@lalternative/auth 0.8.0 → 0.9.1

package/dist/index.js

@@ -21,7 +21,7 @@ function AuthField({
   hint,
   description,
   invalid = false,
-  fieldClassName = "border-foreground/25 bg-background",
+  fieldClassName = "border-foreground/30 bg-background",
   ...props
 }) {
   const id = useId();
@@ -35,7 +35,7 @@ function AuthField({
         "label",
         {
           htmlFor: id,
-          className: "text-sm font-medium leading-none text-foreground",
+          className: "text-[0.6875rem] font-semibold uppercase leading-none tracking-[0.09em] text-foreground/70",
           children: label
         }
       ),
@@ -51,13 +51,16 @@ function AuthField({
           "aria-invalid": invalid || void 0,
           "aria-describedby": descriptionId,
           className: [
-            "h-[52px] w-full rounded-lg border px-4 text-base",
-            "sm:h-11 sm:text-sm",
+            "h-[52px] w-full rounded-md border px-3.5 text-base",
+            "sm:h-[46px] sm:text-[0.9375rem]",
             isPassword ? "pr-12" : "",
-            "text-foreground placeholder:text-muted-foreground/70",
-            "transition-[border-color,box-shadow] duration-150 ease-out",
-            "focus-visible:outline-none focus-visible:ring-[3px]",
-            invalid ? "border-destructive bg-background focus-visible:border-destructive focus-visible:ring-destructive/20" : `${fieldClassName} focus-visible:border-ring focus-visible:ring-ring/15`,
+            "text-foreground placeholder:text-muted-foreground/60",
+            // Focus reads as the border committing rather than as a halo
+            // appearing beside it: the ring is tight and the border darkens to
+            // full ink in the same 180ms, so the field answers the caret.
+            "transition-[border-color,box-shadow] duration-200 ease-out",
+            "focus-visible:outline-none focus-visible:ring-2",
+            invalid ? "border-destructive bg-background focus-visible:border-destructive focus-visible:ring-destructive/15" : `${fieldClassName} focus-visible:border-foreground focus-visible:ring-foreground/10`,
             "disabled:cursor-not-allowed disabled:opacity-60"
           ].filter(Boolean).join(" ")
         }
@@ -107,7 +110,8 @@ function AuthSubmit({
   disabled = false,
   pendingLabel,
   children,
-  className = "bg-primary text-primary-foreground hover:bg-primary/90"
+  className = "bg-primary text-primary-foreground hover:bg-primary/90",
+  spacedAbove = false
 }) {
   return /* @__PURE__ */ jsxs2(
     "button",
@@ -116,11 +120,16 @@ function AuthSubmit({
       disabled: disabled || pending,
       "aria-busy": pending || void 0,
       className: [
-        "relative flex h-[52px] w-full items-center justify-center rounded-lg sm:h-11",
-        "text-base font-medium sm:text-sm",
+        spacedAbove ? "!mt-7" : "",
+        "relative flex h-[52px] w-full items-center justify-center rounded-md sm:h-[46px]",
+        // Slightly tracked at this weight: a wide solid button set in plain
+        // medium reads as a slab, and the letterspacing is what makes it read
+        // as typeset rather than filled in.
