@mesob/auth-react 0.1.0 → 0.2.0

package/dist/components/auth/{auth-page-layout.d.ts → auth-layout.d.ts}

@@ -1,13 +1,13 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
 
-type AuthPageLayoutProps = {
+type AuthLayoutProps = {
     title: string;
     description?: string;
     children: ReactNode;
     footer?: ReactNode;
     logoImage?: string;
 };
-declare const AuthPageLayout: ({ title, description, children, footer, logoImage, }: AuthPageLayoutProps) => react_jsx_runtime.JSX.Element;
+declare const AuthLayout: ({ title, description, children, footer, logoImage, }: AuthLayoutProps) => react_jsx_runtime.JSX.Element;
 
-export { AuthPageLayout };
+export { AuthLayout };

package/dist/components/auth/{auth-page-layout.js → auth-layout.js}

@@ -1,8 +1,8 @@
 "use client";
 
-// src/components/auth/auth-page-layout.tsx
+// src/components/auth/auth-layout.tsx
 import { jsx, jsxs } from "react/jsx-runtime";
-var AuthPageLayout = ({
+var AuthLayout = ({
   title,
   description,
   children,
@@ -20,6 +20,6 @@ var AuthPageLayout = ({
   ] });
 };
 export {
-  AuthPageLayout
+  AuthLayout
 };
-//# sourceMappingURL=auth-page-layout.js.map
+//# sourceMappingURL=auth-layout.js.map

package/dist/components/auth/auth-layout.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/components/auth/auth-layout.tsx"],"sourcesContent":["'use client';\n\nimport type { ReactNode } from 'react';\n\ntype AuthLayoutProps = {\n  title: string;\n  description?: string;\n  children: ReactNode;\n  footer?: ReactNode;\n  logoImage?: string;\n};\n\nexport const AuthLayout = ({\n  title,\n  description,\n  children,\n  footer,\n  logoImage,\n}: AuthLayoutProps) => {\n  return (\n    <div className=\"space-y-4\">\n      <div className=\"flex size-8 mb-6 w-full items-center justify-center rounded-md\">\n        {/** biome-ignore lint/performance/noImgElement: logo image */}\n        <img src={logoImage || ''} alt=\"Mesob\" width={42} height={42} />\n      </div>\n      <div className=\"text-center\">\n        <h1 className=\"text-2xl font-bold tracking-tight\">{title}</h1>\n        {description && (\n          <p className=\"mt-2 text-sm text-muted-foreground\">{description}</p>\n        )}\n      </div>\n\n      {children}\n\n      <div className=\"mt-2 w-full\">\n        {footer && (\n          <div className=\"w-full text-center text-sm text-muted-foreground\">\n            {footer}\n          </div>\n        )}\n      </div>\n    </div>\n  );\n};\n"],"mappings":";;;AAuBQ,cAEF,YAFE;AAXD,IAAM,aAAa,CAAC;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAAuB;AACrB,SACE,qBAAC,SAAI,WAAU,aACb;AAAA,wBAAC,SAAI,WAAU,kEAEb,8BAAC,SAAI,KAAK,aAAa,IAAI,KAAI,SAAQ,OAAO,IAAI,QAAQ,IAAI,GAChE;AAAA,IACA,qBAAC,SAAI,WAAU,eACb;AAAA,0BAAC,QAAG,WAAU,qCAAqC,iBAAM;AAAA,MACxD,eACC,oBAAC,OAAE,WAAU,sCAAsC,uBAAY;AAAA,OAEnE;AAAA,IAEC;AAAA,IAED,oBAAC,SAAI,WAAU,eACZ,oBACC,oBAAC,SAAI,WAAU,oDACZ,kBACH,GAEJ;AAAA,KACF;AAEJ;","names":[]}

package/dist/components/auth/countdown.js

@@ -3,7 +3,10 @@
 // src/components/auth/countdown.tsx
 import { Button } from "@mesob/ui/components/button";
 import { Spinner } from "@mesob/ui/components/spinner";
-import { useEffect as useEffect2, useState as useState2 } from "react";
+import { useEffect, useState as useState2 } from "react";
+
+// src/hooks/use-translator.ts
+import { useMesob } from "@mesob/ui/components/mesob-context";
 
 // src/lib/translations.ts
 function createTranslator(messages, namespace) {
@@ -36,7 +39,12 @@ import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { deepmerge } from "deepmerge-ts";
 import createFetchClient from "openapi-fetch";
 import createClient from "openapi-react-query";
-import { createContext, useContext, useEffect, useState } from "react";
+import { createContext, useContext, useMemo, useState } from "react";
+
+// src/utils/cookie.ts
+var isProduction = typeof process !== "undefined" && process.env.NODE_ENV === "production";
+
+// src/provider.tsx
 import { jsx } from "react/jsx-runtime";
 var SessionContext = createContext(null);
 var ApiContext = createContext(null);
@@ -44,9 +52,6 @@ var ConfigContext = createContext(null);
 var queryClient = new QueryClient({
   defaultOptions: {
     queries: {
-      staleTime: 1e3 * 60 * 5,
-      gcTime: 1e3 * 60 * 10,
-      retry: 1,
       refetchOnWindowFocus: false
     }
   }
@@ -61,7 +66,11 @@ function useConfig() {
 
 // src/hooks/use-translator.ts
 function useTranslator(namespace) {
+  const mesob = useMesob();
   const { config } = useConfig();
+  if (mesob?.t) {
+    return (key, params) => mesob.t(namespace ? `${namespace}.${key}` : key, params);
+  }
   return createTranslator(config.messages || {}, namespace);
 }
 
