@fayz-ai/auth 0.47.0 → 0.48.0

package/dist/views/ResetPasswordForm.js

@@ -0,0 +1,53 @@
+import { newPasswordProblem } from '../chunk-KLQDHFVS.js';
+import { useAuth } from '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import { fieldClass, buttonClass } from '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+import * as React from 'react';
+import { tl } from '@fayz-ai/core';
+import { jsxs, jsx } from 'react/jsx-runtime';
+
+function ResetPasswordForm({ onSuccess }) {
+  const { updatePassword, error, isLoading } = useAuth();
+  const [password, setPassword] = React.useState("");
+  const [confirmPassword, setConfirmPassword] = React.useState("");
+  const [localError, setLocalError] = React.useState(null);
+  const [busy, setBusy] = React.useState(false);
+  const disabled = busy || isLoading;
+  async function submit(event) {
+    event.preventDefault();
+    setLocalError(null);
+    const problem = newPasswordProblem(password, confirmPassword);
+    if (problem === "too-short") {
+      setLocalError(tl("Password must be at least 8 characters.", "A senha precisa ter pelo menos 8 caracteres."));
+      return;
+    }
+    if (problem === "mismatch") {
+      setLocalError(tl("Passwords do not match.", "As senhas n\xE3o conferem."));
+      return;
+    }
+    setBusy(true);
+    try {
+      await updatePassword(password);
+      onSuccess?.();
+    } finally {
+      setBusy(false);
+    }
+  }
+  return /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-4", children: [
+    /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
+      /* @__PURE__ */ jsx("span", { children: tl("New password", "Nova senha") }),
+      /* @__PURE__ */ jsx("input", { className: fieldClass(), type: "password", autoComplete: "new-password", required: true, value: password, onChange: (e) => setPassword(e.target.value), disabled })
+    ] }),
+    /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
+      /* @__PURE__ */ jsx("span", { children: tl("Confirm password", "Confirme a senha") }),
+      /* @__PURE__ */ jsx("input", { className: fieldClass(), type: "password", autoComplete: "new-password", required: true, value: confirmPassword, onChange: (e) => setConfirmPassword(e.target.value), disabled })
+    ] }),
+    (localError || error) && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: localError ?? error?.message }),
+    /* @__PURE__ */ jsx("button", { className: buttonClass(), type: "submit", disabled, children: disabled ? tl("Saving...", "Salvando...") : tl("Update password", "Atualizar senha") })
+  ] });
+}
+
+export { ResetPasswordForm };
+//# sourceMappingURL=ResetPasswordForm.js.map
+//# sourceMappingURL=ResetPasswordForm.js.map

