@hanzo/ui 8.27.23 → 8.27.25

package/dist/auth/SignIn.cjs

@@ -0,0 +1,157 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SignIn = SignIn;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const iam_1 = require("@hanzo/iam");
+const react_2 = require("@hanzo/iam/react");
+const shell_1 = require("@hanzogui/shell");
+const FIRST = {
+    password: true,
+    code: true,
+    signup: true,
+    providers: [
+        { name: 'provider-google', type: 'Google' },
+        { name: 'provider-github', type: 'GitHub' },
+    ],
+};
+const said = (err) => (err instanceof Error && err.message ? err.message : 'Something went wrong. Try again.');
+const GOOGLE = 'M12.48 10.92v3.28h7.84c-.24 1.84-.85 3.18-1.73 4.1-1.02 1.02-2.62 2.14-5.63 2.14-4.64 0-8.26-3.74-8.26-8.38s3.62-8.38 8.26-8.38c2.5 0 4.34.99 5.69 2.26l2.31-2.31C18.96 1.28 16.46 0 12.48 0 5.72 0 .04 5.5.04 12.28s5.68 12.28 12.44 12.28c3.65 0 6.4-1.2 8.55-3.44 2.21-2.21 2.9-5.32 2.9-7.83 0-.78-.06-1.5-.18-2.1z';
+const GITHUB = 'M12 .3a12 12 0 0 0-3.8 23.4c.6.1.8-.3.8-.6v-2c-3.3.7-4-1.6-4-1.6-.6-1.4-1.4-1.8-1.4-1.8-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.8 1.3 3.5 1 0-.8.4-1.3.7-1.6-2.7-.3-5.5-1.3-5.5-6 0-1.2.5-2.3 1.3-3.1-.2-.4-.6-1.6 0-3.2 0 0 1-.3 3.4 1.2a11.5 11.5 0 0 1 6 0c2.3-1.5 3.3-1.2 3.3-1.2.6 1.6.2 2.8.1 3.2.8.8 1.3 1.9 1.3 3.1 0 4.6-2.8 5.7-5.5 6 .4.4.8 1.1.8 2.2v3.3c0 .3.2.7.8.6A12 12 0 0 0 12 .3z';
+function Brand({ kind }) {
+    const d = kind === 'google' ? GOOGLE : kind === 'github' ? GITHUB : null;
+    return d ? ((0, jsx_runtime_1.jsx)("svg", { width: 16, height: 16, viewBox: "0 0 24 24", fill: "currentColor", "aria-hidden": "true", children: (0, jsx_runtime_1.jsx)("path", { d: d }) })) : null;
+}
+function SignIn({ mode = 'login', site = 'Hanzo', callbackPath = '/auth/callback', providers, via, loginPath = '/login', signupPath = '/signup', termsPath = '/terms', privacyPath = '/privacy', track, authorize = (u) => u, onMethod, onShown, }) {
+    const { config, sdk } = (0, react_2.useIam)();
+    const [methods, setMethods] = (0, react_1.useState)(providers ? { ...FIRST, providers } : FIRST);
+    const [step, setStep] = (0, react_1.useState)('email');
+    const [email, setEmail] = (0, react_1.useState)('');
+    const [password, setPassword] = (0, react_1.useState)('');
+    const [code, setCode] = (0, react_1.useState)('');
+    const [name, setName] = (0, react_1.useState)('');
+    const [busy, setBusy] = (0, react_1.useState)(false);
+    const [wrong, setWrong] = (0, react_1.useState)(null);
+    const origin = via ?? (typeof window === 'undefined' ? '' : window.location.origin);
+    const iam = (0, react_1.useMemo)(() => new iam_1.IAM({ ...config, proxyBaseUrl: origin || undefined, redirectUri: origin ? `${origin}${callbackPath}` : config.redirectUri }), [config, origin, callbackPath]);
+    (0, react_1.useEffect)(() => {
+        let live = true;
+        iam
+            .methods()
+            .then((m) => {
+            // A list with no provider in it is IAM saying none; one that failed to
+            // arrive keeps the ones Hanzo runs.
+            if (live)
+                setMethods(m);
+        })
+            .catch(() => { });
+        return () => {
+            live = false;
+        };
+    }, [iam]);
+    (0, react_1.useEffect)(() => {
+        track?.('signup_viewed', { mode });
+        onShown?.();
+        // Once, when the card first appears.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, []);
+    const signup = mode === 'signup';
+    function commit(method) {
+        onMethod?.(method, mode);
+        if (signup)
+            track?.('signup_submitted', { method });
+    }
+    /** The issuer's page, for what cannot be typed here, with the address filled in. */
+    const issuer = async () => {
+        window.location.replace(authorize(await sdk.getSigninUrl({ additionalParams: { login_hint: email.trim(), ...(signup ? { signup: 'true' } : {}) } })));
+    };
+    async function run(call) {
+        setBusy(true);
+        setWrong(null);
+        try {
+            const to = await call();
+            if (to)
+                window.location.assign(authorize(to));
+            else
+                setBusy(false);
+        }
+        catch (err) {
+            if (err instanceof iam_1.SecondFactor) {
+                await issuer();
+                return;
+            }
+            setWrong(said(err));
+            setBusy(false);
+        }
+    }
+    function social(provider, kind) {
+        commit(kind.toLowerCase());
+        setBusy(true);
+        void sdk
+            .getSigninUrl({ additionalParams: { provider } })
+            .then((u) => window.location.replace(authorize(u)))
+            .catch((err) => {
+            setWrong(said(err));
+            setBusy(false);
+        });
+    }
+    async function sendCode() {
+        await run(async () => {
+            await iam.sendLoginCode(email.trim());
+            setCode('');
+            setStep('code');
+        });
+    }
+    function next(e) {
+        e.preventDefault();
+        const address = email.trim();
+        if (!address.includes('@')) {
+            setWrong('Enter your email address.');
+            return;
+        }
+        if (signup) {
+            void run(async () => {
+                await iam.sendLoginCode(address);
+                setStep('create');
+            });
+            return;
+        }
+        setWrong(null);
+        if (methods.password)
+            setStep('password');
+        else
+            void sendCode();
+    }
+    function finish(e) {
+        e.preventDefault();
+        const address = email.trim();
+        if (step === 'password') {
+            commit('password');
+            void run(() => iam.loginWithPassword(address, password));
+        }
+        else if (step === 'code') {
+            commit('code');
+            void run(() => iam.loginWithCode(address, code.trim()));
+        }
+        else if (step === 'create') {
+            commit('email');
+            void run(() => iam.signup({ email: address, password, code: code.trim(), name: name.trim() || undefined }));
+        }
+    }
+    const back = () => {
+        setStep('email');
+        setWrong(null);
+        setPassword('');
+        setCode('');
+    };
+    const query = typeof window === 'undefined' ? '' : window.location.search;
+    const title = signup ? `Create your ${site} account` : `Log in to ${site}`;
+    return ((0, jsx_runtime_1.jsxs)("section", { className: "hz-signin", "aria-label": signup ? 'Sign up' : 'Log in', children: [(0, jsx_runtime_1.jsxs)("div", { className: "hz-signin-card", children: [(0, jsx_runtime_1.jsxs)("p", { className: "hz-signin-brand", children: [(0, jsx_runtime_1.jsx)(shell_1.HanzoMark, { size: 20 }), site] }), (0, jsx_runtime_1.jsx)("h1", { className: "hz-signin-title", children: title }), step === 'email' ? ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [methods.providers.length ? ((0, jsx_runtime_1.jsx)("div", { className: "hz-signin-social", children: methods.providers.map((p) => ((0, jsx_runtime_1.jsxs)("button", { type: "button", className: "hz-action", onClick: () => social(p.name, p.type), disabled: busy, children: [(0, jsx_runtime_1.jsx)(Brand, { kind: p.type.toLowerCase() }), "Continue with ", p.type] }, p.name))) })) : null, methods.providers.length ? (0, jsx_runtime_1.jsx)("p", { className: "hz-signin-or", children: "or" }) : null, (0, jsx_runtime_1.jsxs)("form", { onSubmit: next, noValidate: true, children: [(0, jsx_runtime_1.jsx)(Field, { label: "Email", children: (0, jsx_runtime_1.jsx)("input", { type: "email", name: "email", autoComplete: signup ? 'email' : 'username', value: email, onChange: (e) => setEmail(e.target.value), placeholder: "you@company.com", required: true, autoFocus: true }) }), (0, jsx_runtime_1.jsx)(Wrong, { text: wrong }), (0, jsx_runtime_1.jsx)("button", { type: "submit", className: "hz-action", "data-fill": "", disabled: busy, children: busy ? 'One moment…' : 'Continue' })] })] })) : ((0, jsx_runtime_1.jsxs)("form", { onSubmit: finish, noValidate: true, children: [(0, jsx_runtime_1.jsxs)("p", { className: "hz-signin-who", children: [(0, jsx_runtime_1.jsx)("button", { type: "button", className: "hz-more", onClick: back, "aria-label": "Use another email", children: (0, jsx_runtime_1.jsx)("svg", { width: 16, height: 16, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: (0, jsx_runtime_1.jsx)("path", { d: "m12 19-7-7 7-7M19 12H5" }) }) }), (0, jsx_runtime_1.jsx)("span", { children: email.trim() })] }), step === 'password' ? ((0, jsx_runtime_1.jsx)(Field, { label: "Password", children: (0, jsx_runtime_1.jsx)("input", { type: "password", name: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value), required: true, autoFocus: true }) })) : ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsxs)("p", { className: "hz-signin-note", children: ["We sent a code to ", email.trim(), ". It is good for a few minutes."] }), (0, jsx_runtime_1.jsx)(Field, { label: "Code", children: (0, jsx_runtime_1.jsx)("input", { name: "code", inputMode: "numeric", autoComplete: "one-time-code", value: code, onChange: (e) => setCode(e.target.value), required: true, autoFocus: true }) })] })), step === 'create' ? ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)(Field, { label: "Your name", children: (0, jsx_runtime_1.jsx)("input", { name: "name", autoComplete: "name", value: name, onChange: (e) => setName(e.target.value) }) }), (0, jsx_runtime_1.jsx)(Field, { label: "Password", children: (0, jsx_runtime_1.jsx)("input", { type: "password", name: "password", autoComplete: "new-password", value: password, onChange: (e) => setPassword(e.target.value), required: true }) })] })) : null, (0, jsx_runtime_1.jsx)(Wrong, { text: wrong }), (0, jsx_runtime_1.jsx)("button", { type: "submit", className: "hz-action", "data-fill": "", disabled: busy, children: busy ? 'One moment…' : step === 'create' ? 'Create account' : 'Continue' }), step === 'password' && methods.code ? ((0, jsx_runtime_1.jsx)("button", { type: "button", className: "hz-more hz-signin-alt", onClick: () => void sendCode(), disabled: busy, children: "Email me a code instead" })) : null, step !== 'password' ? ((0, jsx_runtime_1.jsx)("button", { type: "button", className: "hz-more hz-signin-alt", onClick: () => void sendCode(), disabled: busy, children: "Send a new code" })) : null] })), signup ? ((0, jsx_runtime_1.jsxs)("p", { className: "hz-signin-fine", children: ["By creating an account you agree to the ", (0, jsx_runtime_1.jsx)("a", { href: termsPath, children: "Terms" }), " and the ", (0, jsx_runtime_1.jsx)("a", { href: privacyPath, children: "Privacy Policy" }), "."] })) : null] }), (0, jsx_runtime_1.jsxs)("p", { className: "hz-signin-else", children: [signup ? 'Have an account? ' : `New to ${site}? `, (0, jsx_runtime_1.jsx)("a", { href: `${signup ? loginPath : signupPath}${query}`, children: signup ? 'Log in' : 'Create an account' })] })] }));
+}
+function Field({ label, children }) {
+    return ((0, jsx_runtime_1.jsxs)("label", { className: "hz-signin-field", children: [(0, jsx_runtime_1.jsx)("span", { children: label }), children] }));
+}
+function Wrong({ text }) {
+    return text ? ((0, jsx_runtime_1.jsx)("p", { role: "alert", className: "hz-signin-wrong", children: text })) : null;
+}

