@kelpie/ui 0.1.0

package/dist/pages/auth/AuthForm.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The controls the signed-out pages share.
+ *
+ * Seven forms across sign-in, signup, the two reset pages, and onboarding wrote
+ * the same label, input, and button markup. One copy of it here means a change
+ * to how a field looks is one edit rather than seven, and a page reads as what
+ * it asks for rather than as a wall of class names.
+ */
+/**
+ * Exported for the one control `TextField` cannot express: the invite row pairs
+ * an address with a role on a single line, so neither gets its own label.
+ */
+export declare const AUTH_INPUT_CLASS = "w-full rounded-md border border-border bg-surface px-3 py-2 text-[13px] outline-none focus:border-accent focus:ring-2 focus:ring-accent/20";
+export interface TextFieldProps {
+    readonly label: string;
+    readonly type?: 'text' | 'email' | 'password';
+    readonly value: string;
+    readonly onChange: (value: string) => void;
+    /** What a password manager should offer here. Always worth setting on a credential. */
+    readonly autoComplete?: string;
+    readonly placeholder?: string;
+    readonly hint?: string;
+    readonly required?: boolean;
+    /** A slug or a token: characters the reader has to be able to tell apart. */
+    readonly mono?: boolean;
+}
+export declare function TextField({ label, type, value, onChange, autoComplete, placeholder, hint, required, mono, }: TextFieldProps): React.JSX.Element;
+export interface SubmitButtonProps {
+    readonly label: string;
+    /** Shown while the request is in flight, so the button says what is happening. */
+    readonly pendingLabel: string;
+    readonly isPending: boolean;
+}
+export declare function SubmitButton({ label, pendingLabel, isPending, }: SubmitButtonProps): React.JSX.Element;
+/** The same button where there is no form to submit, only somewhere to go next. */
+export declare function PrimaryButton({ label, onClick, }: {
+    readonly label: string;
+    readonly onClick: () => void;
+}): React.JSX.Element;
+/** The same button as a plain action: skipping a step, or finishing one. */
+export declare function SecondaryButton({ label, onClick, disabled, }: {
+    readonly label: string;
+    readonly onClick: () => void;
+    readonly disabled?: boolean;
+}): React.JSX.Element;
+//# sourceMappingURL=AuthForm.d.ts.map

package/dist/pages/auth/AuthForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthForm.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/AuthForm.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,+IACiH,CAAA;AAE9I,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAC1C,uFAAuF;IACvF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,wBAAgB,SAAS,CAAC,EACxB,KAAK,EACL,IAAa,EACb,KAAK,EACL,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,IAAI,EACJ,QAAgB,EAChB,IAAY,GACb,EAAE,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAkBpC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAKD,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,YAAY,EACZ,SAAS,GACV,EAAE,iBAAiB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAMvC;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,EAC5B,KAAK,EACL,OAAO,GACR,EAAE;IACD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAC7B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAMpB;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,EAC9B,KAAK,EACL,OAAO,EACP,QAAgB,GACjB,EAAE;IACD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAA;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAWpB"}

package/dist/pages/auth/AuthForm.js

@@ -0,0 +1,32 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The controls the signed-out pages share.
+ *
+ * Seven forms across sign-in, signup, the two reset pages, and onboarding wrote
+ * the same label, input, and button markup. One copy of it here means a change
+ * to how a field looks is one edit rather than seven, and a page reads as what
+ * it asks for rather than as a wall of class names.
+ */
+/**
+ * Exported for the one control `TextField` cannot express: the invite row pairs
+ * an address with a role on a single line, so neither gets its own label.
+ */
+export const AUTH_INPUT_CLASS = 'w-full rounded-md border border-border bg-surface px-3 py-2 text-[13px] outline-none focus:border-accent focus:ring-2 focus:ring-accent/20';
+export function TextField({ label, type = 'text', value, onChange, autoComplete, placeholder, hint, required = false, mono = false, }) {
+    return (_jsxs("label", { className: "block", children: [_jsx("span", { className: "mb-1.5 block text-[12px] font-medium text-ink", children: label }), _jsx("input", { type: type, value: value, onChange: (event) => {
+                    onChange(event.target.value);
+                }, autoComplete: autoComplete, placeholder: placeholder, required: required, className: mono ? `${AUTH_INPUT_CLASS} font-mono` : AUTH_INPUT_CLASS }), hint !== undefined && _jsx("span", { className: "mt-1 block text-[11px] text-ink-faint", children: hint })] }));
+}
+const PRIMARY_CLASS = 'w-full rounded-md bg-accent px-3.5 py-2 text-[12px] font-semibold text-accent-fg transition hover:bg-accent-hover disabled:opacity-50';
+export function SubmitButton({ label, pendingLabel, isPending, }) {
+    return (_jsx("button", { type: "submit", disabled: isPending, className: PRIMARY_CLASS, children: isPending ? pendingLabel : label }));
+}
+/** The same button where there is no form to submit, only somewhere to go next. */
+export function PrimaryButton({ label, onClick, }) {
+    return (_jsx("button", { type: "button", onClick: onClick, className: PRIMARY_CLASS, children: label }));
+}
+/** The same button as a plain action: skipping a step, or finishing one. */
+export function SecondaryButton({ label, onClick, disabled = false, }) {
+    return (_jsx("button", { type: "button", onClick: onClick, disabled: disabled, className: "w-full rounded-md border border-border bg-surface px-3.5 py-2 text-[12px] font-medium text-ink-muted transition hover:bg-surface-raised disabled:opacity-50", children: label }));
+}
+//# sourceMappingURL=AuthForm.js.map

