@eifi1/ui-kit 0.51.6 → 0.52.0

package/dist/auth/verify-email-labels.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/verify-email-labels.ts"],"sourcesContent":["// The English words of ./verify-email, in a module with no component code: the English\n// catalogue (src/i18n/defaults.ts) imports them without the component, so `en` loads as one\n// chunk like the other languages (0.34, KS U8). ./verify-email re-exports them.\n\nimport { englishRateLimited } from \"./auth-errors\";\nimport type { VerifyEmailLabels } from \"./verify-email\";\n\nexport const DEFAULT_VERIFY_EMAIL_LABELS: VerifyEmailLabels = {\n  title: \"Confirm your email address\",\n  verifying: \"Confirming…\",\n  verified: \"Your email address is confirmed.\",\n  continue: \"Continue\",\n  invalid: \"This confirmation link is not valid\",\n  expired: \"This confirmation link has expired\",\n  noToken: \"This link is missing its confirmation token.\",\n  invalidHint: \"The link may have expired or already been used.\",\n  requestInApp: \"You can request a new one from inside the app.\",\n  requestHere: \"You can request a new one here.\",\n  resend: \"Send again\",\n  resendIn: (seconds) => `Send again in ${seconds} s`,\n  resent: \"Confirmation email sent\",\n  resendError: \"Could not send the confirmation email\",\n  rateLimited: englishRateLimited,\n  banner: \"Please confirm your email address.\",\n  dismiss: \"Not now\",\n};\n"],"mappings":";AAIA,SAAS,0BAA0B;AAG5B,MAAM,8BAAiD;AAAA,EAC5D,OAAO;AAAA,EACP,WAAW;AAAA,EACX,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,aAAa;AAAA,EACb,cAAc;AAAA,EACd,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,UAAU,CAAC,YAAY,iBAAiB,OAAO;AAAA,EAC/C,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS;AACX;","names":[]}
+{"version":3,"sources":["../../src/auth/verify-email-labels.ts"],"sourcesContent":["// The English words of ./verify-email, in a module with no component code: the English\n// catalogue (src/i18n/defaults.ts) imports them without the component, so `en` loads as one\n// chunk like the other languages (0.34, KS U8). ./verify-email re-exports them.\n\nimport { englishRateLimited } from \"./auth-errors-labels\";\nimport type { VerifyEmailLabels } from \"./verify-email\";\n\nexport const DEFAULT_VERIFY_EMAIL_LABELS: VerifyEmailLabels = {\n  title: \"Confirm your email address\",\n  verifying: \"Confirming…\",\n  verified: \"Your email address is confirmed.\",\n  continue: \"Continue\",\n  invalid: \"This confirmation link is not valid\",\n  expired: \"This confirmation link has expired\",\n  noToken: \"This link is missing its confirmation token.\",\n  invalidHint: \"The link may have expired or already been used.\",\n  requestInApp: \"You can request a new one from inside the app.\",\n  requestHere: \"You can request a new one here.\",\n  resend: \"Send again\",\n  resendIn: (seconds) => `Send again in ${seconds} s`,\n  resent: \"Confirmation email sent\",\n  resendError: \"Could not send the confirmation email\",\n  rateLimited: englishRateLimited,\n  banner: \"Please confirm your email address.\",\n  dismiss: \"Not now\",\n};\n"],"mappings":";AAIA,SAAS,0BAA0B;AAG5B,MAAM,8BAAiD;AAAA,EAC5D,OAAO;AAAA,EACP,WAAW;AAAA,EACX,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,aAAa;AAAA,EACb,cAAc;AAAA,EACd,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,UAAU,CAAC,YAAY,iBAAiB,OAAO;AAAA,EAC/C,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS;AACX;","names":[]}

package/dist/auth/verify-email.js

@@ -3,13 +3,15 @@ import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
 import { CheckCircle2, MailWarning, TimerOff, XCircle } from "lucide-react";
 import { cn } from "../lib/cn.js";
+import { describeFailure } from "../lib/describe-failure.js";
 import { useKitLabels } from "../i18n/kit-labels.js";
 import { useAnnounce } from "../hooks/use-announce.js";
 import { AlertBanner } from "../components/alert-banner.js";
 import { LoadingState } from "../components/loading-state.js";
 import { Button } from "../components/button.js";
 import { EmptyState } from "../components/empty-state.js";
-import { OUTCOME_CLASS, STATUS_HEADING_CLASS, isThenable, useOncePerKey } from "./status-parts.js";
+import { isThenable } from "../lib/thenable.js";
+import { OUTCOME_CLASS, STATUS_HEADING_CLASS, useOncePerKey } from "./status-parts.js";
 import { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from "./auth-errors.js";
 import { DEFAULT_VERIFY_EMAIL_LABELS } from "./verify-email-labels.js";
 const DEFAULT_COOLDOWN = 60;
@@ -74,7 +76,10 @@ function ResendStatus({
   labels,
   className
 }) {
-  const failed = phase === "failed" ? describeError?.(error) ?? (isRateLimited(error) ? (labels.rateLimited ?? englishRateLimited)(retryAfterSeconds(error)) : labels.resendError) : "";
+  const failed = phase === "failed" ? describeFailure(
+    describeError?.(error),
+    isRateLimited(error) ? (labels.rateLimited ?? englishRateLimited)(retryAfterSeconds(error)) : labels.resendError
+  ) : "";
   return /* @__PURE__ */ jsx("span", { role: "status", className: cn(phase === "failed" ? "text-danger" : "text-success", className), children: phase === "sent" ? labels.resent : failed });
 }
 function defaultVerifyFailure(error) {

