@nextsparkjs/core 0.1.0-beta.187 → 0.1.0-beta.189

package/dist/components/api/keys/ApiKeyDisplay.js

@@ -27,7 +27,7 @@ function ApiKeyDisplay({ apiKey, keyName, warning, onClose }) {
       /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between", children: [
         /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
           /* @__PURE__ */ jsx(CheckCircle, { className: "h-5 w-5 text-green-600" }),
-          /* @__PURE__ */ jsx(CardTitle, { className: "text-green-800", children: "API Key creada exitosamente" })
+          /* @__PURE__ */ jsx(CardTitle, { className: "text-green-800", children: "API Key created successfully" })
         ] }),
         /* @__PURE__ */ jsx(Button, { variant: "ghost", size: "sm", onClick: onClose, children: /* @__PURE__ */ jsx(X, { className: "h-4 w-4" }) })
       ] }),
@@ -37,13 +37,13 @@ function ApiKeyDisplay({ apiKey, keyName, warning, onClose }) {
       warning && /* @__PURE__ */ jsxs(Alert, { variant: "destructive", children: [
         /* @__PURE__ */ jsx(AlertTriangle, { className: "h-4 w-4" }),
         /* @__PURE__ */ jsxs(AlertDescription, { children: [
-          /* @__PURE__ */ jsx("strong", { children: "\xA1Importante!" }),
+          /* @__PURE__ */ jsx("strong", { children: "Important!" }),
           " ",
           warning
         ] })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx("label", { className: "text-sm font-medium text-green-800", children: "Tu nueva API Key:" }),
+        /* @__PURE__ */ jsx("label", { className: "text-sm font-medium text-green-800", children: "Your new API Key:" }),
         /* @__PURE__ */ jsxs("div", { className: "flex gap-2", children: [
           /* @__PURE__ */ jsxs("div", { className: "relative flex-1", children: [
             /* @__PURE__ */ jsx(
@@ -76,29 +76,29 @@ function ApiKeyDisplay({ apiKey, keyName, warning, onClose }) {
               "data-cy": sel("settings.apiKeys.newKeyDisplay.copyButton"),
               children: [
                 /* @__PURE__ */ jsx(Copy, { className: "h-4 w-4 mr-2" }),
-                copied ? "Copiado!" : "Copiar"
+                copied ? "Copied!" : "Copy"
               ]
             }
           )
         ] })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "space-y-3", children: [
-        /* @__PURE__ */ jsx("h4", { className: "text-sm font-medium text-green-800", children: "C\xF3mo usar tu API Key:" }),
+        /* @__PURE__ */ jsx("h4", { className: "text-sm font-medium text-green-800", children: "How to use your API Key:" }),
         /* @__PURE__ */ jsxs("div", { className: "space-y-2 text-sm", children: [
           /* @__PURE__ */ jsxs("div", { children: [
-            /* @__PURE__ */ jsx("strong", { children: "1. Incluye la API key en el header Authorization:" }),
+            /* @__PURE__ */ jsx("strong", { children: "1. Include the API key in the Authorization header:" }),
             /* @__PURE__ */ jsxs("div", { className: "mt-1 p-2 bg-gray-100 rounded font-mono text-xs overflow-x-auto", children: [
               "Authorization: Bearer ",
               isVisible ? apiKey : "sk_live_\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022"
             ] })
           ] }),
           /* @__PURE__ */ jsxs("div", { children: [
-            /* @__PURE__ */ jsx("strong", { children: "2. Ejemplo con curl:" }),
+            /* @__PURE__ */ jsx("strong", { children: "2. Example with curl:" }),
             /* @__PURE__ */ jsx("div", { className: "mt-1 p-2 bg-gray-100 rounded font-mono text-xs overflow-x-auto", children: `curl -H "Authorization: Bearer ${isVisible ? apiKey : "YOUR_API_KEY"}" \\
      https://yourapp.com/api/v1/users` })
           ] }),
           /* @__PURE__ */ jsxs("div", { children: [
-            /* @__PURE__ */ jsx("strong", { children: "3. Ejemplo con JavaScript:" }),
+            /* @__PURE__ */ jsx("strong", { children: "3. Example with JavaScript:" }),
             /* @__PURE__ */ jsx("div", { className: "mt-1 p-2 bg-gray-100 rounded font-mono text-xs overflow-x-auto", children: `fetch('/api/v1/users', {
   headers: {
     'Authorization': 'Bearer ${isVisible ? apiKey : "YOUR_API_KEY"}',
@@ -109,20 +109,20 @@ function ApiKeyDisplay({ apiKey, keyName, warning, onClose }) {
         ] })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx("h4", { className: "text-sm font-medium text-green-800", children: "Consejos de seguridad:" }),
+        /* @__PURE__ */ jsx("h4", { className: "text-sm font-medium text-green-800", children: "Security tips:" }),