package/dist/pages/auth/AuthForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthForm.js","sourceRoot":"","sources":["../../../src/pages/auth/AuthForm.tsx"],"names":[],"mappings":";AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,4IAA4I,CAAA;AAgB9I,MAAM,UAAU,SAAS,CAAC,EACxB,KAAK,EACL,IAAI,GAAG,MAAM,EACb,KAAK,EACL,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,IAAI,EACJ,QAAQ,GAAG,KAAK,EAChB,IAAI,GAAG,KAAK,GACG;IACf,OAAO,CACL,iBAAO,SAAS,EAAC,OAAO,aACtB,eAAM,SAAS,EAAC,+CAA+C,YAAE,KAAK,GAAQ,EAC9E,gBACE,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;oBAClB,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC9B,CAAC,EACD,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,gBAAgB,YAAY,CAAC,CAAC,CAAC,gBAAgB,GACpE,EACD,IAAI,KAAK,SAAS,IAAI,eAAM,SAAS,EAAC,uCAAuC,YAAE,IAAI,GAAQ,IACtF,CACT,CAAA;AACH,CAAC;AASD,MAAM,aAAa,GACjB,uIAAuI,CAAA;AAEzI,MAAM,UAAU,YAAY,CAAC,EAC3B,KAAK,EACL,YAAY,EACZ,SAAS,GACS;IAClB,OAAO,CACL,iBAAQ,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,YAChE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,GAC1B,CACV,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,EAC5B,KAAK,EACL,OAAO,GAIR;IACC,OAAO,CACL,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,YAC7D,KAAK,GACC,CACV,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,EAC9B,KAAK,EACL,OAAO,EACP,QAAQ,GAAG,KAAK,GAKjB;IACC,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAC,6JAA6J,YAEtK,KAAK,GACC,CACV,CAAA;AACH,CAAC"}

package/dist/pages/auth/AuthLayout.d.ts

@@ -0,0 +1,24 @@
+import type { ReactNode } from 'react';
+/**
+ * The centred card every signed-out page sits in: sign in, signup, the two
+ * password-reset pages, and the three onboarding steps.
+ *
+ * `step` is what makes it an onboarding page. Onboarding is a sequence somebody
+ * is part-way through, and a card that does not say where they are in it turns
+ * three screens into three unrelated forms.
+ */
+/** Onboarding, per `onboarding.md`: workspace, invites, handbook. */
+declare const ONBOARDING_STEPS: readonly [1, 2, 3];
+export type OnboardingStep = (typeof ONBOARDING_STEPS)[number];
+export interface AuthLayoutProps {
+    readonly title: string;
+    readonly description?: string;
+    /** Which onboarding step this is. Draws the progress bar and widens the card. */
+    readonly step?: OnboardingStep;
+    readonly children: ReactNode;
+    /** Links below the form: the way back, or the other way in. */
+    readonly footer?: ReactNode;
+}
+export declare function AuthLayout({ title, description, step, children, footer, }: AuthLayoutProps): React.JSX.Element;
+export {};
+//# sourceMappingURL=AuthLayout.d.ts.map

package/dist/pages/auth/AuthLayout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthLayout.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/AuthLayout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGtC;;;;;;;GAOG;AAEH,qEAAqE;AACrE,QAAA,MAAM,gBAAgB,YAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAA;AAE3C,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAC5B;AAED,wBAAgB,UAAU,CAAC,EACzB,KAAK,EACL,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,MAAM,GACP,EAAE,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAqBrC"}

package/dist/pages/auth/AuthLayout.js

@@ -0,0 +1,19 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Link } from 'react-router';
+/**
+ * The centred card every signed-out page sits in: sign in, signup, the two
+ * password-reset pages, and the three onboarding steps.
+ *
+ * `step` is what makes it an onboarding page. Onboarding is a sequence somebody
+ * is part-way through, and a card that does not say where they are in it turns
+ * three screens into three unrelated forms.
+ */
+/** Onboarding, per `onboarding.md`: workspace, invites, handbook. */
+const ONBOARDING_STEPS = [1, 2, 3];
+export function AuthLayout({ title, description, step, children, footer, }) {
+    return (_jsxs("div", { className: "flex min-h-screen flex-col items-center justify-center bg-surface px-4 py-12", children: [_jsx(Link, { to: "/login", className: "mb-8 text-[20px] font-semibold tracking-tight text-ink", children: "Kelpie" }), _jsxs("div", { className: `w-full animate-fade-in rounded-md border border-border p-6 ${step === undefined ? 'max-w-sm' : 'max-w-md'}`, children: [step !== undefined && _jsx(StepProgress, { step: step }), _jsx("h1", { className: "text-[18px] font-semibold tracking-tight text-ink", children: title }), description !== undefined && (_jsx("p", { className: "mt-1 text-[13px] text-ink-muted", children: description })), children, footer !== undefined && _jsx("div", { className: "mt-4 text-center text-[12px]", children: footer })] })] }));
+}
+function StepProgress({ step }) {
+    return (_jsxs(_Fragment, { children: [_jsx("div", { className: "mb-4 flex items-center gap-2", children: ONBOARDING_STEPS.map((each) => (_jsx("div", { "aria-hidden": true, className: `h-1.5 flex-1 rounded-full ${each <= step ? 'bg-accent' : 'bg-border'}` }, each))) }), _jsxs("p", { className: "mb-1 text-[11px] font-medium tracking-wide text-ink-faint uppercase", children: ["Step ", step, " of ", ONBOARDING_STEPS.length] })] }));
+}
+//# sourceMappingURL=AuthLayout.js.map

package/dist/pages/auth/AuthLayout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthLayout.js","sourceRoot":"","sources":["../../../src/pages/auth/AuthLayout.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAEnC;;;;;;;GAOG;AAEH,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAA;AAc3C,MAAM,UAAU,UAAU,CAAC,EACzB,KAAK,EACL,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,MAAM,GACU;IAChB,OAAO,CACL,eAAK,SAAS,EAAC,8EAA8E,aAC3F,KAAC,IAAI,IAAC,EAAE,EAAC,QAAQ,EAAC,SAAS,EAAC,wDAAwD,uBAE7E,EACP,eACE,SAAS,EAAE,8DACT,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UACpC,EAAE,aAED,IAAI,KAAK,SAAS,IAAI,KAAC,YAAY,IAAC,IAAI,EAAE,IAAI,GAAI,EACnD,aAAI,SAAS,EAAC,mDAAmD,YAAE,KAAK,GAAM,EAC7E,WAAW,KAAK,SAAS,IAAI,CAC5B,YAAG,SAAS,EAAC,iCAAiC,YAAE,WAAW,GAAK,CACjE,EACA,QAAQ,EACR,MAAM,KAAK,SAAS,IAAI,cAAK,SAAS,EAAC,8BAA8B,YAAE,MAAM,GAAO,IACjF,IACF,CACP,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAE,IAAI,EAAqC;IAC/D,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,8BAA8B,YAC1C,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC9B,mCAGE,SAAS,EAAE,6BAA6B,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,IAF7E,IAAI,CAGT,CACH,CAAC,GACE,EACN,aAAG,SAAS,EAAC,qEAAqE,sBAC1E,IAAI,UAAM,gBAAgB,CAAC,MAAM,IACrC,IACH,CACJ,CAAA;AACH,CAAC"}

