@eifi1/ui-kit 0.31.0 → 0.32.0

package/dist/landing/landing-sections.d.ts

@@ -1,19 +1,21 @@
 import * as react from 'react';
 import { ComponentPropsWithoutRef, ReactNode } from 'react';
-import { dY as LegalFooterProps } from '../delete-account-setting-DCFS5Vof.js';
+import { e8 as LegalFooterProps } from '../delete-account-setting-BvdQdbv3.js';
 import { LandingActionsProps } from './landing-actions.js';
 import { LandingLabels } from './landing-labels.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
 import '../lib/clipping.js';
-import '../data-table-labels-DUELeXpa.js';
+import '../data-table-labels-kpAAVi6g.js';
 import '../components/data-table-sort.js';
 import '../components/swipeable-row.js';
 import '../components/mini-calendar.js';
 import '../components/calendar-heatmap.js';
 import '../components/popover.js';
+import '../hooks/use-breakpoint.js';
 import '../components/chip.js';
 import 'lucide-react';
+import '../components/field-parts.js';
 import '../components/field-sync.js';
 import '../wizard/types.js';
 import '../tour/tour.js';
@@ -81,6 +83,9 @@ import '../admin/admin-parts.js';
 import '../admin/admin-action-log.js';
 import '../settings/settings-labels.js';
 import '../demo/demo-labels.js';
+import '../components/appearance-labels.js';
+import '../theme/contrast.js';
+import '../theme/text-size.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';
@@ -94,7 +99,7 @@ import '../components/sign-chip.js';
 import '../components/column-mapper.js';
 import '../lib/column-mapping.js';
 import '../lib/table-text.js';
-import '../components/field-parts.js';
+import '../components/focus-ring.js';
 
 /**
  * The sections of the public landing page (docs/landing-demo-harmonization.md §4.1),

package/dist/landing/public-header.d.ts

@@ -4,18 +4,20 @@ import { TopBarProps } from '../shell/top-bar.js';
 import { AccessChoice } from './access.js';
 import { LandingLabels } from './landing-labels.js';
 import { LandingSession } from './landing-actions.js';
-import '../delete-account-setting-DCFS5Vof.js';
+import '../delete-account-setting-BvdQdbv3.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
 import '../lib/clipping.js';
-import '../data-table-labels-DUELeXpa.js';
+import '../data-table-labels-kpAAVi6g.js';
 import '../components/data-table-sort.js';
 import '../components/swipeable-row.js';
 import '../components/mini-calendar.js';
 import '../components/calendar-heatmap.js';
 import '../components/popover.js';
+import '../hooks/use-breakpoint.js';
 import '../components/chip.js';
 import 'lucide-react';
+import '../components/field-parts.js';
 import '../components/field-sync.js';
 import '../wizard/types.js';
 import '../tour/tour.js';
@@ -82,6 +84,9 @@ import '../admin/admin-parts.js';
 import '../admin/admin-action-log.js';
 import '../settings/settings-labels.js';
 import '../demo/demo-labels.js';
+import '../components/appearance-labels.js';
+import '../theme/contrast.js';
+import '../theme/text-size.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';
@@ -95,7 +100,7 @@ import '../components/sign-chip.js';
 import '../components/column-mapper.js';
 import '../lib/column-mapping.js';
 import '../lib/table-text.js';
-import '../components/field-parts.js';
+import '../components/focus-ring.js';
 
 /** The header's brand: what `TopBarBrand` draws. */
 interface PublicHeaderBrand {
@@ -139,7 +144,7 @@ interface PublicHeaderProps extends Omit<TopBarProps, "brand" | "actions" | "chi
  * | user | **Open app** (primary) |
  *
  * A demo session is not "signed in" here: it is still offered access, which is the point
- * of the demo (§5.6). On a phone (`PHONE_QUERY`) the actions take the kit's `sm` size, so
+ * of the demo (§5.6). In the phone layout (`usePhoneLayout()`) the actions take the kit's `sm` size, so
  * the brand mark, the two controls and two actions fit 390px; "Sign in" gives way below
  * `sm` as in keksdose — the sign-in page is one tap away from "Request access" anyway.
  */

package/dist/landing/public-header.js

@@ -1,7 +1,7 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-import { Button, PHONE_QUERY } from "../components/ui.js";
-import { useMediaQuery } from "../hooks/use-media-query.js";
+import { Button } from "../components/ui.js";
+import { usePhoneLayout } from "../hooks/use-breakpoint.js";
 import { TopBar } from "../shell/top-bar.js";
 import { TopBarBrand } from "../shell/top-bar-brand.js";
 import { useAccessAction } from "./access.js";
@@ -22,7 +22,7 @@ function PublicHeader({
 }) {
   const labels = useLandingLabels(labelsProp);
   const accessLink = useAccessAction(access, labelsProp);
-  const phone = useMediaQuery(PHONE_QUERY, false);
+  const phone = usePhoneLayout();
   const size = phone ? "sm" : "md";
   const home = homeHref ?? (session === "none" ? "/" : "/welcome");
   const actions = session === "user" ? /* @__PURE__ */ jsx(Button, { href: openAppHref, variant: "brand", size, children: labels.openApp }) : /* @__PURE__ */ jsxs(Fragment, { children: [

