@gusnips/react 0.9.24 → 0.9.26

package/dist/error-boundary.d.ts

@@ -2,27 +2,27 @@ import { Component, type ErrorInfo, type ReactNode } from "react";
 /**
  * The last stop before a white screen.
  *
- * React unmounts the whole tree when a render throws, and an app with no boundary anywhere
- * answers that with a blank page: no words, no navigation, no reload — the most complete dead
- * end a product can produce, and the one the never-dead-end rule cannot reach, because by then
- * there is no component left to render a state from.
+ * React unmounts the whole tree when a render throws, and an app with no boundary anywhere answers
+ * that with a blank page: no words, no navigation, no reload. That is the most complete dead end a
+ * product can produce, and the one the never-dead-end rule cannot reach, because by then there is
+ * no component left to render a state from.
  *
  * It is deliberately dumb. No retry loop, no error reporting, no reset on a timer: it catches,
  * it hands the error to a `fallback` the app draws in its own words, and it offers `reset`.
  * Every donor that baked its own UI in here had to keep a second copy for its second surface;
  * a render prop has no such problem, and the brand stays in the product where it belongs.
  *
- * A class, because `getDerivedStateFromError` has no hook equivalent — this is the one thing in
- * the kit React still has no other way to express.
+ * A class, because `getDerivedStateFromError` has no hook equivalent. This is the one thing in the
+ * kit React still has no other way to express.
  */
 export interface ErrorBoundaryFallbackProps {
     error: Error;
     /** Put the children back. */
     reset: () => void;
     /**
-     * True when the throw was a failed lazy-chunk import — a deploy landed while this tab was
-     * open, so the fix is a reload and NOT a retry (a rejected dynamic import rethrows on
-     * re-render forever). Draw the "updating" screen, not the crash screen.
+     * True when the throw was a failed lazy-chunk import because a deploy landed while this tab was
+     * open, so the fix is a reload and NOT a retry (a rejected dynamic import rethrows on re-render
+     * forever). Draw the "updating" screen, not the crash screen.
      */
     isChunkError: boolean;
 }
@@ -30,9 +30,9 @@ export interface ErrorBoundaryProps {
     /** Drawn instead of the children once something has thrown. */
     fallback: (props: ErrorBoundaryFallbackProps) => ReactNode;
     /**
-     * Changing this value clears the error and remounts the children — pass the route, so
-     * navigating away from a screen that broke actually leaves it rather than carrying its
-     * wreckage to every page after it.
+     * Changing this value clears the error and remounts the children. Pass the route, so navigating
+     * away from a screen that broke actually leaves it rather than carrying its wreckage to every
+     * page after it.
      */
     resetKey?: string;
     /** Called once per catch. Report to whatever the app reports to. */