package/dist/pages/auth/ForgotPasswordPage.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Asking for a reset link, against `POST /v1/auth/password-reset`.
+ *
+ * The endpoint answers `202` whether or not the address is registered, and this
+ * page has to answer the same way. Saying "no account with that address" would
+ * make the form an account-existence oracle, which is the whole reason the
+ * service refuses to tell.
+ *
+ * So the confirmation is conditional: *if* an account exists. It is not a
+ * hedge, it is the only thing the browser actually knows.
+ */
+export declare function ForgotPasswordPage(): React.JSX.Element;
+//# sourceMappingURL=ForgotPasswordPage.d.ts.map

package/dist/pages/auth/ForgotPasswordPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForgotPasswordPage.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/ForgotPasswordPage.tsx"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CA2DtD"}

package/dist/pages/auth/ForgotPasswordPage.js

@@ -0,0 +1,39 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Link } from 'react-router';
+import { resetUrlTemplate, useRequestPasswordReset } from '../../api/resources/session.js';
+import { ErrorPanel } from '../../components/QueryState.js';
+import { SubmitButton, TextField } from './AuthForm.js';
+import { AuthLayout } from './AuthLayout.js';
+/**
+ * Asking for a reset link, against `POST /v1/auth/password-reset`.
+ *
+ * The endpoint answers `202` whether or not the address is registered, and this
+ * page has to answer the same way. Saying "no account with that address" would
+ * make the form an account-existence oracle, which is the whole reason the
+ * service refuses to tell.
+ *
+ * So the confirmation is conditional: *if* an account exists. It is not a
+ * hedge, it is the only thing the browser actually knows.
+ */
+export function ForgotPasswordPage() {
+    const request = useRequestPasswordReset();
+    const [email, setEmail] = useState('');
+    const [sentTo, setSentTo] = useState(null);
+    function submit(event) {
+        event.preventDefault();
+        const address = email.trim();
+        request
+            .runAsync({ email: address, resetUrlTemplate: resetUrlTemplate(window.location.origin) })
+            .then(() => {
+            setSentTo(address);
+        })
+            .catch(() => undefined);
+    }
+    const backToSignIn = (_jsx(Link, { to: "/login", className: "font-medium text-accent hover:underline", children: "Back to sign in" }));
+    if (sentTo !== null) {
+        return (_jsx(AuthLayout, { title: "Check your email", footer: backToSignIn, children: _jsxs("p", { className: "mt-4 text-[13px] text-ink-muted", children: ["If an account exists for ", _jsx("span", { className: "font-medium text-ink", children: sentTo }), ", a reset link is on its way. The link expires, so use it soon."] }) }));
+    }
+    return (_jsx(AuthLayout, { title: "Reset password", description: "Enter your email and we will send you a link.", footer: backToSignIn, children: _jsxs("form", { onSubmit: submit, className: "mt-5 space-y-3", children: [_jsx(TextField, { label: "Email", type: "email", value: email, onChange: setEmail, autoComplete: "email", required: true }), request.error !== null && _jsx(ErrorPanel, { error: request.error }), _jsx(SubmitButton, { label: "Send reset link", pendingLabel: "Sending\u2026", isPending: request.isPending })] }) }));
+}
+//# sourceMappingURL=ForgotPasswordPage.js.map

package/dist/pages/auth/ForgotPasswordPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForgotPasswordPage.js","sourceRoot":"","sources":["../../../src/pages/auth/ForgotPasswordPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAEnC,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAiC,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAgB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAA;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAA;IACzC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEzD,SAAS,MAAM,CAAC,KAAgB;QAC9B,KAAK,CAAC,cAAc,EAAE,CAAA;QAEtB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAE5B,OAAO;aACJ,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;aACxF,IAAI,CAAC,GAAG,EAAE;YACT,SAAS,CAAC,OAAO,CAAC,CAAA;QACpB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC3B,CAAC;IAED,MAAM,YAAY,GAAG,CACnB,KAAC,IAAI,IAAC,EAAE,EAAC,QAAQ,EAAC,SAAS,EAAC,yCAAyC,gCAE9D,CACR,CAAA;IAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CACL,KAAC,UAAU,IAAC,KAAK,EAAC,kBAAkB,EAAC,MAAM,EAAE,YAAY,YACvD,aAAG,SAAS,EAAC,iCAAiC,0CACnB,eAAM,SAAS,EAAC,sBAAsB,YAAE,MAAM,GAAQ,uEAE7E,GACO,CACd,CAAA;IACH,CAAC;IAED,OAAO,CACL,KAAC,UAAU,IACT,KAAK,EAAC,gBAAgB,EACtB,WAAW,EAAC,+CAA+C,EAC3D,MAAM,EAAE,YAAY,YAEpB,gBAAM,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAC,gBAAgB,aAChD,KAAC,SAAS,IACR,KAAK,EAAC,OAAO,EACb,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAC,OAAO,EACpB,QAAQ,SACR,EACD,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,OAAO,CAAC,KAAK,GAAI,EAC/D,KAAC,YAAY,IACX,KAAK,EAAC,iBAAiB,EACvB,YAAY,EAAC,eAAU,EACvB,SAAS,EAAE,OAAO,CAAC,SAAS,GAC5B,IACG,GACI,CACd,CAAA;AACH,CAAC"}

package/dist/pages/auth/JoinPage.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Where an invitation email lands: `/join?token=…`.
+ *
+ * Accepting needs a signed-in account, because the invitation adds *somebody* to
+ * the workspace and the token does not say who. An invitee who is signed out is
+ * sent to sign in with the token kept in the URL they come back to.
+ *
+ * Accepting is not automatic on load. It is a write that changes which workspace
+ * the session is in, so it waits for the person to press the button.
+ */
+export declare function JoinPage(): React.JSX.Element;
+//# sourceMappingURL=JoinPage.d.ts.map

