@hanzo/ui 5.6.1 → 5.7.1

package/dist/src/auth/IAMLoginButton.js

@@ -1,27 +1,22 @@
 'use client';
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx } from "react/jsx-runtime";
 import { useCallback, useState } from 'react';
+import { cn } from '../utils';
+import { startIamLogin } from './iam';
 /**
- * "Sign in with Hanzo" button that initiates IAM OAuth flow.
- * Zero-dependency — works in any React app.
+ * Single "Sign in" button that initiates the canonical IAM authorization-code +
+ * PKCE-S256 flow (HIP-0111). Brand-neutral — colors come from CSS tokens
+ * (`bg-primary`, `border-input`, `bg-background`), never literals.
  */
-export function IAMLoginButton({ iamUrl = 'https://hanzo.id', clientId, redirectUri, label = 'Sign in with Hanzo', className = '', variant = 'default', }) {
+export function IAMLoginButton({ iamUrl = 'https://hanzo.id', clientId, redirectUri, provider, label = 'Sign in', className, variant = 'default', }) {
     const [loading, setLoading] = useState(false);
     const handleClick = useCallback(() => {
         setLoading(true);
-        const redirect = redirectUri || `${window.location.origin}/auth/callback`;
-        const state = crypto.randomUUID();
-        const url = new URL(`${iamUrl}/login/oauth/authorize`);
-        url.searchParams.set('client_id', clientId);
-        url.searchParams.set('response_type', 'code');
-        url.searchParams.set('redirect_uri', redirect);
-        url.searchParams.set('scope', 'openid profile email');
-        url.searchParams.set('state', state);
-        window.location.href = url.toString();
-    }, [iamUrl, clientId, redirectUri]);
-    const baseStyles = 'inline-flex items-center justify-center gap-2 rounded-md px-4 py-2.5 text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-offset-2 disabled:pointer-events-none disabled:opacity-50';
-    const variantStyles = variant === 'outline'
-        ? 'border border-[#333] bg-transparent text-white hover:bg-[#1a1a1f]'
-        : 'bg-white text-black hover:bg-[#e5e5e5]';
-    return (_jsxs("button", { type: "button", className: `${baseStyles} ${variantStyles} ${className}`, onClick: handleClick, disabled: loading, children: [_jsx("svg", { width: "16", height: "16", viewBox: "0 0 32 32", xmlns: "http://www.w3.org/2000/svg", children: _jsx("text", { x: "4", y: "26", fontFamily: "-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif", fontSize: "28", fontWeight: "700", fill: "currentColor", children: "H" }) }), loading ? 'Redirecting...' : label] }));
+        void startIamLogin({ serverUrl: iamUrl, clientId, redirectUri, provider }).catch(() => {
+            setLoading(false);
+        });
+    }, [iamUrl, clientId, redirectUri, provider]);
+    return (_jsx("button", { type: "button", className: cn('inline-flex items-center justify-center gap-2 rounded-md px-4 py-2.5 text-sm font-medium transition-colors', 'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2', 'disabled:pointer-events-none disabled:opacity-50', variant === 'outline'
+            ? 'border border-input bg-background text-foreground hover:bg-accent hover:text-accent-foreground'
+            : 'bg-primary text-primary-foreground hover:bg-primary/90', className), onClick: handleClick, disabled: loading, children: loading ? 'Redirecting…' : label }));
 }

package/dist/src/auth/PasswordForm.d.ts

@@ -0,0 +1,22 @@
+import type { PasswordSubmit } from './types';
+export interface PasswordFormProps {
+    /**
+     * Submit handler. The canonical implementation is the `@hanzo/iam` SDK's
+     * `loginWithPassword` (embedded credential → PKCE-bound code). Kept injected
+     * so `@hanzo/ui` stays dependency-light. When omitted the form is inert.
+     */
+    onSubmit?: PasswordSubmit;
+    /** Optional "forgot password" affordance the host wires. */
+    onForgot?: () => void;
+    /** Submit button label. */
+    submitLabel?: string;
+    className?: string;
+}
+/**
+ * Atomic email + password form. Brand-neutral: borders/text/background come
+ * from CSS tokens (`bg-background`, `border-input`, `text-foreground`,
+ * `bg-primary`), never literals. No token exchange — it just collects the
+ * credential and calls `onSubmit`.
+ */
+export declare function PasswordForm({ onSubmit, onForgot, submitLabel, className, }: PasswordFormProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=PasswordForm.d.ts.map

package/dist/src/auth/PasswordForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordForm.d.ts","sourceRoot":"","sources":["../../../src/auth/PasswordForm.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,QAAQ,EACR,WAAuB,EACvB,SAAS,GACV,EAAE,iBAAiB,2CAoFnB"}