         /* @__PURE__ */ jsxs("ul", { className: "text-sm text-green-700 space-y-1 list-disc list-inside", children: [
-          /* @__PURE__ */ jsx("li", { children: "Nunca compartas tu API key p\xFAblicamente" }),
-          /* @__PURE__ */ jsx("li", { children: "Gu\xE1rdala como variable de entorno en tu aplicaci\xF3n" }),
-          /* @__PURE__ */ jsx("li", { children: "Revoca la key inmediatamente si crees que est\xE1 comprometida" }),
-          /* @__PURE__ */ jsx("li", { children: "Usa HTTPS siempre al hacer requests a la API" })
+          /* @__PURE__ */ jsx("li", { children: "Never share your API key publicly" }),
+          /* @__PURE__ */ jsx("li", { children: "Store it as an environment variable in your application" }),
+          /* @__PURE__ */ jsx("li", { children: "Revoke the key immediately if you think it's compromised" }),
+          /* @__PURE__ */ jsx("li", { children: "Always use HTTPS when making requests to the API" })
         ] })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "p-3 bg-blue-50 rounded-lg border border-blue-200", children: [
-        /* @__PURE__ */ jsx("h4", { className: "text-sm font-medium text-blue-800 mb-1", children: "L\xEDmites de la API:" }),
+        /* @__PURE__ */ jsx("h4", { className: "text-sm font-medium text-blue-800 mb-1", children: "API limits:" }),
         /* @__PURE__ */ jsxs("div", { className: "text-sm text-blue-700 space-y-1", children: [
-          /* @__PURE__ */ jsx("div", { children: "\u2022 1,000 requests por minuto" }),
-          /* @__PURE__ */ jsx("div", { children: "\u2022 Headers de rate limiting incluidos en respuestas" }),
-          /* @__PURE__ */ jsx("div", { children: "\u2022 Documentaci\xF3n completa disponible en /docs" })
+          /* @__PURE__ */ jsx("div", { children: "\u2022 1,000 requests per minute" }),
+          /* @__PURE__ */ jsx("div", { children: "\u2022 Rate limiting headers included in responses" }),
+          /* @__PURE__ */ jsx("div", { children: "\u2022 Full documentation available at /docs" })
         ] })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "flex gap-2 pt-2", children: [
@@ -134,11 +134,11 @@ function ApiKeyDisplay({ apiKey, keyName, warning, onClose }) {
             className: "flex-1",
             children: [
               /* @__PURE__ */ jsx(Copy, { className: "h-4 w-4 mr-2" }),
-              copied ? "API Key Copiada!" : "Copiar API Key"
+              copied ? "API Key Copied!" : "Copy API Key"
             ]
           }
         ),
-        /* @__PURE__ */ jsx(Button, { onClick: onClose, variant: "outline", children: "Entendido" })
+        /* @__PURE__ */ jsx(Button, { onClick: onClose, variant: "outline", children: "Got it" })
       ] })
     ] })
   ] });

package/dist/components/api/keys/CreateApiKeyDialog.js

@@ -35,8 +35,8 @@ function useScopeCatalogue() {
     return {
       ...SCOPE_CATEGORIES,
       app: {
-        name: "Aplicaci\xF3n",
-        description: "Scopes que esta aplicaci\xF3n define para sus propias rutas",
+        name: "Application",
+        description: "Scopes this application defines for its own routes",
         scopes: appScopes
       }
     };
@@ -134,35 +134,35 @@ function CreateApiKeyDialog({ open, onClose, onSuccess }) {
   };
   return /* @__PURE__ */ jsx(Dialog, { open, onOpenChange: handleClose, children: /* @__PURE__ */ jsxs(DialogContent, { className: "max-w-2xl max-h-[90vh] overflow-y-auto", "data-cy": sel("settings.apiKeys.createDialog.container"), children: [
     /* @__PURE__ */ jsxs(DialogHeader, { children: [
-      /* @__PURE__ */ jsx(DialogTitle, { children: "Crear nueva API Key" }),
-      /* @__PURE__ */ jsx(DialogDescription, { children: "Crea una API key para acceder a los endpoints externos de forma segura." })
+      /* @__PURE__ */ jsx(DialogTitle, { children: "Create new API Key" }),
+      /* @__PURE__ */ jsx(DialogDescription, { children: "Create an API key to securely access the external endpoints." })
     ] }),
     /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit, className: "space-y-6", children: [
       /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx(Label, { htmlFor: "name", children: "Nombre de la API Key" }),
+        /* @__PURE__ */ jsx(Label, { htmlFor: "name", children: "API Key Name" }),
         /* @__PURE__ */ jsx(
           Input,
           {
             id: "name",
             value: name,