package/dist/auth/verify-email.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/verify-email.tsx"],"sourcesContent":["import { useEffect, useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { CheckCircle2, MailWarning, TimerOff, XCircle } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { useAnnounce } from \"../hooks/use-announce\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { LoadingState } from \"../components/loading-state\";\nimport { Button } from \"../components/button\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { OUTCOME_CLASS, STATUS_HEADING_CLASS, isThenable, useOncePerKey } from \"./status-parts\";\nimport { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\nimport { DEFAULT_VERIFY_EMAIL_LABELS } from \"./verify-email-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the verification page and banner render — the `verifyEmail` namespace.\n *  keksdose's words (`verify_email.*`, and its server's \"has expired\"). */\nexport interface VerifyEmailLabels {\n  /** The page's heading. */\n  title: string;\n  /** While the link is redeemed. */\n  verifying: string;\n  verified: string;\n  /** The way on from the page — into the app, or to sign-in. */\n  continue: string;\n  invalid: string;\n  expired: string;\n  /** The page was opened without a `token`. */\n  noToken: string;\n  /** Under `invalid`: why a link stops working. */\n  invalidHint: string;\n  /** Under a dead link, signed out: where a new one comes from. */\n  requestInApp: string;\n  /** Under a dead link, signed in, beside \"Send again\". */\n  requestHere: string;\n  /** The resend button, on the page and in the banner. */\n  resend: string;\n  /** The resend button while a just-sent mail cools down, given the seconds left. */\n  resendIn: (seconds: number) => string;\n  /** Said (and shown) after a resend went out. */\n  resent: string;\n  /** Said (and shown) after a resend failed. */\n  resendError: string;\n  /** 0.31.1: a resend refused as throttled — HTTP 429 (`isRateLimited`) — given the\n   *  `Retry-After` seconds, when the app's `describeError` has no words of its own\n   *  (keksdose borrowed the sign-in namespace's). */\n  rateLimited?: (seconds?: number) => string;\n  /** The banner's message. */\n  banner: string;\n  /** The banner's ×: it defers, it does not close anything. */\n  dismiss: string;\n}\n\n// Defined in ./verify-email-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_VERIFY_EMAIL_LABELS };\n\n/** A minute: long enough that an impatient second click does not mail twice, short\n *  enough that a mail lost to a spam filter can be re-sent without leaving the page. The\n *  server's own limit is the real one (kastlan: 3 an hour per address). */\nconst DEFAULT_COOLDOWN = 60;\n\n/* ── Resend ──────────────────────────────────────────────────────────────── */\n\ntype ResendPhase = \"idle\" | \"sending\" | \"sent\" | \"failed\";\n\n/**\n * \"Send again\" with its own memory: busy while the request runs, then — after a mail\n * went out — held for `cooldown` seconds with the countdown on the button, so a second\n * click cannot mail twice and a throttled server is not asked to refuse. A failure frees\n * it at once. The outcome is a polite live region that is always rendered (a region that\n * mounts with its message is often not read), and visible.\n */\nfunction useResend(onResend: (() => Promise<unknown> | void) | undefined, cooldown: number) {\n  const [phase, setPhase] = useState<ResendPhase>(\"idle\");\n  // The refusal itself, for `describeError` (0.30.0): the server's own sentence — keksdose's\n  // per-address throttle, \"try again in N minutes\" — beats a fixed \"could not send\".\n  const [error, setError] = useState<unknown>(undefined);\n  const [remaining, setRemaining] = useState(0);\n  const counting = remaining > 0;\n  useEffect(() => {\n    if (!counting) return;\n    const id = setInterval(() => setRemaining((r) => Math.max(0, r - 1)), 1000);\n    return () => clearInterval(id);\n  }, [counting]);\n\n  const sent = () => {\n    setPhase(\"sent\");\n    setRemaining(Math.max(0, Math.round(cooldown)));\n  };\n  const send = () => {\n    if (!onResend || phase === \"sending\" || counting) return;\n    let result: unknown;\n    try {\n      result = onResend();\n    } catch (e) {\n      setError(e);\n      setPhase(\"failed\");\n      return;\n    }\n    if (!isThenable(result)) {\n      sent();\n      return;\n    }\n    setPhase(\"sending\");\n    result.then(sent, (e: unknown) => {\n      setError(e);\n      setPhase(\"failed\");\n    });\n  };\n  return { phase, remaining, send, error };\n}\n\nfunction ResendButton({\n  state,\n  labels,\n  variant,\n}: {\n  state: ReturnType<typeof useResend>;\n  labels: VerifyEmailLabels;\n  variant: \"secondary\" | \"accent\";\n}) {\n  return (\n    <Button\n      type=\"button\"\n      variant={variant}\n      size={variant === \"secondary\" ? \"sm\" : undefined}\n      onClick={state.send}\n      pending={state.phase === \"sending\"}\n      // `disabledReason`, not `disabled`: the button just pressed has the focus, and a\n      // native `disabled` would drop it to <body>. The reason is what just happened.\n      disabledReason={state.remaining > 0 ? labels.resent : undefined}\n    >\n      {state.remaining > 0 ? labels.resendIn(state.remaining) : labels.resend}\n    </Button>\n  );\n}\n\nfunction ResendStatus({\n  phase,\n  error,\n  describeError,\n  labels,\n  className,\n}: {\n  phase: ResendPhase;\n  error?: unknown;\n  describeError?: (error: unknown) => string | undefined;\n  labels: VerifyEmailLabels;\n  className?: string;\n}) {\n  // The app's words first, then the throttle's, then the kit's catch-all.\n  const failed =\n    phase === \"failed\"\n      ? (describeError?.(error) ??\n        (isRateLimited(error)\n          ? (labels.rateLimited ?? englishRateLimited)(retryAfterSeconds(error))\n          : labels.resendError))\n      : \"\";\n  return (\n    <span role=\"status\" className={cn(phase === \"failed\" ? \"text-danger\" : \"text-success\", className)}>\n      {phase === \"sent\" ? labels.resent : failed}\n    </span>\n  );\n}\n\n/* ── The page ────────────────────────────────────────────────────────────── */\n\n/** What became of a confirmation link that did not verify. */\nexport type VerifyEmailFailure = \"invalid\" | \"expired\";\n\n/** The default when the app gives no `classifyError`: the coded refusal decides. */\nfunction defaultVerifyFailure(error: unknown): VerifyEmailFailure {\n  return authErrorCode(error) === \"token_expired\" ? \"expired\" : \"invalid\";\n}\n\nexport interface VerifyEmailStatusProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"title\"> {\n  /** The link's token — the app's `?token=`. Empty: the link was cut short, and the\n   *  page says so without asking anyone. */\n  token: string;\n  /**\n   * Redeem it — `POST /auth/verify-email {token}`, once per token, on mount. A POST and\n   * not the link's own GET (§10.10): a mail scanner that opens every link must not\n   * confirm an address nobody read. Resolve when it verified (an address that already\n   * was counts: keksdose's redeem is idempotent); reject with the client's error.\n   */\n  onVerify: (token: string) => Promise<unknown>;\n  /** Which dead end a rejection is. Default: `invalid` for everything — §5.2's servers\n   *  answer one `token_invalid`; an app whose server tells expiry apart maps it here. */\n  classifyError?: (error: unknown) => VerifyEmailFailure;\n  /** 0.30.0: the words for a refused resend — the server's own sentence (a throttle's\n   *  \"try again in N minutes\"), else the kit's `resendError`. */\n  describeError?: (error: unknown) => string | undefined;\n  /** Someone is signed in on this device: \"Continue\" goes into the app, and a dead link\n   *  offers \"Send again\" (with `onResend`). */\n  signedIn?: boolean;\n  /** Send a new confirmation mail (`POST /auth/verify-email/resend`) — offered on a dead\n   *  link while signed in. */\n  onResend?: () => Promise<unknown> | void;\n  /** Seconds \"Send again\" waits after a mail went out. Default 60; `0` never waits. */\n  cooldown?: number;\n  /** Where \"Continue\" goes. Default `/` signed in, `/login` signed out. */\n  continueHref?: string;\n  /** App content under \"confirmed\" — keksdose's \"Others can now share a budget with you\n   *  directly.\" */\n  verifiedContent?: ReactNode;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it in\n   *  `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<VerifyEmailLabels>;\n}\n\ntype VerifyOutcome = \"verified\" | VerifyEmailFailure;\n\n/**\n * Redeem an email-confirmation link (`/verify-email?token=…`, docs/auth-harmonization.md\n * §7) — keksdose's `VerifyEmailPage` (features/auth/verify-email-page.tsx), with\n * kastlan's outcome blocks and its separate \"expired\".\n *\n * Opened from an inbox, often in a browser with no session, so the token is the only\n * credential and the page renders signed-out. It redeems once per token on mount\n * (StrictMode's double effect included — the token is single-use) and shows one of:\n * confirmed; not valid; expired; or the link had no token at all. Verification gates\n * nothing (§2.8), so every outcome ends on \"Continue\". Signed in, a dead link also\n * offers \"Send again\", which waits `cooldown` seconds after a mail went out.\n *\n * The outcome replaces the spinner, which says nothing to a screen reader on its own,\n * so it is also announced.\n */\nexport function VerifyEmailStatus({\n  token,\n  onVerify,\n  classifyError,\n  describeError,\n  signedIn = false,\n  onResend,\n  cooldown = DEFAULT_COOLDOWN,\n  continueHref,\n  verifiedContent,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: VerifyEmailStatusProps) {\n  const labels = useKitLabels(\"verifyEmail\", DEFAULT_VERIFY_EMAIL_LABELS, labelsProp);\n  const [settled, setSettled] = useState<{ token: string; outcome: VerifyOutcome } | null>(null);\n  const outcome: VerifyOutcome | \"verifying\" =\n    token === \"\" ? \"invalid\" : settled?.token === token ? settled.outcome : \"verifying\";\n  const { announce, regionProps } = useAnnounce();\n  const resend = useResend(onResend, cooldown);\n\n  useOncePerKey(token === \"\" ? null : token, onVerify, (key, result) => {\n    // Without a classifier, the coded refusal decides (0.30.0): `token_expired` is\n    // \"expired\", anything else \"invalid\".\n    const next: VerifyOutcome = result.ok ? \"verified\" : (classifyError ?? defaultVerifyFailure)(result.error);\n    setSettled({ token: key, outcome: next });\n    announce(labels[next]);\n  });\n\n  const href = continueHref ?? (signedIn ? \"/\" : \"/login\");\n  // `replace`: the token is spent, so Back must not land on this page again (keksdose F1).\n  const continueButton = (\n    <Button href={href} replace variant={outcome === \"verified\" ? \"accent\" : \"secondary\"}>\n      {labels.continue}\n    </Button>\n  );\n  const canResend = signedIn && onResend !== undefined;\n\n  let body: ReactNode;\n  if (outcome === \"verifying\") {\n    body = <LoadingState size=\"sm\" label={labels.verifying} />;\n  } else if (outcome === \"verified\") {\n    body = (\n      <EmptyState\n        tone=\"success\"\n        icon={<CheckCircle2 />}\n        title={labels.verified}\n        hint={verifiedContent}\n        action={continueButton}\n        className={OUTCOME_CLASS}\n      />\n    );\n  } else {\n    const hint = (\n      <>\n        {outcome === \"invalid\" && token !== \"\" ? `${labels.invalidHint} ` : \"\"}\n        {canResend ? labels.requestHere : labels.requestInApp}\n      </>\n    );\n    body = (\n      <EmptyState\n        tone=\"danger\"\n        icon={outcome === \"expired\" ? <TimerOff /> : <XCircle />}\n        title={token === \"\" ? labels.noToken : labels[outcome]}\n        hint={hint}\n        action={\n          <>\n            {canResend && <ResendButton state={resend} labels={labels} variant=\"accent\" />}\n            {continueButton}\n          </>\n        }\n        className={OUTCOME_CLASS}\n      />\n    );\n  }\n\n  return (\n    <div\n      {...rest}\n      data-state={outcome}\n      aria-busy={outcome === \"verifying\" || undefined}\n      className={cn(\"space-y-3\", className)}\n    >\n      {title === null ? null : <Heading className={STATUS_HEADING_CLASS}>{title ?? labels.title}</Heading>}\n      {body}\n      {canResend && (\n        <ResendStatus\n          phase={resend.phase}\n          error={resend.error}\n          describeError={describeError}\n          labels={labels}\n          className=\"block text-center text-xs\"\n        />\n      )}\n      {/* Rendered from the start, so the outcome is read when it arrives. */}\n      <div {...regionProps} />\n    </div>\n  );\n}\n\n/* ── The banner ──────────────────────────────────────────────────────────── */\n\nexport interface EmailVerificationBannerProps {\n  /** Send a new confirmation mail (`POST /auth/verify-email/resend`). Resolve when it\n   *  went out; reject and the banner says it could not. */\n  onResend: () => Promise<unknown> | void;\n  /** 0.30.0: the words for a refused resend — the server's own sentence, else the kit's. */\n  describeError?: (error: unknown) => string | undefined;\n  /** Seconds \"Send again\" waits after a mail went out. Default 60; `0` never waits. */\n  cooldown?: number;\n  /** The ×, \"Not now\". The banner does not hide itself: the app stops rendering it —\n   *  keksdose for the rest of the session. Left out, no ×. */\n  onDismiss?: () => void;\n  /** `strip` (default): keksdose's band across the top of the shell. `box`: kastlan's\n   *  callout inside the page. */\n  variant?: \"strip\" | \"box\";\n  /** The app's sentence after the kit's — keksdose's \"Until you do, nobody can share a\n   *  budget with you directly.\" */\n  children?: ReactNode;\n  className?: string;\n  labels?: LabelOverride<VerifyEmailLabels>;\n  /**\n   * 0.48: on a phone hold the message to one line with a More / Less toggle —\n   * {@link AlertBanner}'s `clampMobile`, passed through (kastlan S2: its banner took ~110px\n   * of a 390px phone). The resend's outcome (\"Sent\", the error) then moves out of the\n   * message to sit after \"Send again\", at every width, so the line that answers the press\n   * is never hidden behind \"More\". Default `false`: the outcome stays in the message.\n   *\n   * 0.51 (kastlan K1, KX-5): in the `strip` variant \"Send again\" then stays on the clamped\n   * message's line on a phone — one line, 43px, on a 390px phone in all seven catalogues —\n   * where it took a line of its own (71px). The box's equivalent is `actionPlacement`.