@payez/next-mvp 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/README.md +782 -0
  2. package/dist/api/auth-handler.d.ts +67 -0
  3. package/dist/api/auth-handler.js +397 -0
  4. package/dist/api/index.d.ts +10 -0
  5. package/dist/api/index.js +19 -0
  6. package/dist/api-handlers/account/change-password.d.ts +9 -0
  7. package/dist/api-handlers/account/change-password.js +112 -0
  8. package/dist/api-handlers/account/masked-info.d.ts +2 -0
  9. package/dist/api-handlers/account/masked-info.js +41 -0
  10. package/dist/api-handlers/account/profile.d.ts +3 -0
  11. package/dist/api-handlers/account/profile.js +63 -0
  12. package/dist/api-handlers/account/recovery/initiate.d.ts +2 -0
  13. package/dist/api-handlers/account/recovery/initiate.js +26 -0
  14. package/dist/api-handlers/account/recovery/send-code.d.ts +2 -0
  15. package/dist/api-handlers/account/recovery/send-code.js +28 -0
  16. package/dist/api-handlers/account/recovery/verify-code.d.ts +2 -0
  17. package/dist/api-handlers/account/recovery/verify-code.js +28 -0
  18. package/dist/api-handlers/account/reset-password.d.ts +2 -0
  19. package/dist/api-handlers/account/reset-password.js +26 -0
  20. package/dist/api-handlers/account/send-code.d.ts +24 -0
  21. package/dist/api-handlers/account/send-code.js +60 -0
  22. package/dist/api-handlers/account/update-phone.d.ts +27 -0
  23. package/dist/api-handlers/account/update-phone.js +64 -0
  24. package/dist/api-handlers/account/validate-password.d.ts +17 -0
  25. package/dist/api-handlers/account/validate-password.js +81 -0
  26. package/dist/api-handlers/account/verify-email.d.ts +26 -0
  27. package/dist/api-handlers/account/verify-email.js +106 -0
  28. package/dist/api-handlers/account/verify-sms.d.ts +26 -0
  29. package/dist/api-handlers/account/verify-sms.js +106 -0
  30. package/dist/api-handlers/admin/analytics.d.ts +20 -0
  31. package/dist/api-handlers/admin/analytics.js +379 -0
  32. package/dist/api-handlers/admin/audit.d.ts +20 -0
  33. package/dist/api-handlers/admin/audit.js +214 -0
  34. package/dist/api-handlers/admin/index.d.ts +21 -0
  35. package/dist/api-handlers/admin/index.js +41 -0
  36. package/dist/api-handlers/admin/redis-sessions.d.ts +36 -0
  37. package/dist/api-handlers/admin/redis-sessions.js +204 -0
  38. package/dist/api-handlers/admin/sessions.d.ts +21 -0
  39. package/dist/api-handlers/admin/sessions.js +284 -0
  40. package/dist/api-handlers/admin/site-logs.d.ts +46 -0
  41. package/dist/api-handlers/admin/site-logs.js +318 -0
  42. package/dist/api-handlers/admin/users.d.ts +20 -0
  43. package/dist/api-handlers/admin/users.js +222 -0
  44. package/dist/api-handlers/admin/vibe-data.d.ts +80 -0
  45. package/dist/api-handlers/admin/vibe-data.js +268 -0
  46. package/dist/api-handlers/anon/preferences.d.ts +37 -0
  47. package/dist/api-handlers/anon/preferences.js +96 -0
  48. package/dist/api-handlers/auth/jwks.d.ts +2 -0
  49. package/dist/api-handlers/auth/jwks.js +24 -0
  50. package/dist/api-handlers/auth/login.d.ts +42 -0
  51. package/dist/api-handlers/auth/login.js +178 -0
  52. package/dist/api-handlers/auth/refresh.d.ts +74 -0
  53. package/dist/api-handlers/auth/refresh.js +635 -0
  54. package/dist/api-handlers/auth/signout.d.ts +37 -0
  55. package/dist/api-handlers/auth/signout.js +187 -0
  56. package/dist/api-handlers/auth/status.d.ts +8 -0
  57. package/dist/api-handlers/auth/status.js +26 -0
  58. package/dist/api-handlers/auth/update-session.d.ts +37 -0
  59. package/dist/api-handlers/auth/update-session.js +95 -0
  60. package/dist/api-handlers/auth/validate.d.ts +6 -0
  61. package/dist/api-handlers/auth/validate.js +43 -0
  62. package/dist/api-handlers/auth/verify-code.d.ts +43 -0
  63. package/dist/api-handlers/auth/verify-code.js +94 -0
  64. package/dist/api-handlers/session/refresh-viability.d.ts +14 -0
  65. package/dist/api-handlers/session/refresh-viability.js +39 -0
  66. package/dist/api-handlers/session/viability.d.ts +13 -0
  67. package/dist/api-handlers/session/viability.js +146 -0
  68. package/dist/api-handlers/test/force-expire.d.ts +23 -0
  69. package/dist/api-handlers/test/force-expire.js +65 -0
  70. package/dist/auth/auth-decision.d.ts +39 -0
  71. package/dist/auth/auth-decision.js +182 -0
  72. package/dist/auth/auth-options.d.ts +57 -0
  73. package/dist/auth/auth-options.js +213 -0
  74. package/dist/auth/callbacks/index.d.ts +6 -0
  75. package/dist/auth/callbacks/index.js +12 -0
  76. package/dist/auth/callbacks/jwt.d.ts +45 -0
  77. package/dist/auth/callbacks/jwt.js +305 -0
  78. package/dist/auth/callbacks/session.d.ts +60 -0
  79. package/dist/auth/callbacks/session.js +170 -0
  80. package/dist/auth/callbacks/signin.d.ts +23 -0
  81. package/dist/auth/callbacks/signin.js +44 -0
  82. package/dist/auth/events/index.d.ts +4 -0
  83. package/dist/auth/events/index.js +8 -0
  84. package/dist/auth/events/signout.d.ts +17 -0
  85. package/dist/auth/events/signout.js +32 -0
  86. package/dist/auth/providers/credentials.d.ts +32 -0
  87. package/dist/auth/providers/credentials.js +223 -0
  88. package/dist/auth/providers/index.d.ts +5 -0
  89. package/dist/auth/providers/index.js +21 -0
  90. package/dist/auth/providers/oauth.d.ts +26 -0
  91. package/dist/auth/providers/oauth.js +105 -0
  92. package/dist/auth/route-config.d.ts +66 -0
  93. package/dist/auth/route-config.js +190 -0
  94. package/dist/auth/types/auth-types.d.ts +417 -0
  95. package/dist/auth/types/auth-types.js +53 -0
  96. package/dist/auth/types/index.d.ts +6 -0
  97. package/dist/auth/types/index.js +22 -0
  98. package/dist/auth/unauthenticated-routes.d.ts +1 -0
  99. package/dist/auth/unauthenticated-routes.js +19 -0
  100. package/dist/auth/utils/idp-client.d.ts +94 -0
  101. package/dist/auth/utils/idp-client.js +383 -0
  102. package/dist/auth/utils/index.d.ts +5 -0
  103. package/dist/auth/utils/index.js +21 -0
  104. package/dist/auth/utils/token-utils.d.ts +84 -0
  105. package/dist/auth/utils/token-utils.js +219 -0
  106. package/dist/client/AuthContext.d.ts +19 -0
  107. package/dist/client/AuthContext.js +112 -0
  108. package/dist/client/fetch-with-auth.d.ts +11 -0
  109. package/dist/client/fetch-with-auth.js +44 -0
  110. package/dist/client/fetchWithSession.d.ts +3 -0
  111. package/dist/client/fetchWithSession.js +24 -0
  112. package/dist/client/index.d.ts +9 -0
  113. package/dist/client/index.js +20 -0