package/dist/pages/auth/JoinPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JoinPage.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/JoinPage.tsx"],"names":[],"mappings":"AAMA;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAoE5C"}

package/dist/pages/auth/JoinPage.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Link, Navigate, useNavigate, useSearchParams } from 'react-router';
+import { useAcceptInvite, useSession } from '../../api/resources/session.js';
+import { ErrorPanel, LoadingPanel } from '../../components/QueryState.js';
+import { AuthLayout } from './AuthLayout.js';
+/**
+ * Where an invitation email lands: `/join?token=…`.
+ *
+ * Accepting needs a signed-in account, because the invitation adds *somebody* to
+ * the workspace and the token does not say who. An invitee who is signed out is
+ * sent to sign in with the token kept in the URL they come back to.
+ *
+ * Accepting is not automatic on load. It is a write that changes which workspace
+ * the session is in, so it waits for the person to press the button.
+ */
+export function JoinPage() {
+    const navigate = useNavigate();
+    const [searchParameters] = useSearchParams();
+    const token = searchParameters.get('token') ?? '';
+    const { isLoading, isSignedOut, error } = useSession();
+    const accept = useAcceptInvite();
+    if (token.length === 0) {
+        return (_jsx(AuthLayout, { title: "This link is incomplete", description: "It carries no invitation token.", children: _jsx("p", { className: "mt-4 text-[13px] text-ink-muted", children: "Ask whoever invited you to send it again from the workspace's Team page." }) }));
+    }
+    // The token rides along so signing in comes back here rather than to the CRM.
+    const signInHere = `/login?next=${encodeURIComponent(`/join?token=${token}`)}`;
+    if (isSignedOut) {
+        return _jsx(Navigate, { to: signInHere, replace: true });
+    }
+    if (error !== null) {
+        return (_jsx(AuthLayout, { title: "Join a workspace", children: _jsx("div", { className: "mt-4", children: _jsx(ErrorPanel, { error: error }) }) }));
+    }
+    if (isLoading) {
+        return _jsx(LoadingPanel, {});
+    }
+    return (_jsx(AuthLayout, { title: "Join a workspace", description: "You have been invited. Accepting adds this account to it.", children: _jsxs("div", { className: "mt-5 space-y-3", children: [accept.error !== null && _jsx(ErrorPanel, { error: accept.error }), _jsx("button", { type: "button", disabled: accept.isPending, onClick: () => {
+                        accept
+                            .runAsync({ token })
+                            .then(() => navigate('/dashboard', { replace: true }))
+                            .catch(() => undefined);
+                    }, className: "w-full rounded-md bg-accent px-3.5 py-2 text-[12px] font-semibold text-accent-fg transition hover:bg-accent-hover disabled:opacity-50", children: accept.isPending ? 'Joining…' : 'Accept invitation' }), _jsxs("p", { className: "text-[11px] text-ink-faint", children: ["Signed in as the wrong account?", ' ', _jsx(Link, { to: signInHere, className: "text-accent", children: "Sign in as somebody else" }), "."] })] }) }));
+}
+//# sourceMappingURL=JoinPage.js.map

package/dist/pages/auth/JoinPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JoinPage.js","sourceRoot":"","sources":["../../../src/pages/auth/JoinPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE3E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gCAAiC,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAA;AAE7C;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,CAAC,gBAAgB,CAAC,GAAG,eAAe,EAAE,CAAA;IAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IACjD,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAA;IACtD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAA;IAEhC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CACL,KAAC,UAAU,IAAC,KAAK,EAAC,yBAAyB,EAAC,WAAW,EAAC,iCAAiC,YACvF,YAAG,SAAS,EAAC,iCAAiC,yFAE1C,GACO,CACd,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,UAAU,GAAG,eAAe,kBAAkB,CAAC,eAAe,KAAK,EAAE,CAAC,EAAE,CAAA;IAE9E,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,UAAU,EAAE,OAAO,SAAG,CAAA;IAC7C,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,CACL,KAAC,UAAU,IAAC,KAAK,EAAC,kBAAkB,YAClC,cAAK,SAAS,EAAC,MAAM,YACnB,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,GAAI,GACxB,GACK,CACd,CAAA;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,YAAY,KAAG,CAAA;IACzB,CAAC;IAED,OAAO,CACL,KAAC,UAAU,IACT,KAAK,EAAC,kBAAkB,EACxB,WAAW,EAAC,2DAA2D,YAEvE,eAAK,SAAS,EAAC,gBAAgB,aAC5B,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,MAAM,CAAC,KAAK,GAAI,EAC7D,iBACE,IAAI,EAAC,QAAQ,EACb,QAAQ,EAAE,MAAM,CAAC,SAAS,EAC1B,OAAO,EAAE,GAAG,EAAE;wBACZ,MAAM;6BACH,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC;6BACnB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;6BACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;oBAC3B,CAAC,EACD,SAAS,EAAC,uIAAuI,YAEhJ,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAC7C,EACT,aAAG,SAAS,EAAC,4BAA4B,gDACP,GAAG,EACnC,KAAC,IAAI,IAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAC,aAAa,yCAEtC,SAEL,IACA,GACK,CACd,CAAA;AACH,CAAC"}

package/dist/pages/auth/ResetPasswordPage.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Where a reset email lands: `/reset-password?token=…`.
+ *
+ * The mockup has no page for this, because a mockup never sent the email. The
+ * token is in the URL rather than typed, so the form asks for the new password
+ * and nothing else.
+ *
+ * Success does not sign anyone in. The service ends every session the account
+ * had, which is the point of a reset when the account was stolen, so the only
+ * honest next step is the sign-in form.
+ */
+export declare function ResetPasswordPage(): React.JSX.Element;
+//# sourceMappingURL=ResetPasswordPage.d.ts.map

package/dist/pages/auth/ResetPasswordPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordPage.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/ResetPasswordPage.tsx"],"names":[],"mappings":"AAUA;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAsGrD"}

