@eifi1/ui-kit 0.51.4 → 0.51.6

package/dist/auth/forgot-password-form.js

@@ -73,37 +73,29 @@ function ForgotPasswordForm({
     );
   };
   return /* @__PURE__ */ jsxs("div", { ...rest, "data-state": "form", className: cn("space-y-3", className), children: [
-    /* @__PURE__ */ jsxs(
-      "form",
-      {
-        className: "space-y-3",
-        "aria-labelledby": title === null ? void 0 : headingId,
-        onSubmit: submit,
-        children: [
-          heading,
-          /* @__PURE__ */ jsx("p", { className: INTRO_CLASS, children: labels.intro }),
-          formContent,
-          /* @__PURE__ */ jsx(
-            Input,
-            {
-              type: "email",
-              name: "email",
-              autoComplete: "email",
-              label: labels.email,
-              value: email,
-              onChange: (e) => {
-                setEmail(e.target.value);
-                if (failure) setFailure(null);
-              },
-              readOnly: pending,
-              required: true
-            }
-          ),
-          failure != null && /* @__PURE__ */ jsx(AlertBanner, { tone: "danger", size: "sm", role: "alert", children: failure }),
-          /* @__PURE__ */ jsx(Button, { type: "submit", className: "w-full", pending, children: labels.submit })
-        ]
-      }
-    ),
+    /* @__PURE__ */ jsxs("form", { className: "space-y-3", "aria-labelledby": title === null ? void 0 : headingId, onSubmit: submit, children: [
+      heading,
+      /* @__PURE__ */ jsx("p", { className: INTRO_CLASS, children: labels.intro }),
+      formContent,
+      /* @__PURE__ */ jsx(
+        Input,
+        {
+          type: "email",
+          name: "email",
+          autoComplete: "email",
+          label: labels.email,
+          value: email,
+          onChange: (e) => {
+            setEmail(e.target.value);
+            if (failure) setFailure(null);
+          },
+          readOnly: pending,
+          required: true
+        }
+      ),
+      failure != null && /* @__PURE__ */ jsx(AlertBanner, { tone: "danger", size: "sm", role: "alert", children: failure }),
+      /* @__PURE__ */ jsx(Button, { type: "submit", className: "w-full", pending, children: labels.submit })
+    ] }),
     back
   ] });
 }

package/dist/auth/forgot-password-form.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/forgot-password-form.tsx"],"sourcesContent":["import { useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button } from \"../components/button\";\nimport { Input } from \"../components/input\";\nimport { isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, isThenable, useFocusWhen } from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\nimport { DEFAULT_FORGOT_PASSWORD_LABELS } from \"./forgot-password-form-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the form renders — the `forgotPassword` namespace. keksdose's words\n *  (`auth.forgot.*`), which kastlan took over unchanged. */\nexport interface ForgotPasswordLabels {\n  /** The heading. */\n  title: string;\n  /** Under the heading, before the field. */\n  intro: string;\n  /** The email field's label. */\n  email: string;\n  submit: string;\n  /** The one answer, whatever the server knows — given the address as typed. */\n  sent: (email: string) => string;\n  /** Under it: how long the link lives, and where else to look. */\n  sentHint: string;\n  /** The link back to the sign-in page, on both states. */\n  backToSignIn: string;\n  /** A request that did not go through: a throttle, an outage. Never \"unknown\n   *  address\" — the endpoint does not say. */\n  error: string;\n  /** 0.30.0: the request was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface; the provider's `forgotPassword`, then English, fill\n   *  it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n// Defined in ./forgot-password-form-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_FORGOT_PASSWORD_LABELS };\n\n/* ── The form ────────────────────────────────────────────────────────────── */\n\nexport interface ForgotPasswordFormProps\n  extends Omit<ComponentPropsWithRef<\"div\">, \"onSubmit\" | \"children\" | \"title\"> {\n  /**\n   * The address was submitted, trimmed: send `POST /auth/password-reset/request`.\n   * Resolve when the server answered — whatever it answered: it is `204` whether or not\n   * an account exists. Reject only when the request did not go through (a throttle, an\n   * outage); the form then stays, with the address, and says so. The form never sends a\n   * request itself (§8).\n   */\n  onSubmit: (email: string) => Promise<unknown> | void;\n  /** \"Back to sign in\" — the app's `/login`. Default `/login`. */\n  signInHref?: string;\n  /** The field's start value — the address the sign-in form already had, so someone\n   *  whose password just failed need not type it twice. */\n  defaultEmail?: string;\n  /**\n   * The app's words for a failed request (\"Too many requests — try again in an hour\"),\n   * or `undefined` for the kit's: `rateLimited` for a bare `429` (0.30.0), else `error`.\n   * The same hook as `SignInForm`'s.\n   */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** App content under the intro — a notice, a support address. */\n  formContent?: ReactNode;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it\n   *  in `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<ForgotPasswordLabels>;\n}\n\n/**\n * \"I forgot my password\" for every app (docs/auth-harmonization.md §7): one field, then\n * the same sentence whatever the answer — keksdose's `ForgotPasswordPage`\n * (features/auth/forgot-password-page.tsx), kastlan's copy of it, as one component.\n *\n * **It always ends on the same message**: \"If an account exists for …, the link is on\n * its way.\" The server answers `204` whether or not the address has an account — so the\n * page cannot be used to find out who has one — and the page must not undo that by\n * saying more than the server knows. Worded as a promise (\"we sent you a link\"), a typo\n * would look like a mail-delivery problem and send the person waiting instead of trying\n * their other address (keksdose #198). The address shown is the one they typed, so a\n * typo is visible.\n *\n * The only failure it can show is a request that did not go through (throttled, the\n * server down), never \"unknown address\". §4.5's fallback to a tagged address\n * (`you+kastlan@…` when `you@…` has no account) is the server's and changes nothing here.\n *\n * The submit is not disabled while the field is empty — a browser that autofills\n * withholds the value until the first interaction, and a disabled button would swallow\n * that first click; the field's own `required` answers an empty submit instead. After a\n * submit the confirmation takes focus, because the button that had it is gone with the\n * form.\n */\nexport function ForgotPasswordForm({\n  onSubmit,\n  signInHref = \"/login\",\n  defaultEmail = \"\",\n  describeError,\n  formContent,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: ForgotPasswordFormProps) {\n  const labels = useKitLabels(\"forgotPassword\", DEFAULT_FORGOT_PASSWORD_LABELS, labelsProp);\n  const [email, setEmail] = useState(defaultEmail);\n  const [pending, setPending] = useState(false);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [sentTo, setSentTo] = useState<string | null>(null);\n  const headingId = useId();\n  const sentRef = useRef<HTMLDivElement>(null);\n  useFocusWhen(sentTo !== null, sentRef);\n\n  const heading =\n    title === null ? null : (\n      <Heading id={headingId} className={FORM_HEADING_CLASS}>\n        {title ?? labels.title}\n      </Heading>\n    );\n  const back = (\n    <p className=\"text-center text-sm\">\n      <TextLink href={signInHref} tone=\"primary\">\n        {labels.backToSignIn}\n      </TextLink>\n    </p>\n  );\n\n  if (sentTo !== null) {\n    return (\n      <div {...rest} data-state=\"sent\" className={cn(\"space-y-3\", className)}>\n        {heading}\n        <OutcomeMessage icon={<MailCheck className=\"text-success\" />} focusRef={sentRef}>\n          <p className={INTRO_CLASS}>{labels.sent(sentTo)}</p>\n          <p className=\"text-xs text-muted\">{labels.sentHint}</p>\n        </OutcomeMessage>\n        {back}\n      </div>\n    );\n  }\n\n  // The app's words first, then the throttle's, then the kit's catch-all.\n  const failureFor = (error: unknown): ReactNode =>\n    describeError?.(error) ??\n    (isRateLimited(error)\n      ? (labels.rateLimited ?? DEFAULT_FORGOT_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))\n      : labels.error);\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    const address = email.trim();\n    if (pending || address === \"\") return;\n    setFailure(null);\n    let result: unknown;\n    try {\n      result = onSubmit(address);\n    } catch (error) {\n      setFailure(failureFor(error));\n      return;\n    }\n    if (!isThenable(result)) {\n      setSentTo(address);\n      return;\n    }\n    setPending(true);\n    result.then(\n      () => {\n        setPending(false);\n        setSentTo(address);\n      },\n      (error: unknown) => {\n        setPending(false);\n        setFailure(failureFor(error));\n      },\n    );\n  };\n\n  return (\n    <div {...rest} data-state=\"form\" className={cn(\"space-y-3\", className)}>\n      <form\n        className=\"space-y-3\"\n        aria-labelledby={title === null ? undefined : headingId}\n        onSubmit={submit}\n      >\n        {heading}\n        <p className={INTRO_CLASS}>{labels.intro}</p>\n        {formContent}\n        <Input\n          type=\"email\"\n          name=\"email\"\n          autoComplete=\"email\"\n          label={labels.email}\n          value={email}\n          onChange={(e) => {\n            setEmail(e.target.value);\n            if (failure) setFailure(null);\n          }}\n          readOnly={pending}\n          required\n        />\n        {failure != null && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" className=\"w-full\" pending={pending}>\n          {labels.submit}\n        </Button>\n      </form>\n      {back}\n    </div>\n  );\n}\n"],"mappings":";AA4HM,cAgBE,YAhBF;AA5HN,SAAS,OAAO,QAAQ,gBAAgB;AAExC,SAAS,iBAAiB;AAC1B,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,eAAe,yBAAyB;AACjD,SAAS,oBAAoB,aAAa,gBAAgB,YAAY,oBAAoB;AAE1F,SAAS,sCAAsC;AAyFxC,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,kBAAkB,gCAAgC,UAAU;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,QAAM,YAAY,MAAM;AACxB,QAAM,UAAU,OAAuB,IAAI;AAC3C,eAAa,WAAW,MAAM,OAAO;AAErC,QAAM,UACJ,UAAU,OAAO,OACf,oBAAC,WAAQ,IAAI,WAAW,WAAW,oBAChC,mBAAS,OAAO,OACnB;AAEJ,QAAM,OACJ,oBAAC,OAAE,WAAU,uBACX,8BAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,cACV,GACF;AAGF,MAAI,WAAW,MAAM;AACnB,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GAClE;AAAA;AAAA,MACD,qBAAC,kBAAe,MAAM,oBAAC,aAAU,WAAU,gBAAe,GAAI,UAAU,SACtE;AAAA,4BAAC,OAAE,WAAW,aAAc,iBAAO,KAAK,MAAM,GAAE;AAAA,QAChD,oBAAC,OAAE,WAAU,sBAAsB,iBAAO,UAAS;AAAA,SACrD;AAAA,MACC;AAAA,OACH;AAAA,EAEJ;AAGA,QAAM,aAAa,CAAC,UAClB,gBAAgB,KAAK,MACpB,cAAc,KAAK,KACf,OAAO,eAAe,+BAA+B,aAAa,kBAAkB,KAAK,CAAC,IAC3F,OAAO;AAEb,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,WAAW,YAAY,GAAI;AAC/B,eAAW,IAAI;AACf,QAAI;AACJ,QAAI;AACF,eAAS,SAAS,OAAO;AAAA,IAC3B,SAAS,OAAO;AACd,iBAAW,WAAW,KAAK,CAAC;AAC5B;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,gBAAU,OAAO;AACjB;AAAA,IACF;AACA,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,mBAAW,KAAK;AAChB,kBAAU,OAAO;AAAA,MACnB;AAAA,MACA,CAAC,UAAmB;AAClB,mBAAW,KAAK;AAChB,mBAAW,WAAW,KAAK,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GACnE;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,WAAU;AAAA,QACV,mBAAiB,UAAU,OAAO,SAAY;AAAA,QAC9C,UAAU;AAAA,QAET;AAAA;AAAA,UACD,oBAAC,OAAE,WAAW,aAAc,iBAAO,OAAM;AAAA,UACxC;AAAA,UACD;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,MAAK;AAAA,cACL,cAAa;AAAA,cACb,OAAO,OAAO;AAAA,cACd,OAAO;AAAA,cACP,UAAU,CAAC,MAAM;AACf,yBAAS,EAAE,OAAO,KAAK;AACvB,oBAAI,QAAS,YAAW,IAAI;AAAA,cAC9B;AAAA,cACA,UAAU;AAAA,cACV,UAAQ;AAAA;AAAA,UACV;AAAA,UACC,WAAW,QACV,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,UAEF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,SACtC,iBAAO,QACV;AAAA;AAAA;AAAA,IACF;AAAA,IACC;AAAA,KACH;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/auth/forgot-password-form.tsx"],"sourcesContent":["import { useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { MailCheck } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button } from \"../components/button\";\nimport { Input } from \"../components/input\";\nimport { isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { FORM_HEADING_CLASS, INTRO_CLASS, OutcomeMessage, isThenable, useFocusWhen } from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\nimport { DEFAULT_FORGOT_PASSWORD_LABELS } from \"./forgot-password-form-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the form renders — the `forgotPassword` namespace. keksdose's words\n *  (`auth.forgot.