package/dist/guards.d.ts

@@ -2,9 +2,9 @@ import type { ReactNode } from "react";
 /**
  * Route guards.
  *
- * Two donors wrote these four, gave two of them the same names, and explained them in nearly
- * the same words. What differed was one line — and that line is invariant 4, so it is the
- * reason this file exists rather than being copied a ninth time.
+ * Two donors wrote these four, gave two of them the same names, and explained them in nearly the
+ * same words. What differed was one line. That line is invariant 4, so it is the reason this file
+ * exists rather than being copied a ninth time.
  *
  * These are factories because the destinations are the app's: `paths.signIn` is not something a
  * package can know, and one donor hardcoded `/login` in four places for exactly that reason.
@@ -21,18 +21,18 @@ export interface SessionState {
 /**
  * The answer to a "who is this?" query, in the three states it actually has.
  *
- * This shape is invariant 4. A guard reading `!me?.isStaff` collapses "pending", "failed" and
- * "no" into one branch — so an operator arriving while `/auth/me` is 500ing is told the page
- * does not exist. Wrong cause, no retry, and no request id to quote to support. One donor hit
- * that and fixed it; the other still has the collapsed version.
+ * This shape is invariant 4. A guard reading `!me?.isStaff` collapses "pending", "failed" and "no"
+ * into one branch, so an operator arriving while `/auth/me` is 500ing is told the page does not
+ * exist. Wrong cause, no retry, and no request id to quote to support. One donor hit that and fixed
+ * it; the other still has the collapsed version.
  *
  * `"pending"` and not `"loading"` for one measured reason: it is react-query's own word for this
  * state since v5, and with the words matching a `UseQueryResult<TMe>` satisfies this type
- * STRUCTURALLY — `createRequireProfile(useMe, …)` takes the hook directly, no adapter. With
- * `"loading"` it does not typecheck and every adopter hand-writes the same six-line mapping;
- * eight of the twelve repos this serves are on react-query, and the first migration wrote that
- * mapping before anyone noticed. Nothing here imports react-query at runtime — the type stays
- * structural, so an app on SWR or a plain `useState` still answers it in three lines.
+ * STRUCTURALLY: `createRequireProfile(useMe, …)` takes the hook directly, no adapter. With
+ * `"loading"` it does not typecheck and every adopter hand-writes the same six-line mapping; eight
+ * of the twelve repos this serves are on react-query, and the first migration wrote that mapping
+ * before anyone noticed. Nothing here imports react-query at runtime. The type stays structural, so
+ * an app on SWR or a plain `useState` still answers it in three lines.
  */
 export type MeQuery<TMe> = {
     status: "pending";
@@ -50,8 +50,8 @@ export interface GuardOptions {
 /** Query parameter carrying the route a sign-in interrupted. */
 export declare const AUTH_RETURN_PARAM = "next";
 /**
- * Signed in, or off to sign in — remembering where they were headed, so the redirect afterwards
- * lands on the page they actually wanted rather than the home screen.
+ * Require sign-in and remember where they were headed, so the redirect afterwards lands on the page
+ * they actually wanted rather than the home screen.
  */
 export declare function createRequireAuth(useSession: () => SessionState, signInPath: string, { loading }: GuardOptions): ({ children }: {
     children: ReactNode;
@@ -61,7 +61,7 @@ export declare function createRequireAnonymous(useSession: () => SessionState, h
     children: ReactNode;
 }) => import("react").JSX.Element;
 /**
- * A gate on something the profile says — suspended, staff, on a given plan.
+ * A gate on a profile field, such as whether the person is suspended, staff or on a given plan.
  *
  * `allow` gets the profile and answers yes or no. `onDenied` draws the refusal; `onError` draws
  * the failure, and they are SEPARATE arguments on purpose. That separation is the whole point

package/dist/guards.js

@@ -8,8 +8,8 @@ function signInUrl(signInPath, returnTo) {
     return `${signInPath}${separator}${AUTH_RETURN_PARAM}=${encodeURIComponent(returnTo)}`;
 }
 /**
- * Signed in, or off to sign in — remembering where they were headed, so the redirect afterwards
- * lands on the page they actually wanted rather than the home screen.
+ * Require sign-in and remember where they were headed, so the redirect afterwards lands on the page
+ * they actually wanted rather than the home screen.
  */
 export function createRequireAuth(useSession, signInPath, { loading }) {
     return function RequireAuth({ children }) {
@@ -46,7 +46,7 @@ export function createRequireAnonymous(useSession, homePath, { loading }) {
     };
 }
 /**
- * A gate on something the profile says — suspended, staff, on a given plan.
+ * A gate on a profile field, such as whether the person is suspended, staff or on a given plan.
  *
  * `allow` gets the profile and answers yes or no. `onDenied` draws the refusal; `onError` draws
  * the failure, and they are SEPARATE arguments on purpose. That separation is the whole point