package/dist/auth/SignIn.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Signing in and signing up, drawn on the host site's own page.
+ *
+ * IAM is the authority and the only one: it checks the password or the code,
+ * creates the account, mints the PKCE-bound code and, at the callback, the
+ * tokens. This component is where the person types, and nothing more: no
+ * password is kept and no session is made here.
+ *
+ *   a social provider   a top-level hop through IAM to the provider and back to
+ *                       the callback. IAM's own page is never drawn; the
+ *                       provider's is, because only the provider can ask.
+ *   email, password     `loginWithPassword`: the credential goes to IAM, a code
+ *                       comes back, the browser goes to the callback.
+ *   email, a code       `sendLoginCode`, then `loginWithCode`.
+ *   a new account       `sendLoginCode` proves the address, then `signup`.
+ *
+ * The credential calls go to `via` (this origin by default), which answers
+ * IAM's /v1/iam routes, so no IAM route is opened cross-origin. An account with
+ * a second factor finishes on the issuer's page: IAM holds that ceremony in a
+ * cookie on the issuer.
+ *
+ * Styled by `@hanzo/ui/auth.css`, which the host imports once.
+ */
+export type Mode = 'login' | 'signup';
+export interface Provider {
+    name: string;
+    type: string;
+}
+export interface SignInProps {
+    mode?: Mode;
+    /** The product's name on the card: `Hanzo`. */
+    site?: string;
+    /** Where IAM sends the browser with the code. Default `/auth/callback`. */
+    callbackPath?: string;
+    /** What is offered until IAM says. Default: Google and GitHub, the two Hanzo runs. */
+    providers?: Provider[];
+    /** The origin that answers IAM's credential calls. Default: this page's origin. */
+    via?: string;
+    /** Where the login page is, for the other-mode link. */
+    loginPath?: string;
+    signupPath?: string;
+    termsPath?: string;
+    privacyPath?: string;
+    /** A step the stream should hear: `signup_submitted{method}`, `signup_viewed{mode}`. */
+    track?: (name: string, props?: Record<string, unknown>) => void;
+    /** Decorates an address the browser is about to leave for (the visitor rides along). */
+    authorize?: (url: string) => string;
+    /** The way in the person chose, kept for the callback. */
+    onMethod?: (method: string, mode: Mode) => void;
+    /** The card is drawn (once). */
+    onShown?: () => void;
+}
+export declare function SignIn({ mode, site, callbackPath, providers, via, loginPath, signupPath, termsPath, privacyPath, track, authorize, onMethod, onShown, }: SignInProps): import("react").JSX.Element;
+//# sourceMappingURL=SignIn.d.ts.map

package/dist/auth/SignIn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignIn.d.ts","sourceRoot":"","sources":["../../src/auth/SignIn.tsx"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,CAAA;AAIrC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,sFAAsF;IACtF,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/D,wFAAwF;IACxF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAA;IAC/C,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB;AA4BD,wBAAgB,MAAM,CAAC,EACrB,IAAc,EACd,IAAc,EACd,YAA+B,EAC/B,SAAS,EACT,GAAG,EACH,SAAoB,EACpB,UAAsB,EACtB,SAAoB,EACpB,WAAwB,EACxB,KAAK,EACL,SAAoB,EACpB,QAAQ,EACR,OAAO,GACR,EAAE,WAAW,+BA0Ob"}

