@eifi1/ui-kit 0.33.1 → 0.34.0

package/dist/account/account-parts.d.ts

@@ -5,17 +5,15 @@
  * reads the code: axios' `response.data`, ofetch's `data`, a generated client's `body`,
  * a body thrown as it came. `undefined` when there is no such list.
  */
-declare function refusalCompanies(err: unknown): string[] | undefined;
+export declare function refusalCompanies(err: unknown): string[] | undefined;
 /** Whether the component is still mounted — a late answer after the app navigated away
  *  (the deletion signs out) must not set state. */
-declare function useMounted(): {
+export declare function useMounted(): {
     readonly current: boolean;
 };
 /** Call `call` and hand back a promise, a throw included — a callback may return
  *  nothing (done at once), a promise, or throw before it returns one. */
-declare function settle(call: () => unknown): Promise<unknown>;
-/** The settings cards' type scale, PasskeysSetting's: a small title and a muted line. */
-declare const CARD_TITLE_CLASS = "text-sm font-medium";
-declare const CARD_DESCRIPTION_CLASS = "text-xs text-[var(--text-muted)]";
-
-export { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS, refusalCompanies, settle, useMounted };
+export declare function settle(call: () => unknown): Promise<unknown>;
+/** The settings cards' type scale, PasskeysSetting's: a small title and a muted line.
+ *  Defined with the card look in settings/ since 0.34 (MOD-8, refactor audit 2026-10). */
+export { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS } from "../settings/settings-card-classes.js";

package/dist/account/account-parts.js

@@ -28,8 +28,7 @@ function settle(call) {
     return Promise.reject(error);
   }
 }
-const CARD_TITLE_CLASS = "text-sm font-medium";
-const CARD_DESCRIPTION_CLASS = "text-xs text-[var(--text-muted)]";
+import { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS } from "../settings/settings-card-classes.js";
 export {
   CARD_DESCRIPTION_CLASS,
   CARD_TITLE_CLASS,

package/dist/account/account-parts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/account-parts.ts"],"sourcesContent":["import { useEffect, useRef } from \"react\";\n\n/**\n * What the account's own settings parts share (docs/user-admin-harmonization.md §6):\n * the companies a refusal names, a mounted guard, and the card's type.\n *\n * @internal Not part of the barrel; the parts are.\n */\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** `companies` on a parsed body, or under FastAPI's nested `detail`: a list of names. */\nfunction companiesOfBody(body: unknown): string[] | undefined {\n  if (!isBag(body)) return undefined;\n  const pick = (value: unknown) =>\n    Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === \"string\")\n      ? (value as string[])\n      : undefined;\n  return pick(body.companies) ?? (isBag(body.detail) ? pick(body.detail.companies) : undefined);\n}\n\n/**\n * The companies a `last_admin` refusal names — kastlan checks the last admin per company\n * and answers `409 {detail, code: \"last_admin\", companies: [\"Example AG\"]}` (§6.4,\n * server-kit's `AccountError(…, extra={\"companies\": …})`). Read where `authErrorCode`\n * reads the code: axios' `response.data`, ofetch's `data`, a generated client's `body`,\n * a body thrown as it came. `undefined` when there is no such list.\n */\nexport function refusalCompanies(err: unknown): string[] | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? companiesOfBody(response.data) : undefined) ??\n    companiesOfBody(err.data) ??\n    companiesOfBody(err.body) ??\n    companiesOfBody(err)\n  );\n}\n\n/** Whether the component is still mounted — a late answer after the app navigated away\n *  (the deletion signs out) must not set state. */\nexport function useMounted(): { readonly current: boolean } {\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n  return mounted;\n}\n\n/** Call `call` and hand back a promise, a throw included — a callback may return\n *  nothing (done at once), a promise, or throw before it returns one. */\nexport function settle(call: () => unknown): Promise<unknown> {\n  try {\n    return Promise.resolve(call());\n  } catch (error) {\n    return Promise.reject(error);\n  }\n}\n\n/** The settings cards' type scale, PasskeysSetting's: a small title and a muted line. */\nexport const CARD_TITLE_CLASS = \"text-sm font-medium\";\nexport const CARD_DESCRIPTION_CLASS = \"text-xs text-[var(--text-muted)]\";\n"],"mappings":";AAAA,SAAS,WAAW,cAAc;AAWlC,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,gBAAgB,MAAqC;AAC5D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,QAAM,OAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,IACrF,QACD;AACN,SAAO,KAAK,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,SAAS,IAAI;AACrF;AASO,SAAS,iBAAiB,KAAoC;AACnE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,gBAAgB,SAAS,IAAI,IAAI,WACpD,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,GAAG;AAEvB;AAIO,SAAS,aAA4C;AAC1D,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AACL,SAAO;AACT;AAIO,SAAS,OAAO,MAAuC;AAC5D,MAAI;AACF,WAAO,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,QAAQ,OAAO,KAAK;AAAA,EAC7B;AACF;AAGO,MAAM,mBAAmB;AACzB,MAAM,yBAAyB;","names":[]}
+{"version":3,"sources":["../../src/account/account-parts.ts"],"sourcesContent":["import { useEffect, useRef } from \"react\";\n\n/**\n * What the account's own settings parts share (docs/user-admin-harmonization.md §6):\n * the companies a refusal names, a mounted guard, and the card's type.\n *\n * @internal Not part of the barrel; the parts are.\n */\n\ntype Bag = Record<string, unknown>;\n\nconst isBag = (value: unknown): value is Bag => typeof value === \"object\" && value !== null;\n\n/** `companies` on a parsed body, or under FastAPI's nested `detail`: a list of names. */\nfunction companiesOfBody(body: unknown): string[] | undefined {\n  if (!isBag(body)) return undefined;\n  const pick = (value: unknown) =>\n    Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === \"string\")\n      ? (value as string[])\n      : undefined;\n  return pick(body.companies) ?? (isBag(body.detail) ? pick(body.detail.companies) : undefined);\n}\n\n/**\n * The companies a `last_admin` refusal names — kastlan checks the last admin per company\n * and answers `409 {detail, code: \"last_admin\", companies: [\"Example AG\"]}` (§6.4,\n * server-kit's `AccountError(…, extra={\"companies\": …})`). Read where `authErrorCode`\n * reads the code: axios' `response.data`, ofetch's `data`, a generated client's `body`,\n * a body thrown as it came. `undefined` when there is no such list.\n */\nexport function refusalCompanies(err: unknown): string[] | undefined {\n  if (!isBag(err)) return undefined;\n  const response = err.response;\n  return (\n    (isBag(response) ? companiesOfBody(response.data) : undefined) ??\n    companiesOfBody(err.data) ??\n    companiesOfBody(err.body) ??\n    companiesOfBody(err)\n  );\n}\n\n/** Whether the component is still mounted — a late answer after the app navigated away\n *  (the deletion signs out) must not set state. */\nexport function useMounted(): { readonly current: boolean } {\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n  return mounted;\n}\n\n/** Call `call` and hand back a promise, a throw included — a callback may return\n *  nothing (done at once), a promise, or throw before it returns one. */\nexport function settle(call: () => unknown): Promise<unknown> {\n  try {\n    return Promise.resolve(call());\n  } catch (error) {\n    return Promise.reject(error);\n  }\n}\n\n/** The settings cards' type scale, PasskeysSetting's: a small title and a muted line.\n *  Defined with the card look in settings/ since 0.34 (MOD-8, refactor audit 2026-10). */\nexport { CARD_DESCRIPTION_CLASS, CARD_TITLE_CLASS } from \"../settings/settings-card-classes\";\n"],"mappings":";AAAA,SAAS,WAAW,cAAc;AAWlC,MAAM,QAAQ,CAAC,UAAiC,OAAO,UAAU,YAAY,UAAU;AAGvF,SAAS,gBAAgB,MAAqC;AAC5D,MAAI,CAAC,MAAM,IAAI,EAAG,QAAO;AACzB,QAAM,OAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,IACrF,QACD;AACN,SAAO,KAAK,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,SAAS,IAAI;AACrF;AASO,SAAS,iBAAiB,KAAoC;AACnE,MAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AACxB,QAAM,WAAW,IAAI;AACrB,UACG,MAAM,QAAQ,IAAI,gBAAgB,SAAS,IAAI,IAAI,WACpD,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,IAAI,IAAI,KACxB,gBAAgB,GAAG;AAEvB;AAIO,SAAS,aAA4C;AAC1D,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AACL,SAAO;AACT;AAIO,SAAS,OAAO,MAAuC;AAC5D,MAAI;AACF,WAAO,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,QAAQ,OAAO,KAAK;AAAA,EAC7B;AACF;AAIA,SAAS,wBAAwB,wBAAwB;","names":[]}

package/dist/{components → account}/account-settings-labels.d.ts

@@ -11,7 +11,7 @@
  * Its own module, beside the components rather than in them, so `PasskeysSetting`
  * (its own file) and the older three read one tree without importing each other.
  */
-interface ProfileSettingLabels {
+export interface ProfileSettingLabels {
     title: string;
     email: string;
     role: string;
@@ -30,7 +30,7 @@ interface ProfileSettingLabels {
     /** Why Save is held while a name is blank: both are required (§3.1). */
     nameRequired?: string;
 }
-interface PasswordSettingLabels {
+export interface PasswordSettingLabels {
     title: string;
     current: string;
     next: string;
@@ -38,8 +38,16 @@ interface PasswordSettingLabels {
     submit: string;
     tooShort: string;
     mismatch: string;
+    /**
+     * 0.34 (KS U3): `password_incorrect` — server-kit's `400` for a wrong current
+     * password — under the current-password field, in the words `EmailChangeSetting`
+     * and `DeleteAccountSetting` say it with. OPTIONAL, like
+     * `TwoFactorSettingLabels.qrAlt` and for its reason — this interface is annotated at
+     * call sites — and filled from the provider's `accountSettings.password`, then English.
+     */
+    wrongPassword?: string;
 }
-interface TwoFactorSettingLabels {
+export interface TwoFactorSettingLabels {
     /**
      * Before 0.31 the card's one line, "<status>: On". Since 0.31 the setting's name is the
      * card's {@link title} and the state stands beside it, so this is read only where no
@@ -77,7 +85,7 @@ interface TwoFactorSettingLabels {
      */
     title?: string;
 }
-interface PasskeysSettingLabels {
+export interface PasskeysSettingLabels {
     title: string;
     /** The line under the title saying what a passkey is for — `mode="instead"` (the
      *  default): the passkey stands in for the password. */
@@ -118,19 +126,17 @@ interface PasskeysSettingLabels {
     lastUsed: (date: string) => string;
     neverUsed: string;
 }
-interface AccountSettingsLabels {
+export interface AccountSettingsLabels {
     profile: Required<ProfileSettingLabels>;
-    password: PasswordSettingLabels;
+    password: Required<PasswordSettingLabels>;
     twoFactor: Required<TwoFactorSettingLabels>;
     passkeys: Required<PasskeysSettingLabels>;
 }
-declare const DEFAULT_ACCOUNT_SETTINGS_LABELS: AccountSettingsLabels;
+export declare const DEFAULT_ACCOUNT_SETTINGS_LABELS: AccountSettingsLabels;
 /**
  * One section of the namespace, resolved: English, then the provider's
  * `accountSettings.<section>`, then the component's own `labels` prop. An `undefined`
  * in either source is skipped, so a prop object built from optional values cannot
  * blank out a default.
  */
-declare function useAccountSettingsLabels<K extends keyof AccountSettingsLabels>(section: K, prop?: Partial<AccountSettingsLabels[K]>): AccountSettingsLabels[K];
-
-export { type AccountSettingsLabels, DEFAULT_ACCOUNT_SETTINGS_LABELS, type PasskeysSettingLabels, type PasswordSettingLabels, type ProfileSettingLabels, type TwoFactorSettingLabels, useAccountSettingsLabels };
+export declare function useAccountSettingsLabels<K extends keyof AccountSettingsLabels>(section: K, prop?: Partial<AccountSettingsLabels[K]>): AccountSettingsLabels[K];