@@ -75,7 +84,7 @@ var Countdown = ({
   const t = useTranslator("Common");
   const [seconds, setSeconds] = useState2(initialSeconds);
   const [isResending, setIsResending] = useState2(false);
-  useEffect2(() => {
+  useEffect(() => {
     if (seconds <= 0) {
       return;
     }

package/dist/components/auth/countdown.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/auth/countdown.tsx","../../../src/lib/translations.ts","../../../src/provider.tsx","../../../src/hooks/use-translator.ts"],"sourcesContent":["'use client';\n\nimport { Button } from '@mesob/ui/components/button';\nimport { Spinner } from '@mesob/ui/components/spinner';\nimport { useEffect, useState } from 'react';\nimport { useTranslator } from '../../hooks/use-translator';\n\ntype CountdownProps = {\n  initialSeconds?: number;\n  onResend: () => Promise<void> | void;\n  resending?: boolean;\n};\n\nexport const Countdown = ({\n  initialSeconds = 60,\n  onResend,\n  resending = false,\n}: CountdownProps) => {\n  const t = useTranslator('Common');\n  const [seconds, setSeconds] = useState(initialSeconds);\n  const [isResending, setIsResending] = useState(false);\n\n  useEffect(() => {\n    if (seconds <= 0) {\n      return;\n    }\n\n    const timer = setInterval(() => {\n      setSeconds((prev) => {\n        if (prev <= 1) {\n          clearInterval(timer);\n          return 0;\n        }\n        return prev - 1;\n      });\n    }, 1000);\n\n    return () => clearInterval(timer);\n  }, [seconds]);\n\n  const handleResend = async () => {\n    setIsResending(true);\n    try {\n      await onResend();\n      setSeconds(initialSeconds);\n    } catch (_error) {\n      // Error handling is done by parent\n    } finally {\n      setIsResending(false);\n    }\n  };\n\n  if (seconds > 0) {\n    return (\n      <Button variant=\"ghost\" disabled>\n        {t('resendIn', { seconds })}\n      </Button>\n    );\n  }\n\n  return (\n    <Button\n      variant=\"ghost\"\n      onClick={handleResend}\n      disabled={isResending || resending}\n    >\n      {isResending || (resending && <Spinner />)}\n      {t('resend')}\n    </Button>\n  );\n};\n","type Messages = Record<string, unknown>;\n\nexport function createTranslator(messages: Messages, namespace?: string) {\n  return (key: string, params?: Record<string, string | number>): string => {\n    const fullKey = namespace ? `${namespace}.${key}` : key;\n    const keys = fullKey.split('.');\n\n    let value: unknown = messages;\n    for (const k of keys) {\n      if (value && typeof value === 'object' && value !== null) {\n        value = (value as Record<string, unknown>)[k];\n      } else {\n        return fullKey;\n      }\n    }\n\n    if (typeof value !== 'string') {\n      return fullKey;\n    }\n\n    // Simple parameter replacement\n    if (params) {\n      return value.replace(/\\{(\\w+)\\}/g, (_, param) =>\n        String(params[param] ?? `{${param}}`),\n      );\n    }\n\n    return value;\n  };\n}\n","'use client';\n\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { deepmerge } from 'deepmerge-ts';\nimport createFetchClient from 'openapi-fetch';\nimport createClient from 'openapi-react-query';\nimport type { ReactNode } from 'react';\nimport { createContext, useContext, useEffect, useState } from 'react';\nimport type { paths } from './data/openapi';\nimport { createTranslator } from './lib/translations';\nimport {\n  type AuthClientConfig,\n  type AuthResponse,\n  defaultAuthClientConfig,\n  type Session,\n  type User,\n} from './types';\nimport { createCustomFetch } from './utils/custom-fetch';\n\ntype OpenApiHooks = any;\n\ntype SessionState = {\n  user: User | null;\n  session: Session | null;\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  error: Error | null;\n};\n\ntype SessionContextValue = SessionState & {\n  refresh: () => Promise<void>;\n  signOut: () => Promise<void>;\n};\n\ntype ApiContextValue = {\n  hooks: OpenApiHooks;\n  setAuth: (auth: AuthResponse) => void;\n  clearAuth: () => void;\n  refresh: () => Promise<void>;\n};\n\ntype ConfigContextValue = {\n  config: AuthClientConfig;\n  t: (key: string, params?: Record<string, string | number>) => string;\n};\n\nconst SessionContext = createContext<SessionContextValue | null>(null);\nconst ApiContext = createContext<ApiContextValue | null>(null);\nconst ConfigContext = createContext<ConfigContextValue | null>(null);\n\nconst queryClient = new QueryClient({\n  defaultOptions: {\n    queries: {\n      staleTime: 1000 * 60 * 5,\n      gcTime: 1000 * 60 * 10,\n      retry: 1,\n      refetchOnWindowFocus: false,\n    },\n  },\n});\n\nexport function useSession() {\n  const context = useContext(SessionContext);\n  if (!context) {\n    throw new Error('useSession must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useApi() {\n  const context = useContext(ApiContext);\n  if (!context) {\n    throw new Error('useApi must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useConfig() {\n  const context = useContext(ConfigContext);\n  if (!context) {\n    throw new Error('useConfig must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\ntype MesobAuthProviderProps = {\n  config: AuthClientConfig;\n  children: ReactNode;\n};\n\nexport function MesobAuthProvider({\n  config,\n  children,\n}: MesobAuthProviderProps) {\n  const mergedConfig = deepmerge(\n    { ...defaultAuthClientConfig } as Partial<AuthClientConfig>,\n    config,\n  ) as AuthClientConfig;\n\n  const api = createFetchClient<paths>({\n    baseUrl: mergedConfig.baseURL,\n    fetch: createCustomFetch(mergedConfig),\n  });\n\n  const hooks = createClient(api);\n\n  return (\n    <QueryClientProvider client={queryClient}>\n      <AuthStateProvider config={mergedConfig} hooks={hooks}>\n        {children}\n      </AuthStateProvider>\n    </QueryClientProvider>\n  );\n}\n\ntype AuthStateProviderProps = {\n  config: AuthClientConfig;\n  hooks: OpenApiHooks;\n  children: ReactNode;\n};\n\nfunction AuthStateProvider({\n  config,\n  hooks,\n  children,\n}: AuthStateProviderProps) {\n  const [authState, setAuthState] = useState<{\n    user: User | null;\n    session: Session | null;\n    isLoading: boolean;\n    error: Error | null;\n  }>({\n    user: null,\n    session: null,\n    isLoading: false,\n    error: null,\n  });\n\n  const {\n    data: sessionData,\n    isLoading: sessionLoading,\n    error: sessionError,\n    refetch,\n  } = hooks.useQuery(\n    'get',\n    '/session',\n    {},\n    {\n      enabled: true,\n      refetchOnMount: true,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: false,\n    },\n  );\n\n  useEffect(() => {\n    if (sessionLoading) {\n      setAuthState((prev) => ({ ...prev, isLoading: true }));\n      return;\n    }\n\n    if (sessionError) {\n      setAuthState({\n        user: null,\n        session: null,\n        isLoading: false,\n        error: sessionError as Error,\n      });\n      return;\n    }\n\n    if (sessionData) {\n      setAuthState({\n        user: sessionData.user,\n        session: sessionData.session,\n        isLoading: false,\n        error: null,\n      });\n      return;\n    }\n\n    setAuthState({\n      user: null,\n      session: null,\n      isLoading: false,\n      error: null,\n    });\n  }, [sessionData, sessionLoading, sessionError]);\n\n  const refresh = async () => {\n    await refetch();\n  };\n\n  const setAuth = (auth: AuthResponse) => {\n    setAuthState({\n      user: auth.user,\n      session: auth.session,\n      isLoading: false,\n      error: null,\n    });\n  };\n\n  const clearAuth = () => {\n    setAuthState({\n      user: null,\n      session: null,\n      isLoading: false,\n      error: null,\n    });\n  };\n\n  const signOutMutation = hooks.useMutation('post', '/sign-out');\n\n  const signOut = async () => {\n    try {\n      await signOutMutation.mutateAsync({});\n    } finally {\n      clearAuth();\n    }\n  };\n\n  const t = createTranslator(config.messages || {});\n\n  return (\n    <ConfigContext.Provider value={{ config, t }}>\n      <ApiContext.Provider value={{ hooks, setAuth, clearAuth, refresh }}>\n        <SessionContext.Provider\n          value={{\n            user: authState.user,\n            session: authState.session,\n            isLoading: authState.isLoading,\n            isAuthenticated: !!authState.user && !!authState.session,\n            error: authState.error,\n            refresh,\n            signOut,\n          }}\n        >\n          {children}\n        </SessionContext.Provider>\n      </ApiContext.Provider>\n    </ConfigContext.Provider>\n  );\n}\n","import { createTranslator } from '../lib/translations';\nimport { useConfig } from '../provider';\n\nexport function useTranslator(namespace?: string) {\n  const { config } = useConfig();\n  return createTranslator(config.messages || {}, namespace);\n}\n"],"mappings":";;;AAEA,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,aAAAA,YAAW,YAAAC,iBAAgB;;;ACF7B,SAAS,iBAAiB,UAAoB,WAAoB;AACvE,SAAO,CAAC,KAAa,WAAqD;AACxE,UAAM,UAAU,YAAY,GAAG,SAAS,IAAI,GAAG,KAAK;AACpD,UAAM,OAAO,QAAQ,MAAM,GAAG;AAE9B,QAAI,QAAiB;AACrB,eAAW,KAAK,MAAM;AACpB,UAAI,SAAS,OAAO,UAAU,YAAY,UAAU,MAAM;AACxD,gBAAS,MAAkC,CAAC;AAAA,MAC9C,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AAGA,QAAI,QAAQ;AACV,aAAO,MAAM;AAAA,QAAQ;AAAA,QAAc,CAAC,GAAG,UACrC,OAAO,OAAO,KAAK,KAAK,IAAI,KAAK,GAAG;AAAA,MACtC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AC3BA,SAAS,aAAa,2BAA2B;AACjD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,OAAO,kBAAkB;AAEzB,SAAS,eAAe,YAAY,WAAW,gBAAgB;AAqGzD;AA9DN,IAAM,iBAAiB,cAA0C,IAAI;AACrE,IAAM,aAAa,cAAsC,IAAI;AAC7D,IAAM,gBAAgB,cAAyC,IAAI;AAEnE,IAAM,cAAc,IAAI,YAAY;AAAA,EAClC,gBAAgB;AAAA,IACd,SAAS;AAAA,MACP,WAAW,MAAO,KAAK;AAAA,MACvB,QAAQ,MAAO,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACF,CAAC;AAkBM,SAAS,YAAY;AAC1B,QAAM,UAAU,WAAW,aAAa;AACxC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO;AACT;;;AChFO,SAAS,cAAc,WAAoB;AAChD,QAAM,EAAE,OAAO,IAAI,UAAU;AAC7B,SAAO,iBAAiB,OAAO,YAAY,CAAC,GAAG,SAAS;AAC1D;;;AHgDM,gBAAAC,MAOF,YAPE;AAzCC,IAAM,YAAY,CAAC;AAAA,EACxB,iBAAiB;AAAA,EACjB;AAAA,EACA,YAAY;AACd,MAAsB;AACpB,QAAM,IAAI,cAAc,QAAQ;AAChC,QAAM,CAAC,SAAS,UAAU,IAAIC,UAAS,cAAc;AACrD,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AAEpD,EAAAC,WAAU,MAAM;AACd,QAAI,WAAW,GAAG;AAChB;AAAA,IACF;AAEA,UAAM,QAAQ,YAAY,MAAM;AAC9B,iBAAW,CAAC,SAAS;AACnB,YAAI,QAAQ,GAAG;AACb,wBAAc,KAAK;AACnB,iBAAO;AAAA,QACT;AACA,eAAO,OAAO;AAAA,MAChB,CAAC;AAAA,IACH,GAAG,GAAI;AAEP,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,eAAe,YAAY;AAC/B,mBAAe,IAAI;AACnB,QAAI;AACF,YAAM,SAAS;AACf,iBAAW,cAAc;AAAA,IAC3B,SAAS,QAAQ;AAAA,IAEjB,UAAE;AACA,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,MAAI,UAAU,GAAG;AACf,WACE,gBAAAF,KAAC,UAAO,SAAQ,SAAQ,UAAQ,MAC7B,YAAE,YAAY,EAAE,QAAQ,CAAC,GAC5B;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,SAAS;AAAA,MACT,UAAU,eAAe;AAAA,MAExB;AAAA,uBAAgB,aAAa,gBAAAA,KAAC,WAAQ;AAAA,QACtC,EAAE,QAAQ;AAAA;AAAA;AAAA,EACb;AAEJ;","names":["useEffect","useState","jsx","useState","useEffect"]}
+{"version":3,"sources":["../../../src/components/auth/countdown.tsx","../../../src/hooks/use-translator.ts","../../../src/lib/translations.ts","../../../src/provider.tsx","../../../src/utils/cookie.ts"],"sourcesContent":["'use client';\n\nimport { Button } from '@mesob/ui/components/button';\nimport { Spinner } from '@mesob/ui/components/spinner';\nimport { useEffect, useState } from 'react';\nimport { useTranslator } from '../../hooks/use-translator';\n\ntype CountdownProps = {\n  initialSeconds?: number;\n  onResend: () => Promise<void> | void;\n  resending?: boolean;\n};\n\nexport const Countdown = ({\n  initialSeconds = 60,\n  onResend,\n  resending = false,\n}: CountdownProps) => {\n  const t = useTranslator('Common');\n  const [seconds, setSeconds] = useState(initialSeconds);\n  const [isResending, setIsResending] = useState(false);\n\n  useEffect(() => {\n    if (seconds <= 0) {\n      return;\n    }\n\n    const timer = setInterval(() => {\n      setSeconds((prev) => {\n        if (prev <= 1) {\n          clearInterval(timer);\n          return 0;\n        }\n        return prev - 1;\n      });\n    }, 1000);\n\n    return () => clearInterval(timer);\n  }, [seconds]);\n\n  const handleResend = async () => {\n    setIsResending(true);\n    try {\n      await onResend();\n      setSeconds(initialSeconds);\n    } catch (_error) {\n      // Error handling is done by parent\n    } finally {\n      setIsResending(false);\n    }\n  };\n\n  if (seconds > 0) {\n    return (\n      <Button variant=\"ghost\" disabled>\n        {t('resendIn', { seconds })}\n      </Button>\n    );\n  }\n\n  return (\n    <Button\n      variant=\"ghost\"\n      onClick={handleResend}\n      disabled={isResending || resending}\n    >\n      {isResending || (resending && <Spinner />)}\n      {t('resend')}\n    </Button>\n  );\n};\n","import { useMesob } from '@mesob/ui/components/mesob-context';\nimport { createTranslator } from '../lib/translations';\nimport { useConfig } from '../provider';\n\nexport function useTranslator(namespace?: string) {\n  const mesob = useMesob();\n  const { config } = useConfig();\n\n  if (mesob?.t) {\n    return (key: string, params?: Record<string, string | number>) =>\n      mesob.t!