package/dist/auth/SignIn.js

@@ -0,0 +1,155 @@
+'use client';
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useMemo, useState } from 'react';
+import { IAM, SecondFactor } from '@hanzo/iam';
+import { useIam } from '@hanzo/iam/react';
+import { HanzoMark } from '@hanzogui/shell';
+const FIRST = {
+    password: true,
+    code: true,
+    signup: true,
+    providers: [
+        { name: 'provider-google', type: 'Google' },
+        { name: 'provider-github', type: 'GitHub' },
+    ],
+};
+const said = (err) => (err instanceof Error && err.message ? err.message : 'Something went wrong. Try again.');
+const GOOGLE = 'M12.48 10.92v3.28h7.84c-.24 1.84-.85 3.18-1.73 4.1-1.02 1.02-2.62 2.14-5.63 2.14-4.64 0-8.26-3.74-8.26-8.38s3.62-8.38 8.26-8.38c2.5 0 4.34.99 5.69 2.26l2.31-2.31C18.96 1.28 16.46 0 12.48 0 5.72 0 .04 5.5.04 12.28s5.68 12.28 12.44 12.28c3.65 0 6.4-1.2 8.55-3.44 2.21-2.21 2.9-5.32 2.9-7.83 0-.78-.06-1.5-.18-2.1z';
+const GITHUB = 'M12 .3a12 12 0 0 0-3.8 23.4c.6.1.8-.3.8-.6v-2c-3.3.7-4-1.6-4-1.6-.6-1.4-1.4-1.8-1.4-1.8-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.8 1.3 3.5 1 0-.8.4-1.3.7-1.6-2.7-.3-5.5-1.3-5.5-6 0-1.2.5-2.3 1.3-3.1-.2-.4-.6-1.6 0-3.2 0 0 1-.3 3.4 1.2a11.5 11.5 0 0 1 6 0c2.3-1.5 3.3-1.2 3.3-1.2.6 1.6.2 2.8.1 3.2.8.8 1.3 1.9 1.3 3.1 0 4.6-2.8 5.7-5.5 6 .4.4.8 1.1.8 2.2v3.3c0 .3.2.7.8.6A12 12 0 0 0 12 .3z';
+function Brand({ kind }) {
+    const d = kind === 'google' ? GOOGLE : kind === 'github' ? GITHUB : null;
+    return d ? (_jsx("svg", { width: 16, height: 16, viewBox: "0 0 24 24", fill: "currentColor", "aria-hidden": "true", children: _jsx("path", { d: d }) })) : null;
+}
+export function SignIn({ mode = 'login', site = 'Hanzo', callbackPath = '/auth/callback', providers, via, loginPath = '/login', signupPath = '/signup', termsPath = '/terms', privacyPath = '/privacy', track, authorize = (u) => u, onMethod, onShown, }) {
+    const { config, sdk } = useIam();
+    const [methods, setMethods] = useState(providers ? { ...FIRST, providers } : FIRST);
+    const [step, setStep] = useState('email');
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const [code, setCode] = useState('');
+    const [name, setName] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [wrong, setWrong] = useState(null);
+    const origin = via ?? (typeof window === 'undefined' ? '' : window.location.origin);
+    const iam = useMemo(() => new IAM({ ...config, proxyBaseUrl: origin || undefined, redirectUri: origin ? `${origin}${callbackPath}` : config.redirectUri }), [config, origin, callbackPath]);
+    useEffect(() => {
+        let live = true;
+        iam
+            .methods()
+            .then((m) => {
+            // A list with no provider in it is IAM saying none; one that failed to
+            // arrive keeps the ones Hanzo runs.
+            if (live)
+                setMethods(m);
+        })
+            .catch(() => { });
+        return () => {
+            live = false;
+        };
+    }, [iam]);
+    useEffect(() => {
+        track?.('signup_viewed', { mode });
+        onShown?.();
+        // Once, when the card first appears.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, []);
+    const signup = mode === 'signup';
+    function commit(method) {
+        onMethod?.(method, mode);
+        if (signup)
+            track?.('signup_submitted', { method });
+    }
+    /** The issuer's page, for what cannot be typed here, with the address filled in. */
+    const issuer = async () => {
+        window.location.replace(authorize(await sdk.getSigninUrl({ additionalParams: { login_hint: email.trim(), ...(signup ? { signup: 'true' } : {}) } })));
+    };
+    async function run(call) {
+        setBusy(true);
+        setWrong(null);
+        try {
+            const to = await call();
+            if (to)
+                window.location.assign(authorize(to));
+            else
+                setBusy(false);
+        }
+        catch (err) {
+            if (err instanceof SecondFactor) {
+                await issuer();
+                return;
+            }
+            setWrong(said(err));
+            setBusy(false);
+        }
+    }
+    function social(provider, kind) {
+        commit(kind.toLowerCase());
+        setBusy(true);
+        void sdk
+            .getSigninUrl({ additionalParams: { provider } })
+            .then((u) => window.location.replace(authorize(u)))
+            .catch((err) => {
+            setWrong(said(err));
+            setBusy(false);
+        });
+    }
+    async function sendCode() {
+        await run(async () => {
+            await iam.sendLoginCode(email.trim());
+            setCode('');
+            setStep('code');
+        });
+    }
+    function next(e) {
+        e.preventDefault();
+        const address = email.trim();
+        if (!address.includes('@')) {
+            setWrong('Enter your email address.');
+            return;
+        }
+        if (signup) {
+            void run(async () => {
+                await iam.sendLoginCode(address);
+                setStep('create');
+            });
+            return;
+        }
+        setWrong(null);
+        if (methods.password)
+            setStep('password');
+        else
+            void sendCode();
+    }
+    function finish(e) {
+        e.preventDefault();
+        const address = email.trim();
+        if (step === 'password') {
+            commit('password');
+            void run(() => iam.loginWithPassword(address, password));
+        }
+        else if (step === 'code') {
+            commit('code');
+            void run(() => iam.loginWithCode(address, code.trim()));
+        }
+        else if (step === 'create') {
+            commit('email');
+            void run(() => iam.signup({ email: address, password, code: code.trim(), name: name.trim() || undefined }));
+        }
+    }
+    const back = () => {
+        setStep('email');
+        setWrong(null);
+        setPassword('');
+        setCode('');
+    };
+    const query = typeof window === 'undefined' ? '' : window.location.search;
+    const title = signup ? `Create your ${site} account` : `Log in to ${site}`;
+    return (_jsxs("section", { className: "hz-signin", "aria-label": signup ? 'Sign up' : 'Log in', children: [_jsxs("div", { className: "hz-signin-card", children: [_jsxs("p", { className: "hz-signin-brand", children: [_jsx(HanzoMark, { size: 20 }), site] }), _jsx("h1", { className: "hz-signin-title", children: title }), step === 'email' ? (_jsxs(_Fragment, { children: [methods.providers.length ? (_jsx("div", { className: "hz-signin-social", children: methods.providers.map((p) => (_jsxs("button", { type: "button", className: "hz-action", onClick: () => social(p.name, p.type), disabled: busy, children: [_jsx(Brand, { kind: p.type.toLowerCase() }), "Continue with ", p.type] }, p.name))) })) : null, methods.providers.length ? _jsx("p", { className: "hz-signin-or", children: "or" }) : null, _jsxs("form", { onSubmit: next, noValidate: true, children: [_jsx(Field, { label: "Email", children: _jsx("input", { type: "email", name: "email", autoComplete: signup ? 'email' : 'username', value: email, onChange: (e) => setEmail(e.target.value), placeholder: "you@company.com", required: true, autoFocus: true }) }), _jsx(Wrong, { text: wrong }), _jsx("button", { type: "submit", className: "hz-action", "data-fill": "", disabled: busy, children: busy ? 'One moment…' : 'Continue' })] })] })) : (_jsxs("form", { onSubmit: finish, noValidate: true, children: [_jsxs("p", { className: "hz-signin-who", children: [_jsx("button", { type: "button", className: "hz-more", onClick: back, "aria-label": "Use another email", children: _jsx("svg", { width: 16, height: 16, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: 2, strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: _jsx("path", { d: "m12 19-7-7 7-7M19 12H5" }) }) }), _jsx("span", { children: email.trim() })] }), step === 'password' ? (_jsx(Field, { label: "Password", children: _jsx("input", { type: "password", name: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value), required: true, autoFocus: true }) })) : (_jsxs(_Fragment, { children: [_jsxs("p", { className: "hz-signin-note", children: ["We sent a code to ", email.trim(), ". It is good for a few minutes."] }), _jsx(Field, { label: "Code", children: _jsx("input", { name: "code", inputMode: "numeric", autoComplete: "one-time-code", value: code, onChange: (e) => setCode(e.target.value), required: true, autoFocus: true }) })] })), step === 'create' ? (_jsxs(_Fragment, { children: [_jsx(Field, { label: "Your name", children: _jsx("input", { name: "name", autoComplete: "name", value: name, onChange: (e) => setName(e.target.value) }) }), _jsx(Field, { label: "Password", children: _jsx("input", { type: "password", name: "password", autoComplete: "new-password", value: password, onChange: (e) => setPassword(e.target.value), required: true }) })] })) : null, _jsx(Wrong, { text: wrong }), _jsx("button", { type: "submit", className: "hz-action", "data-fill": "", disabled: busy, children: busy ? 'One moment…' : step === 'create' ? 'Create account' : 'Continue' }), step === 'password' && methods.code ? (_jsx("button", { type: "button", className: "hz-more hz-signin-alt", onClick: () => void sendCode(), disabled: busy, children: "Email me a code instead" })) : null, step !== 'password' ? (_jsx("button", { type: "button", className: "hz-more hz-signin-alt", onClick: () => void sendCode(), disabled: busy, children: "Send a new code" })) : null] })), signup ? (_jsxs("p", { className: "hz-signin-fine", children: ["By creating an account you agree to the ", _jsx("a", { href: termsPath, children: "Terms" }), " and the ", _jsx("a", { href: privacyPath, children: "Privacy Policy" }), "."] })) : null] }), _jsxs("p", { className: "hz-signin-else", children: [signup ? 'Have an account? ' : `New to ${site}? `, _jsx("a", { href: `${signup ? loginPath : signupPath}${query}`, children: signup ? 'Log in' : 'Create an account' })] })] }));
+}
+function Field({ label, children }) {
+    return (_jsxs("label", { className: "hz-signin-field", children: [_jsx("span", { children: label }), children] }));
+}
+function Wrong({ text }) {
+    return text ? (_jsx("p", { role: "alert", className: "hz-signin-wrong", children: text })) : null;
+}
+//# sourceMappingURL=SignIn.js.map