package/dist/hydrate.d.ts

@@ -1,18 +1,17 @@
 /**
  * The browser half of prerendering: deciding whether to hydrate or to mount fresh.
  *
- * Three separate repos invented all of this independently — same constant name, same string
- * value, same decision, and near-identical explaining comments. That is not a coincidence worth
- * deduping; it is one lesson learned three times, and it belongs somewhere it can be learned
- * once.
+ * Three separate repos invented all of this independently, with the same constant name, string
+ * value and decision, and near-identical explaining comments. That is not a coincidence worth
+ * deduping; it is one lesson learned three times, and it belongs somewhere it can be learned once.
  *
  * The constants themselves live in `prerender-contract.ts`, which imports nothing, because the
  * BUILD needs them too and must not pull `react-dom/client` into a Node process to get a string.
  *
  * This module sits behind `@gusnips/react/hydrate` rather than in the barrel for the same reason
- * one rung further out: it is the package's ONLY `react-dom` import, and a React Native app has
- * no react-dom to give. Leaving it in the barrel made `react-dom` a required peer and shut the
- * whole package out of every phone — for one function a phone would never call.
+ * one rung further out: it is the package's ONLY `react-dom` import, and a React Native app has no
+ * react-dom to give. Leaving it in the barrel made `react-dom` a required peer and shut the whole
+ * package out of every phone for one function a phone would never call.
  */
 import type { ReactNode } from "react";
 export { PRERENDERED_ROUTE_ATTR, SHELL_ROUTE } from "./prerender-contract.ts";
@@ -20,16 +19,16 @@ export { PRERENDERED_ROUTE_ATTR, SHELL_ROUTE } from "./prerender-contract.ts";
  * Hydrate the render this file IS, and mount fresh over anything else.
  *
  * "Does the root have children" is the wrong question, and getting it wrong is silent. A static
- * host answers every address it does not publish with the nearest `404.html` — and that file has
- * the not-found page rendered INTO it — so an address served from a shell arrives at a full root
- * holding somebody else's markup. Hydrating that is React reconciling two different pages: it
- * recovers by throwing the whole tree away and says so in the console, which is a page that
- * works and a bug nobody sees. The file names the route it is a render of, so we can simply ask.
+ * host answers every address it does not publish with the nearest `404.html`, which has the
+ * not-found page rendered INTO it. An address served from a shell arrives at a full root holding
+ * somebody else's markup. Hydrating that is React reconciling two different pages: it recovers by
+ * throwing the whole tree away and says so in the console, which is a page that works and a bug
+ * nobody sees. The file names the route it is a render of, so we can simply ask.
  *
- * `route` is passed in rather than read from `window.location` on purpose. A localized app
- * serves `/pt/pricing` from a file rendered for `/pricing`, with the locale carried in the
- * router's `basename` — so the address and the route are different strings, and only the caller
- * knows which one the build wrote.
+ * `route` is passed in rather than read from `window.location` on purpose. A localized app serves
+ * `/pt/pricing` from a file rendered for `/pricing`, with the locale carried in the router's
+ * `basename`, so the address and the route are different strings, and only the caller knows which
+ * one the build wrote.
  *
  * **A trailing slash is not a different page.** The router renders `/precos/` and `/precos` alike,
  * and which one is in the address bar is the host's call: a host serving `precos/index.html`

package/dist/hydrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hydrate.d.ts","sourceRoot":"","sources":["../src/hydrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIvC,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAI3F"}
+{"version":3,"file":"hydrate.d.ts","sourceRoot":"","sources":["../src/hydrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIvC,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAI3F"}

package/dist/hydrate.js

@@ -5,16 +5,16 @@ export { PRERENDERED_ROUTE_ATTR, SHELL_ROUTE } from "./prerender-contract.js";
  * Hydrate the render this file IS, and mount fresh over anything else.
  *
  * "Does the root have children" is the wrong question, and getting it wrong is silent. A static
- * host answers every address it does not publish with the nearest `404.html` — and that file has
- * the not-found page rendered INTO it — so an address served from a shell arrives at a full root
- * holding somebody else's markup. Hydrating that is React reconciling two different pages: it
- * recovers by throwing the whole tree away and says so in the console, which is a page that
- * works and a bug nobody sees. The file names the route it is a render of, so we can simply ask.
+ * host answers every address it does not publish with the nearest `404.html`, which has the
+ * not-found page rendered INTO it. An address served from a shell arrives at a full root holding
+ * somebody else's markup. Hydrating that is React reconciling two different pages: it recovers by
+ * throwing the whole tree away and says so in the console, which is a page that works and a bug
+ * nobody sees. The file names the route it is a render of, so we can simply ask.
  *
- * `route` is passed in rather than read from `window.location` on purpose. A localized app
- * serves `/pt/pricing` from a file rendered for `/pricing`, with the locale carried in the
- * router's `basename` — so the address and the route are different strings, and only the caller
- * knows which one the build wrote.
+ * `route` is passed in rather than read from `window.location` on purpose. A localized app serves
+ * `/pt/pricing` from a file rendered for `/pricing`, with the locale carried in the router's
+ * `basename`, so the address and the route are different strings, and only the caller knows which
+ * one the build wrote.
  *
  * **A trailing slash is not a different page.** The router renders `/precos/` and `/precos` alike,
  * and which one is in the address bar is the host's call: a host serving `precos/index.html`

package/dist/hydrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"hydrate.js","sourceRoot":"","sources":["../src/hydrate.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,IAAe,EAAE,KAAoB;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;;QAC3F,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,4DAA4D;AAC5D,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"hydrate.js","sourceRoot":"","sources":["../src/hydrate.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,IAAe,EAAE,KAAoB;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;;QAC3F,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,4DAA4D;AAC5D,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/i18n.d.ts