\n   */\n  clampMobile?: boolean;\n  /**\n   * 0.50 (kastlan K1): where \"Send again\" goes on a phone in the `box` variant —\n   * {@link AlertBanner}'s `actionPlacement`, passed through. `\"flow\"` keeps it on the\n   * message's line while the message keeps 10rem, else at the end of the next line,\n   * instead of a line of its own (kastlan's ≤ 56px banner on a 390px phone, KX-5).\n   * Default `\"own-line\"`, as before. The `strip` variant flows like that already.\n   */\n  actionPlacement?: \"own-line\" | \"flow\";\n}\n\n/**\n * The nudge for a signed-in account whose address is not confirmed — keksdose's\n * `VerifyEmailBanner` (features/auth/verify-email-banner.tsx), kastlan's copy of it.\n *\n * A prompt, not a wall: verification gates nothing (§2.8). The app renders it while\n * `/auth/me` says `email_verified: false`, and stops when the user dismisses it or the\n * page above confirms the address. \"Send again\" waits `cooldown` seconds after a mail\n * went out (the button says how long), and its outcome is written into the banner and\n * read out — no toast needed.\n */\nexport function EmailVerificationBanner({\n  onResend,\n  describeError,\n  cooldown = DEFAULT_COOLDOWN,\n  onDismiss,\n  variant = \"strip\",\n  children,\n  className,\n  labels: labelsProp,\n  clampMobile = false,\n  actionPlacement,\n}: EmailVerificationBannerProps) {\n  const labels = useKitLabels(\"verifyEmail\", DEFAULT_VERIFY_EMAIL_LABELS, labelsProp);\n  const resend = useResend(onResend, cooldown);\n  // One live region either way, mounted from the start (a region added later is often not\n  // read out): in the message, or — clamped — after the button, outside the clamp.\n  const status = (\n    <ResendStatus\n      phase={resend.phase}\n      error={resend.error}\n      describeError={describeError}\n      labels={labels}\n      className=\"font-medium\"\n    />\n  );\n  const button = <ResendButton state={resend} labels={labels} variant=\"secondary\" />;\n  return (\n    <AlertBanner\n      tone=\"warning\"\n      variant={variant}\n      icon={<MailWarning />}\n      action={\n        clampMobile ? (\n          <>\n            {button}\n            {status}\n          </>\n        ) : (\n          button\n        )\n      }\n      onDismiss={onDismiss}\n      dismissLabel={onDismiss ? labels.dismiss : undefined}\n      clampMobile={clampMobile}\n      actionPlacement={actionPlacement}\n      className={className}\n    >\n      {labels.banner}\n      {children != null && children !== false && <> {children}</>}\n      {!clampMobile && <> {status}</>}\n    </AlertBanner>\n  );\n}\n"],"mappings":";AA4HI,SAoKE,UApKF,KAoKE,YApKF;AA5HJ,SAAS,WAAW,gBAAgB;AAEpC,SAAS,cAAc,aAAa,UAAU,eAAe;AAC7D,SAAS,UAAU;AACnB,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,eAAe,sBAAsB,YAAY,qBAAqB;AAC/E,SAAS,eAAe,oBAAoB,eAAe,yBAAyB;AAEpF,SAAS,mCAAmC;AAgD5C,MAAM,mBAAmB;AAazB,SAAS,UAAU,UAAuD,UAAkB;AAC1F,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAsB,MAAM;AAGtD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAkB,MAAS;AACrD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,CAAC;AAC5C,QAAM,WAAW,YAAY;AAC7B,YAAU,MAAM;AACd,QAAI,CAAC,SAAU;AACf,UAAM,KAAK,YAAY,MAAM,aAAa,CAAC,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,GAAI;AAC1E,WAAO,MAAM,cAAc,EAAE;AAAA,EAC/B,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,OAAO,MAAM;AACjB,aAAS,MAAM;AACf,iBAAa,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,EAChD;AACA,QAAM,OAAO,MAAM;AACjB,QAAI,CAAC,YAAY,UAAU,aAAa,SAAU;AAClD,QAAI;AACJ,QAAI;AACF,eAAS,SAAS;AAAA,IACpB,SAAS,GAAG;AACV,eAAS,CAAC;AACV,eAAS,QAAQ;AACjB;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,WAAK;AACL;AAAA,IACF;AACA,aAAS,SAAS;AAClB,WAAO,KAAK,MAAM,CAAC,MAAe;AAChC,eAAS,CAAC;AACV,eAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO,EAAE,OAAO,WAAW,MAAM,MAAM;AACzC;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL;AAAA,MACA,MAAM,YAAY,cAAc,OAAO;AAAA,MACvC,SAAS,MAAM;AAAA,MACf,SAAS,MAAM,UAAU;AAAA,MAGzB,gBAAgB,MAAM,YAAY,IAAI,OAAO,SAAS;AAAA,MAErD,gBAAM,YAAY,IAAI,OAAO,SAAS,MAAM,SAAS,IAAI,OAAO;AAAA;AAAA,EACnE;AAEJ;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AAED,QAAM,SACJ,UAAU,WACL,gBAAgB,KAAK,MACrB,cAAc,KAAK,KACf,OAAO,eAAe,oBAAoB,kBAAkB,KAAK,CAAC,IACnE,OAAO,eACX;AACN,SACE,oBAAC,UAAK,MAAK,UAAS,WAAW,GAAG,UAAU,WAAW,gBAAgB,gBAAgB,SAAS,GAC7F,oBAAU,SAAS,OAAO,SAAS,QACtC;AAEJ;AAQA,SAAS,qBAAqB,OAAoC;AAChE,SAAO,cAAc,KAAK,MAAM,kBAAkB,YAAY;AAChE;AAyDO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,CAAC,SAAS,UAAU,IAAI,SAA2D,IAAI;AAC7F,QAAM,UACJ,UAAU,KAAK,YAAY,SAAS,UAAU,QAAQ,QAAQ,UAAU;AAC1E,QAAM,EAAE,UAAU,YAAY,IAAI,YAAY;AAC9C,QAAM,SAAS,UAAU,UAAU,QAAQ;AAE3C,gBAAc,UAAU,KAAK,OAAO,OAAO,UAAU,CAAC,KAAK,WAAW;AAGpE,UAAM,OAAsB,OAAO,KAAK,cAAc,iBAAiB,sBAAsB,OAAO,KAAK;AACzG,eAAW,EAAE,OAAO,KAAK,SAAS,KAAK,CAAC;AACxC,aAAS,OAAO,IAAI,CAAC;AAAA,EACvB,CAAC;AAED,QAAM,OAAO,iBAAiB,WAAW,MAAM;AAE/C,QAAM,iBACJ,oBAAC,UAAO,MAAY,SAAO,MAAC,SAAS,YAAY,aAAa,WAAW,aACtE,iBAAO,UACV;AAEF,QAAM,YAAY,YAAY,aAAa;AAE3C,MAAI;AACJ,MAAI,YAAY,aAAa;AAC3B,WAAO,oBAAC,gBAAa,MAAK,MAAK,OAAO,OAAO,WAAW;AAAA,EAC1D,WAAW,YAAY,YAAY;AACjC,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,gBAAa;AAAA,QACpB,OAAO,OAAO;AAAA,QACd,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ,OAAO;AACL,UAAM,OACJ,iCACG;AAAA,kBAAY,aAAa,UAAU,KAAK,GAAG,OAAO,WAAW,MAAM;AAAA,MACnE,YAAY,OAAO,cAAc,OAAO;AAAA,OAC3C;AAEF,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,YAAY,YAAY,oBAAC,YAAS,IAAK,oBAAC,WAAQ;AAAA,QACtD,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO,OAAO;AAAA,QACrD;AAAA,QACA,QACE,iCACG;AAAA,uBAAa,oBAAC,gBAAa,OAAO,QAAQ,QAAgB,SAAQ,UAAS;AAAA,UAC3E;AAAA,WACH;AAAA,QAEF,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,cAAY;AAAA,MACZ,aAAW,YAAY,eAAe;AAAA,MACtC,WAAW,GAAG,aAAa,SAAS;AAAA,MAEnC;AAAA,kBAAU,OAAO,OAAO,oBAAC,WAAQ,WAAW,sBAAuB,mBAAS,OAAO,OAAM;AAAA,QACzF;AAAA,QACA,aACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO,OAAO;AAAA,YACd;AAAA,YACA;AAAA,YACA,WAAU;AAAA;AAAA,QACZ;AAAA,QAGF,oBAAC,SAAK,GAAG,aAAa;AAAA;AAAA;AAAA,EACxB;AAEJ;AAuDO,SAAS,wBAAwB;AAAA,EACtC;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,cAAc;AAAA,EACd;AACF,GAAiC;AAC/B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,SAAS,UAAU,UAAU,QAAQ;AAG3C,QAAM,SACJ;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,OAAO;AAAA,MACd,OAAO,OAAO;AAAA,MACd;AAAA,MACA;AAAA,MACA,WAAU;AAAA;AAAA,EACZ;AAEF,QAAM,SAAS,oBAAC,gBAAa,OAAO,QAAQ,QAAgB,SAAQ,aAAY;AAChF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL;AAAA,MACA,MAAM,oBAAC,eAAY;AAAA,MACnB,QACE,cACE,iCACG;AAAA;AAAA,QACA;AAAA,SACH,IAEA;AAAA,MAGJ;AAAA,MACA,cAAc,YAAY,OAAO,UAAU;AAAA,MAC3C;AAAA,MACA;AAAA,MACA;AAAA,MAEC;AAAA,eAAO;AAAA,QACP,YAAY,QAAQ,aAAa,SAAS,iCAAE;AAAA;AAAA,UAAE;AAAA,WAAS;AAAA,QACvD,CAAC,eAAe,iCAAE;AAAA;AAAA,UAAE;AAAA,WAAO;AAAA;AAAA;AAAA,EAC9B;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/auth/verify-email.tsx"],"sourcesContent":["import { useEffect, useState } from \"react\";\nimport type { ComponentPropsWithRef, ReactNode } from \"react\";\nimport { CheckCircle2, MailWarning, TimerOff, XCircle } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\nimport { describeFailure } from \"../lib/describe-failure\";\nimport { useKitLabels, type LabelOverride } from \"../i18n/kit-labels\";\nimport { useAnnounce } from \"../hooks/use-announce\";\nimport { AlertBanner } from \"../components/alert-banner\";\nimport { LoadingState } from \"../components/loading-state\";\nimport { Button } from \"../components/button\";\nimport { EmptyState } from \"../components/empty-state\";\nimport { isThenable } from \"../lib/thenable\";\nimport { OUTCOME_CLASS, STATUS_HEADING_CLASS, useOncePerKey } from \"./status-parts\";\nimport { authErrorCode, englishRateLimited, isRateLimited, retryAfterSeconds } from \"./auth-errors\";\nimport type { AuthHeadingLevel } from \"./status-parts\";\nimport { DEFAULT_VERIFY_EMAIL_LABELS } from \"./verify-email-labels\";\n\n/* ── Labels ──────────────────────────────────────────────────────────────── */\n\n/** Every string the verification page and banner render — the `verifyEmail` namespace.\n *  keksdose's words (`verify_email.*`, and its server's \"has expired\"). */\nexport interface VerifyEmailLabels {\n  /** The page's heading. */\n  title: string;\n  /** While the link is redeemed. */\n  verifying: string;\n  verified: string;\n  /** The way on from the page — into the app, or to sign-in. */\n  continue: string;\n  invalid: string;\n  expired: string;\n  /** The page was opened without a `token`. */\n  noToken: string;\n  /** Under `invalid`: why a link stops working. */\n  invalidHint: string;\n  /** Under a dead link, signed out: where a new one comes from. */\n  requestInApp: string;\n  /** Under a dead link, signed in, beside \"Send again\". */\n  requestHere: string;\n  /** The resend button, on the page and in the banner. */\n  resend: string;\n  /** The resend button while a just-sent mail cools down, given the seconds left. */\n  resendIn: (seconds: number) => string;\n  /** Said (and shown) after a resend went out. */\n  resent: string;\n  /** Said (and shown) after a resend failed. */\n  resendError: string;\n  /** 0.31.1: a resend refused as throttled — HTTP 429 (`isRateLimited`) — given the\n   *  `Retry-After` seconds, when the app's `describeError` has no words of its own\n   *  (keksdose borrowed the sign-in namespace's). */\n  rateLimited?: (seconds?: number) => string;\n  /** The banner's message. */\n  banner: string;\n  /** The banner's ×: it defers, it does not close anything. */\n  dismiss: string;\n}\n\n// Defined in ./verify-email-labels, which holds no component code (0.34, KS U8).\nexport { DEFAULT_VERIFY_EMAIL_LABELS };\n\n/** A minute: long enough that an impatient second click does not mail twice, short\n *  enough that a mail lost to a spam filter can be re-sent without leaving the page. The\n *  server's own limit is the real one (kastlan: 3 an hour per address). */\nconst DEFAULT_COOLDOWN = 60;\n\n/* ── Resend ──────────────────────────────────────────────────────────────── */\n\ntype ResendPhase = \"idle\" | \"sending\" | \"sent\" | \"failed\";\n\n/**\n * \"Send again\" with its own memory: busy while the request runs, then — after a mail\n * went out — held for `cooldown` seconds with the countdown on the button, so a second\n * click cannot mail twice and a throttled server is not asked to refuse. A failure frees\n * it at once. The outcome is a polite live region that is always rendered (a region that\n * mounts with its message is often not read), and visible.\n */\nfunction useResend(onResend: (() => Promise<unknown> | void) | undefined, cooldown: number) {\n  const [phase, setPhase] = useState<ResendPhase>(\"idle\");\n  // The refusal itself, for `describeError` (0.30.0): the server's own sentence — keksdose's\n  // per-address throttle, \"try again in N minutes\" — beats a fixed \"could not send\".\n  const [error, setError] = useState<unknown>(undefined);\n  const [remaining, setRemaining] = useState(0);\n  const counting = remaining > 0;\n  useEffect(() => {\n    if (!counting) return;\n    const id = setInterval(() => setRemaining((r) => Math.max(0, r - 1)), 1000);\n    return () => clearInterval(id);\n  }, [counting]);\n\n  const sent = () => {\n    setPhase(\"sent\");\n    setRemaining(Math.max(0, Math.round(cooldown)));\n  };\n  const send = () => {\n    if (!onResend || phase === \"sending\" || counting) return;\n    let result: unknown;\n    try {\n      result = onResend();\n    } catch (e) {\n      setError(e);\n      setPhase(\"failed\");\n      return;\n    }\n    if (!isThenable(result)) {\n      sent();\n      return;\n    }\n    setPhase(\"sending\");\n    result.then(sent, (e: unknown) => {\n      setError(e);\n      setPhase(\"failed\");\n    });\n  };\n  return { phase, remaining, send, error };\n}\n\nfunction ResendButton({\n  state,\n  labels,\n  variant,\n}: {\n  state: ReturnType<typeof useResend>;\n  labels: VerifyEmailLabels;\n  variant: \"secondary\" | \"accent\";\n}) {\n  return (\n    <Button\n      type=\"button\"\n      variant={variant}\n      size={variant === \"secondary\" ? \"sm\" : undefined}\n      onClick={state.send}\n      pending={state.phase === \"sending\"}\n      // `disabledReason`, not `disabled`: the button just pressed has the focus, and a\n      // native `disabled` would drop it to <body>. The reason is what just happened.\n      disabledReason={state.remaining > 0 ? labels.resent : undefined}\n    >\n      {state.remaining > 0 ? labels.resendIn(state.remaining) : labels.resend}\n    </Button>\n  );\n}\n\nfunction ResendStatus({\n  phase,\n  error,\n  describeError,\n  labels,\n  className,\n}: {\n  phase: ResendPhase;\n  error?: unknown;\n  describeError?: (error: unknown) => string | undefined;\n  labels: VerifyEmailLabels;\n  className?: string;\n}) {\n  // The app's words first, then the throttle's, then the kit's catch-all — an app's \"\"\n  // is no words (refactor audit 2026-10-30, DUP-14: `??` printed an empty status).\n  const failed =\n    phase === \"failed\"\n      ? describeFailure(\n          describeError?.(error),\n          isRateLimited(error)\n            ? (labels.rateLimited ?? englishRateLimited)(retryAfterSeconds(error))\n            : labels.resendError,\n        )\n      : \"\";\n  return (\n    <span role=\"status\" className={cn(phase === \"failed\" ? \"text-danger\" : \"text-success\", className)}>\n      {phase === \"sent\" ? labels.resent : failed}\n    </span>\n  );\n}\n\n/* ── The page ────────────────────────────────────────────────────────────── */\n\n/** What became of a confirmation link that did not verify. */\nexport type VerifyEmailFailure = \"invalid\" | \"expired\";\n\n/** The default when the app gives no `classifyError`: the coded refusal decides. */\nfunction defaultVerifyFailure(error: unknown): VerifyEmailFailure {\n  return authErrorCode(error) === \"token_expired\" ? \"expired\" : \"invalid\";\n}\n\nexport interface VerifyEmailStatusProps extends Omit<ComponentPropsWithRef<\"div\">, \"children\" | \"title\"> {\n  /** The link's token — the app's `?token=`. Empty: the link was cut short, and the\n   *  page says so without asking anyone. */\n  token: string;\n  /**\n   * Redeem it — `POST /auth/verify-email {token}`, once per token, on mount. A POST and\n   * not the link's own GET (§10.10): a mail scanner that opens every link must not\n   * confirm an address nobody read. Resolve when it verified (an address that already\n   * was counts: keksdose's redeem is idempotent); reject with the client's error.