(namespace ? `${namespace}.${key}` : key, params);\n  }\n\n  return createTranslator(config.messages || {}, namespace);\n}\n","type Messages = Record<string, unknown>;\n\nexport function createTranslator(messages: Messages, namespace?: string) {\n  return (key: string, params?: Record<string, string | number>): string => {\n    const fullKey = namespace ? `${namespace}.${key}` : key;\n    const keys = fullKey.split('.');\n\n    let value: unknown = messages;\n    for (const k of keys) {\n      if (value && typeof value === 'object' && value !== null) {\n        value = (value as Record<string, unknown>)[k];\n      } else {\n        return fullKey;\n      }\n    }\n\n    if (typeof value !== 'string') {\n      return fullKey;\n    }\n\n    // Simple parameter replacement\n    if (params) {\n      return value.replace(/\\{(\\w+)\\}/g, (_, param) =>\n        String(params[param] ?? `{${param}}`),\n      );\n    }\n\n    return value;\n  };\n}\n","'use client';\n\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { deepmerge } from 'deepmerge-ts';\nimport createFetchClient from 'openapi-fetch';\nimport createClient from 'openapi-react-query';\nimport type { ReactNode } from 'react';\nimport { createContext, useContext, useMemo, useState } from 'react';\nimport type { paths } from './data/openapi';\nimport { createTranslator } from './lib/translations';\nimport {\n  type AuthClientConfig,\n  type AuthResponse,\n  defaultAuthClientConfig,\n  type Session,\n  type User,\n} from './types';\nimport { getSessionCookieName } from './utils/cookie';\nimport { createCustomFetch } from './utils/custom-fetch';\n\n// biome-ignore lint/suspicious/noExplicitAny: OpenAPI hooks type\ntype OpenApiHooks = any;\n\n// --- Utility: Check if running on server ---\nfunction isServer(): boolean {\n  return typeof document === 'undefined';\n}\n\n/**\n * @deprecated Cookie is httpOnly and cannot be read client-side.\n * Use `useSession().isAuthenticated` instead.\n * This function always returns false on client.\n */\nexport function hasAuthCookie(_cookieName: string): boolean {\n  // Cookie is httpOnly, can't check client-side\n  // Always return false - use useSession() for auth status\n  return false;\n}\n\n// --- Types ---\nexport type AuthStatus = 'loading' | 'authenticated' | 'unauthenticated';\n\ntype AuthState = {\n  user: User | null;\n  session: Session | null;\n  status: AuthStatus;\n  error: Error | null;\n};\n\ntype SessionContextValue = AuthState & {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  refresh: () => Promise<void>;\n  signOut: () => Promise<void>;\n};\n\ntype ApiContextValue = {\n  hooks: OpenApiHooks;\n  setAuth: (auth: AuthResponse) => void;\n  clearAuth: () => void;\n  refresh: () => Promise<void>;\n};\n\ntype ConfigContextValue = {\n  config: AuthClientConfig;\n  cookieName: string;\n  t: (key: string, params?: Record<string, string | number>) => string;\n};\n\nconst SessionContext = createContext<SessionContextValue | null>(null);\nconst ApiContext = createContext<ApiContextValue | null>(null);\nconst ConfigContext = createContext<ConfigContextValue | null>(null);\n\nconst queryClient = new QueryClient({\n  defaultOptions: {\n    queries: {\n      refetchOnWindowFocus: false,\n    },\n  },\n});\n\n// --- Hooks ---\n\n/**\n * Get session state including user, session, and auth status.\n * - `status`: 'loading' | 'authenticated' | 'unauthenticated'\n * - `isLoading`: true while fetching session\n * - `isAuthenticated`: true if user and session exist\n */\nexport function useSession(): SessionContextValue {\n  const context = useContext(SessionContext);\n  if (!context) {\n    throw new Error('useSession must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useApi(): ApiContextValue {\n  const context = useContext(ApiContext);\n  if (!context) {\n    throw new Error('useApi must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useConfig(): ConfigContextValue {\n  const context = useContext(ConfigContext);\n  if (!context) {\n    throw new Error('useConfig must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\n/**\n * @deprecated Cookie is httpOnly, can't be checked client-side.\n * Use `useSession().isAuthenticated` instead.\n */\nexport function useHasAuthCookie(): boolean {\n  const { status } = useSession();\n  return status === 'authenticated' || status === 'loading';\n}\n\n// --- Provider ---\n\ntype MesobAuthProviderProps = {\n  config: AuthClientConfig;\n  children: ReactNode;\n};\n\nexport function MesobAuthProvider({\n  config,\n  children,\n}: MesobAuthProviderProps) {\n  const mergedConfig = useMemo(\n    () =>\n      deepmerge(\n        { ...defaultAuthClientConfig } as Partial<AuthClientConfig>,\n        config,\n      ) as AuthClientConfig,\n    [config],\n  );\n\n  const api = useMemo(\n    () =>\n      createFetchClient<paths>({\n        baseUrl: mergedConfig.baseURL,\n        fetch: createCustomFetch(mergedConfig),\n      }),\n    [mergedConfig],\n  );\n\n  const hooks = useMemo(() => createClient(api), [api]);\n  const cookieName = useMemo(\n    () => getSessionCookieName(mergedConfig),\n    [mergedConfig],\n  );\n\n  return (\n    <QueryClientProvider client={queryClient}>\n      <AuthStateProvider\n        config={mergedConfig}\n        hooks={hooks}\n        cookieName={cookieName}\n      >\n        {children}\n      </AuthStateProvider>\n    </QueryClientProvider>\n  );\n}\n\ntype AuthStateProviderProps = {\n  config: AuthClientConfig;\n  hooks: OpenApiHooks;\n  cookieName: string;\n  children: ReactNode;\n};\n\nfunction AuthStateProvider({\n  config,\n  hooks,\n  cookieName,\n  children,\n}: AuthStateProviderProps) {\n  // Manual override for sign-out / sign-in\n  const [override, setOverride] = useState<AuthState | null>(null);\n\n  // Always fetch session - cookie is httpOnly, can't check client-side\n  // Server will read the cookie and return user/session if valid\n  const {\n    data: sessionData,\n    isLoading,\n    isFetched,\n    error: sessionError,\n    refetch,\n  } = hooks.useQuery(\n    'get',\n    '/session',\n    {},\n    {\n      enabled: !