@fayz-ai/plugin-auth 0.8.0 → 0.9.0-next.1

package/dist/AmbassadorBubbles.d.ts

@@ -0,0 +1,9 @@
+import * as React from 'react';
+import type { LoginAmbassador } from './types';
+export interface AmbassadorBubblesProps {
+    ambassadors?: LoginAmbassador[];
+    /** Optional social-proof caption shown beside the avatars, e.g. "+2 mil profissionais". */
+    label?: string;
+}
+export declare function AmbassadorBubbles({ ambassadors, label }: AmbassadorBubblesProps): React.JSX.Element | null;
+//# sourceMappingURL=AmbassadorBubbles.d.ts.map

package/dist/AmbassadorBubbles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AmbassadorBubbles.d.ts","sourceRoot":"","sources":["../src/AmbassadorBubbles.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAwB9C,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAA;IAC/B,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,wBAAgB,iBAAiB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,sBAAsB,4BA6B/E"}

package/dist/forms.d.ts

@@ -11,8 +11,12 @@ export interface LoginFormProps {
     onForgotPassword?: () => void;
     showOAuth?: boolean;
     oauthProviders?: Exclude<AuthProvider, 'email'>[];
+    /** Seeds the field, so switching between login and recovery never asks for the
+     *  e-mail the user already typed. */
+    initialEmail?: string;
+    onEmailChange?: (email: string) => void;
 }
-export declare function LoginForm({ onSuccess, onForgotPassword, showOAuth, oauthProviders }: LoginFormProps): React.JSX.Element;
+export declare function LoginForm({ onSuccess, onForgotPassword, showOAuth, oauthProviders, initialEmail, onEmailChange, }: LoginFormProps): React.JSX.Element;
 export interface SignupFormProps {
     onSuccess?: () => void;
 }
@@ -21,8 +25,18 @@ export interface ForgotPasswordFormProps {
     redirectTo?: string;
     onSent?: (email: string) => void;
     onBackToLogin?: () => void;
+    /** Pre-filled with whatever the user already typed on the login form. */
+    initialEmail?: string;
+    onEmailChange?: (email: string) => void;
+    /** Copy overrides — the set-password screen reuses this form to hand out a
+     *  fresh link, where "Send reset link" is the wrong label. */
+    emailLabel?: string;
+    submitLabel?: string;
+    sendingLabel?: string;
+    sentLabel?: string;
+    backLabel?: string;
 }
-export declare function ForgotPasswordForm({ redirectTo, onSent, onBackToLogin }: ForgotPasswordFormProps): React.JSX.Element;
+export declare function ForgotPasswordForm({ redirectTo, onSent, onBackToLogin, initialEmail, onEmailChange, emailLabel, submitLabel, sendingLabel, sentLabel, backLabel, }: ForgotPasswordFormProps): React.JSX.Element;
 export interface ResetPasswordFormProps {
     onSuccess?: () => void;
 }

package/dist/forms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../src/forms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAkBjD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,wBAAgB,YAAY,CAAC,EAAE,SAAsB,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,iBAAiB,qBAmBpG;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAA;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;CAClD;AAED,wBAAgB,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,cAAc,qBA0CnG;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,eAAe,qBAsDxD;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAA;CAC3B;AAED,wBAAgB,kBAAkB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,uBAAuB,qBAqChG;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,sBAAsB,qBA4CtE"}
+{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../src/forms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAkBjD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,wBAAgB,YAAY,CAAC,EAAE,SAAsB,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,iBAAiB,qBAmBpG;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAA;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAA;IACjD;yCACqC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC;AAED,wBAAgB,SAAS,CAAC,EACxB,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,YAAiB,EACjB,aAAa,GACd,EAAE,cAAc,qBAqDhB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,eAAe,qBAsDxD;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAA;IAC1B,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC;kEAC8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,kBAAkB,CAAC,EACjC,UAAU,EACV,MAAM,EACN,aAAa,EACb,YAAiB,EACjB,aAAa,EACb,UAAoB,EACpB,WAA+B,EAC/B,YAA2B,EAC3B,SAA+C,EAC/C,SAA2B,GAC5B,EAAE,uBAAuB,qBAiDzB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,sBAAsB,qBA4CtE"}

package/dist/index.d.ts

@@ -1,9 +1,13 @@
 export { createAuthPlugin, createAuthRuntime, resolveAuthAdapter, } from './runtime';