+        "text-[0.9375rem] font-medium tracking-[0.01em]",
         className,
-        "shadow-sm transition-[background-color,transform,box-shadow] duration-150 ease-out",
-        "active:translate-y-px",
+        "transition-[background-color,transform,box-shadow] duration-200 ease-out",
+        "shadow-[0_1px_2px_rgba(0,0,0,0.08)] hover:shadow-[0_2px_8px_rgba(0,0,0,0.12)]",
+        "active:translate-y-px active:shadow-[0_1px_2px_rgba(0,0,0,0.08)]",
         "focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 focus-visible:ring-offset-background",
         "disabled:pointer-events-none disabled:opacity-55"
       ].join(" "),
@@ -141,6 +150,12 @@ function AuthSubmit({
 // src/components/login-form.tsx
 import { useState as useState2 } from "react";
 
+// src/email-not-verified.ts
+function isEmailNotVerified(error) {
+  if (!error) return false;
+  return error.code === "EMAIL_NOT_VERIFIED" || error.status === 403;
+}
+
 // src/components/auth-alert.tsx
 import { jsx as jsx3 } from "react/jsx-runtime";
 function AuthAlert({ children, tone = "error" }) {
@@ -245,8 +260,33 @@ function ProviderMark({ provider }) {
   return /* @__PURE__ */ jsx4("svg", { width: "17", height: "17", viewBox: "0 0 16 16", fill: "currentColor", "aria-hidden": "true", children: /* @__PURE__ */ jsx4("path", { d: "M8 0a8 8 0 0 0-2.53 15.59c.4.07.55-.17.55-.38l-.01-1.49c-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82a7.4 7.4 0 0 1 4 0c1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48l-.01 2.2c0 .21.15.46.55.38A8 8 0 0 0 8 0Z" }) });
 }
 
+// src/components/auth-link.tsx
+import { jsx as jsx5 } from "react/jsx-runtime";
+function AuthLink({ to, as: Link, className, children }) {
+  if (Link) {
+    return /* @__PURE__ */ jsx5(Link, { to, className, children });
+  }
+  return /* @__PURE__ */ jsx5("a", { href: to, className, children });
+}
+var AUTH_LINK_CLASS = "rounded font-medium text-foreground underline underline-offset-4 decoration-foreground/25 transition-colors hover:decoration-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring";
+var AUTH_HINT_LINK_CLASS = "rounded text-xs text-muted-foreground underline-offset-4 transition-colors hover:text-foreground hover:underline focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring";
+
+// src/invite-token.ts
+var MAX_TOKEN_LENGTH = 128;
+function normalizeInviteToken(value) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.length > MAX_TOKEN_LENGTH) return void 0;
+  return trimmed;
+}
+function withInviteToken(href, token) {
+  if (!token) return href;
+  const separator = href.includes("?") ? "&" : "?";
+  return `${href}${separator}invite=${encodeURIComponent(token)}`;
+}
+
 // src/components/login-form.tsx
-import { jsx as jsx5, jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
 var DEFAULTS = {
   title: "Connexion",
   subtitle: "Content de te revoir. Entre tes identifiants pour continuer.",
@@ -260,6 +300,7 @@ var DEFAULTS = {
   emailRequired: "Renseigne ton adresse e-mail",
   passwordRequired: "Renseigne ton mot de passe",
   invalidCredentials: "Adresse e-mail ou mot de passe incorrect",
+  emailNotVerified: "Ton adresse e-mail n'est pas encore confirm\xE9e. V\xE9rifie ta bo\xEEte de r\xE9ception.",
   // accountLinking is disabled in createPlatformAuth, so a social sign-in on an
   // address already registered with a password is refused with this code.
   // Without a message the button reads as broken rather than as a rejection.
@@ -269,6 +310,7 @@ var DEFAULTS = {
 };
 function LoginForm({
   onSuccess,
+  onEmailNotVerified,
   registerUrl = "/register",
   forgotPasswordUrl = "/forgot-password",
   socialCallbackUrl = "/",
@@ -278,6 +320,8 @@ function LoginForm({
   submitClassName,
   fieldClassName,
   error: externalError,
+  linkComponent,
+  invite,
   authClient
 }) {
   const t = { ...DEFAULTS, ...labels };
@@ -305,7 +349,13 @@ function LoginForm({
         password
       });
       if (res?.error) {
-        setError(res.error.message ?? t.invalidCredentials);
+        if (isEmailNotVerified(res.error) && onEmailNotVerified) {
+          onEmailNotVerified(email.trim());
+          return;
+        }
+        setError(
+          isEmailNotVerified(res.error) ? t.emailNotVerified : res.error.message ?? t.invalidCredentials
+        );
         return;
       }
       if (coreTokenUrl) {
@@ -323,7 +373,9 @@ function LoginForm({
     try {
       await authClient.signIn.social({
         provider,
-        callbackURL: socialCallbackUrl
+        // The invitation rides the callback: an OAuth sign-up leaves the
+        // browser, and the auth handler redeems the token on the way back.