package/dist/src/auth/PasswordForm.js

@@ -0,0 +1,28 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from 'react';
+import { cn } from '../utils';
+/**
+ * Atomic email + password form. Brand-neutral: borders/text/background come
+ * from CSS tokens (`bg-background`, `border-input`, `text-foreground`,
+ * `bg-primary`), never literals. No token exchange — it just collects the
+ * credential and calls `onSubmit`.
+ */
+export function PasswordForm({ onSubmit, onForgot, submitLabel = 'Sign in', className, }) {
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState(null);
+    const handleSubmit = useCallback((e) => {
+        e.preventDefault();
+        if (!onSubmit)
+            return;
+        setBusy(true);
+        setError(null);
+        void Promise.resolve(onSubmit({ email, password }))
+            .catch((err) => setError(err instanceof Error ? err.message : 'Sign-in failed'))
+            .finally(() => setBusy(false));
+    }, [onSubmit, email, password]);
+    const fieldCls = cn('w-full rounded-md border border-input bg-background px-3 py-2 text-sm text-foreground', 'placeholder:text-muted-foreground', 'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2');
+    return (_jsxs("form", { onSubmit: handleSubmit, className: cn('flex flex-col gap-3', className), children: [_jsxs("label", { className: "flex flex-col gap-1.5", children: [_jsx("span", { className: "text-sm font-medium text-foreground", children: "Email" }), _jsx("input", { type: "email", autoComplete: "email", required: true, value: email, onChange: (e) => setEmail(e.target.value), placeholder: "you@example.com", className: fieldCls })] }), _jsxs("label", { className: "flex flex-col gap-1.5", children: [_jsxs("span", { className: "flex items-center justify-between text-sm font-medium text-foreground", children: ["Password", onForgot && (_jsx("button", { type: "button", onClick: onForgot, className: "text-xs font-normal text-muted-foreground hover:text-foreground", children: "Forgot?" }))] }), _jsx("input", { type: "password", autoComplete: "current-password", required: true, value: password, onChange: (e) => setPassword(e.target.value), placeholder: "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022", className: fieldCls })] }), error && (_jsx("p", { role: "alert", className: "text-sm text-destructive", children: error })), _jsx("button", { type: "submit", disabled: busy || !onSubmit, className: cn('inline-flex w-full items-center justify-center rounded-md bg-primary px-4 py-2.5', 'text-sm font-medium text-primary-foreground transition-colors hover:bg-primary/90', 'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2', 'disabled:pointer-events-none disabled:opacity-50'), children: busy ? 'Signing in…' : submitLabel })] }));
+}

package/dist/src/auth/SignIn.d.ts

@@ -0,0 +1,37 @@
+import React from 'react';
+import type { SignInConfig, SignInMethod, LoginStarter, PasswordSubmit } from './types';
+export interface SignInProps {
+    /**
+     * The method set to render, in order. `'password'` renders the embedded
+     * form; everything else is a provider hint (`'google'`, `'github'`,
+     * `'web3'`, …). This is the ONLY app-level configuration — apps pass
+     * `brand.providers` and write zero auth code.
+     */
+    providers: SignInMethod[];
+    /** Brand IAM wiring threaded to every social/web3 atom. */
+    config?: SignInConfig;
+    /** Injected login starter (defaults to the embedded `startIamLogin`). */
+    onLogin?: LoginStarter;
+    /** Password submit handler (canonical: the SDK's `loginWithPassword`). */
+    onPasswordSubmit?: PasswordSubmit;
+    /** "Forgot password" affordance. */
+    onForgot?: () => void;
+    /** Optional heading rendered above the methods. */
+    title?: React.ReactNode;
+    className?: string;
+}
+/**
+ * The composable sign-in surface. Renders the chosen method set — a
+ * `<PasswordForm>` and/or one `<SocialButton>` per provider (`<Web3Connect>`
+ * for `'web3'`) — each wired to the SDK. Brand-neutral: all color comes from
+ * the host's CSS tokens, nothing hardcoded. Apps just choose `providers`.
+ *
+ * @example
+ *   <SignIn
+ *     providers={['password', 'google', 'github', 'web3']}
+ *     config={{ serverUrl: 'https://hanzo.id', clientId: 'hanzo-app' }}
+ *     onPasswordSubmit={(c) => iam.loginWithPassword(c.email, c.password)}
+ *   />
+ */
+export declare function SignIn({ providers, config, onLogin, onPasswordSubmit, onForgot, title, className, }: SignInProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SignIn.d.ts.map

package/dist/src/auth/SignIn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignIn.d.ts","sourceRoot":"","sources":["../../../src/auth/SignIn.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,OAAO,CAAA;AAKzB,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAEvF,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,SAAS,EAAE,YAAY,EAAE,CAAA;IACzB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,cAAc,CAAA;IACjC,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,EACrB,SAAS,EACT,MAAM,EACN,OAAO,EACP,gBAAgB,EAChB,QAAQ,EACR,KAAK,EACL,SAAS,GACV,EAAE,WAAW,2CAkCb"}

package/dist/src/auth/SignIn.js

@@ -0,0 +1,26 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { cn } from '../utils';
+import { SocialButton } from './SocialButton';
+import { Web3Connect } from './Web3Connect';
+import { PasswordForm } from './PasswordForm';
+const isPassword = (m) => m === 'password';
+/**
+ * The composable sign-in surface. Renders the chosen method set — a
+ * `<PasswordForm>` and/or one `<SocialButton>` per provider (`<Web3Connect>`
+ * for `'web3'`) — each wired to the SDK. Brand-neutral: all color comes from
+ * the host's CSS tokens, nothing hardcoded. Apps just choose `providers`.
+ *
+ * @example
+ *   <SignIn
+ *     providers={['password', 'google', 'github', 'web3']}
+ *     config={{ serverUrl: 'https://hanzo.id', clientId: 'hanzo-app' }}
+ *     onPasswordSubmit={(c) => iam.loginWithPassword(c.email, c.password)}
+ *   />
+ */
+export function SignIn({ providers, config, onLogin, onPasswordSubmit, onForgot, title, className, }) {
+    const social = providers.filter((p) => !isPassword(p));
+    const hasPassword = providers.some(isPassword);
+    const showDivider = hasPassword && social.length > 0;
+    return (_jsxs("div", { className: cn('flex w-full max-w-sm flex-col gap-4', className), children: [title && _jsx("div", { className: "text-lg font-semibold text-foreground", children: title }), hasPassword && (_jsx(PasswordForm, { onSubmit: onPasswordSubmit, onForgot: onForgot })), showDivider && (_jsxs("div", { className: "flex items-center gap-3", "aria-hidden": true, children: [_jsx("span", { className: "h-px flex-1 bg-border" }), _jsx("span", { className: "text-xs uppercase tracking-wide text-muted-foreground", children: "or" }), _jsx("span", { className: "h-px flex-1 bg-border" })] })), social.length > 0 && (_jsx("div", { className: "flex flex-col gap-2", children: social.map((provider) => provider === 'web3' ? (_jsx(Web3Connect, { config: config, onLogin: onLogin }, provider)) : (_jsx(SocialButton, { provider: provider, config: config, onLogin: onLogin }, provider))) }))] }));
+}