package/dist/pages/auth/ResetPasswordPage.js

@@ -0,0 +1,58 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { MINIMUM_PASSWORD_LENGTH } from '@kelpie/schemas';
+import { useState } from 'react';
+import { Link, useSearchParams } from 'react-router';
+import { useConfirmPasswordReset } from '../../api/resources/session.js';
+import { ErrorPanel } from '../../components/QueryState.js';
+import { SubmitButton, TextField } from './AuthForm.js';
+import { AuthLayout } from './AuthLayout.js';
+/**
+ * Where a reset email lands: `/reset-password?token=…`.
+ *
+ * The mockup has no page for this, because a mockup never sent the email. The
+ * token is in the URL rather than typed, so the form asks for the new password
+ * and nothing else.
+ *
+ * Success does not sign anyone in. The service ends every session the account
+ * had, which is the point of a reset when the account was stolen, so the only
+ * honest next step is the sign-in form.
+ */
+export function ResetPasswordPage() {
+    const [searchParameters] = useSearchParams();
+    const token = searchParameters.get('token') ?? '';
+    const confirm = useConfirmPasswordReset();
+    const [password, setPassword] = useState('');
+    const [confirmation, setConfirmation] = useState('');
+    const [localError, setLocalError] = useState(null);
+    const [done, setDone] = useState(false);
+    const backToSignIn = (_jsx(Link, { to: "/login", className: "font-medium text-accent hover:underline", children: "Back to sign in" }));
+    if (token.length === 0) {
+        return (_jsx(AuthLayout, { title: "This link is incomplete", footer: backToSignIn, children: _jsxs("p", { className: "mt-4 text-[13px] text-ink-muted", children: ["It carries no reset token. Ask for a new link from", ' ', _jsx(Link, { to: "/forgot-password", className: "font-medium text-accent hover:underline", children: "Forgot password" }), "."] }) }));
+    }
+    if (done) {
+        return (_jsx(AuthLayout, { title: "Password changed", footer: backToSignIn, children: _jsx("p", { className: "mt-4 text-[13px] text-ink-muted", children: "Every device that was signed in to this account has been signed out. Sign in again with the new password." }) }));
+    }
+    /** The two rules the browser can decide on its own, before spending the token. */
+    function localProblem() {
+        if (password.length < MINIMUM_PASSWORD_LENGTH) {
+            return `Password must be at least ${String(MINIMUM_PASSWORD_LENGTH)} characters.`;
+        }
+        return password === confirmation ? null : 'Password and confirmation do not match.';
+    }
+    function submit(event) {
+        event.preventDefault();
+        const problem = localProblem();
+        setLocalError(problem);
+        if (problem !== null) {
+            return;
+        }
+        confirm
+            .runAsync({ token, password })
+            .then(() => {
+            setDone(true);
+        })
+            .catch(() => undefined);
+    }
+    return (_jsx(AuthLayout, { title: "Choose a new password", description: "This link works once.", footer: backToSignIn, children: _jsxs("form", { onSubmit: submit, className: "mt-5 space-y-3", children: [_jsx(TextField, { label: "New password", type: "password", value: password, onChange: setPassword, autoComplete: "new-password", hint: `At least ${String(MINIMUM_PASSWORD_LENGTH)} characters.`, required: true }), _jsx(TextField, { label: "Confirm new password", type: "password", value: confirmation, onChange: setConfirmation, autoComplete: "new-password", required: true }), localError !== null && _jsx("p", { className: "text-[12px] text-danger", children: localError }), confirm.error !== null && _jsx(ErrorPanel, { error: confirm.error }), _jsx(SubmitButton, { label: "Set new password", pendingLabel: "Saving\u2026", isPending: confirm.isPending })] }) }));
+}
+//# sourceMappingURL=ResetPasswordPage.js.map

package/dist/pages/auth/ResetPasswordPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordPage.js","sourceRoot":"","sources":["../../../src/pages/auth/ResetPasswordPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAiC,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAgB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAA;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,gBAAgB,CAAC,GAAG,eAAe,EAAE,CAAA;IAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IACjD,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAA;IACzC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACjE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEvC,MAAM,YAAY,GAAG,CACnB,KAAC,IAAI,IAAC,EAAE,EAAC,QAAQ,EAAC,SAAS,EAAC,yCAAyC,gCAE9D,CACR,CAAA;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CACL,KAAC,UAAU,IAAC,KAAK,EAAC,yBAAyB,EAAC,MAAM,EAAE,YAAY,YAC9D,aAAG,SAAS,EAAC,iCAAiC,mEACO,GAAG,EACtD,KAAC,IAAI,IAAC,EAAE,EAAC,kBAAkB,EAAC,SAAS,EAAC,yCAAyC,gCAExE,SAEL,GACO,CACd,CAAA;IACH,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CACL,KAAC,UAAU,IAAC,KAAK,EAAC,kBAAkB,EAAC,MAAM,EAAE,YAAY,YACvD,YAAG,SAAS,EAAC,iCAAiC,0HAG1C,GACO,CACd,CAAA;IACH,CAAC;IAED,kFAAkF;IAClF,SAAS,YAAY;QACnB,IAAI,QAAQ,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC9C,OAAO,6BAA6B,MAAM,CAAC,uBAAuB,CAAC,cAAc,CAAA;QACnF,CAAC;QAED,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yCAAyC,CAAA;IACrF,CAAC;IAED,SAAS,MAAM,CAAC,KAAgB;QAC9B,KAAK,CAAC,cAAc,EAAE,CAAA;QAEtB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAA;QAE9B,aAAa,CAAC,OAAO,CAAC,CAAA;QAEtB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAM;QACR,CAAC;QAED,OAAO;aACJ,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;aAC7B,IAAI,CAAC,GAAG,EAAE;YACT,OAAO,CAAC,IAAI,CAAC,CAAA;QACf,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO,CACL,KAAC,UAAU,IACT,KAAK,EAAC,uBAAuB,EAC7B,WAAW,EAAC,uBAAuB,EACnC,MAAM,EAAE,YAAY,YAEpB,gBAAM,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAC,gBAAgB,aAChD,KAAC,SAAS,IACR,KAAK,EAAC,cAAc,EACpB,IAAI,EAAC,UAAU,EACf,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,WAAW,EACrB,YAAY,EAAC,cAAc,EAC3B,IAAI,EAAE,YAAY,MAAM,CAAC,uBAAuB,CAAC,cAAc,EAC/D,QAAQ,SACR,EACF,KAAC,SAAS,IACR,KAAK,EAAC,sBAAsB,EAC5B,IAAI,EAAC,UAAU,EACf,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAC,cAAc,EAC3B,QAAQ,SACR,EACD,UAAU,KAAK,IAAI,IAAI,YAAG,SAAS,EAAC,yBAAyB,YAAE,UAAU,GAAK,EAC9E,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,OAAO,CAAC,KAAK,GAAI,EAC/D,KAAC,YAAY,IACX,KAAK,EAAC,kBAAkB,EACxB,YAAY,EAAC,cAAS,EACtB,SAAS,EAAE,OAAO,CAAC,SAAS,GAC5B,IACG,GACI,CACd,CAAA;AACH,CAAC"}

