@gomusdev/web-components 4.8.1 → 4.9.0

package/README.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 4.9.0 (2026-07-16)
+
+### Features
+
+* **auth:** add go-set-password to complete the password reset flow, closes [#96](https://gitlab.giantmonkey.de/gomus/frontend/issues/96)
+
+## 4.8.2 (2026-07-16)
+
+### Bug Fixes
+
+* **mr2:** expand spec detection to include sibling `spec/` subdirectory
+* **ticket-selection:** derive day-ticket time per ticket, not from first quota (TC-04), closes [#136](https://gitlab.giantmonkey.de/gomus/frontend/issues/136)
+
 ## 4.8.1 (2026-07-16)
 
 ### Bug Fixes

package/dist-js/components/auth/setPassword/SetPassword.svelte.d.ts

@@ -0,0 +1 @@
+export { SvelteComponent as default } from 'svelte';

package/dist-js/gomus-webcomponents.iife.js

@@ -11860,6 +11860,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	function initUITimeslotTickets(tickets, selectedTime = "") {
 		return sort(Object.values(tickets).map((ticket) => createUITicket(ticket, { selectedTime })), (f) => f.shop_order);
 	}
+	/**
+	* Day tickets (TC-04): each day quota keys its capacity at its OWN first-entry time, so
+	* capacity keys differ across quotas. The day 'time' must be derived per ticket — the
+	* first positive key of the ticket's own total_capacities — never from one global quota
+	* key. A ticket with capacity keys that are all zero is sold out and dropped; a ticket
+	* with no keys at all (no quota) is kept and gets `fallbackTime`.
+	*/
+	function initUIDayTickets(tickets, fallbackTime) {
+		const ownDayTime = (t) => Object.keys(t.total_capacities ?? {}).find((key) => (t.total_capacities?.[key] ?? 0) > 0);
+		return sort(Object.values(tickets).filter((t) => ownDayTime(t) || Object.keys(t.total_capacities ?? {}).length === 0).map((t) => createUITicket(t, { selectedTime: ownDayTime(t) ?? fallbackTime })), (f) => f.shop_order);
+	}
 	function filterAvailabletickets(tickets, selectedTime = "") {
 		let available = Object.entries(tickets);
 		if (selectedTime !== "") available = available.filter(([, t]) => t.total_capacities?.[selectedTime] && t.total_capacities[selectedTime] > 0);
@@ -13867,6 +13878,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				requiredFields: ["email"]
 			});
 		}
+		/**
+		* Sets a new password using the one-time credentials the backend appends to
+		* the reset-mail redirect (`access-token`, `client`, `uid` query params).
+		* Unlike `updatePassword` no `current_password` is needed — the reset link
+		* flags the session with `allow_password_change`. The 200 response carries
+		* fresh auth headers which AuthMiddleware ingests, signing the customer in.
+		*/
+		setNewPassword(params, headers) {
+			return this.apiPut("/api/v4/auth/password", {
+				body: params,
+				requiredFields: ["password", "password_confirmation"],
+				params: { header: headers }
+			});
+		}
 		activateMembership(params) {
 			return this.apiPost(MEMBERSHIP_ACTIVATION_ENDPOINT, {
 				body: params,
@@ -14247,7 +14272,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	var getPersonalizationDetails = createGetDetails(KEY$5);
 	//#endregion
 	//#region src/components/annualTicketPersonalization/components/AnnualTicketPersonalization.svelte
-	var root$57 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
+	var root$58 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
 	var root_1$21 = /* @__PURE__ */ from_html(`<ul class="go-annual-ticket"><li class="go-annual-ticket-title"> </li> <li class="go-annual-ticket-personalization-count"> </li> <!></ul>`);
 	function AnnualTicketPersonalization($$anchor, $$props) {
 		push($$props, true);
@@ -14282,7 +14307,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				reset(li_1);
 				var node_2 = sibling(li_1, 2);
 				var consequent = ($$anchor) => {
-					var li_2 = root$57();
+					var li_2 = root$58();
 					var a = child(li_2);
 					var text_2 = child(a, true);
 					reset(a);
@@ -14968,7 +14993,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	}
 	//#endregion
 	//#region src/components/forms/ui/generic/Form.svelte
-	var root$56 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
+	var root$57 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
 	function Form($$anchor, $$props) {
 		push($$props, true);