\n   */\n  onVerify: (token: string) => Promise<unknown>;\n  /** Which dead end a rejection is. Default: `invalid` for everything — §5.2's servers\n   *  answer one `token_invalid`; an app whose server tells expiry apart maps it here. */\n  classifyError?: (error: unknown) => VerifyEmailFailure;\n  /** 0.30.0: the words for a refused resend — the server's own sentence (a throttle's\n   *  \"try again in N minutes\"), else the kit's `resendError`. */\n  describeError?: (error: unknown) => string | undefined;\n  /** Someone is signed in on this device: \"Continue\" goes into the app, and a dead link\n   *  offers \"Send again\" (with `onResend`). */\n  signedIn?: boolean;\n  /** Send a new confirmation mail (`POST /auth/verify-email/resend`) — offered on a dead\n   *  link while signed in. */\n  onResend?: () => Promise<unknown> | void;\n  /** Seconds \"Send again\" waits after a mail went out. Default 60; `0` never waits. */\n  cooldown?: number;\n  /** Where \"Continue\" goes. Default `/` signed in, `/login` signed out. */\n  continueHref?: string;\n  /** App content under \"confirmed\" — keksdose's \"Others can now share a budget with you\n   *  directly.\" */\n  verifiedContent?: ReactNode;\n  /** The heading. Default `labels.title`; `null` draws none, for a page that puts it in\n   *  `AuthLayout`'s `title` instead. */\n  title?: ReactNode;\n  /** The heading's level. Default `h2`, under the page's `h1`. */\n  headingAs?: AuthHeadingLevel;\n  labels?: LabelOverride<VerifyEmailLabels>;\n}\n\ntype VerifyOutcome = \"verified\" | VerifyEmailFailure;\n\n/**\n * Redeem an email-confirmation link (`/verify-email?token=…`, docs/auth-harmonization.md\n * §7) — keksdose's `VerifyEmailPage` (features/auth/verify-email-page.tsx), with\n * kastlan's outcome blocks and its separate \"expired\".\n *\n * Opened from an inbox, often in a browser with no session, so the token is the only\n * credential and the page renders signed-out. It redeems once per token on mount\n * (StrictMode's double effect included — the token is single-use) and shows one of:\n * confirmed; not valid; expired; or the link had no token at all. Verification gates\n * nothing (§2.8), so every outcome ends on \"Continue\". Signed in, a dead link also\n * offers \"Send again\", which waits `cooldown` seconds after a mail went out.\n *\n * The outcome replaces the spinner, which says nothing to a screen reader on its own,\n * so it is also announced.\n */\nexport function VerifyEmailStatus({\n  token,\n  onVerify,\n  classifyError,\n  describeError,\n  signedIn = false,\n  onResend,\n  cooldown = DEFAULT_COOLDOWN,\n  continueHref,\n  verifiedContent,\n  title,\n  headingAs: Heading = \"h2\",\n  labels: labelsProp,\n  className,\n  ...rest\n}: VerifyEmailStatusProps) {\n  const labels = useKitLabels(\"verifyEmail\", DEFAULT_VERIFY_EMAIL_LABELS, labelsProp);\n  const [settled, setSettled] = useState<{ token: string; outcome: VerifyOutcome } | null>(null);\n  const outcome: VerifyOutcome | \"verifying\" =\n    token === \"\" ? \"invalid\" : settled?.token === token ? settled.outcome : \"verifying\";\n  const { announce, regionProps } = useAnnounce();\n  const resend = useResend(onResend, cooldown);\n\n  useOncePerKey(token === \"\" ? null : token, onVerify, (key, result) => {\n    // Without a classifier, the coded refusal decides (0.30.0): `token_expired` is\n    // \"expired\", anything else \"invalid\".\n    const next: VerifyOutcome = result.ok ? \"verified\" : (classifyError ?? defaultVerifyFailure)(result.error);\n    setSettled({ token: key, outcome: next });\n    announce(labels[next]);\n  });\n\n  const href = continueHref ?? (signedIn ? \"/\" : \"/login\");\n  // `replace`: the token is spent, so Back must not land on this page again (keksdose F1).\n  const continueButton = (\n    <Button href={href} replace variant={outcome === \"verified\" ? \"accent\" : \"secondary\"}>\n      {labels.continue}\n    </Button>\n  );\n  const canResend = signedIn && onResend !== undefined;\n\n  let body: ReactNode;\n  if (outcome === \"verifying\") {\n    body = <LoadingState size=\"sm\" label={labels.verifying} />;\n  } else if (outcome === \"verified\") {\n    body = (\n      <EmptyState\n        tone=\"success\"\n        icon={<CheckCircle2 />}\n        title={labels.verified}\n        hint={verifiedContent}\n        action={continueButton}\n        className={OUTCOME_CLASS}\n      />\n    );\n  } else {\n    const hint = (\n      <>\n        {outcome === \"invalid\" && token !== \"\" ? `${labels.invalidHint} ` : \"\"}\n        {canResend ? labels.requestHere : labels.requestInApp}\n      </>\n    );\n    body = (\n      <EmptyState\n        tone=\"danger\"\n        icon={outcome === \"expired\" ? <TimerOff /> : <XCircle />}\n        title={token === \"\" ? labels.noToken : labels[outcome]}\n        hint={hint}\n        action={\n          <>\n            {canResend && <ResendButton state={resend} labels={labels} variant=\"accent\" />}\n            {continueButton}\n          </>\n        }\n        className={OUTCOME_CLASS}\n      />\n    );\n  }\n\n  return (\n    <div\n      {...rest}\n      data-state={outcome}\n      aria-busy={outcome === \"verifying\" || undefined}\n      className={cn(\"space-y-3\", className)}\n    >\n      {title === null ? null : <Heading className={STATUS_HEADING_CLASS}>{title ?? labels.title}</Heading>}\n      {body}\n      {canResend && (\n        <ResendStatus\n          phase={resend.phase}\n          error={resend.error}\n          describeError={describeError}\n          labels={labels}\n          className=\"block text-center text-xs\"\n        />\n      )}\n      {/* Rendered from the start, so the outcome is read when it arrives. */}\n      <div {...regionProps} />\n    </div>\n  );\n}\n\n/* ── The banner ──────────────────────────────────────────────────────────── */\n\nexport interface EmailVerificationBannerProps {\n  /** Send a new confirmation mail (`POST /auth/verify-email/resend`). Resolve when it\n   *  went out; reject and the banner says it could not. */\n  onResend: () => Promise<unknown> | void;\n  /** 0.30.0: the words for a refused resend — the server's own sentence, else the kit's. */\n  describeError?: (error: unknown) => string | undefined;\n  /** Seconds \"Send again\" waits after a mail went out. Default 60; `0` never waits. */\n  cooldown?: number;\n  /** The ×, \"Not now\". The banner does not hide itself: the app stops rendering it —\n   *  keksdose for the rest of the session. Left out, no ×. */\n  onDismiss?: () => void;\n  /** `strip` (default): keksdose's band across the top of the shell. `box`: kastlan's\n   *  callout inside the page. */\n  variant?: \"strip\" | \"box\";\n  /** The app's sentence after the kit's — keksdose's \"Until you do, nobody can share a\n   *  budget with you directly.\" */\n  children?: ReactNode;\n  className?: string;\n  labels?: LabelOverride<VerifyEmailLabels>;\n  /**\n   * 0.48: on a phone hold the message to one line with a More / Less toggle —\n   * {@link AlertBanner}'s `clampMobile`, passed through (kastlan S2: its banner took ~110px\n   * of a 390px phone). The resend's outcome (\"Sent\", the error) then moves out of the\n   * message to sit after \"Send again\", at every width, so the line that answers the press\n   * is never hidden behind \"More\". Default `false`: the outcome stays in the message.\n   *\n   * 0.51 (kastlan K1, KX-5): in the `strip` variant \"Send again\" then stays on the clamped\n   * message's line on a phone — one line, 43px, on a 390px phone in all seven catalogues —\n   * where it took a line of its own (71px). The box's equivalent is `actionPlacement`.\n   */\n  clampMobile?: boolean;\n  /**\n   * 0.50 (kastlan K1): where \"Send again\" goes on a phone in the `box` variant —\n   * {@link AlertBanner}'s `actionPlacement`, passed through. `\"flow\"` keeps it on the\n   * message's line while the message keeps 10rem, else at the end of the next line,\n   * instead of a line of its own (kastlan's ≤ 56px banner on a 390px phone, KX-5).\n   * Default `\"own-line\"`, as before. The `strip` variant flows like that already.\n   */\n  actionPlacement?: \"own-line\" | \"flow\";\n}\n\n/**\n * The nudge for a signed-in account whose address is not confirmed — keksdose's\n * `VerifyEmailBanner` (features/auth/verify-email-banner.tsx), kastlan's copy of it.\n *\n * A prompt, not a wall: verification gates nothing (§2.8). The app renders it while\n * `/auth/me` says `email_verified: false`, and stops when the user dismisses it or the\n * page above confirms the address. \"Send again\" waits `cooldown` seconds after a mail\n * went out (the button says how long), and its outcome is written into the banner and\n * read out — no toast needed.\n */\nexport function EmailVerificationBanner({\n  onResend,\n  describeError,\n  cooldown = DEFAULT_COOLDOWN,\n  onDismiss,\n  variant = \"strip\",\n  children,\n  className,\n  labels: labelsProp,\n  clampMobile = false,\n  actionPlacement,\n}: EmailVerificationBannerProps) {\n  const labels = useKitLabels(\"verifyEmail\", DEFAULT_VERIFY_EMAIL_LABELS, labelsProp);\n  const resend = useResend(onResend, cooldown);\n  // One live region either way, mounted from the start (a region added later is often not\n  // read out): in the message, or — clamped — after the button, outside the clamp.\n  const status = (\n    <ResendStatus\n      phase={resend.phase}\n      error={resend.error}\n      describeError={describeError}\n      labels={labels}\n      className=\"font-medium\"\n    />\n  );\n  const button = <ResendButton state={resend} labels={labels} variant=\"secondary\" />;\n  return (\n    <AlertBanner\n      tone=\"warning\"\n      variant={variant}\n      icon={<MailWarning />}\n      action={\n        clampMobile ? (\n          <>\n            {button}\n            {status}\n          </>\n        ) : (\n          button\n        )\n      }\n      onDismiss={onDismiss}\n      dismissLabel={onDismiss ? labels.dismiss : undefined}\n      clampMobile={clampMobile}\n      actionPlacement={actionPlacement}\n      className={className}\n    >\n      {labels.banner}\n      {children != null && children !== false && <> {children}</>}\n      {!clampMobile && <> {status}</>}\n    </AlertBanner>\n  );\n}\n"],"mappings":";AA8HI,SAuKE,UAvKF,KAuKE,YAvKF;AA9HJ,SAAS,WAAW,gBAAgB;AAEpC,SAAS,cAAc,aAAa,UAAU,eAAe;AAC7D,SAAS,UAAU;AACnB,SAAS,uBAAuB;AAChC,SAAS,oBAAwC;AACjD,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAAS,eAAe,sBAAsB,qBAAqB;AACnE,SAAS,eAAe,oBAAoB,eAAe,yBAAyB;AAEpF,SAAS,mCAAmC;AAgD5C,MAAM,mBAAmB;AAazB,SAAS,UAAU,UAAuD,UAAkB;AAC1F,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAsB,MAAM;AAGtD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAkB,MAAS;AACrD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,CAAC;AAC5C,QAAM,WAAW,YAAY;AAC7B,YAAU,MAAM;AACd,QAAI,CAAC,SAAU;AACf,UAAM,KAAK,YAAY,MAAM,aAAa,CAAC,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,GAAI;AAC1E,WAAO,MAAM,cAAc,EAAE;AAAA,EAC/B,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,OAAO,MAAM;AACjB,aAAS,MAAM;AACf,iBAAa,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,EAChD;AACA,QAAM,OAAO,MAAM;AACjB,QAAI,CAAC,YAAY,UAAU,aAAa,SAAU;AAClD,QAAI;AACJ,QAAI;AACF,eAAS,SAAS;AAAA,IACpB,SAAS,GAAG;AACV,eAAS,CAAC;AACV,eAAS,QAAQ;AACjB;AAAA,IACF;AACA,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,WAAK;AACL;AAAA,IACF;AACA,aAAS,SAAS;AAClB,WAAO,KAAK,MAAM,CAAC,MAAe;AAChC,eAAS,CAAC;AACV,eAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO,EAAE,OAAO,WAAW,MAAM,MAAM;AACzC;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL;AAAA,MACA,MAAM,YAAY,cAAc,OAAO;AAAA,MACvC,SAAS,MAAM;AAAA,MACf,SAAS,MAAM,UAAU;AAAA,MAGzB,gBAAgB,MAAM,YAAY,IAAI,OAAO,SAAS;AAAA,MAErD,gBAAM,YAAY,IAAI,OAAO,SAAS,MAAM,SAAS,IAAI,OAAO;AAAA;AAAA,EACnE;AAEJ;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AAGD,QAAM,SACJ,UAAU,WACN;AAAA,IACE,gBAAgB,KAAK;AAAA,IACrB,cAAc,KAAK,KACd,OAAO,eAAe,oBAAoB,kBAAkB,KAAK,CAAC,IACnE,OAAO;AAAA,EACb,IACA;AACN,SACE,oBAAC,UAAK,MAAK,UAAS,WAAW,GAAG,UAAU,WAAW,gBAAgB,gBAAgB,SAAS,GAC7F,oBAAU,SAAS,OAAO,SAAS,QACtC;AAEJ;AAQA,SAAS,qBAAqB,OAAoC;AAChE,SAAO,cAAc,KAAK,MAAM,kBAAkB,YAAY;AAChE;AAyDO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR;AAAA,EACA,GAAG;AACL,GAA2B;AACzB,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,CAAC,SAAS,UAAU,IAAI,SAA2D,IAAI;AAC7F,QAAM,UACJ,UAAU,KAAK,YAAY,SAAS,UAAU,QAAQ,QAAQ,UAAU;AAC1E,QAAM,EAAE,UAAU,YAAY,IAAI,YAAY;AAC9C,QAAM,SAAS,UAAU,UAAU,QAAQ;AAE3C,gBAAc,UAAU,KAAK,OAAO,OAAO,UAAU,CAAC,KAAK,WAAW;AAGpE,UAAM,OAAsB,OAAO,KAAK,cAAc,iBAAiB,sBAAsB,OAAO,KAAK;AACzG,eAAW,EAAE,OAAO,KAAK,SAAS,KAAK,CAAC;AACxC,aAAS,OAAO,IAAI,CAAC;AAAA,EACvB,CAAC;AAED,QAAM,OAAO,iBAAiB,WAAW,MAAM;AAE/C,QAAM,iBACJ,oBAAC,UAAO,MAAY,SAAO,MAAC,SAAS,YAAY,aAAa,WAAW,aACtE,iBAAO,UACV;AAEF,QAAM,YAAY,YAAY,aAAa;AAE3C,MAAI;AACJ,MAAI,YAAY,aAAa;AAC3B,WAAO,oBAAC,gBAAa,MAAK,MAAK,OAAO,OAAO,WAAW;AAAA,EAC1D,WAAW,YAAY,YAAY;AACjC,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,oBAAC,gBAAa;AAAA,QACpB,OAAO,OAAO;AAAA,QACd,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ,OAAO;AACL,UAAM,OACJ,iCACG;AAAA,kBAAY,aAAa,UAAU,KAAK,GAAG,OAAO,WAAW,MAAM;AAAA,MACnE,YAAY,OAAO,cAAc,OAAO;AAAA,OAC3C;AAEF,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,MAAM,YAAY,YAAY,oBAAC,YAAS,IAAK,oBAAC,WAAQ;AAAA,QACtD,OAAO,UAAU,KAAK,OAAO,UAAU,OAAO,OAAO;AAAA,QACrD;AAAA,QACA,QACE,iCACG;AAAA,uBAAa,oBAAC,gBAAa,OAAO,QAAQ,QAAgB,SAAQ,UAAS;AAAA,UAC3E;AAAA,WACH;AAAA,QAEF,WAAW;AAAA;AAAA,IACb;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,cAAY;AAAA,MACZ,aAAW,YAAY,eAAe;AAAA,MACtC,WAAW,GAAG,aAAa,SAAS;AAAA,MAEnC;AAAA,kBAAU,OAAO,OAAO,oBAAC,WAAQ,WAAW,sBAAuB,mBAAS,OAAO,OAAM;AAAA,QACzF;AAAA,QACA,aACC;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,OAAO;AAAA,YACd,OAAO,OAAO;AAAA,YACd;AAAA,YACA;AAAA,YACA,WAAU;AAAA;AAAA,QACZ;AAAA,QAGF,oBAAC,SAAK,GAAG,aAAa;AAAA;AAAA;AAAA,EACxB;AAEJ;AAuDO,SAAS,wBAAwB;AAAA,EACtC;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,cAAc;AAAA,EACd;AACF,GAAiC;AAC/B,QAAM,SAAS,aAAa,eAAe,6BAA6B,UAAU;AAClF,QAAM,SAAS,UAAU,UAAU,QAAQ;AAG3C,QAAM,SACJ;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,OAAO;AAAA,MACd,OAAO,OAAO;AAAA,MACd;AAAA,MACA;AAAA,MACA,WAAU;AAAA;AAAA,EACZ;AAEF,QAAM,SAAS,oBAAC,gBAAa,OAAO,QAAQ,QAAgB,SAAQ,aAAY;AAChF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL;AAAA,MACA,MAAM,oBAAC,eAAY;AAAA,MACnB,QACE,cACE,iCACG;AAAA;AAAA,QACA;AAAA,SACH,IAEA;AAAA,MAGJ;AAAA,MACA,cAAc,YAAY,OAAO,UAAU;AAAA,MAC3C;AAAA,MACA;AAAA,MACA;AAAA,MAEC;AAAA,eAAO;AAAA,QACP,YAAY,QAAQ,aAAa,SAAS,iCAAE;AAAA;AAAA,UAAE;AAAA,WAAS;AAAA,QACvD,CAAC,eAAe,iCAAE;AAAA;AAAA,UAAE;AAAA,WAAO;AAAA;AAAA;AAAA,EAC9B;AAEJ;","names":[]}

