@fayz-ai/plugin-auth 0.9.0 → 0.9.1

package/src/runtime.ts

@@ -1,67 +0,0 @@
-import type { AuthAdapter } from '@fayz-ai/core'
-import { createMockAuthAdapter, createSupabaseAuthAdapter } from '@fayz-ai/auth'
-import type { AuthPluginOptions, ResolvedAuthPlugin } from './types'
-
-function absoluteUrl(path: string): string | undefined {
-  if (typeof window === 'undefined') return undefined
-  if (/^https?:\/\//.test(path)) return path
-  return `${window.location.origin}${path.startsWith('/') ? path : `/${path}`}`
-}
-
-export function resolveAuthAdapter(options: AuthPluginOptions = {}): AuthAdapter {
-  const configured = options.adapter ?? options.provider
-  if (configured && typeof configured === 'object') return configured
-
-  const provider = configured ?? (options.supabase?.url ? 'supabase' : 'mock')
-  if (provider === 'supabase') {
-    const url = options.supabase?.url
-    const anonKey = options.supabase?.anonKey
-    if (!url || !anonKey) {
-      throw new Error('plugin-auth provider="supabase" requires supabase.url and supabase.anonKey.')
-    }
-    return createSupabaseAuthAdapter({
-      supabaseUrl: url,
-      supabaseAnonKey: anonKey,
-      supabaseClient: options.supabase?.client,
-      callbackUrl: options.supabase?.callbackUrl ?? absoluteUrl(options.routes?.callback ?? '/auth/callback'),
-      // Only when the host asked for a specific URL. Left undefined, the adapter
-      // points recovery at the app root, which needs no route and no extra entry
-      // in Supabase's redirect allow-list.
-      resetPasswordUrl:
-        options.supabase?.resetPasswordUrl ??
-        (options.routes?.resetPassword ? absoluteUrl(options.routes.resetPassword) : undefined),
-    })
-  }
-
-  return createMockAuthAdapter()
-}
-
-export function createAuthRuntime(options: AuthPluginOptions = {}): ResolvedAuthPlugin {
-  return {
-    kind: 'auth',
-    adapter: resolveAuthAdapter(options),
-    requireAuth: options.requireAuth ?? true,
-    layout: options.layout ?? 'split',
-    logo: options.logo,
-    tagline: options.tagline,
-    description: options.description,
-    loginAmbassadors: options.loginAmbassadors,
-    loginAmbassadorsLabel: options.loginAmbassadorsLabel,
-    oauth: {
-      enabled: options.oauth?.enabled ?? false,
-      providers: options.oauth?.providers ?? ['google'],
-    },
-    routes: {
-      login: options.routes?.login ?? '/login',
-      callback: options.routes?.callback ?? '/auth/callback',
-      // The app root — recovery links are recognised by their own params, not by
-      // the path they land on. See resetPassword() in the Supabase adapter.
-      resetPassword: options.routes?.resetPassword ?? '/',
-      afterSignIn: options.routes?.afterSignIn ?? '/',
-    },
-  }
-}
-
-export function createAuthPlugin(options: AuthPluginOptions = {}): ResolvedAuthPlugin {
-  return createAuthRuntime(options)
-}