*`), which kastlan took over unchanged. */\nexport interface ForgotPasswordLabels {\n  /** The heading. */\n  title: string;\n  /** Under the heading, before the field. */\n  intro: string;\n  /** The email field's label. */\n  email: string;\n  submit: string;\n  /** The one answer, whatever the server knows — given the address as typed. */\n  sent: (email: string) => string;\n  /** Under it: how long the link lives, and where else to look. */\n  sentHint: string;\n  /** The link back to the sign-in page, on both states. */\n  backToSignIn: string;\n  /** A request that did not go through: a throttle, an outage. Never \"unknown\n   *  address\" — the endpoint does not say. */\n  error: string;\n  /** 0.30.0: the request was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface; the provider's `forgotPassword`, then English, fill\n   *  it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n// Defined in ./forgot-password-form-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_FORGOT_PASSWORD_LABELS };\n\n/* ── The form ────────────────────────────────────────────────────────────── */\n\nexport interface ForgotPasswordFormProps extends Omit<ComponentPropsWithRef<\"div\">, \"onSubmit\" | \"children\" | \"title\"> {\n  /**\n   * The address was submitted, trimmed: send `POST /auth/password-reset/request`.\n   * Resolve when the server answered — whatever it answered: it is `204` whether or not\n   * an account exists. Reject only when the request did not go through (a throttle, an\n   * outage); the form then stays, with the address, and says so. The form never sends a\n   * request itself (§8).\n   */\n  onSubmit: (email: string) => Promise<unknown> | void;\n  /** \"Back to sign in\" — the app's `/login`. Default `/login`. */\n  signInHref?: string;\n  /** The field's start value — the address the sign-in form already had, so someone\n   *  whose password just failed need not type it twice. */\n  defaultEmail?: string;\n  /**\n   * The app's words for a failed request (\"Too many requests — try again in an hour\"),\n   * or `undefined` for the kit's: `rateLimited` for a bare `429` (0.30.0), else `error`.\n   * The same hook as `SignInForm`'s.\n   */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** App content under the intro — a notice, a support address. */\n  formContent?: ReactNode;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it\n   *  in `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<ForgotPasswordLabels>;\n}\n\n/**\n * \"I forgot my password\" for every app (docs/auth-harmonization.md §7): one field, then\n * the same sentence whatever the answer — keksdose's `ForgotPasswordPage`\n * (features/auth/forgot-password-page.tsx), kastlan's copy of it, as one component.\n *\n * **It always ends on the same message**: \"If an account exists for …, the link is on\n * its way.\" The server answers `204` whether or not the address has an account — so the\n * page cannot be used to find out who has one — and the page must not undo that by\n * saying more than the server knows. Worded as a promise (\"we sent you a link\"), a typo\n * would look like a mail-delivery problem and send the person waiting instead of trying\n * their other address (keksdose #198). The address shown is the one they typed, so a\n * typo is visible.\n *\n * The only failure it can show is a request that did not go through (throttled, the\n * server down), never \"unknown address\". §4.5's fallback to a tagged address\n * (`you+kastlan@…` when `you@…` has no account) is the server's and changes nothing here.\n *\n * The submit is not disabled while the field is empty — a browser that autofills\n * withholds the value until the first interaction, and a disabled button would swallow\n * that first click; the field's own `required` answers an empty submit instead. After a\n * submit the confirmation takes focus, because the button that had it is gone with the\n * form.\n */\nexport function ForgotPasswordForm({\n  onSubmit,\n  signInHref = \"/login\",\n  defaultEmail = \"\",\n  describeError,\n  formContent,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: ForgotPasswordFormProps) {\n  const labels = useKitLabels(\"forgotPassword\", DEFAULT_FORGOT_PASSWORD_LABELS, labelsProp);\n  const [email, setEmail] = useState(defaultEmail);\n  const [pending, setPending] = useState(false);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const [sentTo, setSentTo] = useState<string | null>(null);\n  const headingId = useId();\n  const sentRef = useRef<HTMLDivElement>(null);\n  useFocusWhen(sentTo !== null, sentRef);\n\n  const heading =\n    title === null ? null : (\n      <Heading id={headingId} className={FORM_HEADING_CLASS}>\n        {title ?? labels.title}\n      </Heading>\n    );\n  const back = (\n    <p className=\"text-center text-sm\">\n      <TextLink href={signInHref} tone=\"primary\">\n        {labels.backToSignIn}\n      </TextLink>\n    </p>\n  );\n\n  if (sentTo !== null) {\n    return (\n      <div {...rest} data-state=\"sent\" className={cn(\"space-y-3\", className)}>\n        {heading}\n        <OutcomeMessage icon={<MailCheck className=\"text-success\" />} focusRef={sentRef}>\n          <p className={INTRO_CLASS}>{labels.sent(sentTo)}</p>\n          <p className=\"text-xs text-muted\">{labels.sentHint}</p>\n        </OutcomeMessage>\n        {back}\n      </div>\n    );\n  }\n\n  // The app's words first, then the throttle's, then the kit's catch-all.\n  const failureFor = (error: unknown): ReactNode =>\n    describeError?.(error) ??\n    (isRateLimited(error)\n      ? (labels.rateLimited ?? DEFAULT_FORGOT_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))\n      : labels.error);\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    const address = email.trim();\n    if (pending || address === \"\") return;\n    setFailure(null);\n    let result: unknown;\n    try {\n      result = onSubmit(address);\n    } catch (error) {\n      setFailure(failureFor(error));\n      return;\n    }\n    if (!isThenable(result)) {\n      setSentTo(address);\n      return;\n    }\n    setPending(true);\n    result.then(\n      () => {\n        setPending(false);\n        setSentTo(address);\n      },\n      (error: unknown) => {\n        setPending(false);\n        setFailure(failureFor(error));\n      },\n    );\n  };\n\n  return (\n    <div {...rest} data-state=\"form\" className={cn(\"space-y-3\", className)}>\n      <form className=\"space-y-3\" aria-labelledby={title === null ? undefined : headingId} onSubmit={submit}>\n        {heading}\n        <p className={INTRO_CLASS}>{labels.intro}</p>\n        {formContent}\n        <Input\n          type=\"email\"\n          name=\"email\"\n          autoComplete=\"email\"\n          label={labels.email}\n          value={email}\n          onChange={(e) => {\n            setEmail(e.target.value);\n            if (failure) setFailure(null);\n          }}\n          readOnly={pending}\n          required\n        />\n        {failure != null && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" className=\"w-full\" pending={pending}>\n          {labels.submit}\n        </Button>\n      </form>\n      {back}\n    </div>\n  );\n}\n"],"mappings":";AA2HM,cAgBE,YAhBF;AA3HN,SAAS,OAAO,QAAQ,gBAAgB;AAExC,SAAS,iBAAiB;AAC1B,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,eAAe,yBAAyB;AACjD,SAAS,oBAAoB,aAAa,gBAAgB,YAAY,oBAAoB;AAE1F,SAAS,sCAAsC;AAwFxC,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA4B;AAC1B,QAAM,SAAS,aAAa,kBAAkB,gCAAgC,UAAU;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,QAAM,YAAY,MAAM;AACxB,QAAM,UAAU,OAAuB,IAAI;AAC3C,eAAa,WAAW,MAAM,OAAO;AAErC,QAAM,UACJ,UAAU,OAAO,OACf,oBAAC,WAAQ,IAAI,WAAW,WAAW,oBAChC,mBAAS,OAAO,OACnB;AAEJ,QAAM,OACJ,oBAAC,OAAE,WAAU,uBACX,8BAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,cACV,GACF;AAGF,MAAI,WAAW,MAAM;AACnB,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GAClE;AAAA;AAAA,MACD,qBAAC,kBAAe,MAAM,oBAAC,aAAU,WAAU,gBAAe,GAAI,UAAU,SACtE;AAAA,4BAAC,OAAE,WAAW,aAAc,iBAAO,KAAK,MAAM,GAAE;AAAA,QAChD,oBAAC,OAAE,WAAU,sBAAsB,iBAAO,UAAS;AAAA,SACrD;AAAA,MACC;AAAA,OACH;AAAA,EAEJ;AAGA,QAAM,aAAa,CAAC,UAClB,gBAAgB,KAAK,MACpB,cAAc,KAAK,KACf,OAAO,eAAe,+BAA+B,aAAa,kBAAkB,KAAK,CAAC,IAC3F,OAAO;AAEb,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,WAAW,YAAY,GAAI;AAC/B,eAAW,IAAI;AACf,QAAI;AACJ,QAAI;AACF,eAAS,SAAS,OAAO;AAAA,IAC3B,SAAS,OAAO;AACd,iBAAW,WAAW,KAAK,CAAC;AAC5B;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,gBAAU,OAAO;AACjB;AAAA,IACF;AACA,eAAW,IAAI;AACf,WAAO;AAAA,MACL,MAAM;AACJ,mBAAW,KAAK;AAChB,kBAAU,OAAO;AAAA,MACnB;AAAA,MACA,CAAC,UAAmB;AAClB,mBAAW,KAAK;AAChB,mBAAW,WAAW,KAAK,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,GAAG,aAAa,SAAS,GACnE;AAAA,yBAAC,UAAK,WAAU,aAAY,mBAAiB,UAAU,OAAO,SAAY,WAAW,UAAU,QAC5F;AAAA;AAAA,MACD,oBAAC,OAAE,WAAW,aAAc,iBAAO,OAAM;AAAA,MACxC;AAAA,MACD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,cAAa;AAAA,UACb,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,UAAU,CAAC,MAAM;AACf,qBAAS,EAAE,OAAO,KAAK;AACvB,gBAAI,QAAS,YAAW,IAAI;AAAA,UAC9B;AAAA,UACA,UAAU;AAAA,UACV,UAAQ;AAAA;AAAA,MACV;AAAA,MACC,WAAW,QACV,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,MAEF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,SACtC,iBAAO,QACV;AAAA,OACF;AAAA,IACC;AAAA,KACH;AAEJ;","names":[]}

package/dist/auth/register-form.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/register-form.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { KIT_LANGUAGES, resolveLanguage } from \"../i18n/languages\";\nimport type { KitLanguageCode } from \"../i18n/languages\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasContent } from \"../lib/presence\";\nimport { LanguageSelect } from \"../components/language-select\";\nimport { LegalAcceptCheckbox } from \"../components/legal-page\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button } from \"../components/button\";\nimport { Input } from \"../components/input\";\nimport { authErrorCode, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { emailParts, taggedEmail } from \"./email-tag\";\nimport { newPasswordProblem, personNameOk, PERSON_NAME_MAX_LENGTH } from \"./form-rules\";\nimport { NewPasswordFields } from \"./new-password-fields\";\nimport { DEFAULT_REGISTER_LABELS } from \"./register-form-labels\";\n\n/** What `RegisterForm` hands `onSubmit` — the core of `POST /auth/register` (§4.2). The\n *  app adds its own fields (kastlan's company, keksdose's currency) and the\n *  `invite_token` it read from the URL. */\nexport interface RegisterValues {\n  /** Trimmed, 1–120 characters. */\n  firstName: string;\n  /** Trimmed, 1–120 characters. */\n  lastName: string;\n  /** Trimmed. Lower-casing is the server's (§3.1); a tag is never stripped (§4.5). */\n  email: string;\n  /** As typed: at least 8 characters, at most 72 bytes. */\n  password: string;\n  /** The language picked — one of `languages` — for every mail to the user (§3.1). */\n  locale: KitLanguageCode;\n}\n\n/**\n * Every string `RegisterForm` renders — the `register` namespace of `<UiKitProvider\n * labels>`, overridable per instance through `labels`. keksdose's words where it has\n * them. The terms checkbox speaks `legal.accept`, the strength meter `passwordStrength`.\n */\nexport interface RegisterLabels {\n  firstName: string;\n  lastName: string;\n  email: string;\n  /** The address-tag button (§4.5), given the exact address it would use — and, with an\n   *  invitation, the button back to the invited address. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** Under an invited (read-only) email field. */\n  invitedEmailHint: string;\n  /** Once the invitee took the tagged address: it is not the invited one, so it is\n   *  confirmed by a mail of its own (§4.3). */\n  invitedTagNote: string;\n  password: string;\n  confirmPassword: string;\n  passwordMismatch: string;\n  language: string;\n  /** The submit button. */\n  submit: string;\n  /** Before the link to `signInHref`. */\n  haveAccount: string;\n  /** The link to `signInHref`. */\n  signIn: string;\n  /** `email_taken`, under the email field. */\n  emailTaken: string;\n  /** `registration_closed` — the gate refused the address (§4.3). */\n  registrationClosed: string;\n  /** `invitation_invalid` — the invitation link is unknown or spent. */\n  invitationInvalid: string;\n  /** `invitation_expired`. */\n  invitationExpired: string;\n  /** Any other failure. */\n  failed: string;\n  /** 0.30.0: the request was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface (an annotated call site must keep compiling); the\n   *  provider's `register`, then English, fill it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n// Defined in ./register-form-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_REGISTER_LABELS };\n\nexport interface RegisterFormProps extends Omit<ComponentPropsWithRef<\"div\">, \"onSubmit\" | \"children\"> {\n  /**\n   * The form was submitted with everything filled in. Send it (`POST /auth/register`,\n   * §4.2) and resolve once the user is signed in, or reject with the client's error:\n   * `email_taken` shows under the email field, `registration_closed` and the\n   * invitation codes above the button, anything else as \"Registration failed\". The form\n   * never sends a request itself (§8): keksdose must see the password on its way.