 		let formId = prop($$props, "formId", 7), custom = prop($$props, "custom", 7);
@@ -15014,7 +15039,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		var fragment = comment();
 		var node = first_child(fragment);
 		var consequent = ($$anchor) => {
-			var fragment_1 = root$56();
+			var fragment_1 = root$57();
 			var go_submit = sibling(sibling(first_child(fragment_1), 2), 2);
 			var text = child(go_submit, true);
 			reset(go_submit);
@@ -15041,10 +15066,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	}, [], ["details"]));
 	//#endregion
 	//#region src/components/auth/passwordReset/PasswordReset.svelte
-	var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+	var root$56 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
 	function PasswordReset($$anchor, $$props) {
 		push($$props, true);
-		let custom = prop($$props, "custom", 7, false);
+		let custom = prop($$props, "custom", 7, false), redirectUrl = prop($$props, "redirectUrl", 7, "");
 		Forms.defineForm({
 			id: "passwordReset",
 			submitLabel: "user.passwordReset.actions.requestPasswordReset",
@@ -15055,7 +15080,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		});
 		async function passwordReset(event) {
 			const details = event.target.details;
-			const result = await shop.passwordReset(details.formData);
+			const params = details.formData;
+			const result = await shop.passwordReset(redirectUrl() ? {
+				...params,
+				redirect_url: redirectUrl()
+			} : params);
 			if (result.data) {
 				$$props.$$host.dispatchEvent(new Event("go-success", {
 					bubbles: true,
@@ -15072,16 +15101,105 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			set custom($$value = false) {
 				custom($$value);
 				flushSync();
+			},
+			get redirectUrl() {
+				return redirectUrl();
+			},
+			set redirectUrl($$value = "") {
+				redirectUrl($$value);
+				flushSync();
 			}
 		};
-		var go_form = root$55();
+		var go_form = root$56();
 		set_custom_element_data(go_form, "formId", "passwordReset");
 		template_effect(() => set_custom_element_data(go_form, "custom", custom()));
 		event("submit", go_form, passwordReset);
 		append($$anchor, go_form);
 		return pop($$exports);
 	}
-	customElements.define("go-password-reset", create_custom_element(PasswordReset, { custom: {} }, [], []));
+	customElements.define("go-password-reset", create_custom_element(PasswordReset, {
+		redirectUrl: {
+			attribute: "redirect-url",
+			type: "String"
+		},
+		custom: {}
+	}, [], []));
+	//#endregion
+	//#region src/components/auth/setPassword/SetPassword.svelte
+	var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+	function SetPassword($$anchor, $$props) {
+		push($$props, true);
+		let accessToken = prop($$props, "accessToken", 7, ""), client = prop($$props, "client", 7, ""), uid = prop($$props, "uid", 7, "");
+		Forms.defineForm({
+			id: "setPassword",
+			submitLabel: "user.passwordReset.actions.resetPassword",
+			fields: [{
+				key: "newPassword",
+				required: true
+			}, {
+				key: "confirmPassword",
+				required: true
+			}]
+		});
+		async function setNewPassword(event) {
+			const details = event.target.details;
+			const result = await shop.setNewPassword(details.formData, {
+				"access-token": accessToken(),
+				client: client(),
+				uid: uid()
+			});
+			if (result.data) {
+				$$props.$$host.dispatchEvent(new Event("go-success", {
+					bubbles: true,
+					composed: true
+				}));
+				details.successMessage = result.data.message;
+				details.apiErrors = [];
+			} else details.apiErrors = result.error.errors;
+		}
+		var $$exports = {
+			get accessToken() {
+				return accessToken();
+			},
+			set accessToken($$value = "") {
+				accessToken($$value);
+				flushSync();
+			},
+			get client() {
+				return client();
+			},
+			set client($$value = "") {
+				client($$value);
+				flushSync();
+			},
+			get uid() {
+				return uid();
+			},
+			set uid($$value = "") {
+				uid($$value);
+				flushSync();
+			}
+		};
+		var go_form = root$55();
+		set_custom_element_data(go_form, "formId", "setPassword");
+		event("submit", go_form, setNewPassword);
+		append($$anchor, go_form);
+		return pop($$exports);
+	}
+	customElements.define("go-set-password", create_custom_element(SetPassword, {
+		accessToken: {
+			attribute: "access-token",
+			type: "String"
+		},