package/dist/src/auth/SocialButton.d.ts

@@ -0,0 +1,27 @@
+import React from 'react';
+import type { SignInConfig, LoginStarter } from './types';
+export interface SocialButtonProps {
+    /** Provider hint delegated to IAM's shared OAuth client (e.g. "google"). */
+    provider: string;
+    /** Brand IAM wiring. Required unless an `onLogin` starter is injected. */
+    config?: SignInConfig;
+    /**
+     * Injected login starter (composition over coupling). Defaults to the
+     * `@hanzo/iam`-shaped `startIamLogin`. Pass the SDK's `startLogin` to drop
+     * the embedded copy.
+     */
+    onLogin?: LoginStarter;
+    /** Override the label (default derived from provider). */
+    label?: string;
+    /** Override the glyph (default derived from provider; `currentColor`). */
+    icon?: React.ReactNode;
+    className?: string;
+}
+/**
+ * One social / web3 sign-in method. Atomic and brand-neutral: colors come from
+ * the host's CSS tokens (`bg-background`, `text-foreground`, `border-input`,
+ * `hover:bg-accent`), never literals. Delegates to the login starter with the
+ * `provider` knob — no token exchange here.
+ */
+export declare function SocialButton({ provider, config, onLogin, label, icon, className, }: SocialButtonProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SocialButton.d.ts.map

package/dist/src/auth/SocialButton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SocialButton.d.ts","sourceRoot":"","sources":["../../../src/auth/SocialButton.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAgC,MAAM,OAAO,CAAA;AAGpD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAiCzD,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAA;IAChB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0EAA0E;IAC1E,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,MAAM,EACN,OAAO,EACP,KAAK,EACL,IAAI,EACJ,SAAS,GACV,EAAE,iBAAiB,2CAiCnB"}

package/dist/src/auth/SocialButton.js

@@ -0,0 +1,37 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useState } from 'react';
+import { cn } from '../utils';
+import { startIamLogin } from './iam';
+/** Built-in provider glyphs. `currentColor` only — the button stays monochrome
+ *  and inherits the brand from CSS tokens. Pass `icon` to override. */
+const GLYPHS = {
+    google: (_jsx("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", "aria-hidden": true, children: _jsx("path", { d: "M21.35 11.1h-9.17v2.96h5.27c-.23 1.4-1.66 4.1-5.27 4.1-3.17 0-5.76-2.62-5.76-5.86s2.59-5.86 5.76-5.86c1.8 0 3.01.77 3.7 1.43l2.52-2.43C16.9 3.5 14.76 2.6 12.18 2.6 6.98 2.6 2.8 6.78 2.8 12.3s4.18 9.7 9.38 9.7c5.42 0 9-3.8 9-9.16 0-.62-.07-1.09-.18-1.74z", fill: "currentColor" }) })),
+    github: (_jsx("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "currentColor", "aria-hidden": true, children: _jsx("path", { d: "M12 2C6.48 2 2 6.58 2 12.25c0 4.53 2.87 8.37 6.84 9.73.5.1.68-.22.68-.49v-1.7c-2.78.62-3.37-1.22-3.37-1.22-.45-1.18-1.11-1.5-1.11-1.5-.91-.64.07-.62.07-.62 1 .07 1.53 1.06 1.53 1.06.9 1.56 2.36 1.11 2.94.85.09-.66.35-1.11.63-1.37-2.22-.26-4.56-1.14-4.56-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.71 0 0 .84-.27 2.75 1.05A9.36 9.36 0 0 1 12 6.84c.85 0 1.71.12 2.51.34 1.91-1.32 2.75-1.05 2.75-1.05.55 1.41.2 2.45.1 2.71.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.81-4.57 5.06.36.32.68.94.68 1.9v2.82c0 .27.18.59.69.49A10.26 10.26 0 0 0 22 12.25C22 6.58 17.52 2 12 2z" }) })),
+    web3: (_jsxs("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", "aria-hidden": true, children: [_jsx("path", { d: "M3 7l9-4 9 4-9 4-9-4z", stroke: "currentColor", strokeWidth: "1.6", strokeLinejoin: "round" }), _jsx("path", { d: "M3 12l9 4 9-4M3 17l9 4 9-4", stroke: "currentColor", strokeWidth: "1.6", strokeLinejoin: "round" })] })),
+};
+/** Human label for a provider. Override with `label`. */
+const LABELS = {
+    google: 'Continue with Google',
+    github: 'Continue with GitHub',
+    web3: 'Connect Wallet',
+};
+/**
+ * One social / web3 sign-in method. Atomic and brand-neutral: colors come from
+ * the host's CSS tokens (`bg-background`, `text-foreground`, `border-input`,
+ * `hover:bg-accent`), never literals. Delegates to the login starter with the
+ * `provider` knob — no token exchange here.
+ */
+export function SocialButton({ provider, config, onLogin, label, icon, className, }) {
+    const [loading, setLoading] = useState(false);
+    const handleClick = useCallback(() => {
+        const start = onLogin ??
+            ((opts) => startIamLogin(opts));
+        if (!onLogin && !config) {
+            throw new Error('SocialButton: provide `config` (serverUrl + clientId) or an `onLogin` starter.');
+        }
+        setLoading(true);
+        void Promise.resolve(start({ ...config, provider })).catch(() => setLoading(false));
+    }, [onLogin, config, provider]);
+    return (_jsxs("button", { type: "button", onClick: handleClick, disabled: loading, "data-provider": provider, className: cn('inline-flex w-full items-center justify-center gap-2 rounded-md border border-input bg-background px-4 py-2.5', 'text-sm font-medium text-foreground transition-colors', 'hover:bg-accent hover:text-accent-foreground', 'focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2', 'disabled:pointer-events-none disabled:opacity-50', className), children: [icon ?? GLYPHS[provider] ?? null, loading ? 'Redirecting…' : label ?? LABELS[provider] ?? `Continue with ${provider}`] }));
+}