\n   *\n   * On resolve the form stays busy while the app navigates.\n   */\n  onSubmit: (values: RegisterValues) => Promise<unknown>;\n  /**\n   * The app's address tag (`\"kastlan\"`, §4.5). Once the email is plausible, a button\n   * under it offers the tagged address — \"Use ada+kastlan@example.com\" — with a line on\n   * why; one click puts it in the field. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /**\n   * The address of the invitation this sign-up comes from (§4.4): the field starts with\n   * it and is read-only. With `emailTag`, the invitee may still take the tagged form of\n   * it — the server accepts exactly that variant — and go back.\n   */\n  invitedEmail?: string;\n  /**\n   * 0.30.0: an address to start with that stays EDITABLE, with the `+tag` suggestion still\n   * offered — for a link anyone can build (keksdose's token-free `/register?email=…`\n   * beta link, kept while an app moves to invitations). Unlike `invitedEmail` it proves\n   * nothing, so it locks nothing. `invitedEmail` wins when both are given.\n   */\n  defaultEmail?: string;\n  /**\n   * The language field's value — controlled. Pass the app's UI language\n   * (`i18n.resolvedLanguage`) with `onLocaleChange` switching it, and the field IS the\n   * app's language switch, with no copy of its own to drift from a second switcher on\n   * the page (keksdose's register page has one in its header). Any tag; it shows (and\n   * submits) the offered code it resolves to. Left out, the form keeps its own, starting\n   * from `defaultLocale`, else the provider's language, else the browser's.\n   */\n  locale?: string;\n  /** The uncontrolled language field's start value. */\n  defaultLocale?: string;\n  /** A language was picked. */\n  onLocaleChange?: (code: KitLanguageCode) => void;\n  /** The languages to offer, in order. Default all seven. */\n  languages?: readonly KitLanguageCode[];\n  /**\n   * The app's own language field in place of the kit's select — keksdose's\n   * `LanguageSetting` bound to its i18n. `null` draws none (an app with one language);\n   * the submitted `locale` is then `locale`'s.\n   */\n  languageField?: ReactNode;\n  /** Above the form — keksdose's closed-beta banner. */\n  aboveForm?: ReactNode;\n  /** Under the email field and its tag offer — an app's own hint. */\n  underEmail?: ReactNode;\n  /** The app's sign-up fields (§4.1 item 7): kastlan's Company, keksdose's reporting\n   *  currency. Their values are the app's; say whether they are complete with\n   *  `appFieldsComplete`. */\n  appFields?: ReactNode;\n  /** After the app fields, before the terms — keksdose's privacy-mode note. */\n  afterFields?: ReactNode;\n  /** Whether the app fields are filled in as required — kastlan's Company without an\n   *  invitation. The submit waits for it. Default `true`. */\n  appFieldsComplete?: boolean;\n  /** The terms checkbox's links. Default `/terms` and `/privacy`. */\n  termsHref?: string;\n  privacyHref?: string;\n  /** \"Already have an account? Sign in\" goes here — `/login`. Left out, no line. */\n  signInHref?: string;\n  /** The app's own words for a failure the kit cannot know (the device offline, a\n   *  throttle with its wait), or `undefined` for the kit's. Asked first, for every\n   *  failure; a bare `429` needs none since 0.30.0 — the kit says `rateLimited`. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: LabelOverride<RegisterLabels>;\n}\n\nconst ALL_CODES: readonly KitLanguageCode[] = KIT_LANGUAGES.map((language) => language.code);\n\n/** The browser's languages, in its order — absent outside a browser. */\nfunction browserLanguages(): readonly string[] {\n  if (typeof navigator === \"undefined\") return [];\n  return navigator.languages?.length ? navigator.languages : [navigator.language];\n}\n\ntype Busy = \"sending\" | \"done\" | null;\n\n/**\n * Sign-up for every app (docs/auth-harmonization.md §4.1, §8): first and last name,\n * email with the address-tag offer, password with the strength meter and its\n * confirmation, language, the app's own fields in a slot, and the terms. keksdose's\n * `RegisterPage` (features/auth/register-page.tsx) with its slots made props.\n *\n * **It never sends a request.** `onSubmit` gets the values; what the request carries\n * besides them (kastlan's company, keksdose's currency, the `invite_token`) is the\n * app's, as are the role and the associations, which never come from the form (§4.3).\n *\n * **The submit waits for a complete form**: both names (1–120 characters after\n * trimming), a plausible address, a password of at least 8 characters and at most 72\n * bytes, the same password again, the terms ticked, and `appFieldsComplete`. Nothing\n * else is a rule — the strength checklist is advice (keksdose #124), and the kit adds\n * none of its own (§8). So there is never a failed attempt for a missing field, and no\n * field error to show for one.\n *\n * **The address tag** (§4.5) is offered under the email field as one click with the\n * exact result on the button, never applied: sub-addressing is a convention the\n * receiving server may or may not implement, and a silent rewrite would send the\n * verification mail down a path nobody checked. With an invitation the field is fixed\n * to the invited address; the invitee may still take its tagged form, and is told it\n * will be confirmed by a mail of its own (§4.3).\n *\n * **Refusals** are read by code ({@link authErrorCode}): `email_taken` under the email\n * field, which takes the focus; `registration_closed`, `invitation_invalid` and\n * `invitation_expired` above the button; anything else as \"Registration failed\", unless\n * `describeError` has the app's words.\n *\n * Laid out for a 390 px phone: the names sit side by side only where the form is at\n * least 20rem wide (a container query), which the narrow `AuthLayout` card is on a\n * desktop and a phone is not.\n */\nexport function RegisterForm({\n  onSubmit,\n  emailTag,\n  invitedEmail,\n  defaultEmail,\n  locale: localeProp,\n  defaultLocale,\n  onLocaleChange,\n  languages = ALL_CODES,\n  languageField,\n  aboveForm,\n  underEmail,\n  appFields,\n  afterFields,\n  appFieldsComplete = true,\n  termsHref,\n  privacyHref,\n  signInHref,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: RegisterFormProps) {\n  const labels = useKitLabels(\"register\", DEFAULT_REGISTER_LABELS, labelsProp);\n  const kitLocale = useKitLocale();\n  const invited = invitedEmail !== undefined;\n  const [firstName, setFirstName] = useState(\"\");\n  const [lastName, setLastName] = useState(\"\");\n  const [email, setEmail] = useState(invitedEmail ?? defaultEmail ?? \"\");\n  const [password, setPassword] = useState(\"\");\n  const [confirm, setConfirm] = useState(\"\");\n  const [ownLocale, setOwnLocale] = useState<string>(\n    () => defaultLocale ?? resolveLanguage([kitLocale, ...browserLanguages()], languages),\n  );\n  const [accepted, setAccepted] = useState(false);\n  const [busy, setBusy] = useState<Busy>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const emailRef = useRef<HTMLInputElement>(null);\n  const tagHintId = useId();\n\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // What the field shows is what is submitted: the offered code the value resolves to.\n  const locale = resolveLanguage([localeProp ?? ownLocale], languages);\n  const changeLocale = (code: KitLanguageCode) => {\n    if (localeProp === undefined) setOwnLocale(code);\n    onLocaleChange?.(code);\n  };\n\n  const working = busy !== null;\n  const suggestion = emailTag ? taggedEmail(email, emailTag) : null;\n  // The invitee took the tagged address: offer the way back to the invited one.\n  const backToInvited =\n    invitedEmail !== undefined && email.trim() !== invitedEmail.trim() ? invitedEmail.trim() : null;\n  const canSubmit =\n    personNameOk(firstName) &&\n    personNameOk(lastName) &&\n    emailParts(email) !== null &&\n    newPasswordProblem(password, confirm) === null &&\n    accepted &&\n    appFieldsComplete;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: RegisterValues = {\n      firstName: firstName.trim(),\n      lastName: lastName.trim(),\n      email: email.trim(),\n      password,\n      locale,\n    };\n    setBusy(\"sending\");\n    setFailure(null);\n    setTaken(null);\n    let result: Promise<unknown>;\n    try {\n      result = Promise.resolve(onSubmit(values));\n    } catch (error) {\n      result = Promise.reject(error);\n    }\n    result.then(\n      () => {\n        if (mounted.current) setBusy(\"done\");\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error);\n        const code = authErrorCode(error);\n        if (code === \"email_taken\" && !hasContent(own)) {\n          setTaken(values.email);\n          emailRef.current?.focus();\n          return;\n        }\n        setFailure(\n          hasContent(own)\n            ? own\n            : isRateLimited(error)\n              ? (labels.rateLimited ?? DEFAULT_REGISTER_LABELS.rateLimited)(retryAfterSeconds(error))\n              : code === \"registration_closed\"\n              ? labels.registrationClosed\n              : code === \"invitation_invalid\"\n                ? labels.invitationInvalid\n                : code === \"invitation_expired\"\n                  ? labels.invitationExpired\n                  : labels.failed,\n        );\n      },\n    );\n  };\n\n  return (\n    <div {...rest} className={cn(\"@container space-y-4\", className)}>\n      {aboveForm}\n      <form className=\"space-y-3\" noValidate onSubmit={submit}>\n        <div className=\"grid gap-3 @xs:grid-cols-2\">\n          <Input\n            name=\"given-name\"\n            autoComplete=\"given-name\"\n            label={labels.firstName}\n            value={firstName}\n            onChange={(e) => setFirstName(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={working}\n            required\n          />\n          <Input\n            name=\"family-name\"\n            autoComplete=\"family-name\"\n            label={labels.lastName}\n            value={lastName}\n            onChange={(e) => setLastName(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={working}\n            required\n          />\n        </div>\n\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.email}\n            value={email}\n            onChange={(e) => setEmail(e.target.value)}\n            readOnly={invited || working}\n            hint={invited ? labels.invitedEmailHint : undefined}\n            error={taken !== null && taken === email.trim() ? labels.emailTaken : undefined}\n            required\n          />\n          {/* The tag, offered rather than applied (§4.5): one click, the exact address\n              on the button, reversible by typing — or, invited, by the button back. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-muted\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n          {backToInvited !== null && (\n            <p className=\"mt-1 text-xs text-muted\">\n              <span>{labels.invitedTagNote}</span>{\" \"}\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                onClick={() => setEmail(backToInvited)}\n              >\n                {labels.emailTagUse(backToInvited)}\n              </Button>\n            </p>\n          )}\n          {underEmail}\n        </div>\n\n        <NewPasswordFields\n          password={password}\n          confirm={confirm}\n          onPasswordChange={setPassword}\n          onConfirmChange={setConfirm}\n          busy={working}\n          text={{ password: labels.password, confirm: labels.confirmPassword, mismatch: labels.passwordMismatch }}\n        />\n\n        {languageField === undefined ? (\n          <LanguageSelect\n            name=\"locale\"\n            label={labels.language}\n            value={locale}\n            codes={languages}\n            onChange={changeLocale}\n            disabled={working}\n          />\n        ) : (\n          languageField\n        )}\n\n        {appFields}\n        {afterFields}\n\n        {/* The kit's terms checkbox (legal contract §3.4). Never an error: an unticked\n            box keeps the submit disabled, so there is no failed attempt to explain. */}\n        <LegalAcceptCheckbox\n          checked={accepted}\n          onCheckedChange={setAccepted}\n          termsHref={termsHref}\n          privacyHref={privacyHref}\n          disabled={working}\n        />\n\n        {hasContent(failure) && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n\n        <Button type=\"submit\" className=\"w-full\" disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n      {signInHref !