             onChange: (e) => setName(e.target.value),
-            placeholder: "ej. Mi aplicaci\xF3n m\xF3vil",
+            placeholder: "e.g. My mobile app",
             maxLength: 100,
             "data-cy": sel("settings.apiKeys.createDialog.nameInput")
           }
         ),
-        /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "Un nombre descriptivo para identificar esta API key" })
+        /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "A descriptive name to identify this API key" })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-        /* @__PURE__ */ jsx(Label, { children: "Expiraci\xF3n" }),
+        /* @__PURE__ */ jsx(Label, { children: "Expiration" }),
         /* @__PURE__ */ jsxs(Select, { value: expiryOption, onValueChange: (value) => setExpiryOption(value), children: [
           /* @__PURE__ */ jsx(SelectTrigger, { children: /* @__PURE__ */ jsx(SelectValue, {}) }),
           /* @__PURE__ */ jsxs(SelectContent, { children: [
-            /* @__PURE__ */ jsx(SelectItem, { value: "never", children: "Nunca expira" }),
-            /* @__PURE__ */ jsx(SelectItem, { value: "30d", children: "30 d\xEDas" }),
-            /* @__PURE__ */ jsx(SelectItem, { value: "90d", children: "90 d\xEDas" }),
-            /* @__PURE__ */ jsx(SelectItem, { value: "1y", children: "1 a\xF1o" }),
-            /* @__PURE__ */ jsx(SelectItem, { value: "custom", children: "Fecha personalizada" })
+            /* @__PURE__ */ jsx(SelectItem, { value: "never", children: "Never expires" }),
+            /* @__PURE__ */ jsx(SelectItem, { value: "30d", children: "30 days" }),
+            /* @__PURE__ */ jsx(SelectItem, { value: "90d", children: "90 days" }),
+            /* @__PURE__ */ jsx(SelectItem, { value: "1y", children: "1 year" }),
+            /* @__PURE__ */ jsx(SelectItem, { value: "custom", children: "Custom date" })
           ] })
         ] }),
         expiryOption === "custom" && /* @__PURE__ */ jsx(
@@ -177,12 +177,12 @@ function CreateApiKeyDialog({ open, onClose, onSuccess }) {
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "space-y-4", "data-cy": sel("settings.apiKeys.createDialog.scopesContainer"), children: [
         /* @__PURE__ */ jsxs("div", { children: [
-          /* @__PURE__ */ jsx(Label, { children: "Permisos (Scopes)" }),
-          /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "Selecciona los permisos que tendr\xE1 esta API key" })
+          /* @__PURE__ */ jsx(Label, { children: "Permissions (Scopes)" }),
+          /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: "Choose the permissions this API key will have" })
         ] }),
         /* @__PURE__ */ jsxs(Alert, { children: [
           /* @__PURE__ */ jsx(Info, { className: "h-4 w-4" }),
-          /* @__PURE__ */ jsx(AlertDescription, { children: "Solo puedes asignar permisos que tu rol actual permite. Los permisos no se pueden cambiar despu\xE9s de crear la API key." })
+          /* @__PURE__ */ jsx(AlertDescription, { children: "You can only assign permissions that your current role allows. Permissions cannot be changed after creating the API key." })
         ] }),
         /* @__PURE__ */ jsx("div", { className: "space-y-4", children: Object.entries(scopeCatalogue).map(([categoryKey, category]) => {
           const isFullySelected = isCategoryFullySelected(category.scopes);
@@ -232,7 +232,7 @@ function CreateApiKeyDialog({ open, onClose, onSuccess }) {
         }) }),
         selectedScopes.length > 0 && /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
           /* @__PURE__ */ jsxs(Label, { children: [
-            "Permisos seleccionados (",
+            "Selected permissions (",
             selectedScopes.length,
             ")"
           ] }),
@@ -242,20 +242,20 @@ function CreateApiKeyDialog({ open, onClose, onSuccess }) {
       /* @__PURE__ */ jsxs(Alert, { variant: "destructive", children: [
         /* @__PURE__ */ jsx(AlertTriangle, { className: "h-4 w-4" }),
         /* @__PURE__ */ jsxs(AlertDescription, { children: [
-          /* @__PURE__ */ jsx("strong", { children: "Importante:" }),
-          " La API key se mostrar\xE1 solo una vez despu\xE9s de crearla. Gu\xE1rdala en un lugar seguro ya que no podr\xE1s verla nuevamente."
+          /* @__PURE__ */ jsx("strong", { children: "Important:" }),
+          " The API key will only be shown once after creation. Store it somewhere safe, as you won't be able to see it again."
