong\n * password is a `400 password_incorrect`, never a 401: an app's client reads a 401 on a\n * signed-in route as an ended session, and would sign the person out for a typo.\n *\n * **Done** (`confirmed`): \"Your email address is now …\" and, unless `passkeyNote` is\n * off, that a passkey keeps its old label in the device's list — the authenticator\n * stored the name it was given, and only a new passkey carries the new one.\n */\nexport function EmailChangeSetting({\n  currentEmail,\n  pendingEmail,\n  onRequest,\n  onResend,\n  onCancel,\n  confirmed,\n  passkeyNote = true,\n  emailTag,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: EmailChangeSettingProps) {\n  const labels = useKitLabels(\"emailChange\", DEFAULT_EMAIL_CHANGE_LABELS, labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const [newEmail, setNewEmail] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [ownPending, setOwnPending] = useState<string | null>(null);\n  const [busy, setBusy] = useState<EmailChangeAction | null>(null);\n  const [failure, setFailure] = useState<Failure | null>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [wrongPassword, setWrongPassword] = useState(false);\n  const [resent, setResent] = useState(false);\n  const mounted = useMounted();\n  const titleId = useId();\n  const tagHintId = useId();\n  const emailRef = useRef<HTMLInputElement>(null);\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const pendingRef = useRef<HTMLDivElement>(null);\n\n  const pending = pendingEmail !== undefined ? pendingEmail : ownPending;\n  const isPending = pending !== null && pending !== \"\";\n\n  // The state swapped under the button that was pressed (the form for the pending\n  // message, or back): the focus goes to what came in, never down to <body>. Only after\n  // the person's own request — a pending state that arrives with the page takes nothing.\n  const focusNext = useRef<\"pending\" | \"form\" | null>(null);\n  useEffect(() => {\n    const target = focusNext.current;\n    if (target === \"pending\" && isPending) {\n      focusNext.current = null;\n      pendingRef.current?.focus();\n    } else if (target === \"form\" && !isPending) {\n      focusNext.current = null;\n      emailRef.current?.focus();\n    }\n  }, [isPending]);\n\n  const messageFor = (error: unknown, action: EmailChangeAction): ReactNode => {\n    const own = describeError?.(error, action);\n    if (hasMessage(own)) return own;\n    return isRateLimited(error) ? labels.rateLimited(retryAfterSeconds(error)) : labels.failed;\n  };\n\n  /* ── The pending state ── */\n  if (isPending) {\n    const run = (action: \"resend\" | \"cancel\", call: () => unknown) => {\n      if (busy) return;\n      setBusy(action);\n      setFailure(null);\n      setResent(false);\n      settle(call).then(\n        () => {\n          if (!mounted.current) return;\n          setBusy(null);\n          if (action === \"resend\") {\n            setResent(true);\n            return;\n          }\n          focusNext.current = \"form\";\n          setOwnPending(null);\n        },\n        (error: unknown) => {\n          if (!mounted.current) return;\n          setBusy(null);\n          setFailure({ action, message: messageFor(error, action) });\n        },\n      );\n    };\n    return (\n      <Card {...rest} data-state=\"pending\" className={cn(\"p-4 space-y-3\", className)}>\n        <div>\n          <SettingsCardTitle id={titleId}>{labels.title}</SettingsCardTitle>\n          <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n        </div>\n        {/* Focusable, not a control: the request's answer is read out when it takes the\n            focus from the submit that went with the form. */}\n        <div ref={pendingRef} tabIndex={-1} className=\"flex gap-2 outline-none\">\n          <MailCheck aria-hidden className=\"mt-0.5 size-4 shrink-0 text-[var(--success)]\" />\n          <div className=\"min-w-0 space-y-1\">\n            <p className=\"break-words text-sm\">{labels.pending(pending)}</p>\n            <p className={CARD_DESCRIPTION_CLASS}>{labels.pendingHint(currentEmail)}</p>\n          </div>\n        </div>\n        {(onResend || onCancel) && (\n          <div className=\"flex flex-wrap items-center gap-2\">\n            {onResend && (\n              <Button\n                type=\"button\"\n                variant=\"secondary\"\n                size=\"sm\"\n                commit\n                pending={busy === \"resend\"}\n                disabled={busy === \"cancel\"}\n                onClick={() => run(\"resend\", onResend)}\n              >\n                {labels.resend}\n              </Button>\n            )}\n            {onCancel && (\n              <Button\n                type=\"button\"\n                variant=\"ghost\"\n                size=\"sm\"\n                commit\n                pending={busy === \"cancel\"}\n                disabled={busy === \"resend\"}\n                onClick={() => run(\"cancel\", onCancel)}\n              >\n                {labels.cancel}\n              </Button>\n            )}\n            {/* Always in the tree, so the \"sent again\" that appears in it is announced\n                (VerifyEmailStatus's resend line). */}\n            <span role=\"status\" className=\"text-xs text-[var(--success)]\">\n              {resent ? labels.resent : null}\n            </span>\n          </div>\n        )}\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n      </Card>\n    );\n  }\n\n  /* ── The form ── */\n  const typed = newEmail.trim();\n  const same = typed !== \"\" && typed.toLowerCase() === currentEmail.trim().toLowerCase();\n  const working = busy !== null;\n  const canSubmit = emailParts(newEmail) !== null && !same && password !== \"\";\n  const suggestion = emailTag ? taggedEmail(newEmail, emailTag) : null;\n  const emailError = same ? labels.sameAsCurrent : taken !== null && taken === typed ? labels.emailTaken : undefined;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: EmailChangeValues = { newEmail: typed, password };\n    setBusy(\"request\");\n    setFailure(null);\n    setTaken(null);\n    setWrongPassword(false);\n    settle(() => onRequest(values)).then(\n      () => {\n        if (!mounted.current) return;\n        setBusy(null);\n        // The password has done its work; nothing of the form stays in state.\n        setNewEmail(\"\");\n        setPassword(\"\");\n        setResent(false);\n        focusNext.current = \"pending\";\n        setOwnPending(values.newEmail);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error, \"request\");\n        if (hasMessage(own)) {\n          setFailure({ action: \"request\", message: own });\n          return;\n        }\n        if (isRateLimited(error)) {\n          setFailure({ action: \"request\", message: labels.rateLimited(retryAfterSeconds(error)) });\n          return;\n        }\n        const code = authErrorCode(error);\n        if (code === \"email_taken\") {\n          setTaken(values.newEmail);\n          emailRef.current?.focus();\n          return;\n        }\n        // `invalid_credentials` too, for a server that answered a wrong password so\n        // before server-kit 0.4.0 named `password_incorrect`.\n        if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n          setWrongPassword(true);\n          passwordRef.current?.focus();\n          return;\n        }\n        setFailure({ action: \"request\", message: labels.failed });\n      },\n    );\n  };\n\n  return (\n    <Card {...rest} data-state={confirmed ? \"confirmed\" : \"form\"} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle id={titleId}>{labels.title}</SettingsCardTitle>\n        <div className={cn(CARD_DESCRIPTION_CLASS, \"break-all\")}>{common.fieldValue(labels.current, currentEmail)}</div>\n      </div>\n      {confirmed && (\n        <AlertBanner tone=\"success\" size=\"sm\">\n          <span className=\"block\">{labels.confirmed(currentEmail)}</span>\n          {passkeyNote && <span className=\"mt-1 block\">{labels.passkeyNote}</span>}\n        </AlertBanner>\n      )}\n      <form className=\"space-y-3\" aria-labelledby={titleId} onSubmit={submit} noValidate>\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.newEmail}\n            value={newEmail}\n            onChange={(e) => {\n              setNewEmail(e.target.value);\n              if (failure) setFailure(null);\n            }}\n            readOnly={working}\n            error={emailError}\n            required\n          />\n          {/* RegisterForm's offer (auth §4.5): one click, the exact address on the\n              button, reversible by typing. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-[var(--text-muted)]\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setNewEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n        </div>\n        <CurrentPasswordInput\n          ref={passwordRef}\n          name=\"password\"\n          label={labels.password}\n          value={password}\n          onValueChange={(next) => {\n            setPassword(next);\n            setWrongPassword(false);\n            if (failure) setFailure(null);\n          }}\n          hint={labels.passwordHint}\n          error={wrongPassword ? labels.wrongPassword : undefined}\n          busy={working}\n          required\n        />\n        {failure && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure.message}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" commit disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n    </Card>\n  );\n}\n"],"mappings":";AAyQQ,SACE,KADF;AAzQR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAEnD,SAAS,iBAAiB;AAE1B,SAAS,uBAAuB,oBAAoB;AACpD,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;AACrC,SAAS,QAAQ,MAAM,aAAa;AACpC,SAAS,eAAe,oBAAoB,eAAe,yBAAyB;AACpF,SAAS,YAAY,mBAAmB;AACxC,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAoD3B,MAAM,8BAAiD;AAAA,EAC5D,OAAO;AAAA,EACP,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,cAAc;AAAA,EACd,aAAa,CAAC,YAAY,OAAO,OAAO;AAAA,EACxC,cACE;AAAA,EACF,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS,CAAC,aAAa,+BAA+B,QAAQ;AAAA,EAC9D,aAAa,CAAC,iBACZ,0CAA0C,YAAY;AAAA,EACxD,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,CAAC,UAAU,6BAA6B,KAAK;AAAA,EACxD,aAAa;AAAA,EACb,aAAa;AAAA,EACb,QAAQ;AACV;AA8FO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAmC,IAAI;AAC/D,QAAM,CAAC,SAAS,UAAU,IAAI,SAAyB,IAAI;AAE3D,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,KAAK;AACxD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,UAAU,WAAW;AAC3B,QAAM,UAAU,MAAM;AACtB,QAAM,YAAY,MAAM;AACxB,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,aAAa,OAAuB,IAAI;AAE9C,QAAM,UAAU,iBAAiB,SAAY,eAAe;AAC5D,QAAM,YAAY,YAAY,QAAQ,YAAY;AAKlD,QAAM,YAAY,OAAkC,IAAI;AACxD,YAAU,MAAM;AACd,UAAM,SAAS,UAAU;AACzB,QAAI,WAAW,aAAa,WAAW;AACrC,gBAAU,UAAU;AACpB,iBAAW,SAAS,MAAM;AAAA,IAC5B,WAAW,WAAW,UAAU,CAAC,WAAW;AAC1C,gBAAU,UAAU;AACpB,eAAS,SAAS,MAAM;AAAA,IAC1B;AAAA,EACF,GAAG,CAAC,SAAS,CAAC;AAEd,QAAM,aAAa,CAAC,OAAgB,WAAyC;AAC3E,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,QAAI,WAAW,GAAG,EAAG,QAAO;AAC5B,WAAO,cAAc,KAAK,IAAI,OAAO,YAAY,kBAAkB,KAAK,CAAC,IAAI,OAAO;AAAA,EACtF;AAGA,MAAI,WAAW;AACb,UAAM,MAAM,CAAC,QAA6B,SAAwB;AAChE,UAAI,KAAM;AACV,cAAQ,MAAM;AACd,iBAAW,IAAI;AACf,gBAAU,KAAK;AACf,aAAO,IAAI,EAAE;AAAA,QACX,MAAM;AACJ,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,cAAI,WAAW,UAAU;AACvB,sBAAU,IAAI;AACd;AAAA,UACF;AACA,oBAAU,UAAU;AACpB,wBAAc,IAAI;AAAA,QACpB;AAAA,QACA,CAAC,UAAmB;AAClB,cAAI,CAAC,QAAQ,QAAS;AACtB,kBAAQ,IAAI;AACZ,qBAAW,EAAE,QAAQ,SAAS,WAAW,OAAO,MAAM,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AACA,WACE,qBAAC,QAAM,GAAG,MAAM,cAAW,WAAU,WAAW,GAAG,iBAAiB,SAAS,GAC3E;AAAA,2BAAC,SACC;AAAA,4BAAC,qBAAkB,IAAI,SAAU,iBAAO,OAAM;AAAA,QAC9C,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,SAC5G;AAAA,MAGA,qBAAC,SAAI,KAAK,YAAY,UAAU,IAAI,WAAU,2BAC5C;AAAA,4BAAC,aAAU,eAAW,MAAC,WAAU,gDAA+C;AAAA,QAChF,qBAAC,SAAI,WAAU,qBACb;AAAA,8BAAC,OAAE,WAAU,uBAAuB,iBAAO,QAAQ,OAAO,GAAE;AAAA,UAC5D,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,YAAY,YAAY,GAAE;AAAA,WAC1E;AAAA,SACF;AAAA,OACE,YAAY,aACZ,qBAAC,SAAI,WAAU,qCACZ;AAAA,oBACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAM;AAAA,YACN,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAED,YACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAQ;AAAA,YACR,MAAK;AAAA,YACL,QAAM;AAAA,YACN,SAAS,SAAS;AAAA,YAClB,UAAU,SAAS;AAAA,YACnB,SAAS,MAAM,IAAI,UAAU,QAAQ;AAAA,YAEpC,iBAAO;AAAA;AAAA,QACV;AAAA,QAIF,oBAAC,UAAK,MAAK,UAAS,WAAU,iCAC3B,mBAAS,OAAO,SAAS,MAC5B;AAAA,SACF;AAAA,MAED,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,OAEJ;AAAA,EAEJ;AAGA,QAAM,QAAQ,SAAS,KAAK;AAC5B,QAAM,OAAO,UAAU,MAAM,MAAM,YAAY,MAAM,aAAa,KAAK,EAAE,YAAY;AACrF,QAAM,UAAU,SAAS;AACzB,QAAM,YAAY,WAAW,QAAQ,MAAM,QAAQ,CAAC,QAAQ,aAAa;AACzE,QAAM,aAAa,WAAW,YAAY,UAAU,QAAQ,IAAI;AAChE,QAAM