== undefined && (\n        <p className=\"text-center text-sm text-secondary\">\n          {labels.haveAccount}{\" \"}\n          <TextLink href={signInHref} tone=\"primary\">\n            {labels.signIn}\n          </TextLink>\n        </p>\n      )}\n    </div>\n  );\n}\n"],"mappings":";AAwUQ,SACE,KADF;AAxUR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAGnD,SAAS,cAAc,oBAAwC;AAC/D,SAAS,eAAe,uBAAuB;AAE/C,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,eAAe,eAAe,yBAAyB;AAChE,SAAS,YAAY,mBAAmB;AACxC,SAAS,oBAAoB,cAAc,8BAA8B;AACzE,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AA+IxC,MAAM,YAAwC,cAAc,IAAI,CAAC,aAAa,SAAS,IAAI;AAG3F,SAAS,mBAAsC;AAC7C,MAAI,OAAO,cAAc,YAAa,QAAO,CAAC;AAC9C,SAAO,UAAU,WAAW,SAAS,UAAU,YAAY,CAAC,UAAU,QAAQ;AAChF;AAqCO,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAoB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAsB;AACpB,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,YAAY,aAAa;AAC/B,QAAM,UAAU,iBAAiB;AACjC,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,EAAE;AAC7C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,gBAAgB,gBAAgB,EAAE;AACrE,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AACzC,QAAM,CAAC,WAAW,YAAY,IAAI;AAAA,IAChC,MAAM,iBAAiB,gBAAgB,CAAC,WAAW,GAAG,iBAAiB,CAAC,GAAG,SAAS;AAAA,EACtF;AACA,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAe,IAAI;AAE3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,YAAY,MAAM;AAExB,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAGL,QAAM,SAAS,gBAAgB,CAAC,cAAc,SAAS,GAAG,SAAS;AACnE,QAAM,eAAe,CAAC,SAA0B;AAC9C,QAAI,eAAe,OAAW,cAAa,IAAI;AAC/C,qBAAiB,IAAI;AAAA,EACvB;AAEA,QAAM,UAAU,SAAS;AACzB,QAAM,aAAa,WAAW,YAAY,OAAO,QAAQ,IAAI;AAE7D,QAAM,gBACJ,iBAAiB,UAAa,MAAM,KAAK,MAAM,aAAa,KAAK,IAAI,aAAa,KAAK,IAAI;AAC7F,QAAM,YACJ,aAAa,SAAS,KACtB,aAAa,QAAQ,KACrB,WAAW,KAAK,MAAM,QACtB,mBAAmB,UAAU,OAAO,MAAM,QAC1C,YACA;AAEF,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAAyB;AAAA,MAC7B,WAAW,UAAU,KAAK;AAAA,MAC1B,UAAU,SAAS,KAAK;AAAA,MACxB,OAAO,MAAM,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AACA,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACJ,QAAI;AACF,eAAS,QAAQ,QAAQ,SAAS,MAAM,CAAC;AAAA,IAC3C,SAAS,OAAO;AACd,eAAS,QAAQ,OAAO,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,QAAQ,QAAS,SAAQ,MAAM;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,KAAK;AACjC,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,iBAAiB,CAAC,WAAW,GAAG,GAAG;AAC9C,mBAAS,OAAO,KAAK;AACrB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AACA;AAAA,UACE,WAAW,GAAG,IACV,MACA,cAAc,KAAK,KAChB,OAAO,eAAe,wBAAwB,aAAa,kBAAkB,KAAK,CAAC,IACpF,SAAS,wBACT,OAAO,qBACP,SAAS,uBACP,OAAO,oBACP,SAAS,uBACP,OAAO,oBACP,OAAO;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,wBAAwB,SAAS,GAC3D;AAAA;AAAA,IACD,qBAAC,UAAK,WAAU,aAAY,YAAU,MAAC,UAAU,QAC/C;AAAA,2BAAC,SAAI,WAAU,8BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,aAAa,EAAE,OAAO,KAAK;AAAA,YAC5C,WAAW;AAAA,YACX,UAAU;AAAA,YACV,UAAQ;AAAA;AAAA,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,WAAW;AAAA,YACX,UAAU;AAAA,YACV,UAAQ;AAAA;AAAA,QACV;AAAA,SACF;AAAA,MAEA,qBAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,YACxC,UAAU,WAAW;AAAA,YACrB,MAAM,UAAU,OAAO,mBAAmB;AAAA,YAC1C,OAAO,UAAU,QAAQ,UAAU,MAAM,KAAK,IAAI,OAAO,aAAa;AAAA,YACtE,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,2BACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,SAAS,UAAU;AAAA,cAEjC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,QAED,kBAAkB,QACjB,qBAAC,OAAE,WAAU,2BACX;AAAA,8BAAC,UAAM,iBAAO,gBAAe;AAAA,UAAQ;AAAA,UACrC;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,SAAS,MAAM,SAAS,aAAa;AAAA,cAEpC,iBAAO,YAAY,aAAa;AAAA;AAAA,UACnC;AAAA,WACF;AAAA,QAED;AAAA,SACH;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA,kBAAkB;AAAA,UAClB,iBAAiB;AAAA,UACjB,MAAM;AAAA,UACN,MAAM,EAAE,UAAU,OAAO,UAAU,SAAS,OAAO,iBAAiB,UAAU,OAAO,iBAAiB;AAAA;AAAA,MACxG;AAAA,MAEC,kBAAkB,SACjB;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,OAAO;AAAA,UACP,UAAU;AAAA,UACV,UAAU;AAAA;AAAA,MACZ,IAEA;AAAA,MAGD;AAAA,MACA;AAAA,MAID;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,iBAAiB;AAAA,UACjB;AAAA,UACA;AAAA,UACA,UAAU;AAAA;AAAA,MACZ;AAAA,MAEC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,MAGF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SACjF,iBAAO,QACV;AAAA,OACF;AAAA,IACC,eAAe,UACd,qBAAC,OAAE,WAAU,sCACV;AAAA,aAAO;AAAA,MAAa;AAAA,MACrB,oBAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,QACV;AAAA,OACF;AAAA,KAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/auth/register-form.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\n\nimport { useKitLabels, useKitLocale, type LabelOverride } from \"../i18n/kit-labels\";\nimport { KIT_LANGUAGES, resolveLanguage } from \"../i18n/languages\";\nimport type { KitLanguageCode } from \"../i18n/languages\";\nimport { cn } from \"../lib/cn\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { hasContent } from \"../lib/presence\";\nimport { LanguageSelect } from \"../components/language-select\";\nimport { LegalAcceptCheckbox } from \"../components/legal-page\";\nimport { TextLink } from \"../components/text-link\";\nimport { Button } from \"../components/button\";\nimport { Input } from \"../components/input\";\nimport { authErrorCode, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { emailParts, taggedEmail } from \"./email-tag\";\nimport { newPasswordProblem, personNameOk, PERSON_NAME_MAX_LENGTH } from \"./form-rules\";\nimport { NewPasswordFields } from \"./new-password-fields\";\nimport { DEFAULT_REGISTER_LABELS } from \"./register-form-labels\";\n\n/** What `RegisterForm` hands `onSubmit` — the core of `POST /auth/register` (§4.2). The\n *  app adds its own fields (kastlan's company, keksdose's currency) and the\n *  `invite_token` it read from the URL. */\nexport interface RegisterValues {\n  /** Trimmed, 1–120 characters. */\n  firstName: string;\n  /** Trimmed, 1–120 characters. */\n  lastName: string;\n  /** Trimmed. Lower-casing is the server's (§3.1); a tag is never stripped (§4.5). */\n  email: string;\n  /** As typed: at least 8 characters, at most 72 bytes. */\n  password: string;\n  /** The language picked — one of `languages` — for every mail to the user (§3.1). */\n  locale: KitLanguageCode;\n}\n\n/**\n * Every string `RegisterForm` renders — the `register` namespace of `<UiKitProvider\n * labels>`, overridable per instance through `labels`. keksdose's words where it has\n * them. The terms checkbox speaks `legal.accept`, the strength meter `passwordStrength`.\n */\nexport interface RegisterLabels {\n  firstName: string;\n  lastName: string;\n  email: string;\n  /** The address-tag button (§4.5), given the exact address it would use — and, with an\n   *  invitation, the button back to the invited address. */\n  emailTagUse: (address: string) => string;\n  /** The line after the address-tag button. */\n  emailTagHint: string;\n  /** Under an invited (read-only) email field. */\n  invitedEmailHint: string;\n  /** Once the invitee took the tagged address: it is not the invited one, so it is\n   *  confirmed by a mail of its own (§4.3). */\n  invitedTagNote: string;\n  password: string;\n  confirmPassword: string;\n  passwordMismatch: string;\n  language: string;\n  /** The submit button. */\n  submit: string;\n  /** Before the link to `signInHref`. */\n  haveAccount: string;\n  /** The link to `signInHref`. */\n  signIn: string;\n  /** `email_taken`, under the email field. */\n  emailTaken: string;\n  /** `registration_closed` — the gate refused the address (§4.3). */\n  registrationClosed: string;\n  /** `invitation_invalid` — the invitation link is unknown or spent. */\n  invitationInvalid: string;\n  /** `invitation_expired`. */\n  invitationExpired: string;\n  /** Any other failure. */\n  failed: string;\n  /** 0.30.0: the request was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface (an annotated call site must keep compiling); the\n   *  provider's `register`, then English, fill it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n// Defined in ./register-form-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_REGISTER_LABELS };\n\nexport interface RegisterFormProps extends Omit<ComponentPropsWithRef<\"div\">, \"onSubmit\" | \"children\"> {\n  /**\n   * The form was submitted with everything filled in. Send it (`POST /auth/register`,\n   * §4.2) and resolve once the user is signed in, or reject with the client's error:\n   * `email_taken` shows under the email field, `registration_closed` and the\n   * invitation codes above the button, anything else as \"Registration failed\". The form\n   * never sends a request itself (§8): keksdose must see the password on its way.\n   *\n   * On resolve the form stays busy while the app navigates.\n   */\n  onSubmit: (values: RegisterValues) => Promise<unknown>;\n  /**\n   * The app's address tag (`\"kastlan\"`, §4.5). Once the email is plausible, a button\n   * under it offers the tagged address — \"Use ada+kastlan@example.com\" — with a line on\n   * why; one click puts it in the field. Never applied on its own. Left out, no offer.\n   */\n  emailTag?: string;\n  /**\n   * The address of the invitation this sign-up comes from (§4.4): the field starts with\n   * it and is read-only. With `emailTag`, the invitee may still take the tagged form of\n   * it — the server accepts exactly that variant — and go back.\n   */\n  invitedEmail?: string;\n  /**\n   * 0.30.0: an address to start with that stays EDITABLE, with the `+tag` suggestion still\n   * offered — for a link anyone can build (keksdose's token-free `/register?email=…`\n   * beta link, kept while an app moves to invitations). Unlike `invitedEmail` it proves\n   * nothing, so it locks nothing. `invitedEmail` wins when both are given.\n   */\n  defaultEmail?: string;\n  /**\n   * The language field's value — controlled. Pass the app's UI language\n   * (`i18n.resolvedLanguage`) with `onLocaleChange` switching it, and the field IS the\n   * app's language switch, with no copy of its own to drift from a second switcher on\n   * the page (keksdose's register page has one in its header). Any tag; it shows (and\n   * submits) the offered code it resolves to. Left out, the form keeps its own, starting\n   * from `defaultLocale`, else the provider's language, else the browser's.\n   */\n  locale?: string;\n  /** The uncontrolled language field's start value. */\n  defaultLocale?: string;\n  /** A language was picked. */\n  onLocaleChange?: (code: KitLanguageCode) => void;\n  /** The languages to offer, in order. Default all seven. */\n  languages?: readonly KitLanguageCode[];\n  /**\n   * The app's own language field in place of the kit's select — keksdose's\n   * `LanguageSetting` bound to its i18n. `null` draws none (an app with one language);\n   * the submitted `locale` is then `locale`'s.\n   */\n  languageField?: ReactNode;\n  /** Above the form — keksdose's closed-beta banner. */\n  aboveForm?: ReactNode;\n  /** Under the email field and its tag offer — an app's own hint. */\n  underEmail?: ReactNode;\n  /** The app's sign-up fields (§4.1 item 7): kastlan's Company, keksdose's reporting\n   *  currency. Their values are the app's; say whether they are complete with\n   *  `appFieldsComplete`. */\n  appFields?: ReactNode;\n  /** After the app fields, before the terms — keksdose's privacy-mode note. */\n  afterFields?: ReactNode;\n  /** Whether the app fields are filled in as required — kastlan's Company without an\n   *  invitation. The submit waits for it. Default `true`. */\n  appFieldsComplete?: boolean;\n  /** The terms checkbox's links. Default `/terms` and `/privacy`. */\n  termsHref?: string;\n  privacyHref?: string;\n  /** \"Already have an account? Sign in\" goes here — `/login`. Left out, no line. */\n  signInHref?: string;\n  /** The app's own words for a failure the kit cannot know (the device offline, a\n   *  throttle with its wait), or `undefined` for the kit's. Asked first, for every\n   *  failure; a bare `429` needs none since 0.30.0 — the kit says `rateLimited`. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  labels?: LabelOverride<RegisterLabels>;\n}\n\nconst ALL_CODES: readonly KitLanguageCode[] = KIT_LANGUAGES.map((language) => language.code);\n\n/** The browser's languages, in its order — absent outside a browser. */\nfunction browserLanguages(): readonly string[] {\n  if (typeof navigator === \"undefined\") return [];\n  return navigator.languages?.length ? navigator.languages : [navigator.language];\n}\n\ntype Busy = \"sending\" | \"done\" | null;\n\n/**\n * Sign-up for every app (docs/auth-harmonization.md §4.1, §8): first and last name,\n * email with the address-tag offer, password with the strength meter and its\n * confirmation, language, the app's own fields in a slot, and the terms. keksdose's\n * `RegisterPage` (features/auth/register-page.tsx) with its slots made props.