package/dist/{components → account}/account-settings-labels.js

@@ -20,7 +20,9 @@ const DEFAULT_ACCOUNT_SETTINGS_LABELS = {
     confirm: "Confirm new password",
     submit: "Change password",
     tooShort: "The new password is too short.",
-    mismatch: "The passwords don\u2019t match."
+    mismatch: "The passwords don\u2019t match.",
+    // The siblings' sentence (emailChange, deleteAccount), under the current password.
+    wrongPassword: "The password is incorrect."
   },
   twoFactor: {
     status: "Two-factor authentication",

package/dist/account/account-settings-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/account/account-settings-labels.ts"],"sourcesContent":["import { useMemo } from \"react\";\nimport { useKitLabelOverrides } from \"../i18n/kit-labels\";\n\n/**\n * The `accountSettings` namespace of `<UiKitProvider labels>`: one record per section —\n * `profile`, `password`, `twoFactor`, `passkeys` — each merged key by key, so an app\n * can translate `accountSettings.twoFactor.scanHint` alone.\n *\n * Before 0.12.0 every section took a REQUIRED `labels` prop and had no English of its\n * own, so each app spelled out 30-odd keys at the call site and still hard-coded some\n * (kastlan's profile page passed `email: \"Email\"` in English to a German page). The\n * prop stays, now partial, and wins over the provider as everywhere else in the kit.\n *\n * Its own module, beside the components rather than in them, so `PasskeysSetting`\n * (its own file) and the older three read one tree without importing each other.\n */\n\nexport interface ProfileSettingLabels {\n  title: string;\n  email: string;\n  role: string;\n  memberSince: string;\n  /** The single name field — the card without `firstName` / `lastName`. */\n  displayName: string;\n  save: string;\n  /**\n   * 0.30.0 (docs/user-admin-harmonization.md §6.1): the two fields that replace\n   * `displayName` once the card is given `firstName` / `lastName`. OPTIONAL, like\n   * `TwoFactorSettingLabels.qrAlt` and for its reason — this interface is annotated at\n   * call sites — and filled from the provider's `accountSettings.profile`, then English.\n   */\n  firstName?: string;\n  lastName?: string;\n  /** Why Save is held while a name is blank: both are required (§3.1). */\n  nameRequired?: string;\n}\n\nexport interface PasswordSettingLabels {\n  title: string;\n  current: string;\n  next: string;\n  confirm: string;\n  submit: string;\n  tooShort: string;\n  mismatch: string;\n  /**\n   * 0.34 (KS U3): `password_incorrect` — server-kit's `400` for a wrong current\n   * password — under the current-password field, in the words `EmailChangeSetting`\n   * and `DeleteAccountSetting` say it with. OPTIONAL, like\n   * `TwoFactorSettingLabels.qrAlt` and for its reason — this interface is annotated at\n   * call sites — and filled from the provider's `accountSettings.password`, then English.\n   */\n  wrongPassword?: string;\n}\n\nexport interface TwoFactorSettingLabels {\n  /**\n   * Before 0.31 the card's one line, \"<status>: On\". Since 0.31 the setting's name is the\n   * card's {@link title} and the state stands beside it, so this is read only where no\n   * `title` is given at the same level — an app that translated `status` keeps its word\n   * as the title.\n   */\n  status: string;\n  enabledText: string;\n  disabledText: string;\n  enable: string;\n  scanHint: string;\n  codeLabel: string;\n  verify: string;\n  disableSection: string;\n  password: string;\n  disable: string;\n  /**\n   * Alt text for the setup QR code, which shipped as a hardcoded `alt=\"QR\"`.\n   *\n   * OPTIONAL, like the two keys below, and not because it matters less: this interface\n   * is annotated at consumer call sites (`const LABELS: TwoFactorSettingLabels = {…}`),\n   * so a new REQUIRED key is a compile error in every app on the next `npm update` —\n   * the additive-API rule in the README. Each falls back to the provider's\n   * `accountSettings.twoFactor`, then English.\n   */\n  qrAlt?: string;\n  /** The line over the manual-entry key, for a phone that cannot scan its own screen. */\n  secretHint?: string;\n  /** The copy button beside that key. */\n  copySecret?: string;\n  /**\n   * 0.31.0 (docs/settings-harmonization.md §3.7): the card's title, a heading inside a\n   * `SettingsLayout`. OPTIONAL for the reason `qrAlt` is. Unset, the same source's\n   * `status` stands in for it, then English.\n   */\n  title?: string;\n}\n\nexport interface PasskeysSettingLabels {\n  title: string;\n  /** The line under the title saying what a passkey is for — `mode=\"instead\"` (the\n   *  default): the passkey stands in for the password. */\n  description: string;\n  /**\n   * The same line for `mode=\"alongside\"` (0.18.0): the password keeps working and the\n   * passkey is a second way in. OPTIONAL for the reason `TwoFactorSettingLabels.qrAlt`\n   * is — this interface is annotated at call sites — and filled from the provider's\n   * `accountSettings.passkeys`, then English.\n   */\n  descriptionAlongside?: string;\n  empty: string;\n  loading: string;\n  /** Accessible name of the list. */\n  list: string;\n  nameLabel: string;\n  namePlaceholder: string;\n  add: string;\n  /** The add button while the app's WebAuthn ceremony runs — the OS prompt is open. */\n  adding: string;\n  rename: string;\n  /** The row's rename button, named for its passkey — it starts with `rename`, the\n   *  visible text, so voice control finds it by what it says. */\n  renameItem: (name: string) => string;\n  /** Accessible name of the inline rename field. */\n  renameField: (name: string) => string;\n  save: string;\n  cancel: string;\n  delete: string;\n  /** The row's delete button, named for its passkey (see `renameItem`). */\n  deleteItem: (name: string) => string;\n  /** The inline question a delete asks first. */\n  deleteConfirm: (name: string) => string;\n  /** The destructive button that answers it. */\n  confirmDelete: string;\n  /** `date` arrives formatted in the provider's locale. */\n  created: (date: string) => string;\n  lastUsed: (date: string) => string;\n  neverUsed: string;\n}\n\nexport interface AccountSettingsLabels {\n  profile: Required<ProfileSettingLabels>;\n  password: Required<PasswordSettingLabels>;\n  // `Required` here, optional on the section interfaces: the namespace is what a full\n  // catalogue (`@eifi1/ui-kit/i18n/<code>`, `missingKitLabels`) is written against, so\n  // it must name the late keys; the section interfaces are annotated at call sites.\n  twoFactor: Required<TwoFactorSettingLabels>;\n  passkeys: Required<PasskeysSettingLabels>;\n}\n\nexport const DEFAULT_ACCOUNT_SETTINGS_LABELS: AccountSettingsLabels = {\n  profile: {\n    title: \"Profile\",\n    email: \"Email\",\n    role: \"Role\",\n    memberSince: \"Member since\",\n    displayName: \"Display name\",\n    save: \"Save\",\n    firstName: \"First name\",\n    lastName: \"Last name\",\n    nameRequired: \"Enter both a first and a last name.\",\n  },\n  password: {\n    title: \"Change password\",\n    current: \"Current password\",\n    next: \"New password\",\n    confirm: \"Confirm new password\",\n    submit: \"Change password\",\n    tooShort: \"The new password is too short.\",\n    mismatch: \"The passwords don’t match.\",\n    // The siblings' sentence (emailChange, deleteAccount), under the current password.\n    wrongPassword: \"The password is incorrect.\",\n  },\n  twoFactor: {\n    status: \"Two-factor authentication\",\n    enabledText: \"On\",\n    disabledText: \"Off\",\n    enable: \"Set up two-factor authentication\",\n    scanHint: \"Scan this code with your authenticator app, then enter the code it shows.\",\n    codeLabel: \"Verification code\",\n    verify: \"Verify and turn on\",\n    disableSection: \"Turn off two-factor authentication\",\n    password: \"Current password\",\n    disable: \"Turn off\",\n    // Unchanged from the fallback it had before the namespace (i18n-labels.test pins it).\n    qrAlt: \"QR code\",\n    secretHint: \"Can’t scan it? Enter this key in the app instead:\",\n    copySecret: \"Copy key\",\n    title: \"Two-factor authentication\",\n  },\n  passkeys: {\n    title: \"Passkeys\",\n    description: \"Sign in with your fingerprint, face or device PIN instead of a password.\",\n    // Kurvenschmiede overrode `description` because \"instead of\" is false where the\n    // password stays; this is the sentence for those apps, picked by `mode`.\n    descriptionAlongside: \"Sign in with your fingerprint, face or device PIN. Your password keeps working too.\",\n    empty: \"No passkeys yet\",\n    loading: \"Loading passkeys…\",\n    list: \"Your passkeys\",\n    nameLabel: \"Name (optional)\",\n    namePlaceholder: \"e.g. Laptop, Phone\",\n    add: \"Add passkey\",\n    adding: \"Waiting for your device…\",\n    rename: \"Rename\",\n    renameItem: (name) => `Rename ${name}`,\n    renameField: (name) => `New name for ${name}`,\n    save: \"Save\",\n    cancel: \"Cancel\",\n    delete: \"Delete\",\n    deleteItem: (name) => `Delete ${name}`,\n    deleteConfirm: (name) => `Delete “${name}”? It can no longer be used to sign in.`,\n    confirmDelete: \"Delete passkey\",\n    created: (date) => `Added ${date}`,\n    lastUsed: (date) => `Last used ${date}`,\n    neverUsed: \"Never used\",\n  },\n};\n\n/**\n * One section of the namespace, resolved: English, then the provider's\n * `accountSettings.<section>`, then the component's own `labels` prop. An `undefined`\n * in either source is skipped, so a prop object built from optional values cannot\n * blank out a default.\n */\nexport function useAccountSettingsLabels<K extends keyof AccountSettingsLabels>(\n  section: K,\n  prop?: Partial<AccountSettingsLabels[K]>,\n): AccountSettingsLabels[K] {\n  const fromProvider = useKitLabelOverrides(\"accountSettings\")?.[section] as\n    | Partial<AccountSettingsLabels[K]>\n    | undefined;\n  return useMemo(\n    () => ({\n      ...DEFAULT_ACCOUNT_SETTINGS_LABELS[section],\n      ...definedOnly(fromProvider),\n      ...definedOnly(prop),\n    }),\n    [section, fromProvider, prop],\n  );\n}\n\nfunction definedOnly<T extends object>(value: T | undefined): Partial<T> {\n  if (!value) return {};\n  return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== undefined)) as Partial<T>;\n}\n"],"mappings":";AAAA,SAAS,eAAe;AACxB,SAAS,4BAA4B;AAiJ9B,MAAM,kCAAyD;AAAA,EACpE,SAAS;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,IACP,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,IACb,MAAM;AAAA,IACN,WAAW;AAAA,IACX,UAAU;AAAA,IACV,cAAc;AAAA,EAChB;AAAA,EACA,UAAU;AAAA,IACR,OAAO;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,UAAU;AAAA;AAAA,IAEV,eAAe;AAAA,EACjB;AAAA,EACA,WAAW;AAAA,IACT,QAAQ;AAAA,IACR,aAAa;AAAA,IACb,cAAc;AAAA,IACd,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,UAAU;AAAA,IACV,SAAS;AAAA;AAAA,IAET,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,OAAO;AAAA,EACT;AAAA,EACA,UAAU;AAAA,IACR,OAAO;AAAA,IACP,aAAa;AAAA;AAAA;AAAA,IAGb,sBAAsB;AAAA,IACtB,OAAO;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,IACN,WAAW;AAAA,IACX,iBAAiB;AAAA,IACjB,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,YAAY,CAAC,SAAS,UAAU,IAAI;AAAA,IACpC,aAAa,CAAC,SAAS,gBAAgB,IAAI;AAAA,IAC3C,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,YAAY,CAAC,SAAS,UAAU,IAAI;AAAA,IACpC,eAAe,CAAC,SAAS,gBAAW,IAAI;AAAA,IACxC,eAAe;AAAA,IACf,SAAS,CAAC,SAAS,SAAS,IAAI;AAAA,IAChC,UAAU,CAAC,SAAS,aAAa,IAAI;AAAA,IACrC,WAAW;AAAA,EACb;AACF;AAQO,SAAS,yBACd,SACA,MAC0B;AAC1B,QAAM,eAAe,qBAAqB,iBAAiB,IAAI,OAAO;AAGtE,SAAO;AAAA,IACL,OAAO;AAAA,MACL,GAAG,gCAAgC,OAAO;AAAA,MAC1C,GAAG,YAAY,YAAY;AAAA,MAC3B,GAAG,YAAY,IAAI;AAAA,IACrB;AAAA,IACA,CAAC,SAAS,cAAc,IAAI;AAAA,EAC9B;AACF;AAEA,SAAS,YAA8B,OAAkC;AACvE,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,OAAO,YAAY,OAAO,QAAQ,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,CAAC;AACpF;","names":[]}