+        callbackURL: withInviteToken(socialCallbackUrl, invite)
       });
     } catch (err) {
       const code = err instanceof Error ? err.message : "";
@@ -332,10 +384,10 @@ function LoginForm({
       );
     }
   };
-  return /* @__PURE__ */ jsxs4("div", { className: "space-y-6", children: [
-    /* @__PURE__ */ jsx5(AuthAlert, { children: error }),
-    /* @__PURE__ */ jsxs4("form", { onSubmit: handleSubmit, className: "space-y-5", noValidate: true, children: [
-      /* @__PURE__ */ jsx5(
+  return /* @__PURE__ */ jsxs4("div", { className: "space-y-7", children: [
+    /* @__PURE__ */ jsx6(AuthAlert, { children: error }),
+    /* @__PURE__ */ jsxs4("form", { onSubmit: handleSubmit, className: "space-y-[1.125rem]", noValidate: true, children: [
+      /* @__PURE__ */ jsx6(
         AuthField,
         {
           label: t.emailPlaceholder,
@@ -352,7 +404,7 @@ function LoginForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx5(
+      /* @__PURE__ */ jsx6(
         AuthField,
         {
           label: t.passwordPlaceholder,
@@ -364,19 +416,21 @@ function LoginForm({
           autoComplete: "current-password",
           invalid: !!error,
           fieldClassName,
-          hint: /* @__PURE__ */ jsx5(
-            "a",
+          hint: /* @__PURE__ */ jsx6(
+            AuthLink,
             {
-              href: forgotPasswordUrl,
-              className: "rounded text-xs text-muted-foreground underline-offset-4 transition-colors hover:text-foreground hover:underline focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+              to: forgotPasswordUrl,
+              as: linkComponent,
+              className: AUTH_HINT_LINK_CLASS,
               children: t.forgotPassword
             }
           )
         }
       ),
-      /* @__PURE__ */ jsx5(
+      /* @__PURE__ */ jsx6(
         AuthSubmit,
         {
+          spacedAbove: true,
           pending: isPending,
           disabled: !email.trim() || !password,
           pendingLabel: t.submitPending,
@@ -385,7 +439,7 @@ function LoginForm({
         }
       )
     ] }),
-    /* @__PURE__ */ jsx5(
+    /* @__PURE__ */ jsx6(
       SocialButtons,
       {
         providers: socialProviders,
@@ -396,11 +450,12 @@ function LoginForm({
     /* @__PURE__ */ jsxs4("p", { className: "text-center text-sm text-muted-foreground", children: [
       t.noAccount,
       " ",
-      /* @__PURE__ */ jsx5(
-        "a",
+      /* @__PURE__ */ jsx6(
+        AuthLink,
         {
-          href: registerUrl,
-          className: "rounded font-medium text-foreground underline underline-offset-4 decoration-foreground/25 transition-colors hover:decoration-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+          to: withInviteToken(registerUrl, invite),
+          as: linkComponent,
+          className: AUTH_LINK_CLASS,
           children: t.register
         }
       )
@@ -414,7 +469,7 @@ LoginForm.defaults = {
 
 // src/components/register-form.tsx
 import { useState as useState3 } from "react";
-import { jsx as jsx6, jsxs as jsxs5 } from "react/jsx-runtime";
+import { jsx as jsx7, jsxs as jsxs5 } from "react/jsx-runtime";
 var MIN_PASSWORD_LENGTH = 8;
 var DEFAULTS2 = {
   title: "Cr\xE9er un compte",
@@ -444,6 +499,8 @@ function RegisterForm({
   submitClassName,
   fieldClassName,
   error: externalError,
+  linkComponent,
+  invite,
   authClient
 }) {
   const t = { ...DEFAULTS2, ...labels };
@@ -499,16 +556,18 @@ function RegisterForm({
     try {
       await authClient.signIn.social({
         provider,
-        callbackURL: socialCallbackUrl
+        // The invitation rides the callback: an OAuth sign-up leaves the
+        // browser, and the auth handler redeems the token on the way back.