package/dist/views/ResetPasswordForm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/views/ResetPasswordForm.tsx"],"names":[],"mappings":";;;;;;;;;AAUO,SAAS,iBAAA,CAAkB,EAAE,SAAA,EAAU,EAA2B;AACvE,EAAA,MAAM,EAAE,cAAA,EAAgB,KAAA,EAAO,SAAA,KAAc,OAAA,EAAQ;AACrD,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAU,eAAS,EAAE,CAAA;AACjD,EAAA,MAAM,CAAC,eAAA,EAAiB,kBAAkB,CAAA,GAAU,eAAS,EAAE,CAAA;AAC/D,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAU,eAAwB,IAAI,CAAA;AACtE,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAU,eAAS,KAAK,CAAA;AAC5C,EAAA,MAAM,WAAW,IAAA,IAAQ,SAAA;AAEzB,EAAA,eAAe,OAAO,KAAA,EAAwB;AAC5C,IAAA,KAAA,CAAM,cAAA,EAAe;AACrB,IAAA,aAAA,CAAc,IAAI,CAAA;AAClB,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,QAAA,EAAU,eAAe,CAAA;AAC5D,IAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,MAAA,aAAA,CAAc,EAAA,CAAG,yCAAA,EAA2C,8CAA8C,CAAC,CAAA;AAC3G,MAAA;AAAA,IACF;AACA,IAAA,IAAI,YAAY,UAAA,EAAY;AAC1B,MAAA,aAAA,CAAc,EAAA,CAAG,yBAAA,EAA2B,4BAAyB,CAAC,CAAA;AACtE,MAAA;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,IAAI,CAAA;AACZ,IAAA,IAAI;AACF,MAAA,MAAM,eAAe,QAAQ,CAAA;AAC7B,MAAA,SAAA,IAAY;AAAA,IACd,CAAA,SAAE;AACA,MAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,IACf;AAAA,EACF;AAEA,EAAA,uBACE,IAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAU,MAAA,EAAQ,WAAU,WAAA,EAChC,QAAA,EAAA;AAAA,oBAAA,IAAA,CAAC,OAAA,EAAA,EAAM,WAAU,uCAAA,EACf,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,MAAA,EAAA,EAAM,QAAA,EAAA,EAAA,CAAG,cAAA,EAAgB,YAAY,CAAA,EAAE,CAAA;AAAA,sBACxC,GAAA,CAAC,WAAM,SAAA,EAAW,UAAA,IAAc,IAAA,EAAK,UAAA,EAAW,cAAa,cAAA,EAAe,QAAA,EAAQ,MAAC,KAAA,EAAO,QAAA,EAAU,UAAU,CAAC,CAAA,KAAM,YAAY,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA,EAAG,QAAA,EAAoB;AAAA,KAAA,EAC1K,CAAA;AAAA,oBACA,IAAA,CAAC,OAAA,EAAA,EAAM,SAAA,EAAU,uCAAA,EACf,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,MAAA,EAAA,EAAM,QAAA,EAAA,EAAA,CAAG,kBAAA,EAAoB,kBAAkB,CAAA,EAAE,CAAA;AAAA,sBAClD,GAAA,CAAC,WAAM,SAAA,EAAW,UAAA,IAAc,IAAA,EAAK,UAAA,EAAW,cAAa,cAAA,EAAe,QAAA,EAAQ,MAAC,KAAA,EAAO,eAAA,EAAiB,UAAU,CAAC,CAAA,KAAM,mBAAmB,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA,EAAG,QAAA,EAAoB;AAAA,KAAA,EACxL,CAAA;AAAA,IAAA,CACE,UAAA,IAAc,0BAAU,GAAA,CAAC,GAAA,EAAA,EAAE,WAAU,0BAAA,EAA4B,QAAA,EAAA,UAAA,IAAc,OAAO,OAAA,EAAQ,CAAA;AAAA,wBAC/F,QAAA,EAAA,EAAO,SAAA,EAAW,WAAA,EAAY,EAAG,MAAK,QAAA,EAAS,QAAA,EAC7C,QAAA,EAAA,QAAA,GAAW,EAAA,CAAG,aAAa,aAAa,CAAA,GAAI,EAAA,CAAG,iBAAA,EAAmB,iBAAiB,CAAA,EACtF;AAAA,GAAA,EACF,CAAA;AAEJ","file":"ResetPasswordForm.js","sourcesContent":["import * as React from 'react'\nimport { tl } from '@fayz-ai/core'\nimport { useAuth } from '../context'\nimport { newPasswordProblem } from '../domain/password'\nimport { buttonClass, fieldClass } from '../components/form-classes'\n\nexport interface ResetPasswordFormProps {\n  onSuccess?: () => void\n}\n\nexport function ResetPasswordForm({ onSuccess }: ResetPasswordFormProps) {\n  const { updatePassword, error, isLoading } = useAuth()\n  const [password, setPassword] = React.useState('')\n  const [confirmPassword, setConfirmPassword] = React.useState('')\n  const [localError, setLocalError] = React.useState<string | null>(null)\n  const [busy, setBusy] = React.useState(false)\n  const disabled = busy || isLoading\n\n  async function submit(event: React.FormEvent) {\n    event.preventDefault()\n    setLocalError(null)\n    const problem = newPasswordProblem(password, confirmPassword)\n    if (problem === 'too-short') {\n      setLocalError(tl('Password must be at least 8 characters.', 'A senha precisa ter pelo menos 8 caracteres.'))\n      return\n    }\n    if (problem === 'mismatch') {\n      setLocalError(tl('Passwords do not match.', 'As senhas não conferem.'))\n      return\n    }\n    setBusy(true)\n    try {\n      await updatePassword(password)\n      onSuccess?.()\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  return (\n    <form onSubmit={submit} className=\"space-y-4\">\n      <label className=\"block space-y-1.5 text-sm font-medium\">\n        <span>{tl('New password', 'Nova senha')}</span>\n        <input className={fieldClass()} type=\"password\" autoComplete=\"new-password\" required value={password} onChange={(e) => setPassword(e.target.value)} disabled={disabled} />\n      </label>\n      <label className=\"block space-y-1.5 text-sm font-medium\">\n        <span>{tl('Confirm password', 'Confirme a senha')}</span>\n        <input className={fieldClass()} type=\"password\" autoComplete=\"new-password\" required value={confirmPassword} onChange={(e) => setConfirmPassword(e.target.value)} disabled={disabled} />\n      </label>\n      {(localError || error) && <p className=\"text-sm text-destructive\">{localError ?? error?.message}</p>}\n      <button className={buttonClass()} type=\"submit\" disabled={disabled}>\n        {disabled ? tl('Saving...', 'Salvando...') : tl('Update password', 'Atualizar senha')}\n      </button>\n    </form>\n  )\n}\n"]}