package/dist/landing/public-header.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/landing/public-header.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\n\nimport { Button, PHONE_QUERY } from \"../components/ui\";\nimport { useMediaQuery } from \"../hooks/use-media-query\";\nimport { TopBar } from \"../shell/top-bar\";\nimport type { TopBarProps } from \"../shell/top-bar\";\nimport { TopBarBrand } from \"../shell/top-bar-brand\";\nimport { useAccessAction } from \"./access\";\nimport type { AccessChoice } from \"./access\";\nimport { useLandingLabels } from \"./landing-labels\";\nimport type { LandingLabels } from \"./landing-labels\";\nimport type { LandingSession } from \"./landing-actions\";\n\n/** The header's brand: what `TopBarBrand` draws. */\nexport interface PublicHeaderBrand {\n  /** The brand mark — an SVG or an `<img alt=\"\">`. */\n  logo: ReactNode;\n  /** The product name beside it, and the link's accessible name. */\n  name: ReactNode;\n  /** See `TopBarBrand`. Default `sm`: the logo alone on a phone. */\n  collapseBelow?: \"sm\" | \"md\" | false;\n}\n\nexport interface PublicHeaderProps extends Omit<TopBarProps, \"brand\" | \"actions\" | \"children\"> {\n  brand: PublicHeaderBrand;\n  /** Where the brand links. Default `/` without a session and `/welcome` with one —\n   *  `/` would resume into the app, `/welcome` is always the landing (§3.1). */\n  homeHref?: string;\n  session: LandingSession;\n  access: AccessChoice;\n  /** \"Sign in\". Default `/login`. */\n  signInHref?: string;\n  /** \"Open app\" for a real session — the resume target. Default `/`, which resumes\n   *  through `RootEntry`. */\n  openAppHref?: string;\n  /** \"Continue the demo\" for a demo session. Default `/demo`, which continues a live\n   *  demo (§3.1). */\n  demoHref?: string;\n  /** The app's `LanguageMenu`, before the actions. */\n  languageMenu?: ReactNode;\n  /** The app's `ThemeToggle`, before the language menu. */\n  themeToggle?: ReactNode;\n  labels?: Partial<LandingLabels>;\n}\n\n/**\n * The header of every public page (docs/landing-demo-harmonization.md §4.1): the\n * landing, the auth pages, the legal pages and the 404 — keksdose's `LandingHeader`, on\n * the kit's `TopBar` and `TopBarBrand`, with its hard-coded teal turned into `--brand`.\n *\n * | session | actions |\n * |---|---|\n * | none | Sign in (secondary, hidden below `sm`), **Request access** (primary) |\n * | demo | Continue the demo (secondary), **Request access** (primary) |\n * | user | **Open app** (primary) |\n *\n * A demo session is not \"signed in\" here: it is still offered access, which is the point\n * of the demo (§5.6). On a phone (`PHONE_QUERY`) the actions take the kit's `sm` size, so\n * the brand mark, the two controls and two actions fit 390px; \"Sign in\" gives way below\n * `sm` as in keksdose — the sign-in page is one tap away from \"Request access\" anyway.\n */\nexport function PublicHeader({\n  brand,\n  homeHref,\n  session,\n  access,\n  signInHref = \"/login\",\n  openAppHref = \"/\",\n  demoHref = \"/demo\",\n  languageMenu,\n  themeToggle,\n  labels: labelsProp,\n  className,\n  ...rest\n}: PublicHeaderProps) {\n  const labels = useLandingLabels(labelsProp);\n  const accessLink = useAccessAction(access, labelsProp);\n  const phone = useMediaQuery(PHONE_QUERY, false);\n  const size = phone ? \"sm\" : \"md\";\n  const home = homeHref ?? (session === \"none\" ? \"/\" : \"/welcome\");\n\n  const actions =\n    session === \"user\" ? (\n      <Button href={openAppHref} variant=\"brand\" size={size}>\n        {labels.openApp}\n      </Button>\n    ) : (\n      <>\n        {session === \"demo\" ? (\n          <Button href={demoHref} variant=\"secondary\" size={size}>\n            {labels.continueDemo}\n          </Button>\n        ) : (\n          <Button href={signInHref} variant=\"secondary\" size={size} className=\"max-sm:hidden\">\n            {labels.signIn}\n          </Button>\n        )}\n        <Button href={accessLink.href} variant=\"brand\" size={size}>\n          {accessLink.label}\n        </Button>\n      </>\n    );\n\n  return (\n    <TopBar\n      {...rest}\n      className={className}\n      brand={<TopBarBrand logo={brand.logo} name={brand.name} to={home} collapseBelow={brand.collapseBelow} />}\n      actions={\n        <>\n          {themeToggle}\n          {languageMenu}\n          <span data-slot=\"public-header-actions\" className=\"ms-1 flex items-center gap-1.5 sm:gap-2\">\n            {actions}\n          </span>\n        </>\n      }\n    />\n  );\n}\n"],"mappings":";AAmFM,SAIA,UAJA,KAIA,YAJA;AAjFN,SAAS,QAAQ,mBAAmB;AACpC,SAAS,qBAAqB;AAC9B,SAAS,cAAc;AAEvB,SAAS,mBAAmB;AAC5B,SAAS,uBAAuB;AAEhC,SAAS,wBAAwB;AAoD1B,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAsB;AACpB,QAAM,SAAS,iBAAiB,UAAU;AAC1C,QAAM,aAAa,gBAAgB,QAAQ,UAAU;AACrD,QAAM,QAAQ,cAAc,aAAa,KAAK;AAC9C,QAAM,OAAO,QAAQ,OAAO;AAC5B,QAAM,OAAO,aAAa,YAAY,SAAS,MAAM;AAErD,QAAM,UACJ,YAAY,SACV,oBAAC,UAAO,MAAM,aAAa,SAAQ,SAAQ,MACxC,iBAAO,SACV,IAEA,iCACG;AAAA,gBAAY,SACX,oBAAC,UAAO,MAAM,UAAU,SAAQ,aAAY,MACzC,iBAAO,cACV,IAEA,oBAAC,UAAO,MAAM,YAAY,SAAQ,aAAY,MAAY,WAAU,iBACjE,iBAAO,QACV;AAAA,IAEF,oBAAC,UAAO,MAAM,WAAW,MAAM,SAAQ,SAAQ,MAC5C,qBAAW,OACd;AAAA,KACF;AAGJ,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ;AAAA,MACA,OAAO,oBAAC,eAAY,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI,MAAM,eAAe,MAAM,eAAe;AAAA,MACtG,SACE,iCACG;AAAA;AAAA,QACA;AAAA,QACD,oBAAC,UAAK,aAAU,yBAAwB,WAAU,2CAC/C,mBACH;AAAA,SACF;AAAA;AAAA,EAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/landing/public-header.tsx"],"sourcesContent":["import type { ReactNode } from \"react\";\n\nimport { Button } from \"../components/ui\";\nimport { usePhoneLayout } from \"../hooks/use-breakpoint\";\nimport { TopBar } from \"../shell/top-bar\";\nimport type { TopBarProps } from \"../shell/top-bar\";\nimport { TopBarBrand } from \"../shell/top-bar-brand\";\nimport { useAccessAction } from \"./access\";\nimport type { AccessChoice } from \"./access\";\nimport { useLandingLabels } from \"./landing-labels\";\nimport type { LandingLabels } from \"./landing-labels\";\nimport type { LandingSession } from \"./landing-actions\";\n\n/** The header's brand: what `TopBarBrand` draws. */\nexport interface PublicHeaderBrand {\n  /** The brand mark — an SVG or an `<img alt=\"\">`. */\n  logo: ReactNode;\n  /** The product name beside it, and the link's accessible name. */\n  name: ReactNode;\n  /** See `TopBarBrand`. Default `sm`: the logo alone on a phone. */\n  collapseBelow?: \"sm\" | \"md\" | false;\n}\n\nexport interface PublicHeaderProps extends Omit<TopBarProps, \"brand\" | \"actions\" | \"children\"> {\n  brand: PublicHeaderBrand;\n  /** Where the brand links. Default `/` without a session and `/welcome` with one —\n   *  `/` would resume into the app, `/welcome` is always the landing (§3.1). */\n  homeHref?: string;\n  session: LandingSession;\n  access: AccessChoice;\n  /** \"Sign in\". Default `/login`. */\n  signInHref?: string;\n  /** \"Open app\" for a real session — the resume target. Default `/`, which resumes\n   *  through `RootEntry`. */\n  openAppHref?: string;\n  /** \"Continue the demo\" for a demo session. Default `/demo`, which continues a live\n   *  demo (§3.1). */\n  demoHref?: string;\n  /** The app's `LanguageMenu`, before the actions. */\n  languageMenu?: ReactNode;\n  /** The app's `ThemeToggle`, before the language menu. */\n  themeToggle?: ReactNode;\n  labels?: Partial<LandingLabels>;\n}\n\n/**\n * The header of every public page (docs/landing-demo-harmonization.md §4.1): the\n * landing, the auth pages, the legal pages and the 404 — keksdose's `LandingHeader`, on\n * the kit's `TopBar` and `TopBarBrand`, with its hard-coded teal turned into `--brand`.\n *\n * | session | actions |\n * |---|---|\n * | none | Sign in (secondary, hidden below `sm`), **Request access** (primary) |\n * | demo | Continue the demo (secondary), **Request access** (primary) |\n * | user | **Open app** (primary) |\n *\n * A demo session is not \"signed in\" here: it is still offered access, which is the point\n * of the demo (§5.6). In the phone layout (`usePhoneLayout()`) the actions take the kit's `sm` size, so\n * the brand mark, the two controls and two actions fit 390px; \"Sign in\" gives way below\n * `sm` as in keksdose — the sign-in page is one tap away from \"Request access\" anyway.\n */\nexport function PublicHeader({\n  brand,\n  homeHref,\n  session,\n  access,\n  signInHref = \"/login\",\n  openAppHref = \"/\",\n  demoHref = \"/demo\",\n  languageMenu,\n  themeToggle,\n  labels: labelsProp,\n  className,\n  ...rest\n}: PublicHeaderProps) {\n  const labels = useLandingLabels(labelsProp);\n  const accessLink = useAccessAction(access, labelsProp);\n  const phone = usePhoneLayout();\n  const size = phone ? \"sm\" : \"md\";\n  const home = homeHref ?? (session === \"none\" ? \"/\" : \"/welcome\");\n\n  const actions =\n    session === \"user\" ? (\n      <Button href={openAppHref} variant=\"brand\" size={size}>\n        {labels.openApp}\n      </Button>\n    ) : (\n      <>\n        {session === \"demo\" ? (\n          <Button href={demoHref} variant=\"secondary\" size={size}>\n            {labels.continueDemo}\n          </Button>\n        ) : (\n          <Button href={signInHref} variant=\"secondary\" size={size} className=\"max-sm:hidden\">\n            {labels.signIn}\n          </Button>\n        )}\n        <Button href={accessLink.href} variant=\"brand\" size={size}>\n          {accessLink.label}\n        </Button>\n      </>\n    );\n\n  return (\n    <TopBar\n      {...rest}\n      className={className}\n      brand={<TopBarBrand logo={brand.logo} name={brand.name} to={home} collapseBelow={brand.collapseBelow} />}\n      actions={\n        <>\n          {themeToggle}\n          {languageMenu}\n          <span data-slot=\"public-header-actions\" className=\"ms-1 flex items-center gap-1.5 sm:gap-2\">\n            {actions}\n          </span>\n        </>\n      }\n    />\n  );\n}\n"],"mappings":";AAmFM,SAIA,UAJA,KAIA,YAJA;AAjFN,SAAS,cAAc;AACvB,SAAS,sBAAsB;AAC/B,SAAS,cAAc;AAEvB,SAAS,mBAAmB;AAC5B,SAAS,uBAAuB;AAEhC,SAAS,wBAAwB;AAoD1B,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAsB;AACpB,QAAM,SAAS,iBAAiB,UAAU;AAC1C,QAAM,aAAa,gBAAgB,QAAQ,UAAU;AACrD,QAAM,QAAQ,eAAe;AAC7B,QAAM,OAAO,QAAQ,OAAO;AAC5B,QAAM,OAAO,aAAa,YAAY,SAAS,MAAM;AAErD,QAAM,UACJ,YAAY,SACV,oBAAC,UAAO,MAAM,aAAa,SAAQ,SAAQ,MACxC,iBAAO,SACV,IAEA,iCACG;AAAA,gBAAY,SACX,oBAAC,UAAO,MAAM,UAAU,SAAQ,aAAY,MACzC,iBAAO,cACV,IAEA,oBAAC,UAAO,MAAM,YAAY,SAAQ,aAAY,MAAY,WAAU,iBACjE,iBAAO,QACV;AAAA,IAEF,oBAAC,UAAO,MAAM,WAAW,MAAM,SAAQ,SAAQ,MAC5C,qBAAW,OACd;AAAA,KACF;AAGJ,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ;AAAA,MACA,OAAO,oBAAC,eAAY,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI,MAAM,eAAe,MAAM,eAAe;AAAA,MACtG,SACE,iCACG;AAAA;AAAA,QACA;AAAA,QACD,oBAAC,UAAK,aAAU,yBAAwB,WAAU,2CAC/C,mBACH;AAAA,SACF;AAAA;AAAA,EAEJ;AAEJ;","names":[]}