+        callbackURL: withInviteToken(socialCallbackUrl, invite)
       });
     } catch (err) {
       setError(err instanceof Error ? err.message : t.signUpFailed);
     }
   };
-  return /* @__PURE__ */ jsxs5("div", { className: "space-y-6", children: [
-    /* @__PURE__ */ jsx6(AuthAlert, { children: error }),
-    /* @__PURE__ */ jsxs5("form", { onSubmit: handleSubmit, className: "space-y-5", noValidate: true, children: [
-      /* @__PURE__ */ jsx6(
+  return /* @__PURE__ */ jsxs5("div", { className: "space-y-7", children: [
+    /* @__PURE__ */ jsx7(AuthAlert, { children: error }),
+    /* @__PURE__ */ jsxs5("form", { onSubmit: handleSubmit, className: "space-y-[1.125rem]", noValidate: true, children: [
+      /* @__PURE__ */ jsx7(
         AuthField,
         {
           label: t.namePlaceholder,
@@ -521,7 +580,7 @@ function RegisterForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(
         AuthField,
         {
           label: t.emailPlaceholder,
@@ -537,7 +596,7 @@ function RegisterForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(
         AuthField,
         {
           label: t.passwordPlaceholder,
@@ -552,7 +611,7 @@ function RegisterForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(
         AuthField,
         {
           label: t.confirmPlaceholder,
@@ -566,18 +625,19 @@ function RegisterForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(
         AuthSubmit,
         {
+          spacedAbove: true,
           pending: isPending,
           pendingLabel: t.submitPending,
           className: submitClassName,
           children: t.submit
         }
       ),
-      legal && /* @__PURE__ */ jsx6("p", { className: "text-center text-xs leading-relaxed text-muted-foreground", children: legal })
+      legal && /* @__PURE__ */ jsx7("p", { className: "text-center text-xs leading-relaxed text-muted-foreground", children: legal })
     ] }),
-    /* @__PURE__ */ jsx6(
+    /* @__PURE__ */ jsx7(
       SocialButtons,
       {
         providers: socialProviders,
@@ -588,11 +648,12 @@ function RegisterForm({
     /* @__PURE__ */ jsxs5("p", { className: "text-center text-sm text-muted-foreground", children: [
       t.haveAccount,
       " ",
-      /* @__PURE__ */ jsx6(
-        "a",
+      /* @__PURE__ */ jsx7(
+        AuthLink,
         {
-          href: loginUrl,
-          className: "rounded font-medium text-foreground underline underline-offset-4 decoration-foreground/25 transition-colors hover:decoration-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+          to: withInviteToken(loginUrl, invite),
+          as: linkComponent,
+          className: AUTH_LINK_CLASS,
           children: t.login
         }
       )
@@ -608,7 +669,7 @@ RegisterForm.defaults = {
 import { useState as useState4 } from "react";
 
 // src/components/auth-otp-field.tsx
-import { jsx as jsx7, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx8, jsxs as jsxs6 } from "react/jsx-runtime";
 var OTP_LENGTH = 6;
 function AuthOtpField({
   label,
@@ -620,7 +681,7 @@ function AuthOtpField({
   fieldClassName = "border-foreground/25 bg-background"
 }) {
   return /* @__PURE__ */ jsxs6("div", { className: "space-y-2", children: [
-    /* @__PURE__ */ jsx7(
+    /* @__PURE__ */ jsx8(
       "label",
       {
         htmlFor: id,
@@ -628,7 +689,7 @@ function AuthOtpField({
         children: label
       }
     ),
-    /* @__PURE__ */ jsx7(
+    /* @__PURE__ */ jsx8(
       "input",
       {
         id,
@@ -657,7 +718,7 @@ function AuthOtpField({
 }
 
 // src/components/verify-email-form.tsx
-import { jsx as jsx8, jsxs as jsxs7 } from "react/jsx-runtime";
+import { jsx as jsx9, jsxs as jsxs7 } from "react/jsx-runtime";
 var DEFAULTS3 = {
   title: "V\xE9rifie ton adresse",