package/dist/auth/SignIn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignIn.js","sourceRoot":"","sources":["../../src/auth/SignIn.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAkC,MAAM,OAAO,CAAA;AACpF,OAAO,EAAE,GAAG,EAAE,YAAY,EAAgB,MAAM,YAAY,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AA4D3C,MAAM,KAAK,GAAY;IACrB,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE;QACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5C;CACF,CAAA;AAED,MAAM,IAAI,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAA;AAE/H,MAAM,MAAM,GACV,yTAAyT,CAAA;AAC3T,MAAM,MAAM,GACV,2YAA2Y,CAAA;AAE7Y,SAAS,KAAK,CAAC,EAAE,IAAI,EAAoB;IACvC,MAAM,CAAC,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,OAAO,CAAC,CAAC,CAAC,CAAC,CACT,cAAK,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YACpF,eAAM,CAAC,EAAE,CAAC,GAAI,GACV,CACP,CAAC,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EACrB,IAAI,GAAG,OAAO,EACd,IAAI,GAAG,OAAO,EACd,YAAY,GAAG,gBAAgB,EAC/B,SAAS,EACT,GAAG,EACH,SAAS,GAAG,QAAQ,EACpB,UAAU,GAAG,SAAS,EACtB,SAAS,GAAG,QAAQ,EACpB,WAAW,GAAG,UAAU,EACxB,KAAK,EACL,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACpB,QAAQ,EACR,OAAO,GACK;IACZ,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;IAChC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAU,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC5F,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAO,OAAO,CAAC,CAAA;IAC/C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnF,MAAM,GAAG,GAAG,OAAO,CACjB,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EACtI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAC/B,CAAA;IAED,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,IAAI,GAAG,IAAI,CAAA;QACf,GAAG;aACA,OAAO,EAAE;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACV,uEAAuE;YACvE,oCAAoC;YACpC,IAAI,IAAI;gBAAE,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClB,OAAO,GAAG,EAAE;YACV,IAAI,GAAG,KAAK,CAAA;QACd,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IAET,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,EAAE,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAClC,OAAO,EAAE,EAAE,CAAA;QACX,qCAAqC;QACrC,uDAAuD;IACzD,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAA;IAEhC,SAAS,MAAM,CAAC,MAAc;QAC5B,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACxB,IAAI,MAAM;YAAE,KAAK,EAAE,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,oFAAoF;IACpF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACvJ,CAAC,CAAA;IAED,KAAK,UAAU,GAAG,CAAC,IAAkC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAA;QACb,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,EAAE,CAAA;YACvB,IAAI,EAAE;gBAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;;gBACxC,OAAO,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;gBAChC,MAAM,MAAM,EAAE,CAAA;gBACd,OAAM;YACR,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YACnB,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,QAAgB,EAAE,IAAY;QAC5C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;QACb,KAAK,GAAG;aACL,YAAY,CAAC,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;aAChD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;aAClD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YACnB,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,CAAC,CAAA;IACN,CAAC;IAED,KAAK,UAAU,QAAQ;QACrB,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YACrC,OAAO,CAAC,EAAE,CAAC,CAAA;YACX,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,SAAS,IAAI,CAAC,CAAY;QACxB,CAAC,CAAC,cAAc,EAAE,CAAA;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,2BAA2B,CAAC,CAAA;YACrC,OAAM;QACR,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;gBAClB,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;gBAChC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACnB,CAAC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,UAAU,CAAC,CAAA;;YACpC,KAAK,QAAQ,EAAE,CAAA;IACtB,CAAC;IAED,SAAS,MAAM,CAAC,CAAY;QAC1B,CAAC,CAAC,cAAc,EAAE,CAAA;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,UAAU,CAAC,CAAA;YAClB,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC1D,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,CAAA;YACd,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,OAAO,CAAC,CAAA;YACf,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC,CAAA;QAC7G,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,OAAO,CAAC,OAAO,CAAC,CAAA;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,WAAW,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,EAAE,CAAC,CAAA;IACb,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,IAAI,UAAU,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAA;IAE1E,OAAO,CACL,mBAAS,SAAS,EAAC,WAAW,gBAAa,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,aACtE,eAAK,SAAS,EAAC,gBAAgB,aAC7B,aAAG,SAAS,EAAC,iBAAiB,aAC5B,KAAC,SAAS,IAAC,IAAI,EAAE,EAAE,GAAI,EACtB,IAAI,IACH,EACJ,aAAI,SAAS,EAAC,iBAAiB,YAAE,KAAK,GAAM,EAE3C,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAClB,8BACG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAC1B,cAAK,SAAS,EAAC,kBAAkB,YAC9B,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC5B,kBAAqB,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,WAAW,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,aAC5G,KAAC,KAAK,IAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAI,oBACtB,CAAC,CAAC,IAAI,KAFV,CAAC,CAAC,IAAI,CAGV,CACV,CAAC,GACE,CACP,CAAC,CAAC,CAAC,IAAI,EACP,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,YAAG,SAAS,EAAC,cAAc,mBAAO,CAAC,CAAC,CAAC,IAAI,EACrE,gBAAM,QAAQ,EAAE,IAAI,EAAE,UAAU,mBAC9B,KAAC,KAAK,IAAC,KAAK,EAAC,OAAO,YAClB,gBACE,IAAI,EAAC,OAAO,EACZ,IAAI,EAAC,OAAO,EACZ,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAC3C,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACzC,WAAW,EAAC,iBAAiB,EAC7B,QAAQ,QACR,SAAS,SACT,GACI,EACR,KAAC,KAAK,IAAC,IAAI,EAAE,KAAK,GAAI,EACtB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,WAAW,eAAW,EAAE,EAAC,QAAQ,EAAE,IAAI,YACpE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,GAC3B,IACJ,IACN,CACJ,CAAC,CAAC,CAAC,CACF,gBAAM,QAAQ,EAAE,MAAM,EAAE,UAAU,mBAChC,aAAG,SAAS,EAAC,eAAe,aAC1B,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,SAAS,EAAC,OAAO,EAAE,IAAI,gBAAa,mBAAmB,YACrF,cAAK,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAE,CAAC,EAAE,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,YAC/J,eAAM,CAAC,EAAC,wBAAwB,GAAG,GAC/B,GACC,EACT,yBAAO,KAAK,CAAC,IAAI,EAAE,GAAQ,IACzB,EACH,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CACrB,KAAC,KAAK,IAAC,KAAK,EAAC,UAAU,YACrB,gBAAO,IAAI,EAAC,UAAU,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,kBAAkB,EAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,QAAC,SAAS,SAAG,GACrJ,CACT,CAAC,CAAC,CAAC,CACF,8BACE,aAAG,SAAS,EAAC,gBAAgB,mCAAoB,KAAK,CAAC,IAAI,EAAE,uCAAoC,EACjG,KAAC,KAAK,IAAC,KAAK,EAAC,MAAM,YACjB,gBAAO,IAAI,EAAC,MAAM,EAAC,SAAS,EAAC,SAAS,EAAC,YAAY,EAAC,eAAe,EAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,QAAC,SAAS,SAAG,GAC1I,IACP,CACJ,EACA,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CACnB,8BACE,KAAC,KAAK,IAAC,KAAK,EAAC,WAAW,YACtB,gBAAO,IAAI,EAAC,MAAM,EAAC,YAAY,EAAC,MAAM,EAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,GAC1F,EACR,KAAC,KAAK,IAAC,KAAK,EAAC,UAAU,YACrB,gBAAO,IAAI,EAAC,UAAU,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,cAAc,EAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,SAAG,GACvI,IACP,CACJ,CAAC,CAAC,CAAC,IAAI,EACR,KAAC,KAAK,IAAC,IAAI,EAAE,KAAK,GAAI,EACtB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,WAAW,eAAW,EAAE,EAAC,QAAQ,EAAE,IAAI,YACpE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,GAClE,EACR,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CACrC,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,uBAAuB,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,wCAE7F,CACV,CAAC,CAAC,CAAC,IAAI,EACP,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CACrB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,uBAAuB,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,gCAE7F,CACV,CAAC,CAAC,CAAC,IAAI,IACH,CACR,EAEA,MAAM,CAAC,CAAC,CAAC,CACR,aAAG,SAAS,EAAC,gBAAgB,yDACa,YAAG,IAAI,EAAE,SAAS,sBAAW,eAAS,YAAG,IAAI,EAAE,WAAW,+BAAoB,SACpH,CACL,CAAC,CAAC,CAAC,IAAI,IACJ,EACN,aAAG,SAAS,EAAC,gBAAgB,aAC1B,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,EAClD,YAAG,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,KAAK,EAAE,YAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,GAAK,IAClG,IACI,CACX,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA0C;IACxE,OAAO,CACL,iBAAO,SAAS,EAAC,iBAAiB,aAChC,yBAAO,KAAK,GAAQ,EACnB,QAAQ,IACH,CACT,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAE,IAAI,EAA2B;IAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,CACZ,YAAG,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,iBAAiB,YACxC,IAAI,GACH,CACL,CAAC,CAAC,CAAC,IAAI,CAAA;AACV,CAAC"}

package/dist/auth/index.cjs

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refresher = exports.live = exports.bearer = exports.useSignOut = exports.signOut = exports.SignIn = void 0;
+/**
+ * Signing in, signing out, and the session, for every Hanzo site: IAM answers
+ * (/v1/iam), the site draws. `@hanzo/ui/auth.css` styles it.
+ */
+var SignIn_1 = require("./SignIn.cjs");
+Object.defineProperty(exports, "SignIn", { enumerable: true, get: function () { return SignIn_1.SignIn; } });
+var signout_1 = require("./signout.cjs");
+Object.defineProperty(exports, "signOut", { enumerable: true, get: function () { return signout_1.signOut; } });
+Object.defineProperty(exports, "useSignOut", { enumerable: true, get: function () { return signout_1.useSignOut; } });
+var session_1 = require("./session.cjs");
+Object.defineProperty(exports, "bearer", { enumerable: true, get: function () { return session_1.bearer; } });
+Object.defineProperty(exports, "live", { enumerable: true, get: function () { return session_1.live; } });
+Object.defineProperty(exports, "refresher", { enumerable: true, get: function () { return session_1.refresher; } });

package/dist/auth/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Signing in, signing out, and the session, for every Hanzo site: IAM answers
+ * (/v1/iam), the site draws. `@hanzo/ui/auth.css` styles it.
+ */
+export { SignIn, type Mode, type Provider, type SignInProps } from './SignIn.js';
+export { signOut, useSignOut, type SignOutOptions } from './signout.js';
+export { bearer, live, refresher } from './session.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA"}