package/src/set-password.tsx

@@ -1,229 +0,0 @@
-import * as React from 'react'
-import { useAuth, readAuthUrlIntent, clearAuthUrlTokens, decidePasswordSetup } from '@fayz-ai/auth'
-import { useTranslation } from '@fayz-ai/core'
-import { ForgotPasswordForm } from './forms'
-
-// ---------------------------------------------------------------------------
-// Set-password surface — the one screen behind two flows:
-//
-//   • recovery — the user clicked "forgot password" and came back on a recovery
-//     link. GoTrue already signed them in from the link, so all that is missing
-//     is `updateUser({ password })`. Without this screen they land straight in
-//     the app (or on the login form) and are never asked, which is exactly the
-//     "the link does nothing" bug.
-//
-//   • invite — the user was added to an organisation. The invite is a magic link,
-//     so the account exists with NO password: unless they choose one here, every
-//     future sign-in needs another e-mail.
-//
-// Mounted by the shell above its auth gate, driven by usePasswordSetupGate().
-// ---------------------------------------------------------------------------
-
-export type SetPasswordReason = 'recovery' | 'invite'
-
-const MIN_LENGTH = 8
-
-function fieldClass() {
-  return 'h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm outline-none focus:ring-2 focus:ring-ring disabled:cursor-not-allowed disabled:opacity-50'
-}
-
-function buttonClass() {
-  return 'inline-flex h-10 w-full items-center justify-center rounded-md bg-primary px-4 py-2 text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90 disabled:pointer-events-none disabled:opacity-50'
-}
-
-function useTr() {
-  const t = useTranslation()
-  return React.useCallback(
-    (key: string, fallback: string, params?: Record<string, string | number>) => {
-      const value = t(key, params)
-      return !value || value === key ? fallback : value
-    },
-    [t],
-  )
-}
-
-export interface PasswordSetupGate {
-  /** null when nothing is pending and the shell should render normally. */
-  reason: SetPasswordReason | null
-  /** The link is dead (already used / expired) — offer a fresh one instead. */
-  expired: boolean
-  /** Still resolving the session the link carries. */
-  checking: boolean
-  /** Called by the screen once the password is set (or the user gives up). */
-  complete: () => void
-}
-
-/**
- * Decides whether the user owes us a password before they see the app.
- *
- * The URL intent is read from a snapshot taken at module load: supabase-js wipes
- * the token fragment as soon as it initialises, so the reason the user is here is
- * gone by the time React renders.
- */
-export function usePasswordSetupGate(): PasswordSetupGate {
-  const { user, isLoading, isAuthenticated } = useAuth()
-  const [done, setDone] = React.useState(false)
-  const intent = React.useMemo(() => readAuthUrlIntent(), [])
-
-  const complete = React.useCallback(() => {
-    clearAuthUrlTokens()
-    setDone(true)
-  }, [])
-
-  if (done) return { reason: null, expired: false, checking: false, complete }
-
-  const decision = decidePasswordSetup({
-    intent,
-    isLoading,
-    isAuthenticated,
-    mustSetPassword: user?.mustSetPassword,
-  })
-  return { ...decision, complete }
-}
-
-export interface SetPasswordPageProps {
-  reason: SetPasswordReason
-  appName?: string
-  logo?: React.ReactNode
-  /** Show the "ask for a new link" form instead of the password fields. */
-  expired?: boolean
-  /** Waiting on the link's session — renders a quiet placeholder. */
-  checking?: boolean
-  onSuccess?: () => void
-}
-
-export function SetPasswordPage({
-  reason,
-  appName = 'App',
-  logo,
-  expired,
-  checking,
-  onSuccess,
-}: SetPasswordPageProps) {
-  const tr = useTr()
-  const { user, updatePassword, signOut, error, isLoading } = useAuth()
-  const [password, setPassword] = React.useState('')
-  const [confirmPassword, setConfirmPassword] = React.useState('')
-  const [localError, setLocalError] = React.useState<string | null>(null)
-  const [busy, setBusy] = React.useState(false)
-  const disabled = busy || isLoading
-
-  const invite = reason === 'invite'
-  const title = invite
-    ? tr('auth.setPassword.welcomeTitle', `Welcome to ${appName}`, { appName })
-    : tr('auth.setPassword.recoveryTitle', 'Choose a new password')
-  const subtitle = invite
-    ? tr('auth.setPassword.welcomeSubtitle', 'Choose a password to finish setting up your access.')
-    : tr('auth.setPassword.recoverySubtitle', 'Set a new password to get back into your account.')
-