  114. package/dist/client/useAnonSession.d.ts +36 -0
  115. package/dist/client/useAnonSession.js +99 -0
  116. package/dist/components/SessionSync.d.ts +13 -0
  117. package/dist/components/SessionSync.js +119 -0
  118. package/dist/components/SignalRHealthCheck.d.ts +10 -0
  119. package/dist/components/SignalRHealthCheck.js +97 -0
  120. package/dist/components/account/UserAvatarMenu.d.ts +20 -0
  121. package/dist/components/account/UserAvatarMenu.js +80 -0
  122. package/dist/components/account/index.d.ts +7 -0
  123. package/dist/components/account/index.js +10 -0
  124. package/dist/components/admin/AlertSettingsTab.d.ts +48 -0
  125. package/dist/components/admin/AlertSettingsTab.js +351 -0
  126. package/dist/components/admin/AnalyticsTab.d.ts +22 -0
  127. package/dist/components/admin/AnalyticsTab.js +167 -0
  128. package/dist/components/admin/DataBrowserTab.d.ts +19 -0
  129. package/dist/components/admin/DataBrowserTab.js +252 -0
  130. package/dist/components/admin/LoggingSettingsTab.d.ts +73 -0
  131. package/dist/components/admin/LoggingSettingsTab.js +339 -0
  132. package/dist/components/admin/SessionsTab.d.ts +37 -0
  133. package/dist/components/admin/SessionsTab.js +165 -0
  134. package/dist/components/admin/StatsTab.d.ts +53 -0
  135. package/dist/components/admin/StatsTab.js +161 -0
  136. package/dist/components/admin/VibeAdminContext.d.ts +32 -0
  137. package/dist/components/admin/VibeAdminContext.js +38 -0
  138. package/dist/components/admin/VibeAdminLayout.d.ts +11 -0
  139. package/dist/components/admin/VibeAdminLayout.js +69 -0
  140. package/dist/components/admin/index.d.ts +29 -0
  141. package/dist/components/admin/index.js +44 -0
  142. package/dist/components/auth/FederatedAuthSection.d.ts +8 -0
  143. package/dist/components/auth/FederatedAuthSection.js +45 -0
  144. package/dist/components/auth/ModeAwareLoginPage.d.ts +10 -0
  145. package/dist/components/auth/ModeAwareLoginPage.js +42 -0
  146. package/dist/components/auth/ModeAwareSignupPage.d.ts +9 -0
  147. package/dist/components/auth/ModeAwareSignupPage.js +78 -0
  148. package/dist/components/auth/TraditionalAuthSection.d.ts +14 -0
  149. package/dist/components/auth/TraditionalAuthSection.js +20 -0
  150. package/dist/components/recovery/CompleteStep.d.ts +5 -0
  151. package/dist/components/recovery/CompleteStep.js +8 -0
  152. package/dist/components/recovery/InitiateRecoveryStep.d.ts +8 -0
  153. package/dist/components/recovery/InitiateRecoveryStep.js +20 -0
  154. package/dist/components/recovery/SelectMethodStep.d.ts +8 -0
  155. package/dist/components/recovery/SelectMethodStep.js +8 -0
  156. package/dist/components/recovery/SetPasswordStep.d.ts +6 -0
  157. package/dist/components/recovery/SetPasswordStep.js +20 -0
  158. package/dist/components/recovery/VerifyCodeStep.d.ts +10 -0
  159. package/dist/components/recovery/VerifyCodeStep.js +24 -0
  160. package/dist/components/reserved/ReservedRecoveryWarning.d.ts +38 -0
  161. package/dist/components/reserved/ReservedRecoveryWarning.js +92 -0
  162. package/dist/components/reserved/ReservedStatusBox.d.ts +30 -0
  163. package/dist/components/reserved/ReservedStatusBox.js +71 -0
  164. package/dist/components/ui/BetaBadge.d.ts +29 -0
  165. package/dist/components/ui/BetaBadge.js +38 -0
  166. package/dist/components/ui/Footer.d.ts +37 -0
  167. package/dist/components/ui/Footer.js +41 -0
  168. package/dist/config/env.d.ts +66 -0
  169. package/dist/config/env.js +57 -0
  170. package/dist/config/logger.d.ts +57 -0
  171. package/dist/config/logger.js +73 -0
  172. package/dist/config/logging-config.d.ts +30 -0
  173. package/dist/config/logging-config.js +122 -0
  174. package/dist/config/unauthenticated-routes.d.ts +17 -0
  175. package/dist/config/unauthenticated-routes.js +24 -0
  176. package/dist/config/vibe-log-transport.d.ts +79 -0
  177. package/dist/config/vibe-log-transport.js +203 -0
  178. package/dist/edge/internal-api-url.d.ts +53 -0
  179. package/dist/edge/internal-api-url.js +63 -0
  180. package/dist/edge/middleware.d.ts +14 -0
  181. package/dist/edge/middleware.js +32 -0
  182. package/dist/hooks/useAuth.d.ts +23 -0
  183. package/dist/hooks/useAuth.js +81 -0
  184. package/dist/hooks/useAuthSettings.d.ts +59 -0
  185. package/dist/hooks/useAuthSettings.js +93 -0
  186. package/dist/hooks/useAvailableProviders.d.ts +45 -0
  187. package/dist/hooks/useAvailableProviders.js +108 -0
  188. package/dist/hooks/usePasswordValidation.d.ts +27 -0
  189. package/dist/hooks/usePasswordValidation.js +102 -0
  190. package/dist/hooks/useProfile.d.ts +15 -0
  191. package/dist/hooks/useProfile.js +59 -0
  192. package/dist/hooks/usePublicAuthSettings.d.ts +56 -0
  193. package/dist/hooks/usePublicAuthSettings.js +131 -0
  194. package/dist/hooks/useSessionExpiration.d.ts +57 -0
  195. package/dist/hooks/useSessionExpiration.js +72 -0
  196. package/dist/hooks/useViabilitySession.d.ts +75 -0
  197. package/dist/hooks/useViabilitySession.js +268 -0
  198. package/dist/index.d.ts +12 -0
  199. package/dist/index.js +54 -0
  200. package/dist/lib/anon-session.d.ts +74 -0
  201. package/dist/lib/anon-session.js +169 -0
  202. package/dist/lib/api-handler.d.ts +123 -0
  203. package/dist/lib/api-handler.js +478 -0
  204. package/dist/lib/app-slug.d.ts +95 -0
  205. package/dist/lib/app-slug.js +172 -0
  206. package/dist/lib/demo-mode.d.ts +6 -0
  207. package/dist/lib/demo-mode.js +16 -0
  208. package/dist/lib/geolocation.d.ts +64 -0
  209. package/dist/lib/geolocation.js +235 -0
  210. package/dist/lib/idp-client-config.d.ts +75 -0
  211. package/dist/lib/idp-client-config.js +351 -0
  212. package/dist/lib/idp-fetch.d.ts +14 -0
  213. package/dist/lib/idp-fetch.js +91 -0
  214. package/dist/lib/internal-api.d.ts +87 -0
  215. package/dist/lib/internal-api.js +122 -0
  216. package/dist/lib/jwt-decode-client.d.ts +10 -0
  217. package/dist/lib/jwt-decode-client.js +46 -0
  218. package/dist/lib/jwt-decode.d.ts +48 -0
  219. package/dist/lib/jwt-decode.js +57 -0
  220. package/dist/lib/nextauth-secret.d.ts +10 -0
  221. package/dist/lib/nextauth-secret.js +104 -0
  222. package/dist/lib/rate-limit-service.d.ts +23 -0
  223. package/dist/lib/rate-limit-service.js +6 -0
  224. package/dist/lib/redis.d.ts +5 -0
  225. package/dist/lib/redis.js +28 -0
  226. package/dist/lib/refresh-token-validator.d.ts +13 -0