(override || isServer()),\n      refetchOnMount: false,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: false,\n      gcTime: 0,\n      staleTime: 0,\n    },\n  );\n\n  // Derive state directly - no useEffect\n  const user = override?.user ?? sessionData?.user ?? null;\n  const session = override?.session ?? sessionData?.session ?? null;\n  const error = override?.error ?? (sessionError as Error | null);\n\n  // Check error status code\n  const errorStatus = (() => {\n    if (!sessionError) {\n      return null;\n    }\n    const err = sessionError as { status?: number };\n    return err.status ?? null;\n  })();\n\n  // Check if error is a network/connection error\n  const isNetworkError = (() => {\n    if (!sessionError) {\n      return false;\n    }\n    const error = sessionError as Error & { cause?: unknown; data?: unknown };\n    const errorMessage =\n      error.message || String(error) || JSON.stringify(error);\n    // Network errors: TypeError, DOMException, or fetch failures\n    if (\n      error instanceof TypeError ||\n      error instanceof DOMException ||\n      error.name === 'TypeError' ||\n      errorMessage.includes('Failed to fetch') ||\n      errorMessage.includes('ERR_CONNECTION_REFUSED') ||\n      errorMessage.includes('NetworkError') ||\n      errorMessage.includes('Network request failed') ||\n      errorMessage.includes('fetch failed')\n    ) {\n      return true;\n    }\n    // Check error cause\n    if (error.cause) {\n      const causeStr = String(error.cause);\n      if (\n        causeStr.includes('Failed to fetch') ||\n        causeStr.includes('ERR_CONNECTION_REFUSED') ||\n        causeStr.includes('NetworkError')\n      ) {\n        return true;\n      }\n    }\n    return false;\n  })();\n\n  // Compute status\n  // biome-ignore lint: Status determination requires multiple checks\n  const status: AuthStatus = (() => {\n    if (override) {\n      return override.status;\n    }\n    if (isServer()) {\n      return 'loading';\n    }\n    if (user && session) {\n      return 'authenticated';\n    }\n    // Check for network errors or auth errors first - allow auth page to show\n    if (isNetworkError || errorStatus === 401) {\n      return 'unauthenticated';\n    }\n    // If we have an error but it's not a network error, still check loading state\n    if (sessionError && !isNetworkError && errorStatus !== 401) {\n      if (errorStatus && errorStatus >= 500) {\n        return 'authenticated';\n      }\n      // Other errors mean unauthenticated\n      if (isFetched) {\n        return 'unauthenticated';\n      }\n    }\n    if (isLoading || !isFetched) {\n      return 'loading';\n    }\n    if (isFetched && !user && !session) {\n      return 'unauthenticated';\n    }\n    return 'unauthenticated';\n  })();\n\n  const signOutMutation = hooks.useMutation('post', '/sign-out');\n  const t = createTranslator(config.messages || {});\n\n  const setAuth = (auth: AuthResponse) => {\n    setOverride({\n      user: auth.user,\n      session: auth.session,\n      status: 'authenticated',\n      error: null,\n    });\n  };\n\n  const clearAuth = () => {\n    setOverride({\n      user: null,\n      session: null,\n      status: 'unauthenticated',\n      error: null,\n    });\n  };\n\n  const refresh = async () => {\n    setOverride(null);\n    await refetch();\n  };\n\n  const signOut = async () => {\n    try {\n      await signOutMutation.mutateAsync({});\n    } finally {\n      clearAuth();\n    }\n  };\n\n  return (\n    <ConfigContext.Provider value={{ config, cookieName, t }}>\n      <ApiContext.Provider value={{ hooks, setAuth, clearAuth, refresh }}>\n        <SessionContext.Provider\n          value={{\n            user,\n            session,\n            status,\n            error,\n            isLoading: status === 'loading',\n            isAuthenticated: status === 'authenticated',\n            refresh,\n            signOut,\n          }}\n        >\n          {children}\n        </SessionContext.Provider>\n      </ApiContext.Provider>\n    </ConfigContext.Provider>\n  );\n}\n","import type { AuthClientConfig } from '../types';\n\nconst isProduction =\n  typeof process !== 'undefined' && process.env.NODE_ENV === 'production';\n\nexport const getSessionCookieName = (config: AuthClientConfig): string => {\n  const prefix = config.cookiePrefix || '';\n  const baseName = 'session_token';\n  if (prefix) {\n    return `${prefix}_${baseName}`;\n  }\n  return isProduction ? '__Host-session_token' : baseName;\n};\n"],"mappings":";;;AAEA,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,WAAW,YAAAA,iBAAgB;;;ACJpC,SAAS,gBAAgB;;;ACElB,SAAS,iBAAiB,UAAoB,WAAoB;AACvE,SAAO,CAAC,KAAa,WAAqD;AACxE,UAAM,UAAU,YAAY,GAAG,SAAS,IAAI,GAAG,KAAK;AACpD,UAAM,OAAO,QAAQ,MAAM,GAAG;AAE9B,QAAI,QAAiB;AACrB,eAAW,KAAK,MAAM;AACpB,UAAI,SAAS,OAAO,UAAU,YAAY,UAAU,MAAM;AACxD,gBAAS,MAAkC,CAAC;AAAA,MAC9C,OAAO;AACL,eAAO;AAAA,MACT;AAAA,IACF;AAEA,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AAGA,QAAI,QAAQ;AACV,aAAO,MAAM;AAAA,QAAQ;AAAA,QAAc,CAAC,GAAG,UACrC,OAAO,OAAO,KAAK,KAAK,IAAI,KAAK,GAAG;AAAA,MACtC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AC3BA,SAAS,aAAa,2BAA2B;AACjD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,OAAO,kBAAkB;AAEzB,SAAS,eAAe,YAAY,SAAS,gBAAgB;;;ACL7D,IAAM,eACJ,OAAO,YAAY,eAAe,QAAQ,IAAI,aAAa;;;AD4JvD;AA1FN,IAAM,iBAAiB,cAA0C,IAAI;AACrE,IAAM,aAAa,cAAsC,IAAI;AAC7D,IAAM,gBAAgB,cAAyC,IAAI;AAEnE,IAAM,cAAc,IAAI,YAAY;AAAA,EAClC,gBAAgB;AAAA,IACd,SAAS;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACF,CAAC;AA0BM,SAAS,YAAgC;AAC9C,QAAM,UAAU,WAAW,aAAa;AACxC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,SAAO;AACT;;;AF3GO,SAAS,cAAc,WAAoB;AAChD,QAAM,QAAQ,SAAS;AACvB,QAAM,EAAE,OAAO,IAAI,UAAU;AAE7B,MAAI,OAAO,GAAG;AACZ,WAAO,CAAC,KAAa,WACnB,MAAM,EAAG,YAAY,GAAG,SAAS,IAAI,GAAG,KAAK,KAAK,MAAM;AAAA,EAC5D;AAEA,SAAO,iBAAiB,OAAO,YAAY,CAAC,GAAG,SAAS;AAC1D;;;ADwCM,gBAAAC,MAOF,YAPE;AAzCC,IAAM,YAAY,CAAC;AAAA,EACxB,iBAAiB;AAAA,EACjB;AAAA,EACA,YAAY;AACd,MAAsB;AACpB,QAAM,IAAI,cAAc,QAAQ;AAChC,QAAM,CAAC,SAAS,UAAU,IAAIC,UAAS,cAAc;AACrD,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AAEpD,YAAU,MAAM;AACd,QAAI,WAAW,GAAG;AAChB;AAAA,IACF;AAEA,UAAM,QAAQ,YAAY,MAAM;AAC9B,iBAAW,CAAC,SAAS;AACnB,YAAI,QAAQ,GAAG;AACb,wBAAc,KAAK;AACnB,iBAAO;AAAA,QACT;AACA,eAAO,OAAO;AAAA,MAChB,CAAC;AAAA,IACH,GAAG,GAAI;AAEP,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,eAAe,YAAY;AAC/B,mBAAe,IAAI;AACnB,QAAI;AACF,YAAM,SAAS;AACf,iBAAW,cAAc;AAAA,IAC3B,SAAS,QAAQ;AAAA,IAEjB,UAAE;AACA,qBAAe,KAAK;AAAA,IACtB;AAAA,EACF;AAEA,MAAI,UAAU,GAAG;AACf,WACE,gBAAAD,KAAC,UAAO,SAAQ,SAAQ,UAAQ,MAC7B,YAAE,YAAY,EAAE,QAAQ,CAAC,GAC5B;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,SAAS;AAAA,MACT,UAAU,eAAe;AAAA,MAExB;AAAA,uBAAgB,aAAa,gBAAAA,KAAC,WAAQ;AAAA,QACtC,EAAE,QAAQ;AAAA;AAAA;AAAA,EACb;AAEJ;","names":["useState","jsx","useState"]}