,aAAa,OAAO,OAAO,gBAAgB,UAAU,QAAQ,UAAU,QAAQ,OAAO,aAAa;AAEzG,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAA4B,EAAE,UAAU,OAAO,SAAS;AAC9D,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,qBAAiB,KAAK;AACtB,WAAO,MAAM,UAAU,MAAM,CAAC,EAAE;AAAA,MAC9B,MAAM;AACJ,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AAEZ,oBAAY,EAAE;AACd,oBAAY,EAAE;AACd,kBAAU,KAAK;AACf,kBAAU,UAAU;AACpB,sBAAc,OAAO,QAAQ;AAAA,MAC/B;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,OAAO,SAAS;AAC5C,YAAI,WAAW,GAAG,GAAG;AACnB,qBAAW,EAAE,QAAQ,WAAW,SAAS,IAAI,CAAC;AAC9C;AAAA,QACF;AACA,YAAI,cAAc,KAAK,GAAG;AACxB,qBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,YAAY,kBAAkB,KAAK,CAAC,EAAE,CAAC;AACvF;AAAA,QACF;AACA,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,eAAe;AAC1B,mBAAS,OAAO,QAAQ;AACxB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AAGA,YAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,2BAAiB,IAAI;AACrB,sBAAY,SAAS,MAAM;AAC3B;AAAA,QACF;AACA,mBAAW,EAAE,QAAQ,WAAW,SAAS,OAAO,OAAO,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,QAAM,GAAG,MAAM,cAAY,YAAY,cAAc,QAAQ,WAAW,GAAG,iBAAiB,SAAS,GACpG;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAkB,IAAI,SAAU,iBAAO,OAAM;AAAA,MAC9C,oBAAC,SAAI,WAAW,GAAG,wBAAwB,WAAW,GAAI,iBAAO,WAAW,OAAO,SAAS,YAAY,GAAE;AAAA,OAC5G;AAAA,IACC,aACC,qBAAC,eAAY,MAAK,WAAU,MAAK,MAC/B;AAAA,0BAAC,UAAK,WAAU,SAAS,iBAAO,UAAU,YAAY,GAAE;AAAA,MACvD,eAAe,oBAAC,UAAK,WAAU,cAAc,iBAAO,aAAY;AAAA,OACnE;AAAA,IAEF,qBAAC,UAAK,WAAU,aAAY,mBAAiB,SAAS,UAAU,QAAQ,YAAU,MAChF;AAAA,2BAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM;AACf,0BAAY,EAAE,OAAO,KAAK;AAC1B,kBAAI,QAAS,YAAW,IAAI;AAAA,YAC9B;AAAA,YACA,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,yCACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,YAAY,UAAU;AAAA,cAEpC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,SAEJ;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,KAAK;AAAA,UACL,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,eAAe,CAAC,SAAS;AACvB,wBAAY,IAAI;AAChB,6BAAiB,KAAK;AACtB,gBAAI,QAAS,YAAW,IAAI;AAAA,UAC9B;AAAA,UACA,MAAM,OAAO;AAAA,UACb,OAAO,gBAAgB,OAAO,gBAAgB;AAAA,UAC9C,MAAM;AAAA,UACN,UAAQ;AAAA;AAAA,MACV;AAAA,MACC,WACC,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,kBAAQ,SACX;AAAA,MAEF,oBAAC,UAAO,MAAK,UAAS,QAAM,MAAC,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SACrE,iBAAO,QACV;AAAA,OACF;AAAA,KACF;AAEJ;","names":[]}

package/dist/account/sessions-setting.js

@@ -11,7 +11,8 @@ import { hasMessage } from "../components/choice-parts.js";
 import { DangerConfirm } from "../components/danger-confirm.js";
 import { Skeleton } from "../components/skeleton.js";
 import { Button, Card } from "../components/ui.js";
-import { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, settle, useMounted } from "./account-parts.js";
+import { CARD_DESCRIPTION_CLASS, settle, useMounted } from "./account-parts.js";
+import { SettingsCardTitle } from "../settings/settings-heading.js";
 const DEFAULT_SESSIONS_LABELS = {
   title: "Sessions",
   description: "Signed in on a device you no longer use, or don\u2019t trust? Sign out everywhere.",
@@ -80,7 +81,7 @@ function SessionsSetting({
   const showList = sessions !== void 0 || loading;
   return /* @__PURE__ */ jsxs(Card, { ...rest, className: cn("p-4 space-y-3", className), children: [
     /* @__PURE__ */ jsxs("div", { children: [
-      /* @__PURE__ */ jsx("div", { className: CARD_TITLE_CLASS, children: labels.title }),
+      /* @__PURE__ */ jsx(SettingsCardTitle, { children: labels.title }),
       /* @__PURE__ */ jsx("div", { className: CARD_DESCRIPTION_CLASS, children: labels.description })
     ] }),
     showList && (loading || sessions === void 0 ? /* @__PURE__ */ jsx(Skeleton, { lines: 2, label: labels.loading }) : sessions.length === 0 ? /* @__PURE__ */ jsx("p", { className: CARD_DESCRIPTION_CLASS, children: labels.empty }) : /* @__PURE__ */ jsx("ul", { "aria-label": labels.list, className: "divide-y divide-[var(--border)]", children: sessions.map((session) => {