  227. package/dist/lib/refresh-token-validator.js +117 -0
  228. package/dist/lib/roles.d.ts +145 -0
  229. package/dist/lib/roles.js +168 -0
  230. package/dist/lib/secret-validation.d.ts +4 -0
  231. package/dist/lib/secret-validation.js +14 -0
  232. package/dist/lib/session-store.d.ts +166 -0
  233. package/dist/lib/session-store.js +537 -0
  234. package/dist/lib/session.d.ts +21 -0
  235. package/dist/lib/session.js +26 -0
  236. package/dist/lib/site-logger.d.ts +214 -0
  237. package/dist/lib/site-logger.js +210 -0
  238. package/dist/lib/standardized-client-api.d.ts +161 -0
  239. package/dist/lib/standardized-client-api.js +786 -0
  240. package/dist/lib/startup-init.d.ts +40 -0
  241. package/dist/lib/startup-init.js +261 -0
  242. package/dist/lib/test-aware-get-token.d.ts +2 -0
  243. package/dist/lib/test-aware-get-token.js +81 -0
  244. package/dist/lib/token-expiry.d.ts +14 -0
  245. package/dist/lib/token-expiry.js +39 -0
  246. package/dist/lib/token-lifecycle.d.ts +52 -0
  247. package/dist/lib/token-lifecycle.js +398 -0
  248. package/dist/lib/types/api-responses.d.ts +128 -0
  249. package/dist/lib/types/api-responses.js +171 -0
  250. package/dist/lib/user-agent-parser.d.ts +50 -0
  251. package/dist/lib/user-agent-parser.js +220 -0
  252. package/dist/logging/api/admin-analytics.d.ts +3 -0
  253. package/dist/logging/api/admin-analytics.js +45 -0
  254. package/dist/logging/api/audit-log.d.ts +3 -0
  255. package/dist/logging/api/audit-log.js +52 -0
  256. package/dist/logging/components/AdminAnalyticsLayout.d.ts +10 -0
  257. package/dist/logging/components/AdminAnalyticsLayout.js +11 -0
  258. package/dist/logging/components/AuditLogViewer.d.ts +7 -0
  259. package/dist/logging/components/AuditLogViewer.js +51 -0
  260. package/dist/logging/components/ErrorMetricsCard.d.ts +7 -0
  261. package/dist/logging/components/ErrorMetricsCard.js +16 -0
  262. package/dist/logging/components/HealthMetricsCard.d.ts +7 -0
  263. package/dist/logging/components/HealthMetricsCard.js +19 -0
  264. package/dist/logging/hooks/useAdminAnalytics.d.ts +24 -0
  265. package/dist/logging/hooks/useAdminAnalytics.js +22 -0
  266. package/dist/logging/hooks/useAuditLog.d.ts +6 -0
  267. package/dist/logging/hooks/useAuditLog.js +25 -0
  268. package/dist/logging/hooks/useErrorMetrics.d.ts +6 -0
  269. package/dist/logging/hooks/useErrorMetrics.js +38 -0
  270. package/dist/logging/hooks/useHealthMetrics.d.ts +6 -0
  271. package/dist/logging/hooks/useHealthMetrics.js +41 -0
  272. package/dist/logging/index.d.ts +11 -0
  273. package/dist/logging/index.js +40 -0
  274. package/dist/logging/types/analytics.d.ts +68 -0
  275. package/dist/logging/types/analytics.js +3 -0
  276. package/dist/logging/types/audit.d.ts +29 -0
  277. package/dist/logging/types/audit.js +2 -0
  278. package/dist/logging/types/index.d.ts +2 -0
  279. package/dist/logging/types/index.js +19 -0
  280. package/dist/middleware/auth-decision.d.ts +33 -0
  281. package/dist/middleware/auth-decision.js +65 -0
  282. package/dist/middleware/create-middleware.d.ts +100 -0
  283. package/dist/middleware/create-middleware.js +445 -0
  284. package/dist/middleware/rbac-check.d.ts +44 -0
  285. package/dist/middleware/rbac-check.js +191 -0
  286. package/dist/middleware/twofa-presets.d.ts +134 -0
  287. package/dist/middleware/twofa-presets.js +175 -0
  288. package/dist/models/DecodedAccessToken.d.ts +17 -0
  289. package/dist/models/DecodedAccessToken.js +2 -0
  290. package/dist/models/SessionModel.d.ts +122 -0
  291. package/dist/models/SessionModel.js +136 -0
  292. package/dist/pages/admin-login/page.d.ts +31 -0
  293. package/dist/pages/admin-login/page.js +83 -0
  294. package/dist/pages/admin-roles/RolesAdminPage.d.ts +15 -0
  295. package/dist/pages/admin-roles/RolesAdminPage.js +78 -0
  296. package/dist/pages/admin-roles/index.d.ts +8 -0
  297. package/dist/pages/admin-roles/index.js +15 -0
  298. package/dist/pages/admin-roles/modals.d.ts +72 -0
  299. package/dist/pages/admin-roles/modals.js +154 -0
  300. package/dist/pages/client-admin/ClientSiteAdminPage.d.ts +79 -0
  301. package/dist/pages/client-admin/ClientSiteAdminPage.js +177 -0
  302. package/dist/pages/client-admin/index.d.ts +32 -0
  303. package/dist/pages/client-admin/index.js +37 -0
  304. package/dist/pages/login/page.d.ts +22 -0
  305. package/dist/pages/login/page.js +239 -0
  306. package/dist/pages/profile/EnhancedProfilePage.d.ts +13 -0
  307. package/dist/pages/profile/EnhancedProfilePage.js +150 -0
  308. package/dist/pages/profile/index.d.ts +8 -0
  309. package/dist/pages/profile/index.js +16 -0
  310. package/dist/pages/profile/page.d.ts +19 -0
  311. package/dist/pages/profile/page.js +47 -0
  312. package/dist/pages/profile/profile-patch.d.ts +1 -0
  313. package/dist/pages/profile/profile-patch.js +281 -0
  314. package/dist/pages/recovery/page.d.ts +1 -0
  315. package/dist/pages/recovery/page.js +142 -0
  316. package/dist/pages/roles/MyRolesPage.d.ts +24 -0
  317. package/dist/pages/roles/MyRolesPage.js +71 -0
  318. package/dist/pages/roles/components.d.ts +63 -0
  319. package/dist/pages/roles/components.js +108 -0
  320. package/dist/pages/roles/index.d.ts +8 -0
  321. package/dist/pages/roles/index.js +19 -0
  322. package/dist/pages/security/EnhancedSecurityPage.d.ts +14 -0
  323. package/dist/pages/security/EnhancedSecurityPage.js +248 -0
  324. package/dist/pages/security/index.d.ts +8 -0
  325. package/dist/pages/security/index.js +16 -0
  326. package/dist/pages/security/page.d.ts +21 -0
  327. package/dist/pages/security/page.js +212 -0
  328. package/dist/pages/security/security-patch.d.ts +1 -0
  329. package/dist/pages/security/security-patch.js +302 -0
  330. package/dist/pages/settings/EnhancedSettingsPage.d.ts +46 -0
  331. package/dist/pages/settings/EnhancedSettingsPage.js +231 -0
  332. package/dist/pages/settings/index.d.ts +8 -0
  333. package/dist/pages/settings/index.js +16 -0
  334. package/dist/pages/settings/page.d.ts +7 -0
  335. package/dist/pages/settings/page.js +26 -0
  336. package/dist/pages/showcase/ShowcasePage.d.ts +13 -0
  337. package/dist/pages/showcase/ShowcasePage.js +140 -0
  338. package/dist/pages/showcase/index.d.ts +12 -0
  339. package/dist/pages/showcase/index.js +17 -0
  340. package/dist/pages/test-env/EmergencyLogoutPage.d.ts +14 -0
  341. package/dist/pages/test-env/EmergencyLogoutPage.js +98 -0