+		client: {
+			attribute: "client",
+			type: "String"
+		},
+		uid: {
+			attribute: "uid",
+			type: "String"
+		}
+	}, [], []));
 	//#endregion
 	//#region src/components/auth/signIn/SignIn.svelte
 	function SignIn($$anchor, $$props) {
@@ -35403,11 +35521,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					"by_ticket_group_ids[]": segment.ticketGroupIds ?? tsd.ticketGroupIds
 				}));
 				shop.capacityManager.addQuotas(quotas);
-				const firstQuota = Object.values(quotas)[0];
-				const timeslot = firstQuota ? Object.keys(firstQuota.capacities)[0] : void 0;
-				const uiTickets = initUITimeslotTickets(filterAvailabletickets(tickets, timeslot), timeslot);
+				const uiTickets = initUIDayTickets(tickets);
 				await enrichTicketsWithContent(segment, uiTickets);
-				for (const ticket of uiTickets) segment.preCart.addItem(createCartItem(ticket, { time: timeslot }));
+				for (const ticket of uiTickets) segment.preCart.addItem(createCartItem(ticket, { time: ticket.selectedTime }));
 			}
 		},
 		"ticket:annual": {
@@ -35499,11 +35615,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					valid_at: tsd.selectedDate.toString()
 				}));
 				shop.capacityManager.addQuotas(quotas);
-				const firstQuota = Object.values(quotas)[0];
-				const time = firstQuota ? Object.keys(firstQuota.capacities)[0] : void 0;
-				const uiTickets = initUITimeslotTickets(filterAvailabletickets(tickets, time), time);
+				const uiTickets = initUIDayTickets(tickets);
 				await enrichTicketsWithContent(segment, uiTickets);
-				for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time }));
+				for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time: t.selectedTime }));
 			}
 		},
 		"event:admission:timeslot": {
@@ -35662,11 +35776,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						valid_at: date.start_time.slice(0, 10)
 					}));
 					shop.capacityManager.addQuotas(quotas);
-					const firstQuota = Object.values(quotas)[0];
-					const time = firstQuota ? Object.keys(firstQuota.capacities)[0] : date.start_time;
-					const uiTickets = initUITimeslotTickets(filterAvailabletickets(tickets, time), time);
+					const uiTickets = initUIDayTickets(tickets, date.start_time);
 					await enrichTicketsWithContent(segment, uiTickets);
-					for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time }));
+					for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time: t.selectedTime }));
 				}
 			}
 		},

package/dist-js/gomus-webcomponents.js

@@ -11859,6 +11859,17 @@ function createUITicket(apiTicket, options) {
 function initUITimeslotTickets(tickets, selectedTime = "") {
 	return sort(Object.values(tickets).map((ticket) => createUITicket(ticket, { selectedTime })), (f) => f.shop_order);
 }
+/**
+* Day tickets (TC-04): each day quota keys its capacity at its OWN first-entry time, so
+* capacity keys differ across quotas. The day 'time' must be derived per ticket — the
+* first positive key of the ticket's own total_capacities — never from one global quota
+* key. A ticket with capacity keys that are all zero is sold out and dropped; a ticket
+* with no keys at all (no quota) is kept and gets `fallbackTime`.
+*/
+function initUIDayTickets(tickets, fallbackTime) {
+	const ownDayTime = (t) => Object.keys(t.total_capacities ?? {}).find((key) => (t.total_capacities?.[key] ?? 0) > 0);
+	return sort(Object.values(tickets).filter((t) => ownDayTime(t) || Object.keys(t.total_capacities ?? {}).length === 0).map((t) => createUITicket(t, { selectedTime: ownDayTime(t) ?? fallbackTime })), (f) => f.shop_order);
+}
 function filterAvailabletickets(tickets, selectedTime = "") {
 	let available = Object.entries(tickets);
 	if (selectedTime !== "") available = available.filter(([, t]) => t.total_capacities?.[selectedTime] && t.total_capacities[selectedTime] > 0);
@@ -13866,6 +13877,20 @@ var Shop = class {
 			requiredFields: ["email"]
 		});
 	}
+	/**
+	* Sets a new password using the one-time credentials the backend appends to
+	* the reset-mail redirect (`access-token`, `client`, `uid` query params).
+	* Unlike `updatePassword` no `current_password` is needed — the reset link
+	* flags the session with `allow_password_change`. The 200 response carries
+	* fresh auth headers which AuthMiddleware ingests, signing the customer in.