package/dist/src/auth/Web3Connect.d.ts

@@ -0,0 +1,9 @@
+import { type SocialButtonProps } from './SocialButton';
+export type Web3ConnectProps = Omit<SocialButtonProps, 'provider'>;
+/**
+ * Wallet sign-in. Thin specialization of `<SocialButton provider="web3">` — the
+ * web3 hop is just another provider delegated to IAM. Atomic, brand-neutral,
+ * composes freely; no separate flow.
+ */
+export declare function Web3Connect(props: Web3ConnectProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Web3Connect.d.ts.map

package/dist/src/auth/Web3Connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Web3Connect.d.ts","sourceRoot":"","sources":["../../../src/auth/Web3Connect.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAErE,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAA;AAElE;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,2CAElD"}

package/dist/src/auth/Web3Connect.js

@@ -0,0 +1,11 @@
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { SocialButton } from './SocialButton';
+/**
+ * Wallet sign-in. Thin specialization of `<SocialButton provider="web3">` — the
+ * web3 hop is just another provider delegated to IAM. Atomic, brand-neutral,
+ * composes freely; no separate flow.
+ */
+export function Web3Connect(props) {
+    return _jsx(SocialButton, { provider: "web3", ...props });
+}

package/dist/src/auth/iam.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Canonical Hanzo IAM OIDC wiring for the zero-dependency `@hanzo/ui` auth
+ * components (HIP-0111).
+ *
+ * The full `@hanzo/iam` SDK is the canonical client everywhere it can be a
+ * dependency. `@hanzo/ui` is intentionally dependency-light, so this module
+ * mirrors the SDK's contract for the two things these components need —
+ * the OIDC endpoint paths and a PKCE-S256 authorize redirect — and nothing
+ * else. The paths below are byte-for-byte the SDK's `OIDC_PATHS`.
+ *
+ * There is no `/api/` prefix, no legacy `/oauth/*` or `/login/oauth/*`, and
+ * PKCE (S256) is always on. A bare authorize redirect without PKCE is a
+ * security gap, not just a path nit.
+ */
+/** OIDC endpoint paths, relative to the brand `serverUrl`. Mirrors `@hanzo/iam` `OIDC_PATHS`. */
+export declare const IAM_OIDC_PATHS: {
+    readonly authorize: "/v1/iam/oauth/authorize";
+    readonly token: "/v1/iam/oauth/token";
+    readonly userinfo: "/v1/iam/oauth/userinfo";
+    readonly jwks: "/v1/iam/.well-known/jwks";
+    readonly logout: "/v1/iam/oauth/logout";
+};
+/** Absolute IAM endpoint URL from a brand origin and a path key. */
+export declare function iamUrl(serverUrl: string, key: keyof typeof IAM_OIDC_PATHS): string;
+export interface StartIamLoginOptions {
+    /** Brand IAM origin, e.g. https://hanzo.id. */
+    serverUrl: string;
+    /** OAuth client id (`<org>-<app>`). */
+    clientId: string;
+    /** Redirect URI; defaults to the current origin + `/auth/callback`. */
+    redirectUri?: string;
+    /** Scopes; defaults to `openid profile email`. */
+    scope?: string;
+    /**
+     * Social/web3 provider hint (e.g. "google", "github", "web3"). The ONE knob
+     * that selects a method — omit it for the IAM login page, or name a provider
+     * to delegate the social hop to IAM's shared org-level OAuth client. It rides
+     * as `&provider=<name>` on `/v1/iam/oauth/authorize`; the app NEVER registers
+     * a per-app Google/GitHub client. Same shape as `@hanzo/iam`'s `startLogin`.
+     */
+    provider?: string;
+}
+/**
+ * Build the canonical IAM authorization-code + PKCE-S256 authorize URL and
+ * stash the verifier + state in `sessionStorage` for the callback. Returned
+ * without redirecting — useful for `<a href>` or tests. `provider` (if given)
+ * rides as `&provider=<name>`; one flow, parameterized.
+ */
+export declare function buildIamAuthorizeUrl(opts: StartIamLoginOptions): Promise<string>;
+/**
+ * Begin the canonical IAM authorization-code + PKCE-S256 flow by redirecting
+ * the browser to `/v1/iam/oauth/authorize`. The verifier + state are stashed in
+ * `sessionStorage` for the callback to consume. `provider` selects the method.
+ */
+export declare function startIamLogin(opts: StartIamLoginOptions): Promise<void>;
+//# sourceMappingURL=iam.d.ts.map

package/dist/src/auth/iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.d.ts","sourceRoot":"","sources":["../../../src/auth/iam.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iGAAiG;AACjG,eAAO,MAAM,cAAc;;;;;;CAMjB,CAAA;AAIV,oEAAoE;AACpE,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,OAAO,cAAc,GAAG,MAAM,CAElF;AAuBD,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBtF;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E"}