  342. package/dist/pages/test-env/JwtInspectPage.d.ts +14 -0
  343. package/dist/pages/test-env/JwtInspectPage.js +114 -0
  344. package/dist/pages/test-env/RefreshTokenPage.d.ts +15 -0
  345. package/dist/pages/test-env/RefreshTokenPage.js +91 -0
  346. package/dist/pages/test-env/TestEnvPage.d.ts +13 -0
  347. package/dist/pages/test-env/TestEnvPage.js +49 -0
  348. package/dist/pages/test-env/index.d.ts +24 -0
  349. package/dist/pages/test-env/index.js +32 -0
  350. package/dist/pages/verify-code/page.d.ts +30 -0
  351. package/dist/pages/verify-code/page.js +408 -0
  352. package/dist/routes/account/index.d.ts +28 -0
  353. package/dist/routes/account/index.js +71 -0
  354. package/dist/routes/account/masked-info.d.ts +33 -0
  355. package/dist/routes/account/masked-info.js +39 -0
  356. package/dist/routes/account/send-code.d.ts +37 -0
  357. package/dist/routes/account/send-code.js +42 -0
  358. package/dist/routes/account/update-phone.d.ts +13 -0
  359. package/dist/routes/account/update-phone.js +17 -0
  360. package/dist/routes/account/verify-email.d.ts +38 -0
  361. package/dist/routes/account/verify-email.js +43 -0
  362. package/dist/routes/account/verify-sms.d.ts +38 -0
  363. package/dist/routes/account/verify-sms.js +43 -0
  364. package/dist/routes/auth/index.d.ts +19 -0
  365. package/dist/routes/auth/index.js +64 -0
  366. package/dist/routes/auth/logout.d.ts +31 -0
  367. package/dist/routes/auth/logout.js +113 -0
  368. package/dist/routes/auth/nextauth.d.ts +19 -0
  369. package/dist/routes/auth/nextauth.js +72 -0
  370. package/dist/routes/auth/refresh.d.ts +30 -0
  371. package/dist/routes/auth/refresh.js +51 -0
  372. package/dist/routes/auth/session.d.ts +72 -0
  373. package/dist/routes/auth/session.js +180 -0
  374. package/dist/routes/auth/settings.d.ts +25 -0
  375. package/dist/routes/auth/settings.js +55 -0
  376. package/dist/routes/auth/viability.d.ts +52 -0
  377. package/dist/routes/auth/viability.js +201 -0
  378. package/dist/routes/index.d.ts +12 -0
  379. package/dist/routes/index.js +54 -0
  380. package/dist/routes/session/index.d.ts +6 -0
  381. package/dist/routes/session/index.js +10 -0
  382. package/dist/routes/session/refresh-viability.d.ts +16 -0
  383. package/dist/routes/session/refresh-viability.js +20 -0
  384. package/dist/services/signalrActivityService.d.ts +44 -0
  385. package/dist/services/signalrActivityService.js +257 -0
  386. package/dist/stores/authStore.d.ts +154 -0
  387. package/dist/stores/authStore.js +1531 -0
  388. package/dist/theme/ThemeProvider.d.ts +14 -0
  389. package/dist/theme/ThemeProvider.js +28 -0
  390. package/dist/theme/default.d.ts +8 -0
  391. package/dist/theme/default.js +33 -0
  392. package/dist/theme/index.d.ts +15 -0
  393. package/dist/theme/index.js +25 -0
  394. package/dist/theme/types.d.ts +56 -0
  395. package/dist/theme/types.js +8 -0
  396. package/dist/theme/useTheme.d.ts +60 -0
  397. package/dist/theme/useTheme.js +63 -0
  398. package/dist/theme/utils.d.ts +13 -0
  399. package/dist/theme/utils.js +39 -0
  400. package/dist/types/api.d.ts +134 -0
  401. package/dist/types/api.js +44 -0
  402. package/dist/types/auth.d.ts +19 -0
  403. package/dist/types/auth.js +2 -0
  404. package/dist/types/logging.d.ts +42 -0
  405. package/dist/types/logging.js +2 -0
  406. package/dist/types/recovery.d.ts +48 -0
  407. package/dist/types/recovery.js +2 -0
  408. package/dist/types/security.d.ts +1 -0
  409. package/dist/types/security.js +2 -0
  410. package/dist/utils/api.d.ts +85 -0
  411. package/dist/utils/api.js +287 -0
  412. package/dist/utils/circuitBreaker.d.ts +43 -0
  413. package/dist/utils/circuitBreaker.js +91 -0
  414. package/dist/utils/error-message.d.ts +1 -0
  415. package/dist/utils/error-message.js +103 -0
  416. package/dist/utils/layout/reservedSpace.d.ts +59 -0
  417. package/dist/utils/layout/reservedSpace.js +102 -0
  418. package/dist/utils/logout.d.ts +14 -0
  419. package/dist/utils/logout.js +32 -0
  420. package/dist/vibe/client.d.ts +261 -0
  421. package/dist/vibe/client.js +445 -0
  422. package/dist/vibe/errors.d.ts +83 -0
  423. package/dist/vibe/errors.js +146 -0
  424. package/dist/vibe/generic.d.ts +234 -0
  425. package/dist/vibe/generic.js +369 -0
  426. package/dist/vibe/hooks/index.d.ts +169 -0
  427. package/dist/vibe/hooks/index.js +252 -0
  428. package/dist/vibe/index.d.ts +23 -0
  429. package/dist/vibe/index.js +67 -0
  430. package/dist/vibe/sessions.d.ts +161 -0
  431. package/dist/vibe/sessions.js +391 -0
  432. package/dist/vibe/types.d.ts +353 -0
  433. package/dist/vibe/types.js +315 -0
  434. package/package.json +855 -0
  435. package/scripts/check-internal-url-usage.sh +73 -0
  436. package/scripts/dev-broker.ps1 +35 -0
  437. package/scripts/dev-local.ps1 +45 -0
  438. package/src/api/auth-handler.ts +550 -0
  439. package/src/api/index.ts +18 -0
  440. package/src/api-handlers/account/change-password.ts +145 -0
  441. package/src/api-handlers/account/masked-info.ts +45 -0
  442. package/src/api-handlers/account/profile.ts +80 -0
  443. package/src/api-handlers/account/recovery/initiate.ts +23 -0
  444. package/src/api-handlers/account/recovery/send-code.ts +25 -0
  445. package/src/api-handlers/account/recovery/verify-code.ts +25 -0
  446. package/src/api-handlers/account/reset-password.ts +23 -0
  447. package/src/api-handlers/account/send-code.ts +76 -0
  448. package/src/api-handlers/account/update-phone.ts +79 -0
  449. package/src/api-handlers/account/validate-password.ts +118 -0
  450. package/src/api-handlers/account/verify-email.ts +125 -0
  451. package/src/api-handlers/account/verify-sms.ts +125 -0
  452. package/src/api-handlers/admin/analytics.ts +445 -0
  453. package/src/api-handlers/admin/audit.ts +225 -0
  454. package/src/api-handlers/admin/index.ts +59 -0
  455. package/src/api-handlers/admin/redis-sessions.ts +253 -0
  456. package/src/api-handlers/admin/sessions.ts +320 -0
  457. package/src/api-handlers/admin/site-logs.ts +367 -0
  458. package/src/api-handlers/admin/users.ts +244 -0
  459. package/src/api-handlers/admin/vibe-data.ts +326 -0
  460. package/src/api-handlers/anon/preferences.ts +123 -0
  461. package/src/api-handlers/auth/jwks.ts +20 -0
  462. package/src/api-handlers/auth/login.ts +240 -0
  463. package/src/api-handlers/auth/refresh.ts +687 -0
  464. package/src/api-handlers/auth/signout.ts +212 -0