package/dist/billing/cancel-request.d.ts

@@ -19,7 +19,8 @@ export interface CancelRequestView {
 export interface CancelRequest {
     /** Read the overview again every few seconds while this is true — the overview query's
      *  `waiting` (kastlan's `useBillingOverview({ waiting })`, a `refetchInterval` inside) —
-     *  so the page follows the provider. Needs no overview data: pass it to the query. */
+     *  so the page follows the provider. Needs no overview data: pass it to the query.
+     *  False again after `timeoutMs` with no move of the row. */
     waiting: boolean;
     /**
      * The row as read now (the overview's `cancel_at_period_end`; `undefined` while it
@@ -49,5 +50,13 @@ export interface CancelRequest {
  *       onResume={() => resume.mutate(undefined, { onSuccess: view.noteAsked })}
  *       …
  *     />
+ *
+ * **Bounded,** as `useCheckoutProcessing` is (FLW-6): after `timeoutMs` (10 minutes)
+ * with no move of the row the request is dropped — the polling stops and the page shows
+ * the row as it is. Unbounded, a webhook that never landed kept kastlan re-reading the
+ * overview every 3 s for as long as the page was open, which also kept a Cloud Run
+ * instance awake, and the plan line said "Cancels on …" for a row that never moved.
  */
-export declare function useCancelRequest(): CancelRequest;
+export declare function useCancelRequest({ timeoutMs }?: {
+    timeoutMs?: number;
+}): CancelRequest;

package/dist/billing/cancel-request.js

@@ -1,7 +1,16 @@
 "use client";
-import { useState } from "react";
-function useCancelRequest() {
+import { useEffect, useState } from "react";
+const WAIT_FOR = 10 * 6e4;
+function useCancelRequest({ timeoutMs = WAIT_FOR } = {}) {
   const [asked, setAsked] = useState(null);
+  useEffect(() => {
+    if (asked === null) return;
+    const timer = setTimeout(
+      () => setAsked((current) => current === asked ? null : current),
+      Math.max(0, asked.at + timeoutMs - Date.now())
+    );
+    return () => clearTimeout(timer);
+  }, [asked, timeoutMs]);
   const view = (row) => {
     if (row === void 0 || row === null) return { requested: null, cancelScheduled: false, noteAsked: () => {
     } };
@@ -10,7 +19,10 @@ function useCancelRequest() {
     return {
       requested: open ? row ? "resume" : "cancel" : null,
       cancelScheduled: open ? !row : row,
-      noteAsked: () => setAsked((a) => a !== null && a.scheduled === row ? null : { scheduled: row })
+      noteAsked: () => {
+        const at = Date.now();
+        setAsked((a) => a !== null && a.scheduled === row ? null : { scheduled: row, at });
+      }
     };
   };
   return { waiting: asked !== null, view };