\n *\n * **It never sends a request.** `onSubmit` gets the values; what the request carries\n * besides them (kastlan's company, keksdose's currency, the `invite_token`) is the\n * app's, as are the role and the associations, which never come from the form (§4.3).\n *\n * **The submit waits for a complete form**: both names (1–120 characters after\n * trimming), a plausible address, a password of at least 8 characters and at most 72\n * bytes, the same password again, the terms ticked, and `appFieldsComplete`. Nothing\n * else is a rule — the strength checklist is advice (keksdose #124), and the kit adds\n * none of its own (§8). So there is never a failed attempt for a missing field, and no\n * field error to show for one.\n *\n * **The address tag** (§4.5) is offered under the email field as one click with the\n * exact result on the button, never applied: sub-addressing is a convention the\n * receiving server may or may not implement, and a silent rewrite would send the\n * verification mail down a path nobody checked. With an invitation the field is fixed\n * to the invited address; the invitee may still take its tagged form, and is told it\n * will be confirmed by a mail of its own (§4.3).\n *\n * **Refusals** are read by code ({@link authErrorCode}): `email_taken` under the email\n * field, which takes the focus; `registration_closed`, `invitation_invalid` and\n * `invitation_expired` above the button; anything else as \"Registration failed\", unless\n * `describeError` has the app's words.\n *\n * Laid out for a 390 px phone: the names sit side by side only where the form is at\n * least 20rem wide (a container query), which the narrow `AuthLayout` card is on a\n * desktop and a phone is not.\n */\nexport function RegisterForm({\n  onSubmit,\n  emailTag,\n  invitedEmail,\n  defaultEmail,\n  locale: localeProp,\n  defaultLocale,\n  onLocaleChange,\n  languages = ALL_CODES,\n  languageField,\n  aboveForm,\n  underEmail,\n  appFields,\n  afterFields,\n  appFieldsComplete = true,\n  termsHref,\n  privacyHref,\n  signInHref,\n  describeError,\n  labels: labelsProp,\n  className,\n  ...rest\n}: RegisterFormProps) {\n  const labels = useKitLabels(\"register\", DEFAULT_REGISTER_LABELS, labelsProp);\n  const kitLocale = useKitLocale();\n  const invited = invitedEmail !== undefined;\n  const [firstName, setFirstName] = useState(\"\");\n  const [lastName, setLastName] = useState(\"\");\n  const [email, setEmail] = useState(invitedEmail ?? defaultEmail ?? \"\");\n  const [password, setPassword] = useState(\"\");\n  const [confirm, setConfirm] = useState(\"\");\n  const [ownLocale, setOwnLocale] = useState<string>(\n    () => defaultLocale ?? resolveLanguage([kitLocale, ...browserLanguages()], languages),\n  );\n  const [accepted, setAccepted] = useState(false);\n  const [busy, setBusy] = useState<Busy>(null);\n  // `email_taken` belongs to the address it was answered for; another one clears it.\n  const [taken, setTaken] = useState<string | null>(null);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const emailRef = useRef<HTMLInputElement>(null);\n  const tagHintId = useId();\n\n  const mounted = useRef(true);\n  useEffect(() => {\n    mounted.current = true;\n    return () => {\n      mounted.current = false;\n    };\n  }, []);\n\n  // What the field shows is what is submitted: the offered code the value resolves to.\n  const locale = resolveLanguage([localeProp ?? ownLocale], languages);\n  const changeLocale = (code: KitLanguageCode) => {\n    if (localeProp === undefined) setOwnLocale(code);\n    onLocaleChange?.(code);\n  };\n\n  const working = busy !== null;\n  const suggestion = emailTag ? taggedEmail(email, emailTag) : null;\n  // The invitee took the tagged address: offer the way back to the invited one.\n  const backToInvited = invitedEmail !== undefined && email.trim() !== invitedEmail.trim() ? invitedEmail.trim() : null;\n  const canSubmit =\n    personNameOk(firstName) &&\n    personNameOk(lastName) &&\n    emailParts(email) !== null &&\n    newPasswordProblem(password, confirm) === null &&\n    accepted &&\n    appFieldsComplete;\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (!canSubmit || working) return;\n    const values: RegisterValues = {\n      firstName: firstName.trim(),\n      lastName: lastName.trim(),\n      email: email.trim(),\n      password,\n      locale,\n    };\n    setBusy(\"sending\");\n    setFailure(null);\n    setTaken(null);\n    let result: Promise<unknown>;\n    try {\n      result = Promise.resolve(onSubmit(values));\n    } catch (error) {\n      result = Promise.reject(error);\n    }\n    result.then(\n      () => {\n        if (mounted.current) setBusy(\"done\");\n      },\n      (error: unknown) => {\n        if (!mounted.current) return;\n        setBusy(null);\n        const own = describeError?.(error);\n        const code = authErrorCode(error);\n        if (code === \"email_taken\" && !hasContent(own)) {\n          setTaken(values.email);\n          emailRef.current?.focus();\n          return;\n        }\n        setFailure(\n          hasContent(own)\n            ? own\n            : isRateLimited(error)\n              ? (labels.rateLimited ?? DEFAULT_REGISTER_LABELS.rateLimited)(retryAfterSeconds(error))\n              : code === \"registration_closed\"\n                ? labels.registrationClosed\n                : code === \"invitation_invalid\"\n                  ? labels.invitationInvalid\n                  : code === \"invitation_expired\"\n                    ? labels.invitationExpired\n                    : labels.failed,\n        );\n      },\n    );\n  };\n\n  return (\n    <div {...rest} className={cn(\"@container space-y-4\", className)}>\n      {aboveForm}\n      <form className=\"space-y-3\" noValidate onSubmit={submit}>\n        <div className=\"grid gap-3 @xs:grid-cols-2\">\n          <Input\n            name=\"given-name\"\n            autoComplete=\"given-name\"\n            label={labels.firstName}\n            value={firstName}\n            onChange={(e) => setFirstName(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={working}\n            required\n          />\n          <Input\n            name=\"family-name\"\n            autoComplete=\"family-name\"\n            label={labels.lastName}\n            value={lastName}\n            onChange={(e) => setLastName(e.target.value)}\n            maxLength={PERSON_NAME_MAX_LENGTH}\n            readOnly={working}\n            required\n          />\n        </div>\n\n        <div>\n          <Input\n            ref={emailRef}\n            type=\"email\"\n            name=\"email\"\n            autoComplete=\"email\"\n            label={labels.email}\n            value={email}\n            onChange={(e) => setEmail(e.target.value)}\n            readOnly={invited || working}\n            hint={invited ? labels.invitedEmailHint : undefined}\n            error={taken !== null && taken === email.trim() ? labels.emailTaken : undefined}\n            required\n          />\n          {/* The tag, offered rather than applied (§4.5): one click, the exact address\n              on the button, reversible by typing — or, invited, by the button back. */}\n          {suggestion && (\n            <p className=\"mt-1 text-xs text-muted\">\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                aria-describedby={tagHintId}\n                onClick={() => setEmail(suggestion)}\n              >\n                {labels.emailTagUse(suggestion)}\n              </Button>{\" \"}\n              <span id={tagHintId}>{labels.emailTagHint}</span>\n            </p>\n          )}\n          {backToInvited !== null && (\n            <p className=\"mt-1 text-xs text-muted\">\n              <span>{labels.invitedTagNote}</span>{\" \"}\n              <Button\n                type=\"button\"\n                variant=\"link\"\n                size=\"sm\"\n                className=\"h-auto p-0 align-baseline\"\n                disabled={working}\n                onClick={() => setEmail(backToInvited)}\n              >\n                {labels.emailTagUse(backToInvited)}\n              </Button>\n            </p>\n          )}\n          {underEmail}\n        </div>\n\n        <NewPasswordFields\n          password={password}\n          confirm={confirm}\n          onPasswordChange={setPassword}\n          onConfirmChange={setConfirm}\n          busy={working}\n          text={{ password: labels.password, confirm: labels.confirmPassword, mismatch: labels.passwordMismatch }}\n        />\n\n        {languageField === undefined ? (\n          <LanguageSelect\n            name=\"locale\"\n            label={labels.language}\n            value={locale}\n            codes={languages}\n            onChange={changeLocale}\n            disabled={working}\n          />\n        ) : (\n          languageField\n        )}\n\n        {appFields}\n        {afterFields}\n\n        {/* The kit's terms checkbox (legal contract §3.4). Never an error: an unticked\n            box keeps the submit disabled, so there is no failed attempt to explain. */}\n        <LegalAcceptCheckbox\n          checked={accepted}\n          onCheckedChange={setAccepted}\n          termsHref={termsHref}\n          privacyHref={privacyHref}\n          disabled={working}\n        />\n\n        {hasContent(failure) && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n\n        <Button type=\"submit\" className=\"w-full\" disabled={!working && !canSubmit} pending={working}>\n          {labels.submit}\n        </Button>\n      </form>\n      {signInHref !== undefined && (\n        <p className=\"text-center text-sm text-secondary\">\n          {labels.haveAccount}{\" \"}\n          <TextLink href={signInHref} tone=\"primary\">\n            {labels.signIn}\n          </TextLink>\n        </p>\n      )}\n    </div>\n  );\n}\n"],"mappings":";AAuUQ,SACE,KADF;AAvUR,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAGnD,SAAS,cAAc,oBAAwC;AAC/D,SAAS,eAAe,uBAAuB;AAE/C,SAAS,UAAU;AACnB,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,gBAAgB;AACzB,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,eAAe,eAAe,yBAAyB;AAChE,SAAS,YAAY,mBAAmB;AACxC,SAAS,oBAAoB,cAAc,8BAA8B;AACzE,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AA+IxC,MAAM,YAAwC,cAAc,IAAI,CAAC,aAAa,SAAS,IAAI;AAG3F,SAAS,mBAAsC;AAC7C,MAAI,OAAO,cAAc,YAAa,QAAO,CAAC;AAC9C,SAAO,UAAU,WAAW,SAAS,UAAU,YAAY,CAAC,UAAU,QAAQ;AAChF;AAqCO,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAoB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAAsB;AACpB,QAAM,SAAS,aAAa,YAAY,yBAAyB,UAAU;AAC3E,QAAM,YAAY,aAAa;AAC/B,QAAM,UAAU,iBAAiB;AACjC,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,EAAE;AAC7C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,gBAAgB,gBAAgB,EAAE;AACrE,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AACzC,QAAM,CAAC,WAAW,YAAY,IAAI;AAAA,IAChC,MAAM,iBAAiB,gBAAgB,CAAC,WAAW,GAAG,iBAAiB,CAAC,GAAG,SAAS;AAAA,EACtF;AACA,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,KAAK;AAC9C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAe,IAAI;AAE3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,YAAY,MAAM;AAExB,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AAGL,QAAM,SAAS,gBAAgB,CAAC,cAAc,SAAS,GAAG,SAAS;AACnE,QAAM,eAAe,CAAC,SAA0B;AAC9C,QAAI,eAAe,OAAW,cAAa,IAAI;AAC/C,qBAAiB,IAAI;AAAA,EACvB;AAEA,QAAM,UAAU,SAAS;AACzB,QAAM,aAAa,WAAW,YAAY,OAAO,QAAQ,IAAI;AAE7D,QAAM,gBAAgB,iBAAiB,UAAa,MAAM,KAAK,MAAM,aAAa,KAAK,IAAI,aAAa,KAAK,IAAI;AACjH,QAAM,YACJ,aAAa,SAAS,KACtB,aAAa,QAAQ,KACrB,WAAW,KAAK,MAAM,QACtB,mBAAmB,UAAU,OAAO,MAAM,QAC1C,YACA;AAEF,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAAyB;AAAA,MAC7B,WAAW,UAAU,KAAK;AAAA,MAC1B,UAAU,SAAS,KAAK;AAAA,MACxB,OAAO,MAAM,KAAK;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AACA,YAAQ,SAAS;AACjB,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACJ,QAAI;AACF,eAAS,QAAQ,QAAQ,SAAS,MAAM,CAAC;AAAA,IAC3C,SAAS,OAAO;AACd,eAAS,QAAQ,OAAO,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,MACL,MAAM;AACJ,YAAI,QAAQ,QAAS,SAAQ,MAAM;AAAA,MACrC;AAAA,MACA,CAAC,UAAmB;AAClB,YAAI,CAAC,QAAQ,QAAS;AACtB,gBAAQ,IAAI;AACZ,cAAM,MAAM,gBAAgB,KAAK;AACjC,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,iBAAiB,CAAC,WAAW,GAAG,GAAG;AAC9C,mBAAS,OAAO,KAAK;AACrB,mBAAS,SAAS,MAAM;AACxB;AAAA,QACF;AACA;AAAA,UACE,WAAW,GAAG,IACV,MACA,cAAc,KAAK,KAChB,OAAO,eAAe,wBAAwB,aAAa,kBAAkB,KAAK,CAAC,IACpF,SAAS,wBACP,OAAO,qBACP,SAAS,uBACP,OAAO,oBACP,SAAS,uBACP,OAAO,oBACP,OAAO;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SACE,qBAAC,SAAK,GAAG,MAAM,WAAW,GAAG,wBAAwB,SAAS,GAC3D;AAAA;AAAA,IACD,qBAAC,UAAK,WAAU,aAAY,YAAU,MAAC,UAAU,QAC/C;AAAA,2