  465. package/src/api-handlers/auth/status.ts +23 -0
  466. package/src/api-handlers/auth/update-session.ts +125 -0
  467. package/src/api-handlers/auth/validate.ts +44 -0
  468. package/src/api-handlers/auth/verify-code.ts +129 -0
  469. package/src/api-handlers/session/refresh-viability.ts +36 -0
  470. package/src/api-handlers/session/viability.ts +166 -0
  471. package/src/api-handlers/test/force-expire.ts +67 -0
  472. package/src/auth/auth-decision.ts +230 -0
  473. package/src/auth/auth-options.ts +237 -0
  474. package/src/auth/callbacks/index.ts +7 -0
  475. package/src/auth/callbacks/jwt.ts +382 -0
  476. package/src/auth/callbacks/session.ts +243 -0
  477. package/src/auth/callbacks/signin.ts +56 -0
  478. package/src/auth/events/index.ts +5 -0
  479. package/src/auth/events/signout.ts +33 -0
  480. package/src/auth/providers/credentials.ts +256 -0
  481. package/src/auth/providers/index.ts +6 -0
  482. package/src/auth/providers/oauth.ts +114 -0
  483. package/src/auth/route-config.ts +220 -0
  484. package/src/auth/types/auth-types.ts +555 -0
  485. package/src/auth/types/index.ts +7 -0
  486. package/src/auth/unauthenticated-routes.ts +3 -0
  487. package/src/auth/utils/idp-client.ts +444 -0
  488. package/src/auth/utils/index.ts +6 -0
  489. package/src/auth/utils/token-utils.ts +244 -0
  490. package/src/client/AuthContext.tsx +140 -0
  491. package/src/client/fetch-with-auth.ts +48 -0
  492. package/src/client/fetchWithSession.ts +21 -0
  493. package/src/client/index.ts +13 -0
  494. package/src/client/useAnonSession.ts +131 -0
  495. package/src/components/SessionSync.tsx +137 -0
  496. package/src/components/SignalRHealthCheck.tsx +131 -0
  497. package/src/components/account/UserAvatarMenu.tsx +217 -0
  498. package/src/components/account/index.ts +8 -0
  499. package/src/components/admin/AlertSettingsTab.tsx +728 -0
  500. package/src/components/admin/AnalyticsTab.tsx +703 -0
  501. package/src/components/admin/DataBrowserTab.tsx +505 -0
  502. package/src/components/admin/LoggingSettingsTab.tsx +665 -0
  503. package/src/components/admin/SessionsTab.tsx +414 -0
  504. package/src/components/admin/StatsTab.tsx +379 -0
  505. package/src/components/admin/VibeAdminContext.tsx +87 -0
  506. package/src/components/admin/VibeAdminLayout.tsx +185 -0
  507. package/src/components/admin/index.ts +59 -0
  508. package/src/components/auth/FederatedAuthSection.tsx +95 -0
  509. package/src/components/auth/ModeAwareLoginPage.tsx +135 -0
  510. package/src/components/auth/ModeAwareSignupPage.tsx +267 -0
  511. package/src/components/auth/TraditionalAuthSection.tsx +99 -0
  512. package/src/components/recovery/CompleteStep.tsx +36 -0
  513. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -0
  514. package/src/components/recovery/SelectMethodStep.tsx +73 -0
  515. package/src/components/recovery/SetPasswordStep.tsx +97 -0
  516. package/src/components/recovery/VerifyCodeStep.tsx +90 -0
  517. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -0
  518. package/src/components/reserved/ReservedStatusBox.tsx +118 -0
  519. package/src/components/ui/BetaBadge.tsx +58 -0
  520. package/src/components/ui/Footer.tsx +93 -0
  521. package/src/config/env.ts +57 -0
  522. package/src/config/logger.ts +62 -0
  523. package/src/config/logging-config.ts +82 -0
  524. package/src/config/unauthenticated-routes.ts +19 -0
  525. package/src/config/vibe-log-transport.ts +250 -0
  526. package/src/edge/internal-api-url.ts +65 -0
  527. package/src/edge/middleware.ts +42 -0
  528. package/src/hooks/useAuth.ts +115 -0
  529. package/src/hooks/useAuthSettings.ts +97 -0
  530. package/src/hooks/useAvailableProviders.ts +118 -0
  531. package/src/hooks/usePasswordValidation.ts +127 -0
  532. package/src/hooks/useProfile.ts +75 -0
  533. package/src/hooks/usePublicAuthSettings.ts +149 -0
  534. package/src/hooks/useSessionExpiration.ts +102 -0
  535. package/src/hooks/useViabilitySession.ts +335 -0
  536. package/src/index.ts +63 -0
  537. package/src/lib/anon-session.ts +213 -0
  538. package/src/lib/api-handler.ts +625 -0
  539. package/src/lib/app-slug.ts +178 -0
  540. package/src/lib/demo-mode.ts +13 -0
  541. package/src/lib/geolocation.ts +265 -0
  542. package/src/lib/idp-client-config.ts +442 -0
  543. package/src/lib/idp-fetch.ts +101 -0
  544. package/src/lib/internal-api.ts +171 -0
  545. package/src/lib/jwt-decode-client.ts +45 -0
  546. package/src/lib/jwt-decode.ts +83 -0
  547. package/src/lib/nextauth-secret.ts +126 -0
  548. package/src/lib/rate-limit-service.ts +9 -0
  549. package/src/lib/redis.ts +27 -0
  550. package/src/lib/refresh-token-validator.ts +64 -0
  551. package/src/lib/roles.ts +177 -0
  552. package/src/lib/secret-validation.ts +8 -0
  553. package/src/lib/session-store.ts +637 -0
  554. package/src/lib/session.ts +34 -0
  555. package/src/lib/site-logger.ts +245 -0
  556. package/src/lib/standardized-client-api.ts +896 -0
  557. package/src/lib/startup-init.ts +247 -0
  558. package/src/lib/test-aware-get-token.ts +30 -0
  559. package/src/lib/token-expiry.ts +40 -0
  560. package/src/lib/token-lifecycle.ts +477 -0
  561. package/src/lib/types/api-responses.ts +336 -0
  562. package/src/lib/user-agent-parser.ts +252 -0
  563. package/src/logging/api/admin-analytics.ts +51 -0
  564. package/src/logging/api/audit-log.ts +53 -0
  565. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -0
  566. package/src/logging/components/AuditLogViewer.tsx +125 -0
  567. package/src/logging/components/ErrorMetricsCard.tsx +98 -0
  568. package/src/logging/components/HealthMetricsCard.tsx +70 -0
  569. package/src/logging/hooks/useAdminAnalytics.ts +22 -0
  570. package/src/logging/hooks/useAuditLog.ts +24 -0
  571. package/src/logging/hooks/useErrorMetrics.ts +40 -0
  572. package/src/logging/hooks/useHealthMetrics.ts +44 -0
  573. package/src/logging/index.ts +18 -0
  574. package/src/logging/types/analytics.ts +81 -0
  575. package/src/logging/types/audit.ts +31 -0
  576. package/src/logging/types/index.ts +3 -0
  577. package/src/middleware/auth-decision.ts +43 -0
  578. package/src/middleware/create-middleware.ts +626 -0
  579. package/src/middleware/rbac-check.ts +244 -0
  580. package/src/middleware/twofa-presets.ts +224 -0
  581. package/src/models/DecodedAccessToken.ts +17 -0
  582. package/src/models/SessionModel.ts +258 -0
  583. package/src/pages/admin-login/page.tsx +229 -0