package/dist/account/sessions-setting.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button, Card } from \"../components/ui\";\nimport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, settle, useMounted } from \"./account-parts\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\nexport const DEFAULT_SESSIONS_LABELS: SessionsLabels = {\n  title: \"Sessions\",\n  description: \"Signed in on a device you no longer use, or don’t trust? Sign out everywhere.\",\n  signOutEverywhere: \"Sign out everywhere…\",\n  signOutEverywherePrompt:\n    \"This ends every session, including this one: you will be signed out on this device too, and sign in again from here.\",\n  confirmSignOutEverywhere: \"Sign out everywhere\",\n  list: \"Where you’re signed in\",\n  loading: \"Loading sessions…\",\n  empty: \"No sessions to show.\",\n  current: \"This device\",\n  unknownDevice: \"Unknown device\",\n  lastActive: (when) => `Last active ${when}`,\n  ip: (address) => `IP ${address}`,\n  revoke: \"Sign out\",\n  revokeItem: (device) => `Sign out ${device}`,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId>\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: Partial<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasMessage(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <div className={CARD_TITLE_CLASS}>{labels.title}</div>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-[var(--border)]\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-[var(--text-muted)]\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasMessage(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AA+MM,SACE,KADF;AA/MN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAoB;AAC3C,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,YAAY;AAC7B,SAAS,wBAAwB,kBAAkB,QAAQ,kBAAkB;AAyCtE,MAAM,0BAA0C;AAAA,EACrD,OAAO;AAAA,EACP,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,yBACE;AAAA,EACF,0BAA0B;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AAAA,EACf,YAAY,CAAC,SAAS,eAAe,IAAI;AAAA,EACzC,IAAI,CAAC,YAAY,MAAM,OAAO;AAAA,EAC9B,QAAQ;AAAA,EACR,YAAY,CAAC,WAAW,YAAY,MAAM;AAAA,EAC1C,QAAQ;AACV;AA2EO,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,SAAI,WAAW,kBAAmB,iBAAO,OAAM;AAAA,MAChD,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,mCACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,4CAA2C;AAAA,YACpF,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAM;AAAA,gBACN,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAM;AAAA,QACN,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/account/sessions-setting.tsx"],"sourcesContent":["import { useState } from \"react\";\nimport type { ComponentPropsWithoutRef, ReactNode } from \"react\";\nimport { MonitorSmartphone } from \"lucide-react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport { cn } from \"../lib/cn\";\nimport { formatRelativeTime, toDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { Chip } from \"../components/chip\";\nimport { hasMessage } from \"../components/choice-parts\";\nimport { DangerConfirm } from \"../components/danger-confirm\";\nimport { Skeleton } from \"../components/skeleton\";\nimport { Button, Card } from \"../components/ui\";\nimport { CARD_DESCRIPTION_CLASS, settle, useMounted } from \"./account-parts\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string {@link SessionsSetting} renders — the `sessions` namespace of\n *  `<UiKitProvider labels>`, overridable per instance through `labels`. The confirm's\n *  Cancel is `dangerConfirm.cancel`. */\nexport interface SessionsLabels {\n  /** The card's title. */\n  title: string;\n  /** The line under it: what \"sign out everywhere\" is for. */\n  description: string;\n  /** The button that asks first. */\n  signOutEverywhere: string;\n  /** The question it asks: every session ends, this one too. */\n  signOutEverywherePrompt: string;\n  /** The button that answers it. */\n  confirmSignOutEverywhere: string;\n  /** The device list's accessible name. */\n  list: string;\n  /** While the list loads. */\n  loading: string;\n  /** A list with no rows. */\n  empty: string;\n  /** The chip on the session this page runs in. */\n  current: string;\n  /** A session whose device the server could not name. */\n  unknownDevice: string;\n  /** Given the last activity, formatted (\"3 hours ago\", \"5 Oct 2026\"). */\n  lastActive: (when: string) => string;\n  /** Given the address the session was last seen from. */\n  ip: (address: string) => string;\n  /** A row's button, visible text. */\n  revoke: string;\n  /** The same button's accessible name, given the device — it starts with `revoke`,\n   *  the visible text, so voice control finds it by what it says. */\n  revokeItem: (device: string) => string;\n  /** A request failed. */\n  failed: string;\n}\n\nexport const DEFAULT_SESSIONS_LABELS: SessionsLabels = {\n  title: \"Sessions\",\n  description: \"Signed in on a device you no longer use, or don’t trust? Sign out everywhere.