@@ -8,8 +8,7 @@
  * ```
  *
  * Keeping the options here is what stops a console, a storefront and a docs site in the same
- * product from drifting apart on the details below — each of which is a bug somebody already
- * shipped.
+ * product from drifting apart on the details below. Each is a bug somebody already shipped.
  */
 export interface I18nInitOptions {
     /** The language everything falls back to. */
@@ -27,10 +26,10 @@ export interface I18nInitOptions {
     /**
      * The query parameter that hands a language ACROSS an origin, e.g. `"lang"`.
      *
-     * When set it is detected FIRST, ahead of storage and the browser — it is the only one of the
+     * When set it is detected FIRST, ahead of storage and the browser. It is the only one of the
      * three that somebody chose on purpose and just now. A reader who picked Português on the
-     * storefront and followed a link into the app means it more than their laptop's locale does.
-     * It is cached on arrival, so it decides once and no URL inside the app has to carry it.
+     * storefront and followed a link into the app means it more than their laptop's locale does. It
+     * is cached on arrival, so it decides once and no URL inside the app has to carry it.
      *
      * Only one donor had this. The other has the same split-origin layout and the same problem.
      */
@@ -38,15 +37,15 @@ export interface I18nInitOptions {
     /**
      * Who WRITES {@link storageKey}. The detector, by default.
      *
-     * Pass `"app"` when your own language control writes it. That is not a preference — it is what
-     * a "follow the browser" option costs. Going back to following the browser means clearing the
-     * key and calling `changeLanguage(undefined)`, which re-runs detection; a detector that caches
-     * then writes the language it just detected straight back into the key it was told to clear.
-     * The choice re-pins itself and nothing can reach that state again.
+     * Pass `"app"` when your own language control writes it. A "follow the browser" option needs
+     * this. Going back to following the browser means clearing the key and calling
+     * `changeLanguage(undefined)`, which re-runs detection; a detector that caches then writes the
+     * language it just detected straight back into the key it was told to clear. The choice re-pins
+     * itself and nothing can reach that state again.
      *
      * Three repos on this stack, three answers: one lets the detector write, one writes it from its
-     * own control, and one does both — harmless there only because it offers no "follow the
-     * browser" state. So the rule, rather than the default: one writer per key.
+     * own control, and one does both. Doing both is harmless there only because it offers no "follow
+     * the browser" state. So the rule, rather than the default: one writer per key.
      */
     storageWriter?: "detector" | "app";
 }
@@ -73,13 +72,13 @@ export declare function i18nInitOptions({ fallbackLng, supportedLngs, storageKey
  * i18next ever sees it.
  *
  * Done here rather than through interpolation because i18next v26 has no global interpolation
- * defaults, and these strings are often resolved by dynamic key — so a wrapping `t()` would not
+ * defaults, and these strings are often resolved by dynamic key, so a wrapping `t()` would not
  * reach them. The point is that a rename or a domain move is ONE edit in the brand constants
  * instead of a sweep across every locale file.
  *
- * Returns a fresh tree; the input is untouched. The placeholder names come from `vars`, so
- * adding one needs no change here — two donors hardcoded their own list in the regex and both
- * had to remember to update it.
+ * Returns a fresh tree; the input is untouched. The placeholder names come from `vars`, so adding
+ * one needs no change here. Two donors hardcoded their own list in the regex and both had to
+ * remember to update it.
  */
 export declare function applyBrandVars<T>(resources: T, vars: Record<string, string>): T;
 //# sourceMappingURL=i18n.d.ts.map

package/dist/i18n.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;CACpC;AAED,wBAAgB,eAAe,CAAC,EAC9B,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,aAA0B,GAC3B,EAAE,eAAe;;;;;;;;;uCAOK,MAAM,KAAG,MAAM;;;;;;;;EAkCrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAmB/E"}
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;CACpC;AAED,wBAAgB,eAAe,CAAC,EAC9B,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,aAA0B,GAC3B,EAAE,eAAe;;;;;;;;;uCAOK,MAAM,KAAG,MAAM;;;;;;;;EAkCrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAmB/E"}

package/dist/i18n.js

@@ -8,8 +8,7 @@
  * ```
  *
  * Keeping the options here is what stops a console, a storefront and a docs site in the same
- * product from drifting apart on the details below — each of which is a bug somebody already
- * shipped.
+ * product from drifting apart on the details below. Each is a bug somebody already shipped.
  */
 export function i18nInitOptions({ fallbackLng, supportedLngs, storageKey, queryKey, storageWriter = "detector", }) {
     // i18next picks the first EXACT match anywhere in the detected list before it tries a base
@@ -55,13 +54,13 @@ export function i18nInitOptions({ fallbackLng, supportedLngs, storageKey, queryK
  * i18next ever sees it.
  *
  * Done here rather than through interpolation because i18next v26 has no global interpolation
- * defaults, and these strings are often resolved by dynamic key — so a wrapping `t()` would not
+ * defaults, and these strings are often resolved by dynamic key, so a wrapping `t()` would not
  * reach them. The point is that a rename or a domain move is ONE edit in the brand constants
  * instead of a sweep across every locale file.
  *
- * Returns a fresh tree; the input is untouched. The placeholder names come from `vars`, so
- * adding one needs no change here — two donors hardcoded their own list in the regex and both
- * had to remember to update it.
+ * Returns a fresh tree; the input is untouched. The placeholder names come from `vars`, so adding
+ * one needs no change here. Two donors hardcoded their own list in the regex and both had to
+ * remember to update it.
  */
 export function applyBrandVars(resources, vars) {
     const names = Object.keys(vars);