package/dist/src/auth/iam.js

@@ -0,0 +1,78 @@
+/**
+ * Canonical Hanzo IAM OIDC wiring for the zero-dependency `@hanzo/ui` auth
+ * components (HIP-0111).
+ *
+ * The full `@hanzo/iam` SDK is the canonical client everywhere it can be a
+ * dependency. `@hanzo/ui` is intentionally dependency-light, so this module
+ * mirrors the SDK's contract for the two things these components need —
+ * the OIDC endpoint paths and a PKCE-S256 authorize redirect — and nothing
+ * else. The paths below are byte-for-byte the SDK's `OIDC_PATHS`.
+ *
+ * There is no `/api/` prefix, no legacy `/oauth/*` or `/login/oauth/*`, and
+ * PKCE (S256) is always on. A bare authorize redirect without PKCE is a
+ * security gap, not just a path nit.
+ */
+/** OIDC endpoint paths, relative to the brand `serverUrl`. Mirrors `@hanzo/iam` `OIDC_PATHS`. */
+export const IAM_OIDC_PATHS = {
+    authorize: '/v1/iam/oauth/authorize',
+    token: '/v1/iam/oauth/token',
+    userinfo: '/v1/iam/oauth/userinfo',
+    jwks: '/v1/iam/.well-known/jwks',
+    logout: '/v1/iam/oauth/logout',
+};
+const trim = (s) => s.replace(/\/+$/, '');
+/** Absolute IAM endpoint URL from a brand origin and a path key. */
+export function iamUrl(serverUrl, key) {
+    return `${trim(serverUrl)}${IAM_OIDC_PATHS[key]}`;
+}
+const PKCE_VERIFIER_KEY = 'hanzo_iam_pkce_verifier';
+const PKCE_STATE_KEY = 'hanzo_iam_state';
+function base64UrlEncode(bytes) {
+    const b = new Uint8Array(bytes);
+    let s = '';
+    for (const x of b)
+        s += String.fromCharCode(x);
+    return btoa(s).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+function randomVerifier() {
+    const a = new Uint8Array(48);
+    crypto.getRandomValues(a);
+    return base64UrlEncode(a.buffer);
+}
+async function challengeFor(verifier) {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(verifier));
+    return base64UrlEncode(digest);
+}
+/**
+ * Build the canonical IAM authorization-code + PKCE-S256 authorize URL and
+ * stash the verifier + state in `sessionStorage` for the callback. Returned
+ * without redirecting — useful for `<a href>` or tests. `provider` (if given)
+ * rides as `&provider=<name>`; one flow, parameterized.
+ */
+export async function buildIamAuthorizeUrl(opts) {
+    const redirectUri = opts.redirectUri || `${window.location.origin}/auth/callback`;
+    const verifier = randomVerifier();
+    const challenge = await challengeFor(verifier);
+    const state = crypto.randomUUID();
+    sessionStorage.setItem(PKCE_VERIFIER_KEY, verifier);
+    sessionStorage.setItem(PKCE_STATE_KEY, state);
+    const url = new URL(iamUrl(opts.serverUrl, 'authorize'));
+    url.searchParams.set('client_id', opts.clientId);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('redirect_uri', redirectUri);
+    url.searchParams.set('scope', opts.scope || 'openid profile email');
+    url.searchParams.set('state', state);
+    url.searchParams.set('code_challenge', challenge);
+    url.searchParams.set('code_challenge_method', 'S256');
+    if (opts.provider)
+        url.searchParams.set('provider', opts.provider);
+    return url.toString();
+}
+/**
+ * Begin the canonical IAM authorization-code + PKCE-S256 flow by redirecting
+ * the browser to `/v1/iam/oauth/authorize`. The verifier + state are stashed in
+ * `sessionStorage` for the callback to consume. `provider` selects the method.
+ */
+export async function startIamLogin(opts) {
+    window.location.href = await buildIamAuthorizeUrl(opts);
+}

package/dist/src/auth/index.d.ts

@@ -1,7 +1,18 @@
+export { SignIn } from './SignIn';
+export type { SignInProps } from './SignIn';
+export { SocialButton } from './SocialButton';
+export type { SocialButtonProps } from './SocialButton';
+export { PasswordForm } from './PasswordForm';
+export type { PasswordFormProps } from './PasswordForm';
+export { Web3Connect } from './Web3Connect';
+export type { Web3ConnectProps } from './Web3Connect';
 export { IAMLoginButton } from './IAMLoginButton';
 export type { IAMLoginButtonProps } from './IAMLoginButton';
 export { AuthGuard } from './AuthGuard';
 export type { AuthGuardProps } from './AuthGuard';
+export { startIamLogin, buildIamAuthorizeUrl, iamUrl, IAM_OIDC_PATHS } from './iam';
+export type { StartIamLoginOptions } from './iam';
+export type { SignInConfig, SignInMethod, LoginStarter, PasswordSubmit } from './types';
 export { useHanzoAuth } from '../navigation/hanzo-shell/useHanzoAuth';
 export { UserOrgDropdown } from '../navigation/hanzo-shell/UserOrgDropdown';
 export type { HanzoUser, HanzoOrg } from '../navigation/hanzo-shell/types';

package/dist/src/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAGjD,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAA;AAC3E,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGrD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAGjD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AACnF,YAAY,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAA;AACjD,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAGvF,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAA;AAC3E,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA"}