BAAC,SAAI,WAAU,8BACb;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,aAAa,EAAE,OAAO,KAAK;AAAA,YAC5C,WAAW;AAAA,YACX,UAAU;AAAA,YACV,UAAQ;AAAA;AAAA,QACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,WAAW;AAAA,YACX,UAAU;AAAA,YACV,UAAQ;AAAA;AAAA,QACV;AAAA,SACF;AAAA,MAEA,qBAAC,SACC;AAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,MAAK;AAAA,YACL,cAAa;AAAA,YACb,OAAO,OAAO;AAAA,YACd,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,YACxC,UAAU,WAAW;AAAA,YACrB,MAAM,UAAU,OAAO,mBAAmB;AAAA,YAC1C,OAAO,UAAU,QAAQ,UAAU,MAAM,KAAK,IAAI,OAAO,aAAa;AAAA,YACtE,UAAQ;AAAA;AAAA,QACV;AAAA,QAGC,cACC,qBAAC,OAAE,WAAU,2BACX;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,oBAAkB;AAAA,cAClB,SAAS,MAAM,SAAS,UAAU;AAAA,cAEjC,iBAAO,YAAY,UAAU;AAAA;AAAA,UAChC;AAAA,UAAU;AAAA,UACV,oBAAC,UAAK,IAAI,WAAY,iBAAO,cAAa;AAAA,WAC5C;AAAA,QAED,kBAAkB,QACjB,qBAAC,OAAE,WAAU,2BACX;AAAA,8BAAC,UAAM,iBAAO,gBAAe;AAAA,UAAQ;AAAA,UACrC;AAAA,YAAC;AAAA;AAAA,cACC,MAAK;AAAA,cACL,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,WAAU;AAAA,cACV,UAAU;AAAA,cACV,SAAS,MAAM,SAAS,aAAa;AAAA,cAEpC,iBAAO,YAAY,aAAa;AAAA;AAAA,UACnC;AAAA,WACF;AAAA,QAED;AAAA,SACH;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA,kBAAkB;AAAA,UAClB,iBAAiB;AAAA,UACjB,MAAM;AAAA,UACN,MAAM,EAAE,UAAU,OAAO,UAAU,SAAS,OAAO,iBAAiB,UAAU,OAAO,iBAAiB;AAAA;AAAA,MACxG;AAAA,MAEC,kBAAkB,SACjB;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,OAAO,OAAO;AAAA,UACd,OAAO;AAAA,UACP,OAAO;AAAA,UACP,UAAU;AAAA,UACV,UAAU;AAAA;AAAA,MACZ,IAEA;AAAA,MAGD;AAAA,MACA;AAAA,MAID;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,iBAAiB;AAAA,UACjB;AAAA,UACA;AAAA,UACA,UAAU;AAAA;AAAA,MACZ;AAAA,MAEC,WAAW,OAAO,KACjB,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,MAGF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,UAAU,CAAC,WAAW,CAAC,WAAW,SAAS,SACjF,iBAAO,QACV;AAAA,OACF;AAAA,IACC,eAAe,UACd,qBAAC,OAAE,WAAU,sCACV;AAAA,aAAO;AAAA,MAAa;AAAA,MACrB,oBAAC,YAAS,MAAM,YAAY,MAAK,WAC9B,iBAAO,QACV;AAAA,OACF;AAAA,KAEJ;AAEJ;","names":[]}

package/dist/auth/reset-password-form.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/reset-password-form.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { CheckCircle2, XCircle } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { LoadingState } from \"../components/loading-state\";\nimport { Button } from \"../components/button\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { authErrorCode, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { newPasswordProblem } from \"./form-rules\";\nimport { NewPasswordFields } from \"./new-password-fields\";\nimport {\n  FORM_HEADING_CLASS,\n  INTRO_CLASS,\n  OUTCOME_CLASS,\n  OutcomeMessage,\n  useFocusWhen,\n  useOncePerKey,\n  withQuery,\n} from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\nimport { DEFAULT_RESET_PASSWORD_LABELS } from \"./reset-password-form-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the form renders — the `resetPassword` namespace. keksdose's words\n *  (`auth.reset.*`), which kastlan took over. */\nexport interface ResetPasswordLabels {\n  /** The heading, on every state. */\n  title: string;\n  /** While the link is checked. */\n  checking: string;\n  /** Over the fields, given the account's address (when the check returned one). */\n  intro: (email: string) => string;\n  newPassword: string;\n  confirmPassword: string;\n  /** Under the confirmation while it differs. */\n  mismatch: string;\n  submit: string;\n  /** The new password was not saved, for a reason that is not the link. */\n  failed: string;\n  /** The page was opened without a `token`. */\n  noToken: string;\n  /** The link is unknown, spent or expired — one sentence, as the server gives one\n   *  code (`token_invalid`). */\n  invalid: string;\n  /** Under it. */\n  invalidHint: string;\n  /** The way forward from an invalid link: back to \"Forgot password\". */\n  requestNew: string;\n  /** Done. */\n  success: string;\n  /** Under it: a reset ends every session (§6.3). */\n  sessionsEnded: string;\n  /** The button out — to sign-in, with the address filled in. */\n  signIn: string;\n  /** 0.30.0: the save was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface; the provider's `resetPassword`, then English, fill\n   *  it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n// Defined in ./reset-password-form-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_RESET_PASSWORD_LABELS };\n\n/* ── Types ───────────────────────────────────────────────────────────────── */\n\n/** What `onCheck` may resolve with — keksdose's `/password-reset/check` answer. */\nexport interface ResetPasswordCheck {\n  /** The account's address: named over the fields (\"You're setting a new password for\n   *  …\") and handed to the password manager, which files the new password under it. */\n  email?: string;\n  /** The app's notices over the fields, shown BEFORE the password is typed — keksdose's\n   *  \"your account is end-to-end encrypted: this restores your sign-in, not your data\". */\n  notices?: ReactNode;\n}\n\n/** What `onSubmit` hands over. */\nexport interface ResetPasswordValues {\n  token: string;\n  password: string;\n}\n\n/** What `onSubmit` resolves with — keksdose's `/password-reset/confirm` answer, which\n *  carries no tokens (§6.3). */\nexport interface ResetPasswordResult {\n  /** The account's address — the sign-in it leads to is filled in with it. */\n  email: string;\n  /** The app's outcomes, shown on the done state: keksdose's recovery-code notice for an\n   *  encrypted account, \"Your 2 personal access tokens were revoked\". */\n  notices?: ReactNode;\n}\n\ntype Phase =\n  | { kind: \"form\"; check: ResetPasswordCheck }\n  | { kind: \"invalid\" }\n  | { kind: \"done\"; result: ResetPasswordResult };\n\nexport interface ResetPasswordFormProps\n  extends Omit<ComponentPropsWithRef<\"div\">, \"onSubmit\" | \"children\" | \"title\"> {\n  /** The link's token — the app's `?token=` (keksdose, kastlan: `/reset-password?token=…`).\n   *  Empty: the link was cut short, and the page says so without asking anyone. */\n  token: string;\n  /**\n   * Check the link before the form shows (`/auth/password-reset/check`) — once per\n   * token, on mount. Checking does not use it up, so a reload is free. Resolve (with\n   * the address and any notices) for a live link; reject for a dead one, and the page\n   * says \"This link is invalid or has expired\" with the way to a new one.\n   */\n  onCheck: (token: string) => Promise<ResetPasswordCheck | void | undefined>;\n  /**\n   * The new password was submitted: send `/auth/password-reset/confirm`. Resolve with\n   * the account's address (and the app's notices) — no tokens: a reset is not a sign-in\n   * (§6.3). Reject with the client's error: `token_invalid` (the link expired or was\n   * used in another tab while the form was open) goes to the invalid state; anything\n   * else stays on the form with the password kept.\n   */\n  onSubmit: (values: ResetPasswordValues) => Promise<ResetPasswordResult>;\n  /** \"Go to sign in\" calls this with the address, for an app that routes in code.\n   *  Without it, the button is a link to `signInHref`. */\n  onSignIn?: (email: string) => void;\n  /** Where \"Go to sign in\" leads, with `?email=` added — read it into `SignInForm`'s\n   *  `defaultEmail`. Default `/login`. */\n  signInHref?: string;\n  /** \"Request a new link\" — the app's \"Forgot password\" page. Default\n   *  `/forgot-password`. */\n  forgotHref?: string;\n  /** The app's words for a failed save (the device offline), or `undefined` for the\n   *  kit's: `rateLimited` for a bare `429` (0.30.0), else `failed`. Not asked for\n   *  `token_invalid` or `token_expired`, which are a state. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it\n   *  in `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<ResetPasswordLabels>;\n}\n\n/**\n * Redeem a password-reset link (`/reset-password?token=…`, docs/auth-harmonization.md\n * §6.3, §7) — keksdose's `ResetPasswordPage` (features/auth/reset-password-page.tsx),\n * which kastlan built its own on.\n *\n * **The link is checked first** (`onCheck`), and only then does the form appear: an\n * expired link should say so before someone types a new password twice, not after.\n *\n * **A reset is not a sign-in** (§6.3, §10.11). The confirm answers without tokens, so a\n * 2FA account cannot skip its second factor by way of its inbox, and the page ends on\n * \"Go to sign in\" with the address filled in — the person has just typed the new\n * password twice; signing in is one step. What else the reset did is said there:\n * every other session ended (the kit's line, true in all three apps), and the app's own\n * outcomes in `notices` — keksdose's recovery-code notice and its revoked API tokens.\n *\n * **The password** is chosen with the same fields as `RegisterForm` and `SignInForm`'s\n * set-password step ({@link NewPasswordFields}): the strength meter and its checklist as\n * advice, and only the two hard rules — at least 8 characters, at most 72 bytes (§8).\n * The submit waits for both and a matching confirmation.\n *\n * The form never sends a request itself (§8): the token and the password go to the\n * callbacks, and the page renders what they resolve with.\n */\nexport function ResetPasswordForm({\n  token,\n  onCheck,\n  onSubmit,\n  onSignIn,\n  signInHref = \"/login\",\n  forgotHref = \"/forgot-password\",\n  describeError,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: ResetPasswordFormProps) {\n  const labels = useKitLabels(\"resetPassword\", DEFAULT_RESET_PASSWORD_LABELS, labelsProp);\n  // The phase belongs to the token it was reached with: a new token starts over at the\n  // check without a reset effect.\n  const [phase, setPhase] = useState<{ token: string; phase: Phase } | null>(null);\n  const current: Phase | \"checking\" =\n    token === \"\" ? { kind: \"invalid\" } : phase?.token === token ? phase.phase : \"checking\";\n\n  useOncePerKey(token === \"\" ? null : token, onCheck, (key, result) =>\n    setPhase({\n      token: key,\n      phase: result.ok ? { kind: \"form\", check: result.value ?? {} } : { kind: \"invalid\" },\n    }),\n  );\n\n  const [password, setPassword] = useState(\"\");\n  const [confirm, setConfirm] = useState(\"\");\n  const [pending, setPending] = useState(false);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const headingId = useId();\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const doneRef = useRef<HTMLDivElement>(null);\n  const kind = current === \"checking\" ? \"checking\" : current.kind;\n\n  // The form arrives after the check: the field is where the person is going.\n  useEffect(() => {\n    if (kind === \"form\") passwordRef.current?.focus();\n  }, [kind]);\n  useFocusWhen(kind === \"done\", doneRef);\n\n  const heading =\n    title === null ? null : (\n      <Heading id={headingId} className={FORM_HEADING_CLASS}>\n        {title ?? labels.title}\n      </Heading>\n    );\n  const rootClass = cn(\"space-y-3\", className);\n\n  if (current === \"checking\") {\n    return (\n      <div {...rest} data-state=\"checking\" aria-busy className={rootClass}>\n        {heading}\n        <LoadingState size=\"sm\" label={labels.checking} />\n      </div>\n    );\n  }\n\n  if (current.kind === \"invalid\") {\n    return (\n      <div {...rest} data-state=\"invalid\" className={rootClass}>\n        {heading}\n        <EmptyState\n          tone=\"danger\"\n          icon={<XCircle />}\n          title={token === \"\" ? labels.noToken : labels.invalid}\n          hint={labels.invalidHint}\n          action={\n            <Button href={forgotHref} variant=\"accent\">\n              {labels.requestNew}\n            </Button>\n          }\n          className={OUTCOME_CLASS}\n        />\n      </div>\n    );\n  }\n\n  if (current.kind === \"done\") {\n    const { email, notices } = current.result;\n    return (\n      <div {...rest} data-state=\"done\" className={rootClass}>\n        {heading}\n        <OutcomeMessage icon={<CheckCircle2 className=\"text-success\" />} focusRef={doneRef}>\n          <p className={INTRO_CLASS}>{labels.success}</p>\n        </OutcomeMessage>\n        {notices}\n        <p className=\"text-xs text-muted\">{labels.sessionsEnded}</p>\n        {onSignIn ? (\n          <Button type=\"button\" variant=\"accent\" className=\"w-full\" onClick={() => onSignIn(email)}>\n            {labels.signIn}\n          </Button>\n        ) : (\n          <Button href={email ? withQuery(signInHref, \"email\", email) : signInHref} variant=\"accent\" className=\"w-full\">\n            {labels.signIn}\n          </Button>\n        )}\n      </div>\n    );\n  }\n\n  const { email, notices } = current.check;\n  const problem = newPasswordProblem(password, confirm);\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (pending || problem !