         ] })
       ] })
     ] }),
     /* @__PURE__ */ jsxs(DialogFooter, { "data-cy": sel("settings.apiKeys.createDialog.footer"), children: [
-      /* @__PURE__ */ jsx(Button, { variant: "outline", onClick: handleClose, disabled: createApiKey.isPending, children: "Cancelar" }),
+      /* @__PURE__ */ jsx(Button, { variant: "outline", onClick: handleClose, disabled: createApiKey.isPending, children: "Cancel" }),
       /* @__PURE__ */ jsx(
         Button,
         {
           onClick: handleSubmit,
           disabled: createApiKey.isPending || selectedScopes.length === 0 || !name.trim(),
           "data-cy": sel("settings.apiKeys.createDialog.submitButton"),
-          children: createApiKey.isPending ? "Creando..." : "Crear API Key"
+          children: createApiKey.isPending ? "Creating..." : "Create API Key"
         }
       )
     ] })

package/dist/components/app/layouts/PublicNavbar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicNavbar.d.ts","sourceRoot":"","sources":["../../../../src/components/app/layouts/PublicNavbar.tsx"],"names":[],"mappings":"AAaA,wBAAgB,YAAY,4CAyJ3B"}
+{"version":3,"file":"PublicNavbar.d.ts","sourceRoot":"","sources":["../../../../src/components/app/layouts/PublicNavbar.tsx"],"names":[],"mappings":"AAqGA,wBAAgB,YAAY,4CAsG3B"}

package/dist/components/app/layouts/PublicNavbar.js

@@ -2,6 +2,7 @@
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import Link from "next/link";
 import { useAuth } from "../../../hooks/useAuth.js";
+import { useSessionHint } from "../../../hooks/useSessionHint.js";
 import { Button } from "../../ui/button.js";
 import { ThemeToggle } from "../misc/ThemeToggle.js";
 import { Menu, X } from "lucide-react";
@@ -9,11 +10,40 @@ import { useState } from "react";
 import { sel } from "../../../lib/test/index.js";
 import { useTranslations } from "next-intl";
 import { APP_NAME } from "../../../lib/config/index.js";
-function PublicNavbar() {
+function AuthActionsSkeleton({ layout }) {
+  return layout === "desktop" ? /* @__PURE__ */ jsxs("div", { className: "flex gap-2", children: [
+    /* @__PURE__ */ jsx("div", { className: "h-9 w-16 bg-muted animate-pulse rounded-md" }),
+    /* @__PURE__ */ jsx("div", { className: "h-9 w-20 bg-muted animate-pulse rounded-md" })
+  ] }) : /* @__PURE__ */ jsxs("div", { className: "flex flex-col space-y-2", children: [
+    /* @__PURE__ */ jsx("div", { className: "h-9 bg-muted animate-pulse rounded-md" }),
+    /* @__PURE__ */ jsx("div", { className: "h-9 bg-muted animate-pulse rounded-md" })
+  ] });
+}
+function SignedOutActions({ layout, onNavigate }) {
+  const tHome = useTranslations("home");
+  return layout === "desktop" ? /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(Button, { variant: "ghost", asChild: true, "data-cy": sel("public.navbar.loginButton"), children: /* @__PURE__ */ jsx(Link, { href: "/login", children: tHome("auth.signIn") }) }),
+    /* @__PURE__ */ jsx(Button, { asChild: true, "data-cy": sel("public.navbar.signupButton"), children: /* @__PURE__ */ jsx(Link, { href: "/signup", children: tHome("auth.createAccount") }) })
+  ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(Button, { variant: "ghost", asChild: true, className: "w-full", children: /* @__PURE__ */ jsx(Link, { href: "/login", onClick: onNavigate, children: tHome("auth.signIn") }) }),
+    /* @__PURE__ */ jsx(Button, { asChild: true, className: "w-full", children: /* @__PURE__ */ jsx(Link, { href: "/signup", onClick: onNavigate, children: tHome("auth.createAccount") }) })
+  ] });
+}
+function SessionActions({ layout, onNavigate }) {
   const { user, isLoading } = useAuth();
+  const tHome = useTranslations("home");
+  if (isLoading) return /* @__PURE__ */ jsx(AuthActionsSkeleton, { layout });
+  if (!user) return /* @__PURE__ */ jsx(SignedOutActions, { layout, onNavigate });
+  return layout === "desktop" ? /* @__PURE__ */ jsx(Button, { asChild: true, children: /* @__PURE__ */ jsx(Link, { href: "/dashboard", children: tHome("auth.goToDashboard") }) }) : /* @__PURE__ */ jsx(Button, { asChild: true, className: "w-full", children: /* @__PURE__ */ jsx(Link, { href: "/dashboard", onClick: onNavigate, children: tHome("auth.goToDashboard") }) });
+}
+function AuthActions(props) {
+  const { ready, signedIn } = useSessionHint();
+  if (!ready) return /* @__PURE__ */ jsx(AuthActionsSkeleton, { layout: props.layout });
+  return signedIn ? /* @__PURE__ */ jsx(SessionActions, { ...props }) : /* @__PURE__ */ jsx(SignedOutActions, { ...props });
+}
+function PublicNavbar() {
   const [isMenuOpen, setIsMenuOpen] = useState(false);
   const tNav = useTranslations("navigation");
-  const tHome = useTranslations("home");
   const appName = APP_NAME;
   const navigationItems = [
     { name: "features", href: "/features" },
@@ -53,13 +83,7 @@ function PublicNavbar() {