\",\n  signOutEverywhere: \"Sign out everywhere…\",\n  signOutEverywherePrompt:\n    \"This ends every session, including this one: you will be signed out on this device too, and sign in again from here.\",\n  confirmSignOutEverywhere: \"Sign out everywhere\",\n  list: \"Where you’re signed in\",\n  loading: \"Loading sessions…\",\n  empty: \"No sessions to show.\",\n  current: \"This device\",\n  unknownDevice: \"Unknown device\",\n  lastActive: (when) => `Last active ${when}`,\n  ip: (address) => `IP ${address}`,\n  revoke: \"Sign out\",\n  revokeItem: (device) => `Sign out ${device}`,\n  failed: \"That didn’t work. Please try again.\",\n};\n\n/* ── Props ───────────────────────────────────────────────────────────────── */\n\n/** What a session's `id` may be: the app's own key type. */\nexport type SessionId = string | number;\n\n/** One stored session (kastlan's `GET /auth/sessions`). */\nexport interface SessionItem<Id extends SessionId = SessionId> {\n  id: Id;\n  /** The browser and system, as the server reads them (\"Firefox on Windows\"). Blank\n   *  reads as `labels.unknownDevice`. */\n  device?: string | null;\n  /** The address it was last seen from. */\n  ip?: string | null;\n  /** A `Date`, an ISO string or epoch ms. */\n  lastActiveAt?: DateInput;\n  /** The session this page runs in: marked, and offered no \"Sign out\" of its own — the\n   *  app's sign-out does that, and \"Sign out everywhere\" below. */\n  current?: boolean;\n}\n\n/** Which request failed — {@link SessionsSettingProps.describeError}'s second argument. */\nexport type SessionsAction = \"sign-out-everywhere\" | \"revoke\";\n\nexport interface SessionsSettingProps<Id extends SessionId = SessionId>\n  extends Omit<ComponentPropsWithoutRef<\"div\">, \"children\"> {\n  /**\n   * End every session (`POST /auth/logout`, auth §6.3) — this one included. Asked\n   * first; resolve once the server answered, then sign this page out: the card says\n   * that the device signs out too, and its own session is gone.\n   */\n  onSignOutEverywhere: () => Promise<unknown> | void;\n  /**\n   * The stored sessions, where the app keeps them (kastlan's `user_sessions`, §6.3).\n   * Left out, the card is \"Sign out everywhere\" alone — keksdose and Kurvenschmiede keep\n   * a cut-off (`sessions_invalid_before`), not rows. `undefined` with `loading` while the\n   * first load runs.\n   */\n  sessions?: readonly SessionItem<Id>[];\n  /** The list is loading. */\n  loading?: boolean;\n  /** End one other session (`DELETE /auth/sessions/{id}`). Left out, no row buttons.\n   *  The row is busy until it settles; refresh `sessions` then. */\n  onRevoke?: (id: Id) => Promise<unknown> | void;\n  /** The app's own words for a failure, or `undefined` for the kit's `failed`. */\n  describeError?: (error: unknown, action: SessionsAction) => ReactNode | undefined;\n  /** The \"Last active\" text. Default: how long ago, in the provider's locale, and the\n   *  date once it is more than a week back. */\n  formatLastActive?: (date: Date) => string;\n  /** Overrides the provider's locale for the default format. */\n  locale?: string;\n  labels?: Partial<SessionsLabels>;\n}\n\n/**\n * Where the account is signed in, and the way out of all of it\n * (docs/user-admin-harmonization.md §6.3, §2.6).\n *\n * **\"Sign out everywhere\", in every app.** It ends every session, THIS one included —\n * the server stamps a cut-off (`sessions_invalid_before`) that the page's own token is\n * older than — so the confirm says so before it is pressed, and the app signs out once it\n * resolves. A {@link DangerConfirm} in the warning tone: nothing is lost, but the person\n * has to sign in again on every device. keksdose kept its ordinary sign-out device-only\n * (its offline mirror is wiped on an explicit sign-out), which is why this is an action\n * of its own, not a mode of that one.