package/dist/landing/routing.d.ts

@@ -1,18 +1,20 @@
 import * as react from 'react';
 import { ReactNode } from 'react';
 import { LandingSession } from './landing-actions.js';
-import '../delete-account-setting-DCFS5Vof.js';
+import '../delete-account-setting-BvdQdbv3.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
 import '../lib/clipping.js';
-import '../data-table-labels-DUELeXpa.js';
+import '../data-table-labels-kpAAVi6g.js';
 import '../components/data-table-sort.js';
 import '../components/swipeable-row.js';
 import '../components/mini-calendar.js';
 import '../components/calendar-heatmap.js';
 import '../components/popover.js';
+import '../hooks/use-breakpoint.js';
 import '../components/chip.js';
 import 'lucide-react';
+import '../components/field-parts.js';
 import '../components/field-sync.js';
 import '../wizard/types.js';
 import '../tour/tour.js';
@@ -81,6 +83,9 @@ import '../admin/admin-parts.js';
 import '../admin/admin-action-log.js';
 import '../settings/settings-labels.js';
 import '../demo/demo-labels.js';
+import '../components/appearance-labels.js';
+import '../theme/contrast.js';
+import '../theme/text-size.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';
@@ -94,8 +99,15 @@ import '../components/sign-chip.js';
 import '../components/column-mapper.js';
 import '../lib/column-mapping.js';
 import '../lib/table-text.js';
-import '../components/field-parts.js';
+import '../components/focus-ring.js';
 
+/**
+ * 0.31.1: a session that is still being restored — an app whose access token lives in
+ * memory reads it back from its refresh token first (kastlan's 0.31 adoption). Until
+ * then `/` neither shows the landing nor resumes, and a public page neither shows nor
+ * redirects: both render `loading` instead.
+ */
+type RoutingSession = LandingSession | "loading";
 /**
  * The public routes' logic (docs/landing-demo-harmonization.md §3): what `/` shows,
  * which pages a session skips, and the page a session resumes on — keksdose's
@@ -167,8 +179,11 @@ declare function readLastVisitedPage(key: string, fallback?: null): string | nul
  *  resume on the previous one's page. */
 declare function clearLastVisitedPage(key: string): void;
 interface RootEntryProps {
-    /** Without a session `/` is the landing; with one (real or demo) it resumes. */
-    session: LandingSession;
+    /** Without a session `/` is the landing; with one (real or demo) it resumes;
+     *  `"loading"` while the app restores one. */
+    session: RoutingSession;
+    /** What shows while `session` is `"loading"`. Default: the kit's `LoadingState`. */
+    loading?: ReactNode;
     /** The remembered page — `readLastVisitedPage(key)`. */
     resumePath?: string | null;
     /** The landing page element. */
@@ -186,9 +201,12 @@ interface RootEntryProps {
  * home instead, because a session at `/` came to use the app. The landing stays one tap
  * away at `/welcome`, where the signed-in brand link points.
  */
-declare function RootEntry({ session, resumePath, landing, home }: RootEntryProps): react.JSX.Element;
+declare function RootEntry({ session, resumePath, landing, home, loading }: RootEntryProps): react.JSX.Element;
 interface RedirectIfAuthedProps {
-    session: LandingSession;
+    /** `"loading"` while the app restores a session: neither the page nor a redirect. */
+    session: RoutingSession;
+    /** What shows while `session` is `"loading"`. Default: the kit's `LoadingState`. */
+    loading?: ReactNode;
     /**
      * Let a DEMO session through (§5.6): on `/login`, `/register` and the app's invitation
      * pages, so a demo visitor can sign in or accept an invitation — a successful one
@@ -213,6 +231,6 @@ interface RedirectIfAuthedProps {
  * `allowDemo` around `/login`, `/register` and the invitation pages, and one without
  * around `/demo` (and `/forgot-password`).
  */
-declare function RedirectIfAuthed({ session, allowDemo, fallback, children }: RedirectIfAuthedProps): react.JSX.Element;
+declare function RedirectIfAuthed({ session, allowDemo, fallback, children, loading }: RedirectIfAuthedProps): react.JSX.Element;
 