             /* @__PURE__ */ jsx("div", { className: "w-full flex-1 md:w-auto md:flex-none" }),
             /* @__PURE__ */ jsxs("div", { className: "hidden md:flex items-center gap-2", children: [
               /* @__PURE__ */ jsx(ThemeToggle, {}),
-              isLoading ? /* @__PURE__ */ jsxs("div", { className: "flex gap-2", children: [
-                /* @__PURE__ */ jsx("div", { className: "h-9 w-16 bg-muted animate-pulse rounded-md" }),
-                /* @__PURE__ */ jsx("div", { className: "h-9 w-20 bg-muted animate-pulse rounded-md" })
-              ] }) : user ? /* @__PURE__ */ jsx(Button, { asChild: true, children: /* @__PURE__ */ jsx(Link, { href: "/dashboard", children: tHome("auth.goToDashboard") }) }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-                /* @__PURE__ */ jsx(Button, { variant: "ghost", asChild: true, "data-cy": sel("public.navbar.loginButton"), children: /* @__PURE__ */ jsx(Link, { href: "/login", children: tHome("auth.signIn") }) }),
-                /* @__PURE__ */ jsx(Button, { asChild: true, "data-cy": sel("public.navbar.signupButton"), children: /* @__PURE__ */ jsx(Link, { href: "/signup", children: tHome("auth.createAccount") }) })
-              ] })
+              /* @__PURE__ */ jsx(AuthActions, { layout: "desktop" })
             ] }),
             /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 md:hidden", children: [
               /* @__PURE__ */ jsx(ThemeToggle, {}),
@@ -86,13 +110,7 @@ function PublicNavbar() {
             },
             item.name
           )) }),
-          /* @__PURE__ */ jsx("div", { className: "flex flex-col space-y-2 pt-4 border-t border-border", children: isLoading ? /* @__PURE__ */ jsxs("div", { className: "flex flex-col space-y-2", children: [
-            /* @__PURE__ */ jsx("div", { className: "h-9 bg-muted animate-pulse rounded-md" }),
-            /* @__PURE__ */ jsx("div", { className: "h-9 bg-muted animate-pulse rounded-md" })
-          ] }) : user ? /* @__PURE__ */ jsx(Button, { asChild: true, className: "w-full", children: /* @__PURE__ */ jsx(Link, { href: "/dashboard", onClick: () => setIsMenuOpen(false), children: tHome("auth.goToDashboard") }) }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-            /* @__PURE__ */ jsx(Button, { variant: "ghost", asChild: true, className: "w-full", children: /* @__PURE__ */ jsx(Link, { href: "/login", onClick: () => setIsMenuOpen(false), children: tHome("auth.signIn") }) }),
-            /* @__PURE__ */ jsx(Button, { asChild: true, className: "w-full", children: /* @__PURE__ */ jsx(Link, { href: "/signup", onClick: () => setIsMenuOpen(false), children: tHome("auth.createAccount") }) })
-          ] }) })
+          /* @__PURE__ */ jsx("div", { className: "flex flex-col space-y-2 pt-4 border-t border-border", children: /* @__PURE__ */ jsx(AuthActions, { layout: "mobile", onNavigate: () => setIsMenuOpen(false) }) })
         ] }) })
       ]
     }

package/dist/components/app/misc/ThemeToggle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThemeToggle.d.ts","sourceRoot":"","sources":["../../../../src/components/app/misc/ThemeToggle.tsx"],"names":[],"mappings":"AAiBA,wBAAgB,WAAW,4CA4H1B"}
+{"version":3,"file":"ThemeToggle.d.ts","sourceRoot":"","sources":["../../../../src/components/app/misc/ThemeToggle.tsx"],"names":[],"mappings":"AAiBA,wBAAgB,WAAW,4CA6H1B"}

package/dist/components/app/misc/ThemeToggle.js

@@ -12,10 +12,9 @@ import {
 import { useEffect, useState, useCallback } from "react";
 import { createAriaLabel, sel } from "../../../lib/test/index.js";
 import { useTranslations } from "next-intl";
-import { useAuth } from "../../../hooks/useAuth.js";
+import { hasSessionHint } from "../../../lib/auth/session-hint.js";
 function ThemeToggle() {
   const { setTheme, theme, forcedTheme } = useTheme();
-  const { user } = useAuth();
   const [mounted, setMounted] = useState(false);
   const [statusMessage, setStatusMessage] = useState("");
   const t = useTranslations("common");
@@ -30,7 +29,7 @@ function ThemeToggle() {
       system: t("theme.system")
     };
     setStatusMessage(`${t("theme.changed")} ${themeNames[newTheme]}`);
-    if (user == null ? void 0 : user.id) {
+    if (hasSessionHint()) {
       try {
         await fetch("/api/user/profile", {
           method: "PATCH",
@@ -49,7 +48,7 @@ function ThemeToggle() {
         console.error("[ThemeToggle] Failed to save theme preference:", error);
       }
     }
-  }, [setTheme, t, user]);
+  }, [setTheme, t]);
   if (forcedTheme) {
     return null;
   }

package/dist/components/auth/SessionCookieRefresher.d.ts

@@ -9,6 +9,11 @@ import { type UseSessionCookieRefreshOptions } from '../../hooks/useSessionCooki
  * `useSessionCookieRefresh` for the options and `lib/auth/session-refresh.ts`
  * for why render-time session reads cannot do this themselves.