package/dist/auth/index.js

@@ -0,0 +1,8 @@
+/**
+ * Signing in, signing out, and the session, for every Hanzo site: IAM answers
+ * (/v1/iam), the site draws. `@hanzo/ui/auth.css` styles it.
+ */
+export { SignIn } from './SignIn.js';
+export { signOut, useSignOut } from './signout.js';
+export { bearer, live, refresher } from './session.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAA8C,MAAM,UAAU,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAuB,MAAM,WAAW,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA"}

package/dist/auth/session.cjs

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * Where the IAM session is kept, named once. The `@hanzo/iam` SDK owns these
+ * keys (`hanzo_iam_`-prefixed) and publishes no plain-module reader, so this is
+ * the one derivation every surface reads the bearer through.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refresher = exports.bearer = void 0;
+exports.live = live;
+const PREFIX = 'hanzo_iam_';
+const ACCESS = `${PREFIX}access_token`;
+const REFRESH = `${PREFIX}refresh_token`;
+const EXPIRES = `${PREFIX}expires_at`;
+const read = (key) => {
+    if (typeof window === 'undefined')
+        return null;
+    try {
+        return window.localStorage.getItem(key);
+    }
+    catch {
+        return null;
+    }
+};
+/** The access token, or null. Storage that throws answers null. */
+const bearer = () => read(ACCESS);
+exports.bearer = bearer;
+/** The refresh token, or null. */
+const refresher = () => read(REFRESH);
+exports.refresher = refresher;
+/** Whether the stored access token is present and not past the expiry the SDK wrote beside it. */
+function live() {
+    const expires = read(EXPIRES);
+    return Boolean((0, exports.bearer)()) && (!expires || Date.now() < Number(expires));
+}

package/dist/auth/session.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Where the IAM session is kept, named once. The `@hanzo/iam` SDK owns these
+ * keys (`hanzo_iam_`-prefixed) and publishes no plain-module reader, so this is
+ * the one derivation every surface reads the bearer through.
+ */
+/** The access token, or null. Storage that throws answers null. */
+export declare const bearer: () => string | null;
+/** The refresh token, or null. */
+export declare const refresher: () => string | null;
+/** Whether the stored access token is present and not past the expiry the SDK wrote beside it. */
+export declare function live(): boolean;
+//# sourceMappingURL=session.d.ts.map

package/dist/auth/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH,mEAAmE;AACnE,eAAO,MAAM,MAAM,QAAO,MAAM,GAAG,IAAoB,CAAA;AAEvD,kCAAkC;AAClC,eAAO,MAAM,SAAS,QAAO,MAAM,GAAG,IAAqB,CAAA;AAE3D,kGAAkG;AAClG,wBAAgB,IAAI,IAAI,OAAO,CAG9B"}

package/dist/auth/session.js

@@ -0,0 +1,29 @@
+/**
+ * Where the IAM session is kept, named once. The `@hanzo/iam` SDK owns these
+ * keys (`hanzo_iam_`-prefixed) and publishes no plain-module reader, so this is
+ * the one derivation every surface reads the bearer through.
+ */
+const PREFIX = 'hanzo_iam_';
+const ACCESS = `${PREFIX}access_token`;
+const REFRESH = `${PREFIX}refresh_token`;
+const EXPIRES = `${PREFIX}expires_at`;
+const read = (key) => {
+    if (typeof window === 'undefined')
+        return null;
+    try {
+        return window.localStorage.getItem(key);
+    }
+    catch {
+        return null;
+    }
+};
+/** The access token, or null. Storage that throws answers null. */
+export const bearer = () => read(ACCESS);
+/** The refresh token, or null. */
+export const refresher = () => read(REFRESH);
+/** Whether the stored access token is present and not past the expiry the SDK wrote beside it. */
+export function live() {
+    const expires = read(EXPIRES);
+    return Boolean(bearer()) && (!expires || Date.now() < Number(expires));
+}
+//# sourceMappingURL=session.js.map

package/dist/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,GAAG,YAAY,CAAA;AAC3B,MAAM,MAAM,GAAG,GAAG,MAAM,cAAc,CAAA;AACtC,MAAM,OAAO,GAAG,GAAG,MAAM,eAAe,CAAA;AACxC,MAAM,OAAO,GAAG,GAAG,MAAM,YAAY,CAAA;AAErC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE;IAC1C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAkB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAEvD,kCAAkC;AAClC,MAAM,CAAC,MAAM,SAAS,GAAG,GAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAE3D,kGAAkG;AAClG,MAAM,UAAU,IAAI;IAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;AACxE,CAAC"}

package/dist/auth/signout.cjs

@@ -0,0 +1,49 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signOut = signOut;
+exports.useSignOut = useSignOut;
+const react_1 = require("react");
+const react_2 = require("@hanzo/iam/react");
+const session_1 = require("./session.cjs");
+/** RFC 7009: hand one token back to IAM's /v1/iam route; a refusal is not the person's problem. */
+async function revoke(origin, token, hint, access, clientId) {
+    if (!token)
+        return;
+    try {
+        await fetch(`${origin}/v1/iam/oauth/revoke`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded', ...(access ? { Authorization: `Bearer ${access}` } : {}) },
+            body: new URLSearchParams({ token, token_type_hint: hint, ...(clientId ? { client_id: clientId } : {}) }).toString(),
+        });
+    }
+    catch {
+        // The local clear below has already signed the machine out.
+    }
+}
+/**
+ * Sign out: hand both tokens back to IAM through its /v1/iam revocation route
+ * (a same-site call, refresh token first, since it is the one that mints more),
+ * clear the local session, and land on the site's own `/login?from=logout`.
+ * IAM's own logout page is never visited.
+ */
+async function signOut(iam, { via, to = '/login?from=logout', clientId, track } = {}) {
+    const origin = via ?? window.location.origin;
+    const access = (0, session_1.bearer)();
+    const refresh = (0, session_1.refresher)();
+    iam.clearTokens();
+    try {
+        await revoke(origin, refresh, 'refresh_token', access, clientId);
+        await revoke(origin, access, 'access_token', access, clientId);
+    }
+    finally {
+        track?.('logout_completed', {});
+        window.location.assign(to);
+    }
+}
+/** `signOut` bound to the page's IAM client. */
+function useSignOut(options = {}) {
+    const { sdk, config } = (0, react_2.useIam)();
+    const { via, to, track, clientId = config.clientId } = options;
+    return (0, react_1.useCallback)(() => signOut(sdk, { via, to, track, clientId }), [sdk, via, to, track, clientId]);
+}

package/dist/auth/signout.d.ts

@@ -0,0 +1,21 @@
+import type { IAM } from '@hanzo/iam';
+export interface SignOutOptions {
+    /** The origin that answers IAM's /v1/iam routes. Default: this page's origin. */
+    via?: string;
+    /** Where the person lands. Default `/login?from=logout`: the site's own sign-in hero. */
+    to?: string;
+    /** The IAM client id the tokens were minted for. */
+    clientId?: string;
+    /** `logout_completed` reaches the stream here. */
+    track?: (name: string, props?: Record<string, unknown>) => void;
+}
+/**
+ * Sign out: hand both tokens back to IAM through its /v1/iam revocation route
+ * (a same-site call, refresh token first, since it is the one that mints more),
+ * clear the local session, and land on the site's own `/login?from=logout`.
+ * IAM's own logout page is never visited.
+ */
+export declare function signOut(iam: IAM, { via, to, clientId, track }?: SignOutOptions): Promise<void>;
+/** `signOut` bound to the page's IAM client. */
+export declare function useSignOut(options?: SignOutOptions): () => Promise<void>;
+//# sourceMappingURL=signout.d.ts.map

package/dist/auth/signout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signout.d.ts","sourceRoot":"","sources":["../../src/auth/signout.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAIrC,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,yFAAyF;IACzF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CAChE;AAgBD;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAY/H;AAED,gDAAgD;AAChD,wBAAgB,UAAU,CAAC,OAAO,GAAE,cAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAI5E"}

package/dist/auth/signout.js

@@ -0,0 +1,46 @@
+'use client';
+import { useCallback } from 'react';
+import { useIam } from '@hanzo/iam/react';
+import { bearer, refresher } from './session.js';
+/** RFC 7009: hand one token back to IAM's /v1/iam route; a refusal is not the person's problem. */
+async function revoke(origin, token, hint, access, clientId) {
+    if (!token)
+        return;
+    try {
+        await fetch(`${origin}/v1/iam/oauth/revoke`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded', ...(access ? { Authorization: `Bearer ${access}` } : {}) },
+            body: new URLSearchParams({ token, token_type_hint: hint, ...(clientId ? { client_id: clientId } : {}) }).toString(),
+        });
+    }
+    catch {
+        // The local clear below has already signed the machine out.
+    }
+}
+/**
+ * Sign out: hand both tokens back to IAM through its /v1/iam revocation route
+ * (a same-site call, refresh token first, since it is the one that mints more),
+ * clear the local session, and land on the site's own `/login?from=logout`.
+ * IAM's own logout page is never visited.
+ */
+export async function signOut(iam, { via, to = '/login?from=logout', clientId, track } = {}) {
+    const origin = via ?? window.location.origin;
+    const access = bearer();
+    const refresh = refresher();
+    iam.clearTokens();
+    try {
+        await revoke(origin, refresh, 'refresh_token', access, clientId);
+        await revoke(origin, access, 'access_token', access, clientId);
+    }
+    finally {
+        track?.('logout_completed', {});
+        window.location.assign(to);
+    }
+}
+/** `signOut` bound to the page's IAM client. */
+export function useSignOut(options = {}) {
+    const { sdk, config } = useIam();
+    const { via, to, track, clientId = config.clientId } = options;
+    return useCallback(() => signOut(sdk, { via, to, track, clientId }), [sdk, via, to, track, clientId]);
+}
+//# sourceMappingURL=signout.js.map