-export { DEFAULT_LAST_VISITED_EXCLUDES, type LastVisitedPageOptions, NEXT_PARAM, type PathPattern, RedirectIfAuthed, type RedirectIfAuthedProps, RootEntry, type RootEntryProps, clearLastVisitedPage, readLastVisitedPage, safeNextPath, useLastVisitedPage };
+export { DEFAULT_LAST_VISITED_EXCLUDES, type LastVisitedPageOptions, NEXT_PARAM, type PathPattern, RedirectIfAuthed, type RedirectIfAuthedProps, RootEntry, type RootEntryProps, type RoutingSession, clearLastVisitedPage, readLastVisitedPage, safeNextPath, useLastVisitedPage };

package/dist/landing/routing.js

@@ -3,6 +3,7 @@ import { Fragment, jsx } from "react/jsx-runtime";
 import { useEffect } from "react";
 import { Navigate, Outlet, useLocation } from "react-router";
 import { readStored, writeStored } from "../lib/safe-storage.js";
+import { LoadingState } from "../components/loading-state.js";
 const NEXT_PARAM = "next";
 function safeNextPath(raw) {
   if (!raw) return null;
@@ -55,13 +56,15 @@ function clearLastVisitedPage(key) {
   } catch {
   }
 }
-function RootEntry({ session, resumePath, landing, home }) {
+function RootEntry({ session, resumePath, landing, home, loading }) {
+  if (session === "loading") return /* @__PURE__ */ jsx(Fragment, { children: loading ?? /* @__PURE__ */ jsx(LoadingState, {}) });
   if (session === "none") return /* @__PURE__ */ jsx(Fragment, { children: landing });
   const resume = safeNextPath(resumePath);
   return /* @__PURE__ */ jsx(Navigate, { to: resume && resume !== "/" ? resume : home, replace: true });
 }
-function RedirectIfAuthed({ session, allowDemo = false, fallback, children }) {
+function RedirectIfAuthed({ session, allowDemo = false, fallback, children, loading }) {
   const { search } = useLocation();
+  if (session === "loading") return /* @__PURE__ */ jsx(Fragment, { children: loading ?? /* @__PURE__ */ jsx(LoadingState, {}) });
   if (session === "none" || session === "demo" && allowDemo) {
     return children === void 0 ? /* @__PURE__ */ jsx(Outlet, {}) : /* @__PURE__ */ jsx(Fragment, { children });
   }