-  async function submit(event: React.FormEvent) {
-    event.preventDefault()
-    setLocalError(null)
-    if (password.length < MIN_LENGTH) {
-      setLocalError(tr('auth.setPassword.tooShort', `Password must be at least ${MIN_LENGTH} characters.`))
-      return
-    }
-    if (password !== confirmPassword) {
-      setLocalError(tr('auth.setPassword.mismatch', 'Passwords do not match.'))
-      return
-    }
-    setBusy(true)
-    try {
-      await updatePassword(password)
-      onSuccess?.()
-    } catch {
-      // useAuth already surfaced it; keep the user on the form.
-    } finally {
-      setBusy(false)
-    }
-  }
-
-  return (
-    <div className="flex min-h-screen items-center justify-center bg-sidebar p-4">
-      <div className="w-full max-w-md rounded-2xl border border-border/50 bg-card p-8 shadow-2xl sm:p-10">
-        {logo && <div className="mb-6 flex justify-center">{logo}</div>}
-        {checking ? (
-          <p className="py-6 text-center text-sm text-muted-foreground">
-            {tr('auth.setPassword.checking', 'Checking your link...')}
-          </p>
-        ) : expired ? (
-          <>
-            <div className="mb-6">
-              <h1 className="text-2xl font-bold text-foreground">
-                {tr('auth.setPassword.expiredTitle', 'This link has expired')}
-              </h1>
-              <p className="mt-1 text-sm text-muted-foreground">
-                {tr(
-                  'auth.setPassword.expiredSubtitle',
-                  'Reset links can only be used once. Enter your e-mail and we will send a new one.',
-                )}
-              </p>
-            </div>
-            <ForgotPasswordForm
-              initialEmail={user?.email}
-              submitLabel={tr('auth.setPassword.sendNewLink', 'Send new link')}
-              sendingLabel={tr('auth.setPassword.sending', 'Sending...')}
-              sentLabel={tr('auth.setPassword.sent', 'Check your inbox — a new link is on the way.')}
-              emailLabel={tr('auth.setPassword.email', 'E-mail')}
-              backLabel={tr('auth.setPassword.backToLogin', 'Back to sign in')}
-              onBackToLogin={onSuccess}
-            />
-          </>
-        ) : (
-          <>
-            <div className="mb-6">
-              <h1 className="text-2xl font-bold text-foreground">{title}</h1>
-              <p className="mt-1 text-sm text-muted-foreground">{subtitle}</p>
-            </div>
-            <form onSubmit={submit} className="space-y-4">
-              <label className="block space-y-1.5 text-sm font-medium">
-                <span>{tr('auth.setPassword.newPassword', 'New password')}</span>
-                <input
-                  className={fieldClass()}
-                  type="password"
-                  autoComplete="new-password"
-                  autoFocus
-                  required
-                  value={password}
-                  onChange={(e) => setPassword(e.target.value)}
-                  disabled={disabled}
-                />
-              </label>
-              <label className="block space-y-1.5 text-sm font-medium">
-                <span>{tr('auth.setPassword.confirmPassword', 'Confirm password')}</span>
-                <input
-                  className={fieldClass()}
-                  type="password"
-                  autoComplete="new-password"
-                  required
-                  value={confirmPassword}
-                  onChange={(e) => setConfirmPassword(e.target.value)}
-                  disabled={disabled}
-                />
-              </label>
-              {(localError || error) && (
-                <p className="text-sm text-destructive">{localError ?? error?.message}</p>
-              )}
-              <button className={buttonClass()} type="submit" disabled={disabled}>
-                {disabled
-                  ? tr('auth.setPassword.saving', 'Saving...')
-                  : tr('auth.setPassword.submit', 'Save password')}
-              </button>
-            </form>
-            {/* An invitee who does not want to continue needs a way out that does
-                not leave them stuck on this screen with a live session. */}
-            <button
-              type="button"
-              className="mt-4 w-full text-center text-sm text-muted-foreground hover:text-foreground"
-              onClick={() => {
-                void signOut().finally(() => onSuccess?.())
-              }}
-            >
-              {tr('auth.setPassword.backToLogin', 'Back to sign in')}
-            </button>
-          </>
-        )}
-      </div>
-    </div>
-  )
-}