  *
+ * It only asks while the browser is signed in (see `lib/auth/session-hint`),
+ * following the hint as a sign-in or sign-out on the page changes it, so an
+ * anonymous visitor makes no request; and each answer brings the locale cookie
+ * and the theme in line with the account (`useAccountPreferencesSync`).
+ *
  * @example
  * ```tsx
  * // app/layout.tsx

package/dist/components/auth/SessionCookieRefresher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SessionCookieRefresher.d.ts","sourceRoot":"","sources":["../../../src/components/auth/SessionCookieRefresher.tsx"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,qCAAqC,CAAA;AAE5C;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,GAAE,8BAAmC,OAGhF"}
+{"version":3,"file":"SessionCookieRefresher.d.ts","sourceRoot":"","sources":["../../../src/components/auth/SessionCookieRefresher.tsx"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,qCAAqC,CAAA;AAM5C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,GAAE,8BAAmC,OAOhF"}

package/dist/components/auth/SessionCookieRefresher.js

@@ -1,9 +1,15 @@
 "use client";
+import { useSyncExternalStore } from "react";
 import {
   useSessionCookieRefresh
 } from "../../hooks/useSessionCookieRefresh.js";
+import { useAccountPreferencesSync } from "../../hooks/useAccountPreferencesSync.js";
+import { hasSessionHint, subscribeSessionHint } from "../../lib/auth/session-hint.js";
+const signedOutOnServer = () => false;
 function SessionCookieRefresher(props = {}) {
-  useSessionCookieRefresh(props);
+  const signedIn = useSyncExternalStore(subscribeSessionHint, hasSessionHint, signedOutOnServer);
+  const onRefresh = useAccountPreferencesSync();
+  useSessionCookieRefresh({ ...props, enabled: (props.enabled ?? true) && signedIn, onRefresh });
   return null;
 }
 export {

package/dist/components/auth/forms/LoginForm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LoginForm.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/forms/LoginForm.tsx"],"names":[],"mappings":"AAmIA,wBAAgB,SAAS,4CAisBxB"}
+{"version":3,"file":"LoginForm.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/forms/LoginForm.tsx"],"names":[],"mappings":"AAsIA,wBAAgB,SAAS,4CAmvBxB"}

package/dist/components/auth/forms/LoginForm.js

@@ -6,7 +6,8 @@ import { useSearchParams } from "next/navigation";
 import { useForm } from "react-hook-form";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { z } from "zod";
-import { useAuth } from "../../../hooks/useAuth.js";
+import { useAuthActions } from "../../../hooks/useAuth.js";
+import { safeCallbackPath } from "../../../lib/auth/callback-url.js";
 import { useLastAuthMethod } from "../../../hooks/useLastAuthMethod.js";
 import { Button } from "../../ui/button.js";
 import { Input } from "../../ui/input.js";
@@ -24,6 +25,7 @@ import { AuthTranslationPreloader } from "../../../lib/i18n/AuthTranslationPrelo
 import { DevKeyring } from "../DevKeyring.js";
 import { DEV_CONFIG, PUBLIC_AUTH_CONFIG } from "../../../lib/config/config-sync.js";
 import { getPrimaryEmailMethod } from "../../../lib/auth/auth-methods.js";
+import { DEFAULT_OTP_CONFIG, formatOtpCountdown, getOtpSecondsRemaining } from "../../../lib/auth/otp-config.js";
 function getErrorMessageFromCode(error, t, context) {
   const authError = error;
   const errorCode = authError.code || getErrorCodeFromMessage(error.message);
@@ -94,13 +96,15 @@ function buildLoginSchema(t) {
     password: z.string().min(6, t("login.errors.passwordTooShort", { defaultValue: "Password must be at least 6 characters" }))
   });
 }
-const OTP_CODE_LENGTH = 6;
 function buildOtpEmailSchema(t) {
   return z.string().trim().email({ message: t("login.errors.invalidEmail", { defaultValue: "Invalid email" }) });
 }
-function buildOtpCodeSchema(t) {
-  return z.string().trim().regex(new RegExp(`^\\d{${OTP_CODE_LENGTH}}$`), {
-    message: t("login.errors.otpInvalidCode", { defaultValue: `Enter the ${OTP_CODE_LENGTH}-digit code` })
+function buildOtpCodeSchema(t, length) {
+  return z.string().trim().regex(new RegExp(`^\\d{${length}}$`), {
+    message: t("login.errors.otpInvalidCode", {
+      length,
+      defaultValue: `Enter the ${length}-digit code`
+    })
   });
 }
 function LoginForm() {
@@ -109,6 +113,9 @@ function LoginForm() {
   const googleEnabled = PUBLIC_AUTH_CONFIG.providers.google.enabled;
   const methods = PUBLIC_AUTH_CONFIG.methods;
   const otpEnabled = methods.includes("email-otp");
+  const otpConfig = PUBLIC_AUTH_CONFIG.otp ?? DEFAULT_OTP_CONFIG;
+  const otpLength = otpConfig.otpLength;
+  const otpExpiresIn = otpConfig.expiresIn;
   const devKeyringActive = process.env.NODE_ENV !== "production" && !!((_b = (_a = DEV_CONFIG) == null ? void 0 : _a.devKeyring) == null ? void 0 : _b.enabled);