== null) return;\n    setFailure(null);\n    setPending(true);\n    Promise.resolve()\n      .then(() => onSubmit({ token, password }))\n      .then(\n        (result) => {\n          setPending(false);\n          setPassword(\"\");\n          setConfirm(\"\");\n          setPhase({ token, phase: { kind: \"done\", result } });\n        },\n        (error: unknown) => {\n          setPending(false);\n          // A link that died between the check and the save — used, or run out — is the\n          // dead-link state, under either code (0.31.1: keksdose mapped `token_expired`\n          // to it itself, `asDeadLink`).\n          const code = authErrorCode(error);\n          if (code === \"token_invalid\" || code === \"token_expired\") {\n            setPassword(\"\");\n            setConfirm(\"\");\n            setPhase({ token, phase: { kind: \"invalid\" } });\n            return;\n          }\n          // The app's words first, then the throttle's, then the kit's catch-all.\n          setFailure(\n            describeError?.(error) ??\n              (isRateLimited(error)\n                ? (labels.rateLimited ?? DEFAULT_RESET_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))\n                : labels.failed),\n          );\n        },\n      );\n  };\n\n  return (\n    <div {...rest} data-state=\"form\" className={rootClass}>\n      <form className=\"space-y-3\" aria-labelledby={title === null ? undefined : headingId} onSubmit={submit}>\n        {heading}\n        {email ? <p className={INTRO_CLASS}>{labels.intro(email)}</p> : null}\n        {notices}\n        {/* Which account the new password is for, for the password manager: it files\n            the new password under this username instead of guessing (kastlan). */}\n        {email ? <input type=\"email\" name=\"username\" autoComplete=\"username\" value={email} readOnly hidden /> : null}\n        <NewPasswordFields\n          password={password}\n          confirm={confirm}\n          onPasswordChange={(next) => {\n            setPassword(next);\n            if (failure) setFailure(null);\n          }}\n          onConfirmChange={setConfirm}\n          busy={pending}\n          passwordRef={passwordRef}\n          text={{ password: labels.newPassword, confirm: labels.confirmPassword, mismatch: labels.mismatch }}\n        />\n        {failure != null && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" className=\"w-full\" disabled={!pending && problem !== null} pending={pending}>\n          {labels.submit}\n        </Button>\n      </form>\n    </div>\n  );\n}\n"],"mappings":";AAiNM,cAQA,YARA;AAjNN,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAEnD,SAAS,cAAc,eAAe;AACtC,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe,eAAe,yBAAyB;AAChE,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,qCAAqC;AA8IvC,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AAGtF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAiD,IAAI;AAC/E,QAAM,UACJ,UAAU,KAAK,EAAE,MAAM,UAAU,IAAI,OAAO,UAAU,QAAQ,MAAM,QAAQ;AAE9E;AAAA,IAAc,UAAU,KAAK,OAAO;AAAA,IAAO;AAAA,IAAS,CAAC,KAAK,WACxD,SAAS;AAAA,MACP,OAAO;AAAA,MACP,OAAO,OAAO,KAAK,EAAE,MAAM,QAAQ,OAAO,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,UAAU;AAAA,IACrF,CAAC;AAAA,EACH;AAEA,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AACzC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,YAAY,MAAM;AACxB,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,OAAO,YAAY,aAAa,aAAa,QAAQ;AAG3D,YAAU,MAAM;AACd,QAAI,SAAS,OAAQ,aAAY,SAAS,MAAM;AAAA,EAClD,GAAG,CAAC,IAAI,CAAC;AACT,eAAa,SAAS,QAAQ,OAAO;AAErC,QAAM,UACJ,UAAU,OAAO,OACf,oBAAC,WAAQ,IAAI,WAAW,WAAW,oBAChC,mBAAS,OAAO,OACnB;AAEJ,QAAM,YAAY,GAAG,aAAa,SAAS;AAE3C,MAAI,YAAY,YAAY;AAC1B,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,YAAW,aAAS,MAAC,WAAW,WACvD;AAAA;AAAA,MACD,oBAAC,gBAAa,MAAK,MAAK,OAAO,OAAO,UAAU;AAAA,OAClD;AAAA,EAEJ;AAEA,MAAI,QAAQ,SAAS,WAAW;AAC9B,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,WAAU,WAAW,WAC5C;AAAA;AAAA,MACD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAM,oBAAC,WAAQ;AAAA,UACf,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO;AAAA,UAC9C,MAAM,OAAO;AAAA,UACb,QACE,oBAAC,UAAO,MAAM,YAAY,SAAQ,UAC/B,iBAAO,YACV;AAAA,UAEF,WAAW;AAAA;AAAA,MACb;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAM,EAAE,OAAAA,QAAO,SAAAC,SAAQ,IAAI,QAAQ;AACnC,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,WACzC;AAAA;AAAA,MACD,oBAAC,kBAAe,MAAM,oBAAC,gBAAa,WAAU,gBAAe,GAAI,UAAU,SACzE,8BAAC,OAAE,WAAW,aAAc,iBAAO,SAAQ,GAC7C;AAAA,MACCA;AAAA,MACD,oBAAC,OAAE,WAAU,sBAAsB,iBAAO,eAAc;AAAA,MACvD,WACC,oBAAC,UAAO,MAAK,UAAS,SAAQ,UAAS,WAAU,UAAS,SAAS,MAAM,SAASD,MAAK,GACpF,iBAAO,QACV,IAEA,oBAAC,UAAO,MAAMA,SAAQ,UAAU,YAAY,SAASA,MAAK,IAAI,YAAY,SAAQ,UAAS,WAAU,UAClG,iBAAO,QACV;AAAA,OAEJ;AAAA,EAEJ;AAEA,QAAM,EAAE,OAAO,QAAQ,IAAI,QAAQ;AACnC,QAAM,UAAU,mBAAmB,UAAU,OAAO;AAEpD,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,WAAW,YAAY,KAAM;AACjC,eAAW,IAAI;AACf,eAAW,IAAI;AACf,YAAQ,QAAQ,EACb,KAAK,MAAM,SAAS,EAAE,OAAO,SAAS,CAAC,CAAC,EACxC;AAAA,MACC,CAAC,WAAW;AACV,mBAAW,KAAK;AAChB,oBAAY,EAAE;AACd,mBAAW,EAAE;AACb,iBAAS,EAAE,OAAO,OAAO,EAAE,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,MACrD;AAAA,MACA,CAAC,UAAmB;AAClB,mBAAW,KAAK;AAIhB,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,mBAAmB,SAAS,iBAAiB;AACxD,sBAAY,EAAE;AACd,qBAAW,EAAE;AACb,mBAAS,EAAE,OAAO,OAAO,EAAE,MAAM,UAAU,EAAE,CAAC;AAC9C;AAAA,QACF;AAEA;AAAA,UACE,gBAAgB,KAAK,MAClB,cAAc,KAAK,KACf,OAAO,eAAe,8BAA8B,aAAa,kBAAkB,KAAK,CAAC,IAC1F,OAAO;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,EACJ;AAEA,SACE,oBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,WAC1C,+BAAC,UAAK,WAAU,aAAY,mBAAiB,UAAU,OAAO,SAAY,WAAW,UAAU,QAC5F;AAAA;AAAA,IACA,QAAQ,oBAAC,OAAE,WAAW,aAAc,iBAAO,MAAM,KAAK,GAAE,IAAO;AAAA,IAC/D;AAAA,IAGA,QAAQ,oBAAC,WAAM,MAAK,SAAQ,MAAK,YAAW,cAAa,YAAW,OAAO,OAAO,UAAQ,MAAC,QAAM,MAAC,IAAK;AAAA,IACxG;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,kBAAkB,CAAC,SAAS;AAC1B,sBAAY,IAAI;AAChB,cAAI,QAAS,YAAW,IAAI;AAAA,QAC9B;AAAA,QACA,iBAAiB;AAAA,QACjB,MAAM;AAAA,QACN;AAAA,QACA,MAAM,EAAE,UAAU,OAAO,aAAa,SAAS,OAAO,iBAAiB,UAAU,OAAO,SAAS;AAAA;AAAA,IACnG;AAAA,IACC,WAAW,QACV,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,IAEF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,UAAU,CAAC,WAAW,YAAY,MAAM,SAC9E,iBAAO,QACV;AAAA,KACF,GACF;AAEJ;","names":["email","notices"]}
+{"version":3,"sources":["../../src/auth/reset-password-form.tsx"],"sourcesContent":["import { useEffect, useId, useRef, useState } from \"react\";\nimport type { ComponentPropsWithRef, FormEvent, ReactNode } from \"react\";\nimport { CheckCircle2, XCircle } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { LoadingState } from \"../components/loading-state\";\nimport { Button } from \"../components/button\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { authErrorCode, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport { newPasswordProblem } from \"./form-rules\";\nimport { NewPasswordFields } from \"./new-password-fields\";\nimport {\n  FORM_HEADING_CLASS,\n  INTRO_CLASS,\n  OUTCOME_CLASS,\n  OutcomeMessage,\n  useFocusWhen,\n  useOncePerKey,\n  withQuery,\n} from \"./status-parts\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\nimport { DEFAULT_RESET_PASSWORD_LABELS } from \"./reset-password-form-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the form renders — the `resetPassword` namespace. keksdose's words\n *  (`auth.reset.*`), which kastlan took over. */\nexport interface ResetPasswordLabels {\n  /** The heading, on every state. */\n  title: string;\n  /** While the link is checked. */\n  checking: string;\n  /** Over the fields, given the account's address (when the check returned one). */\n  intro: (email: string) => string;\n  newPassword: string;\n  confirmPassword: string;\n  /** Under the confirmation while it differs. */\n  mismatch: string;\n  submit: string;\n  /** The new password was not saved, for a reason that is not the link. */\n  failed: string;\n  /** The page was opened without a `token`. */\n  noToken: string;\n  /** The link is unknown, spent or expired — one sentence, as the server gives one\n   *  code (`token_invalid`). */\n  invalid: string;\n  /** Under it. */\n  invalidHint: string;\n  /** The way forward from an invalid link: back to \"Forgot password\". */\n  requestNew: string;\n  /** Done. */\n  success: string;\n  /** Under it: a reset ends every session (§6.3). */\n  sessionsEnded: string;\n  /** The button out — to sign-in, with the address filled in. */\n  signIn: string;\n  /** 0.30.0: the save was throttled — HTTP 429 ({@link isRateLimited}) — given the\n   *  `Retry-After` wait in seconds, or `undefined` without one. OPTIONAL, like every key\n   *  added to a shipped interface; the provider's `resetPassword`, then English, fill\n   *  it. */\n  rateLimited?: (seconds?: number) => string;\n}\n\n// Defined in ./reset-password-form-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_RESET_PASSWORD_LABELS };\n\n/* ── Types ───────────────────────────────────────────────────────────────── */\n\n/** What `onCheck` may resolve with — keksdose's `/password-reset/check` answer. */\nexport interface ResetPasswordCheck {\n  /** The account's address: named over the fields (\"You're setting a new password for\n   *  …\") and handed to the password manager, which files the new password under it. */\n  email?: string;\n  /** The app's notices over the fields, shown BEFORE the password is typed — keksdose's\n   *  \"your account is end-to-end encrypted: this restores your sign-in, not your data\". */\n  notices?: ReactNode;\n}\n\n/** What `onSubmit` hands over. */\nexport interface ResetPasswordValues {\n  token: string;\n  password: string;\n}\n\n/** What `onSubmit` resolves with — keksdose's `/password-reset/confirm` answer, which\n *  carries no tokens (§6.3). */\nexport interface ResetPasswordResult {\n  /** The account's address — the sign-in it leads to is filled in with it. */\n  email: string;\n  /** The app's outcomes, shown on the done state: keksdose's recovery-code notice for an\n   *  encrypted account, \"Your 2 personal access tokens were revoked\". */\n  notices?: ReactNode;\n}\n\ntype Phase =\n  { kind: \"form\"; check: ResetPasswordCheck } | { kind: \"invalid\" } | { kind: \"done\"; result: ResetPasswordResult };\n\nexport interface ResetPasswordFormProps extends Omit<ComponentPropsWithRef<\"div\">, \"onSubmit\" | \"children\" | \"title\"> {\n  /** The link's token — the app's `?token=` (keksdose, kastlan: `/reset-password?token=…`).\n   *  Empty: the link was cut short, and the page says so without asking anyone. */\n  token: string;\n  /**\n   * Check the link before the form shows (`/auth/password-reset/check`) — once per\n   * token, on mount. Checking does not use it up, so a reload is free. Resolve (with\n   * the address and any notices) for a live link; reject for a dead one, and the page\n   * says \"This link is invalid or has expired\" with the way to a new one.\n   */\n  onCheck: (token: string) => Promise<ResetPasswordCheck | void | undefined>;\n  /**\n   * The new password was submitted: send `/auth/password-reset/confirm`. Resolve with\n   * the account's address (and the app's notices) — no tokens: a reset is not a sign-in\n   * (§6.3). Reject with the client's error: `token_invalid` (the link expired or was\n   * used in another tab while the form was open) goes to the invalid state; anything\n   * else stays on the form with the password kept.\n   */\n  onSubmit: (values: ResetPasswordValues) => Promise<ResetPasswordResult>;\n  /** \"Go to sign in\" calls this with the address, for an app that routes in code.\n   *  Without it, the button is a link to `signInHref`. */\n  onSignIn?: (email: string) => void;\n  /** Where \"Go to sign in\" leads, with `?email=` added — read it into `SignInForm`'s\n   *  `defaultEmail`. Default `/login`. */\n  signInHref?: string;\n  /** \"Request a new link\" — the app's \"Forgot password\" page. Default\n   *  `/forgot-password`. */\n  forgotHref?: string;\n  /** The app's words for a failed save (the device offline), or `undefined` for the\n   *  kit's: `rateLimited` for a bare `429` (0.30.0), else `failed`. Not asked for\n   *  `token_invalid` or `token_expired`, which are a state. */\n  describeError?: (error: unknown) => ReactNode | undefined;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it\n   *  in `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<ResetPasswordLabels>;\n}\n\n/**\n * Redeem a password-reset link (`/reset-password?token=…`, docs/auth-harmonization.md\n * §6.3, §7) — keksdose's `ResetPasswordPage` (features/auth/reset-password-page.tsx),\n * which kastlan built its own on.\n *\n * **The link is checked first** (`onCheck`), and only then does the form appear: an\n * expired link should say so before someone types a new password twice, not after.