  584. package/src/pages/admin-roles/RolesAdminPage.tsx +357 -0
  585. package/src/pages/admin-roles/index.ts +9 -0
  586. package/src/pages/admin-roles/modals.tsx +469 -0
  587. package/src/pages/client-admin/ClientSiteAdminPage.tsx +380 -0
  588. package/src/pages/client-admin/index.ts +33 -0
  589. package/src/pages/login/page.tsx +463 -0
  590. package/src/pages/profile/EnhancedProfilePage.tsx +479 -0
  591. package/src/pages/profile/index.ts +9 -0
  592. package/src/pages/profile/page.tsx +166 -0
  593. package/src/pages/recovery/page.tsx +234 -0
  594. package/src/pages/roles/MyRolesPage.tsx +211 -0
  595. package/src/pages/roles/components.tsx +294 -0
  596. package/src/pages/roles/index.ts +17 -0
  597. package/src/pages/security/EnhancedSecurityPage.tsx +574 -0
  598. package/src/pages/security/index.ts +9 -0
  599. package/src/pages/security/page.tsx +507 -0
  600. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -0
  601. package/src/pages/settings/index.ts +9 -0
  602. package/src/pages/settings/page.tsx +47 -0
  603. package/src/pages/showcase/ShowcasePage.tsx +530 -0
  604. package/src/pages/showcase/index.ts +13 -0
  605. package/src/pages/test-env/EmergencyLogoutPage.tsx +179 -0
  606. package/src/pages/test-env/JwtInspectPage.tsx +418 -0
  607. package/src/pages/test-env/RefreshTokenPage.tsx +155 -0
  608. package/src/pages/test-env/TestEnvPage.tsx +116 -0
  609. package/src/pages/test-env/index.ts +25 -0
  610. package/src/pages/verify-code/page.tsx +648 -0
  611. package/src/routes/account/index.ts +32 -0
  612. package/src/routes/account/masked-info.ts +37 -0
  613. package/src/routes/account/send-code.ts +40 -0
  614. package/src/routes/account/update-phone.ts +13 -0
  615. package/src/routes/account/verify-email.ts +41 -0
  616. package/src/routes/account/verify-sms.ts +41 -0
  617. package/src/routes/auth/index.ts +23 -0
  618. package/src/routes/auth/logout.ts +127 -0
  619. package/src/routes/auth/nextauth.ts +71 -0
  620. package/src/routes/auth/refresh.ts +54 -0
  621. package/src/routes/auth/session.ts +193 -0
  622. package/src/routes/auth/settings.ts +75 -0
  623. package/src/routes/auth/viability.ts +220 -0
  624. package/src/routes/index.ts +18 -0
  625. package/src/routes/session/index.ts +7 -0
  626. package/src/routes/session/refresh-viability.ts +17 -0
  627. package/src/services/signalrActivityService.ts +258 -0
  628. package/src/stores/authStore.ts +1904 -0
  629. package/src/templates/instrumentation.ts +41 -0
  630. package/src/theme/ThemeProvider.tsx +39 -0
  631. package/src/theme/default.ts +33 -0
  632. package/src/theme/index.ts +31 -0
  633. package/src/theme/types.ts +69 -0
  634. package/src/theme/useTheme.ts +57 -0
  635. package/src/theme/utils.ts +40 -0
  636. package/src/types/api.ts +13 -0
  637. package/src/types/auth.d.ts +15 -0
  638. package/src/types/auth.ts +22 -0
  639. package/src/types/logging.ts +11 -0
  640. package/src/types/next-auth.d.ts +15 -0
  641. package/src/types/recovery.ts +54 -0
  642. package/src/types/security.ts +1 -0
  643. package/src/utils/api.ts +353 -0
  644. package/src/utils/circuitBreaker.ts +40 -0
  645. package/src/utils/error-message.ts +108 -0
  646. package/src/utils/layout/reservedSpace.ts +124 -0
  647. package/src/utils/logout.ts +30 -0
  648. package/src/vibe/client.ts +590 -0
  649. package/src/vibe/errors.ts +185 -0
  650. package/src/vibe/generic.ts +429 -0
  651. package/src/vibe/hooks/index.ts +367 -0
  652. package/src/vibe/index.ts +121 -0
  653. package/src/vibe/sessions.ts +551 -0
  654. package/src/vibe/types.ts +577 -0
@@ -0,0 +1,68 @@
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ interface Props {
6
+ email: string;
7
+ setEmail: (email: string) => void;
8
+ onSubmit: () => void;
9
+ loading: boolean;
10
+ }
11
+
12
+ export function InitiateRecoveryStep({ email, setEmail, onSubmit, loading }: Props) {
13
+ const handleSubmit = (e: React.FormEvent) => {
14
+ e.preventDefault();
15
+ onSubmit();
16
+ };
17
+
18
+ return (
19
+ <div className="rounded-2xl p-8" style={{ background: 'var(--bg-card)', border: '1px solid var(--border-default)' }}>
20
+ <h2 className="text-xl font-semibold mb-2" style={{ color: 'var(--text-primary)' }}>Account Recovery</h2>
21
+ <p className="text-sm mb-6" style={{ color: 'var(--text-secondary)' }}>
22
+ Enter your email address to begin the account recovery process.
23
+ </p>
24
+
25
+ <form onSubmit={handleSubmit} className="space-y-4">
26
+ <div>
27
+ <label htmlFor="email" className="block text-sm font-medium mb-1" style={{ color: 'var(--text-primary)' }}>
28
+ Email Address
29
+ </label>
30
+ <input
31
+ type="email"
32
+ id="email"
33
+ value={email}
34
+ onChange={(e) => setEmail(e.target.value)}
35
+ required
36
+ disabled={loading}
37
+ placeholder="Enter your email address"
38
+ className="w-full px-3 py-2 rounded focus:ring-2 focus:outline-none disabled:opacity-50"
39
+ style={{
40
+ border: '1px solid var(--border-default)',
41
+ color: 'var(--text-primary)',
42
+ background: 'var(--bg-default)'
43
+ }}
44
+ />
45
+ </div>
46
+
47
+ <button
48
+ type="submit"
49
+ disabled={loading || !email}
50
+ className="w-full py-2 px-4 rounded font-medium focus:outline-none focus:ring-2 disabled:opacity-50 disabled:cursor-not-allowed"
51
+ style={{
52
+ border: '1px solid var(--border-default)',
53
+ color: 'var(--text-primary)',
54
+ background: 'var(--bg-default)'
55
+ }}
56
+ >
57
+ {loading ? 'Processing...' : 'Continue'}
58
+ </button>
59
+
60
+ <div className="text-center">
61
+ <a href="/account-auth/login" className="text-sm hover:underline font-medium" style={{ color: 'var(--text-primary)' }}>
62
+ Back to Login
63
+ </a>
64
+ </div>
65
+ </form>
66
+ </div>
67
+ );
68
+ }
@@ -0,0 +1,73 @@
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+ import { RecoverySession } from '../../types/recovery';
5
+
6
+ interface Props {
7
+ session: RecoverySession;
8
+ onSelectMethod: (method: 'email' | 'sms' | 'authenticator') => void;
9
+ loading: boolean;
10
+ }
11
+
12
+ export function SelectMethodStep({ session, onSelectMethod, loading }: Props) {
13
+ return (
14
+ <div className="bg-white border border-gray-300 rounded p-8">
15
+ <h2 className="text-xl font-semibold text-gray-900 mb-2">Select Verification Method</h2>
16
+ <p className="text-sm text-gray-600 mb-6">
17
+ Choose how you would like to receive your verification code.