package/dist/auth/signout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signout.js","sourceRoot":"","sources":["../../src/auth/signout.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAEnC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAa7C,mGAAmG;AACnG,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,KAAoB,EAAE,IAAY,EAAE,MAAqB,EAAE,QAAiB;IAChH,IAAI,CAAC,KAAK;QAAE,OAAM;IAClB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,MAAM,sBAAsB,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC1H,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;SACrH,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAmB,EAAE;IAC9G,MAAM,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IACvB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAA;IAC3B,GAAG,CAAC,WAAW,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAChE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAChE,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;QAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,UAAU,CAAC,OAAO,GAAmB,EAAE;IACrD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;IAChC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC9D,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;AACvG,CAAC"}

package/dist/auth.css

@@ -0,0 +1,40 @@
+/* The sign-in card (SignIn, @hanzo/ui/auth): one narrow card in the page's
+   chrome. Reads the theme's tokens, so light and dark need no second copy.
+   Imported once by every site that draws it. */
+.hz-signin { display: grid; justify-items: center; gap: 20px; min-height: 560px; padding: 112px 16px 96px; }
+.hz-signin-card { width: 100%; max-width: 400px; padding: 24px; border: 1px solid var(--border); border-radius: var(--radius-xl, 16px); background: var(--background); }
+@media (min-width: 640px) {
+  .hz-signin { padding-top: 136px; }
+  .hz-signin-card { padding: 32px; }
+}
+.hz-signin-brand { display: inline-flex; align-items: center; gap: 10px; margin: 0 0 24px; font-size: var(--text-lg, 18px); font-weight: 500; color: var(--foreground); }
+.hz-signin-title { margin: 0 0 24px; font-size: var(--text-2xl, 24px); font-weight: 500; line-height: 1.2; color: var(--foreground); }
+.hz-signin-social { display: grid; gap: 10px; }
+.hz-action {
+  display: inline-flex; align-items: center; justify-content: center; gap: 8px; min-height: 44px; padding-inline: 24px;
+  border: 1px solid var(--border); border-radius: var(--radius-full, 9999px); font: inherit; font-size: var(--text-sm, 14px); font-weight: 500;
+  color: var(--foreground); background: var(--secondary); cursor: pointer; text-decoration: none;
+  transition: background 150ms ease-in-out, opacity 150ms ease-in-out;
+}
+.hz-action:hover { background: var(--accent, var(--secondary)); }
+.hz-action[data-fill] { border: 0; background: var(--foreground); color: var(--background); }
+.hz-action[data-fill]:hover { opacity: 0.92; background: var(--foreground); }
+.hz-action:disabled { opacity: 0.6; cursor: default; }
+.hz-action:focus-visible, .hz-more:focus-visible { outline: 2px solid var(--foreground); outline-offset: 2px; }
+.hz-signin-social .hz-action, .hz-signin-card form > .hz-action { width: 100%; }
+.hz-signin-or { display: flex; align-items: center; gap: 12px; margin: 20px 0; font-size: var(--text-sm, 14px); color: var(--muted-foreground); }
+.hz-signin-or::before, .hz-signin-or::after { content: ''; flex: 1; height: 1px; background: var(--border); }
+.hz-signin-card form { display: grid; gap: 16px; }
+.hz-signin-field { display: grid; gap: 8px; font-size: var(--text-sm, 14px); font-weight: 500; color: var(--foreground); }
+.hz-signin-field input { width: 100%; padding: 12px 14px; border: 1px solid var(--border); border-radius: var(--radius-lg, 12px); background: var(--secondary); color: var(--foreground); font: inherit; font-size: var(--text-base, 16px); font-weight: 400; }
+.hz-signin-field input:focus-visible { outline: 2px solid var(--foreground); outline-offset: 1px; }
+.hz-signin-who { display: flex; align-items: center; gap: 8px; margin: 0; min-width: 0; font-size: var(--text-sm, 14px); color: var(--foreground); }
+.hz-signin-who span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.hz-more { display: inline-flex; align-items: center; padding: 0; border: 0; background: none; color: var(--foreground); font: inherit; font-size: var(--text-sm, 14px); font-weight: 500; cursor: pointer; }
+.hz-signin-who .hz-more { min-width: 44px; min-height: 44px; margin: -12px 0 -12px -12px; justify-content: center; }
+.hz-signin-alt { justify-self: center; justify-content: center; min-height: 44px; color: var(--muted-foreground); }
+.hz-signin-note { margin: 0; font-size: var(--text-sm, 14px); color: var(--muted-foreground); }
+.hz-signin-wrong { margin: 0; font-size: var(--text-sm, 14px); color: var(--foreground); }
+.hz-signin-fine { margin: 20px 0 0; font-size: var(--text-xs, 12px); color: var(--muted-foreground); }
+.hz-signin-fine a, .hz-signin-else a { color: var(--foreground); text-decoration: underline; text-underline-offset: 3px; }
+.hz-signin-else { margin: 0; font-size: var(--text-sm, 14px); color: var(--muted-foreground); }

package/dist/gallery.html

@@ -1,4 +1,4 @@
-<!doctype html><html lang="en" class="t_dark"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>@hanzo/ui 8.27.23</title><style>/* @hanzo/ui — generated by scripts/gen-css.mjs. Do not edit. */
+<!doctype html><html lang="en" class="t_dark"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>@hanzo/ui 8.27.25</title><style>/* @hanzo/ui — generated by scripts/gen-css.mjs. Do not edit. */
 :root { --hanzo-ui-styles: 1; }
 /* Hanzo Design System — the entry point. Import THIS one file.
  *

package/dist/models/ModelSelector.cjs

@@ -63,12 +63,14 @@ function ModelSelector({ models, value, onChange, disabled = false, size = 'md',
                                         const label = m.label ?? m.id;
                                         const ctx = fmtContext(m.context_window);
                                         const locked = m.access === 'research';
-                                        return ((0, jsx_runtime_1.jsxs)(gui_2.CommandItem, { value: `${group.family} ${label} ${m.id}`, disabled: locked, "aria-disabled": locked || undefined, onSelect: () => {
+                                        return ((0, jsx_runtime_1.jsxs)(gui_2.CommandItem, { value: `${group.family} ${label} ${m.id}`, disabled: locked, "aria-disabled": locked ? false : undefined, "data-access": m.access, 
+                                            // The name is muted, not the row: its link has to read as a link.
+                                            opacity: 1, onSelect: () => {
                                                 onChange(m.id);
                                                 setOpen(false);
-                                            }, children: [(0, jsx_runtime_1.jsx)(lucide_icons_2_1.Check, { size: 14, shrink: 0, opacity: m.id === value ? 1 : 0 }), (0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, size: "$2", children: label }), m.premium && ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { size: "$2", color: "$color11", "aria-label": "Premium", children: "\u2726" })), locked ? ((0, jsx_runtime_1.jsxs)(gui_1.XStack, { ml: "auto", shrink: 0, pl: "$2", gap: "$2", items: "center", children: [(0, jsx_runtime_1.jsx)(gui_1.SizableText, { size: "$1", color: "$color11", children: "Research preview" }), m.request && ((0, jsx_runtime_1.jsx)(gui_2.Anchor, { href: m.request, target: "_blank", rel: "noopener noreferrer", size: "$1", color: "$color12", textDecorationLine: "underline", 
-                                                            // The row takes no pointer while disabled; its link does.
-                                                            pointerEvents: "auto", onKeyDown: (e) => e.stopPropagation(), children: "Request access" }))] })) : ctx && ((0, jsx_runtime_1.jsx)(gui_1.XStack, { ml: "auto", shrink: 0, pl: "$2", children: (0, jsx_runtime_1.jsx)(gui_1.SizableText, { size: "$1", color: "$color11", fontVariant: ['tabular-nums'], children: ctx }) }))] }, m.id));
+                                            }, children: [(0, jsx_runtime_1.jsxs)(gui_1.XStack, { flex: 1, minW: 0, items: "center", gap: "$2", "aria-disabled": locked || undefined, opacity: locked ? 0.5 : 1, children: [(0, jsx_runtime_1.jsx)(lucide_icons_2_1.Check, { size: 14, shrink: 0, opacity: m.id === value ? 1 : 0 }), (0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, size: "$2", children: label }), m.premium && ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { size: "$2", color: "$color11", "aria-label": "Premium", children: "\u2726" })), locked ? ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { ml: "auto", shrink: 0, pl: "$2", size: "$1", color: "$color11", children: "Research preview" })) : ctx && ((0, jsx_runtime_1.jsx)(gui_1.XStack, { ml: "auto", shrink: 0, pl: "$2", children: (0, jsx_runtime_1.jsx)(gui_1.SizableText, { size: "$1", color: "$color11", fontVariant: ['tabular-nums'], children: ctx }) }))] }), locked && m.request && ((0, jsx_runtime_1.jsx)(gui_2.Anchor, { href: m.request, target: "_blank", rel: "noopener noreferrer", shrink: 0, size: "$1", color: "$color12", textDecorationLine: "underline", 
+                                                    // The row takes no pointer while disabled; its link does.
+                                                    pointerEvents: "auto", onKeyDown: (e) => e.stopPropagation(), children: "Request access" }))] }, m.id));
                                     }) }, group.family)))] })] }) })] }));
 }
 exports.default = ModelSelector;