package/dist/billing/cancel-request.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/billing/cancel-request.ts"],"sourcesContent":["import { useState } from \"react\";\n\n/**\n * What the payer asked for in the app (0.43, kastlan `18bf4c0`): `\"cancel\"` after\n * `POST /billing/cancel` answered 204, `\"resume\"` after `POST /billing/resume` — while the\n * overview still shows the old `cancel_at_period_end`, until the provider's\n * `subscription.updated` has landed (§16.3). `null`: nothing asked, or the row has moved.\n */\nexport type CancelRequested = \"cancel\" | \"resume\" | null;\n\n/** What the page shows for the row as read now — `CancelRequest.view(rowScheduled)`. */\nexport interface CancelRequestView {\n  /** For `SubscriptionActions`' `cancelRequested`. */\n  requested: CancelRequested;\n  /** What the plan line says — the asked-for state until the row moves, then the row's:\n   *  \"Cancels on …\" at once after a cancel, \"Renews on …\" after \"Keep subscription\". */\n  cancelScheduled: boolean;\n  /** Call on the 204 of a cancel or of a resume. A cancel and its undo both asked before\n   *  the row moved cancel out. */\n  noteAsked: () => void;\n}\n\nexport interface CancelRequest {\n  /** Read the overview again every few seconds while this is true — the overview query's\n   *  `waiting` (kastlan's `useBillingOverview({ waiting })`, a `refetchInterval` inside) —\n   *  so the page follows the provider. Needs no overview data: pass it to the query. */\n  waiting: boolean;\n  /**\n   * The row as read now (the overview's `cancel_at_period_end`; `undefined` while it\n   * loads) → what the page shows. Call it during render, after the query: when the row\n   * has moved past what was asked, it drops the request (React's \"adjust state while\n   * rendering\" pattern), so `waiting` turns false and the query stops polling.\n   */\n  view: (rowScheduled: boolean | null | undefined) => CancelRequestView;\n}\n\n/**\n * The in-app cancel's follow-up (0.43, kastlan's derivation in `18bf4c0`): after \"Cancel\n * subscription now\" or \"Keep subscription\" the server answers 204 at once, but the row's\n * `cancel_at_period_end` only changes when the provider's webhook lands. Until then the\n * page shows what was asked for, and a second press would ask the provider again.\n *\n * The state lives in the hook and needs no overview at construction, so it goes BEFORE\n * the overview query, which reads `waiting`, and the view comes after it — the overview\n * read once (build review 0.43, kastlan B2; kastlan `subscription-section.tsx:74-92`):\n *\n *     const request = useCancelRequest();\n *     const { data } = useBillingOverview({ waiting: request.waiting });\n *     const view = request.view(data?.cancel_at_period_end);\n *     <p>{standingLine({ ...data, cancel_at_period_end: view.cancelScheduled })}</p>\n *     <SubscriptionActions\n *       cancelAtPeriodEnd={data.cancel_at_period_end}\n *       cancelRequested={view.requested}\n *       onResume={() => resume.mutate(undefined, { onSuccess: view.noteAsked })}\n *       …\n *     />\n */\nexport function useCancelRequest(): CancelRequest {\n  // What was asked, kept with the row's state it was asked against.\n  const [asked, setAsked] = useState<{ scheduled: boolean } | null>(null);\n  const view = (row: boolean | null | undefined): CancelRequestView => {\n    // Not read yet: nothing to show against, and nothing to drop.\n    if (row === undefined || row === null) return { requested: null, cancelScheduled: false, noteAsked: () => {} };\n    // The row has moved: it says the rest. Adjusted during render, React's pattern for\n    // state that follows a prop.\n    if (asked !== null && asked.scheduled !== row) setAsked(null);\n    const open = asked !== null && asked.scheduled === row;\n    return {\n      requested: open ? (row ? \"resume\" : \"cancel\") : null,\n      cancelScheduled: open ? !row : row,\n      noteAsked: () => setAsked((a) => (a !== null && a.scheduled === row ? null : { scheduled: row })),\n    };\n  };\n  return { waiting: asked !== null, view };\n}\n"],"mappings":";AAAA,SAAS,gBAAgB;AAyDlB,SAAS,mBAAkC;AAEhD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwC,IAAI;AACtE,QAAM,OAAO,CAAC,QAAuD;AAEnE,QAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO,EAAE,WAAW,MAAM,iBAAiB,OAAO,WAAW,MAAM;AAAA,IAAC,EAAE;AAG7G,QAAI,UAAU,QAAQ,MAAM,cAAc,IAAK,UAAS,IAAI;AAC5D,UAAM,OAAO,UAAU,QAAQ,MAAM,cAAc;AACnD,WAAO;AAAA,MACL,WAAW,OAAQ,MAAM,WAAW,WAAY;AAAA,MAChD,iBAAiB,OAAO,CAAC,MAAM;AAAA,MAC/B,WAAW,MAAM,SAAS,CAAC,MAAO,MAAM,QAAQ,EAAE,cAAc,MAAM,OAAO,EAAE,WAAW,IAAI,CAAE;AAAA,IAClG;AAAA,EACF;AACA,SAAO,EAAE,SAAS,UAAU,MAAM,KAAK;AACzC;","names":[]}
+{"version":3,"sources":["../../src/billing/cancel-request.ts"],"sourcesContent":["import { useEffect, useState } from \"react\";\n\n/**\n * What the payer asked for in the app (0.43, kastlan `18bf4c0`): `\"cancel\"` after\n * `POST /billing/cancel` answered 204, `\"resume\"` after `POST /billing/resume` — while the\n * overview still shows the old `cancel_at_period_end`, until the provider's\n * `subscription.updated` has landed (§16.3). `null`: nothing asked, or the row has moved.\n */\nexport type CancelRequested = \"cancel\" | \"resume\" | null;\n\n/** How long a request waits for the provider's webhook: `useCheckoutProcessing`'s bound. */\nconst WAIT_FOR = 10 * 60_000;\n\n/** What the page shows for the row as read now — `CancelRequest.view(rowScheduled)`. */\nexport interface CancelRequestView {\n  /** For `SubscriptionActions`' `cancelRequested`. */\n  requested: CancelRequested;\n  /** What the plan line says — the asked-for state until the row moves, then the row's:\n   *  \"Cancels on …\" at once after a cancel, \"Renews on …\" after \"Keep subscription\". */\n  cancelScheduled: boolean;\n  /** Call on the 204 of a cancel or of a resume. A cancel and its undo both asked before\n   *  the row moved cancel out. */\n  noteAsked: () => void;\n}\n\nexport interface CancelRequest {\n  /** Read the overview again every few seconds while this is true — the overview query's\n   *  `waiting` (kastlan's `useBillingOverview({ waiting })`, a `refetchInterval` inside) —\n   *  so the page follows the provider. Needs no overview data: pass it to the query.\n   *  False again after `timeoutMs` with no move of the row. */\n  waiting: boolean;\n  /**\n   * The row as read now (the overview's `cancel_at_period_end`; `undefined` while it\n   * loads) → what the page shows. Call it during render, after the query: when the row\n   * has moved past what was asked, it drops the request (React's \"adjust state while\n   * rendering\" pattern), so `waiting` turns false and the query stops polling.\n   */\n  view: (rowScheduled: boolean | null | undefined) => CancelRequestView;\n}\n\n/**\n * The in-app cancel's follow-up (0.43, kastlan's derivation in `18bf4c0`): after \"Cancel\n * subscription now\" or \"Keep subscription\" the server answers 204 at once, but the row's\n * `cancel_at_period_end` only changes when the provider's webhook lands. Until then the\n * page shows what was asked for, and a second press would ask the provider again.\n *\n * The state lives in the hook and needs no overview at construction, so it goes BEFORE\n * the overview query, which reads `waiting`, and the view comes after it — the overview\n * read once (build review 0.43, kastlan B2; kastlan `subscription-section.tsx:74-92`):\n *\n *     const request = useCancelRequest();\n *     const { data } = useBillingOverview({ waiting: request.waiting });\n *     const view = request.view(data?.cancel_at_period_end);\n *     <p>{standingLine({ ...data, cancel_at_period_end: view.cancelScheduled })}</p>\n *     <SubscriptionActions\n *       cancelAtPeriodEnd={data.cancel_at_period_end}\n *       cancelRequested={view.requested}\n *       onResume={() => resume.mutate(undefined, { onSuccess: view.noteAsked })}\n *       …\n *     />\n *\n * **Bounded,** as `useCheckoutProcessing` is (FLW-6): after `timeoutMs` (10 minutes)\n * with no move of the row the request is dropped — the polling stops and the page shows\n * the row as it is. Unbounded, a webhook that never landed kept kastlan re-reading the\n * overview every 3 s for as long as the page was open, which also kept a Cloud Run\n * instance awake, and the plan line said \"Cancels on …\" for a row that never moved.\n */\nexport function useCancelRequest({ timeoutMs = WAIT_FOR }: { timeoutMs?: number } = {}): CancelRequest {\n  // What was asked, kept with the row's state it was asked against and when.\n  const [asked, setAsked] = useState<{ scheduled: boolean; at: number } | null>(null);\n  useEffect(() => {\n    if (asked === null) return;\n    // Only THIS ask: one that a later ask or the row has replaced is not dropped twice.\n    const timer = setTimeout(\n      () => setAsked((current) => (current === asked ? null : current)),\n      Math.max(0, asked.at + timeoutMs - Date.now()),\n    );\n    return () => clearTimeout(timer);\n  }, [asked, timeoutMs]);\n  const view = (row: boolean | null | undefined): CancelRequestView => {\n    // Not read yet: nothing to show against, and nothing to drop.\n    if (row === undefined || row === null) return { requested: null, cancelScheduled: false, noteAsked: () => {} };\n    // The row has moved: it says the rest. Adjusted during render, React's pattern for\n    // state that follows a prop.\n    if (asked !== null && asked.scheduled !== row) setAsked(null);\n    const open = asked !== null && asked.scheduled === row;\n    return {\n      requested: open ? (row ? \"resume\" : \"cancel\") : null,\n      cancelScheduled: open ? !row : row,\n      noteAsked: () => {\n        const at = Date.now();\n        setAsked((a) => (a !== null && a.scheduled === row ? null : { scheduled: row, at }));\n      },\n    };\n  };\n  return { waiting: asked !== null, view };\n}\n"],"mappings":";AAAA,SAAS,WAAW,gBAAgB;AAWpC,MAAM,WAAW,KAAK;AAwDf,SAAS,iBAAiB,EAAE,YAAY,SAAS,IAA4B,CAAC,GAAkB;AAErG,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAoD,IAAI;AAClF,YAAU,MAAM;AACd,QAAI,UAAU,KAAM;AAEpB,UAAM,QAAQ;AAAA,MACZ,MAAM,SAAS,CAAC,YAAa,YAAY,QAAQ,OAAO,OAAQ;AAAA,MAChE,KAAK,IAAI,GAAG,MAAM,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,IAC/C;AACA,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,OAAO,SAAS,CAAC;AACrB,QAAM,OAAO,CAAC,QAAuD;AAEnE,QAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO,EAAE,WAAW,MAAM,iBAAiB,OAAO,WAAW,MAAM;AAAA,IAAC,EAAE;AAG7G,QAAI,UAAU,QAAQ,MAAM,cAAc,IAAK,UAAS,IAAI;AAC5D,UAAM,OAAO,UAAU,QAAQ,MAAM,cAAc;AACnD,WAAO;AAAA,MACL,WAAW,OAAQ,MAAM,WAAW,WAAY;AAAA,MAChD,iBAAiB,OAAO,CAAC,MAAM;AAAA,MAC/B,WAAW,MAAM;AACf,cAAM,KAAK,KAAK,IAAI;AACpB,iBAAS,CAAC,MAAO,MAAM,QAAQ,EAAE,cAAc,MAAM,OAAO,EAAE,WAAW,KAAK,GAAG,CAAE;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,UAAU,MAAM,KAAK;AACzC;","names":[]}

package/dist/billing/cancel-subscription.d.ts

@@ -1,24 +1,35 @@
 import type { LabelOverride } from "../i18n/kit-labels.js";
 import type { DateInput } from "../lib/format.js";
 import type { BillingLabels } from "./billing-labels.js";
-export interface CancelSubscriptionConfirmProps {
+import type { WithDialogClose } from "./dialog-close.js";
+/** {@link CancelSubscriptionConfirmProps} before one of its two close props is required. */
+interface CancelSubscriptionConfirmFields {
     open: boolean;
-    /** `false` when the admin dismisses it — Back, Escape, the backdrop. Confirm leaves it
-     *  open: close it once `POST /billing/cancel` answers. */
-    onOpenChange: (open: boolean) => void;
-    /** The overview's `current_period_end`: the day the subscription ends. Formatted with
-     *  the kit's date formatter (`formatDate`, `"medium"`). */
+    /** The admin dismissed it — Back, Escape, the backdrop. Confirm leaves it open: close it
+     *  once `POST /billing/cancel` answers. 0.52: every other kit dialog's `onClose`
+     *  (CONTRIBUTING §4; refactor audit 2026-10-30, API-5). */
+    onClose?: () => void;
+    /** @deprecated 0.52 — `onClose`, as every other kit dialog; removed in 0.53. Called with
+     *  `false` when there is no `onClose`. */
+    onOpenChange?: (open: boolean) => void;
+    /** The overview's `current_period_end`: the day the subscription ends, in a sentence —
+     *  the `<UiKitProvider formatDate>` (the app's date preference) when it set one, else the
+     *  kit's `formatDate`, `"medium"`, in the provider's locale and `timeZone` (0.52). */
     periodEnd: DateInput;
     /** Confirm: the app's `POST /billing/cancel` (server-kit 0.14, §16.3). */
     onConfirm: () => void;
-    /** The cancel is under way: Confirm's spinner, no second press, and Escape and Back
-     *  don't close. */
+    /** The cancel is under way: Confirm's spinner, no second press, and neither Escape,
+     *  the backdrop nor Back closes it. */
     pending?: boolean;
     /** The date's locale. Default: the provider's. */
     locale?: string;
     /** Prop > `<UiKitProvider labels={{ billing }}>` > English. */
     labels?: LabelOverride<BillingLabels>;
 }
+/** What {@link CancelSubscriptionConfirm} takes: `onClose`, or alone the deprecated
+ *  `onOpenChange`, is required (0.52 code review: with neither it compiled, and nothing
+ *  could dismiss it). */
+export type CancelSubscriptionConfirmProps = WithDialogClose<CancelSubscriptionConfirmFields>;
 /**
  * The in-app cancel's confirm (docs/billing-harmonization.md §16.2 decision 2, §16.4,
  * ui-kit 0.42): "Cancel subscription" for an admin the provider's portal doesn't open for
@@ -29,7 +40,7 @@ export interface CancelSubscriptionConfirmProps {
  *
  *     <CancelSubscriptionConfirm
  *       open={asking}
- *       onOpenChange={setAsking}
+ *       onClose={() => setAsking(false)}
  *       periodEnd={overview.current_period_end}
  *       pending={cancel.isPending}
  *       onConfirm={() => cancel.mutate()}
@@ -43,4 +54,5 @@ export interface CancelSubscriptionConfirmProps {
  * may always cancel. A demo lock still holds it, as the server's demo guard does. The kit
  * sends no request.
  */
-export declare function CancelSubscriptionConfirm({ open, onOpenChange, periodEnd, onConfirm, pending, locale: localeProp, labels: labelsProp, }: CancelSubscriptionConfirmProps): import("react").JSX.Element;
+export declare function CancelSubscriptionConfirm({ open, onClose, onOpenChange, periodEnd, onConfirm, pending, locale: localeProp, labels: labelsProp, }: CancelSubscriptionConfirmProps): import("react").JSX.Element;
+export {};