package/dist/components/auth/forgot-password.d.ts

@@ -1,13 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 
-type ForgotPasswordFormValues = {
-    account: string;
-};
-type ForgotPasswordProps = {
-    onSubmit: (values: ForgotPasswordFormValues) => Promise<void> | void;
-    isLoading?: boolean;
-    onBack?: () => void;
-};
-declare const ForgotPassword: ({ onSubmit, isLoading, }: ForgotPasswordProps) => react_jsx_runtime.JSX.Element;
+declare const ForgotPassword: () => react_jsx_runtime.JSX.Element;
 
 export { ForgotPassword };

package/dist/components/auth/forgot-password.js

@@ -2,6 +2,11 @@
 
 // src/components/auth/forgot-password.tsx
 import { zodResolver } from "@hookform/resolvers/zod";
+import {
+  Alert,
+  AlertDescription,
+  AlertTitle
+} from "@mesob/ui/components/alert";
 import { Button } from "@mesob/ui/components/button";
 import {
   Field,
@@ -10,10 +15,17 @@ import {
   FieldLabel
 } from "@mesob/ui/components/field";
 import { Input } from "@mesob/ui/components/input";
+import { useMesob as useMesob2 } from "@mesob/ui/components/mesob-context";
 import { Spinner } from "@mesob/ui/components/spinner";
+import { IconAlertCircle } from "@tabler/icons-react";
+import { useEffect, useState as useState2 } from "react";
 import { Controller, useForm } from "react-hook-form";
+import { toast } from "sonner";
 import { z } from "zod";
 
+// src/hooks/use-translator.ts
+import { useMesob } from "@mesob/ui/components/mesob-context";
+
 // src/lib/translations.ts
 function createTranslator(messages, namespace) {
   return (key, params) => {
@@ -45,7 +57,12 @@ import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { deepmerge } from "deepmerge-ts";
 import createFetchClient from "openapi-fetch";
 import createClient from "openapi-react-query";
-import { createContext, useContext, useEffect, useState } from "react";
+import { createContext, useContext, useMemo, useState } from "react";
+
+// src/utils/cookie.ts
+var isProduction = typeof process !== "undefined" && process.env.NODE_ENV === "production";
+
+// src/provider.tsx
 import { jsx } from "react/jsx-runtime";
 var SessionContext = createContext(null);
 var ApiContext = createContext(null);
@@ -53,13 +70,17 @@ var ConfigContext = createContext(null);
 var queryClient = new QueryClient({
   defaultOptions: {
     queries: {
-      staleTime: 1e3 * 60 * 5,
-      gcTime: 1e3 * 60 * 10,
-      retry: 1,
       refetchOnWindowFocus: false
     }
   }
 });
+function useApi() {
+  const context = useContext(ApiContext);
+  if (!context) {
+    throw new Error("useApi must be used within MesobAuthProvider");
+  }
+  return context;
+}
 function useConfig() {
   const context = useContext(ConfigContext);
   if (!context) {
@@ -70,65 +91,268 @@ function useConfig() {
 