package/dist/src/auth/index.js

@@ -1,5 +1,14 @@
+// Composable sign-in surface — atoms + the <SignIn> composer.
+// Brand-neutral (CSS tokens), each wired to the canonical IAM PKCE flow.
+export { SignIn } from './SignIn';
+export { SocialButton } from './SocialButton';
+export { PasswordForm } from './PasswordForm';
+export { Web3Connect } from './Web3Connect';
+// Single-button entry + guard (kept for the "Sign in with Hanzo" affordance).
 export { IAMLoginButton } from './IAMLoginButton';
 export { AuthGuard } from './AuthGuard';
+// Mechanism mirror (paths + PKCE authorize) — same contract as `@hanzo/iam`.
+export { startIamLogin, buildIamAuthorizeUrl, iamUrl, IAM_OIDC_PATHS } from './iam';
 // Re-export auth-related navigation components for convenience
 export { useHanzoAuth } from '../navigation/hanzo-shell/useHanzoAuth';
 export { UserOrgDropdown } from '../navigation/hanzo-shell/UserOrgDropdown';

package/dist/src/auth/types.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared types for the composable `@hanzo/ui` sign-in surface.
+ *
+ * The presentation layer knows nothing of token exchange — it only knows how
+ * to START a login for a given method. `provider` is the one knob; everything
+ * else is brand config the host supplies once.
+ */
+import type { StartIamLoginOptions } from './iam';
+/**
+ * A sign-in method. `'password'` renders the embedded credential form; any
+ * other string is a provider hint delegated to IAM's shared org-level OAuth
+ * client (`'google'`, `'github'`, `'web3'`, …). One union, parameterized —
+ * never a component per provider.
+ */
+export type SignInMethod = 'password' | 'google' | 'github' | 'web3' | (string & {});
+/** Brand IAM wiring the host supplies once and threads to every atom. */
+export interface SignInConfig {
+    /** Brand IAM origin, e.g. https://hanzo.id. */
+    serverUrl: string;
+    /** OAuth client id (`<org>-<app>`). */
+    clientId: string;
+    /** OAuth callback; defaults to the current origin + `/auth/callback`. */
+    redirectUri?: string;
+    /** Scopes; defaults to `openid profile email`. */
+    scope?: string;
+}
+/**
+ * The injected login starter — composition over coupling. Defaults to the
+ * `@hanzo/iam`-shaped `startIamLogin`, but a host can pass its own (e.g. the
+ * `@hanzo/iam` SDK's `startLogin`) so `@hanzo/ui` stays dependency-light.
+ */
+export type LoginStarter = (opts: StartIamLoginOptions) => void | Promise<void>;
+/**
+ * Submit handler for the embedded password form. Defaults to undefined, in
+ * which case `<PasswordForm>` is inert until a host wires it (the SDK's
+ * `loginWithPassword` is the canonical implementation). Kept out of the
+ * dependency-light core deliberately.
+ */
+export type PasswordSubmit = (creds: {
+    email: string;
+    password: string;
+}) => void | Promise<void>;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEpF,yEAAyE;AACzE,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAE/E;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA"}

package/dist/src/auth/types.js

@@ -0,0 +1,8 @@
+/**
+ * Shared types for the composable `@hanzo/ui` sign-in surface.
+ *
+ * The presentation layer knows nothing of token exchange — it only knows how
+ * to START a login for a given method. `provider` is the one knob; everything
+ * else is brand config the host supplies once.
+ */
+export {};

package/dist/src/billing/components/payment-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment-manager.d.ts","sourceRoot":"","sources":["../../../../src/billing/components/payment-manager.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAoC,MAAM,UAAU,CAAA;AAG/E,MAAM,WAAW,yBAAyB;IACxC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAA;IAC/C,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IACtC,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC;AA+FD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,2CAyKpE"}
+{"version":3,"file":"payment-manager.d.ts","sourceRoot":"","sources":["../../../../src/billing/components/payment-manager.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAoC,MAAM,UAAU,CAAA;AAI/E,MAAM,WAAW,yBAAyB;IACxC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAA;IAC/C,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IACtC,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC;AA+FD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,2CAmLpE"}

package/dist/src/billing/components/payment-manager.js

@@ -4,6 +4,7 @@ import * as React from 'react';
 import { ConnectButton } from '@rainbow-me/rainbowkit';
 import { useAccount, useChainId } from 'wagmi';
 import { AnimatedCard } from './animated-card';
+import { SquareCardForm } from './square-card-form';
 // ── Display helpers ──────────────────────────────────────────────────────
 const CRYPTO_NETWORK_LABELS = {
     bitcoin: 'Bitcoin (BTC)',
@@ -141,7 +142,18 @@ export function PaymentMethodManager(props) {
                                 ['card', 'Card'],
                                 ['crypto', 'Crypto'],
                                 ['wire', 'Bank Wire'],
-                            ].map(([id, label]) => (_jsx("button", { type: "button", onClick: () => { setActiveTab(id); setError(null); }, className: `${TAB_CLASS} ${activeTab === id ? TAB_ACTIVE : TAB_INACTIVE}`, children: label }, id))) }), activeTab === 'card' && (_jsx(CardForm, { onAdd: addMethod, setError: setError })), activeTab === 'crypto' && _jsx(CryptoForm, { onAdd: addMethod, setError: setError }), activeTab === 'wire' && _jsx(WireForm, { onAdd: addMethod }), error && _jsx("p", { className: "mt-3 text-sm text-danger", children: error })] })), status && (_jsx("div", { className: "border-b border-border px-4 py-2", children: _jsx("p", { className: "text-sm text-success", children: status }) })), _jsx("div", { className: "divide-y divide-border", children: methods.length === 0 ? (_jsx("div", { className: "p-6 text-sm text-text-muted", children: "No payment methods on file." })) : (methods.map(method => {
+                            ].map(([id, label]) => (_jsx("button", { type: "button", onClick: () => { setActiveTab(id); setError(null); }, className: `${TAB_CLASS} ${activeTab === id ? TAB_ACTIVE : TAB_INACTIVE}`, children: label }, id))) }), activeTab === 'card' && (_jsx(SquareCardForm, { onToken: async (sourceId) => {
+                                const method = {
+                                    id: `pm_${Math.random().toString(36).slice(2, 12)}`,
+                                    type: 'card',
+                                    is_default: false,
+                                    isDefault: false,
+                                    created_at: new Date().toISOString(),
+                                    _sourceToken: sourceId,
+                                    card: { brand: 'card', last4: '••••', exp_month: 0, exp_year: 0, funding: 'credit' },
+                                };
+                                await addMethod(method);
+                            } })), activeTab === 'crypto' && _jsx(CryptoForm, { onAdd: addMethod, setError: setError }), activeTab === 'wire' && _jsx(WireForm, { onAdd: addMethod }), error && _jsx("p", { className: "mt-3 text-sm text-danger", children: error })] })), status && (_jsx("div", { className: "border-b border-border px-4 py-2", children: _jsx("p", { className: "text-sm text-success", children: status }) })), _jsx("div", { className: "divide-y divide-border", children: methods.length === 0 ? (_jsx("div", { className: "p-6 text-sm text-text-muted", children: "No payment methods on file." })) : (methods.map(method => {
                         const isDefault = method.is_default || method.isDefault;
                         const isBusy = busyMethodId === method.id;
                         const sub = methodSubtext(method);