package/dist/views/ResetPasswordPage.d.ts

@@ -0,0 +1,7 @@
+export interface ResetPasswordPageProps {
+    onSuccess?: () => void;
+}
+/** Kept for apps that route `/auth/reset-password` themselves. The shell no
+ *  longer needs a route: SetPasswordPage is mounted by usePasswordSetupGate. */
+export declare function ResetPasswordPage({ onSuccess }: ResetPasswordPageProps): import("react").JSX.Element;
+//# sourceMappingURL=ResetPasswordPage.d.ts.map

package/dist/views/ResetPasswordPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordPage.d.ts","sourceRoot":"","sources":["../../src/views/ResetPasswordPage.tsx"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED;gFACgF;AAChF,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,sBAAsB,+BAEtE"}

package/dist/views/ResetPasswordPage.js

@@ -0,0 +1,16 @@
+import { SetPasswordPage } from '../chunk-ERIPMYL2.js';
+import '../chunk-KLQDHFVS.js';
+import '../chunk-W7565FXD.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+import { jsx } from 'react/jsx-runtime';
+
+function ResetPasswordPage({ onSuccess }) {
+  return /* @__PURE__ */ jsx(SetPasswordPage, { reason: "recovery", onSuccess });
+}
+
+export { ResetPasswordPage };
+//# sourceMappingURL=ResetPasswordPage.js.map
+//# sourceMappingURL=ResetPasswordPage.js.map

package/dist/views/ResetPasswordPage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/views/ResetPasswordPage.tsx"],"names":[],"mappings":";;;;;;;;;AAQO,SAAS,iBAAA,CAAkB,EAAE,SAAA,EAAU,EAA2B;AACvE,EAAA,uBAAO,GAAA,CAAC,eAAA,EAAA,EAAgB,MAAA,EAAO,UAAA,EAAW,SAAA,EAAsB,CAAA;AAClE","file":"ResetPasswordPage.js","sourcesContent":["import { SetPasswordPage } from './SetPasswordPage'\n\nexport interface ResetPasswordPageProps {\n  onSuccess?: () => void\n}\n\n/** Kept for apps that route `/auth/reset-password` themselves. The shell no\n *  longer needs a route: SetPasswordPage is mounted by usePasswordSetupGate. */\nexport function ResetPasswordPage({ onSuccess }: ResetPasswordPageProps) {\n  return <SetPasswordPage reason=\"recovery\" onSuccess={onSuccess} />\n}\n"]}