package/dist/billing/cancel-subscription.js

@@ -1,14 +1,16 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-import { useKitLabels, useKitLocale } from "../i18n/kit-labels.js";
+import { useKitLabels } from "../i18n/kit-labels.js";
 import { DEFAULT_COMMON_LABELS } from "../i18n/shared-labels.js";
-import { formatDate } from "../lib/format.js";
+import { useDayFormatter } from "../lib/day-format.js";
 import { Button } from "../components/button.js";
 import { DialogFrame } from "../components/dialog-frame.js";
 import { COMMIT_EXCEPT_BILLING } from "../components/write-lock.js";
 import { useBillingLabels } from "./billing-labels.js";
+import { dialogClose } from "./dialog-close.js";
 function CancelSubscriptionConfirm({
   open,
+  onClose,
   onOpenChange,
   periodEnd,
   onConfirm,
@@ -18,20 +20,15 @@ function CancelSubscriptionConfirm({
 }) {
   const labels = useBillingLabels(labelsProp);
   const common = useKitLabels("common", DEFAULT_COMMON_LABELS);
-  const locale = useKitLocale(localeProp);
+  const day = useDayFormatter(void 0, localeProp);
   return /* @__PURE__ */ jsx(
     DialogFrame,
     {
       open,
       title: labels.cancelConfirmTitle,
-      description: labels.cancelConfirmBody(formatDate(periodEnd, "medium", { locale })),
-      onClose: () => {
-        if (!pending) onOpenChange(false);
-      },
-      onKeyDown: (e) => {
-        if (pending && e.key === "Escape") e.preventDefault();
-      },
-      "aria-busy": pending || void 0,
+      description: labels.cancelConfirmBody(day(periodEnd)),
+      onClose: dialogClose({ onClose, onOpenChange }),
+      busy: pending,
       "data-cancel-subscription-confirm": "",
       actions: (close) => /* @__PURE__ */ jsxs(Fragment, { children: [
         /* @__PURE__ */ jsx(Button, { variant: "secondary", onClick: close, disabled: pending, children: common.back }),

package/dist/billing/cancel-subscription.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/billing/cancel-subscription.tsx"],"sourcesContent":["import type { KeyboardEvent } from \"react\";\n\nimport { useKitLabels, useKitLocale } from \"../i18n/kit-labels\";\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { DEFAULT_COMMON_LABELS } from \"../i18n/shared-labels\";\nimport { formatDate } from \"../lib/format\";\nimport type { DateInput } from \"../lib/format\";\nimport { Button } from \"../components/button\";\nimport { DialogFrame } from \"../components/dialog-frame\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { useBillingLabels } from \"./billing-labels\";\nimport type { BillingLabels } from \"./billing-labels\";\n\nexport interface CancelSubscriptionConfirmProps {\n  open: boolean;\n  /** `false` when the admin dismisses it — Back, Escape, the backdrop. Confirm leaves it\n   *  open: close it once `POST /billing/cancel` answers. */\n  onOpenChange: (open: boolean) => void;\n  /** The overview's `current_period_end`: the day the subscription ends. Formatted with\n   *  the kit's date formatter (`formatDate`, `\"medium\"`). */\n  periodEnd: DateInput;\n  /** Confirm: the app's `POST /billing/cancel` (server-kit 0.14, §16.3). */\n  onConfirm: () => void;\n  /** The cancel is under way: Confirm's spinner, no second press, and Escape and Back\n   *  don't close. */\n  pending?: boolean;\n  /** The date's locale. Default: the provider's. */\n  locale?: string;\n  /** Prop > `<UiKitProvider labels={{ billing }}>` > English. */\n  labels?: LabelOverride<BillingLabels>;\n}\n\n/**\n * The in-app cancel's confirm (docs/billing-harmonization.md §16.2 decision 2, §16.4,\n * ui-kit 0.42): \"Cancel subscription\" for an admin the provider's portal doesn't open for\n * (`SubscriptionActions`' `portal=\"buyer_only\"` → `onCancelInApp`). It names the day the\n * subscription ends — \"Your subscription ends on 9 Nov 2026. Until then everything works\n * as before.\" — and its button reads \"Cancel subscription now\" (German \"Jetzt kündigen\",\n * the confirmation button of §312k BGB).\n *\n *     <CancelSubscriptionConfirm\n *       open={asking}\n *       onOpenChange={setAsking}\n *       periodEnd={overview.current_period_end}\n *       pending={cancel.isPending}\n *       onConfirm={() => cancel.mutate()}\n *     />\n *\n * The cancel is at the period's end (Paddle's `cancel`, not immediately); the row follows\n * by webhook (`cancel_at_period_end`), as after a cancel in the portal, and\n * `SubscriptionActions` then offers \"Keep subscription\" (`onResume`).\n *\n * It takes no billing lock (`COMMIT_EXCEPT_BILLING` built in, §3.3): a read-only payer\n * may always cancel. A demo lock still holds it, as the server's demo guard does. The kit\n * sends no request.\n */\nexport function CancelSubscriptionConfirm({\n  open,\n  onOpenChange,\n  periodEnd,\n  onConfirm,\n  pending = false,\n  locale: localeProp,\n  labels: labelsProp,\n}: CancelSubscriptionConfirmProps) {\n  const labels = useBillingLabels(labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const locale = useKitLocale(localeProp);\n\n  return (\n    <DialogFrame\n      open={open}\n      title={labels.cancelConfirmTitle}\n      description={labels.cancelConfirmBody(formatDate(periodEnd, \"medium\", { locale }))}\n      onClose={() => {\n        if (!pending) onOpenChange(false);\n      }}\n      onKeyDown={(e: KeyboardEvent<HTMLDivElement>) => {\n        if (pending && e.key === \"Escape\") e.preventDefault();\n      }}\n      aria-busy={pending || undefined}\n      data-cancel-subscription-confirm=\"\"\n      actions={(close) => (\n        <>\n          <Button variant=\"secondary\" onClick={close} disabled={pending}>\n            {common.back}\n          </Button>\n          <Button\n            variant=\"danger\"\n            commit={COMMIT_EXCEPT_BILLING}\n            pending={pending}\n            onClick={() => {\n              if (!pending) onConfirm();\n            }}\n          >\n            {labels.cancelConfirmAction}\n          </Button>\n        </>\n      )}\n    />\n  );\n}\n"],"mappings":";AAmFQ,mBACE,KADF;AAjFR,SAAS,cAAc,oBAAoB;AAE3C,SAAS,6BAA6B;AACtC,SAAS,kBAAkB;AAE3B,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AA8C1B,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,QAAQ;AACV,GAAmC;AACjC,QAAM,SAAS,iBAAiB,UAAU;AAC1C,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,SAAS,aAAa,UAAU;AAEtC,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA,OAAO,OAAO;AAAA,MACd,aAAa,OAAO,kBAAkB,WAAW,WAAW,UAAU,EAAE,OAAO,CAAC,CAAC;AAAA,MACjF,SAAS,MAAM;AACb,YAAI,CAAC,QAAS,cAAa,KAAK;AAAA,MAClC;AAAA,MACA,WAAW,CAAC,MAAqC;AAC/C,YAAI,WAAW,EAAE,QAAQ,SAAU,GAAE,eAAe;AAAA,MACtD;AAAA,MACA,aAAW,WAAW;AAAA,MACtB,oCAAiC;AAAA,MACjC,SAAS,CAAC,UACR,iCACE;AAAA,4BAAC,UAAO,SAAQ,aAAY,SAAS,OAAO,UAAU,SACnD,iBAAO,MACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,SAAS,MAAM;AACb,kBAAI,CAAC,QAAS,WAAU;AAAA,YAC1B;AAAA,YAEC,iBAAO;AAAA;AAAA,QACV;AAAA,SACF;AAAA;AAAA,EAEJ;AAEJ;","names":[]}
+{"version":3,"sources":["../../src/billing/cancel-subscription.tsx"],"sourcesContent":["import { useKitLabels } from \"../i18n/kit-labels\";\nimport type { LabelOverride } from \"../i18n/kit-labels\";\nimport { DEFAULT_COMMON_LABELS } from \"../i18n/shared-labels\";\nimport { useDayFormatter } from \"../lib/day-format\";\nimport type { DateInput } from \"../lib/format\";\nimport { Button } from \"../components/button\";\nimport { DialogFrame } from \"../components/dialog-frame\";\nimport { COMMIT_EXCEPT_BILLING } from \"../components/write-lock\";\nimport { useBillingLabels } from \"./billing-labels\";\nimport type { BillingLabels } from \"./billing-labels\";\nimport { dialogClose } from \"./dialog-close\";\nimport type { WithDialogClose } from \"./dialog-close\";\n\n/** {@link CancelSubscriptionConfirmProps} before one of its two close props is required. */\ninterface CancelSubscriptionConfirmFields {\n  open: boolean;\n  /** The admin dismissed it — Back, Escape, the backdrop. Confirm leaves it open: close it\n   *  once `POST /billing/cancel` answers. 0.52: every other kit dialog's `onClose`\n   *  (CONTRIBUTING §4; refactor audit 2026-10-30, API-5). */\n  onClose?: () => void;\n  /** @deprecated 0.52 — `onClose`, as every other kit dialog; removed in 0.53. Called with\n   *  `false` when there is no `onClose`. */\n  onOpenChange?: (open: boolean) => void;\n  /** The overview's `current_period_end`: the day the subscription ends, in a sentence —\n   *  the `<UiKitProvider formatDate>` (the app's date preference) when it set one, else the\n   *  kit's `formatDate`, `\"medium\"`, in the provider's locale and `timeZone` (0.52). */\n  periodEnd: DateInput;\n  /** Confirm: the app's `POST /billing/cancel` (server-kit 0.14, §16.3). */\n  onConfirm: () => void;\n  /** The cancel is under way: Confirm's spinner, no second press, and neither Escape,\n   *  the backdrop nor Back closes it. */\n  pending?: boolean;\n  /** The date's locale. Default: the provider's. */\n  locale?: string;\n  /** Prop > `<UiKitProvider labels={{ billing }}>` > English. */\n  labels?: LabelOverride<BillingLabels>;\n}\n\n/** What {@link CancelSubscriptionConfirm} takes: `onClose`, or alone the deprecated\n *  `onOpenChange`, is required (0.52 code review: with neither it compiled, and nothing\n *  could dismiss it). */\nexport type CancelSubscriptionConfirmProps = WithDialogClose<CancelSubscriptionConfirmFields>;\n\n/**\n * The in-app cancel's confirm (docs/billing-harmonization.md §16.2 decision 2, §16.4,\n * ui-kit 0.42): \"Cancel subscription\" for an admin the provider's portal doesn't open for\n * (`SubscriptionActions`' `portal=\"buyer_only\"` → `onCancelInApp`). It names the day the\n * subscription ends — \"Your subscription ends on 9 Nov 2026. Until then everything works\n * as before.\" — and its button reads \"Cancel subscription now\" (German \"Jetzt kündigen\",\n * the confirmation button of §312k BGB).\n *\n *     <CancelSubscriptionConfirm\n *       open={asking}\n *       onClose={() => setAsking(false)}\n *       periodEnd={overview.current_period_end}\n *       pending={cancel.isPending}\n *       onConfirm={() => cancel.mutate()}\n *     />\n *\n * The cancel is at the period's end (Paddle's `cancel`, not immediately); the row follows\n * by webhook (`cancel_at_period_end`), as after a cancel in the portal, and\n * `SubscriptionActions` then offers \"Keep subscription\" (`onResume`).\n *\n * It takes no billing lock (`COMMIT_EXCEPT_BILLING` built in, §3.3): a read-only payer\n * may always cancel. A demo lock still holds it, as the server's demo guard does. The kit\n * sends no request.\n */\nexport function CancelSubscriptionConfirm({\n  open,\n  onClose,\n  onOpenChange,\n  periodEnd,\n  onConfirm,\n  pending = false,\n  locale: localeProp,\n  labels: labelsProp,\n}: CancelSubscriptionConfirmProps) {\n  const labels = useBillingLabels(labelsProp);\n  const common = useKitLabels(\"common\", DEFAULT_COMMON_LABELS);\n  const day = useDayFormatter(undefined, localeProp);\n\n  return (\n    <DialogFrame\n      open={open}\n      title={labels.cancelConfirmTitle}\n      description={labels.cancelConfirmBody(day(periodEnd))}\n      onClose={dialogClose({ onClose, onOpenChange })}\n      busy={pending}\n      data-cancel-subscription-confirm=\"\"\n      actions={(close) => (\n        <>\n          <Button variant=\"secondary\" onClick={close} disabled={pending}>\n            {common.back}\n          </Button>\n          <Button\n            variant=\"danger\"\n            commit={COMMIT_EXCEPT_BILLING}\n            pending={pending}\n            onClick={() => {\n              if (!pending) onConfirm();\n            }}\n          >\n            {labels.cancelConfirmAction}\n          </Button>\n        </>\n      )}\n    />\n  );\n}\n"],"mappings":";AA0FQ,mBACE,KADF;AA1FR,SAAS,oBAAoB;AAE7B,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAEhC,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AAEjC,SAAS,mBAAmB;AAyDrB,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,QAAQ;AACV,GAAmC;AACjC,QAAM,SAAS,iBAAiB,UAAU;AAC1C,QAAM,SAAS,aAAa,UAAU,qBAAqB;AAC3D,QAAM,MAAM,gBAAgB,QAAW,UAAU;AAEjD,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA,OAAO,OAAO;AAAA,MACd,aAAa,OAAO,kBAAkB,IAAI,SAAS,CAAC;AAAA,MACpD,SAAS,YAAY,EAAE,SAAS,aAAa,CAAC;AAAA,MAC9C,MAAM;AAAA,MACN,oCAAiC;AAAA,MACjC,SAAS,CAAC,UACR,iCACE;AAAA,4BAAC,UAAO,SAAQ,aAAY,SAAS,OAAO,UAAU,SACnD,iBAAO,MACV;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,SAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,SAAS,MAAM;AACb,kBAAI,CAAC,QAAS,WAAU;AAAA,YAC1B;AAAA,YAEC,iBAAO;AAAA;AAAA,QACV;AAAA,SACF;AAAA;AAAA,EAEJ;AAEJ;","names":[]}