package/dist/{components → account}/account-settings.d.ts

@@ -1,9 +1,9 @@
-import * as react from 'react';
-import { ReactNode } from 'react';
-import { PasswordStrengthMeterProps } from './password-strength.js';
-import { PasswordSettingLabels, ProfileSettingLabels, TwoFactorSettingLabels } from './account-settings-labels.js';
-export { AccountSettingsLabels, DEFAULT_ACCOUNT_SETTINGS_LABELS, PasskeysSettingLabels } from './account-settings-labels.js';
-
+import type { ReactNode } from "react";
+import type { PasswordStrengthMeterProps } from "../components/password-strength.js";
+import { type LabelOverride } from "../i18n/kit-labels.js";
+import type { PasswordSettingLabels, ProfileSettingLabels, TwoFactorSettingLabels } from "./account-settings-labels.js";
+export type { AccountSettingsLabels, PasskeysSettingLabels, PasswordSettingLabels, ProfileSettingLabels, TwoFactorSettingLabels, } from "./account-settings-labels.js";
+export { DEFAULT_ACCOUNT_SETTINGS_LABELS } from "./account-settings-labels.js";
 /**
  * App-agnostic account-settings SECTIONS (feedback #333). The presentation lives
  * in @hb/ui; each app injects its own auth-API handlers + translated labels and
@@ -16,7 +16,7 @@ export { AccountSettingsLabels, DEFAULT_ACCOUNT_SETTINGS_LABELS, PasskeysSetting
 /** What {@link ProfileSetting} hands `onSave` in its two-field form (0.30.0): both
  *  trimmed, 1–120 characters each — the `PATCH /auth/me` body's `first_name` /
  *  `last_name` (docs/user-admin-harmonization.md §6.1). */
-interface ProfileNameValues {
+export interface ProfileNameValues {
     firstName: string;
     lastName: string;
 }
@@ -28,7 +28,7 @@ interface ProfileSettingCommonProps {
     memberSince?: ReactNode;
     saving?: boolean;
     /** Prop > `<UiKitProvider labels={{ accountSettings: { profile } }}>` > English. */
-    labels?: Partial<ProfileSettingLabels>;
+    labels?: LabelOverride<ProfileSettingLabels>;
     /** The card's DOM id — a settings catalogue `anchor`, so `?focus=` can ring it (0.31). */
     id?: string;
 }
@@ -37,7 +37,7 @@ interface ProfileSettingCommonProps {
  * saved by `onSave()`. Kept unchanged for an app that has not moved to first and last
  * name yet.
  */
-interface ProfileSettingDisplayNameProps extends ProfileSettingCommonProps {
+export interface ProfileSettingDisplayNameProps extends ProfileSettingCommonProps {
     value: string;
     onChange: (value: string) => void;
     onSave: () => void;
@@ -48,7 +48,7 @@ interface ProfileSettingDisplayNameProps extends ProfileSettingCommonProps {
  * First and last name (0.30.0, docs/user-admin-harmonization.md §6.1): the saved
  * values in, the edited ones out through `onSave`. The card keeps the drafts itself.
  */
-interface ProfileSettingNamesProps extends ProfileSettingCommonProps {
+export interface ProfileSettingNamesProps extends ProfileSettingCommonProps {
     /** The saved given name — `first_name`. `null` reads as empty. */
     firstName: string | null;
     /** The saved family name — `last_name`. `null` (a migrated account, §3.3) reads as
@@ -65,7 +65,7 @@ interface ProfileSettingNamesProps extends ProfileSettingCommonProps {
     value?: undefined;
     onChange?: undefined;
 }
-type ProfileSettingProps = ProfileSettingDisplayNameProps | ProfileSettingNamesProps;
+export type ProfileSettingProps = ProfileSettingDisplayNameProps | ProfileSettingNamesProps;
 /**
  * The profile section: avatar, address, role, member since, and the name.
  *
@@ -84,16 +84,39 @@ type ProfileSettingProps = ProfileSettingDisplayNameProps | ProfileSettingNamesP
  * account's own settings, which billing never locks (docs/billing-harmonization.md §3.3,
  * §12.36).
  */
-declare function ProfileSetting(props: ProfileSettingProps): react.JSX.Element;
+export declare function ProfileSetting(props: ProfileSettingProps): import("react").JSX.Element;
 /**
  * What {@link PasswordSetting}'s `strength` takes besides `true`: the meter's own options,
  * minus the ones the card owns — `value` (the new password), `minLength` (the card's, so
  * the checklist's length rule and the submit's check are one number) and `maxBytes`
  * (the card's own prop, which the submit enforces as well).
  */
-type PasswordSettingStrength = Pick<PasswordStrengthMeterProps, "score" | "showRequirements" | "labels">;
-declare function PasswordSetting({ onSubmit, pending, minLength, strength, maxBytes, labels: labelsProp, id, }: {
-    /** Called with the validated (current, new) pair; return a promise to auto-clear on success. */
+export type PasswordSettingStrength = Pick<PasswordStrengthMeterProps, "score" | "showRequirements" | "labels">;
+/**
+ * Changing the account's password: the current one, the new one twice, then the app's
+ * `onSubmit`.
+ *
+ * **Refusals under their fields** (0.34, KS U3). The card's own checks say why under the
+ * field they are about — too short or too long under the new password, a mismatch under
+ * the confirmation — and a server's `password_incorrect` (server-kit's `400` for a wrong
+ * current password; an older `invalid_credentials` too) is read from `onSubmit`'s
+ * rejection by code ({@link authErrorCode}) and said under the current password, in
+ * `EmailChangeSetting`'s and `DeleteAccountSetting`'s words. The field in error takes
+ * the focus, so its message is read with it. Until 0.34 the card swallowed every
+ * rejection and each app toasted the wrong password itself, in three spellings.
+ *
+ * **Anything else** is the app's: `describeError` puts its words in the card (a banner
+ * over the button), and without it the card shows nothing — the app's own toast, as
+ * before. The fields keep what was typed for a retry; a resolved `onSubmit` empties
+ * them.
+ */
+export declare function PasswordSetting({ onSubmit, pending, minLength, strength, maxBytes, describeError, labels: labelsProp, id, }: {
+    /**
+     * Called with the validated (current, new) pair; return a promise to auto-clear on
+     * success. Reject with the client's error: `password_incorrect` is said under the
+     * current password; anything else goes through `describeError`, else stays the app's
+     * to say (a toast).
+     */
     onSubmit: (currentPassword: string, newPassword: string) => void | Promise<unknown>;
     pending?: boolean;
     /** The shortest new password the card submits, in characters as a person counts them
@@ -120,11 +143,20 @@ declare function PasswordSetting({ onSubmit, pending, minLength, strength, maxBy
      * talks people out of the long passphrase they chose.
      */
     maxBytes?: number;
+    /**
+     * The app's own words for a failure of `onSubmit`, said IN the card (a banner over the
+     * button), or `undefined` for the kit's handling. Asked first, for every failure — as
+     * `EmailChangeSetting`'s and `DeleteAccountSetting`'s are (0.34, KS U3): a demo's
+     * refusal, the device offline, a `422` whose sentence the app has. Without it, or when
+     * it answers `undefined`, the card says `password_incorrect` under the current password
+     * and nothing else: the rest stays the app's own toast.
+     */
+    describeError?: (error: unknown) => ReactNode | undefined;
     /** Prop > `<UiKitProvider labels={{ accountSettings: { password } }}>` > English. */
-    labels?: Partial<PasswordSettingLabels>;
+    labels?: LabelOverride<PasswordSettingLabels>;
     /** The card's DOM id — a settings catalogue `anchor`, so `?focus=` can ring it (0.31). */
     id?: string;
-}): react.JSX.Element;
+}): import("react").JSX.Element;
 /**
  * What the app's setup call returned.
  *
@@ -134,14 +166,14 @@ declare function PasswordSetting({ onSubmit, pending, minLength, strength, maxBy
  * base64-encoded SVG image — is what the section took before, which made every app
  * render a QR library to a static string and base64 it only for the kit to draw it back.
  */
-type TwoFactorSetupData = {
+export type TwoFactorSetupData = {
     qrSvg: string;
     secret: string;
 } | {
     otpauthUri: string;
     secret?: string;
 };
-declare function TwoFactorSetting({ enabled, setup, onStartSetup, onEnable, onDisable, busy, renderQr, labels: labelsProp, id, }: {
+export declare function TwoFactorSetting({ enabled, setup, onStartSetup, onEnable, onDisable, busy, renderQr, labels: labelsProp, id, }: {
     enabled: boolean;
     /** What the app's setup call returned; null before setup starts. */
     setup: TwoFactorSetupData | null;
@@ -153,9 +185,7 @@ declare function TwoFactorSetting({ enabled, setup, onStartSetup, onEnable, onDi
      *  `otpauthUri`; the kit's own {@link QrCode} otherwise. Unused with `qrSvg`. */
     renderQr?: (otpauthUri: string) => ReactNode;
     /** Prop > `<UiKitProvider labels={{ accountSettings: { twoFactor } }}>` > English. */
-    labels?: Partial<TwoFactorSettingLabels>;
+    labels?: LabelOverride<TwoFactorSettingLabels>;
     /** The card's DOM id — a settings catalogue `anchor`, so `?focus=` can ring it (0.31). */
     id?: string;
-}): react.JSX.Element;
-
-export { PasswordSetting, PasswordSettingLabels, type PasswordSettingStrength, type ProfileNameValues, ProfileSetting, type ProfileSettingDisplayNameProps, ProfileSettingLabels, type ProfileSettingNamesProps, type ProfileSettingProps, TwoFactorSetting, TwoFactorSettingLabels, type TwoFactorSetupData };
+}): import("react").JSX.Element;