package/dist/landing/routing.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/landing/routing.tsx"],"sourcesContent":["import { useEffect } from \"react\";\nimport type { ReactNode } from \"react\";\nimport { Navigate, Outlet, useLocation } from \"react-router\";\n\nimport { readStored, writeStored } from \"../lib/safe-storage\";\nimport type { LandingSession } from \"./landing-actions\";\n\n/**\n * The public routes' logic (docs/landing-demo-harmonization.md §3): what `/` shows,\n * which pages a session skips, and the page a session resumes on — keksdose's\n * `RootEntry`, `RedirectIfAuthed` and use-last-visited-page.ts, for every app.\n * Router-aware (react-router), so they belong to the `./shell` entry.\n */\n\n/* ── ?next= ──────────────────────────────────────────────────────────────── */\n\n/** The query parameter that carries \"where I was actually trying to go\" through the\n *  sign-in bounce (keksdose's `NEXT_PARAM`). */\nexport const NEXT_PARAM = \"next\";\n\n/**\n * A `?next=` value that is safe to navigate to, or null.\n *\n * Same-origin PATHS only, decided by the URL PARSER rather than by string prefix —\n * this is the open-redirect check, and it is the reason this lives in one place\n * instead of at each call site.\n *\n * The prefix version (\"starts with `/`, does not start with `//`\") let two shapes\n * through that the browser resolves cross-origin, because the WHATWG parser does not\n * read them as text: a backslash after the leading slash counts as a second slash for\n * a special scheme, so `/\\evil.example` resolves to `https://evil.example/`; and tab,\n * LF and CR are STRIPPED anywhere in the input before parsing, so `/<TAB>/evil.example`\n * becomes `//evil.example`. Asking the same parser the browser will use closes every\n * such shape at once, including ones nobody has thought of yet, and it normalises what\n * comes back instead of echoing the caller's spelling.\n *\n * keksdose's (shared/hooks/use-last-visited-page.ts), verbatim but for the fallback\n * origin.\n */\nexport function safeNextPath(raw: string | null | undefined): string | null {\n  if (!raw) return null;\n  const base = typeof window !== \"undefined\" ? window.location.origin : \"https://kit.invalid\";\n  try {\n    const url = new URL(raw, base);\n    if (url.origin !== base) return null;\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return null;\n  }\n}\n\n/* ── The last visited page (§3.2) ────────────────────────────────────────── */\n\n/** A path to leave out: a string is the path and everything under it (`/demo` is\n *  `/demo` and `/demo/ended`; `/` is only `/`), a RegExp is tested on the pathname. */\nexport type PathPattern = string | RegExp;\n\n/**\n * The pages never recorded as a resume target (§3.2): the landing (`/`, `/welcome`), the\n * auth pages, the demo's own (`/demo*`) and the legal pages. The 404 has no path of its\n * own — call {@link useLastVisitedPage} inside the signed-in layout, as keksdose does,\n * and it never sees one. The app adds its own one-shot routes (keksdose:\n * `/banks/callback`, `/join`, `/share-target`) through `exclude`.\n */\nexport const DEFAULT_LAST_VISITED_EXCLUDES: readonly PathPattern[] = Object.freeze([\n  \"/\",\n  \"/welcome\",\n  \"/login\",\n  \"/register\",\n  \"/forgot-password\",\n  \"/reset-password\",\n  \"/verify-email\",\n  \"/demo\",\n  \"/impressum\",\n  \"/privacy\",\n  \"/terms\",\n]);\n\nfunction matchesPath(pathname: string, pattern: PathPattern): boolean {\n  if (typeof pattern !== \"string\") return new RegExp(pattern.source, pattern.flags.replace(\"g\", \"\")).test(pathname);\n  if (pattern === \"/\") return pathname === \"/\";\n  const base = pattern.endsWith(\"/\") ? pattern.slice(0, -1) : pattern;\n  return pathname === base || pathname.startsWith(`${base}/`);\n}\n\n/** Whether `pathname` is one of the defaults or the app's `exclude`. */\nfunction isExcluded(pathname: string, exclude: readonly PathPattern[]): boolean {\n  return [...DEFAULT_LAST_VISITED_EXCLUDES, ...exclude].some((pattern) => matchesPath(pathname, pattern));\n}\n\nexport interface LastVisitedPageOptions {\n  /** The device key: `<app>.lastVisitedPage` (§3.2), one per app on the origin. */\n  key: string;\n  /** The app's own paths to leave out, ON TOP of {@link DEFAULT_LAST_VISITED_EXCLUDES}. */\n  exclude?: readonly PathPattern[];\n  /** `false` records nothing — while the session is still being restored, say. */\n  enabled?: boolean;\n}\n\n/**\n * Remember the page a session is on (path and query), on every navigation, so `/` — a\n * revisit, a fresh sign-in, the installed PWA, whose `start_url` is `/` — resumes there\n * (§3.2, keksdose feedback #59). Device-local, in `localStorage` under `key`; a blocked\n * storage records nothing.\n *\n * Call it once in the signed-in layout. The excluded paths are never written, so a\n * one-shot page (a bank callback, an invitation link) never becomes the place the next\n * launch opens on.\n */\nexport function useLastVisitedPage({ key, exclude = [], enabled = true }: LastVisitedPageOptions): void {\n  const { pathname, search } = useLocation();\n  // Decided here, so the effect depends on the answer and not on an `exclude` array the\n  // caller likely builds inline.\n  const skip = !enabled || isExcluded(pathname, exclude);\n  useEffect(() => {\n    if (skip) return;\n    writeStored(key, pathname + search);\n  }, [key, pathname, search, skip]);\n}\n\n/**\n * The page {@link useLastVisitedPage} remembered under `key` — checked by\n * {@link safeNextPath}, so a value someone planted in storage cannot leave the origin —\n * or `fallback` (default `null`) when there is none or storage is blocked. A string\n * fallback narrows the answer to a string, for react-router's `to`.\n */\nexport function readLastVisitedPage(key: string, fallback: string): string;\nexport function readLastVisitedPage(key: string, fallback?: null): string | null;\nexport function readLastVisitedPage(key: string, fallback: string | null = null): string | null {\n  return safeNextPath(readStored(key)) ?? fallback;\n}\n\n/** Forget the remembered page — on an explicit sign-out, so the next account does not\n *  resume on the previous one's page. */\nexport function clearLastVisitedPage(key: string): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(key);\n  } catch {\n    // storage blocked: there is nothing to forget\n  }\n}\n\n/* ── RootEntry ───────────────────────────────────────────────────────────── */\n\nexport interface RootEntryProps {\n  /** Without a session `/` is the landing; with one (real or demo) it resumes. */\n  session: LandingSession;\n  /** The remembered page — `readLastVisitedPage(key)`. */\n  resumePath?: string | null;\n  /** The landing page element. */\n  landing: ReactNode;\n  /** The app's home: where a session goes with nothing to resume (keksdose `/budget`,\n   *  kastlan and Kurvenschmiede `/dashboard`). */\n  home: string;\n}\n\n/**\n * The `/` route (§3.1): the landing for a visitor, and for a session — real or demo —\n * the last visited page, else the app's home. Indexed and canonical `/` for the visitor;\n * a crawler never has a session, so for it `/` is stable.\n *\n * keksdose showed a session with nothing remembered the landing; the contract sends it\n * home instead, because a session at `/` came to use the app. The landing stays one tap\n * away at `/welcome`, where the signed-in brand link points.\n */\nexport function RootEntry({ session, resumePath, landing, home }: RootEntryProps) {\n  if (session === \"none\") return <>{landing}</>;\n  const resume = safeNextPath(resumePath);\n  return <Navigate to={resume && resume !