package/dist/models/ModelSelector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ModelSelector.d.ts","sourceRoot":"","sources":["../../src/models/ModelSelector.tsx"],"names":[],"mappings":"AAoBA,OAAO,EAAmD,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAenG,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,iBAAiB,EAAE,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,MAAM,EACN,KAAK,EACL,QAAQ,EACR,QAAgB,EAChB,IAAW,EACX,WAA4B,EAC5B,QAAe,EACf,SAAS,EACT,IAAI,EAAE,QAAQ,EACd,YAAY,GACb,EAAE,kBAAkB,+BAuHpB;eAEc,aAAa"}
+{"version":3,"file":"ModelSelector.d.ts","sourceRoot":"","sources":["../../src/models/ModelSelector.tsx"],"names":[],"mappings":"AAoBA,OAAO,EAAmD,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAenG,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,iBAAiB,EAAE,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,MAAM,EACN,KAAK,EACL,QAAQ,EACR,QAAgB,EAChB,IAAW,EACX,WAA4B,EAC5B,QAAe,EACf,SAAS,EACT,IAAI,EAAE,QAAQ,EACd,YAAY,GACb,EAAE,kBAAkB,+BAqIpB;eAEc,aAAa"}

package/dist/models/ModelSelector.js

@@ -60,12 +60,14 @@ export function ModelSelector({ models, value, onChange, disabled = false, size
                                         const label = m.label ?? m.id;
                                         const ctx = fmtContext(m.context_window);
                                         const locked = m.access === 'research';
-                                        return (_jsxs(CommandItem, { value: `${group.family} ${label} ${m.id}`, disabled: locked, "aria-disabled": locked || undefined, onSelect: () => {
+                                        return (_jsxs(CommandItem, { value: `${group.family} ${label} ${m.id}`, disabled: locked, "aria-disabled": locked ? false : undefined, "data-access": m.access, 
+                                            // The name is muted, not the row: its link has to read as a link.
+                                            opacity: 1, onSelect: () => {
                                                 onChange(m.id);
                                                 setOpen(false);
-                                            }, children: [_jsx(Check, { size: 14, shrink: 0, opacity: m.id === value ? 1 : 0 }), _jsx(SizableText, { numberOfLines: 1, size: "$2", children: label }), m.premium && (_jsx(SizableText, { size: "$2", color: "$color11", "aria-label": "Premium", children: "\u2726" })), locked ? (_jsxs(XStack, { ml: "auto", shrink: 0, pl: "$2", gap: "$2", items: "center", children: [_jsx(SizableText, { size: "$1", color: "$color11", children: "Research preview" }), m.request && (_jsx(Anchor, { href: m.request, target: "_blank", rel: "noopener noreferrer", size: "$1", color: "$color12", textDecorationLine: "underline", 
-                                                            // The row takes no pointer while disabled; its link does.
-                                                            pointerEvents: "auto", onKeyDown: (e) => e.stopPropagation(), children: "Request access" }))] })) : ctx && (_jsx(XStack, { ml: "auto", shrink: 0, pl: "$2", children: _jsx(SizableText, { size: "$1", color: "$color11", fontVariant: ['tabular-nums'], children: ctx }) }))] }, m.id));
+                                            }, children: [_jsxs(XStack, { flex: 1, minW: 0, items: "center", gap: "$2", "aria-disabled": locked || undefined, opacity: locked ? 0.5 : 1, children: [_jsx(Check, { size: 14, shrink: 0, opacity: m.id === value ? 1 : 0 }), _jsx(SizableText, { numberOfLines: 1, size: "$2", children: label }), m.premium && (_jsx(SizableText, { size: "$2", color: "$color11", "aria-label": "Premium", children: "\u2726" })), locked ? (_jsx(SizableText, { ml: "auto", shrink: 0, pl: "$2", size: "$1", color: "$color11", children: "Research preview" })) : ctx && (_jsx(XStack, { ml: "auto", shrink: 0, pl: "$2", children: _jsx(SizableText, { size: "$1", color: "$color11", fontVariant: ['tabular-nums'], children: ctx }) }))] }), locked && m.request && (_jsx(Anchor, { href: m.request, target: "_blank", rel: "noopener noreferrer", shrink: 0, size: "$1", color: "$color12", textDecorationLine: "underline", 
+                                                    // The row takes no pointer while disabled; its link does.
+                                                    pointerEvents: "auto", onKeyDown: (e) => e.stopPropagation(), children: "Request access" }))] }, m.id));
                                     }) }, group.family)))] })] }) })] }));
 }
 export default ModelSelector;