+	*/
+	setNewPassword(params, headers) {
+		return this.apiPut("/api/v4/auth/password", {
+			body: params,
+			requiredFields: ["password", "password_confirmation"],
+			params: { header: headers }
+		});
+	}
 	activateMembership(params) {
 		return this.apiPost(MEMBERSHIP_ACTIVATION_ENDPOINT, {
 			body: params,
@@ -14246,7 +14271,7 @@ var setPersonalizationDetails = createSetDetails(KEY$5);
 var getPersonalizationDetails = createGetDetails(KEY$5);
 //#endregion
 //#region src/components/annualTicketPersonalization/components/AnnualTicketPersonalization.svelte
-var root$57 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
+var root$58 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
 var root_1$21 = /* @__PURE__ */ from_html(`<ul class="go-annual-ticket"><li class="go-annual-ticket-title"> </li> <li class="go-annual-ticket-personalization-count"> </li> <!></ul>`);
 function AnnualTicketPersonalization($$anchor, $$props) {
 	push($$props, true);
@@ -14281,7 +14306,7 @@ function AnnualTicketPersonalization($$anchor, $$props) {
 			reset(li_1);
 			var node_2 = sibling(li_1, 2);
 			var consequent = ($$anchor) => {
-				var li_2 = root$57();
+				var li_2 = root$58();
 				var a = child(li_2);
 				var text_2 = child(a, true);
 				reset(a);
@@ -14967,7 +14992,7 @@ function wrapInElement(host, tag, props) {
 }
 //#endregion
 //#region src/components/forms/ui/generic/Form.svelte
-var root$56 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
+var root$57 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
 function Form($$anchor, $$props) {
 	push($$props, true);
 	let formId = prop($$props, "formId", 7), custom = prop($$props, "custom", 7);
@@ -15013,7 +15038,7 @@ function Form($$anchor, $$props) {
 	var fragment = comment();
 	var node = first_child(fragment);
 	var consequent = ($$anchor) => {
-		var fragment_1 = root$56();
+		var fragment_1 = root$57();
 		var go_submit = sibling(sibling(first_child(fragment_1), 2), 2);
 		var text = child(go_submit, true);
 		reset(go_submit);
@@ -15040,10 +15065,10 @@ customElements.define("go-form", create_custom_element(Form, {
 }, [], ["details"]));
 //#endregion
 //#region src/components/auth/passwordReset/PasswordReset.svelte
-var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+var root$56 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
 function PasswordReset($$anchor, $$props) {
 	push($$props, true);
-	let custom = prop($$props, "custom", 7, false);
+	let custom = prop($$props, "custom", 7, false), redirectUrl = prop($$props, "redirectUrl", 7, "");
 	Forms.defineForm({
 		id: "passwordReset",
 		submitLabel: "user.passwordReset.actions.requestPasswordReset",
@@ -15054,7 +15079,11 @@ function PasswordReset($$anchor, $$props) {
 	});
 	async function passwordReset(event) {
 		const details = event.target.details;
-		const result = await shop.passwordReset(details.formData);
+		const params = details.formData;
+		const result = await shop.passwordReset(redirectUrl() ? {
+			...params,
+			redirect_url: redirectUrl()
+		} : params);
 		if (result.data) {
 			$$props.$$host.dispatchEvent(new Event("go-success", {
 				bubbles: true,
@@ -15071,16 +15100,105 @@ function PasswordReset($$anchor, $$props) {
 		set custom($$value = false) {
 			custom($$value);
 			flushSync();
+		},
+		get redirectUrl() {
+			return redirectUrl();
+		},
+		set redirectUrl($$value = "") {
+			redirectUrl($$value);
+			flushSync();
 		}
 	};
-	var go_form = root$55();
+	var go_form = root$56();
 	set_custom_element_data(go_form, "formId", "passwordReset");
 	template_effect(() => set_custom_element_data(go_form, "custom", custom()));
 	event("submit", go_form, passwordReset);
 	append($$anchor, go_form);
 	return pop($$exports);
 }
-customElements.define("go-password-reset", create_custom_element(PasswordReset, { custom: {} }, [], []));
+customElements.define("go-password-reset", create_custom_element(PasswordReset, {
+	redirectUrl: {
+		attribute: "redirect-url",
+		type: "String"
+	},
+	custom: {}
+}, [], []));
+//#endregion