   subtitle: "Entre le code \xE0 6 chiffres envoy\xE9 \xE0",
@@ -682,6 +743,7 @@ function VerifyEmailForm({
   labels,
   submitClassName,
   fieldClassName,
+  linkComponent,
   authClient
 }) {
   const t = { ...DEFAULTS3, ...labels };
@@ -732,11 +794,11 @@ function VerifyEmailForm({
       setIsResending(false);
     }
   };
-  return /* @__PURE__ */ jsxs7("div", { className: "space-y-6", children: [
-    /* @__PURE__ */ jsx8(AuthAlert, { children: error }),
-    /* @__PURE__ */ jsx8(AuthAlert, { tone: "success", children: resendMessage }),
-    /* @__PURE__ */ jsxs7("form", { onSubmit: handleVerify, className: "space-y-5", noValidate: true, children: [
-      /* @__PURE__ */ jsx8(
+  return /* @__PURE__ */ jsxs7("div", { className: "space-y-7", children: [
+    /* @__PURE__ */ jsx9(AuthAlert, { children: error }),
+    /* @__PURE__ */ jsx9(AuthAlert, { tone: "success", children: resendMessage }),
+    /* @__PURE__ */ jsxs7("form", { onSubmit: handleVerify, className: "space-y-[1.125rem]", noValidate: true, children: [
+      /* @__PURE__ */ jsx9(
         AuthOtpField,
         {
           id: "verify-email-otp",
@@ -747,9 +809,10 @@ function VerifyEmailForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx8(
+      /* @__PURE__ */ jsx9(
         AuthSubmit,
         {
+          spacedAbove: true,
           pending: isVerifying,
           disabled: otp.length < OTP_LENGTH,
           pendingLabel: t.submitPending,
@@ -759,7 +822,7 @@ function VerifyEmailForm({
       )
     ] }),
     /* @__PURE__ */ jsxs7("div", { className: "space-y-4 text-center text-sm text-muted-foreground", children: [
-      /* @__PURE__ */ jsx8(
+      /* @__PURE__ */ jsx9(
         "button",
         {
           type: "button",
@@ -772,11 +835,12 @@ function VerifyEmailForm({
       /* @__PURE__ */ jsxs7("p", { children: [
         t.alreadyVerified,
         " ",
-        /* @__PURE__ */ jsx8(
-          "a",
+        /* @__PURE__ */ jsx9(
+          AuthLink,
           {
-            href: loginUrl,
-            className: "rounded font-medium text-foreground underline underline-offset-4 decoration-foreground/25 transition-colors hover:decoration-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+            to: loginUrl,
+            as: linkComponent,
+            className: AUTH_LINK_CLASS,
             children: t.login
           }
         )
@@ -791,7 +855,7 @@ VerifyEmailForm.defaults = {
 
 // src/components/forgot-password-form.tsx
 import { useState as useState5 } from "react";
-import { jsx as jsx9, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx10, jsxs as jsxs8 } from "react/jsx-runtime";
 var DEFAULTS4 = {
   title: "Mot de passe oubli\xE9 ?",
   subtitle: "Entre ton adresse e-mail et nous t'enverrons un code pour le r\xE9initialiser.",
@@ -809,6 +873,7 @@ function ForgotPasswordForm({
   labels,
   submitClassName,
   fieldClassName,
+  linkComponent,
   authClient
 }) {
   const t = { ...DEFAULTS4, ...labels };
@@ -839,10 +904,10 @@ function ForgotPasswordForm({
       setIsPending(false);
     }
   };
-  return /* @__PURE__ */ jsxs8("div", { className: "space-y-6", children: [
-    /* @__PURE__ */ jsx9(AuthAlert, { children: error }),
-    /* @__PURE__ */ jsxs8("form", { onSubmit: handleSubmit, className: "space-y-5", noValidate: true, children: [
-      /* @__PURE__ */ jsx9(
+  return /* @__PURE__ */ jsxs8("div", { className: "space-y-7", children: [
+    /* @__PURE__ */ jsx10(AuthAlert, { children: error }),
+    /* @__PURE__ */ jsxs8("form", { onSubmit: handleSubmit, className: "space-y-[1.125rem]", noValidate: true, children: [
+      /* @__PURE__ */ jsx10(
         AuthField,
         {
           label: t.emailPlaceholder,
@@ -858,9 +923,10 @@ function ForgotPasswordForm({
           invalid: !!error