\n *\n * **The device list, where sessions are stored** (kastlan): device, address, last\n * active, and \"This device\" on the current one, with \"Sign out\" on each other row — no\n * confirm, since a session ended is a sign-in away from coming back, not data lost.\n * Without `sessions` there is no list: the other apps keep a cut-off, not rows.\n *\n * Both requests are the app's; a failure is said under the card's action, in the app's\n * words if `describeError` has them.\n */\nexport function SessionsSetting<Id extends SessionId = SessionId>({\n  onSignOutEverywhere,\n  sessions,\n  loading,\n  onRevoke,\n  describeError,\n  formatLastActive,\n  locale: localeProp,\n  labels: labelsProp,\n  className,\n  ...rest\n}: SessionsSettingProps<Id>) {\n  const labels = useKitLabels(\"sessions\", DEFAULT_SESSIONS_LABELS, labelsProp);\n  const locale = useKitLocale(localeProp);\n  const [busyId, setBusyId] = useState<Id | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const mounted = useMounted();\n\n  const describe = (error: unknown, action: SessionsAction): ReactNode => {\n    const own = describeError?.(error, action);\n    return hasMessage(own) ? own : labels.failed;\n  };\n\n  const lastActive = (value: DateInput): string | null => {\n    const date = toDate(value);\n    if (!date) return null;\n    return formatLastActive\n      ? formatLastActive(date)\n      : formatRelativeTime(date, { locale, absoluteAfterDays: 7, absoluteStyle: \"medium\" });\n  };\n\n  const signOutEverywhere = () => {\n    setFailure(null);\n    // Rejected again after it is said, so the tile stays armed for a retry.\n    return settle(onSignOutEverywhere).catch((error: unknown) => {\n      if (mounted.current) setFailure(describe(error, \"sign-out-everywhere\"));\n      throw error;\n    });\n  };\n\n  const revoke = (id: Id) => {\n    if (!onRevoke || busyId !== null) return;\n    setBusyId(id);\n    setFailure(null);\n    settle(() => onRevoke(id)).then(\n      () => {\n        if (mounted.current) setBusyId(null);\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusyId(null);\n        setFailure(describe(error, \"revoke\"));\n      },\n    );\n  };\n\n  const showList = sessions !== undefined || loading;\n\n  return (\n    <Card {...rest} className={cn(\"p-4 space-y-3\", className)}>\n      <div>\n        <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n        <div className={CARD_DESCRIPTION_CLASS}>{labels.description}</div>\n      </div>\n      {showList &&\n        (loading || sessions === undefined ? (\n          <Skeleton lines={2} label={labels.loading} />\n        ) : sessions.length === 0 ? (\n          <p className={CARD_DESCRIPTION_CLASS}>{labels.empty}</p>\n        ) : (\n          <ul aria-label={labels.list} className=\"divide-y divide-[var(--border)]\">\n            {sessions.map((session) => {\n              const device = session.device?.trim() || labels.unknownDevice;\n              const when = lastActive(session.lastActiveAt);\n              const ip = session.ip?.trim();\n              return (\n                <li\n                  key={session.id}\n                  data-session-id={String(session.id)}\n                  data-current={session.current || undefined}\n                  className=\"flex items-center gap-3 py-2\"\n                >\n                  <MonitorSmartphone aria-hidden className=\"size-4 shrink-0 text-[var(--text-muted)]\" />\n                  <div className=\"min-w-0 flex-1\">\n                    <div className=\"flex flex-wrap items-center gap-x-2 gap-y-1\">\n                      <span className=\"min-w-0 break-words text-sm font-medium\">{device}</span>\n                      {session.current && (\n                        <Chip size=\"sm\" tone=\"brand\">\n                          {labels.current}\n                        </Chip>\n                      )}\n                    </div>\n                    {(when || ip) && (\n                      <div className={CARD_DESCRIPTION_CLASS}>\n                        {when && labels.lastActive(when)}\n                        {when && ip && \" · \"}\n                        {/* An address reads left to right in any page direction. */}\n                        {ip && <span dir=\"ltr\">{labels.ip(ip)}</span>}\n                      </div>\n                    )}\n                  </div>\n                  {onRevoke && !session.current && (\n                    <Button\n                      type=\"button\"\n                      size=\"sm\"\n                      variant=\"ghost\"\n                      commit\n                      pending={busyId === session.id}\n                      disabled={busyId !