package/dist/i18n.js.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA0CH,MAAM,UAAU,eAAe,CAAC,EAC9B,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,aAAa,GAAG,UAAU,GACV;IAChB,2FAA2F;IAC3F,+FAA+F;IAC/F,iGAAiG;IACjG,gGAAgG;IAChG,iGAAiG;IACjG,+CAA+C;IAC/C,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CACL,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;YACxD,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC;YACtE,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,WAAW;QACX,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;QACjC,IAAI,EAAE,aAAsB;QAC5B,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,yBAAyB;QAChE,SAAS,EAAE;YACT,KAAK,EAAE,QAAQ;gBACb,CAAC,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC;gBAC9C,CAAC,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC;YACjC,8EAA8E;YAC9E,MAAM,EAAE,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,kBAAkB,EAAE,UAAU;YAC9B,uBAAuB,EAAE,MAAM;SAChC;QACD,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;QAC7B,gGAAgG;QAChG,4FAA4F;QAC5F,4FAA4F;QAC5F,sFAAsF;QACtF,wFAAwF;QACxF,2FAA2F;QAC3F,8FAA8F;KAC/F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAI,SAAY,EAAE,IAA4B;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EACvF,GAAG,CACJ,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAE9F,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YACpC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAM,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA0CH,MAAM,UAAU,eAAe,CAAC,EAC9B,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,aAAa,GAAG,UAAU,GACV;IAChB,2FAA2F;IAC3F,+FAA+F;IAC/F,iGAAiG;IACjG,gGAAgG;IAChG,iGAAiG;IACjG,+CAA+C;IAC/C,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CACL,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;YACxD,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC;YACtE,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,WAAW;QACX,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;QACjC,IAAI,EAAE,aAAsB;QAC5B,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,yBAAyB;QAChE,SAAS,EAAE;YACT,KAAK,EAAE,QAAQ;gBACb,CAAC,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC;gBAC9C,CAAC,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC;YACjC,8EAA8E;YAC9E,MAAM,EAAE,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,kBAAkB,EAAE,UAAU;YAC9B,uBAAuB,EAAE,MAAM;SAChC;QACD,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;QAC7B,gGAAgG;QAChG,4FAA4F;QAC5F,4FAA4F;QAC5F,sFAAsF;QACtF,wFAAwF;QACxF,2FAA2F;QAC3F,8FAA8F;KAC/F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAI,SAAY,EAAE,IAA4B;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EACvF,GAAG,CACJ,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAE9F,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YACpC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAM,CAAC;AAC9B,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export { cn } from "./cn.ts";
 export { copyText, useCopy, type CopyOptions, type CopyState } from "./copy.ts";
 export { returnPathFromLocation, safeInternalPath, type PathParts } from "./internal-path.ts";
+export { forgetAuthEmail, recallAuthEmail, rememberAuthEmail } from "./auth-email.ts";
 export { ApiError, isAbortError } from "./api-error.ts";
 export { retryAfterSecs } from "@gusnips/http/retry";