package/dist/views/SetPasswordPage.d.ts

@@ -0,0 +1,15 @@
+import * as React from 'react';
+import type { PasswordSetupReason } from '../domain/auth-link';
+export type SetPasswordReason = PasswordSetupReason;
+export interface SetPasswordPageProps {
+    reason: SetPasswordReason;
+    appName?: string;
+    logo?: React.ReactNode;
+    /** Show the "ask for a new link" form instead of the password fields. */
+    expired?: boolean;
+    /** Waiting on the link's session — renders a quiet placeholder. */
+    checking?: boolean;
+    onSuccess?: () => void;
+}
+export declare function SetPasswordPage({ reason, appName, logo, expired, checking, onSuccess, }: SetPasswordPageProps): React.JSX.Element;
+//# sourceMappingURL=SetPasswordPage.d.ts.map

package/dist/views/SetPasswordPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SetPasswordPage.d.ts","sourceRoot":"","sources":["../../src/views/SetPasswordPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAG9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAK9D,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,CAAA;AAanD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,iBAAiB,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACtB,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,OAAe,EACf,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,SAAS,GACV,EAAE,oBAAoB,qBAgItB"}

package/dist/views/SetPasswordPage.js

@@ -0,0 +1,9 @@
+export { SetPasswordPage } from '../chunk-ERIPMYL2.js';
+import '../chunk-KLQDHFVS.js';
+import '../chunk-W7565FXD.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=SetPasswordPage.js.map
+//# sourceMappingURL=SetPasswordPage.js.map

package/dist/views/SetPasswordPage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"SetPasswordPage.js"}

package/dist/views/SignupForm.d.ts

@@ -0,0 +1,24 @@
+import * as React from 'react';
+import type { OAuthProviderKey } from '../domain/auth-config';
+export interface SignupFormProps {
+    onSuccess?: () => void;
+    /** Same social buttons the sign-in form offers. Parity is the point: an
+     *  account created with Google must be creatable from this side too. */
+    showOAuth?: boolean;
+    oauthProviders?: OAuthProviderKey[];
+    oauthComingSoon?: OAuthProviderKey[];
+    /**
+     * Ask for the password twice.
+     *
+     * Off by default, and that is a deliberate reversal: the field exists to
+     * catch a typo you cannot see, and a reveal toggle catches the same typo
+     * while REMOVING a field from the shortest form in the product. Apps that
+     * must keep it (an internal policy, an audit) turn it back on.
+     */
+    requireConfirmation?: boolean;
+    /** Terms and privacy, shown under the button when the app has them. */
+    termsUrl?: string;
+    privacyUrl?: string;
+}
+export declare function SignupForm({ onSuccess, showOAuth, oauthProviders, oauthComingSoon, requireConfirmation, termsUrl, privacyUrl, }: SignupFormProps): React.JSX.Element;
+//# sourceMappingURL=SignupForm.d.ts.map

package/dist/views/SignupForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignupForm.d.ts","sourceRoot":"","sources":["../../src/views/SignupForm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAI9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAK7D,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB;4EACwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACnC,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACpC;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,UAAU,CAAC,EACzB,SAAS,EACT,SAAS,EACT,cAAc,EACd,eAAe,EACf,mBAA2B,EAC3B,QAAQ,EACR,UAAU,GACX,EAAE,eAAe,qBAuJjB"}

package/dist/views/SignupForm.js

@@ -0,0 +1,9 @@
+export { SignupForm } from '../chunk-HKILBDG2.js';
+import '../chunk-WZVZMNLB.js';
+import '../chunk-KLQDHFVS.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=SignupForm.js.map
+//# sourceMappingURL=SignupForm.js.map

package/dist/views/SignupForm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"SignupForm.js"}

package/dist/views/VerifyEmailNotice.d.ts

@@ -0,0 +1,15 @@
+import * as React from 'react';
+export interface VerifyEmailNoticeProps {
+    email: string;
+    /** Back to the sign-up form with the pending account abandoned. */
+    onUseAnotherEmail?: () => void;
+}
+/**
+ * "We sent you a link."
+ *
+ * The screen that has to exist for a confirm-email project: sign-up succeeds,
+ * but the account has no session until the link is clicked. Without it the flow
+ * ended on a form that appeared to do nothing.
+ */
+export declare function VerifyEmailNotice({ email, onUseAnotherEmail }: VerifyEmailNoticeProps): React.JSX.Element;
+//# sourceMappingURL=VerifyEmailNotice.d.ts.map