package/src/types.ts

@@ -1,65 +0,0 @@
-import type React from 'react'
-import type { AuthAdapter, AuthProvider } from '@fayz-ai/core'
-import type { SupabaseAuthConfig } from '@fayz-ai/auth'
-
-export type AuthProviderKey = 'supabase' | 'mock' | (string & {})
-export type AuthLayout = 'split' | 'centered'
-
-/** A product ambassador rendered as a floating circular photo bubble on the
- *  split-login decorative panel. `image` may be a local path or a data URI. */
-export interface LoginAmbassador {
-  name: string
-  role?: string
-  image: string
-}
-
-export interface AuthRoutesConfig {
-  login?: string
-  callback?: string
-  resetPassword?: string
-  afterSignIn?: string
-}
-
-export interface AuthOAuthConfig {
-  enabled?: boolean
-  providers?: Exclude<AuthProvider, 'email'>[]
-}
-
-export interface AuthSupabaseConfig {
-  url?: string
-  anonKey?: string
-  client?: SupabaseAuthConfig['supabaseClient']
-  callbackUrl?: string
-  resetPasswordUrl?: string
-}
-
-export interface AuthPluginOptions {
-  provider?: AuthProviderKey | AuthAdapter
-  adapter?: AuthProviderKey | AuthAdapter
-  supabase?: AuthSupabaseConfig
-  requireAuth?: boolean
-  layout?: AuthLayout
-  logo?: React.ReactNode
-  tagline?: string
-  description?: string
-  loginAmbassadors?: LoginAmbassador[]
-  loginAmbassadorsLabel?: string
-  oauth?: AuthOAuthConfig
-  routes?: AuthRoutesConfig
-}
-
-export interface ResolvedAuthPlugin {
-  kind: 'auth'
-  adapter: AuthAdapter
-  requireAuth: boolean
-  layout: AuthLayout
-  logo?: React.ReactNode
-  tagline?: string
-  description?: string
-  loginAmbassadors?: LoginAmbassador[]
-  loginAmbassadorsLabel?: string
-  oauth: Required<AuthOAuthConfig>
-  routes: Required<AuthRoutesConfig>
-}
-
-export type AuthFormView = 'login' | 'signup' | 'recovery'

package/src/website/AuthModalProvider.tsx

@@ -1,48 +0,0 @@
-import { createContext, useContext, useState, type ReactNode } from 'react'
-import { PhoneAuthModal, type PhoneAuthModalConfig } from './PhoneAuthModal'
-
-interface AuthModalContextValue {
-  openAuthModal: () => void
-  closeAuthModal: () => void
-  isAuthModalOpen: boolean
-}
-
-const AuthModalContext = createContext<AuthModalContextValue | null>(null)
-
-export interface AuthModalProviderProps {
-  /** Enables the phone sign-in/up modal (default for dogfood sites). */
-  phoneAuth?: boolean
-  config?: PhoneAuthModalConfig
-  children: ReactNode
-}
-
-/**
- * Mounts the default phone-auth login modal and exposes openAuthModal() to the
- * host (e.g. an "Acessar área do cliente" button). Render INSIDE <AuthProvider>
- * so the modal can sign the user in through the mounted adapter.
- */
-export function AuthModalProvider({ phoneAuth = true, config, children }: AuthModalProviderProps) {
-  const [open, setOpen] = useState(false)
-  const value: AuthModalContextValue = {
-    openAuthModal: () => setOpen(true),
-    closeAuthModal: () => setOpen(false),
-    isAuthModalOpen: open,
-  }
-  return (
-    <AuthModalContext.Provider value={value}>
-      {children}
-      {phoneAuth ? <PhoneAuthModal open={open} onClose={() => setOpen(false)} config={config} /> : null}
-    </AuthModalContext.Provider>
-  )
-}
-
-/** Access the auth modal controls. Returns a no-op opener if no provider is mounted. */
-export function useAuthModal(): AuthModalContextValue {
-  return (
-    useContext(AuthModalContext) ?? {
-      openAuthModal: () => {},
-      closeAuthModal: () => {},
-      isAuthModalOpen: false,
-    }
-  )
-}