 export { createApiClient, type ApiClient, type ApiClientOptions, type RefreshResult, type RequestOptions, type SessionAdapter, } from "./api-client.ts";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzE,OAAO,EACL,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,SAAS,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EACb,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,UAAU,GACX,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAElF,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzE,OAAO,EACL,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,SAAS,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EACb,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,UAAU,GACX,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAElF,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -32,6 +32,7 @@
 export { cn } from "./cn.js";
 export { copyText, useCopy } from "./copy.js";
 export { returnPathFromLocation, safeInternalPath } from "./internal-path.js";
+export { forgetAuthEmail, recallAuthEmail, rememberAuthEmail } from "./auth-email.js";
 export { ApiError, isAbortError } from "./api-error.js";
 export { retryAfterSecs } from "@gusnips/http/retry";
 export { createApiClient, } from "./api-client.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,2CAA2C;AAC3C,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,+FAA+F;AAC/F,iGAAiG;AACjG,0BAA0B;AAC1B,EAAE;AACF,qEAAqE;AACrE,8DAA8D;AAC9D,uEAAuE;AACvE,gEAAgE;AAChE,4EAA4E;AAC5E,4FAA4F;AAC5F,8FAA8F;AAC9F,EAAE;AACF,2FAA2F;AAC3F,iGAAiG;AACjG,+FAA+F;AAC/F,gGAAgG;AAChG,4EAA4E;AAC5E,EAAE;AACF,2FAA2F;AAC3F,iGAAiG;AACjG,qFAAqF;AACrF,6FAA6F;AAC7F,iGAAiG;AACjG,yFAAyF;AACzF,uBAAuB;AAEvB,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAoC,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAkB,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,eAAe,GAMhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAiB,MAAM,UAAU,CAAC;AAEzE,OAAO,EACL,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,GAGZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,GAGd,MAAM,qBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,YAAY,GASb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,UAAU,GACX,MAAM,sBAAsB,CAAC;AAE9B,iGAAiG;AACjG,kGAAkG;AAClG,6FAA6F;AAC7F,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAwB,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,2CAA2C;AAC3C,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,+FAA+F;AAC/F,iGAAiG;AACjG,0BAA0B;AAC1B,EAAE;AACF,qEAAqE;AACrE,8DAA8D;AAC9D,uEAAuE;AACvE,gEAAgE;AAChE,4EAA4E;AAC5E,4FAA4F;AAC5F,8FAA8F;AAC9F,EAAE;AACF,2FAA2F;AAC3F,iGAAiG;AACjG,+FAA+F;AAC/F,gGAAgG;AAChG,4EAA4E;AAC5E,EAAE;AACF,2FAA2F;AAC3F,iGAAiG;AACjG,qFAAqF;AACrF,6FAA6F;AAC7F,iGAAiG;AACjG,yFAAyF;AACzF,uBAAuB;AAEvB,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAoC,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAkB,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,eAAe,GAMhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAiB,MAAM,UAAU,CAAC;AAEzE,OAAO,EACL,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,GAGZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,GAGd,MAAM,qBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,YAAY,GASb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,UAAU,GACX,MAAM,sBAAsB,CAAC;AAE9B,iGAAiG;AACjG,kGAAkG;AAClG,6FAA6F;AAC7F,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAwB,MAAM,WAAW,CAAC"}