 // src/hooks/use-translator.ts
 function useTranslator(namespace) {
+  const mesob = useMesob();
   const { config } = useConfig();
+  if (mesob?.t) {
+    return (key, params) => mesob.t(namespace ? `${namespace}.${key}` : key, params);
+  }
   return createTranslator(config.messages || {}, namespace);
 }
 
-// src/components/auth/forgot-password.tsx
+// src/constants/auth.error.codes.ts
+var AUTH_ERROR_MAPPING = {
+  USER_NOT_FOUND: {
+    title: "Account Not Found",
+    description: "We could not find an account with that identifier. Please check your spelling or sign up."
+  },
+  INVALID_PASSWORD: {
+    title: "Invalid Password",
+    description: "The password you entered is incorrect. Please try again."
+  },
+  USER_EXISTS: {
+    title: "Account Already Exists",
+    description: "An account with this identifier already exists. Please sign in instead."
+  },
+  VERIFICATION_EXPIRED: {
+    title: "Verification Expired",
+    description: "The verification code or link has expired. Please request a new one."
+  },
+  VERIFICATION_MISMATCH: {
+    title: "Invalid Code",
+    description: "The verification code you entered is invalid. Please double-check and try again."
+  },
+  VERIFICATION_NOT_FOUND: {
+    title: "Verification Not Found",
+    description: "We could not find a pending verification request. Please restart the process."
+  },
+  TOO_MANY_ATTEMPTS: {
+    title: "Too Many Attempts",
+    description: "You have made too many requests recently. Please wait a moment before trying again."
+  },
+  REQUIRES_VERIFICATION: {
+    title: "Verification Required",
+    description: "You need to verify your account before you can continue. Please check your email or phone."
+  },
+  UNAUTHORIZED: {
+    title: "Unauthorized",
+    description: "You are not authorized to perform this action. Please sign in again."
+  },
+  ACCESS_DENIED: {
+    title: "Access Denied",
+    description: "You do not have permission to access this resource. Please contact support if you believe this is an error."
+  },
+  HAS_NO_PASSWORD: {
+    title: "No Password Set",
+    description: "Your account does not have a password set (e.g. social login). Please sign in with your provider or reset your password."
+  }
+};
+var validCodes = Object.keys(AUTH_ERROR_MAPPING);
+
+// src/utils/handle-error.ts
+function isAuthError(err) {
+  return typeof err === "object" && err !== null && "message" in err && typeof err.message === "string";
+}
+function extractErrorCode(err) {
+  if (err.code && validCodes.includes(err.code)) {
+    return err.code;
+  }
+  if (err.message) {
+    const messageUpper = err.message.toUpperCase().trim();
+    if (validCodes.includes(messageUpper)) {
+      return messageUpper;
+    }
+  }
+  return "";
+}
+function sanitizeErrorMessage(message) {
+  const lowerMessage = message.toLowerCase();
+  const isDatabaseError = lowerMessage.includes("failed query") || lowerMessage.includes("select") || lowerMessage.includes("insert") || lowerMessage.includes("update") || lowerMessage.includes("delete") || lowerMessage.includes("from") || lowerMessage.includes("where") || lowerMessage.includes("limit") || lowerMessage.includes("params:") || lowerMessage.includes("query") || message.includes('"iam".') || message.includes('"tenants"') || message.includes('"users"') || message.includes('"sessions"') || message.includes('"accounts"') || lowerMessage.includes("relation") || lowerMessage.includes("column") || lowerMessage.includes("syntax error") || lowerMessage.includes("database") || lowerMessage.includes("postgres") || lowerMessage.includes("sql");
+  if (isDatabaseError) {
+    return "An error occurred while processing your request";
+  }
+  return message;
+}
+function handleAuthError(err, setError, t) {
+  const errorCode = extractErrorCode(err);
+  if (errorCode && AUTH_ERROR_MAPPING[errorCode]) {
+    const mapping = AUTH_ERROR_MAPPING[errorCode];
+    setError({
+      title: mapping.title,
+      description: mapping.description
+    });
+    return;
+  }
+  const sanitizedMessage = sanitizeErrorMessage(
+    err.message || t("errors.fallback")
+  );
+  setError({
+    title: t("errors.fallback"),
+    description: sanitizedMessage
+  });
+}
+function handleGenericError(err, setError, t) {
+  const rawMessage = err instanceof Error ? err.message : t("errors.fallback");
+  const sanitizedMessage = sanitizeErrorMessage(rawMessage);
+  setError({
+    title: "Error",
+    description: sanitizedMessage
+  });
+}
+var handleError = (err, setError, t) => {
+  if (isAuthError(err)) {
+    handleAuthError(err, setError, t);
+  } else {
+    handleGenericError(err, setError, t);
+  }
+};
+
+// src/components/auth/auth-layout.tsx
 import { jsx as jsx2, jsxs } from "react/jsx-runtime";
+var AuthLayout = ({
+  title,
+  description,
+  children,
+  footer,
+  logoImage
+}) => {
+  return /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+    /* @__PURE__ */ jsx2("div", { className: "flex size-8 mb-6 w-full items-center justify-center rounded-md", children: /* @__PURE__ */ jsx2("img", { src: logoImage || "", alt: "Mesob", width: 42, height: 42 }) }),
+    /* @__PURE__ */ jsxs("div", { className: "text-center", children: [
+      /* @__PURE__ */ jsx2("h1", { className: "text-2xl font-bold tracking-tight", children: title }),
+      description && /* @__PURE__ */ jsx2("p", { className: "mt-2 text-sm text-muted-foreground", children: description })
+    ] }),
+    children,
+    /* @__PURE__ */ jsx2("div", { className: "mt-2 w-full", children: footer && /* @__PURE__ */ jsx2("div", { className: "w-full text-center text-sm text-muted-foreground", children: footer }) })
+  ] });
+};
+
+// src/components/auth/forgot-password.tsx
+import { jsx as jsx3, jsxs as jsxs2 } from "react/jsx-runtime";
 var forgotPasswordSchema = (t) => z.object({
   account: z.string().min(1, t("errors.accountRequired"))
 });
-var ForgotPassword = ({
-  onSubmit,