package/dist/src/form/form.d.ts

@@ -1,7 +1,7 @@
 import * as React from "react";
 import * as LabelPrimitive from "@radix-ui/react-label";
 import { type ControllerProps, type FieldPath, type FieldValues } from "react-hook-form";
-declare const Form: <TFieldValues extends FieldValues, TContext = any, TTransformedValues = TFieldValues>(props: import("react-hook-form").FormProviderProps<TFieldValues, TContext, TTransformedValues>) => React.JSX.Element;
+declare const Form: <TFieldValues extends FieldValues, TContext = any, TTransformedValues = TFieldValues>({ children, watch, getValues, getFieldState, setError, clearErrors, setValue, setValues, trigger, formState, resetField, reset, handleSubmit, unregister, control, register, setFocus, subscribe, }: import("react-hook-form").FormProviderProps<TFieldValues, TContext, TTransformedValues>) => React.JSX.Element;
 declare const FormField: <TFieldValues extends FieldValues = FieldValues, TName extends FieldPath<TFieldValues> = FieldPath<TFieldValues>>({ ...props }: ControllerProps<TFieldValues, TName>) => import("react/jsx-runtime").JSX.Element;
 declare const useFormField: () => {
     invalid: boolean;
@@ -17,7 +17,9 @@ declare const useFormField: () => {
 };
 declare const FormItem: React.ForwardRefExoticComponent<React.HTMLAttributes<HTMLDivElement> & React.RefAttributes<HTMLDivElement>>;
 declare const FormLabel: React.ForwardRefExoticComponent<Omit<LabelPrimitive.LabelProps & React.RefAttributes<HTMLLabelElement>, "ref"> & React.RefAttributes<HTMLLabelElement>>;
-declare const FormControl: React.ForwardRefExoticComponent<Omit<import("@radix-ui/react-slot").SlotProps & React.RefAttributes<HTMLElement>, "ref"> & React.RefAttributes<HTMLElement>>;
+declare const FormControl: React.ForwardRefExoticComponent<Omit<React.HTMLAttributes<HTMLElement> & {
+    children?: React.ReactNode;
+} & React.RefAttributes<HTMLElement>, "ref"> & React.RefAttributes<HTMLElement>>;
 declare const FormDescription: React.ForwardRefExoticComponent<React.HTMLAttributes<HTMLParagraphElement> & React.RefAttributes<HTMLParagraphElement>>;
 declare const FormMessage: React.ForwardRefExoticComponent<React.HTMLAttributes<HTMLParagraphElement> & React.RefAttributes<HTMLParagraphElement>>;
 export { useFormField, Form, FormItem, FormLabel, FormControl, FormDescription, FormMessage, FormField, };

package/dist/src/form/form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../../src/form/form.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAA;AAKxB,QAAA,MAAM,IAAI,4MAAe,CAAA;AAWzB,QAAA,MAAM,SAAS,GACb,YAAY,SAAS,WAAW,GAAG,WAAW,EAC9C,KAAK,SAAS,SAAS,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,EAC/D,cAEC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,4CAMtC,CAAA;AAED,QAAA,MAAM,YAAY;;;;;;;;;;;CAyBjB,CAAA;AAQD,QAAA,MAAM,QAAQ,6GAWZ,CAAA;AAGF,QAAA,MAAM,SAAS,yJAcb,CAAA;AAGF,QAAA,MAAM,WAAW,8JAmBf,CAAA;AAGF,QAAA,MAAM,eAAe,yHAcnB,CAAA;AAGF,QAAA,MAAM,WAAW,yHAqBf,CAAA;AAGF,OAAO,EACL,YAAY,EACZ,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,WAAW,EACX,eAAe,EACf,WAAW,EACX,SAAS,GACV,CAAA"}
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../../src/form/form.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAA;AAKxB,QAAA,MAAM,IAAI,0YAAe,CAAA;AAWzB,QAAA,MAAM,SAAS,GACb,YAAY,SAAS,WAAW,GAAG,WAAW,EAC9C,KAAK,SAAS,SAAS,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,EAC/D,cAEC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,4CAMtC,CAAA;AAED,QAAA,MAAM,YAAY;;;;;;;;;;;CAyBjB,CAAA;AAQD,QAAA,MAAM,QAAQ,6GAWZ,CAAA;AAGF,QAAA,MAAM,SAAS,yJAcb,CAAA;AAGF,QAAA,MAAM,WAAW;;gFAmBf,CAAA;AAGF,QAAA,MAAM,eAAe,yHAcnB,CAAA;AAGF,QAAA,MAAM,WAAW,yHAqBf,CAAA;AAGF,OAAO,EACL,YAAY,EACZ,IAAI,EACJ,QAAQ,EACR,SAAS,EACT,WAAW,EACX,eAAe,EACf,WAAW,EACX,SAAS,GACV,CAAA"}