package/dist/internal-path.d.ts

@@ -2,9 +2,9 @@
  * A route the browser can follow without leaving the current origin.
  *
  * Return targets cross a trust boundary: query strings, history state and storage are all writable
- * by somebody outside the app. `startsWith("/")` is not enough — URL parsers read both `//host`
- * and `/\\host` as another origin, and strip tabs or newlines before making the same decision.
- * Parsing against a fixed origin applies the browser's own rules rather than trying to copy them.
+ * by somebody outside the app. `startsWith("/")` is not enough: URL parsers read both `//host` and
+ * `/\\host` as another origin, and strip tabs or newlines before making the same decision. Parsing
+ * against a fixed origin applies the browser's own rules rather than trying to copy them.
  */
 export declare function safeInternalPath(value: unknown): string | null;
 /** Anything shaped like the current page: `window.location` and react-router's `useLocation()`. */
@@ -18,14 +18,15 @@ export interface PathParts {
  *
  * The fragment is the half that is easy to get wrong, and getting it wrong leaks a credential. A
  * Supabase client with no `flowType` uses the IMPLICIT flow, which returns the session in the
- * fragment — `#access_token=…&refresh_token=…`. A return target is recorded in a query string, and
- * a query string is not a fragment: it rides in `Referer`, it is written to every access log on the
+ * fragment, `#access_token=…&refresh_token=…`. A return target is recorded in a query string, and a
+ * query string is not a fragment: it rides in `Referer`, it is written to every access log on the
  * way, and it stays in history. So a fragment carrying a credential is dropped and the page is
  * kept, because the page is the part worth returning to and the anchor is the part that is
  * dangerous.
  *
- * Total on purpose — the caller is handing over its OWN address, which is on this origin by
- * construction. Use `safeInternalPath` for the other direction, where someone else wrote the value.
+ * Accepts every caller address on purpose. The caller is handing over its OWN address, which is on
+ * this origin by construction. Use `safeInternalPath` for the other direction, where someone else
+ * wrote the value.
  */
 export declare function returnPathFromLocation({ pathname, search, hash }: PathParts): string;
 //# sourceMappingURL=internal-path.d.ts.map

package/dist/internal-path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal-path.d.ts","sourceRoot":"","sources":["../src/internal-path.ts"],"names":[],"mappings":"AAUA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAU9D;AAiBD,mGAAmG;AACnG,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,GAAG,MAAM,CAKpF"}
+{"version":3,"file":"internal-path.d.ts","sourceRoot":"","sources":["../src/internal-path.ts"],"names":[],"mappings":"AAUA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAU9D;AAiBD,mGAAmG;AACnG,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,GAAG,MAAM,CAKpF"}

package/dist/internal-path.js

@@ -11,9 +11,9 @@ function containsControl(value) {
  * A route the browser can follow without leaving the current origin.
  *
  * Return targets cross a trust boundary: query strings, history state and storage are all writable
- * by somebody outside the app. `startsWith("/")` is not enough — URL parsers read both `//host`
- * and `/\\host` as another origin, and strip tabs or newlines before making the same decision.
- * Parsing against a fixed origin applies the browser's own rules rather than trying to copy them.
+ * by somebody outside the app. `startsWith("/")` is not enough: URL parsers read both `//host` and
+ * `/\\host` as another origin, and strip tabs or newlines before making the same decision. Parsing
+ * against a fixed origin applies the browser's own rules rather than trying to copy them.
  */
 export function safeInternalPath(value) {
     if (typeof value !== "string" || !value.startsWith("/") || containsControl(value))
@@ -47,14 +47,15 @@ const CREDENTIAL_FRAGMENT_KEYS = [
  *
  * The fragment is the half that is easy to get wrong, and getting it wrong leaks a credential. A
  * Supabase client with no `flowType` uses the IMPLICIT flow, which returns the session in the
- * fragment — `#access_token=…&refresh_token=…`. A return target is recorded in a query string, and
- * a query string is not a fragment: it rides in `Referer`, it is written to every access log on the
+ * fragment, `#access_token=…&refresh_token=…`. A return target is recorded in a query string, and a
+ * query string is not a fragment: it rides in `Referer`, it is written to every access log on the
  * way, and it stays in history. So a fragment carrying a credential is dropped and the page is
  * kept, because the page is the part worth returning to and the anchor is the part that is
  * dangerous.
  *
- * Total on purpose — the caller is handing over its OWN address, which is on this origin by
- * construction. Use `safeInternalPath` for the other direction, where someone else wrote the value.
+ * Accepts every caller address on purpose. The caller is handing over its OWN address, which is on
+ * this origin by construction. Use `safeInternalPath` for the other direction, where someone else
+ * wrote the value.
  */
 export function returnPathFromLocation({ pathname, search, hash }) {
     const fragment = hash.startsWith("#") ? hash.slice(1) : hash;