package/dist/pages/auth/SignInPage.d.ts

@@ -0,0 +1,2 @@
+export declare function SignInPage(): React.JSX.Element;
+//# sourceMappingURL=SignInPage.d.ts.map

package/dist/pages/auth/SignInPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInPage.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/SignInPage.tsx"],"names":[],"mappings":"AAyBA,wBAAgB,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAyD9C"}

package/dist/pages/auth/SignInPage.js

@@ -0,0 +1,38 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Link, useNavigate, useSearchParams } from 'react-router';
+import { useLogIn } from '../../api/resources/session.js';
+import { ErrorPanel } from '../../components/QueryState.js';
+import { SubmitButton, TextField } from './AuthForm.js';
+import { AuthLayout } from './AuthLayout.js';
+/**
+ * Sign in, against `POST /v1/auth/login`.
+ *
+ * Where the browser goes afterwards is not always the app. An invitation link
+ * sends its token through `?next=`, and dropping it would land the invitee on
+ * People with the invitation still unaccepted.
+ */
+/**
+ * Only a path within this app. An absolute URL in `?next=` would turn the
+ * sign-in form into an open redirect.
+ */
+function safeNext(value) {
+    return value !== null && value.startsWith('/') && !value.startsWith('//') ? value : '/dashboard';
+}
+export function SignInPage() {
+    const navigate = useNavigate();
+    const [searchParameters] = useSearchParams();
+    const logIn = useLogIn();
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const next = safeNext(searchParameters.get('next'));
+    function submit(event) {
+        event.preventDefault();
+        logIn
+            .runAsync({ email: email.trim(), password })
+            .then(() => navigate(next, { replace: true }))
+            .catch(() => undefined);
+    }
+    return (_jsx(AuthLayout, { title: "Sign in", footer: _jsxs("div", { className: "flex flex-col gap-1.5", children: [_jsx(Link, { to: "/forgot-password", className: "font-medium text-accent hover:underline", children: "Forgot password?" }), _jsxs("span", { className: "text-ink-muted", children: ["No account?", ' ', _jsx(Link, { to: "/signup", className: "font-medium text-accent hover:underline", children: "Sign up" })] })] }), children: _jsxs("form", { onSubmit: submit, className: "mt-5 space-y-3", children: [_jsx(TextField, { label: "Email", type: "email", value: email, onChange: setEmail, autoComplete: "email", required: true }), _jsx(TextField, { label: "Password", type: "password", value: password, onChange: setPassword, autoComplete: "current-password", required: true }), logIn.error !== null && _jsx(ErrorPanel, { error: logIn.error }), _jsx(SubmitButton, { label: "Sign in", pendingLabel: "Signing in\u2026", isPending: logIn.isPending })] }) }));
+}
+//# sourceMappingURL=SignInPage.js.map

package/dist/pages/auth/SignInPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignInPage.js","sourceRoot":"","sources":["../../../src/pages/auth/SignInPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAEjE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAiC,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAgB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAA;AAE7C;;;;;;GAMG;AAEH;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAoB;IACpC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAA;AAClG,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,CAAC,gBAAgB,CAAC,GAAG,eAAe,EAAE,CAAA;IAC5C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IACxB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAE5C,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAEnD,SAAS,MAAM,CAAC,KAAgB;QAC9B,KAAK,CAAC,cAAc,EAAE,CAAA;QAEtB,KAAK;aACF,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;aAC3C,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;aAC7C,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO,CACL,KAAC,UAAU,IACT,KAAK,EAAC,SAAS,EACf,MAAM,EACJ,eAAK,SAAS,EAAC,uBAAuB,aACpC,KAAC,IAAI,IAAC,EAAE,EAAC,kBAAkB,EAAC,SAAS,EAAC,yCAAyC,iCAExE,EACP,gBAAM,SAAS,EAAC,gBAAgB,4BAClB,GAAG,EACf,KAAC,IAAI,IAAC,EAAE,EAAC,SAAS,EAAC,SAAS,EAAC,yCAAyC,wBAE/D,IACF,IACH,YAGR,gBAAM,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAC,gBAAgB,aAChD,KAAC,SAAS,IACR,KAAK,EAAC,OAAO,EACb,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAC,OAAO,EACpB,QAAQ,SACR,EACF,KAAC,SAAS,IACR,KAAK,EAAC,UAAU,EAChB,IAAI,EAAC,UAAU,EACf,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,WAAW,EACrB,YAAY,EAAC,kBAAkB,EAC/B,QAAQ,SACR,EACD,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAI,EAC3D,KAAC,YAAY,IAAC,KAAK,EAAC,SAAS,EAAC,YAAY,EAAC,kBAAa,EAAC,SAAS,EAAE,KAAK,CAAC,SAAS,GAAI,IAClF,GACI,CACd,CAAA;AACH,CAAC"}

package/dist/pages/auth/SignUpPage.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Creating an account, against `POST /v1/auth/signup`.
+ *
+ * Signup makes the user and nothing else, per `onboarding.md`, so success lands
+ * on the first onboarding step rather than in the app. The response sets the
+ * session cookie, which is why the next page can already write.
+ *
+ * The mockup collected this into `sessionStorage` and committed the lot at the
+ * end of the wizard. Here each step commits as it is finished: a draft account
+ * held in the browser is one an interrupted signup loses.
+ */
+export declare function SignUpPage(): React.JSX.Element;
+//# sourceMappingURL=SignUpPage.d.ts.map