package/dist/{components → account}/account-settings.js

@@ -1,23 +1,28 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-import { useId, useState } from "react";
-import { Button, Card, Input } from "./ui.js";
-import { UserAvatar } from "./user-avatar.js";
-import { CopyButton } from "./copy-button.js";
-import { QrCode } from "./qr-code.js";
-import { OneTimeCodeInput } from "./one-time-code-input.js";
-import { usePromisePending } from "./danger-confirm.js";
+import { useId, useRef, useState } from "react";
+import { Button } from "../components/button.js";
+import { Card } from "../components/card.js";
+import { Input } from "../components/input.js";
+import { UserAvatar } from "../components/user-avatar.js";
+import { CopyButton } from "../components/copy-button.js";
+import { QrCode } from "../components/qr-code.js";
+import { OneTimeCodeInput } from "../components/one-time-code-input.js";
+import { usePromisePending } from "../components/danger-confirm.js";
 import { personNameOk, PERSON_NAME_MAX_LENGTH } from "../auth/form-rules.js";
 import {
   DEFAULT_PASSWORD_STRENGTH_LABELS,
   passwordByteLength,
   PasswordStrengthMeter
-} from "./password-strength.js";
+} from "../components/password-strength.js";
 import { useKitLabelOverrides, useKitLabels } from "../i18n/kit-labels.js";
-import { Chip } from "./chip.js";
+import { Chip } from "../components/chip.js";
 import { useAccountSettingsLabels } from "./account-settings-labels.js";
 import { SettingsCardTitle } from "../settings/settings-heading.js";
-import { COMMIT_EXCEPT_BILLING } from "./write-lock.js";
+import { COMMIT_EXCEPT_BILLING } from "../components/write-lock.js";
+import { AlertBanner } from "../components/alert-banner.js";
+import { hasContent } from "../lib/presence.js";
+import { authErrorCode } from "../auth/auth-errors.js";
 import { DEFAULT_ACCOUNT_SETTINGS_LABELS } from "./account-settings-labels.js";
 function ProfileSetting(props) {
   const { name, email, role, memberSince, labels: labelsProp, id } = props;
@@ -36,7 +41,7 @@ function ProfileSetting(props) {
       ),
       /* @__PURE__ */ jsxs("div", { className: "min-w-0", children: [
         /* @__PURE__ */ jsx(SettingsCardTitle, { children: labels.title }),
-        /* @__PURE__ */ jsxs("div", { className: "truncate font-mono text-xs text-[var(--text-muted)]", children: [
+        /* @__PURE__ */ jsxs("div", { className: "truncate-until-large font-mono text-xs text-muted", children: [
           /* @__PURE__ */ jsxs("span", { className: "sr-only", children: [
             labels.email,
             ": "
@@ -46,9 +51,9 @@ function ProfileSetting(props) {
       ] })
     ] }),
     /* @__PURE__ */ jsxs("div", { className: "grid grid-cols-[max-content_1fr] gap-x-3 gap-y-1 text-sm", children: [
-      /* @__PURE__ */ jsx("span", { className: "text-[var(--text-muted)]", children: labels.role }),
+      /* @__PURE__ */ jsx("span", { className: "text-muted", children: labels.role }),
       /* @__PURE__ */ jsx("span", { children: role ?? "\u2014" }),
-      /* @__PURE__ */ jsx("span", { className: "text-[var(--text-muted)]", children: labels.memberSince }),
+      /* @__PURE__ */ jsx("span", { className: "text-muted", children: labels.memberSince }),
       /* @__PURE__ */ jsx("span", { children: memberSince ?? "\u2014" })
     ] }),
     names ? /* @__PURE__ */ jsx(
@@ -170,6 +175,7 @@ function PasswordSetting({
   minLength = 8,
   strength,
   maxBytes,
+  describeError,
   labels: labelsProp,
   id
 }) {
@@ -179,33 +185,87 @@ function PasswordSetting({
   const [current, setCurrent] = useState("");
   const [next, setNext] = useState("");
   const [confirm, setConfirm] = useState("");
-  const [error, setError] = useState(null);
+  const [fieldError, setFieldError] = useState(null);
+  const [failure, setFailure] = useState(null);
+  const currentRef = useRef(null);
+  const nextRef = useRef(null);
+  const confirmRef = useRef(null);
+  const refs = {
+    current: currentRef,
+    next: nextRef,
+    confirm: confirmRef
+  };
+  const refuse = (field, message) => {
+    setFieldError({ field, message });
+    refs[field].current?.focus();
+  };
+  const errorOf = (field) => fieldError?.field === field ? fieldError.message : void 0;
+  const edit = (field, set) => (e) => {
+    set(e.target.value);
+    if (fieldError?.field === field) setFieldError(null);
+    if (failure !== null) setFailure(null);
+  };
+  const present = (error) => {
+    const own = describeError?.(error);
+    if (hasContent(own)) {
+      setFailure(own);
+      return;
+    }
+    const code = authErrorCode(error);
+    if (code === "password_incorrect" || code === "invalid_credentials") {
+      refuse("current", labels.wrongPassword);
+    }
+  };
   const submit = async () => {
+    setFailure(null);
     if ([...next].length < minLength) {
-      setError(labels.tooShort);
+      refuse("next", labels.tooShort);
       return;
     }
     if (maxBytes !== void 0 && passwordByteLength(next) > maxBytes) {
-      setError(strengthLabels.tooLong(maxBytes));
+      refuse("next", strengthLabels.tooLong(maxBytes));
       return;
     }
     if (next !== confirm) {
-      setError(labels.mismatch);
+      refuse("confirm", labels.mismatch);
       return;
     }
-    setError(null);
+    setFieldError(null);
     try {
       await onSubmit(current, next);
       setCurrent("");
       setNext("");
       setConfirm("");
-    } catch {
+    } catch (error) {
+      present(error);
     }
   };
-  const nextField = /* @__PURE__ */ jsx(Input, { type: "password", autoComplete: "new-password", label: labels.next, value: next, onChange: (e) => setNext(e.target.value) });
+  const nextField = /* @__PURE__ */ jsx(
+    Input,
+    {
+      ref: nextRef,
+      type: "password",
+      autoComplete: "new-password",
+      label: labels.next,
+      value: next,
+      onChange: edit("next", setNext),
+      error: errorOf("next")
+    }
+  );
   return /* @__PURE__ */ jsxs(Card, { id, className: "p-4 space-y-3", children: [
     /* @__PURE__ */ jsx(SettingsCardTitle, { children: labels.title }),
-    /* @__PURE__ */ jsx(Input, { type: "password", autoComplete: "current-password", label: labels.current, value: current, onChange: (e) => setCurrent(e.target.value) }),
+    /* @__PURE__ */ jsx(
+      Input,
+      {
+        ref: currentRef,
+        type: "password",
+        autoComplete: "current-password",
+        label: labels.current,
+        value: current,
+        onChange: edit("current", setCurrent),
+        error: errorOf("current")
+      }
+    ),
     strength ? (
       // One box for the field and its meter, so the card's `space-y-3` spaces the pair
       // from its neighbours and the meter keeps its own small gap under the field.
@@ -224,8 +284,19 @@ function PasswordSetting({
         )
       ] })
     ) : nextField,
-    /* @__PURE__ */ jsx(Input, { type: "password", autoComplete: "new-password", label: labels.confirm, value: confirm, onChange: (e) => setConfirm(e.target.value) }),
-    error && /* @__PURE__ */ jsx("p", { className: "text-xs text-[var(--danger)]", children: error }),
+    /* @__PURE__ */ jsx(
+      Input,
+      {
+        ref: confirmRef,
+        type: "password",
+        autoComplete: "new-password",
+        label: labels.confirm,
+        value: confirm,
+        onChange: edit("confirm", setConfirm),
+        error: errorOf("confirm")
+      }
+    ),
+    hasContent(failure) && /* @__PURE__ */ jsx(AlertBanner, { tone: "danger", size: "sm", role: "alert", children: failure }),
     /* @__PURE__ */ jsx(Button, { onClick: () => void submit(), disabled: !current || !next || !confirm || pending, children: labels.submit })
   ] });
 }
@@ -265,7 +336,7 @@ function TwoFactorSetting({
     ] }),
     !enabled && !setup && /* @__PURE__ */ jsx(Button, { onClick: onStartSetup, disabled: busy, children: labels.enable }),
     setup && /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-      /* @__PURE__ */ jsx("div", { className: "text-xs text-[var(--text-secondary)]", children: labels.scanHint }),
+      /* @__PURE__ */ jsx("div", { className: "text-xs text-secondary", children: labels.scanHint }),
       "otpauthUri" in setup ? (
         // No backing of its own: QrCode draws its quiet zone white inside the SVG.
         /* @__PURE__ */ jsx("div", { "data-private": true, className: "inline-block overflow-hidden rounded-md", children: renderQr ? renderQr(setup.otpauthUri) : /* @__PURE__ */ jsx(QrCode, { value: setup.otpauthUri, label: labels.qrAlt, className: "size-48" }) })
@@ -278,7 +349,7 @@ function TwoFactorSetting({
         }
       ) }),
       secret && /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
-        /* @__PURE__ */ jsx("div", { className: "text-xs text-[var(--text-secondary)]", children: labels.secretHint }),
+        /* @__PURE__ */ jsx("div", { className: "text-xs text-secondary", children: labels.secretHint }),
         /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-1", children: [
           /* @__PURE__ */ jsx("code", { "data-private": true, dir: "ltr", className: "break-all font-mono text-xs select-all", children: groupSecret(secret) }),
           /* @__PURE__ */ jsx(CopyButton, { text: secret, label: labels.copySecret, size: "xs", tone: "muted" })
@@ -302,7 +373,7 @@ function TwoFactorSetting({
       ),
       /* @__PURE__ */ jsx(Button, { onClick: () => onEnable(code), disabled: !code || busy, children: labels.verify })
     ] }),
-    enabled && /* @__PURE__ */ jsxs("div", { className: "space-y-3 border-t border-[var(--border)] pt-3", children: [
+    enabled && /* @__PURE__ */ jsxs("div", { className: "space-y-3 border-t border-subtle pt-3", children: [
       /* @__PURE__ */ jsx("div", { className: "text-sm font-medium", children: labels.disableSection }),
       /* @__PURE__ */ jsx(Input, { type: "password", autoComplete: "current-password", label: labels.password, value: password, onChange: (e) => setPassword(e.target.value) }),
       /* @__PURE__ */ jsx(