         }
       ),
-      /* @__PURE__ */ jsx9(
+      /* @__PURE__ */ jsx10(
         AuthSubmit,
         {
+          spacedAbove: true,
           pending: isPending,
           disabled: !email.trim(),
           pendingLabel: t.submitPending,
@@ -872,11 +938,12 @@ function ForgotPasswordForm({
     /* @__PURE__ */ jsxs8("p", { className: "text-center text-sm text-muted-foreground", children: [
       t.rememberPassword,
       " ",
-      /* @__PURE__ */ jsx9(
-        "a",
+      /* @__PURE__ */ jsx10(
+        AuthLink,
         {
-          href: loginUrl,
-          className: "rounded font-medium text-foreground underline underline-offset-4 decoration-foreground/25 transition-colors hover:decoration-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+          to: loginUrl,
+          as: linkComponent,
+          className: AUTH_LINK_CLASS,
           children: t.login
         }
       )
@@ -890,7 +957,7 @@ ForgotPasswordForm.defaults = {
 
 // src/components/reset-password-form.tsx
 import { useState as useState6 } from "react";
-import { jsx as jsx10, jsxs as jsxs9 } from "react/jsx-runtime";
+import { jsx as jsx11, jsxs as jsxs9 } from "react/jsx-runtime";
 var MIN_PASSWORD_LENGTH2 = 8;
 var DEFAULTS5 = {
   title: "Nouveau mot de passe",
@@ -919,6 +986,7 @@ function ResetPasswordForm({
   labels,
   submitClassName,
   fieldClassName,
+  linkComponent,
   authClient
 }) {
   const t = { ...DEFAULTS5, ...labels };
@@ -982,11 +1050,11 @@ function ResetPasswordForm({
       setIsResending(false);
     }
   };
-  return /* @__PURE__ */ jsxs9("div", { className: "space-y-6", children: [
-    /* @__PURE__ */ jsx10(AuthAlert, { children: error }),
-    /* @__PURE__ */ jsx10(AuthAlert, { tone: "success", children: resendMessage }),
-    /* @__PURE__ */ jsxs9("form", { onSubmit: handleSubmit, className: "space-y-5", noValidate: true, children: [
-      /* @__PURE__ */ jsx10(
+  return /* @__PURE__ */ jsxs9("div", { className: "space-y-7", children: [
+    /* @__PURE__ */ jsx11(AuthAlert, { children: error }),
+    /* @__PURE__ */ jsx11(AuthAlert, { tone: "success", children: resendMessage }),
+    /* @__PURE__ */ jsxs9("form", { onSubmit: handleSubmit, className: "space-y-[1.125rem]", noValidate: true, children: [
+      /* @__PURE__ */ jsx11(
         AuthOtpField,
         {
           id: "reset-password-otp",
@@ -997,7 +1065,7 @@ function ResetPasswordForm({
           fieldClassName
         }
       ),
-      /* @__PURE__ */ jsx10(
+      /* @__PURE__ */ jsx11(
         AuthField,
         {
           label: t.passwordPlaceholder,
@@ -1011,7 +1079,7 @@ function ResetPasswordForm({
           invalid: tooShort
         }
       ),
-      /* @__PURE__ */ jsx10(
+      /* @__PURE__ */ jsx11(
         AuthField,
         {
           label: t.confirmPlaceholder,
@@ -1024,9 +1092,10 @@ function ResetPasswordForm({
           invalid: mismatch
         }
       ),
-      /* @__PURE__ */ jsx10(
+      /* @__PURE__ */ jsx11(
         AuthSubmit,
         {
+          spacedAbove: true,
           pending: isResetting,
           disabled: otp.length < OTP_LENGTH || !password || !confirmPassword,
           pendingLabel: t.submitPending,
@@ -1036,7 +1105,7 @@ function ResetPasswordForm({
       )
     ] }),
     /* @__PURE__ */ jsxs9("div", { className: "space-y-4 text-center text-sm text-muted-foreground", children: [
-      /* @__PURE__ */ jsx10(
+      /* @__PURE__ */ jsx11(
         "button",
         {
           type: "button",
@@ -1049,11 +1118,12 @@ function ResetPasswordForm({
       /* @__PURE__ */ jsxs9("p", { children: [
         t.rememberPassword,
         " ",
-        /* @__PURE__ */ jsx10(
-          "a",
+        /* @__PURE__ */ jsx11(
+          AuthLink,
           {