 export { AuthGate, LoginPage, AuthCallbackPage, ResetPasswordPage, } from './pages';
 export type { AuthCallbackPageProps, AuthGateProps, LoginPageProps, ResetPasswordPageProps, } from './pages';
+export { SetPasswordPage, usePasswordSetupGate } from './set-password';
+export type { SetPasswordPageProps, SetPasswordReason, PasswordSetupGate } from './set-password';
+export { AmbassadorBubbles } from './AmbassadorBubbles';
+export type { AmbassadorBubblesProps } from './AmbassadorBubbles';
 export { LoginForm, SignupForm, ForgotPasswordForm, ResetPasswordForm, OAuthButtons, } from './forms';
 export type { ForgotPasswordFormProps, LoginFormProps, OAuthButtonsProps, ResetPasswordFormProps, SignupFormProps, } from './forms';
-export { createMockAuthAdapter, createSupabaseAuthAdapter, AuthProvider, useAuth, useAuthStore, } from '@fayz-ai/auth';
-export type { AuthPluginOptions, ResolvedAuthPlugin, AuthRoutesConfig, AuthOAuthConfig, AuthSupabaseConfig, AuthProviderKey, AuthLayout, AuthFormView, } from './types';
+export { createMockAuthAdapter, createSupabaseAuthAdapter, AuthProvider, useAuth, useAuthStore, readAuthUrlIntent, clearAuthUrlTokens, } from '@fayz-ai/auth';
+export type { AuthPluginOptions, ResolvedAuthPlugin, AuthRoutesConfig, AuthOAuthConfig, AuthSupabaseConfig, AuthProviderKey, AuthLayout, AuthFormView, LoginAmbassador, } from './types';
 export type { AuthAdapter, AuthSession, AuthUser, AuthProvider as OAuthProvider } from '@fayz-ai/core';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,sBAAsB,GACvB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,GACb,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,GAChB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,YAAY,EACZ,OAAO,EACP,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,YAAY,GACb,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,sBAAsB,GACvB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACtE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EACL,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,GACb,MAAM,SAAS,CAAA;AAChB,YAAY,EACV,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,GAChB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,YAAY,EACZ,OAAO,EACP,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,eAAe,GAChB,MAAM,SAAS,CAAA;AAChB,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -1,7 +1,8 @@
-import { createSupabaseAuthAdapter, createMockAuthAdapter, useAuth } from '@fayz-ai/auth';
-export { AuthProvider, createMockAuthAdapter, createSupabaseAuthAdapter, useAuth, useAuthStore } from '@fayz-ai/auth';
+import { createSupabaseAuthAdapter, createMockAuthAdapter, useAuth, readAuthUrlIntent, clearAuthUrlTokens, decidePasswordSetup } from '@fayz-ai/auth';
+export { AuthProvider, clearAuthUrlTokens, createMockAuthAdapter, createSupabaseAuthAdapter, readAuthUrlIntent, useAuth, useAuthStore } from '@fayz-ai/auth';
 import * as React from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
+import { useTranslation } from '@fayz-ai/core';
 
 // src/runtime.ts
 function absoluteUrl(path) {
@@ -24,7 +25,10 @@ function resolveAuthAdapter(options = {}) {
       supabaseAnonKey: anonKey,
       supabaseClient: options.supabase?.client,
       callbackUrl: options.supabase?.callbackUrl ?? absoluteUrl(options.routes?.callback ?? "/auth/callback"),
-      resetPasswordUrl: options.supabase?.resetPasswordUrl ?? absoluteUrl(options.routes?.resetPassword ?? "/auth/reset-password")
+      // Only when the host asked for a specific URL. Left undefined, the adapter
+      // points recovery at the app root, which needs no route and no extra entry
+      // in Supabase's redirect allow-list.
+      resetPasswordUrl: options.supabase?.resetPasswordUrl ?? (options.routes?.resetPassword ? absoluteUrl(options.routes.resetPassword) : void 0)
     });
   }
   return createMockAuthAdapter();
@@ -38,6 +42,8 @@ function createAuthRuntime(options = {}) {
     logo: options.logo,
     tagline: options.tagline,
     description: options.description,
+    loginAmbassadors: options.loginAmbassadors,
+    loginAmbassadorsLabel: options.loginAmbassadorsLabel,
     oauth: {
       enabled: options.oauth?.enabled ?? false,
       providers: options.oauth?.providers ?? ["google"]
@@ -45,7 +51,9 @@ function createAuthRuntime(options = {}) {
     routes: {
       login: options.routes?.login ?? "/login",
       callback: options.routes?.callback ?? "/auth/callback",
-      resetPassword: options.routes?.resetPassword ?? "/auth/reset-password",
+      // The app root — recovery links are recognised by their own params, not by
+      // the path they land on. See resetPassword() in the Supabase adapter.