== \"/\" ? resume : home} replace />;\n}\n\n/* ── RedirectIfAuthed ────────────────────────────────────────────────────── */\n\nexport interface RedirectIfAuthedProps {\n  session: LandingSession;\n  /**\n   * Let a DEMO session through (§5.6): on `/login`, `/register` and the app's invitation\n   * pages, so a demo visitor can sign in or accept an invitation — a successful one\n   * replaces the demo session. Default `false`: on `/demo` a live demo continues instead\n   * of starting a second one (§5.2), and on `/forgot-password` a demo has no password.\n   */\n  allowDemo?: boolean;\n  /** Where a redirected session goes: the resume target —\n   *  `readLastVisitedPage(key, home)`. A safe `?next=` goes first. */\n  fallback: string;\n  /** The page. Left out, an `<Outlet />`: the component is a layout route around the\n   *  public pages, as in keksdose. */\n  children?: ReactNode;\n}\n\n/**\n * Public pages a session skips (§3.1): a signed-in visitor at `/login` goes back into\n * the app, to a safe `?next=` when the URL carries one (a share invitation or a push\n * deep link opened with a live session in another tab — keksdose) and else to\n * `fallback`.\n *\n * A demo session passes where `allowDemo` says so (§5.6). Mount one wrapper with\n * `allowDemo` around `/login`, `/register` and the invitation pages, and one without\n * around `/demo` (and `/forgot-password`).\n */\nexport function RedirectIfAuthed({ session, allowDemo = false, fallback, children }: RedirectIfAuthedProps) {\n  const { search } = useLocation();\n  if (session === \"none\" || (session === \"demo\" && allowDemo)) {\n    return children === undefined ? <Outlet /> : <>{children}</>;\n  }\n  const next = safeNextPath(new URLSearchParams(search).get(NEXT_PARAM));\n  return <Navigate to={next ?? fallback} replace />;\n}\n"],"mappings":";AAuKiC;AAvKjC,SAAS,iBAAiB;AAE1B,SAAS,UAAU,QAAQ,mBAAmB;AAE9C,SAAS,YAAY,mBAAmB;AAcjC,MAAM,aAAa;AAqBnB,SAAS,aAAa,KAA+C;AAC1E,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,OAAO,WAAW,cAAc,OAAO,SAAS,SAAS;AACtE,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK,IAAI;AAC7B,QAAI,IAAI,WAAW,KAAM,QAAO;AAChC,WAAO,GAAG,IAAI,QAAQ,GAAG,IAAI,MAAM,GAAG,IAAI,IAAI;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeO,MAAM,gCAAwD,OAAO,OAAO;AAAA,EACjF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,YAAY,UAAkB,SAA+B;AACpE,MAAI,OAAO,YAAY,SAAU,QAAO,IAAI,OAAO,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,KAAK,EAAE,CAAC,EAAE,KAAK,QAAQ;AAChH,MAAI,YAAY,IAAK,QAAO,aAAa;AACzC,QAAM,OAAO,QAAQ,SAAS,GAAG,IAAI,QAAQ,MAAM,GAAG,EAAE,IAAI;AAC5D,SAAO,aAAa,QAAQ,SAAS,WAAW,GAAG,IAAI,GAAG;AAC5D;AAGA,SAAS,WAAW,UAAkB,SAA0C;AAC9E,SAAO,CAAC,GAAG,+BAA+B,GAAG,OAAO,EAAE,KAAK,CAAC,YAAY,YAAY,UAAU,OAAO,CAAC;AACxG;AAqBO,SAAS,mBAAmB,EAAE,KAAK,UAAU,CAAC,GAAG,UAAU,KAAK,GAAiC;AACtG,QAAM,EAAE,UAAU,OAAO,IAAI,YAAY;AAGzC,QAAM,OAAO,CAAC,WAAW,WAAW,UAAU,OAAO;AACrD,YAAU,MAAM;AACd,QAAI,KAAM;AACV,gBAAY,KAAK,WAAW,MAAM;AAAA,EACpC,GAAG,CAAC,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClC;AAUO,SAAS,oBAAoB,KAAa,WAA0B,MAAqB;AAC9F,SAAO,aAAa,WAAW,GAAG,CAAC,KAAK;AAC1C;AAIO,SAAS,qBAAqB,KAAmB;AACtD,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACF,WAAO,aAAa,WAAW,GAAG;AAAA,EACpC,QAAQ;AAAA,EAER;AACF;AAyBO,SAAS,UAAU,EAAE,SAAS,YAAY,SAAS,KAAK,GAAmB;AAChF,MAAI,YAAY,OAAQ,QAAO,gCAAG,mBAAQ;AAC1C,QAAM,SAAS,aAAa,UAAU;AACtC,SAAO,oBAAC,YAAS,IAAI,UAAU,WAAW,MAAM,SAAS,MAAM,SAAO,MAAC;AACzE;AA+BO,SAAS,iBAAiB,EAAE,SAAS,YAAY,OAAO,UAAU,SAAS,GAA0B;AAC1G,QAAM,EAAE,OAAO,IAAI,YAAY;AAC/B,MAAI,YAAY,UAAW,YAAY,UAAU,WAAY;AAC3D,WAAO,aAAa,SAAY,oBAAC,UAAO,IAAK,gCAAG,UAAS;AAAA,EAC3D;AACA,QAAM,OAAO,aAAa,IAAI,gBAAgB,MAAM,EAAE,IAAI,UAAU,CAAC;AACrE,SAAO,oBAAC,YAAS,IAAI,QAAQ,UAAU,SAAO,MAAC;AACjD;","names":[]}
+{"version":3,"sources":["../../src/landing/routing.tsx"],"sourcesContent":["import { useEffect } from \"react\";\nimport type { ReactNode } from \"react\";\nimport { Navigate, Outlet, useLocation } from \"react-router\";\n\nimport { readStored, writeStored } from \"../lib/safe-storage\";\nimport type { LandingSession } from \"./landing-actions\";\nimport { LoadingState } from \"../components/loading-state\";\n\n/**\n * 0.31.1: a session that is still being restored — an app whose access token lives in\n * memory reads it back from its refresh token first (kastlan's 0.31 adoption). Until\n * then `/` neither shows the landing nor resumes, and a public page neither shows nor\n * redirects: both render `loading` instead.\n */\nexport type RoutingSession = LandingSession | \"loading\";\n\n/**\n * The public routes' logic (docs/landing-demo-harmonization.md §3): what `/` shows,\n * which pages a session skips, and the page a session resumes on — keksdose's\n * `RootEntry`, `RedirectIfAuthed` and use-last-visited-page.ts, for every app.\n * Router-aware (react-router), so they belong to the `./shell` entry.\n */\n\n/* ── ?next= ──────────────────────────────────────────────────────────────── */\n\n/** The query parameter that carries \"where I was actually trying to go\" through the\n *  sign-in bounce (keksdose's `NEXT_PARAM`). */\nexport const NEXT_PARAM = \"next\";\n\n/**\n * A `?next=` value that is safe to navigate to, or null.\n *\n * Same-origin PATHS only, decided by the URL PARSER rather than by string prefix —\n * this is the open-redirect check, and it is the reason this lives in one place\n * instead of at each call site.\n *\n * The prefix version (\"starts with `/`, does not start with `//`\") let two shapes\n * through that the browser resolves cross-origin, because the WHATWG parser does not\n * read them as text: a backslash after the leading slash counts as a second slash for\n * a special scheme, so `/\\evil.example` resolves to `https://evil.example/`; and tab,\n * LF and CR are STRIPPED anywhere in the input before parsing, so `/<TAB>/evil.example`\n * becomes `//evil.example`. Asking the same parser the browser will use closes every\n * such shape at once, including ones nobody has thought of yet, and it normalises what\n * comes back instead of echoing the caller's spelling.\n *\n * keksdose's (shared/hooks/use-last-visited-page.ts), verbatim but for the fallback\n * origin.\n */\nexport function safeNextPath(raw: string | null | undefined): string | null {\n  if (!raw) return null;\n  const base = typeof window !== \"undefined\" ? window.location.origin : \"https://kit.invalid\";\n  try {\n    const url = new URL(raw, base);\n    if (url.origin !== base) return null;\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return null;\n  }\n}\n\n/* ── The last visited page (§3.2) ────────────────────────────────────────── */\n\n/** A path to leave out: a string is the path and everything under it (`/demo` is\n *  `/demo` and `/demo/ended`; `/` is only `/`), a RegExp is tested on the pathname. */\nexport type PathPattern = string | RegExp;\n\n/**\n * The pages never recorded as a resume target (§3.2): the landing (`/`, `/welcome`), the\n * auth pages, the demo's own (`/demo*`) and the legal pages. The 404 has no path of its\n * own — call {@link useLastVisitedPage} inside the signed-in layout, as keksdose does,\n * and it never sees one. The app adds its own one-shot routes (keksdose:\n * `/banks/callback`, `/join`, `/share-target`) through `exclude`.\n */\nexport const DEFAULT_LAST_VISITED_EXCLUDES: readonly PathPattern[] = Object.freeze([\n  \"/\",\n  \"/welcome\",\n  \"/login\",\n  \"/register\",\n  \"/forgot-password\",\n  \"/reset-password\",\n  \"/verify-email\",\n  \"/demo\",\n  \"/impressum\",\n  \"/privacy\",\n  \"/terms\",\n]);\n\nfunction matchesPath(pathname: string, pattern: PathPattern): boolean {\n  if (typeof pattern !