18
+ </p>
19
+
20
+ <div className="bg-gray-50 border border-gray-200 rounded p-3 mb-6 text-sm">
21
+ {session.maskedEmail && (
22
+ <div className="mb-1">
23
+ <span className="text-gray-600">Email: </span>
24
+ <span className="text-gray-900 font-medium">{session.maskedEmail}</span>
25
+ </div>
26
+ )}
27
+ {session.maskedPhone && (
28
+ <div className="mb-1">
29
+ <span className="text-gray-600">Phone: </span>
30
+ <span className="text-gray-900 font-medium">{session.maskedPhone}</span>
31
+ </div>
32
+ )}
33
+ {session.hasAuthenticator && (
34
+ <div className="text-gray-600">
35
+ * This account has 2FA enabled
36
+ </div>
37
+ )}
38
+ </div>
39
+
40
+ <div className="space-y-2">
41
+ {session.availableMethods.includes('email') && (
42
+ <button
43
+ onClick={() => onSelectMethod('email')}
44
+ disabled={loading}
45
+ className="w-full py-2 px-4 border border-gray-300 rounded text-gray-900 font-medium hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-gray-900 disabled:opacity-50 disabled:cursor-not-allowed"
46
+ >
47
+ Send Code via Email
48
+ </button>
49
+ )}
50
+
51
+ {session.availableMethods.includes('sms') && session.maskedPhone && (
52
+ <button
53
+ onClick={() => onSelectMethod('sms')}
54
+ disabled={loading}
55
+ className="w-full py-2 px-4 border border-gray-300 rounded text-gray-900 font-medium hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-gray-900 disabled:opacity-50 disabled:cursor-not-allowed"
56
+ >
57
+ Send Code via SMS
58
+ </button>
59
+ )}
60
+
61
+ {session.availableMethods.includes('authenticator') && session.hasAuthenticator && (
62
+ <button
63
+ onClick={() => onSelectMethod('authenticator')}
64
+ disabled={loading}
65
+ className="w-full py-2 px-4 border border-gray-300 rounded text-gray-900 font-medium hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-gray-900 disabled:opacity-50 disabled:cursor-not-allowed"
66
+ >
67
+ Use Authenticator App
68
+ </button>
69
+ )}
70
+ </div>
71
+ </div>
72
+ );
73
+ }
@@ -0,0 +1,97 @@
1
+ 'use client';
2
+
3
+ import React, { useState } from 'react';
4
+
5
+ interface Props {
6
+ onSubmit: (password: string, confirmPassword: string) => void;
7
+ loading: boolean;
8
+ }
9
+
10
+ export function SetPasswordStep({ onSubmit, loading }: Props) {
11
+ const [password, setPassword] = useState('');
12
+ const [confirmPassword, setConfirmPassword] = useState('');
13
+ const [showPassword, setShowPassword] = useState(false);
14
+ const [showConfirmPassword, setShowConfirmPassword] = useState(false);
15
+
16
+ const passwordsMatch = password === confirmPassword && password !== '';
17
+
18
+ const handleSubmit = (e: React.FormEvent) => {
19
+ e.preventDefault();
20
+ if (passwordsMatch) {
21
+ onSubmit(password, confirmPassword);
22
+ }
23
+ };
24
+
25
+ return (
26
+ <div className="bg-white border border-gray-300 rounded p-8">
27
+ <h2 className="text-xl font-semibold text-gray-900 mb-2">Set New Password</h2>
28
+ <p className="text-sm text-gray-600 mb-6">
29
+ Choose a strong password for your account.
30
+ </p>
31
+
32
+ <form onSubmit={handleSubmit} className="space-y-4">
33
+ <div>
34
+ <label htmlFor="password" className="block text-sm font-medium text-gray-900 mb-1">
35
+ New Password
36
+ </label>
37
+ <div className="relative">
38
+ <input
39
+ type={showPassword ? 'text' : 'password'}
40
+ id="password"
41
+ value={password}
42
+ onChange={(e) => setPassword(e.target.value)}
43
+ required
44
+ disabled={loading}
45
+ className="w-full px-3 py-2 border border-gray-300 rounded focus:ring-2 focus:ring-gray-900 focus:outline-none disabled:opacity-50 disabled:bg-gray-50 pr-10"
46
+ />
47
+ <button
48
+ type="button"
49
+ onClick={() => setShowPassword(!showPassword)}
50
+ className="absolute right-2 top-1/2 -translate-y-1/2 text-gray-600 hover:text-gray-900"
51
+ >
52
+ {showPassword ? '👁️' : '👁️‍🗨️'}
53
+ </button>
54
+ </div>
55
+ </div>
56
+
57
+ <div>
58
+ <label htmlFor="confirmPassword" className="block text-sm font-medium text-gray-900 mb-1">
59
+ Confirm New Password
60
+ </label>
61
+ <div className="relative">
62
+ <input
63
+ type={showConfirmPassword ? 'text' : 'password'}
64
+ id="confirmPassword"
65
+ value={confirmPassword}
66
+ onChange={(e) => setConfirmPassword(e.target.value)}
67
+ required
68
+ disabled={loading}
69
+ className="w-full px-3 py-2 border border-gray-300 rounded focus:ring-2 focus:ring-gray-900 focus:outline-none disabled:opacity-50 disabled:bg-gray-50 pr-10"
70
+ />
71
+ <button
72
+ type="button"
73
+ onClick={() => setShowConfirmPassword(!showConfirmPassword)}
74
+ className="absolute right-2 top-1/2 -translate-y-1/2 text-gray-600 hover:text-gray-900"
75
+ >
76
+ {showConfirmPassword ? '👁️' : '👁️‍🗨️'}
77
+ </button>
78
+ </div>
79
+ </div>
80
+
81
+ {!passwordsMatch && confirmPassword && (
82
+ <div className="bg-red-50 border border-red-200 rounded p-3">
83
+ <p className="text-red-700 text-sm">Passwords do not match</p>
84
+ </div>
85
+ )}
86
+
87
+ <button
88
+ type="submit"
89
+ disabled={!passwordsMatch || loading}
90
+ className="w-full py-2 px-4 border border-gray-300 rounded text-gray-900 font-medium hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-gray-900 disabled:opacity-50 disabled:cursor-not-allowed"
91
+ >
92
+ {loading ? 'Resetting Password...' : 'Reset Password'}
93
+ </button>
94
+ </form>
95
+ </div>
96
+ );
97
+ }
@@ -0,0 +1,90 @@
1
+ 'use client';
2
+
3
+ import React, { useState, useEffect } from 'react';
4
+
5
+ interface Props {
6
+ code: string;
7
+ setCode: (code: string) => void;
8
+ onSubmit: () => void;
9
+ onResend: () => void;
10
+ loading: boolean;
11
+ maskedDestination?: string;
12
+ }
13
+
14
+ export function VerifyCodeStep({
15
+ code,
16
+ setCode,
17
+ onSubmit,
18
+ onResend,
19
+ loading,
20
+ maskedDestination
21
+ }: Props) {
22
+ const [resendCooldown, setResendCooldown] = useState(0);
23
+
24
+ useEffect(() => {
25
+ if (resendCooldown > 0) {
26
+ const timer = setTimeout(() => setResendCooldown(resendCooldown - 1), 1000);
27
+ return () => clearTimeout(timer);
28
+ }
29
+ }, [resendCooldown]);
30
+
31