+      resetPassword: options.routes?.resetPassword ?? "/",
       afterSignIn: options.routes?.afterSignIn ?? "/"
     }
   };
@@ -85,9 +93,16 @@ function OAuthButtons({ providers = ["google"], disabled, onProviderClick }) {
     provider
   )) });
 }
-function LoginForm({ onSuccess, onForgotPassword, showOAuth, oauthProviders }) {
+function LoginForm({
+  onSuccess,
+  onForgotPassword,
+  showOAuth,
+  oauthProviders,
+  initialEmail = "",
+  onEmailChange
+}) {
   const { signIn, error, isLoading } = useAuth();
-  const [email, setEmail] = React.useState("");
+  const [email, setEmail] = React.useState(initialEmail);
   const [password, setPassword] = React.useState("");
   const [busy, setBusy] = React.useState(false);
   const disabled = busy || isLoading;
@@ -104,7 +119,21 @@ function LoginForm({ onSuccess, onForgotPassword, showOAuth, oauthProviders }) {
   return /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-4", children: [
     /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
       /* @__PURE__ */ jsx("span", { children: "Email" }),
-      /* @__PURE__ */ jsx("input", { className: fieldClass(), type: "email", autoComplete: "username", required: true, value: email, onChange: (e) => setEmail(e.target.value), disabled })
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          className: fieldClass(),
+          type: "email",
+          autoComplete: "username",
+          required: true,
+          value: email,
+          onChange: (e) => {
+            setEmail(e.target.value);
+            onEmailChange?.(e.target.value);
+          },
+          disabled
+        }
+      )
     ] }),
     /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
       /* @__PURE__ */ jsx("span", { children: "Password" }),
@@ -165,9 +194,20 @@ function SignupForm({ onSuccess }) {
     /* @__PURE__ */ jsx("button", { className: buttonClass(), type: "submit", disabled, children: disabled ? "Creating account..." : "Create account" })
   ] });
 }
-function ForgotPasswordForm({ redirectTo, onSent, onBackToLogin }) {
+function ForgotPasswordForm({
+  redirectTo,
+  onSent,
+  onBackToLogin,
+  initialEmail = "",
+  onEmailChange,
+  emailLabel = "Email",
+  submitLabel = "Send reset link",
+  sendingLabel = "Sending...",
+  sentLabel = "Password reset instructions sent.",
+  backLabel = "Back to login"
+}) {
   const { resetPassword, error, isLoading } = useAuth();
-  const [email, setEmail] = React.useState("");
+  const [email, setEmail] = React.useState(initialEmail);
   const [sent, setSent] = React.useState(false);
   const [busy, setBusy] = React.useState(false);
   const disabled = busy || isLoading;
@@ -184,13 +224,28 @@ function ForgotPasswordForm({ redirectTo, onSent, onBackToLogin }) {
   }
   return /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-4", children: [
     /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
-      /* @__PURE__ */ jsx("span", { children: "Email" }),
-      /* @__PURE__ */ jsx("input", { className: fieldClass(), type: "email", autoComplete: "username", required: true, value: email, onChange: (e) => setEmail(e.target.value), disabled })
+      /* @__PURE__ */ jsx("span", { children: emailLabel }),
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          className: fieldClass(),
+          type: "email",
+          autoComplete: "username",
+          required: true,
+          autoFocus: !email,
+          value: email,
+          onChange: (e) => {
+            setEmail(e.target.value);
+            onEmailChange?.(e.target.value);
+          },
+          disabled
+        }
+      )
     ] }),
     error && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: error.message }),
-    sent && /* @__PURE__ */ jsx("p", { className: "text-sm text-emerald-600", children: "Password reset instructions sent." }),
-    /* @__PURE__ */ jsx("button", { className: buttonClass(), type: "submit", disabled, children: disabled ? "Sending..." : "Send reset link" }),
-    onBackToLogin && /* @__PURE__ */ jsx("button", { type: "button", className: buttonClass("ghost"), onClick: onBackToLogin, children: "Back to login" })
+    sent && /* @__PURE__ */ jsx("p", { className: "text-sm text-emerald-600", children: sentLabel }),