+//#region src/components/auth/setPassword/SetPassword.svelte
+var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+function SetPassword($$anchor, $$props) {
+	push($$props, true);
+	let accessToken = prop($$props, "accessToken", 7, ""), client = prop($$props, "client", 7, ""), uid = prop($$props, "uid", 7, "");
+	Forms.defineForm({
+		id: "setPassword",
+		submitLabel: "user.passwordReset.actions.resetPassword",
+		fields: [{
+			key: "newPassword",
+			required: true
+		}, {
+			key: "confirmPassword",
+			required: true
+		}]
+	});
+	async function setNewPassword(event) {
+		const details = event.target.details;
+		const result = await shop.setNewPassword(details.formData, {
+			"access-token": accessToken(),
+			client: client(),
+			uid: uid()
+		});
+		if (result.data) {
+			$$props.$$host.dispatchEvent(new Event("go-success", {
+				bubbles: true,
+				composed: true
+			}));
+			details.successMessage = result.data.message;
+			details.apiErrors = [];
+		} else details.apiErrors = result.error.errors;
+	}
+	var $$exports = {
+		get accessToken() {
+			return accessToken();
+		},
+		set accessToken($$value = "") {
+			accessToken($$value);
+			flushSync();
+		},
+		get client() {
+			return client();
+		},
+		set client($$value = "") {
+			client($$value);
+			flushSync();
+		},
+		get uid() {
+			return uid();
+		},
+		set uid($$value = "") {
+			uid($$value);
+			flushSync();
+		}
+	};
+	var go_form = root$55();
+	set_custom_element_data(go_form, "formId", "setPassword");
+	event("submit", go_form, setNewPassword);
+	append($$anchor, go_form);
+	return pop($$exports);
+}
+customElements.define("go-set-password", create_custom_element(SetPassword, {
+	accessToken: {
+		attribute: "access-token",
+		type: "String"
+	},
+	client: {
+		attribute: "client",
+		type: "String"
+	},
+	uid: {
+		attribute: "uid",
+		type: "String"
+	}
+}, [], []));
 //#endregion
 //#region src/components/auth/signIn/SignIn.svelte
 function SignIn($$anchor, $$props) {
@@ -35402,11 +35520,9 @@ var REGISTRY = {
 				"by_ticket_group_ids[]": segment.ticketGroupIds ?? tsd.ticketGroupIds
 			}));
 			shop.capacityManager.addQuotas(quotas);
-			const firstQuota = Object.values(quotas)[0];
-			const timeslot = firstQuota ? Object.keys(firstQuota.capacities)[0] : void 0;
-			const uiTickets = initUITimeslotTickets(filterAvailabletickets(tickets, timeslot), timeslot);
+			const uiTickets = initUIDayTickets(tickets);
 			await enrichTicketsWithContent(segment, uiTickets);
-			for (const ticket of uiTickets) segment.preCart.addItem(createCartItem(ticket, { time: timeslot }));
+			for (const ticket of uiTickets) segment.preCart.addItem(createCartItem(ticket, { time: ticket.selectedTime }));
 		}
 	},
 	"ticket:annual": {
@@ -35498,11 +35614,9 @@ var REGISTRY = {
 				valid_at: tsd.selectedDate.toString()
 			}));
 			shop.capacityManager.addQuotas(quotas);
-			const firstQuota = Object.values(quotas)[0];
-			const time = firstQuota ? Object.keys(firstQuota.capacities)[0] : void 0;
-			const uiTickets = initUITimeslotTickets(filterAvailabletickets(tickets, time), time);
+			const uiTickets = initUIDayTickets(tickets);
 			await enrichTicketsWithContent(segment, uiTickets);
-			for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time }));
+			for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time: t.selectedTime }));
 		}
 	},
 	"event:admission:timeslot": {
@@ -35661,11 +35775,9 @@ var REGISTRY = {
 					valid_at: date.start_time.slice(0, 10)
 				}));
 				shop.capacityManager.addQuotas(quotas);
-				const firstQuota = Object.values(quotas)[0];
-				const time = firstQuota ? Object.keys(firstQuota.capacities)[0] : date.start_time;
-				const uiTickets = initUITimeslotTickets(filterAvailabletickets(tickets, time), time);
+				const uiTickets = initUIDayTickets(tickets, date.start_time);
 				await enrichTicketsWithContent(segment, uiTickets);
-				for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time }));
+				for (const t of uiTickets) segment.preCart.addItem(createCartItem(t, { time: t.selectedTime }));
 			}
 		}
 	},