   const passwordEnabled = methods.includes("email-password") || devKeyringActive;
   const signupVisible = (registrationMode === "open" || registrationMode === "domain-open") && methods.includes("email-password");
@@ -129,23 +136,36 @@ function LoginForm() {
   const [otpCode, setOtpCode] = useState("");
   const [otpEmailError, setOtpEmailError] = useState(null);
   const [otpCodeError, setOtpCodeError] = useState(null);
+  const [otpSentAt, setOtpSentAt] = useState(null);
+  const [otpSecondsLeft, setOtpSecondsLeft] = useState(otpExpiresIn);
   const isProcessingRef = useRef(false);
-  const { signIn, googleSignIn, sendOtp, signInWithOtp } = useAuth();
+  const { signIn, googleSignIn, sendOtp, signInWithOtp } = useAuthActions();
   const { lastMethod, isReady } = useLastAuthMethod();
   const t = useTranslations("auth");
   const loginSchema = useMemo(() => buildLoginSchema(t), [t]);
   const otpEmailSchema = useMemo(() => buildOtpEmailSchema(t), [t]);
-  const otpCodeSchema = useMemo(() => buildOtpCodeSchema(t), [t]);
+  const otpCodeSchema = useMemo(() => buildOtpCodeSchema(t, otpLength), [t, otpLength]);
   const searchParams = useSearchParams();
   const inviteEmail = searchParams.get("email");
   const fromInvite = searchParams.get("fromInvite") === "true";
-  const callbackUrl = searchParams.get("callbackUrl");
+  const callbackUrl = safeCallbackPath(searchParams.get("callbackUrl"));
   useEffect(() => {
     if (fromInvite && inviteEmail) {
       setShowEmailForm(true);
       setOtpEmail(inviteEmail);
     }
   }, [fromInvite, inviteEmail]);
+  useEffect(() => {
+    if (otpSentAt === null) return;
+    const tick = () => {
+      const remaining = getOtpSecondsRemaining(otpSentAt, otpExpiresIn);
+      setOtpSecondsLeft(remaining);
+      if (remaining <= 0) clearInterval(intervalId);
+    };
+    const intervalId = setInterval(tick, 1e3);
+    tick();
+    return () => clearInterval(intervalId);
+  }, [otpSentAt, otpExpiresIn]);
   const switchEmailMode = useCallback((mode) => {
     setEmailMode(mode);
     setError(null);
@@ -153,6 +173,7 @@ function LoginForm() {
     setOtpCodeError(null);
     setOtpStep("email");
     setOtpCode("");
+    setOtpSentAt(null);
   }, []);
   const handleSendOtp = useCallback(async (event) => {
     var _a2;
@@ -168,11 +189,14 @@ function LoginForm() {
     setError(null);
     setLoadingProvider("email");
     setStatusMessage(t("login.messages.otpSending"));
+    const sentAt = Date.now();
     try {
       await sendOtp(parsed.data);
       setOtpEmail(parsed.data);
       setOtpCode("");
       setOtpStep("code");
+      setOtpSentAt(sentAt);
+      setOtpSecondsLeft(getOtpSecondsRemaining(sentAt, otpExpiresIn));
       setStatusMessage(t("login.messages.otpSent"));
     } catch (err) {
       const error2 = err instanceof Error ? err : new Error(t("login.messages.otpSendFailed"));
@@ -182,7 +206,7 @@ function LoginForm() {
     } finally {
       setLoadingProvider(null);
     }
-  }, [loadingProvider, otpEmail, otpEmailSchema, sendOtp, t]);
+  }, [loadingProvider, otpEmail, otpEmailSchema, otpExpiresIn, sendOtp, t]);
   const handleVerifyOtp = useCallback(async (event) => {
     var _a2;
     event == null ? void 0 : event.preventDefault();
@@ -414,7 +438,20 @@ function LoginForm() {
                     ] }) : /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
                       /* @__PURE__ */ jsxs(Alert, { "data-cy": sel("auth.login.otpSentNotice"), children: [
                         /* @__PURE__ */ jsx(Mail, { className: "h-4 w-4", "aria-hidden": "true" }),
-                        /* @__PURE__ */ jsx(AlertDescription, { children: t("login.form.otp.codeSent", { email: otpEmail }) })
+                        /* @__PURE__ */ jsxs(AlertDescription, { children: [
+                          t("login.form.otp.codeSent", { email: otpEmail, length: otpLength }),
+                          " ",
+                          /* @__PURE__ */ jsx(
+                            "span",
+                            {
+                              "data-cy": sel("auth.login.otpCountdown"),
+                              "aria-live": otpSecondsLeft > 0 ? "off" : "polite",
+                              children: otpSecondsLeft > 0 ? t("login.form.otp.expiresIn", {
+                                time: formatOtpCountdown(otpSecondsLeft)
+                              }) : t("login.form.otp.expired")
+                            }
+                          )
+                        ] })
                       ] }),
                       /* @__PURE__ */ jsx(Label, { htmlFor: "otp-code", children: t("login.form.otp.codeLabel") }),
                       /* @__PURE__ */ jsxs("div", { className: "relative", children: [
@@ -427,9 +464,9 @@ function LoginForm() {
                             inputMode: "numeric",