\n *\n * **A reset is not a sign-in** (§6.3, §10.11). The confirm answers without tokens, so a\n * 2FA account cannot skip its second factor by way of its inbox, and the page ends on\n * \"Go to sign in\" with the address filled in — the person has just typed the new\n * password twice; signing in is one step. What else the reset did is said there:\n * every other session ended (the kit's line, true in all three apps), and the app's own\n * outcomes in `notices` — keksdose's recovery-code notice and its revoked API tokens.\n *\n * **The password** is chosen with the same fields as `RegisterForm` and `SignInForm`'s\n * set-password step ({@link NewPasswordFields}): the strength meter and its checklist as\n * advice, and only the two hard rules — at least 8 characters, at most 72 bytes (§8).\n * The submit waits for both and a matching confirmation.\n *\n * The form never sends a request itself (§8): the token and the password go to the\n * callbacks, and the page renders what they resolve with.\n */\nexport function ResetPasswordForm({\n  token,\n  onCheck,\n  onSubmit,\n  onSignIn,\n  signInHref = \"/login\",\n  forgotHref = \"/forgot-password\",\n  describeError,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: ResetPasswordFormProps) {\n  const labels = useKitLabels(\"resetPassword\", DEFAULT_RESET_PASSWORD_LABELS, labelsProp);\n  // The phase belongs to the token it was reached with: a new token starts over at the\n  // check without a reset effect.\n  const [phase, setPhase] = useState<{ token: string; phase: Phase } | null>(null);\n  const current: Phase | \"checking\" =\n    token === \"\" ? { kind: \"invalid\" } : phase?.token === token ? phase.phase : \"checking\";\n\n  useOncePerKey(token === \"\" ? null : token, onCheck, (key, result) =>\n    setPhase({\n      token: key,\n      phase: result.ok ? { kind: \"form\", check: result.value ?? {} } : { kind: \"invalid\" },\n    }),\n  );\n\n  const [password, setPassword] = useState(\"\");\n  const [confirm, setConfirm] = useState(\"\");\n  const [pending, setPending] = useState(false);\n  const [failure, setFailure] = useState<ReactNode>(null);\n  const headingId = useId();\n  const passwordRef = useRef<HTMLInputElement>(null);\n  const doneRef = useRef<HTMLDivElement>(null);\n  const kind = current === \"checking\" ? \"checking\" : current.kind;\n\n  // The form arrives after the check: the field is where the person is going.\n  useEffect(() => {\n    if (kind === \"form\") passwordRef.current?.focus();\n  }, [kind]);\n  useFocusWhen(kind === \"done\", doneRef);\n\n  const heading =\n    title === null ? null : (\n      <Heading id={headingId} className={FORM_HEADING_CLASS}>\n        {title ?? labels.title}\n      </Heading>\n    );\n  const rootClass = cn(\"space-y-3\", className);\n\n  if (current === \"checking\") {\n    return (\n      <div {...rest} data-state=\"checking\" aria-busy className={rootClass}>\n        {heading}\n        <LoadingState size=\"sm\" label={labels.checking} />\n      </div>\n    );\n  }\n\n  if (current.kind === \"invalid\") {\n    return (\n      <div {...rest} data-state=\"invalid\" className={rootClass}>\n        {heading}\n        <EmptyState\n          tone=\"danger\"\n          icon={<XCircle />}\n          title={token === \"\" ? labels.noToken : labels.invalid}\n          hint={labels.invalidHint}\n          action={\n            <Button href={forgotHref} variant=\"accent\">\n              {labels.requestNew}\n            </Button>\n          }\n          className={OUTCOME_CLASS}\n        />\n      </div>\n    );\n  }\n\n  if (current.kind === \"done\") {\n    const { email, notices } = current.result;\n    return (\n      <div {...rest} data-state=\"done\" className={rootClass}>\n        {heading}\n        <OutcomeMessage icon={<CheckCircle2 className=\"text-success\" />} focusRef={doneRef}>\n          <p className={INTRO_CLASS}>{labels.success}</p>\n        </OutcomeMessage>\n        {notices}\n        <p className=\"text-xs text-muted\">{labels.sessionsEnded}</p>\n        {onSignIn ? (\n          <Button type=\"button\" variant=\"accent\" className=\"w-full\" onClick={() => onSignIn(email)}>\n            {labels.signIn}\n          </Button>\n        ) : (\n          <Button href={email ? withQuery(signInHref, \"email\", email) : signInHref} variant=\"accent\" className=\"w-full\">\n            {labels.signIn}\n          </Button>\n        )}\n      </div>\n    );\n  }\n\n  const { email, notices } = current.check;\n  const problem = newPasswordProblem(password, confirm);\n\n  const submit = (e: FormEvent) => {\n    e.preventDefault();\n    if (pending || problem !== null) return;\n    setFailure(null);\n    setPending(true);\n    Promise.resolve()\n      .then(() => onSubmit({ token, password }))\n      .then(\n        (result) => {\n          setPending(false);\n          setPassword(\"\");\n          setConfirm(\"\");\n          setPhase({ token, phase: { kind: \"done\", result } });\n        },\n        (error: unknown) => {\n          setPending(false);\n          // A link that died between the check and the save — used, or run out — is the\n          // dead-link state, under either code (0.31.1: keksdose mapped `token_expired`\n          // to it itself, `asDeadLink`).\n          const code = authErrorCode(error);\n          if (code === \"token_invalid\" || code === \"token_expired\") {\n            setPassword(\"\");\n            setConfirm(\"\");\n            setPhase({ token, phase: { kind: \"invalid\" } });\n            return;\n          }\n          // The app's words first, then the throttle's, then the kit's catch-all.\n          setFailure(\n            describeError?.(error) ??\n              (isRateLimited(error)\n                ? (labels.rateLimited ?? DEFAULT_RESET_PASSWORD_LABELS.rateLimited)(retryAfterSeconds(error))\n                : labels.failed),\n          );\n        },\n      );\n  };\n\n  return (\n    <div {...rest} data-state=\"form\" className={rootClass}>\n      <form className=\"space-y-3\" aria-labelledby={title === null ? undefined : headingId} onSubmit={submit}>\n        {heading}\n        {email ? <p className={INTRO_CLASS}>{labels.intro(email)}</p> : null}\n        {notices}\n        {/* Which account the new password is for, for the password manager: it files\n            the new password under this username instead of guessing (kastlan). */}\n        {email ? <input type=\"email\" name=\"username\" autoComplete=\"username\" value={email} readOnly hidden /> : null}\n        <NewPasswordFields\n          password={password}\n          confirm={confirm}\n          onPasswordChange={(next) => {\n            setPassword(next);\n            if (failure) setFailure(null);\n          }}\n          onConfirmChange={setConfirm}\n          busy={pending}\n          passwordRef={passwordRef}\n          text={{ password: labels.newPassword, confirm: labels.confirmPassword, mismatch: labels.mismatch }}\n        />\n        {failure != null && (\n          <AlertBanner tone=\"danger\" size=\"sm\" role=\"alert\">\n            {failure}\n          </AlertBanner>\n        )}\n        <Button type=\"submit\" className=\"w-full\" disabled={!pending && problem !== null} pending={pending}>\n          {labels.submit}\n        </Button>\n      </form>\n    </div>\n  );\n}\n"],"mappings":";AA8MM,cAQA,YARA;AA9MN,SAAS,WAAW,OAAO,QAAQ,gBAAgB;AAEnD,SAAS,cAAc,eAAe;AACtC,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe,eAAe,yBAAyB;AAChE,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,qCAAqC;AA2IvC,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,iBAAiB,+BAA+B,UAAU;AAGtF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAiD,IAAI;AAC/E,QAAM,UACJ,UAAU,KAAK,EAAE,MAAM,UAAU,IAAI,OAAO,UAAU,QAAQ,MAAM,QAAQ;AAE9E;AAAA,IAAc,UAAU,KAAK,OAAO;AAAA,IAAO;AAAA,IAAS,CAAC,KAAK,WACxD,SAAS;AAAA,MACP,OAAO;AAAA,MACP,OAAO,OAAO,KAAK,EAAE,MAAM,QAAQ,OAAO,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,UAAU;AAAA,IACrF,CAAC;AAAA,EACH;AAEA,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,EAAE;AACzC,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAoB,IAAI;AACtD,QAAM,YAAY,MAAM;AACxB,QAAM,cAAc,OAAyB,IAAI;AACjD,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,OAAO,YAAY,aAAa,aAAa,QAAQ;AAG3D,YAAU,MAAM;AACd,QAAI,SAAS,OAAQ,aAAY,SAAS,MAAM;AAAA,EAClD,GAAG,CAAC,IAAI,CAAC;AACT,eAAa,SAAS,QAAQ,OAAO;AAErC,QAAM,UACJ,UAAU,OAAO,OACf,oBAAC,WAAQ,IAAI,WAAW,WAAW,oBAChC,mBAAS,OAAO,OACnB;AAEJ,QAAM,YAAY,GAAG,aAAa,SAAS;AAE3C,MAAI,YAAY,YAAY;AAC1B,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,YAAW,aAAS,MAAC,WAAW,WACvD;AAAA;AAAA,MACD,oBAAC,gBAAa,MAAK,MAAK,OAAO,OAAO,UAAU;AAAA,OAClD;AAAA,EAEJ;AAEA,MAAI,QAAQ,SAAS,WAAW;AAC9B,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,WAAU,WAAW,WAC5C;AAAA;AAAA,MACD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAM,oBAAC,WAAQ;AAAA,UACf,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO;AAAA,UAC9C,MAAM,OAAO;AAAA,UACb,QACE,oBAAC,UAAO,MAAM,YAAY,SAAQ,UAC/B,iBAAO,YACV;AAAA,UAEF,WAAW;AAAA;AAAA,MACb;AAAA,OACF;AAAA,EAEJ;AAEA,MAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAM,EAAE,OAAAA,QAAO,SAAAC,SAAQ,IAAI,QAAQ;AACnC,WACE,qBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,WACzC;AAAA;AAAA,MACD,oBAAC,kBAAe,MAAM,oBAAC,gBAAa,WAAU,gBAAe,GAAI,UAAU,SACzE,8BAAC,OAAE,WAAW,aAAc,iBAAO,SAAQ,GAC7C;AAAA,MACCA;AAAA,MACD,oBAAC,OAAE,WAAU,sBAAsB,iBAAO,eAAc;AAAA,MACvD,WACC,oBAAC,UAAO,MAAK,UAAS,SAAQ,UAAS,WAAU,UAAS,SAAS,MAAM,SAASD,MAAK,GACpF,iBAAO,QACV,IAEA,oBAAC,UAAO,MAAMA,SAAQ,UAAU,YAAY,SAASA,MAAK,IAAI,YAAY,SAAQ,UAAS,WAAU,UAClG,iBAAO,QACV;AAAA,OAEJ;AAAA,EAEJ;AAEA,QAAM,EAAE,OAAO,QAAQ,IAAI,QAAQ;AACnC,QAAM,UAAU,mBAAmB,UAAU,OAAO;AAEpD,QAAM,SAAS,CAAC,MAAiB;AAC/B,MAAE,eAAe;AACjB,QAAI,WAAW,YAAY,KAAM;AACjC,eAAW,IAAI;AACf,eAAW,IAAI;AACf,YAAQ,QAAQ,EACb,KAAK,MAAM,SAAS,EAAE,OAAO,SAAS,CAAC,CAAC,EACxC;AAAA,MACC,CAAC,WAAW;AACV,mBAAW,KAAK;AAChB,oBAAY,EAAE;AACd,mBAAW,EAAE;AACb,iBAAS,EAAE,OAAO,OAAO,EAAE,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,MACrD;AAAA,MACA,CAAC,UAAmB;AAClB,mBAAW,KAAK;AAIhB,cAAM,OAAO,cAAc,KAAK;AAChC,YAAI,SAAS,mBAAmB,SAAS,iBAAiB;AACxD,sBAAY,EAAE;AACd,qBAAW,EAAE;AACb,mBAAS,EAAE,OAAO,OAAO,EAAE,MAAM,UAAU,EAAE,CAAC;AAC9C;AAAA,QACF;AAEA;AAAA,UACE,gBAAgB,KAAK,MAClB,cAAc,KAAK,KACf,OAAO,eAAe,8BAA8B,aAAa,kBAAkB,KAAK,CAAC,IAC1F,OAAO;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,EACJ;AAEA,SACE,oBAAC,SAAK,GAAG,MAAM,cAAW,QAAO,WAAW,WAC1C,+BAAC,UAAK,WAAU,aAAY,mBAAiB,UAAU,OAAO,SAAY,WAAW,UAAU,QAC5F;AAAA;AAAA,IACA,QAAQ,oBAAC,OAAE,WAAW,aAAc,iBAAO,MAAM,KAAK,GAAE,IAAO;AAAA,IAC/D;AAAA,IAGA,QAAQ,oBAAC,WAAM,MAAK,SAAQ,MAAK,YAAW,cAAa,YAAW,OAAO,OAAO,UAAQ,MAAC,QAAM,MAAC,IAAK;AAAA,IACxG;AAAA,MAAC;AAAA;AAAA,QACC;AAAA,QACA;AAAA,QACA,kBAAkB,CAAC,SAAS;AAC1B,sBAAY,IAAI;AAChB,cAAI,QAAS,YAAW,IAAI;AAAA,QAC9B;AAAA,QACA,iBAAiB;AAAA,QACjB,MAAM;AAAA,QACN;AAAA,QACA,MAAM,EAAE,UAAU,OAAO,aAAa,SAAS,OAAO,iBAAiB,UAAU,OAAO,SAAS;AAAA;AAAA,IACnG;AAAA,IACC,WAAW,QACV,oBAAC,eAAY,MAAK,UAAS,MAAK,MAAK,MAAK,SACvC,mBACH;AAAA,IAEF,oBAAC,UAAO,MAAK,UAAS,WAAU,UAAS,UAAU,CAAC,WAAW,YAAY,MAAM,SAC9E,iBAAO,QACV;AAAA,KACF,GACF;AAEJ;","names":["email","notices"]}

package/dist/auth/sign-in-form.js

@@ -67,9 +67,7 @@ function SignInForm({
   const [recovery, setRecovery] = useState("");
   const [newPassword, setNewPassword] = useState("");
   const [confirm, setConfirm] = useState("");
-  const [challenge, setChallenge] = useState(
-    null
-  );
+  const [challenge, setChallenge] = useState(null);
   const [busy, setBusy] = useState(null);
   const [failure, setFailure] = useState(null);
   const headingId = useId();
@@ -113,7 +111,8 @@ function SignInForm({
   const messageFor = (error, action, code2, recoveryUsed) => {
     const own = describeError?.(error, action);
     if (hasContent(own)) return own;
-    if (isRateLimited(error)) return (labels.rateLimited ?? DEFAULT_SIGN_IN_LABELS.rateLimited)(retryAfterSeconds(error));
+    if (isRateLimited(error))
+      return (labels.rateLimited ?? DEFAULT_SIGN_IN_LABELS.rateLimited)(retryAfterSeconds(error));
     if (action === "password") return code2 === "invalid_credentials" ? labels.invalidCredentials : labels.failed;
     if (action === "passkey") return labels.passkeyFailed;
     if (action === "code") {
@@ -366,7 +365,16 @@ function SignInForm({
         showDeactivated && /* @__PURE__ */ jsx("p", { className: HINT_CLASS, children: withContact(labels.deactivatedHint, deactivatedContact) }),
         tagged && /* @__PURE__ */ jsx("p", { className: HINT_CLASS, children: labels.tagHint(tagged) })
       ] }),
-      /* @__PURE__ */ jsx(Button, { type: "submit", className: "w-full", pending: busy === "password" || busy === "done", disabled: busy === "passkey", children: labels.submit }),
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          type: "submit",
+          className: "w-full",
+          pending: busy === "password" || busy === "done",
+          disabled: busy === "passkey",
+          children: labels.submit
+        }
+      ),
       onPasskey && /* @__PURE__ */ jsxs(
         Button,
         {