package/dist/billing/dialog-close.d.ts

@@ -0,0 +1,29 @@
+/**
+ * How the three billing confirms — `CancelSubscriptionConfirm`, `PlanSwitchConfirm`,
+ * `GrantWarningConfirm` — are closed in 0.52: `onClose`, as every other kit dialog
+ * (CONTRIBUTING §4; refactor audit 2026-10-30, API-5), and for one minor the deprecated
+ * `onOpenChange`, called with `false` when there is no `onClose`.
+ *
+ * 0.52 made `onOpenChange` optional for its deprecation and gave `onClose` beside it as
+ * optional too, so a confirm given NEITHER compiled — `<CancelSubscriptionConfirm open
+ * periodEnd={…} onConfirm={…} />` — and Back, Escape and the backdrop then called nothing:
+ * a dialog nobody could dismiss, where 0.51's compiler had required `onOpenChange` (0.52
+ * code review, cancel-subscription.tsx). And the fallback between the two was written
+ * three times, once per dialog.
+ *
+ * @internal Not part of the barrel; each dialog's props type is.
+ */
+/** The two close props as a dialog's own props interface declares them. */
+interface CloseProps {
+    onClose?: () => void;
+    onOpenChange?: (open: boolean) => void;
+}
+/**
+ * `P` with ONE of its two close props required — `onClose`, or alone the deprecated
+ * `onOpenChange`; both may be given, and `onClose` is then the one called. Built from
+ * `P`'s own members (`Pick`), so their docs and the deprecation stay the ones `P` writes.
+ */
+export type WithDialogClose<P extends CloseProps> = P & (Required<Pick<P, "onClose">> | Required<Pick<P, "onOpenChange">>);
+/** The dialog's close: `onClose`, else `onOpenChange(false)`. */
+export declare function dialogClose({ onClose, onOpenChange }: CloseProps): () => void;
+export {};

package/dist/billing/dialog-close.js

@@ -0,0 +1,8 @@
+"use client";
+function dialogClose({ onClose, onOpenChange }) {
+  return () => onClose ? onClose() : onOpenChange?.(false);
+}
+export {
+  dialogClose
+};
+//# sourceMappingURL=dialog-close.js.map

package/dist/billing/dialog-close.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/billing/dialog-close.ts"],"sourcesContent":["/**\n * How the three billing confirms — `CancelSubscriptionConfirm`, `PlanSwitchConfirm`,\n * `GrantWarningConfirm` — are closed in 0.52: `onClose`, as every other kit dialog\n * (CONTRIBUTING §4; refactor audit 2026-10-30, API-5), and for one minor the deprecated\n * `onOpenChange`, called with `false` when there is no `onClose`.\n *\n * 0.52 made `onOpenChange` optional for its deprecation and gave `onClose` beside it as\n * optional too, so a confirm given NEITHER compiled — `<CancelSubscriptionConfirm open\n * periodEnd={…} onConfirm={…} />` — and Back, Escape and the backdrop then called nothing:\n * a dialog nobody could dismiss, where 0.51's compiler had required `onOpenChange` (0.52\n * code review, cancel-subscription.tsx). And the fallback between the two was written\n * three times, once per dialog.\n *\n * @internal Not part of the barrel; each dialog's props type is.\n */\n\n/** The two close props as a dialog's own props interface declares them. */\ninterface CloseProps {\n  onClose?: () => void;\n  onOpenChange?: (open: boolean) => void;\n}\n\n/**\n * `P` with ONE of its two close props required — `onClose`, or alone the deprecated\n * `onOpenChange`; both may be given, and `onClose` is then the one called. Built from\n * `P`'s own members (`Pick`), so their docs and the deprecation stay the ones `P` writes.\n */\nexport type WithDialogClose<P extends CloseProps> = P &\n  (Required<Pick<P, \"onClose\">> | Required<Pick<P, \"onOpenChange\">>);\n\n/** The dialog's close: `onClose`, else `onOpenChange(false)`. */\nexport function dialogClose({ onClose, onOpenChange }: CloseProps): () => void {\n  return () => (onClose ? onClose() : onOpenChange?.(false));\n}\n"],"mappings":";AA+BO,SAAS,YAAY,EAAE,SAAS,aAAa,GAA2B;AAC7E,SAAO,MAAO,UAAU,QAAQ,IAAI,eAAe,KAAK;AAC1D;","names":[]}

package/dist/billing/plan-card.d.ts

@@ -2,6 +2,7 @@ import type { ReactNode } from "react";
 import type { LabelOverride } from "../i18n/kit-labels.js";
 import type { ChoiceCardProps } from "../components/choice-card.js";
 import type { BillingLabels } from "./billing-labels.js";
+import type { WithDialogClose } from "./dialog-close.js";
 import type { BillingCurrency, BillingInterval, PlanPrices } from "./plan-price.js";
 /**
  * One plan of the app's catalogue (docs/billing-harmonization.md §3.1) as a page shows it:
@@ -168,17 +169,26 @@ export interface PlanPickerProps extends Omit<PlanDisplayProps, "currency" | "in
  * instead, so the warning shows once on either path.
  */
 export declare function PlanPicker({ plans, current, value: valueProp, defaultValue, onValueChange, interval: intervalProp, defaultInterval, onIntervalChange, currency: currencyProp, defaultCurrency, onCurrencyChange, currencies: currenciesProp, onChoose, pending, permanentGrant, switching, pricePreview, legend, name, className, gridClassName, cardClassName, dimensionLabels, formatLimit, locale: localeProp, labels: labelsProp, }: PlanPickerProps): import("react").JSX.Element;
-export interface GrantWarningConfirmProps {
+/** {@link GrantWarningConfirmProps} before one of its two close props is required. */
+interface GrantWarningConfirmFields {
     /** Shown, controlled. */
     open: boolean;
-    /** `false` on "Back", Escape, the backdrop — and after "Buy anyway". */
-    onOpenChange: (open: boolean) => void;
+    /** "Back", Escape, the backdrop — and after "Buy anyway". 0.52: every other kit
+     *  dialog's `onClose` (CONTRIBUTING §4; refactor audit 2026-10-30, API-5). */
+    onClose?: () => void;
+    /** @deprecated 0.52 — `onClose`, as every other kit dialog; removed in 0.53. Called with
+     *  `false` when there is no `onClose`. */
+    onOpenChange?: (open: boolean) => void;
     /** "Buy anyway": the app opens its checkout. The dialog closes itself after it. */
     onConfirm: () => void;
     /** Prop > `<UiKitProvider labels={{ billing }}>` > English: `grantWarningTitle`,
      *  `grantWarningBody`, `grantWarningAction`. "Back" is `common.back`. */
     labels?: LabelOverride<BillingLabels>;
 }
+/** What {@link GrantWarningConfirm} takes: `onClose`, or alone the deprecated
+ *  `onOpenChange`, is required (0.52 code review: with neither it compiled, and nothing
+ *  could dismiss it). */
+export type GrantWarningConfirmProps = WithDialogClose<GrantWarningConfirmFields>;
 /**
  * 0.42 (§16.8 B): the permanent-grant warning before a checkout — `grantWarningTitle`,
  * `grantWarningBody`, "Back" and "Buy anyway" (`grantWarningAction`). {@link PlanPicker}
@@ -188,5 +198,5 @@ export interface GrantWarningConfirmProps {
  * to a checkout — show this before that checkout, so a permanent-grant holder is still
  * warned. Carries `data-grant-warning`.
  */
-export declare function GrantWarningConfirm({ open, onOpenChange, onConfirm, labels: labelsProp }: GrantWarningConfirmProps): import("react").JSX.Element;
+export declare function GrantWarningConfirm({ open, onClose, onOpenChange, onConfirm, labels: labelsProp, }: GrantWarningConfirmProps): import("react").JSX.Element;
 export {};

package/dist/billing/plan-card.js

@@ -11,6 +11,7 @@ import { ToggleGroup } from "../components/toggle-group.js";
 import { Button } from "../components/button.js";
 import { DialogFrame } from "../components/dialog-frame.js";
 import { useBillingLabels } from "./billing-labels.js";
+import { dialogClose } from "./dialog-close.js";
 import { BILLING_INTERVALS, billingCurrencyFor, formatPlanPrice, planPrice } from "./plan-price.js";
 function planRelation(plans, code, current) {
   if (!current) return void 0;
@@ -257,9 +258,7 @@ function PlanPicker({
           GrantWarningConfirm,
           {
             open: warned !== null,
-            onOpenChange: (open) => {
-              if (!open) setWarned(null);
-            },
+            onClose: () => setWarned(null),
             onConfirm: () => {
               if (warned) onChoose(warned);
             },
@@ -270,26 +269,34 @@ function PlanPicker({
     }
   );
 }
-function GrantWarningConfirm({ open, onOpenChange, onConfirm, labels: labelsProp }) {
+function GrantWarningConfirm({
+  open,
+  onClose,
+  onOpenChange,
+  onConfirm,
+  labels: labelsProp
+}) {
   const labels = useBillingLabels(labelsProp);
   const common = useKitLabels("common", DEFAULT_COMMON_LABELS);
+  const close = dialogClose({ onClose, onOpenChange });
   return /* @__PURE__ */ jsx(
     DialogFrame,
     {
       open,
       title: labels.grantWarningTitle,
       description: labels.grantWarningBody,
-      onClose: () => onOpenChange(false),
+      onClose: close,
       "data-grant-warning": "",
-      actions: (close) => /* @__PURE__ */ jsxs(Fragment, { children: [
-        /* @__PURE__ */ jsx(Button, { variant: "secondary", onClick: close, children: common.back }),
+      actions: (lower) => /* @__PURE__ */ jsxs(Fragment, { children: [
+        /* @__PURE__ */ jsx(Button, { variant: "secondary", onClick: lower, children: common.back }),
         /* @__PURE__ */ jsx(
           Button,
           {
             variant: "default",
             onClick: () => {
+              if (!open) return;
               onConfirm();
-              onOpenChange(false);
+              close();
             },
             children: labels.grantWarningAction
           }