package/dist/pages/auth/SignUpPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignUpPage.d.ts","sourceRoot":"","sources":["../../../src/pages/auth/SignUpPage.tsx"],"names":[],"mappings":"AAUA;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAuE9C"}

package/dist/pages/auth/SignUpPage.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { MINIMUM_PASSWORD_LENGTH } from '@kelpie/schemas';
+import { useState } from 'react';
+import { Link, useNavigate } from 'react-router';
+import { useSignUp } from '../../api/resources/session.js';
+import { ErrorPanel } from '../../components/QueryState.js';
+import { SubmitButton, TextField } from './AuthForm.js';
+import { AuthLayout } from './AuthLayout.js';
+/**
+ * Creating an account, against `POST /v1/auth/signup`.
+ *
+ * Signup makes the user and nothing else, per `onboarding.md`, so success lands
+ * on the first onboarding step rather than in the app. The response sets the
+ * session cookie, which is why the next page can already write.
+ *
+ * The mockup collected this into `sessionStorage` and committed the lot at the
+ * end of the wizard. Here each step commits as it is finished: a draft account
+ * held in the browser is one an interrupted signup loses.
+ */
+export function SignUpPage() {
+    const navigate = useNavigate();
+    const signUp = useSignUp();
+    const [name, setName] = useState('');
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const [localError, setLocalError] = useState(null);
+    function submit(event) {
+        event.preventDefault();
+        // Checked here as well as by the service so the rule is stated before a
+        // submission rather than as a rejection afterwards.
+        if (password.length < MINIMUM_PASSWORD_LENGTH) {
+            setLocalError(`Password must be at least ${String(MINIMUM_PASSWORD_LENGTH)} characters.`);
+            return;
+        }
+        setLocalError(null);
+        signUp
+            .runAsync({ name: name.trim(), email: email.trim(), password })
+            .then(() => navigate('/onboarding/workspace', { replace: true }))
+            .catch(() => undefined);
+    }
+    return (_jsx(AuthLayout, { title: "Create account", description: "Next you will create a workspace for your company.", footer: _jsxs("span", { className: "text-ink-muted", children: ["Already have an account?", ' ', _jsx(Link, { to: "/login", className: "font-medium text-accent hover:underline", children: "Sign in" })] }), children: _jsxs("form", { onSubmit: submit, className: "mt-5 space-y-3", children: [_jsx(TextField, { label: "Your name", value: name, onChange: setName, autoComplete: "name", required: true }), _jsx(TextField, { label: "Email", type: "email", value: email, onChange: setEmail, autoComplete: "email", required: true }), _jsx(TextField, { label: "Password", type: "password", value: password, onChange: setPassword, autoComplete: "new-password", hint: `At least ${String(MINIMUM_PASSWORD_LENGTH)} characters.`, required: true }), localError !== null && _jsx("p", { className: "text-[12px] text-danger", children: localError }), signUp.error !== null && _jsx(ErrorPanel, { error: signUp.error }), _jsx(SubmitButton, { label: "Continue", pendingLabel: "Creating\u2026", isPending: signUp.isPending })] }) }));
+}
+//# sourceMappingURL=SignUpPage.js.map

package/dist/pages/auth/SignUpPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignUpPage.js","sourceRoot":"","sources":["../../../src/pages/auth/SignUpPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAiC,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAgB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAkB,CAAA;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEjE,SAAS,MAAM,CAAC,KAAgB;QAC9B,KAAK,CAAC,cAAc,EAAE,CAAA;QAEtB,wEAAwE;QACxE,oDAAoD;QACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC9C,aAAa,CAAC,6BAA6B,MAAM,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAA;YAEzF,OAAM;QACR,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,CAAA;QAEnB,MAAM;aACH,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;aAC9D,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;aAChE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO,CACL,KAAC,UAAU,IACT,KAAK,EAAC,gBAAgB,EACtB,WAAW,EAAC,oDAAoD,EAChE,MAAM,EACJ,gBAAM,SAAS,EAAC,gBAAgB,yCACL,GAAG,EAC5B,KAAC,IAAI,IAAC,EAAE,EAAC,QAAQ,EAAC,SAAS,EAAC,yCAAyC,wBAE9D,IACF,YAGT,gBAAM,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAC,gBAAgB,aAChD,KAAC,SAAS,IACR,KAAK,EAAC,WAAW,EACjB,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAC,MAAM,EACnB,QAAQ,SACR,EACF,KAAC,SAAS,IACR,KAAK,EAAC,OAAO,EACb,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAC,OAAO,EACpB,QAAQ,SACR,EACF,KAAC,SAAS,IACR,KAAK,EAAC,UAAU,EAChB,IAAI,EAAC,UAAU,EACf,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,WAAW,EACrB,YAAY,EAAC,cAAc,EAC3B,IAAI,EAAE,YAAY,MAAM,CAAC,uBAAuB,CAAC,cAAc,EAC/D,QAAQ,SACR,EACD,UAAU,KAAK,IAAI,IAAI,YAAG,SAAS,EAAC,yBAAyB,YAAE,UAAU,GAAK,EAC9E,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,KAAC,UAAU,IAAC,KAAK,EAAE,MAAM,CAAC,KAAK,GAAI,EAC7D,KAAC,YAAY,IAAC,KAAK,EAAC,UAAU,EAAC,YAAY,EAAC,gBAAW,EAAC,SAAS,EAAE,MAAM,CAAC,SAAS,GAAI,IAClF,GACI,CACd,CAAA;AACH,CAAC"}

package/dist/pages/candidateFields.d.ts

@@ -0,0 +1,22 @@
+import type { Candidate } from '@kelpie/schemas';
+export interface CandidateFieldProps {
+    readonly candidate: Candidate;
+    /** Rendered instead of the chip where the surrounding page uses plain text. */
+    readonly plain?: boolean;
+}
+export declare function CandidateStatusField({ candidate, plain, }: CandidateFieldProps): React.JSX.Element;
+export declare function CandidateStageField({ candidate, plain, }: CandidateFieldProps): React.JSX.Element;
+export interface CandidateReferrerFieldProps {
+    readonly candidate: Candidate;
+    /** The referrer's name when it is already on the page, so the picker shows it. */
+    readonly referrerName: string | undefined;
+}
+/**
+ * Who vouched for this candidate.
+ *
+ * The candidate themselves is filtered out of the options: the API refuses a
+ * self-referral with a `422`, and offering a choice that cannot be made is worse
+ * than not offering it.
+ */
+export declare function CandidateReferrerField({ candidate, referrerName, }: CandidateReferrerFieldProps): React.JSX.Element;
+//# sourceMappingURL=candidateFields.d.ts.map