package/dist/account/account-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/account/account-settings.tsx"],"sourcesContent":["import { useId, useRef, useState } from \"react\";\nimport type { ChangeEvent, FormEvent, KeyboardEvent, ReactNode, RefObject } from \"react\";\nimport { Button } from \"../components/button\";\nimport { Card } from \"../components/card\";\nimport { Input } from \"../components/input\";\nimport { UserAvatar } from \"../components/user-avatar\";\nimport { CopyButton } from \"../components/copy-button\";\nimport { QrCode } from \"../components/qr-code\";\nimport { OneTimeCodeInput } from \"../components/one-time-code-input\";\nimport { usePromisePending } from \"../components/danger-confirm\";\nimport { personNameOk, PERSON_NAME_MAX_LENGTH } from \"../auth/form-rules\";\nimport {\n  DEFAULT_PASSWORD_STRENGTH_LABELS,\n  passwordByteLength,\n  PasswordStrengthMeter,\n} from \"../components/password-strength\";\nimport type { PasswordStrengthMeterProps } from \"../components/password-strength\";\nimport { useKitLabelOverrides, useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { Chip } from \"../components/chip\";\nimport { useAccountSettingsLabels } from \"./account-settings-labels\";\nimport { SettingsCardTitle } from \"../settings/settings-heading\";\nimport type {\n  PasswordSettingLabels,\n  ProfileSettingLabels,\n  TwoFactorSettingLabels,\n} from \"./account-settings-labels\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasContent } from \"../lib/presence\";\nimport { authErrorCode } from \"../auth/auth-errors\";\n\n// The label types moved beside the namespace's defaults (0.12.0); re-exported here so\n// every existing `import type { ProfileSettingLabels }` keeps resolving.\nexport type {\n  AccountSettingsLabels,\n  PasskeysSettingLabels,\n  PasswordSettingLabels,\n  ProfileSettingLabels,\n  TwoFactorSettingLabels,\n} from \"./account-settings-labels\";\nexport { DEFAULT_ACCOUNT_SETTINGS_LABELS } from \"./account-settings-labels\";\n\n/**\n * App-agnostic account-settings SECTIONS (feedback #333). The presentation lives\n * in @hb/ui; each app injects its own auth-API handlers + translated labels and\n * arranges these next to its own app-specific cards (appearance, budgets, …).\n * Every section is a self-contained <Card> owning its transient form state.\n *\n * Every `labels` prop is optional since 0.12.0: the strings come from the provider's\n * `accountSettings` namespace, then English (see account-settings-labels.ts).\n */\n\n/** What {@link ProfileSetting} hands `onSave` in its two-field form (0.30.0): both\n *  trimmed, 1–120 characters each — the `PATCH /auth/me` body's `first_name` /\n *  `last_name` (docs/user-admin-harmonization.md §6.1). */\nexport interface ProfileNameValues {\n  firstName: string;\n  lastName: string;\n}\n\n/** What both forms of {@link ProfileSetting} take. */\ninterface ProfileSettingCommonProps {\n  name?: string | null;\n  email?: string | null;\n  role?: ReactNode;\n  memberSince?: ReactNode;\n  saving?: boolean;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { profile } }}>` > English. */\n  labels?: LabelOverride<ProfileSettingLabels>;\n  /** The card's DOM id — a settings catalogue `anchor`, so `?focus=` can ring it (0.31). */\n  id?: string;\n}\n\n/**\n * The single display name, as before 0.30.0 — controlled through `value` / `onChange`,\n * saved by `onSave()`. Kept unchanged for an app that has not moved to first and last\n * name yet.\n */\nexport interface ProfileSettingDisplayNameProps extends ProfileSettingCommonProps {\n  value: string;\n  onChange: (value: string) => void;\n  onSave: () => void;\n  firstName?: undefined;\n  lastName?: undefined;\n}\n\n/**\n * First and last name (0.30.0, docs/user-admin-harmonization.md §6.1): the saved\n * values in, the edited ones out through `onSave`. The card keeps the drafts itself.\n */\nexport interface ProfileSettingNamesProps extends ProfileSettingCommonProps {\n  /** The saved given name — `first_name`. `null` reads as empty. */\n  firstName: string | null;\n  /** The saved family name — `last_name`. `null` (a migrated account, §3.3) reads as\n   *  empty, and Save then waits for one. */\n  lastName: string | null;\n  /**\n   * Save the two names (`PATCH /auth/me`, which also clears `name_incomplete`). Return\n   * a promise and Save is busy until it settles. Refresh `firstName` / `lastName` from\n   * the answer: the card compares its drafts with them, so Save turns off once the new\n   * names come back. A rejection keeps what was typed — the app says why (a toast), as\n   * for `PasswordSetting`.\n   */\n  onSave: (values: ProfileNameValues) => void | Promise<unknown>;\n  value?: undefined;\n  onChange?: undefined;\n}\n\nexport type ProfileSettingProps = ProfileSettingDisplayNameProps | ProfileSettingNamesProps;\n\n/**\n * The profile section: avatar, address, role, member since, and the name.\n *\n * **Two forms.** Given `firstName` / `lastName` (0.30.0, §6.1) it edits first and last\n * name in two fields, side by side where the card is wide enough — the order and the\n * 1–120-character rule of `RegisterForm` (auth §3.1), so the name a person signed up\n * with is edited the way it was typed. Without them it is the single `displayName`\n * field it always was, `value` / `onChange` / `onSave()` unchanged, for an app that has\n * not moved yet (kastlan split the one name at its first space on save; Kurvenschmiede\n * built its own card instead).\n *\n * The two-field form owns its drafts, starting from the saved names and following them\n * when they change; Save waits for a change, holds — saying why — while a name is\n * blank, and is a `commit` (a {@link WriteLockProvider} locks it, keksdose's demo) —\n * every lock but a lapsed plan's (`COMMIT_EXCEPT_BILLING`, 0.33): a profile is the\n * account's own settings, which billing never locks (docs/billing-harmonization.md §3.3,\n * §12.36).\n */\nexport function ProfileSetting(props: ProfileSettingProps) {\n  const { name, email, role, memberSince, labels: labelsProp, id } = props;\n  const labels = useAccountSettingsLabels(\"profile\", labelsProp);\n  const names = props.firstName !== undefined || props.lastName !== undefined;\n  return (\n    <Card id={id} className=\"p-4 space-y-3\">\n      <div className=\"flex items-center gap-3\">\n        <UserAvatar\n          name={name}\n          email={email}\n          person={names ? { first: props.firstName, last: props.lastName } : undefined}\n          size=\"lg\"\n        />\n        <div className=\"min-w-0\">\n          {/* A heading inside a SettingsLayout (0.31, docs/settings-harmonization.md\n              §3.7), the plain div it always was outside one. */}\n          <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n          <div className=\"truncate-until-large font-mono text-xs text-muted\">\n            {/* `email` was a required key that nothing rendered; it names the address\n                for a screen reader, which otherwise hears a bare string under a title. */}\n            <span className=\"sr-only\">{labels.email}: </span>\n            {email ?? \"—\"}\n          </div>\n        </div>\n      </div>\n      <div className=\"grid grid-cols-[max-content_1fr] gap-x-3 gap-y-1 text-sm\">\n        <span className=\"text-muted\">{labels.role}</span>\n        <span>{role ?? \"—\"}</span>\n        <span className=\"text-muted\">{labels.memberSince}</span>\n        <span>{memberSince ?? \"—\"}</span>\n      </div>\n      {names ? (\n        <PersonNameFields\n          firstName={props.firstName ?? \"\"}\n          lastName={props.lastName ?? \"\"}\n          onSave={(props as ProfileSettingNamesProps).onSave}\n          saving={props.saving}\n          labels={labels}\n        />\n      ) : (\n        <DisplayNameField\n          name={name}\n          value={(props as ProfileSettingDisplayNameProps).value}\n          onChange={(props as ProfileSettingDisplayNameProps).onChange}\n          onSave={(props as ProfileSettingDisplayNameProps).onSave}\n          saving={props.saving}\n          labels={labels}\n        />\n      )}\n    </Card>\n  );\n}\n\n/** The single-name form — exactly the 0.29 card's field and button. */\nfunction DisplayNameField({\n  name,\n  value,\n  onChange,\n  onSave,\n  saving,\n  labels,\n}: {\n  name?: string | null;\n  value: string;\n  onChange: (value: string) => void;\n  onSave: () => void;\n  saving?: boolean;\n  labels: Required<ProfileSettingLabels>;\n}) {\n  const dirty = value.trim().length > 0 && value.trim() !== (name ?? \"\");\n  // Generated, not the literal \"display-name\" it was: two of these on one page (an\n  // admin editing someone else's profile beside their own) shared an id, and the\n  // second label pointed at the first field.\n  const inputId = useId();\n  return (\n    <>\n      <Input\n        id={inputId}\n        label={labels.displayName}\n        value={value}\n        onChange={(e) => onChange(e.target.value)}\n        maxLength={120}\n      />\n      <Button onClick={onSave} disabled={!dirty || saving}>\n        {labels.save}\n      </Button>\n    </>\n  );\n}\n\n/** The first-and-last form (0.30.0, §6.1). */\nfunction PersonNameFields({\n  firstName,\n  lastName,\n  onSave,\n  saving,\n  labels,\n}: {\n  firstName: string;\n  lastName: string;\n  onSave: (values: ProfileNameValues) => void | Promise<unknown>;\n  saving?: boolean;\n  labels: Required<ProfileSettingLabels>;\n}) {\n  const [first, setFirst] = useState(firstName);\n  const [last, setLast] = useState(lastName);\n  // The saved names moved (the save came back, another tab renamed): the drafts follow\n  // them. During render, as DangerConfirm resets its fields, so no frame shows the old\n  // draft beside the new name.