-  isLoading = false
-}) => {
+var ForgotPassword = () => {
+  const { hooks } = useApi();
+  const { config } = useConfig();
+  const mesob = useMesob2();
   const t = useTranslator("Auth.forgotPassword");
+  const Link = mesob?.linkComponent ?? config.navigation?.linkComponent;
+  const [isLoading, setIsLoading] = useState2(false);
+  const [error, setError] = useState2(null);
+  const forgotPasswordMutation = hooks.useMutation("post", "/password/forgot");
+  const signInLink = config.navigation?.links?.signIn || "/auth/sign-in";
+  const onNavigate = config.navigation?.onNavigate || ((path) => {
+    if (typeof window !== "undefined") {
+      window.location.href = path;
+    }
+  });
+  const logoImage = config.ui.logoImage;
   const form = useForm({
     resolver: zodResolver(forgotPasswordSchema(t)),
     defaultValues: {
       account: ""
     }
   });
+  useEffect(() => {
+    if (error) {
+      toast.error(error.title || "Error", {
+        description: error.description
+      });
+    }
+  }, [error]);
   const handleSubmit = form.handleSubmit(async (values) => {
-    await onSubmit(values);
+    setIsLoading(true);
+    setError(null);
+    try {
+      const res = await forgotPasswordMutation.mutateAsync({
+        body: {
+          identifier: values.account
+        }
+      });
+      if ("verificationId" in res && res.verificationId) {
+        onNavigate(`/auth/reset-password?verificationId=${res.verificationId}`);
+      } else {
+        onNavigate(
+          `/auth/reset-password?identifier=${encodeURIComponent(values.account)}`
+        );
+      }
+    } catch (err) {
+      handleError(err, setError, t);
+    } finally {
+      setIsLoading(false);
+    }
   });
-  return /* @__PURE__ */ jsxs("form", { id: "forgot-password-form", onSubmit: handleSubmit, children: [
-    /* @__PURE__ */ jsx2(FieldGroup, { children: /* @__PURE__ */ jsx2(
-      Controller,
-      {
-        name: "account",
-        control: form.control,
-        render: ({ field, fieldState }) => /* @__PURE__ */ jsxs(Field, { "data-invalid": fieldState.invalid, children: [
-          /* @__PURE__ */ jsx2(FieldLabel, { htmlFor: "forgot-password-account", children: t("form.accountLabel") }),
-          /* @__PURE__ */ jsx2(
-            Input,
+  let errorContent = null;
+  if (error) {
+    if (typeof error === "string") {
+      errorContent = { title: "Error", description: error };
+    } else {
+      errorContent = error;
+    }
+  }
+  return /* @__PURE__ */ jsxs2(
+    AuthLayout,
+    {
+      title: t("title"),
+      description: t("description"),
+      logoImage,
+      footer: Link ? /* @__PURE__ */ jsx3(Link, { href: signInLink, className: "text-primary hover:underline", children: t("footer.backToSignIn") }) : /* @__PURE__ */ jsx3(
+        "a",
+        {
+          href: signInLink,
+          onClick: (e) => {
+            e.preventDefault();
+            onNavigate(signInLink);
+          },
+          className: "text-primary hover:underline",
+          children: t("footer.backToSignIn")
+        }
+      ),
+      children: [
+        /* @__PURE__ */ jsxs2("form", { id: "forgot-password-form", onSubmit: handleSubmit, children: [
+          /* @__PURE__ */ jsx3(FieldGroup, { children: /* @__PURE__ */ jsx3(
+            Controller,
             {
-              ...field,
-              id: "forgot-password-account",
-              type: "text",
-              placeholder: t("form.accountPlaceholder"),
-              "aria-invalid": fieldState.invalid
+              name: "account",
+              control: form.control,
+              render: ({ field, fieldState }) => /* @__PURE__ */ jsxs2(Field, { "data-invalid": fieldState.invalid, children: [
+                /* @__PURE__ */ jsx3(FieldLabel, { htmlFor: "forgot-password-account", children: t("form.accountLabel") }),
+                /* @__PURE__ */ jsx3(
+                  Input,
+                  {
+                    ...field,
+                    id: "forgot-password-account",
+                    type: "text",
+                    placeholder: t("form.accountPlaceholder"),
+                    "aria-invalid": fieldState.invalid
+                  }
+                ),
+                fieldState.invalid && /* @__PURE__ */ jsx3(FieldError, { errors: [fieldState.error] })
+              ] })
             }
-          ),
-          fieldState.invalid && /* @__PURE__ */ jsx2(FieldError, { errors: [fieldState.error] })
+          ) }),
+          /* @__PURE__ */ jsx3("div", { className: "mt-4", children: /* @__PURE__ */ jsxs2(
+            Button,
+            {
+              type: "submit",
+              form: "forgot-password-form",
+              className: "w-full",
+              disabled: isLoading || forgotPasswordMutation.isPending,
+              children: [
+                isLoading || forgotPasswordMutation.isPending && /* @__PURE__ */ jsx3(Spinner, {}),
+                isLoading || forgotPasswordMutation.isPending ? t("form.submitting") : t("form.submit")
+              ]
+            }
+          ) })
+        ] }),
+        errorContent && /* @__PURE__ */ jsxs2(Alert, { variant: "destructive", className: "mt-4", children: [
+          /* @__PURE__ */ jsx3(IconAlertCircle, { className: "h-4 w-4" }),
+          /* @__PURE__ */ jsx3(AlertTitle, { children: errorContent.title }),
+          /* @__PURE__ */ jsx3(AlertDescription, { children: errorContent.description })
         ] })
-      }
-    ) }),
-    /* @__PURE__ */ jsx2("div", { className: "mt-4", children: /* @__PURE__ */ jsxs(
-      Button,
-      {
-        type: "submit",
-        form: "forgot-password-form",
-        className: "w-full",
-        disabled: isLoading,
-        children: [
-          isLoading && /* @__PURE__ */ jsx2(Spinner, {}),
-          isLoading ? t("form.submitting") : t("form.submit")
-        ]
-      }
-    ) })
-  ] });
+      ]
+    }
+  );
 };
 export {
   ForgotPassword