+    /* @__PURE__ */ jsx("button", { className: buttonClass(), type: "submit", disabled, children: disabled ? sendingLabel : submitLabel }),
+    onBackToLogin && /* @__PURE__ */ jsx("button", { type: "button", className: buttonClass("ghost"), onClick: onBackToLogin, children: backLabel })
   ] });
 }
 function ResetPasswordForm({ onSuccess }) {
@@ -232,6 +287,191 @@ function ResetPasswordForm({ onSuccess }) {
     /* @__PURE__ */ jsx("button", { className: buttonClass(), type: "submit", disabled, children: disabled ? "Saving..." : "Update password" })
   ] });
 }
+var MIN_LENGTH = 8;
+function fieldClass2() {
+  return "h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm outline-none focus:ring-2 focus:ring-ring disabled:cursor-not-allowed disabled:opacity-50";
+}
+function buttonClass2() {
+  return "inline-flex h-10 w-full items-center justify-center rounded-md bg-primary px-4 py-2 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50";
+}
+function useTr() {
+  const t = useTranslation();
+  return React.useCallback(
+    (key, fallback, params) => {
+      const value = t(key, params);
+      return !value || value === key ? fallback : value;
+    },
+    [t]
+  );
+}
+function usePasswordSetupGate() {
+  const { user, isLoading, isAuthenticated } = useAuth();
+  const [done, setDone] = React.useState(false);
+  const intent = React.useMemo(() => readAuthUrlIntent(), []);
+  const complete = React.useCallback(() => {
+    clearAuthUrlTokens();
+    setDone(true);
+  }, []);
+  if (done) return { reason: null, expired: false, checking: false, complete };
+  const decision = decidePasswordSetup({
+    intent,
+    isLoading,
+    isAuthenticated,
+    mustSetPassword: user?.mustSetPassword
+  });
+  return { ...decision, complete };
+}
+function SetPasswordPage({
+  reason,
+  appName = "App",
+  logo,
+  expired,
+  checking,
+  onSuccess
+}) {
+  const tr = useTr();
+  const { user, updatePassword, signOut, error, isLoading } = useAuth();
+  const [password, setPassword] = React.useState("");
+  const [confirmPassword, setConfirmPassword] = React.useState("");
+  const [localError, setLocalError] = React.useState(null);
+  const [busy, setBusy] = React.useState(false);
+  const disabled = busy || isLoading;
+  const invite = reason === "invite";
+  const title = invite ? tr("auth.setPassword.welcomeTitle", `Welcome to ${appName}`, { appName }) : tr("auth.setPassword.recoveryTitle", "Choose a new password");
+  const subtitle = invite ? tr("auth.setPassword.welcomeSubtitle", "Choose a password to finish setting up your access.") : tr("auth.setPassword.recoverySubtitle", "Set a new password to get back into your account.");
+  async function submit(event) {
+    event.preventDefault();
+    setLocalError(null);
+    if (password.length < MIN_LENGTH) {
+      setLocalError(tr("auth.setPassword.tooShort", `Password must be at least ${MIN_LENGTH} characters.`));
+      return;
+    }
+    if (password !== confirmPassword) {
+      setLocalError(tr("auth.setPassword.mismatch", "Passwords do not match."));
+      return;
+    }
+    setBusy(true);
+    try {
+      await updatePassword(password);
+      onSuccess?.();
+    } catch {
+    } finally {
+      setBusy(false);
+    }
+  }
+  return /* @__PURE__ */ jsx("div", { className: "flex min-h-screen items-center justify-center bg-sidebar p-4", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md rounded-2xl border border-border/50 bg-card p-8 shadow-2xl sm:p-10", children: [
+    logo && /* @__PURE__ */ jsx("div", { className: "mb-6 flex justify-center", children: logo }),
+    checking ? /* @__PURE__ */ jsx("p", { className: "py-6 text-center text-sm text-muted-foreground", children: tr("auth.setPassword.checking", "Checking your link...") }) : expired ? /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs("div", { className: "mb-6", children: [
+        /* @__PURE__ */ jsx("h1", { className: "text-2xl font-bold text-foreground", children: tr("auth.setPassword.expiredTitle", "This link has expired") }),
+        /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: tr(
+          "auth.setPassword.expiredSubtitle",
+          "Reset links can only be used once. Enter your e-mail and we will send a new one."