package/dist/src/models/ModelCard.js

@@ -1,6 +1,6 @@
 'use client';
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { ExternalLink, MessageSquare, Github, FileText } from 'lucide-react';
+import { ExternalLink, MessageSquare, Code, FileText } from 'lucide-react';
 function fmtCtx(ctx) {
     if (!ctx)
         return '';
@@ -68,6 +68,6 @@ export function ModelCard({ model, onNavigate, linkPrefix = '/docs/models/', cha
         if (e.key === 'Enter' || e.key === ' ')
             handleClick();
     };
-    return (_jsxs("div", { role: isClickable ? 'link' : undefined, tabIndex: isClickable ? 0 : undefined, onClick: isClickable ? handleClick : undefined, onKeyDown: isClickable ? handleKey : undefined, className: `rounded-lg border p-4 transition hover:border-primary/40 ${cardBg} ${isClickable ? 'cursor-pointer' : ''}`, children: [_jsxs("div", { className: "flex items-center gap-2 mb-1", children: [_jsx("span", { className: "font-semibold text-sm", children: model.id }), badge && (_jsx("span", { className: `text-[9px] font-semibold tracking-wider uppercase px-1.5 py-0.5 rounded-full ${badge.className}`, children: badge.label }))] }), fullSpec && (_jsx("div", { className: "text-xs font-mono text-muted-foreground mb-2", children: fullSpec })), _jsx("p", { className: "text-xs text-muted-foreground mb-3", children: model.description }), _jsxs("div", { className: "flex flex-wrap gap-1.5 mt-auto", children: [status === 'contact-sales' && (_jsxs("a", { href: requestAccessUrl, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs bg-purple-500/20 text-purple-400 border border-purple-500/30 px-2 py-0.5 rounded hover:bg-purple-500/30 transition", children: [_jsx(ExternalLink, { className: "h-2.5 w-2.5" }), " Request Access"] })), (status === 'available' || status === 'preview' || status === 'cloud-only') && (_jsxs("a", { href: `${chatBaseUrl}?model=${model.id}`, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs bg-primary text-primary-foreground px-2 py-0.5 rounded hover:opacity-90 transition", children: [_jsx(MessageSquare, { className: "h-2.5 w-2.5" }), " Chat"] })), model.huggingface && (_jsxs("a", { href: model.huggingface, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs text-primary hover:underline", children: [_jsx(ExternalLink, { className: "h-2.5 w-2.5" }), " Weights"] })), model.github && (_jsxs("a", { href: model.github, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:underline", children: [_jsx(Github, { className: "h-2.5 w-2.5" }), " Repo"] })), model.paper && (_jsxs("a", { href: model.paper, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:underline", children: [_jsx(FileText, { className: "h-2.5 w-2.5" }), " Paper"] }))] })] }));
+    return (_jsxs("div", { role: isClickable ? 'link' : undefined, tabIndex: isClickable ? 0 : undefined, onClick: isClickable ? handleClick : undefined, onKeyDown: isClickable ? handleKey : undefined, className: `rounded-lg border p-4 transition hover:border-primary/40 ${cardBg} ${isClickable ? 'cursor-pointer' : ''}`, children: [_jsxs("div", { className: "flex items-center gap-2 mb-1", children: [_jsx("span", { className: "font-semibold text-sm", children: model.id }), badge && (_jsx("span", { className: `text-[9px] font-semibold tracking-wider uppercase px-1.5 py-0.5 rounded-full ${badge.className}`, children: badge.label }))] }), fullSpec && (_jsx("div", { className: "text-xs font-mono text-muted-foreground mb-2", children: fullSpec })), _jsx("p", { className: "text-xs text-muted-foreground mb-3", children: model.description }), _jsxs("div", { className: "flex flex-wrap gap-1.5 mt-auto", children: [status === 'contact-sales' && (_jsxs("a", { href: requestAccessUrl, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs bg-purple-500/20 text-purple-400 border border-purple-500/30 px-2 py-0.5 rounded hover:bg-purple-500/30 transition", children: [_jsx(ExternalLink, { className: "h-2.5 w-2.5" }), " Request Access"] })), (status === 'available' || status === 'preview' || status === 'cloud-only') && (_jsxs("a", { href: `${chatBaseUrl}?model=${model.id}`, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs bg-primary text-primary-foreground px-2 py-0.5 rounded hover:opacity-90 transition", children: [_jsx(MessageSquare, { className: "h-2.5 w-2.5" }), " Chat"] })), model.huggingface && (_jsxs("a", { href: model.huggingface, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs text-primary hover:underline", children: [_jsx(ExternalLink, { className: "h-2.5 w-2.5" }), " Weights"] })), model.github && (_jsxs("a", { href: model.github, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:underline", children: [_jsx(Code, { className: "h-2.5 w-2.5" }), " Repo"] })), model.paper && (_jsxs("a", { href: model.paper, target: "_blank", rel: "noopener noreferrer", onClick: (e) => { e.stopPropagation(); }, className: "inline-flex items-center gap-1 text-xs text-muted-foreground hover:underline", children: [_jsx(FileText, { className: "h-2.5 w-2.5" }), " Paper"] }))] })] }));
 }
 export default ModelCard;