package/dist/views/VerifyEmailNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerifyEmailNotice.d.ts","sourceRoot":"","sources":["../../src/views/VerifyEmailNotice.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAQ9B,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAA;IACb,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAA;CAC/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,sBAAsB,qBAyFrF"}

package/dist/views/VerifyEmailNotice.js

@@ -0,0 +1,6 @@
+export { VerifyEmailNotice } from '../chunk-QJRTW7Q3.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=VerifyEmailNotice.js.map
+//# sourceMappingURL=VerifyEmailNotice.js.map

package/dist/views/VerifyEmailNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"VerifyEmailNotice.js"}

package/dist/views/usePasswordSetupGate.d.ts

@@ -0,0 +1,20 @@
+import { type PasswordSetupReason } from '../domain/auth-link';
+export interface PasswordSetupGate {
+    /** null when nothing is pending and the shell should render normally. */
+    reason: PasswordSetupReason | null;
+    /** The link is dead (already used / expired) — offer a fresh one instead. */
+    expired: boolean;
+    /** Still resolving the session the link carries. */
+    checking: boolean;
+    /** Called by the screen once the password is set (or the user gives up). */
+    complete: () => void;
+}
+/**
+ * Decides whether the user owes us a password before they see the app.
+ *
+ * The URL intent is read from a snapshot taken at module load: supabase-js wipes
+ * the token fragment as soon as it initialises, so the reason the user is here is
+ * gone by the time React renders.
+ */
+export declare function usePasswordSetupGate(): PasswordSetupGate;
+//# sourceMappingURL=usePasswordSetupGate.d.ts.map

package/dist/views/usePasswordSetupGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usePasswordSetupGate.d.ts","sourceRoot":"","sources":["../../src/views/usePasswordSetupGate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAGnF,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAClC,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAA;IAChB,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,IAAI,CAAA;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,CAmBxD"}

package/dist/views/usePasswordSetupGate.js

@@ -0,0 +1,27 @@
+import { decidePasswordSetup } from '../chunk-2S7KVJQO.js';
+import { useAuth } from '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import { readAuthUrlIntent, clearAuthUrlTokens } from '../chunk-2MO4QTQA.js';
+import * as React from 'react';
+
+function usePasswordSetupGate() {
+  const { user, isLoading, isAuthenticated } = useAuth();
+  const [done, setDone] = React.useState(false);
+  const intent = React.useMemo(() => readAuthUrlIntent(), []);
+  const complete = React.useCallback(() => {
+    clearAuthUrlTokens();
+    setDone(true);
+  }, []);
+  if (done) return { reason: null, expired: false, checking: false, complete };
+  const decision = decidePasswordSetup({
+    intent,
+    isLoading,
+    isAuthenticated,
+    mustSetPassword: user?.mustSetPassword
+  });
+  return { ...decision, complete };
+}
+
+export { usePasswordSetupGate };
+//# sourceMappingURL=usePasswordSetupGate.js.map
+//# sourceMappingURL=usePasswordSetupGate.js.map