-            href: loginUrl,
-            className: "rounded font-medium text-foreground underline underline-offset-4 decoration-foreground/25 transition-colors hover:decoration-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring",
+            to: loginUrl,
+            as: linkComponent,
+            className: AUTH_LINK_CLASS,
             children: t.login
           }
         )
@@ -1067,20 +1137,20 @@ ResetPasswordForm.defaults = {
 };
 
 // src/components/auth-heading.tsx
-import { jsx as jsx11, jsxs as jsxs10 } from "react/jsx-runtime";
+import { jsx as jsx12, jsxs as jsxs10 } from "react/jsx-runtime";
 function AuthHeading({
   title,
   subtitle,
-  titleClassName = "text-2xl font-semibold tracking-tight"
+  titleClassName = "text-[2rem] font-semibold leading-[1.1] tracking-[-0.03em] sm:text-[2.25rem]"
 }) {
-  return /* @__PURE__ */ jsxs10("header", { className: "space-y-1.5 text-center", children: [
-    /* @__PURE__ */ jsx11("h1", { className: `leading-tight text-foreground ${titleClassName}`, children: title }),
-    subtitle && /* @__PURE__ */ jsx11("p", { className: "text-balance text-sm leading-relaxed text-muted-foreground", children: subtitle })
+  return /* @__PURE__ */ jsxs10("header", { className: "space-y-2.5 text-center", children: [
+    /* @__PURE__ */ jsx12("h1", { className: `text-foreground ${titleClassName}`, children: title }),
+    subtitle && /* @__PURE__ */ jsx12("p", { className: "text-balance text-[0.9375rem] leading-relaxed text-muted-foreground", children: subtitle })
   ] });
 }
 
 // src/components/auth-layout.tsx
-import { jsx as jsx12, jsxs as jsxs11 } from "react/jsx-runtime";
+import { jsx as jsx13, jsxs as jsxs11 } from "react/jsx-runtime";
 function AuthLayout({
   logo,
   panel,
@@ -1090,10 +1160,14 @@ function AuthLayout({
   children,
   footer
 }) {
-  return /* @__PURE__ */ jsx12("div", { className: "flex min-h-dvh flex-col bg-background px-5 pb-10 pt-12 sm:items-center sm:bg-muted/40 sm:px-6 sm:py-16", children: /* @__PURE__ */ jsxs11("div", { className: `mx-auto w-full ${panel ? "max-w-4xl" : "max-w-[420px]"}`, children: [
-    (logo || title) && /* @__PURE__ */ jsxs11("div", { className: "mb-7 space-y-5", children: [
-      logo && /* @__PURE__ */ jsx12("div", { className: "flex justify-center", children: logo }),
-      title && /* @__PURE__ */ jsx12(
+  return /* @__PURE__ */ jsx13("div", { className: "flex min-h-dvh flex-col bg-background px-5 pb-12 pt-14 sm:items-center sm:bg-muted/30 sm:px-6 sm:py-20", children: /* @__PURE__ */ jsxs11("div", { className: `mx-auto w-full ${panel ? "max-w-4xl" : "max-w-[400px]"}`, children: [
+    (logo || title) && // The spacing is composed, not repeated: the mark sits close to the
+    // title it introduces, and the gap down to the card is the largest
+    // on the screen — that step is what separates "who this is" from
+    // "what you do here".
+    /* @__PURE__ */ jsxs11("div", { className: "mb-10 space-y-6", children: [
+      logo && /* @__PURE__ */ jsx13("div", { className: "flex justify-center", children: logo }),
+      title && /* @__PURE__ */ jsx13(
         AuthHeading,
         {
           title,
@@ -1106,13 +1180,14 @@ function AuthLayout({
       "div",
       {
         className: [
-          "sm:rounded-lg sm:border sm:border-border/70 sm:bg-card sm:shadow-sm",
+          "sm:rounded-xl sm:border sm:border-foreground/[0.08] sm:bg-card",
+          "sm:shadow-[0_1px_2px_rgba(0,0,0,0.04),0_8px_24px_-12px_rgba(0,0,0,0.10)]",
           panel ? "sm:overflow-hidden md:grid md:grid-cols-2" : ""
         ].filter(Boolean).join(" "),
         children: [
           panel && // Decorative: it must never carry information the form does not,
           // so it is hidden from assistive tech rather than described.