\n  const [saved, setSaved] = useState({ firstName, lastName });\n  if (saved.firstName !== firstName || saved.lastName !== lastName) {\n    setSaved({ firstName, lastName });\n    setFirst(firstName);\n    setLast(lastName);\n  }\n  const { pending, run } = usePromisePending();\n  const busy = Boolean(saving) || pending;\n  const valid = personNameOk(first) && personNameOk(last);\n  const dirty = first.trim() !== firstName.trim() || last.trim() !== lastName.trim();\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!valid || !dirty || busy) return;\n    // A rejection keeps the drafts; the app reports it, as PasswordSetting's does.\n    run(onSave({ firstName: first.trim(), lastName: last.trim() }), () => {});\n  };\n\n  return (\n    <form className=\"@container space-y-3\" onSubmit={submit} noValidate>\n      {/* The order and the rule of RegisterForm's two fields (auth §3.1). */}\n      <div className=\"grid gap-3 @xs:grid-cols-2\">\n        <Input\n          name=\"given-name\"\n          autoComplete=\"given-name\"\n          label={labels.firstName}\n          value={first}\n          onChange={(e) => setFirst(e.target.value)}\n          maxLength={PERSON_NAME_MAX_LENGTH}\n          readOnly={busy}\n          required\n        />\n        <Input\n          name=\"family-name\"\n          autoComplete=\"family-name\"\n          label={labels.lastName}\n          value={last}\n          onChange={(e) => setLast(e.target.value)}\n          maxLength={PERSON_NAME_MAX_LENGTH}\n          readOnly={busy}\n          required\n        />\n      </div>\n      <Button\n        type=\"submit\"\n        commit={COMMIT_EXCEPT_BILLING}\n        pending={busy}\n        // A blank name is a reason the person can act on; an unchanged one is not —\n        // there is nothing to save, and the button is simply off.\n        disabled={valid && !dirty}\n        disabledReason={valid ? undefined : labels.nameRequired}\n      >\n        {labels.save}\n      </Button>\n    </form>\n  );\n}\n\n/**\n * What {@link PasswordSetting}'s `strength` takes besides `true`: the meter's own options,\n * minus the ones the card owns — `value` (the new password), `minLength` (the card's, so\n * the checklist's length rule and the submit's check are one number) and `maxBytes`\n * (the card's own prop, which the submit enforces as well).\n */\nexport type PasswordSettingStrength = Pick<PasswordStrengthMeterProps, \"score\" | \"showRequirements\" | \"labels\">;\n\n/**\n * Changing the account's password: the current one, the new one twice, then the app's\n * `onSubmit`.\n *\n * **Refusals under their fields** (0.34, KS U3). The card's own checks say why under the\n * field they are about — too short or too long under the new password, a mismatch under\n * the confirmation — and a server's `password_incorrect` (server-kit's `400` for a wrong\n * current password; an older `invalid_credentials` too) is read from `onSubmit`'s\n * rejection by code ({@link authErrorCode}) and said under the current password, in\n * `EmailChangeSetting`'s and `DeleteAccountSetting`'s words. The field in error takes\n * the focus, so its message is read with it. Until 0.34 the card swallowed every\n * rejection and each app toasted the wrong password itself, in three spellings.\n *\n * **Anything else** is the app's: `describeError` puts its words in the card (a banner\n * over the button), and without it the card shows nothing — the app's own toast, as\n * before. The fields keep what was typed for a retry; a resolved `onSubmit` empties\n * them.\n */\nexport function PasswordSetting({\n  onSubmit,\n  pending,\n  minLength = 8,\n  strength,\n  maxBytes,\n  describeError,\n  labels: labelsProp,\n  id,\n}: {\n  /**\n   * Called with the validated (current, new) pair; return a promise to auto-clear on\n   * success. Reject with the client's error: `password_incorrect` is said under the\n   * current password; anything else goes through `describeError`, else stays the app's\n   * to say (a toast).\n   */\n  onSubmit: (currentPassword: string, newPassword: string) => void | Promise<unknown>;\n  pending?: boolean;\n  /** The shortest new password the card submits, in characters as a person counts them\n   *  (an emoji is one). Keep it in step with the server's own minimum. Default 8. */\n  minLength?: number;\n  /**\n   * Show the {@link PasswordStrengthMeter} under the new-password field (0.22.0,\n   * kastlan's input audit): the bar, the level in words and the checklist, with the\n   * length rule drawn from `minLength`. `true` for the meter as it comes; an object for\n   * its `score` (zxcvbn's, say), `showRequirements` or `labels`.\n   *\n   * Off by default, so a card that never asked for it does not grow one. The meter is\n   * advisory, as everywhere in the kit: it blocks nothing — the card's own checks do\n   * (`minLength`, the confirmation, `maxBytes`).\n   */\n  strength?: boolean | PasswordSettingStrength;\n  /**\n   * A byte ceiling on the new password — bcrypt reads at most 72 BYTES and ignores the\n   * rest, which is kastlan's case: `maxBytes={72}`. A new password over it is refused\n   * on submit with the meter's own \"too long\" sentence (the `passwordStrength`\n   * namespace's `tooLong`), and the meter, when shown, warns while it is typed.\n   *\n   * Unset by default, and leave it unset for a secret with no ceiling: an invented one\n   * talks people out of the long passphrase they chose.\n   */\n  maxBytes?: number;\n  /**\n   * The app's own words for a failure of `onSubmit`, said IN the card (a banner over the\n   * button), or `undefined` for the kit's handling. Asked first, for every failure — as\n   * `EmailChangeSetting`'s and `DeleteAccountSetting`'s are (0.34, KS U3): a demo's\n   * refusal, the device offline, a `422` whose sentence the app has. Without it, or when\n   * it answers `undefined`, the card says `password_incorrect` under the current password\n   * and nothing else: the rest stays the app's own toast.\n   */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { password } }}>` > English. */\n  labels?: LabelOverride<PasswordSettingLabels>;\n  /** The card's DOM id — a settings catalogue `anchor`, so `?focus=` can ring it (0.31). */\n  id?: string;\n}) {\n  const labels = useAccountSettingsLabels(\"password\", labelsProp);\n  const strengthOptions = typeof strength === \"object\" ? strength : undefined;\n  // Only for `tooLong`: the sentence the meter shows is the one the refusal says.\n  const strengthLabels = useKitLabels(\"passwordStrength\", DEFAULT_PASSWORD_STRENGTH_LABELS, strengthOptions?.labels);\n  const [current, setCurrent] = useState(\"\");\n  const [next, setNext] = useState(\"\");\n  const [confirm, setConfirm] = useState(\"\");\n  // One refusal at a time, under the field it is about; the app's words in the banner.\n  const [fieldError, setFieldError] = useState<{ field: PasswordField; message: string } | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const currentRef = useRef<HTMLInputElement>(null);\n  const nextRef = useRef<HTMLInputElement>(null);\n  const confirmRef = useRef<HTMLInputElement>(null);\n  const refs: Record<PasswordField, RefObject<HTMLInputElement | null>> = {\n    current: currentRef,\n    next: nextRef,\n    confirm: confirmRef,\n  };\n\n  // The field in error takes the focus, so its message (its description) is read with it.\n  const refuse = (field: PasswordField, message: string) => {\n    setFieldError({ field, message });\n    refs[field].current?.focus();\n  };\n  const errorOf = (field: PasswordField) => (fieldError?.field === field ? fieldError.message : undefined);\n  // Typing in a field answers its refusal, and the banner's: both go.\n  const edit = (field: PasswordField, set: (value: string) => void) => (e: ChangeEvent<HTMLInputElement>) => {\n    set(e.target.value);\n    if (fieldError?.field === field) setFieldError(null);\n    if (failure !== null) setFailure(null);\n  };\n\n  const present = (error: unknown) => {\n    const own = describeError?.(error);\n    if (hasContent(own)) {\n      setFailure(own);\n      return;\n    }\n    const code = authErrorCode(error);\n    // `invalid_credentials` too, for a server that answered a wrong password so before\n    // server-kit 0.4.0 named `password_incorrect` — the siblings' rule.\n    if (code === \"password_incorrect\" || code === \"invalid_credentials\") {\n      refuse(\"current\", labels.wrongPassword);\n    }\n    // Anything else is the app's to say (a toast), as before 0.34.\n  };\n\n  const submit = async () => {\n    setFailure(null);\n    // Code points, not UTF-16 units — the count the meter's checklist and a server's\n    // `len()` use. `next.length` counted an emoji as two, so four of them passed a\n    // minimum of eight that the meter beside the field said they missed.\n    if ([...next].length < minLength) {\n      refuse(\"next\", labels.tooShort);\n      return;\n    }\n    if (maxBytes !== undefined && passwordByteLength(next) > maxBytes) {\n      refuse(\"next\", strengthLabels.tooLong(maxBytes));\n      return;\n    }\n    if (next !