package/dist/models/ModelSelector.js.map

@@ -1 +1 @@
-{"version":3,"file":"ModelSelector.js","sourceRoot":"","sources":["../../src/models/ModelSelector.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACzC,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAC1B,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EACL,MAAM,EACN,MAAM,EACN,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,mBAAmB,EAA0B,MAAM,WAAW,CAAA;AAEnG,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,mEAAmE;AACnE,MAAM,KAAK,GAAG,GAAG,CAAA;AACjB,MAAM,KAAK,GAAG,GAAG,CAAA;AAEjB,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,GAAG,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC3F,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IACpD,OAAO,GAAG,GAAG,EAAE,CAAA;AACjB,CAAC;AAiBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,KAAK,EACL,QAAQ,EACR,QAAQ,GAAG,KAAK,EAChB,IAAI,GAAG,IAAI,EACX,WAAW,GAAG,cAAc,EAC5B,QAAQ,GAAG,IAAI,EACf,SAAS,EACT,IAAI,EAAE,QAAQ,EACd,YAAY,GACO;IACnB,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,QAAQ,IAAI,GAAG,CAAA;IAC5B,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,EAAE;QAChC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QACxC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC,CAAA;IACD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE3C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACjG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAA;IAEpD,8EAA8E;IAC9E,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAEhE,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,CAAA;IAE1B,OAAO,CACL,MAAC,OAAO,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,aAKxC,KAAC,MAAM,IAAC,QAAQ,EAAE,CAAC,CAAM,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YACnE,KAAC,cAAc,IAAC,OAAO,kBACrB,MAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC7B,IAAI,EAAC,UAAU,mBACA,IAAI,EACnB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAC,YAAY,KAChB,EAAE,CAAC,SAAS,CAAC,aAEnB,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAC,UAAU,YACtE,aAAa,GACF,EACb,cAAc,IAAI,CACjB,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAC,UAAU,YACtE,cAAc,GACH,CACf,EACC,KAAC,cAAc,IAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAC,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAI,IACpE,GACM,GACV,EACT,KAAC,cAAc,IAAC,KAAK,EAAC,OAAO,EAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,YAClE,MAAC,OAAO,eACL,UAAU,IAAI,KAAC,YAAY,IAAC,WAAW,EAAC,qBAAgB,GAAG,EAC5D,MAAC,WAAW,IAAC,IAAI,EAAE,KAAK,aACtB,KAAC,YAAY,mCAAgC,EAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACrB,KAAC,YAAY,IAAoB,OAAO,EAAE,KAAK,CAAC,MAAM,YACnD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wCACtB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAA;wCAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;wCACxC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,CAAA;wCACtC,OAAO,CACL,MAAC,WAAW,IAEV,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EACzC,QAAQ,EAAE,MAAM,mBACD,MAAM,IAAI,SAAS,EAClC,QAAQ,EAAE,GAAG,EAAE;gDACb,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gDACd,OAAO,CAAC,KAAK,CAAC,CAAA;4CAChB,CAAC,aAED,KAAC,KAAK,IAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAI,EAC/D,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACrC,KAAK,GACM,EACb,CAAC,CAAC,OAAO,IAAI,CACZ,KAAC,WAAW,IAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,gBAAY,SAAS,uBAE9C,CACf,EACA,MAAM,CAAC,CAAC,CAAC,CACR,MAAC,MAAM,IAAC,EAAE,EAAC,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAC,IAAI,EAAC,GAAG,EAAC,IAAI,EAAC,KAAK,EAAC,QAAQ,aAC1D,KAAC,WAAW,IAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,iCAEzB,EACb,CAAC,CAAC,OAAO,IAAI,CACZ,KAAC,MAAM,IACL,IAAI,EAAE,CAAC,CAAC,OAAO,EACf,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,EACzB,IAAI,EAAC,IAAI,EACT,KAAK,EAAC,UAAU,EAChB,kBAAkB,EAAC,WAAW;4DAC9B,0DAA0D;4DAC1D,aAAa,EAAC,MAAM,EACpB,SAAS,EAAE,CAAC,CAAkC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,+BAG/D,CACV,IACM,CACV,CAAC,CAAC,CAAC,GAAG,IAAI,CACT,KAAC,MAAM,IAAC,EAAE,EAAC,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAC,IAAI,YAClC,KAAC,WAAW,IAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,EAAC,WAAW,EAAE,CAAC,cAAc,CAAC,YAClE,GAAG,GACQ,GACP,CACV,KA7CI,CAAC,CAAC,EAAE,CA8CG,CACf,CAAA;oCACH,CAAC,CAAC,IAvDe,KAAK,CAAC,MAAM,CAwDhB,CAChB,CAAC,IACU,IACN,GACK,IACT,CACX,CAAA;AACH,CAAC;AAED,eAAe,aAAa,CAAA"}
+{"version":3,"file":"ModelSelector.js","sourceRoot":"","sources":["../../src/models/ModelSelector.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACzC,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAC1B,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EACL,MAAM,EACN,MAAM,EACN,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,mBAAmB,EAA0B,MAAM,WAAW,CAAA;AAEnG,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,mEAAmE;AACnE,MAAM,KAAK,GAAG,GAAG,CAAA;AACjB,MAAM,KAAK,GAAG,GAAG,CAAA;AAEjB,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,GAAG,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC3F,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IACpD,OAAO,GAAG,GAAG,EAAE,CAAA;AACjB,CAAC;AAiBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,KAAK,EACL,QAAQ,EACR,QAAQ,GAAG,KAAK,EAChB,IAAI,GAAG,IAAI,EACX,WAAW,GAAG,cAAc,EAC5B,QAAQ,GAAG,IAAI,EACf,SAAS,EACT,IAAI,EAAE,QAAQ,EACd,YAAY,GACO;IACnB,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,QAAQ,IAAI,GAAG,CAAA;IAC5B,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,EAAE;QAChC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QACxC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC,CAAA;IACD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE3C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACjG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAA;IAEpD,8EAA8E;IAC9E,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAEhE,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,CAAA;IAE1B,OAAO,CACL,MAAC,OAAO,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,aAKxC,KAAC,MAAM,IAAC,QAAQ,EAAE,CAAC,CAAM,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YACnE,KAAC,cAAc,IAAC,OAAO,kBACrB,MAAC,MAAM,IACL,OAAO,EAAC,SAAS,EACjB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC7B,IAAI,EAAC,UAAU,mBACA,IAAI,EACnB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAC,YAAY,KAChB,EAAE,CAAC,SAAS,CAAC,aAEnB,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAC,UAAU,YACtE,aAAa,GACF,EACb,cAAc,IAAI,CACjB,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAC,UAAU,YACtE,cAAc,GACH,CACf,EACC,KAAC,cAAc,IAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAC,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAI,IACpE,GACM,GACV,EACT,KAAC,cAAc,IAAC,KAAK,EAAC,OAAO,EAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,YAClE,MAAC,OAAO,eACL,UAAU,IAAI,KAAC,YAAY,IAAC,WAAW,EAAC,qBAAgB,GAAG,EAC5D,MAAC,WAAW,IAAC,IAAI,EAAE,KAAK,aACtB,KAAC,YAAY,mCAAgC,EAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACrB,KAAC,YAAY,IAAoB,OAAO,EAAE,KAAK,CAAC,MAAM,YACnD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;wCACtB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAA;wCAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;wCACxC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,CAAA;wCACtC,OAAO,CACL,MAAC,WAAW,IAEV,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EACzC,QAAQ,EAAE,MAAM,mBAID,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,iBAC5B,CAAC,CAAC,MAAM;4CACrB,kEAAkE;4CAClE,OAAO,EAAE,CAAC,EACV,QAAQ,EAAE,GAAG,EAAE;gDACb,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gDACd,OAAO,CAAC,KAAK,CAAC,CAAA;4CAChB,CAAC,aAED,MAAC,MAAM,IACL,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,CAAC,EACP,KAAK,EAAC,QAAQ,EACd,GAAG,EAAC,IAAI,mBACO,MAAM,IAAI,SAAS,EAClC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAEzB,KAAC,KAAK,IAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAI,EAC/D,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACrC,KAAK,GACM,EACb,CAAC,CAAC,OAAO,IAAI,CACZ,KAAC,WAAW,IAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,gBAAY,SAAS,uBAE9C,CACf,EACA,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,WAAW,IAAC,EAAE,EAAC,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,iCAEtD,CACf,CAAC,CAAC,CAAC,GAAG,IAAI,CACT,KAAC,MAAM,IAAC,EAAE,EAAC,MAAM,EAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAC,IAAI,YAClC,KAAC,WAAW,IAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,EAAC,WAAW,EAAE,CAAC,cAAc,CAAC,YAClE,GAAG,GACQ,GACP,CACV,IACM,EACR,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CACtB,KAAC,MAAM,IACL,IAAI,EAAE,CAAC,CAAC,OAAO,EACf,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,EACzB,MAAM,EAAE,CAAC,EACT,IAAI,EAAC,IAAI,EACT,KAAK,EAAC,UAAU,EAChB,kBAAkB,EAAC,WAAW;oDAC9B,0DAA0D;oDAC1D,aAAa,EAAC,MAAM,EACpB,SAAS,EAAE,CAAC,CAAkC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,+BAG/D,CACV,KA3DI,CAAC,CAAC,EAAE,CA4DG,CACf,CAAA;oCACH,CAAC,CAAC,IArEe,KAAK,CAAC,MAAM,CAsEhB,CAChB,CAAC,IACU,IACN,GACK,IACT,CACX,CAAA;AACH,CAAC;AAED,eAAe,aAAa,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/ui",
-  "version": "8.27.23",
+  "version": "8.27.25",
   "type": "module",
   "description": "Hanzo UI — the one canonical Hanzo component library, on @hanzo/gui + @hanzo/design. ONE substrate: every component renders through @hanzo/gui primitives, so the same import works on web, native (expo) and desktop (Tauri). Self-contained (theme.css), presentational, host-agnostic, clean-room.",
   "exports": {
@@ -104,6 +104,13 @@
       "default": "./dist/masthead/nav.js"
     },
     "./masthead.css": "./dist/masthead.css",
+    "./auth": {
+      "types": "./dist/auth/index.d.ts",
+      "import": "./dist/auth/index.js",
+      "require": "./dist/auth/index.cjs",
+      "default": "./dist/auth/index.js"
+    },
+    "./auth.css": "./dist/auth.css",
     "./product": {
       "types": "./dist/product/index.d.ts",
       "import": "./dist/product/index.js",
@@ -295,6 +302,7 @@
     "@hanzo/dashboard": ">=0.2.0",
     "@hanzo/data": ">=1.2.4",
     "@hanzo/gui": "^8.3.5",
+    "@hanzo/iam": ">=0.21.21",
     "@hanzo/usage": ">=0.1.13",
     "@hanzogui/animations-css": "^8.3.5",
     "@hanzogui/config": "^8.3.5",
@@ -310,6 +318,9 @@
     "react-hook-form": ">=7"
   },
   "peerDependenciesMeta": {
+    "@hanzo/iam": {
+      "optional": true
+    },
     "@hanzo/canvas": {
       "optional": true
     },
@@ -340,6 +351,7 @@
     "@hanzo/dashboard": "0.2.0",
     "@hanzo/data": "1.2.4",
     "@hanzo/gui": "8.3.5",
+    "@hanzo/iam": "0.21.21",
     "@hanzo/usage": "0.1.7",
     "@hanzogui/animations-css": "8.3.5",
     "@hanzogui/config": "8.3.5",
@@ -369,7 +381,7 @@
   "license": "Apache-2.0 OR MIT",
   "author": "Hanzo AI <dev@hanzo.ai>",
   "scripts": {
-    "build": "rm -rf dist dist-cjs && tsc -p tsconfig.build.json && tsc -p tsconfig.cjs.json --noCheck && mkdir -p dist/styles && node scripts/compose-theme.mjs && cp src/styles/motion.css dist/styles/motion.css && cp src/masthead/masthead.css dist/masthead.css && cp src/next.cjs dist/next.cjs && node scripts/postbuild.mjs && node scripts/gen-css.mjs",
+    "build": "rm -rf dist dist-cjs && tsc -p tsconfig.build.json && tsc -p tsconfig.cjs.json --noCheck && mkdir -p dist/styles && node scripts/compose-theme.mjs && cp src/styles/motion.css dist/styles/motion.css && cp src/masthead/masthead.css dist/masthead.css && cp src/auth/auth.css dist/auth.css && cp src/next.cjs dist/next.cjs && node scripts/postbuild.mjs && node scripts/gen-css.mjs",
     "clean": "rm -rf dist dist-cjs types",
     "gen:primitives": "node scripts/gen-primitives.mjs",
     "tc": "tsc --noEmit",