package/src/website/PhoneAuthModal.tsx

@@ -1,178 +0,0 @@
-import { useEffect, useState } from 'react'
-import * as Dialog from '@radix-ui/react-dialog'
-import { X, Smartphone, ArrowLeft } from 'lucide-react'
-import { COUNTRIES, DEFAULT_COUNTRY, getCountry, maskPhone, unmaskPhone } from '@fayz-ai/core'
-import { useAuth } from '@fayz-ai/auth'
-import { phoneToEmail } from './phone'
-
-export interface PhoneAuthModalConfig {
-  /** Business/brand name shown in the copy. */
-  brand?: string
-  title?: string
-}
-
-type Mode = 'signin' | 'signup'
-
-/**
- * Default phone sign-in / sign-up modal for dogfood Fayz sites. Built on Radix
- * Dialog (backdrop, focus-trap, Esc, scroll-lock, enter/exit animation via
- * tailwindcss-animate) — no reinvented modal chrome. Entrar / Criar conta
- * toggle, phone → WhatsApp code (POC bypass `0000`) → signs the user in via the
- * mounted auth adapter (phone = account). Token-only; render inside <AuthProvider>.
- */
-export function PhoneAuthModal({
-  open, onClose, config,
-}: { open: boolean; onClose: () => void; config?: PhoneAuthModalConfig }) {
-  const { signUp } = useAuth()
-
-  const [mode, setMode] = useState<Mode>('signup')
-  const [step, setStep] = useState<'phone' | 'code'>('phone')
-  const [countryIso, setCountryIso] = useState(DEFAULT_COUNTRY)
-  const country = getCountry(countryIso)
-  const [phone, setPhone] = useState('')
-  const [name, setName] = useState('')
-  const [code, setCode] = useState('')
-  const [codeError, setCodeError] = useState(false)
-  const [busy, setBusy] = useState(false)
-
-  // Fresh flow each time it opens.
-  useEffect(() => {
-    if (open) { setStep('phone'); setCode(''); setCodeError(false); setBusy(false) }
-  }, [open])
-
-  function sendCode() {
-    if (unmaskPhone(phone).length < 8) return
-    setCode(''); setCodeError(false); setStep('code')
-  }
-
-  async function confirmCode() {
-    if (code.trim() !== '0000') { setCodeError(true); return }
-    setBusy(true)
-    try {
-      await signUp(phoneToEmail(`${country.dial} ${phone}`), unmaskPhone(phone), name.trim() || 'Cliente')
-      onClose()
-    } catch {
-      setCodeError(true)
-    } finally {
-      setBusy(false)
-    }
-  }
-
-  const brandLabel = config?.brand ? ` na ${config.brand}` : ''
-
-  return (
-    <Dialog.Root open={open} onOpenChange={(o) => { if (!o) onClose() }}>
-      <Dialog.Portal>
-        <Dialog.Overlay className="fixed inset-0 z-[100] bg-foreground/40 backdrop-blur-sm data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=open]:fade-in-0 data-[state=closed]:fade-out-0" />
-        <Dialog.Content
-          onOpenAutoFocus={(e) => e.preventDefault()}
-          className="fixed left-1/2 top-1/2 z-[101] w-[calc(100%-2rem)] max-w-[26rem] -translate-x-1/2 -translate-y-1/2 rounded-2xl border border-border bg-card p-6 shadow-2xl duration-200 focus:outline-none data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=open]:fade-in-0 data-[state=closed]:fade-out-0 data-[state=open]:zoom-in-95 data-[state=closed]:zoom-out-95 data-[state=open]:slide-in-from-bottom-2 motion-reduce:animate-none"
-        >
-          {/* Header */}
-          <div className="flex items-center gap-3">
-            <span className="flex h-10 w-10 items-center justify-center rounded-xl bg-accent text-primary">
-              <Smartphone className="h-5 w-5" />
-            </span>
-            <div className="min-w-0">
-              <Dialog.Title className="text-base font-semibold text-foreground">
-                {config?.title ?? 'Acessar sua conta'}
-              </Dialog.Title>
-              <Dialog.Description className="text-xs text-muted-foreground">
-                {mode === 'signup' ? `Crie sua conta${brandLabel} em segundos` : `Bem-vindo de volta${brandLabel}`}
-              </Dialog.Description>
-            </div>
-          </div>
-
-          <Dialog.Close
-            aria-label="Fechar"
-            className="absolute right-4 top-4 flex h-7 w-7 items-center justify-center rounded-full text-muted-foreground transition-colors hover:bg-muted hover:text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
-          >
-            <X className="h-4 w-4" />
-          </Dialog.Close>
-
-          {/* Mode toggle (only on the phone step) */}
-          {step === 'phone' ? (
-            <div className="mt-5 grid grid-cols-2 gap-1 rounded-lg bg-muted p-1 text-sm">
-              {(['signin', 'signup'] as Mode[]).map((m) => (
-                <button
-                  key={m}
-                  type="button"
-                  onClick={() => setMode(m)}
-                  className={`rounded-md py-1.5 font-medium transition-colors ${mode === m ? 'bg-card text-foreground shadow-sm' : 'text-muted-foreground hover:text-foreground'}`}