+        ) })
+      ] }),
+      /* @__PURE__ */ jsx(
+        ForgotPasswordForm,
+        {
+          initialEmail: user?.email,
+          submitLabel: tr("auth.setPassword.sendNewLink", "Send new link"),
+          sendingLabel: tr("auth.setPassword.sending", "Sending..."),
+          sentLabel: tr("auth.setPassword.sent", "Check your inbox \u2014 a new link is on the way."),
+          emailLabel: tr("auth.setPassword.email", "E-mail"),
+          backLabel: tr("auth.setPassword.backToLogin", "Back to sign in"),
+          onBackToLogin: onSuccess
+        }
+      )
+    ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs("div", { className: "mb-6", children: [
+        /* @__PURE__ */ jsx("h1", { className: "text-2xl font-bold text-foreground", children: title }),
+        /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: subtitle })
+      ] }),
+      /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-4", children: [
+        /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
+          /* @__PURE__ */ jsx("span", { children: tr("auth.setPassword.newPassword", "New password") }),
+          /* @__PURE__ */ jsx(
+            "input",
+            {
+              className: fieldClass2(),
+              type: "password",
+              autoComplete: "new-password",
+              autoFocus: true,
+              required: true,
+              value: password,
+              onChange: (e) => setPassword(e.target.value),
+              disabled
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsxs("label", { className: "block space-y-1.5 text-sm font-medium", children: [
+          /* @__PURE__ */ jsx("span", { children: tr("auth.setPassword.confirmPassword", "Confirm password") }),
+          /* @__PURE__ */ jsx(
+            "input",
+            {
+              className: fieldClass2(),
+              type: "password",
+              autoComplete: "new-password",
+              required: true,
+              value: confirmPassword,
+              onChange: (e) => setConfirmPassword(e.target.value),
+              disabled
+            }
+          )
+        ] }),
+        (localError || error) && /* @__PURE__ */ jsx("p", { className: "text-sm text-destructive", children: localError ?? error?.message }),
+        /* @__PURE__ */ jsx("button", { className: buttonClass2(), type: "submit", disabled, children: disabled ? tr("auth.setPassword.saving", "Saving...") : tr("auth.setPassword.submit", "Save password") })
+      ] }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          className: "mt-4 w-full text-center text-sm text-muted-foreground hover:text-foreground",
+          onClick: () => {
+            void signOut().finally(() => onSuccess?.());
+          },
+          children: tr("auth.setPassword.backToLogin", "Back to sign in")
+        }
+      )
+    ] })
+  ] }) });
+}
+var FLOAT_STYLES = `
+@keyframes fayz-amb-drift {
+  0%, 100% { transform: translateY(0); }
+  50% { transform: translateY(-2px); }
+}
+@media (prefers-reduced-motion: reduce) {
+  .fayz-amb-avatar { animation: none !important; }
+}
+`;
+function AmbassadorBubbles({ ambassadors, label }) {
+  const items = (ambassadors ?? []).filter((a) => a && typeof a.image === "string" && a.image.trim() !== "");
+  if (items.length === 0) return null;
+  const shown = items.slice(0, 5);
+  return /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-3", children: [
+    /* @__PURE__ */ jsx("style", { children: FLOAT_STYLES }),
+    /* @__PURE__ */ jsx("div", { className: "flex -space-x-2", children: shown.map((ambassador, index) => /* @__PURE__ */ jsx(
+      "div",
+      {
+        title: ambassador.role ? `${ambassador.name} \xB7 ${ambassador.role}` : ambassador.name,
+        className: "fayz-amb-avatar relative h-10 w-10 shrink-0 overflow-hidden rounded-full border-2 border-sidebar bg-sidebar-accent shadow-md ring-1 ring-sidebar-foreground/10 transition-transform duration-200 hover:z-10 hover:scale-110",
+        style: { animation: `fayz-amb-drift 4s ease-in-out ${index * 0.4}s infinite` },
+        children: /* @__PURE__ */ jsx(
+          "img",
+          {
+            src: ambassador.image,
+            alt: ambassador.name,
+            className: "h-full w-full object-cover",
+            loading: "lazy",
+            draggable: false
+          }
+        )
+      },