package/dist/views/usePasswordSetupGate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/views/usePasswordSetupGate.ts"],"names":[],"mappings":";;;;;;AAuBO,SAAS,oBAAA,GAA0C;AACxD,EAAA,MAAM,EAAE,IAAA,EAAM,SAAA,EAAW,eAAA,KAAoB,OAAA,EAAQ;AACrD,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAU,eAAS,KAAK,CAAA;AAC5C,EAAA,MAAM,SAAe,KAAA,CAAA,OAAA,CAAQ,MAAM,iBAAA,EAAkB,EAAG,EAAE,CAAA;AAE1D,EAAA,MAAM,QAAA,GAAiB,kBAAY,MAAM;AACvC,IAAA,kBAAA,EAAmB;AACnB,IAAA,OAAA,CAAQ,IAAI,CAAA;AAAA,EACd,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,IAAI,IAAA,SAAa,EAAE,MAAA,EAAQ,MAAM,OAAA,EAAS,KAAA,EAAO,QAAA,EAAU,KAAA,EAAO,QAAA,EAAS;AAE3E,EAAA,MAAM,WAAW,mBAAA,CAAoB;AAAA,IACnC,MAAA;AAAA,IACA,SAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAiB,IAAA,EAAM;AAAA,GACxB,CAAA;AACD,EAAA,OAAO,EAAE,GAAG,QAAA,EAAU,QAAA,EAAS;AACjC","file":"usePasswordSetupGate.js","sourcesContent":["import * as React from 'react'\nimport { useAuth } from '../context'\nimport { decidePasswordSetup, type PasswordSetupReason } from '../domain/auth-link'\nimport { clearAuthUrlTokens, readAuthUrlIntent } from '../lib/url-intent'\n\nexport interface PasswordSetupGate {\n  /** null when nothing is pending and the shell should render normally. */\n  reason: PasswordSetupReason | null\n  /** The link is dead (already used / expired) — offer a fresh one instead. */\n  expired: boolean\n  /** Still resolving the session the link carries. */\n  checking: boolean\n  /** Called by the screen once the password is set (or the user gives up). */\n  complete: () => void\n}\n\n/**\n * Decides whether the user owes us a password before they see the app.\n *\n * The URL intent is read from a snapshot taken at module load: supabase-js wipes\n * the token fragment as soon as it initialises, so the reason the user is here is\n * gone by the time React renders.\n */\nexport function usePasswordSetupGate(): PasswordSetupGate {\n  const { user, isLoading, isAuthenticated } = useAuth()\n  const [done, setDone] = React.useState(false)\n  const intent = React.useMemo(() => readAuthUrlIntent(), [])\n\n  const complete = React.useCallback(() => {\n    clearAuthUrlTokens()\n    setDone(true)\n  }, [])\n\n  if (done) return { reason: null, expired: false, checking: false, complete }\n\n  const decision = decidePasswordSetup({\n    intent,\n    isLoading,\n    isAuthenticated,\n    mustSetPassword: user?.mustSetPassword,\n  })\n  return { ...decision, complete }\n}\n"]}

package/package.json

@@ -3,8 +3,8 @@
   "fayz": {
     "status": "beta"
   },
-  "version": "0.47.0",
-  "description": "Fayz SDK auth — pluggable authentication adapters with React hooks",
+  "version": "0.48.0",
+  "description": "Fayz SDK auth context — session, adapters, auth links and the login and password screens",
   "type": "module",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -14,6 +14,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "import": "./dist/*.js"
     }
   },
   "files": [
@@ -21,15 +25,22 @@
   ],
   "peerDependencies": {
     "@supabase/supabase-js": "^2.45.0",
+    "lucide-react": ">=0.400.0 <1.0.0",
     "react": "^18.0.0 || ^19.0.0",
     "zustand": "^4.5.0 || ^5.0.0"
   },
+  "peerDependenciesMeta": {
+    "lucide-react": {
+      "optional": true
+    }
+  },
   "dependencies": {
-    "@fayz-ai/core": "^0.47.0"
+    "@fayz-ai/core": "^0.48.0"
   },
   "devDependencies": {
     "@supabase/supabase-js": "^2.45.0",
     "@types/react": "^18.3.0",
+    "lucide-react": "^0.400.0",
     "react": "^18.3.0",
     "tsup": "^8.2.0",
     "typescript": "^5.5.0",

package/dist/adapters/mock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/adapters/mock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAyB,MAAM,eAAe,CAAA;AAEvE,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAoDD,wBAAgB,qBAAqB,CAAC,QAAQ,GAAE,QAA4B,GAAG,WAAW,CAkFzF"}

package/dist/adapters/supabase.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"supabase.d.ts","sourceRoot":"","sources":["../../src/adapters/supabase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAuC,MAAM,eAAe,CAAA;AAIrF;;;mEAGmE;AACnE,eAAO,MAAM,sBAAsB,2BAA2B,CAAA;AAE9D,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAyCD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,kBAAkB,GAAG,WAAW,CAgMjF"}