                             autoComplete: "one-time-code",
                             pattern: "[0-9]*",
-                            maxLength: OTP_CODE_LENGTH,
+                            maxLength: otpLength,
                             value: otpCode,
-                            onChange: (e) => setOtpCode(e.target.value.replace(/\D/g, "").slice(0, OTP_CODE_LENGTH)),
+                            onChange: (e) => setOtpCode(e.target.value.replace(/\D/g, "").slice(0, otpLength)),
                             placeholder: t("login.form.otp.codePlaceholder"),
                             className: "pl-9 tracking-widest",
                             autoFocus: true,

package/dist/components/auth/forms/SignupForm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignupForm.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/forms/SignupForm.tsx"],"names":[],"mappings":"AA6BA,wBAAgB,UAAU,4CAmgBzB"}
+{"version":3,"file":"SignupForm.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/forms/SignupForm.tsx"],"names":[],"mappings":"AA8BA,wBAAgB,UAAU,4CAmgBzB"}

package/dist/components/auth/forms/SignupForm.js

@@ -5,7 +5,8 @@ import Link from "next/link";
 import { useSearchParams, useRouter } from "next/navigation";
 import { useForm } from "react-hook-form";
 import { zodResolver } from "@hookform/resolvers/zod";
-import { useAuth } from "../../../hooks/useAuth.js";
+import { useAuthActions } from "../../../hooks/useAuth.js";
+import { safeCallbackPath } from "../../../lib/auth/callback-url.js";
 import { Button } from "../../ui/button.js";
 import { Input } from "../../ui/input.js";
 import { Label } from "../../ui/label.js";
@@ -30,12 +31,12 @@ function SignupForm() {
   const [registeredEmail, setRegisteredEmail] = useState("");
   const [resendingEmail, setResendingEmail] = useState(false);
   const [statusMessage, setStatusMessage] = useState("");
-  const { signUp, googleSignIn, resendVerificationEmail } = useAuth();
+  const { signUp, googleSignIn, resendVerificationEmail } = useAuthActions();
   const t = useTranslations("auth");
   const searchParams = useSearchParams();
   const inviteEmail = searchParams.get("email");
   const fromInvite = searchParams.get("fromInvite") === "true";
-  const callbackUrl = searchParams.get("callbackUrl");
+  const callbackUrl = safeCallbackPath(searchParams.get("callbackUrl"));
   const inviteToken = searchParams.get("inviteToken");
   const {
     register,

package/dist/components/dashboard/block-editor/block-settings-panel.js

@@ -10,7 +10,7 @@ import { cn } from "../../../lib/utils/index.js";
 import { sel } from "../../../lib/test/index.js";
 import { DynamicForm } from "./dynamic-form.js";
 import { isPatternReference } from "../../../types/pattern-reference.js";
-import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry";
+import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry.client";
 function groupFieldsByTab(fields) {
   const grouped = {
     content: [],

package/dist/components/dashboard/block-editor/floating-block-toolbar.js

@@ -5,7 +5,7 @@ import { useTranslations } from "next-intl";
 import { Button } from "../../ui/button.js";
 import { cn } from "../../../lib/utils/index.js";
 import { sel } from "../../../lib/test/index.js";
-import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry";
+import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry.client";
 function FloatingBlockToolbar({
   blockId,
   blockSlug,

package/dist/components/dashboard/block-editor/sortable-block.js

@@ -7,7 +7,7 @@ import { Button } from "../../ui/button.js";
 import { Card, CardContent } from "../../ui/card.js";
 import { Badge } from "../../ui/badge.js";
 import { GripVertical, Copy, Trash2 } from "lucide-react";
-import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry";
+import { BLOCK_REGISTRY } from "@nextsparkjs/registries/block-registry.client";
 import { cn } from "../../../lib/utils/index.js";
 import { sel } from "../../../lib/test/index.js";
 function SortableBlock({

package/dist/components/dashboard/layouts/Sidebar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Sidebar.d.ts","sourceRoot":"","sources":["../../../../src/components/dashboard/layouts/Sidebar.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAGnF,UAAU,YAAY;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,wBAAwB,EAAE,CAAA;CACrC;AAED,wBAAgB,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,YAAY,2CAsG5D"}
+{"version":3,"file":"Sidebar.d.ts","sourceRoot":"","sources":["../../../../src/components/dashboard/layouts/Sidebar.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAGnF,UAAU,YAAY;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,wBAAwB,EAAE,CAAA;CACrC;AAED,wBAAgB,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,YAAY,2CAuG5D"}