-                >
-                  {m === 'signin' ? 'Entrar' : 'Criar conta'}
-                </button>
-              ))}
-            </div>
-          ) : null}
-
-          {step === 'phone' ? (
-            <form onSubmit={(e) => { e.preventDefault(); sendCode() }} className="mt-4 space-y-3">
-              {mode === 'signup' ? (
-                <div>
-                  <label htmlFor="auth-name" className="mb-1 block text-sm font-medium text-foreground">Nome</label>
-                  <input
-                    id="auth-name" type="text" autoComplete="name" value={name}
-                    onChange={(e) => setName(e.target.value)}
-                    className="w-full rounded-xl border border-border bg-background px-3.5 py-2.5 text-foreground outline-none transition-colors focus:border-primary focus-visible:ring-2 focus-visible:ring-ring"
-                    placeholder="Seu nome"
-                  />
-                </div>
-              ) : null}
-              <div>
-                <label htmlFor="auth-phone" className="mb-1 block text-sm font-medium text-foreground">Celular</label>
-                <div className="flex">
-                  <select
-                    aria-label="País"
-                    value={countryIso}
-                    onChange={(e) => { const c = getCountry(e.target.value); setCountryIso(c.iso2); setPhone(maskPhone(unmaskPhone(phone), c.mask)) }}
-                    className="appearance-none rounded-l-xl border border-r-0 border-border bg-muted py-2.5 pl-3 pr-6 text-sm font-medium text-foreground outline-none focus-visible:ring-2 focus-visible:ring-ring"
-                  >
-                    {COUNTRIES.map((c) => <option key={c.iso2} value={c.iso2}>{c.flag} {c.dial}</option>)}
-                  </select>
-                  <input
-                    id="auth-phone" type="tel" autoComplete="tel" inputMode="tel" value={phone} autoFocus
-                    onChange={(e) => setPhone(maskPhone(e.target.value, country.mask))}
-                    className="w-full rounded-r-xl border border-border bg-background px-3.5 py-2.5 text-foreground outline-none transition-colors focus:border-primary focus-visible:ring-2 focus-visible:ring-ring"
-                    placeholder={`Ex.: ${maskPhone('11987654321', country.mask)}`}
-                  />
-                </div>
-              </div>
-              <button
-                type="submit"
-                disabled={unmaskPhone(phone).length < 8}
-                className="w-full rounded-xl bg-primary py-2.5 font-semibold text-primary-foreground transition-opacity hover:opacity-90 disabled:opacity-40 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
-              >
-                Enviar código via WhatsApp
-              </button>
-              <p className="text-center text-xs text-muted-foreground">Enviaremos um código para confirmar seu número.</p>
-            </form>
-          ) : (
-            <form onSubmit={(e) => { e.preventDefault(); void confirmCode() }} className="mt-5 space-y-3">
-              <p className="text-sm text-muted-foreground">
-                Enviamos um código via WhatsApp para <span className="font-medium text-foreground">{country.flag} {country.dial} {phone}</span>.
-              </p>
-              <input
-                type="text" inputMode="numeric" value={code} autoFocus
-                onChange={(e) => { setCode(e.target.value); setCodeError(false) }}
-                className="w-full rounded-xl border border-border bg-background px-4 py-3 text-center text-lg tracking-[0.4em] text-foreground outline-none transition-colors focus:border-primary focus-visible:ring-2 focus-visible:ring-ring placeholder:text-sm placeholder:tracking-normal"
-                placeholder="Digite o código"
-              />
-              {codeError ? <p role="alert" className="text-sm text-destructive">Código inválido. Para testar, use 0000.</p> : null}
-              <button
-                type="submit"
-                disabled={busy}
-                className="w-full rounded-xl bg-primary py-2.5 font-semibold text-primary-foreground transition-opacity hover:opacity-90 disabled:opacity-60 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
-              >
-                {busy ? 'Entrando…' : mode === 'signup' ? 'Criar conta e entrar' : 'Confirmar e entrar'}
-              </button>
-              <button type="button" onClick={() => setStep('phone')} className="mx-auto flex items-center gap-1 text-sm font-medium text-primary hover:underline">
-                <ArrowLeft className="h-3.5 w-3.5" /> Trocar número
-              </button>
-            </form>
-          )}
-        </Dialog.Content>
-      </Dialog.Portal>
-    </Dialog.Root>
-  )
-}