package/dist/pages/candidateFields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidateFields.d.ts","sourceRoot":"","sources":["../../src/pages/candidateFields.tsx"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAmD,MAAM,iBAAiB,CAAA;AAiDjG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,wBAAgB,oBAAoB,CAAC,EACnC,SAAS,EACT,KAAa,GACd,EAAE,mBAAmB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA0BzC;AAED,wBAAgB,mBAAmB,CAAC,EAClC,SAAS,EACT,KAAa,GACd,EAAE,mBAAmB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAyBzC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,SAAS,EACT,YAAY,GACb,EAAE,2BAA2B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAmCjD"}

package/dist/pages/candidateFields.js

@@ -0,0 +1,82 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { CANDIDATE_STATUS_LABELS, CANDIDATE_STATUSES, FIRST_INTERVIEW_STAGE, INTERVIEW_STAGE_LABELS, INTERVIEW_STAGES, } from '@kelpie/schemas';
+import { useState } from 'react';
+import { usePatch } from '../api/resource.js';
+import { usePeople } from '../api/resources/people.js';
+import { useUpdateCandidate } from '../api/resources/candidates.js';
+import { Chip } from '../components/Chip.js';
+import { EntitySearch } from '../components/EntitySearch.js';
+import { InlineEdit } from '../components/InlineEdit.js';
+import { ErrorPanel } from '../components/QueryState.js';
+/**
+ * The three editable fields of a candidacy, shared by the Role page and the
+ * person's Hiring tab.
+ *
+ * Both pages draw them differently — a row of chips on one, a labelled grid on
+ * the other, which is how the mockup draws them — so what is shared is the
+ * editing rather than the layout.
+ *
+ * None of these knows the rule tying stage to status. Setting a status away from
+ * `in_process` clears the stage server-side and setting it back restores the
+ * first one, so a page sends the one field the user touched and renders whatever
+ * comes back.
+ */
+const STATUS_OPTIONS = CANDIDATE_STATUSES.map((status) => ({
+    value: status,
+    label: CANDIDATE_STATUS_LABELS[status],
+}));
+const STAGE_OPTIONS = INTERVIEW_STAGES.map((stage) => ({
+    value: stage,
+    label: INTERVIEW_STAGE_LABELS[stage],
+}));
+const STATUS_TONES = {
+    hired: 'success',
+    in_process: 'accent',
+    nurture: 'warning',
+    passed: 'danger',
+    withdrawn: 'danger',
+};
+function useCandidatePatch(candidate) {
+    return usePatch(useUpdateCandidate, candidate);
+}
+export function CandidateStatusField({ candidate, plain = false, }) {
+    const { patch, error } = useCandidatePatch(candidate);
+    return (_jsxs("div", { className: "inline-flex flex-col gap-1", children: [_jsx(InlineEdit, { value: candidate.status, onChange: (value) => {
+                    patch({ status: value });
+                }, options: STATUS_OPTIONS, display: plain ? (_jsx("span", { className: "px-1 text-[13px]", children: CANDIDATE_STATUS_LABELS[candidate.status] })) : (_jsx(Chip, { tone: STATUS_TONES[candidate.status], children: CANDIDATE_STATUS_LABELS[candidate.status] })), displayClassName: plain ? 'not-italic text-[13px]' : 'not-italic inline-flex', className: plain ? '' : '!w-auto' }), error !== null && _jsx(ErrorPanel, { error: error })] }));
+}
+export function CandidateStageField({ candidate, plain = false, }) {
+    const { patch, error } = useCandidatePatch(candidate);
+    const stage = candidate.interviewStage ?? FIRST_INTERVIEW_STAGE;
+    return (_jsxs("div", { className: "inline-flex flex-col gap-1", children: [_jsx(InlineEdit, { value: stage, onChange: (value) => {
+                    patch({ interviewStage: value });
+                }, options: STAGE_OPTIONS, display: plain ? (_jsx("span", { className: "px-1 text-[13px]", children: INTERVIEW_STAGE_LABELS[stage] })) : (_jsx("span", { className: "text-[12px] text-ink-muted", children: INTERVIEW_STAGE_LABELS[stage] })), displayClassName: plain ? 'not-italic text-[13px]' : 'not-italic', className: plain ? '' : '!w-auto' }), error !== null && _jsx(ErrorPanel, { error: error })] }));
+}
+/**
+ * Who vouched for this candidate.
+ *
+ * The candidate themselves is filtered out of the options: the API refuses a
+ * self-referral with a `422`, and offering a choice that cannot be made is worse
+ * than not offering it.
+ */
+export function CandidateReferrerField({ candidate, referrerName, }) {
+    const { patch, error } = useCandidatePatch(candidate);
+    const [search, setSearch] = useState('');
+    const searchable = usePeople({ term: search.trim().length > 0 ? search.trim() : undefined });
+    const options = [
+        ...(candidate.referrerPersonId === null
+            ? []
+            : [{ id: candidate.referrerPersonId, label: referrerName ?? candidate.referrerPersonId }]),
+        ...searchable.records
+            .filter((person) => person.id !== candidate.personId && person.id !== candidate.referrerPersonId)
+            .map((person) => ({
+            id: person.id,
+            label: person.name,
+            meta: person.email ?? undefined,
+        })),
+    ];
+    return (_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx(EntitySearch, { options: options, value: candidate.referrerPersonId ?? '', onChange: (referrerPersonId) => {
+                    patch({ referrerPersonId: referrerPersonId.length > 0 ? referrerPersonId : null });
+                }, onQueryChange: setSearch, placeholder: "Search people\u2026", emptyMessage: "No people match" }), error !== null && _jsx(ErrorPanel, { error: error })] }));
+}
+//# sourceMappingURL=candidateFields.js.map