== confirm) {\n      refuse(\"confirm\", labels.mismatch);\n      return;\n    }\n    setFieldError(null);\n    try {\n      await onSubmit(current, next);\n      setCurrent(\"\");\n      setNext(\"\");\n      setConfirm(\"\");\n    } catch (error) {\n      // Keep the fields for a retry, and say what the card can.\n      present(error);\n    }\n  };\n\n  // `error` passed on all three from the first render, so a message coming and going\n  // never remounts a field and takes the caret with it (Input's `FieldGroup`).\n  const nextField = (\n    <Input\n      ref={nextRef}\n      type=\"password\"\n      autoComplete=\"new-password\"\n      label={labels.next}\n      value={next}\n      onChange={edit(\"next\", setNext)}\n      error={errorOf(\"next\")}\n    />\n  );\n\n  return (\n    <Card id={id} className=\"p-4 space-y-3\">\n      <SettingsCardTitle>{labels.title}</SettingsCardTitle>\n      <Input\n        ref={currentRef}\n        type=\"password\"\n        autoComplete=\"current-password\"\n        label={labels.current}\n        value={current}\n        onChange={edit(\"current\", setCurrent)}\n        error={errorOf(\"current\")}\n      />\n      {strength ? (\n        // One box for the field and its meter, so the card's `space-y-3` spaces the pair\n        // from its neighbours and the meter keeps its own small gap under the field.\n        <div>\n          {nextField}\n          <PasswordStrengthMeter\n            value={next}\n            minLength={minLength}\n            maxBytes={maxBytes}\n            score={strengthOptions?.score}\n            showRequirements={strengthOptions?.showRequirements}\n            labels={strengthOptions?.labels}\n          />\n        </div>\n      ) : (\n        nextField\n      )}\n      <Input\n        ref={confirmRef}\n        type=\"password\"\n        autoComplete=\"new-password\"\n        label={labels.confirm}\n        value={confirm}\n        onChange={edit(\"confirm\", setConfirm)}\n        error={errorOf(\"confirm\")}\n      />\n      {hasContent(failure) && (\n        <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n          {failure}\n        </AlertBanner>\n      )}\n      <Button onClick={() => void submit()} disabled={!current || !next || !confirm || pending}>\n        {labels.submit}\n      </Button>\n    </Card>\n  );\n}\n\n/** The three fields of {@link PasswordSetting}, for the refusal that names one. */\ntype PasswordField = \"current\" | \"next\" | \"confirm\";\n\n/**\n * What the app's setup call returned.\n *\n * `otpauthUri` (0.12.0) is what an authenticator backend actually hands out; the kit\n * draws the QR code itself ({@link QrCode}) and reads the manual-entry key out of the\n * URI's `secret` parameter when `secret` is not given. The `qrSvg` shape — a\n * base64-encoded SVG image — is what the section took before, which made every app\n * render a QR library to a static string and base64 it only for the kit to draw it back.\n */\nexport type TwoFactorSetupData =\n  | { qrSvg: string; secret: string }\n  | { otpauthUri: string; secret?: string };\n\n/** The `secret` parameter of an `otpauth://` URI, or null. */\nfunction otpauthSecret(uri: string): string | null {\n  const match = /[?&]secret=([^&#]*)/i.exec(uri);\n  if (!match) return null;\n  try {\n    return decodeURIComponent(match[1]) || null;\n  } catch {\n    return match[1] || null;\n  }\n}\n\n/** \"JBSW Y3DP EHPK 3PXP\": the key in groups of four, which is how an authenticator's\n *  manual-entry screen shows it and how a person copies it by eye. */\nfunction groupSecret(secret: string): string {\n  return secret.replace(/\\s+/g, \"\").replace(/(.{4})(?=.)/g, \"$1 \");\n}\n\nexport function TwoFactorSetting({\n  enabled,\n  setup,\n  onStartSetup,\n  onEnable,\n  onDisable,\n  busy,\n  renderQr,\n  labels: labelsProp,\n  id,\n}: {\n  enabled: boolean;\n  /** What the app's setup call returned; null before setup starts. */\n  setup: TwoFactorSetupData | null;\n  onStartSetup: () => void;\n  onEnable: (code: string) => void;\n  onDisable: (password: string, code: string) => void;\n  busy?: boolean;\n  /** Draw the code yourself (a branded QR, a library you already ship). Given the\n   *  `otpauthUri`; the kit's own {@link QrCode} otherwise. Unused with `qrSvg`. */\n  renderQr?: (otpauthUri: string) => ReactNode;\n  /** Prop > `<UiKitProvider labels={{ accountSettings: { twoFactor } }}>` > English. */\n  labels?: LabelOverride<TwoFactorSettingLabels>;\n  /** The card's DOM id — a settings catalogue `anchor`, so `?focus=` can ring it (0.31). */\n  id?: string;\n}) {\n  const labels = useAccountSettingsLabels(\"twoFactor\", labelsProp);\n  // The title (0.31, docs/settings-harmonization.md §3.7) is new, and an app that\n  // translated this card before it named the setting in `status` — \"2FA\",\n  // \"Zwei-Faktor-Authentifizierung\". Each source's `title` first, then its `status`, so\n  // that app keeps its own word instead of meeting the English title.\n  const overrides = useKitLabelOverrides(\"accountSettings\")?.twoFactor;\n  const title = labelsProp?.title ?? overrides?.title ?? labelsProp?.status ?? overrides?.status ?? labels.title;\n  const [code, setCode] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  // Both code fields are a OneTimeCodeInput (0.22.0) — the field this card wrote by hand\n  // twice — and keep what they did:\n  //  - `readOnlyUntilFocus`: browsers autofill a one-time-code field with the saved\n  //    username (the disable form has a current-password field right above it), and a\n  //    read-only field is never autofilled. The guard drops on focus, and the field\n  //    keeps the look of an editable one meanwhile (FIELD_WRITABLE_LOOK) — see the prop.\n  //  - `length={8}`: the `maxLength={8}` they had, so an authenticator issuing eight\n  //    digits still fits. What changed is that they now take digits only: \"123 456\"\n  //    pasted from an authenticator that groups its digits used to reach `onEnable`\n  //    with the space in it.\n  //  - one `code` state for both, as before.\n  const secret = setup\n    ? (setup.secret ?? (\"otpauthUri\" in setup ? otpauthSecret(setup.otpauthUri) : null))\n    : null;\n\n  return (\n    <Card id={id} className=\"p-4 space-y-3\">\n      {/* The card had only \"Two-factor authentication: Off\". A settings page outlines its\n          cards by their titles (§3.7), so the setting's name is the title now, and the\n          state stands beside it as a chip instead of repeating the name. */}\n      <div className=\"flex flex-wrap items-center justify-between gap-2\">\n        <SettingsCardTitle>{title}</SettingsCardTitle>\n        <Chip size=\"sm\" tone={enabled ? \"success\" : \"neutral\"}>\n          {enabled ? labels.enabledText : labels.disabledText}\n        </Chip>\n      </div>\n\n      {!enabled && !setup && (\n        <Button onClick={onStartSetup} disabled={busy}>\n          {labels.enable}\n        </Button>\n      )}\n\n      {setup && (\n        <div className=\"space-y-2\">\n          <div className=\"text-xs text-secondary\">{labels.scanHint}</div>\n          {/* `bg-white`, NOT `--bg-surface`, and it must stay that way: a QR code is\n              read by a camera looking for maximum contrast between the modules and\n              their quiet zone. On the dark theme a surface-coloured backing makes it\n              slow to acquire, and on a warm light preset it lowers the contrast ratio\n              the spec is written against. This is the one place in the kit where a\n              literal colour is the correct answer. `data-private`: the code IS the\n              second factor, and demo mode blurs it like any other secret. */}\n          {\"otpauthUri\" in setup ? (\n            // No backing of its own: QrCode draws its quiet zone white inside the SVG.\n            <div data-private className=\"inline-block overflow-hidden rounded-md\">\n              {renderQr ? (\n                renderQr(setup.otpauthUri)\n              ) : (\n                <QrCode value={setup.otpauthUri} label={labels.qrAlt} className=\"size-48\" />\n              )}\n            </div>\n          ) : (\n            <div data-private className=\"inline-block rounded-md bg-white p-2\">\n              <img\n                alt={labels.qrAlt}\n                src={`data:image/svg+xml;base64,${setup.qrSvg}`}\n                className=\"h-48 w-48\"\n              />\n            </div>\n          )}\n          {secret && (\n            <div className=\"space-y-1\">\n              <div className=\"text-xs text-secondary\">{labels.secretHint}</div>\n              <div className=\"flex items-center gap-1\">\n                {/* `dir=\"ltr\"`: a base32 key is Latin letters and digits in a fixed\n                    order, and in an RTL page the groups would otherwise be laid out\n                    right to left. */}\n                <code data-private dir=\"ltr\" className=\"break-all font-mono text-xs select-all\">\n                  {groupSecret(secret)}\n                </code>\n                <CopyButton text={secret} label={labels.copySecret} size=\"xs\" tone=\"muted\" />\n              </div>\n            </div>\n          )}\n          <OneTimeCodeInput\n            readOnlyUntilFocus\n            length={8}\n            label={labels.codeLabel}\n            value={code}\n            onChange={setCode}\n            onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n              if (e.key === \"Enter\" && code && !busy) {\n                e.preventDefault();\n                onEnable(code);\n              }\n            }}\n          />\n          <Button onClick={() => onEnable(code)} disabled={!code || busy}>\n            {labels.verify}\n          </Button>\n        </div>\n      )}\n\n      {enabled && (\n        <div className=\"space-y-3 border-t border-subtle pt-3\">\n          <div className=\"text-sm font-medium\">{labels.disableSection}</div>\n          <Input type=\"password\" autoComplete=\"current-password\" label={labels.password} value={password} onChange={(e) => setPassword(e.target.value)} />\n          <OneTimeCodeInput\n            readOnlyUntilFocus\n            length={8}\n            label={labels.codeLabel}\n            value={code}\n            onChange={setCode}\n            onKeyDown={(e: KeyboardEvent<HTMLInputElement>) => {\n              if (e.key === \"Enter\" && password && code && !busy) {\n                e.preventDefault();\n                onDisable(password, code);\n              }\n            }}\n          />\n          <Button variant=\"danger\" onClick={() => onDisable(password, code)} disabled={!password || !code || busy}>\n            {labels.disable}\n          </Button>\n        </div>\n      )}\n    </Card>\n  );\n}\n"],"mappings":";AAuIQ,SAoEJ,UApEI,KAaI,YAbJ;AAvIR,SAAS,OAAO,QAAQ,gBAAgB;AAExC,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AACvB,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,cAAc,8BAA8B;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,sBAAsB,oBAAwC;AACvE,SAAS,YAAY;AACrB,SAAS,gCAAgC;AACzC,SAAS,yBAAyB;AAMlC,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAW9B,SAAS,uCAAuC;AAwFzC,SAAS,eAAe,OAA4B;AACzD,QAAM,EAAE,MAAM,OAAO,MAAM,aAAa,QAAQ,YAAY,GAAG,IAAI;AACnE,QAAM,SAAS,yBAAyB,WAAW,UAAU;AAC7D,QAAM,QAAQ,MAAM,cAAc,UAAa,MAAM,aAAa;AAClE,SACE,qBAAC,QAAK,IAAQ,WAAU,iBACtB;AAAA,yBAAC,SAAI,WAAU,2BACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA,QAAQ,QAAQ,EAAE,OAAO,MAAM,WAAW,MAAM,MAAM,SAAS,IAAI;AAAA,UACnE,MAAK;AAAA;AAAA,MACP;AAAA,MACA,qBAAC,SAAI,WAAU,WAGb;AAAA,4BAAC,qBAAmB,iBAAO,OAAM;AAAA,QACjC,qBAAC,SAAI,WAAU,qDAGb;AAAA,+BAAC,UAAK,WAAU,WAAW;AAAA,mBAAO;AAAA,YAAM;AAAA,aAAE;AAAA,UACzC,SAAS;AAAA,WACZ;AAAA,SACF;AAAA,OACF;AAAA,IACA,qBAAC,SAAI,WAAU,4DACb;AAAA,0BAAC,UAAK,WAAU,cAAc,iBAAO,MAAK;AAAA,MAC1C,oBAAC,UAAM,kBAAQ,UAAI;AAAA,MACnB,oBAAC,UAAK,WAAU,cAAc,iBAAO,aAAY;AAAA,MACjD,oBAAC,UAAM,yBAAe,UAAI;AAAA,OAC5B;AAAA,IACC,QACC;AAAA,MAAC;AAAA;AAAA,QACC,WAAW,MAAM,aAAa;AAAA,QAC9B,UAAU,MAAM,YAAY;AAAA,QAC5B,QAAS,MAAmC;AAAA,QAC5C,QAAQ,MAAM;AAAA,QACd;AAAA;AAAA,IACF,IAEA;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA,OAAQ,MAAyC;AAAA,QACjD,UAAW,MAAyC;AAAA,QACpD,QAAS,MAAyC;AAAA,QAClD,QAAQ,MAAM;AAAA,QACd;AAAA;AAAA,IACF;AAAA,KAEJ;AAEJ;AAGA,SAAS,iBAAiB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,QAAQ,MAAM,KAAK,EAAE,SAAS,KAAK,MAAM,KAAK,OAAO,QAAQ;AAInE,QAAM,UAAU,MAAM;AACtB,SACE,iCACE;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,IAAI;AAAA,QACJ,OAAO,OAAO;AAAA,QACd;AAAA,QACA,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,QACxC,WAAW;AAAA;AAAA,IACb;AAAA,IACA,oBAAC,UAAO,SAAS,QAAQ,UAAU,CAAC,SAAS,QAC1C,iBAAO,MACV;AAAA,KACF;AAEJ;AAGA,SAAS,iBAAiB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,SAAS;AAC5C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,QAAQ;AAIzC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE,WAAW,SAAS,CAAC;AAC1D,MAAI,MAAM,cAAc,aAAa,MAAM,aAAa,UAAU;AAChE,aAAS,EAAE,WAAW,SAAS,CAAC;AAChC,aAAS,SAAS;AAClB,YAAQ,QAAQ;AAAA,EAClB;AACA,QAAM,EAAE,SAAS,IAAI,IAAI,kBAAkB;AAC3C,QAAM,OAAO,QAAQ,MAAM,KAAK;AAChC,QAAM,QAAQ,aAAa,KAAK,KAAK,aAAa,IAAI;AACtD,QAAM,QAAQ,MAAM,KAAK,MAAM,UAAU,KAAK,KAAK,KAAK,KAAK,MAAM,SAAS,KAAK;AAEjF,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,SAAS,CAAC,SAAS,KAAM;AAE9B,QAAI,OAAO,EAAE,WAAW,MAAM,KAAK,GAAG,UAAU,KAAK,KAAK,EAAE,CAAC,GAAG,MAAM;AAAA,IAAC,CAAC;AAAA,EAC1E;AAEA,SACE,qBAAC,UAAK,WAAU,wBAAuB,UAAU,QAAQ,YAAU,MAEjE;AAAA,yBAAC,SAAI,WAAU,8BACb;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,cAAa;AAAA,UACb,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,WAAW;AAAA,UACX,UAAU;AAAA,UACV,UAAQ;AAAA;AAAA,MACV;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,cAAa;AAAA,UACb,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,UACvC,WAAW;AAAA,UACX,UAAU;AAAA,UACV,UAAQ;AAAA;AAAA,MACV;AAAA,OACF;AAAA,IACA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QAGT,UAAU,SAAS,CAAC;AAAA,QACpB,gBAAgB,QAAQ,SAAY,OAAO;AAAA,QAE1C,iBAAO;AAAA;AAAA,IACV;AAAA,KACF;AAEJ;AA4BO,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AACF,GA8CG;AACD,QAAM,SAAS,yBAAyB,YAAY,UAAU;AAC9D,QAAM,kBAAkB,OAAO,aAAa,WAAW,WAAW;AAElE,QAAM,iBAAiB,aAAa,oBAAoB,kCAAkC,iBAAiB,MAAM;AACjH,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AACzC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AACnC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AAEzC,QAAM,CAAC,YAAY,aAAa,IAAI,SAA2D,IAAI;AACnG,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,aAAa,OAAyB,IAAI;AAChD,QAAM,UAAU,OAAyB,IAAI;AAC7C,QAAM,aAAa,OAAyB,IAAI;AAChD,QAAM,OAAkE;AAAA,IACtE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AAGA,QAAM,SAAS,CAAC,OAAsB,YAAoB;AACxD,kBAAc,EAAE,OAAO,QAAQ,CAAC;AAChC,SAAK,KAAK,EAAE,SAAS,MAAM;AAAA,EAC7B;AACA,QAAM,UAAU,CAAC,UAA0B,YAAY,UAAU,QAAQ,WAAW,UAAU;AAE9F,QAAM,OAAO,CAAC,OAAsB,QAAiC,CAAC,MAAqC;AACzG,QAAI,EAAE,OAAO,KAAK;AAClB,QAAI,YAAY,UAAU,MAAO,eAAc,IAAI;AACnD,QAAI,YAAY,KAAM,YAAW,IAAI;AAAA,EACvC;AAEA,QAAM,UAAU,CAAC,UAAmB;AAClC,UAAM,MAAM,gBAAgB,KAAK;AACjC,QAAI,WAAW,GAAG,GAAG;AACnB,iBAAW,GAAG;AACd;AAAA,IACF;AACA,UAAM,OAAO,cAAc,KAAK;AAGhC,QAAI,SAAS,wBAAwB,SAAS,uBAAuB;AACnE,aAAO,WAAW,OAAO,aAAa;AAAA,IACxC;AAAA,EAEF;AAEA,QAAM,SAAS,YAAY;AACzB,eAAW,IAAI;AAIf,QAAI,CAAC,GAAG,IAAI,EAAE,SAAS,WAAW;AAChC,aAAO,QAAQ,OAAO,QAAQ;AAC9B;AAAA,IACF;AACA,QAAI,aAAa,UAAa,mBAAmB,IAAI,IAAI,UAAU;AACjE,aAAO,QAAQ,eAAe,QAAQ,QAAQ,CAAC;AAC/C;AAAA,IACF;AACA,QAAI,SAAS,SAAS;AACpB,aAAO,WAAW,OAAO,QAAQ;AACjC;AAAA,IACF;AACA,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,SAAS,SAAS,IAAI;AAC5B,iBAAW,EAAE;AACb,cAAQ,EAAE;AACV,iBAAW,EAAE;AAAA,IACf,SAAS,OAAO;AAEd,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAIA,QAAM,YACJ;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL,MAAK;AAAA,MACL,cAAa;AAAA,MACb,OAAO,OAAO;AAAA,MACd,OAAO;AAAA,MACP,UAAU,KAAK,QAAQ,OAAO;AAAA,MAC9B,OAAO,QAAQ,MAAM;AAAA;AAAA,EACvB;AAGF,SACE,qBAAC,QAAK,IAAQ,WAAU,iBACtB;AAAA,wBAAC,qBAAmB,iBAAO,OAAM;AAAA,IACjC;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,cAAa;AAAA,QACb,OAAO,OAAO;AAAA,QACd,OAAO;AAAA,QACP,UAAU,KAAK,WAAW,UAAU;AAAA,QACpC,OAAO,QAAQ,SAAS;AAAA;AAAA,IAC1B;AAAA,IACC;AAAA;AAAA;AAAA,MAGC,qBAAC,SACE;AAAA;AAAA,QACD;AAAA,UAAC;AAAA;AAAA,YACC,OAAO;AAAA,YACP;AAAA,YACA;AAAA,YACA,OAAO,iBAAiB;AAAA,YACxB,kBAAkB,iBAAiB;AAAA,YACnC,QAAQ,iBAAiB;AAAA;AAAA,QAC3B;AAAA,SACF;AAAA,QAEA;AAAA,IAEF;AAAA,MAAC;AAAA;AAAA,QACC,KAAK;AAAA,QACL,MAAK;AAAA,QACL,cAAa;AAAA,QACb,OAAO,OAAO;AAAA,QACd,OAAO;AAAA,QACP,UAAU,KAAK,WAAW,UAAU;AAAA,QACpC,OAAO,QAAQ,SAAS;AAAA;AAAA,IAC1B;AAAA,IACC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,IAEF,oBAAC,UAAO,SAAS,MAAM,KAAK,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,SAC9E,iBAAO,QACV;AAAA,KACF;AAEJ;AAmBA,SAAS,cAAc,KAA4B;AACjD,QAAM,QAAQ,uBAAuB,KAAK,GAAG;AAC7C,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,mBAAmB,MAAM,CAAC,CAAC,KAAK;AAAA,EACzC,QAAQ;AACN,WAAO,MAAM,CAAC,KAAK;AAAA,EACrB;AACF;AAIA,SAAS,YAAY,QAAwB;AAC3C,SAAO,OAAO,QAAQ,QAAQ,EAAE,EAAE,QAAQ,gBAAgB,KAAK;AACjE;AAEO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AACF,GAeG;AACD,QAAM,SAAS,yBAAyB,aAAa,UAAU;AAK/D,QAAM,YAAY,qBAAqB,iBAAiB,GAAG;AAC3D,QAAM,QAAQ,YAAY,SAAS,WAAW,SAAS,YAAY,UAAU,WAAW,UAAU,OAAO;AACzG,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AACnC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAY3C,QAAM,SAAS,QACV,MAAM,WAAW,gBAAgB,QAAQ,cAAc,MAAM,UAAU,IAAI,QAC5E;AAEJ,SACE,qBAAC,QAAK,IAAQ,WAAU,iBAItB;AAAA,yBAAC,SAAI,WAAU,qDACb;AAAA,0BAAC,qBAAmB,iBAAM;AAAA,MAC1B,oBAAC,QAAK,MAAK,MAAK,MAAM,UAAU,YAAY,WACzC,oBAAU,OAAO,cAAc,OAAO,cACzC;AAAA,OACF;AAAA,IAEC,CAAC,WAAW,CAAC,SACZ,oBAAC,UAAO,SAAS,cAAc,UAAU,MACtC,iBAAO,QACV;AAAA,IAGD,SACC,qBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,SAAI,WAAU,0BAA0B,iBAAO,UAAS;AAAA,MAQxD,gBAAgB;AAAA;AAAA,QAEf,oBAAC,SAAI,gBAAY,MAAC,WAAU,2CACzB,qBACC,SAAS,MAAM,UAAU,IAEzB,oBAAC,UAAO,OAAO,MAAM,YAAY,OAAO,OAAO,OAAO,WAAU,WAAU,GAE9E;AAAA,UAEA,oBAAC,SAAI,gBAAY,MAAC,WAAU,wCAC1B;AAAA,QAAC;AAAA;AAAA,UACC,KAAK,OAAO;AAAA,UACZ,KAAK,6BAA6B,MAAM,KAAK;AAAA,UAC7C,WAAU;AAAA;AAAA,MACZ,GACF;AAAA,MAED,UACC,qBAAC,SAAI,WAAU,aACb;AAAA,4BAAC,SAAI,WAAU,0BAA0B,iBAAO,YAAW;AAAA,QAC3D,qBAAC,SAAI,WAAU,2BAIb;AAAA,8BAAC,UAAK,gBAAY,MAAC,KAAI,OAAM,WAAU,0CACpC,sBAAY,MAAM,GACrB;AAAA,UACA,oBAAC,cAAW,MAAM,QAAQ,OAAO,OAAO,YAAY,MAAK,MAAK,MAAK,SAAQ;AAAA,WAC7E;AAAA,SACF;AAAA,MAEF;AAAA,QAAC;AAAA;AAAA,UACC,oBAAkB;AAAA,UAClB,QAAQ;AAAA,UACR,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,UAAU;AAAA,UACV,WAAW,CAAC,MAAuC;AACjD,gBAAI,EAAE,QAAQ,WAAW,QAAQ,CAAC,MAAM;AACtC,gBAAE,eAAe;AACjB,uBAAS,IAAI;AAAA,YACf;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACA,oBAAC,UAAO,SAAS,MAAM,SAAS,IAAI,GAAG,UAAU,CAAC,QAAQ,MACvD,iBAAO,QACV;AAAA,OACF;AAAA,IAGD,WACC,qBAAC,SAAI,WAAU,yCACb;AAAA,0BAAC,SAAI,WAAU,uBAAuB,iBAAO,gBAAe;AAAA,MAC5D,oBAAC,SAAM,MAAK,YAAW,cAAa,oBAAmB,OAAO,OAAO,UAAU,OAAO,UAAU,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK,GAAG;AAAA,MAC9I;AAAA,QAAC;AAAA;AAAA,UACC,oBAAkB;AAAA,UAClB,QAAQ;AAAA,UACR,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,UAAU;AAAA,UACV,WAAW,CAAC,MAAuC;AACjD,gBAAI,EAAE,QAAQ,WAAW,YAAY,QAAQ,CAAC,MAAM;AAClD,gBAAE,eAAe;AACjB,wBAAU,UAAU,IAAI;AAAA,YAC1B;AAAA,UACF;AAAA;AAAA,MACF;AAAA,MACA,oBAAC,UAAO,SAAQ,UAAS,SAAS,MAAM,UAAU,UAAU,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,MAChG,iBAAO,SACV;AAAA,OACF;AAAA,KAEJ;AAEJ;","names":[]}