== \"string\") return new RegExp(pattern.source, pattern.flags.replace(\"g\", \"\")).test(pathname);\n  if (pattern === \"/\") return pathname === \"/\";\n  const base = pattern.endsWith(\"/\") ? pattern.slice(0, -1) : pattern;\n  return pathname === base || pathname.startsWith(`${base}/`);\n}\n\n/** Whether `pathname` is one of the defaults or the app's `exclude`. */\nfunction isExcluded(pathname: string, exclude: readonly PathPattern[]): boolean {\n  return [...DEFAULT_LAST_VISITED_EXCLUDES, ...exclude].some((pattern) => matchesPath(pathname, pattern));\n}\n\nexport interface LastVisitedPageOptions {\n  /** The device key: `<app>.lastVisitedPage` (§3.2), one per app on the origin. */\n  key: string;\n  /** The app's own paths to leave out, ON TOP of {@link DEFAULT_LAST_VISITED_EXCLUDES}. */\n  exclude?: readonly PathPattern[];\n  /** `false` records nothing — while the session is still being restored, say. */\n  enabled?: boolean;\n}\n\n/**\n * Remember the page a session is on (path and query), on every navigation, so `/` — a\n * revisit, a fresh sign-in, the installed PWA, whose `start_url` is `/` — resumes there\n * (§3.2, keksdose feedback #59). Device-local, in `localStorage` under `key`; a blocked\n * storage records nothing.\n *\n * Call it once in the signed-in layout. The excluded paths are never written, so a\n * one-shot page (a bank callback, an invitation link) never becomes the place the next\n * launch opens on.\n */\nexport function useLastVisitedPage({ key, exclude = [], enabled = true }: LastVisitedPageOptions): void {\n  const { pathname, search } = useLocation();\n  // Decided here, so the effect depends on the answer and not on an `exclude` array the\n  // caller likely builds inline.\n  const skip = !enabled || isExcluded(pathname, exclude);\n  useEffect(() => {\n    if (skip) return;\n    writeStored(key, pathname + search);\n  }, [key, pathname, search, skip]);\n}\n\n/**\n * The page {@link useLastVisitedPage} remembered under `key` — checked by\n * {@link safeNextPath}, so a value someone planted in storage cannot leave the origin —\n * or `fallback` (default `null`) when there is none or storage is blocked. A string\n * fallback narrows the answer to a string, for react-router's `to`.\n */\nexport function readLastVisitedPage(key: string, fallback: string): string;\nexport function readLastVisitedPage(key: string, fallback?: null): string | null;\nexport function readLastVisitedPage(key: string, fallback: string | null = null): string | null {\n  return safeNextPath(readStored(key)) ?? fallback;\n}\n\n/** Forget the remembered page — on an explicit sign-out, so the next account does not\n *  resume on the previous one's page. */\nexport function clearLastVisitedPage(key: string): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(key);\n  } catch {\n    // storage blocked: there is nothing to forget\n  }\n}\n\n/* ── RootEntry ───────────────────────────────────────────────────────────── */\n\nexport interface RootEntryProps {\n  /** Without a session `/` is the landing; with one (real or demo) it resumes;\n   *  `\"loading\"` while the app restores one. */\n  session: RoutingSession;\n  /** What shows while `session` is `\"loading\"`. Default: the kit's `LoadingState`. */\n  loading?: ReactNode;\n  /** The remembered page — `readLastVisitedPage(key)`. */\n  resumePath?: string | null;\n  /** The landing page element. */\n  landing: ReactNode;\n  /** The app's home: where a session goes with nothing to resume (keksdose `/budget`,\n   *  kastlan and Kurvenschmiede `/dashboard`). */\n  home: string;\n}\n\n/**\n * The `/` route (§3.1): the landing for a visitor, and for a session — real or demo —\n * the last visited page, else the app's home. Indexed and canonical `/` for the visitor;\n * a crawler never has a session, so for it `/` is stable.\n *\n * keksdose showed a session with nothing remembered the landing; the contract sends it\n * home instead, because a session at `/` came to use the app. The landing stays one tap\n * away at `/welcome`, where the signed-in brand link points.\n */\nexport function RootEntry({ session, resumePath, landing, home, loading }: RootEntryProps) {\n  if (session === \"loading\") return <>{loading ?? <LoadingState />}</>;\n  if (session === \"none\") return <>{landing}</>;\n  const resume = safeNextPath(resumePath);\n  return <Navigate to={resume && resume !== \"/\" ? resume : home} replace />;\n}\n\n/* ── RedirectIfAuthed ────────────────────────────────────────────────────── */\n\nexport interface RedirectIfAuthedProps {\n  /** `\"loading\"` while the app restores a session: neither the page nor a redirect. */\n  session: RoutingSession;\n  /** What shows while `session` is `\"loading\"`. Default: the kit's `LoadingState`. */\n  loading?: ReactNode;\n  /**\n   * Let a DEMO session through (§5.6): on `/login`, `/register` and the app's invitation\n   * pages, so a demo visitor can sign in or accept an invitation — a successful one\n   * replaces the demo session. Default `false`: on `/demo` a live demo continues instead\n   * of starting a second one (§5.2), and on `/forgot-password` a demo has no password.\n   */\n  allowDemo?: boolean;\n  /** Where a redirected session goes: the resume target —\n   *  `readLastVisitedPage(key, home)`. A safe `?next=` goes first. */\n  fallback: string;\n  /** The page. Left out, an `<Outlet />`: the component is a layout route around the\n   *  public pages, as in keksdose. */\n  children?: ReactNode;\n}\n\n/**\n * Public pages a session skips (§3.1): a signed-in visitor at `/login` goes back into\n * the app, to a safe `?next=` when the URL carries one (a share invitation or a push\n * deep link opened with a live session in another tab — keksdose) and else to\n * `fallback`.\n *\n * A demo session passes where `allowDemo` says so (§5.6). Mount one wrapper with\n * `allowDemo` around `/login`, `/register` and the invitation pages, and one without\n * around `/demo` (and `/forgot-password`).\n */\nexport function RedirectIfAuthed({ session, allowDemo = false, fallback, children, loading }: RedirectIfAuthedProps) {\n  const { search } = useLocation();\n  if (session === \"loading\") return <>{loading ?? <LoadingState />}</>;\n  if (session === \"none\" || (session === \"demo\" && allowDemo)) {\n    return children === undefined ? <Outlet /> : <>{children}</>;\n  }\n  const next = safeNextPath(new URLSearchParams(search).get(NEXT_PARAM));\n  return <Navigate to={next ?? fallback} replace />;\n}\n"],"mappings":";AAmLoC,mBAAc,WAAd;AAnLpC,SAAS,iBAAiB;AAE1B,SAAS,UAAU,QAAQ,mBAAmB;AAE9C,SAAS,YAAY,mBAAmB;AAExC,SAAS,oBAAoB;AAqBtB,MAAM,aAAa;AAqBnB,SAAS,aAAa,KAA+C;AAC1E,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,OAAO,OAAO,WAAW,cAAc,OAAO,SAAS,SAAS;AACtE,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK,IAAI;AAC7B,QAAI,IAAI,WAAW,KAAM,QAAO;AAChC,WAAO,GAAG,IAAI,QAAQ,GAAG,IAAI,MAAM,GAAG,IAAI,IAAI;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeO,MAAM,gCAAwD,OAAO,OAAO;AAAA,EACjF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,YAAY,UAAkB,SAA+B;AACpE,MAAI,OAAO,YAAY,SAAU,QAAO,IAAI,OAAO,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,KAAK,EAAE,CAAC,EAAE,KAAK,QAAQ;AAChH,MAAI,YAAY,IAAK,QAAO,aAAa;AACzC,QAAM,OAAO,QAAQ,SAAS,GAAG,IAAI,QAAQ,MAAM,GAAG,EAAE,IAAI;AAC5D,SAAO,aAAa,QAAQ,SAAS,WAAW,GAAG,IAAI,GAAG;AAC5D;AAGA,SAAS,WAAW,UAAkB,SAA0C;AAC9E,SAAO,CAAC,GAAG,+BAA+B,GAAG,OAAO,EAAE,KAAK,CAAC,YAAY,YAAY,UAAU,OAAO,CAAC;AACxG;AAqBO,SAAS,mBAAmB,EAAE,KAAK,UAAU,CAAC,GAAG,UAAU,KAAK,GAAiC;AACtG,QAAM,EAAE,UAAU,OAAO,IAAI,YAAY;AAGzC,QAAM,OAAO,CAAC,WAAW,WAAW,UAAU,OAAO;AACrD,YAAU,MAAM;AACd,QAAI,KAAM;AACV,gBAAY,KAAK,WAAW,MAAM;AAAA,EACpC,GAAG,CAAC,KAAK,UAAU,QAAQ,IAAI,CAAC;AAClC;AAUO,SAAS,oBAAoB,KAAa,WAA0B,MAAqB;AAC9F,SAAO,aAAa,WAAW,GAAG,CAAC,KAAK;AAC1C;AAIO,SAAS,qBAAqB,KAAmB;AACtD,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACF,WAAO,aAAa,WAAW,GAAG;AAAA,EACpC,QAAQ;AAAA,EAER;AACF;AA4BO,SAAS,UAAU,EAAE,SAAS,YAAY,SAAS,MAAM,QAAQ,GAAmB;AACzF,MAAI,YAAY,UAAW,QAAO,gCAAG,qBAAW,oBAAC,gBAAa,GAAG;AACjE,MAAI,YAAY,OAAQ,QAAO,gCAAG,mBAAQ;AAC1C,QAAM,SAAS,aAAa,UAAU;AACtC,SAAO,oBAAC,YAAS,IAAI,UAAU,WAAW,MAAM,SAAS,MAAM,SAAO,MAAC;AACzE;AAkCO,SAAS,iBAAiB,EAAE,SAAS,YAAY,OAAO,UAAU,UAAU,QAAQ,GAA0B;AACnH,QAAM,EAAE,OAAO,IAAI,YAAY;AAC/B,MAAI,YAAY,UAAW,QAAO,gCAAG,qBAAW,oBAAC,gBAAa,GAAG;AACjE,MAAI,YAAY,UAAW,YAAY,UAAU,WAAY;AAC3D,WAAO,aAAa,SAAY,oBAAC,UAAO,IAAK,gCAAG,UAAS;AAAA,EAC3D;AACA,QAAM,OAAO,aAAa,IAAI,gBAAgB,MAAM,EAAE,IAAI,UAAU,CAAC;AACrE,SAAO,oBAAC,YAAS,IAAI,QAAQ,UAAU,SAAO,MAAC;AACjD;","names":[]}