package/src/website/index.tsx

@@ -1,17 +0,0 @@
-// ---------------------------------------------------------------------------
-// @fayz-ai/plugin-auth/website — lean website auth surface (no @fayz-ai/ui).
-//
-// Ships the DEFAULT phone sign-in/sign-up modal for dogfood Fayz sites +
-// AuthModalProvider (openAuthModal control) + the canonical phone→email helper.
-// Re-exports the auth runtime from @fayz-ai/auth for one-stop host wiring.
-// ---------------------------------------------------------------------------
-
-export { AuthModalProvider, useAuthModal } from './AuthModalProvider'
-export type { AuthModalProviderProps } from './AuthModalProvider'
-export { PhoneAuthModal } from './PhoneAuthModal'
-export type { PhoneAuthModalConfig } from './PhoneAuthModal'
-export { phoneToEmail } from './phone'
-
-// Convenience re-exports so hosts import auth from one place.
-export { AuthProvider, useAuth, createMockAuthAdapter, createSupabaseAuthAdapter } from '@fayz-ai/auth'
-export type { AuthAdapter, AuthUser, AuthSession } from '@fayz-ai/core'

package/src/website/phone.ts

@@ -1,12 +0,0 @@
-import { unmaskPhone } from '@fayz-ai/core'
-
-/**
- * Canonical phone → auth email. Used by BOTH the phone-auth modal and any host
- * booking→auth bridge so the same number always maps to the same account
- * (Quaddro model: phone = identity). Pass the phone WITH its country dial so the
- * digits are globally unique.
- */
-export function phoneToEmail(phoneWithDial: string): string {
-  const digits = unmaskPhone(phoneWithDial)
-  return `${digits || 'anon'}@phone.fayz.local`
-}