+      `${ambassador.name}-${index}`
+    )) }),
+    label ? /* @__PURE__ */ jsx("p", { className: "text-xs font-medium text-sidebar-foreground/80", children: label }) : null
+  ] });
+}
 function LoginPage({
   appName = "App",
   logo,
@@ -239,12 +479,15 @@ function LoginPage({
   layout = "split",
   tagline,
   description,
+  loginAmbassadors,
+  loginAmbassadorsLabel,
   showOAuth,
   oauthProviders,
   resetPasswordUrl,
   onSuccess
 }) {
   const [view, setView] = React.useState("login");
+  const [email, setEmail] = React.useState("");
   const brandLogo = loginLogo ?? logo;
   const heading = view === "login" ? "Welcome back" : view === "signup" ? "Create account" : "Reset password";
   const subtitle = view === "login" ? "Enter your credentials to continue" : view === "signup" ? "Create your account to get started" : "Enter your email and we will send reset instructions";
@@ -254,9 +497,19 @@ function LoginPage({
       onSuccess,
       onForgotPassword: () => setView("recovery"),
       showOAuth,
-      oauthProviders
+      oauthProviders,
+      initialEmail: email,
+      onEmailChange: setEmail
     }
-  ) : view === "signup" ? /* @__PURE__ */ jsx(SignupForm, { onSuccess }) : /* @__PURE__ */ jsx(ForgotPasswordForm, { redirectTo: resetPasswordUrl, onBackToLogin: () => setView("login") });
+  ) : view === "signup" ? /* @__PURE__ */ jsx(SignupForm, { onSuccess }) : /* @__PURE__ */ jsx(
+    ForgotPasswordForm,
+    {
+      redirectTo: resetPasswordUrl,
+      onBackToLogin: () => setView("login"),
+      initialEmail: email,
+      onEmailChange: setEmail
+    }
+  );
   const switcher = view === "login" ? /* @__PURE__ */ jsxs("p", { className: "text-center text-sm text-muted-foreground", children: [
     "Do not have an account?",
     " ",
@@ -282,7 +535,8 @@ function LoginPage({
   return /* @__PURE__ */ jsxs("div", { className: "flex min-h-screen bg-sidebar", children: [
     /* @__PURE__ */ jsxs("div", { className: "relative hidden w-1/2 overflow-hidden lg:block", children: [
       /* @__PURE__ */ jsx("div", { className: "absolute inset-0 bg-gradient-to-br from-sidebar-accent/50 via-transparent to-sidebar/80" }),
-      /* @__PURE__ */ jsx("div", { className: "relative flex h-full flex-col justify-end p-12", children: /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+      /* @__PURE__ */ jsx("div", { className: "relative z-20 flex h-full flex-col justify-end p-12", children: /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+        /* @__PURE__ */ jsx(AmbassadorBubbles, { ambassadors: loginAmbassadors, label: loginAmbassadorsLabel }),
         /* @__PURE__ */ jsx("p", { className: "text-sm font-medium text-sidebar-muted", children: appName }),
         /* @__PURE__ */ jsx("h2", { className: "text-3xl font-bold text-sidebar-foreground", children: tagline ?? `Welcome to ${appName}` }),
         description && /* @__PURE__ */ jsx("p", { className: "max-w-md text-sm leading-relaxed text-sidebar-muted", children: description })
@@ -333,15 +587,9 @@ function AuthCallbackPage({ onSuccess, onError }) {
   ] }) });
 }
 function ResetPasswordPage({ onSuccess }) {
-  return /* @__PURE__ */ jsx("div", { className: "flex min-h-screen items-center justify-center bg-background p-4", children: /* @__PURE__ */ jsxs("div", { className: "w-full max-w-md rounded-2xl border bg-card p-8 shadow-xl", children: [
-    /* @__PURE__ */ jsxs("div", { className: "mb-6", children: [
-      /* @__PURE__ */ jsx("h1", { className: "text-2xl font-bold text-foreground", children: "Update password" }),
-      /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: "Choose a new password for your account." })
-    ] }),
-    /* @__PURE__ */ jsx(ResetPasswordForm, { onSuccess })
-  ] }) });
+  return /* @__PURE__ */ jsx(SetPasswordPage, { reason: "recovery", onSuccess });
 }
 
-export { AuthCallbackPage, AuthGate, ForgotPasswordForm, LoginForm, LoginPage, OAuthButtons, ResetPasswordForm, ResetPasswordPage, SignupForm, createAuthPlugin, createAuthRuntime, resolveAuthAdapter };
+export { AmbassadorBubbles, AuthCallbackPage, AuthGate, ForgotPasswordForm, LoginForm, LoginPage, OAuthButtons, ResetPasswordForm, ResetPasswordPage, SetPasswordPage, SignupForm, createAuthPlugin, createAuthRuntime, resolveAuthAdapter, usePasswordSetupGate };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map