package/dist/lib/cn.js

@@ -1,7 +1,8 @@
 "use client";
 import { clsx } from "clsx";
-import { twMerge } from "tailwind-merge";
-const cn = (...inputs) => twMerge(clsx(inputs));
+import { extendTailwindMerge } from "tailwind-merge";
+const merge = extendTailwindMerge({ extend: { theme: { text: ["micro", "caption"] } } });
+const cn = (...inputs) => merge(clsx(inputs));
 export {
   cn
 };

package/dist/lib/cn.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/lib/cn.ts"],"sourcesContent":["import { clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/** Merge class lists with Tailwind conflict resolution (later wins). */\nexport const cn = (...inputs: Parameters<typeof clsx>) => twMerge(clsx(inputs));\n"],"mappings":";AAAA,SAAS,YAAY;AACrB,SAAS,eAAe;AAGjB,MAAM,KAAK,IAAI,WAAoC,QAAQ,KAAK,MAAM,CAAC;","names":[]}
+{"version":3,"sources":["../../src/lib/cn.ts"],"sourcesContent":["import { clsx } from \"clsx\";\nimport { extendTailwindMerge } from \"tailwind-merge\";\n\n/**\n * tailwind-merge, told about the kit's own font sizes (docs/text-size-harmonization.md\n * §3.2): `text-micro` and `text-caption` are `@theme` sizes in tokens.css, which\n * tailwind-merge cannot see. Unknown, a `text-<word>` is taken for a COLOUR, so\n * `cn(\"text-caption text-[var(--text-muted)]\")` dropped the size — the later colour\n * \"won\" over it — and `cn(\"text-xs\", \"text-caption\")` kept both sizes. Registered as\n * sizes, they merge like `text-xs`: a later size replaces an earlier one, a colour sits\n * beside them.\n */\nconst merge = extendTailwindMerge({ extend: { theme: { text: [\"micro\", \"caption\"] } } });\n\n/** Merge class lists with Tailwind conflict resolution (later wins). */\nexport const cn = (...inputs: Parameters<typeof clsx>) => merge(clsx(inputs));\n"],"mappings":";AAAA,SAAS,YAAY;AACrB,SAAS,2BAA2B;AAWpC,MAAM,QAAQ,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,SAAS,EAAE,EAAE,EAAE,CAAC;AAGhF,MAAM,KAAK,IAAI,WAAoC,MAAM,KAAK,MAAM,CAAC;","names":[]}

package/dist/rhf/fields.d.ts

@@ -1,7 +1,7 @@
 import * as react from 'react';
 import { ReactNode, ReactElement } from 'react';
 import { FieldValues, FieldPath, ControllerProps, ControllerRenderProps, ControllerFieldState } from 'react-hook-form';
-import { dt as IbanInputProps, eg as PhoneInputProps, eD as SelectProps, dD as InputProps, eY as TextareaProps } from '../delete-account-setting-DCFS5Vof.js';
+import { dE as IbanInputProps, es as PhoneInputProps, eY as SelectProps, dO as InputProps, fj as TextareaProps } from '../delete-account-setting-BvdQdbv3.js';
 import { NumberFieldProps } from '../components/number-field.js';
 import { DatePickerProps, DateRangePickerProps } from '../components/date-picker.js';
 import { TimeInputProps } from '../components/time-input.js';
@@ -15,14 +15,16 @@ import { ComboClearValue } from '../components/combobox-core.js';
 import '../components/tooltip.js';
 import '../hooks/use-anchored-rect.js';
 import '../lib/clipping.js';
-import '../data-table-labels-DUELeXpa.js';
+import '../data-table-labels-kpAAVi6g.js';
 import '../components/data-table-sort.js';
 import '../components/swipeable-row.js';
 import '../components/mini-calendar.js';
 import '../components/calendar-heatmap.js';
 import '../components/popover.js';
+import '../hooks/use-breakpoint.js';
 import '../components/chip.js';
 import 'lucide-react';
+import '../components/field-parts.js';
 import '../components/field-sync.js';
 import '../wizard/types.js';
 import '../tour/tour.js';
@@ -90,6 +92,9 @@ import '../admin/admin-parts.js';
 import '../admin/admin-action-log.js';
 import '../settings/settings-labels.js';
 import '../demo/demo-labels.js';
+import '../components/appearance-labels.js';
+import '../theme/contrast.js';
+import '../theme/text-size.js';
 import '../components/reauth-dialog.js';
 import '../components/server-wake.js';
 import '../lib/server-wake.js';
@@ -102,7 +107,7 @@ import '../components/sign-chip.js';
 import '../components/column-mapper.js';
 import '../lib/column-mapping.js';
 import '../lib/table-text.js';
-import '../components/field-parts.js';
+import '../components/focus-ring.js';
 import '../components/number-input.js';
 import '../components/calculator.js';
 import '../components/numpad-sheet.js';

package/dist/rhf/fields.js

@@ -519,7 +519,7 @@ function RangeBody({
         {
           id: messageIds[i],
           "data-slot": "form-message",
-          className: "text-[11px] leading-tight text-[var(--danger)]",
+          className: "text-caption leading-tight text-[var(--danger)]",
           children: message
         },
         message