== null && busyId !== session.id}\n                      aria-label={labels.revokeItem(device)}\n                      onClick={() => revoke(session.id)}\n                    >\n                      {labels.revoke}\n                    </Button>\n                  )}\n                </li>\n              );\n            })}\n          </ul>\n        ))}\n      <DangerConfirm\n        tone=\"warning\"\n        commit\n        armLabel={labels.signOutEverywhere}\n        prompt={labels.signOutEverywherePrompt}\n        confirmLabel={labels.confirmSignOutEverywhere}\n        onConfirm={signOutEverywhere}\n      />\n      {hasMessage(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAgNM,SACE,KADF;AAhNN,SAAS,gBAAgB;AAEzB,SAAS,yBAAyB;AAElC,SAAS,cAAc,oBAAoB;AAC3C,SAAS,UAAU;AACnB,SAAS,oBAAoB,cAAc;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AACrB,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,QAAQ,YAAY;AAC7B,SAAS,wBAAwB,QAAQ,kBAAkB;AAC3D,SAAS,yBAAyB;AAyC3B,MAAM,0BAA0C;AAAA,EACrD,OAAO;AAAA,EACP,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,yBACE;AAAA,EACF,0BAA0B;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AAAA,EACf,YAAY,CAAC,SAAS,eAAe,IAAI;AAAA,EACzC,IAAI,CAAC,YAAY,MAAM,OAAO;AAAA,EAC9B,QAAQ;AAAA,EACR,YAAY,CAAC,WAAW,YAAY,MAAM;AAAA,EAC1C,QAAQ;AACV;AA2EO,SAAS,gBAAkD;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA6B;AAC3B,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,SAAS,aAAa,UAAU;AACtC,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAoB,IAAI;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,UAAU,WAAW;AAE3B,QAAM,WAAW,CAAC,OAAgB,WAAsC;AACtE,UAAM,MAAM,gBAAgB,OAAO,MAAM;AACzC,WAAO,WAAW,GAAG,IAAI,MAAM,OAAO;AAAA,EACxC;AAEA,QAAM,aAAa,CAAC,UAAoC;AACtD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,mBACH,iBAAiB,IAAI,IACrB,mBAAmB,MAAM,EAAE,QAAQ,mBAAmB,GAAG,eAAe,SAAS,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,eAAW,IAAI;AAEf,WAAO,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC3D,UAAI,QAAQ,QAAS,YAAW,SAAS,OAAO,qBAAqB,CAAC;AACtE,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,CAAC,OAAW;AACzB,QAAI,CAAC,YAAY,WAAW,KAAM;AAClC,cAAU,EAAE;AACZ,eAAW,IAAI;AACf,WAAO,MAAM,SAAS,EAAE,CAAC,EAAE;AAAA,MACzB,MAAM;AACJ,YAAI,QAAQ,QAAS,WAAU,IAAI;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,kBAAU,IAAI;AACd,mBAAW,SAAS,OAAO,QAAQ,CAAC;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,aAAa,UAAa;AAE3C,SACE,qBAAC,QAAM,GAAG,MAAM,WAAW,GAAG,iBAAiB,SAAS,GACtD;AAAA,yBAAC,SACC;AAAA,0BAAC,qBAAmB,iBAAO,OAAM;AAAA,MACjC,oBAAC,SAAI,WAAW,wBAAyB,iBAAO,aAAY;AAAA,OAC9D;AAAA,IACC,aACE,WAAW,aAAa,SACvB,oBAAC,YAAS,OAAO,GAAG,OAAO,OAAO,SAAS,IACzC,SAAS,WAAW,IACtB,oBAAC,OAAE,WAAW,wBAAyB,iBAAO,OAAM,IAEpD,oBAAC,QAAG,cAAY,OAAO,MAAM,WAAU,mCACpC,mBAAS,IAAI,CAAC,YAAY;AACzB,YAAM,SAAS,QAAQ,QAAQ,KAAK,KAAK,OAAO;AAChD,YAAM,OAAO,WAAW,QAAQ,YAAY;AAC5C,YAAM,KAAK,QAAQ,IAAI,KAAK;AAC5B,aACE;AAAA,QAAC;AAAA;AAAA,UAEC,mBAAiB,OAAO,QAAQ,EAAE;AAAA,UAClC,gBAAc,QAAQ,WAAW;AAAA,UACjC,WAAU;AAAA,UAEV;AAAA,gCAAC,qBAAkB,eAAW,MAAC,WAAU,4CAA2C;AAAA,YACpF,qBAAC,SAAI,WAAU,kBACb;AAAA,mCAAC,SAAI,WAAU,+CACb;AAAA,oCAAC,UAAK,WAAU,2CAA2C,kBAAO;AAAA,gBACjE,QAAQ,WACP,oBAAC,QAAK,MAAK,MAAK,MAAK,SAClB,iBAAO,SACV;AAAA,iBAEJ;AAAA,eACE,QAAQ,OACR,qBAAC,SAAI,WAAW,wBACb;AAAA,wBAAQ,OAAO,WAAW,IAAI;AAAA,gBAC9B,QAAQ,MAAM;AAAA,gBAEd,MAAM,oBAAC,UAAK,KAAI,OAAO,iBAAO,GAAG,EAAE,GAAE;AAAA,iBACxC;AAAA,eAEJ;AAAA,YACC,YAAY,CAAC,QAAQ,WACpB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,SAAQ;AAAA,gBACR,QAAM;AAAA,gBACN,SAAS,WAAW,QAAQ;AAAA,gBAC5B,UAAU,WAAW,QAAQ,WAAW,QAAQ;AAAA,gBAChD,cAAY,OAAO,WAAW,MAAM;AAAA,gBACpC,SAAS,MAAM,OAAO,QAAQ,EAAE;AAAA,gBAE/B,iBAAO;AAAA;AAAA,YACV;AAAA;AAAA;AAAA,QApCG,QAAQ;AAAA,MAsCf;AAAA,IAEJ,CAAC,GACH;AAAA,IAEJ;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAM;AAAA,QACN,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,QACrB,WAAW;AAAA;AAAA,IACb;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,KAEJ;AAEJ;","names":[]}