-          /* @__PURE__ */ jsx12(
+          /* @__PURE__ */ jsx13(
             "div",
             {
               "aria-hidden": "true",
@@ -1120,16 +1195,16 @@ function AuthLayout({
               children: panel
             }
           ),
-          /* @__PURE__ */ jsx12("div", { className: "flex flex-col justify-center sm:p-8", children })
+          /* @__PURE__ */ jsx13("div", { className: "sm:px-7 sm:py-8", children })
         ]
       }
     ),
-    footer && /* @__PURE__ */ jsx12("div", { className: "mt-6 text-center text-xs leading-relaxed text-muted-foreground", children: footer })
+    footer && /* @__PURE__ */ jsx13("div", { className: "mt-8 text-center text-xs leading-relaxed text-muted-foreground", children: footer })
   ] }) });
 }
 
 // src/components/invitation-notice.tsx
-import { jsx as jsx13, jsxs as jsxs12 } from "react/jsx-runtime";
+import { jsx as jsx14, jsxs as jsxs12 } from "react/jsx-runtime";
 function defaultSupportEmail() {
   if (typeof window === "undefined") return void 0;
   const host = window.location.hostname;
@@ -1151,13 +1226,13 @@ function InvitationNotice({
   const contact = supportEmail ?? defaultSupportEmail();
   return /* @__PURE__ */ jsxs12("div", { className: "space-y-8", children: [
     /* @__PURE__ */ jsxs12("div", { children: [
-      /* @__PURE__ */ jsx13("h1", { className: "text-2xl font-bold tracking-tight", children: title }),
-      /* @__PURE__ */ jsx13("p", { className: "mt-1 text-sm text-muted-foreground", children: REASON_MESSAGE[reason] ?? REASON_MESSAGE.unknown })
+      /* @__PURE__ */ jsx14("h1", { className: "text-2xl font-bold tracking-tight", children: title }),
+      /* @__PURE__ */ jsx14("p", { className: "mt-1 text-sm text-muted-foreground", children: REASON_MESSAGE[reason] ?? REASON_MESSAGE.unknown })
     ] }),
     contact ? /* @__PURE__ */ jsxs12("p", { className: "text-sm text-muted-foreground", children: [
       "\xC9crivez-nous \xE0",
       " ",
-      /* @__PURE__ */ jsx13(
+      /* @__PURE__ */ jsx14(
         "a",
         {
           href: `mailto:${contact}`,
@@ -1171,9 +1246,35 @@ function InvitationNotice({
     action
   ] });
 }
+
+// src/oauth-error.ts
+function oauthErrorMessage(code, labels) {
+  switch (code) {
+    case "account_not_linked":
+      return labels.accountNotLinked;
+    case "access_denied":
+      return labels.socialCancelled;
+    default:
+      return labels.socialFailed;
+  }
+}
+function initialOAuthError(labels, param = "error") {
+  if (typeof window === "undefined") return void 0;
+  const code = new URLSearchParams(window.location.search).get(param);
+  if (!code) return void 0;
+  return oauthErrorMessage(code, labels);
+}
+function clearOAuthError(param = "error") {
+  if (typeof window === "undefined") return;
+  const url = new URL(window.location.href);
+  if (!url.searchParams.has(param)) return;
+  url.searchParams.delete(param);
+  window.history.replaceState({}, "", url.toString());
+}
 export {
   AuthField,
   AuthLayout,
+  AuthLink,
   AuthSubmit,
   ForgotPasswordForm,
   InvitationNotice,
@@ -1182,8 +1283,14 @@ export {
   ResetPasswordForm,
   SocialButtons,
   VerifyEmailForm,
+  clearOAuthError,
+  initialOAuthError,
+  isEmailNotVerified,
   isInvitationFailure,
+  normalizeInviteToken,
+  oauthErrorMessage,
   useLogout,
-  useSession
+  useSession,
+  withInviteToken
 };
 //# sourceMappingURL=index.js.map