package/dist/internal-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"internal-path.js","sourceRoot":"","sources":["../src/internal-path.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,SAAS,eAAe,CAAC,KAAa;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG;IAC/B,cAAc;IACd,eAAe;IACf,UAAU;IACV,gBAAgB;IAChB,wBAAwB;IACxB,YAAY;CACb,CAAC;AASF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAa;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC"}
+{"version":3,"file":"internal-path.js","sourceRoot":"","sources":["../src/internal-path.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,SAAS,eAAe,CAAC,KAAa;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG;IAC/B,cAAc;IACd,eAAe;IACf,UAAU;IACV,gBAAgB;IAChB,wBAAwB;IACxB,YAAY;CACb,CAAC;AASF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAa;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC"}

package/dist/prerender-contract.d.ts

@@ -1,5 +1,5 @@
 /**
- * The two constants the build and the browser both need — and **nothing else in this file**.
+ * The two constants the build and the browser both need. Keep **nothing else in this file**.
  *
  * It is separate from `hydrate.ts` for one reason: that module imports `react-dom/client`, and
  * `@gusnips/vite` needs these constants to WRITE the attribute at build time. If the constants
@@ -11,8 +11,8 @@
  * string value each time. See `hydrate.ts` for why it exists at all.
  */
 /**
- * The attribute a prerendered file names its own route in — written by the build, read by the
- * browser entry.
+ * The attribute where a prerendered file names its own route. The build writes it and the browser
+ * entry reads it.
  *
  * One constant because the writer and the reader are in different builds, and a typo between
  * them would show up only as a silent full re-render: a page that works, and a bug nobody sees.
@@ -21,10 +21,10 @@ export declare const PRERENDERED_ROUTE_ATTR = "data-prerendered-route";
 /**
  * What a 404 shell writes instead of a route.
  *
- * It is the pattern that actually matched — the catch-all — and it can never equal an address,
- * which is the property that matters: every route a static host answers from the shell mounts
- * fresh rather than hydrating the not-found page over itself. A real 404 pays one redundant
- * client render for that, and keeps the markup a crawler reads.
+ * It is the catch-all pattern that actually matched, and it can never equal an address, which is
+ * the property that matters: every route a static host answers from the shell mounts fresh rather
+ * than hydrating the not-found page over itself. A real 404 pays one redundant client render for
+ * that, and keeps the markup a crawler reads.
  */
 export declare const SHELL_ROUTE = "*";
 //# sourceMappingURL=prerender-contract.d.ts.map

package/dist/prerender-contract.js

@@ -1,5 +1,5 @@
 /**
- * The two constants the build and the browser both need — and **nothing else in this file**.
+ * The two constants the build and the browser both need. Keep **nothing else in this file**.
  *
  * It is separate from `hydrate.ts` for one reason: that module imports `react-dom/client`, and
  * `@gusnips/vite` needs these constants to WRITE the attribute at build time. If the constants
@@ -11,8 +11,8 @@
  * string value each time. See `hydrate.ts` for why it exists at all.
  */
 /**
- * The attribute a prerendered file names its own route in — written by the build, read by the
- * browser entry.
+ * The attribute where a prerendered file names its own route. The build writes it and the browser
+ * entry reads it.
  *
  * One constant because the writer and the reader are in different builds, and a typo between
  * them would show up only as a silent full re-render: a page that works, and a bug nobody sees.
@@ -21,10 +21,10 @@ export const PRERENDERED_ROUTE_ATTR = "data-prerendered-route";
 /**
  * What a 404 shell writes instead of a route.
  *
- * It is the pattern that actually matched — the catch-all — and it can never equal an address,
- * which is the property that matters: every route a static host answers from the shell mounts
- * fresh rather than hydrating the not-found page over itself. A real 404 pays one redundant
- * client render for that, and keeps the markup a crawler reads.
+ * It is the catch-all pattern that actually matched, and it can never equal an address, which is
+ * the property that matters: every route a static host answers from the shell mounts fresh rather
+ * than hydrating the not-found page over itself. A real 404 pays one redundant client render for
+ * that, and keeps the markup a crawler reads.
  */
 export const SHELL_ROUTE = "*";
 //# sourceMappingURL=prerender-contract.js.map