+ const handleSubmit = (e: React.FormEvent) => {
32
+ e.preventDefault();
33
+ onSubmit();
34
+ };
35
+
36
+ const handleResend = () => {
37
+ onResend();
38
+ setResendCooldown(30);
39
+ };
40
+
41
+ return (
42
+ <div className="bg-white border border-gray-300 rounded p-8">
43
+ <h2 className="text-xl font-semibold text-gray-900 mb-2">Enter Verification Code</h2>
44
+ {maskedDestination && (
45
+ <p className="text-sm text-gray-600 mb-6">
46
+ Enter the 6-digit code sent to <span className="font-medium">{maskedDestination}</span>
47
+ </p>
48
+ )}
49
+
50
+ <form onSubmit={handleSubmit} className="space-y-4">
51
+ <div>
52
+ <label htmlFor="code" className="block text-sm font-medium text-gray-900 mb-1">
53
+ Verification Code
54
+ </label>
55
+ <input
56
+ type="text"
57
+ id="code"
58
+ value={code}
59
+ onChange={(e) => setCode(e.target.value.replace(/\D/g, '').slice(0, 6))}
60
+ required
61
+ disabled={loading}
62
+ placeholder="000000"
63
+ maxLength={6}
64
+ className="w-full px-3 py-2 border border-gray-300 rounded focus:ring-2 focus:ring-gray-900 focus:outline-none disabled:opacity-50 disabled:bg-gray-50 text-center text-2xl tracking-widest font-mono"
65
+ />
66
+ <p className="text-xs text-gray-600 mt-1">Code expires in 5 minutes</p>
67
+ </div>
68
+
69
+ <button
70
+ type="submit"
71
+ disabled={loading || code.length !== 6}
72
+ className="w-full py-2 px-4 border border-gray-300 rounded text-gray-900 font-medium hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-gray-900 disabled:opacity-50 disabled:cursor-not-allowed"
73
+ >
74
+ {loading ? 'Verifying...' : 'Verify Code'}
75
+ </button>
76
+
77
+ <div className="text-center">
78
+ <button
79
+ type="button"
80
+ onClick={handleResend}
81
+ disabled={loading || resendCooldown > 0}
82
+ className="text-sm text-gray-900 hover:underline font-medium disabled:opacity-50 disabled:cursor-not-allowed disabled:no-underline"
83
+ >
84
+ {resendCooldown > 0 ? `Resend Code (${resendCooldown}s)` : 'Resend Code'}
85
+ </button>
86
+ </div>
87
+ </form>
88
+ </div>
89
+ );
90
+ }
@@ -0,0 +1,160 @@
1
+ /**
2
+ * ReservedRecoveryWarning - Deterministic Reserved Space for Account Lockout Warning
3
+ *
4
+ * PURPOSE: Eliminate layout shift when the lockout warning appears/disappears
5
+ * by reserving exact height mathematically.
6
+ *
7
+ * MATHEMATICAL APPROACH:
8
+ * - Mirrors the complete DOM structure (icon+title row, body paragraph, CTA button)
9
+ * - Height = Σ(child block heights) + (vertical gaps from space-y-3) + (padding top/bottom from p-4) + (borders)
10
+ * - Text block heights from exact font-size × line-height and wrapping at actual width
11
+ * - space-y-3: 0.75rem = 12px gap between children
12
+ * - p-4: 1rem = 16px padding (top + bottom = 32px)
13
+ * - border: 1px (top + bottom = 2px)
14
+ * - Evaluated via offscreen DOM for precision across zoom/browsers
15
+ *
16
+ * CRITICAL: No transitions on height; reserves space even when hidden
17
+ */
18
+
19
+ import React from "react";
20
+ import { measureNodeHeightAtWidth, observeForRecalc } from "../../utils/layout/reservedSpace";
21
+
22
+ type Props = {
23
+ className?: string;
24
+ /** Whether the warning is actually visible */
25
+ show?: boolean;
26
+ /** Provide the actual copy used so we can measure precise wrapping (localizable) */
27
+ titleText: string;
28
+ bodyText: string;
29
+ actionLabel: string;
30
+ /** Class recipes that match the live styles */
31
+ containerClass?: string;
32
+ titleClass?: string;
33
+ bodyClass?: string;
34
+ buttonClass?: string;
35
+ /** Icon size in px (default 20 for w-5 h-5) */
36
+ iconSizePx?: number;
37
+ /** The dynamic warning content */
38
+ children?: React.ReactNode;
39
+ };
40
+
41
+ export function ReservedRecoveryWarning({
42
+ className,
43
+ show = false,
44
+ titleText,
45
+ bodyText,
46
+ actionLabel,
47
+ containerClass = "p-4 rounded-lg border",
48
+ titleClass = "font-medium",
49
+ bodyClass = "text-sm",
50
+ buttonClass = "w-full py-2 px-4 text-sm font-medium rounded-md",
51
+ iconSizePx = 20,
52
+ children,
53
+ }: Props) {
54
+ const hostRef = React.useRef<HTMLDivElement | null>(null);
55
+
56
+ // Estimate initial height to prevent collapse during SSR/hydration
57
+ // Formula: icon (20px) + padding (p-4 = 32px) + border (2px) + title + body + button
58
+ // Conservative estimate: ~140px for typical warning with button
59
+ const estimatedMinHeight = 140;
60
+
61
+ const [minH, setMinH] = React.useState<number>(estimatedMinHeight);
62
+
63
+ const recompute = React.useCallback(() => {
64
+ const el = hostRef.current;
65
+ if (!el) return;
66
+ const width = el.clientWidth;
67
+
68
+ // Wait for layout - clientWidth === 0 means container not laid out yet
69
+ if (width === 0) {
70
+ // Retry after next frame when layout is ready
71
+ requestAnimationFrame(recompute);
72
+ return;
73
+ }
74
+
75
+ const h = measureNodeHeightAtWidth(() => {
76
+ // Mirror the real DOM of the warning
77
+ const outer = document.createElement("div");
78
+ outer.className = containerClass;
79
+
80
+ // Row: icon + title (flex items-start space-x-3)
81
+ const headerRow = document.createElement("div");
82
+ headerRow.className = "flex items-start space-x-3";
83
+
84
+ const icon = document.createElement("div");
85
+ icon.style.width = iconSizePx + "px";
86
+ icon.style.height = iconSizePx + "px";
87
+ icon.style.flexShrink = "0";
88
+ icon.style.marginTop = "2px"; // mt-0.5 to align with text
89
+
90
+ const titleContainer = document.createElement("div");
91
+ titleContainer.className = "flex-1";
92
+
93
+ const h3 = document.createElement("h3");
94
+ h3.className = titleClass;
95
+ h3.style.margin = "0";
96
+ h3.style.marginBottom = "8px"; // mb-2
97
+ h3.textContent = titleText;
98
+
99
+ // Body paragraph
100
+ const p = document.createElement("p");
101
+ p.className = bodyClass;
102
+ p.style.margin = "0";
103
+ p.style.marginBottom = "12px"; // mb-3
104
+ p.textContent = bodyText;
105
+
106
+ // Action button
107
+ const btn = document.createElement("button");
108
+ btn.className = buttonClass;
109
+ btn.textContent = actionLabel;
110
+
111
+ titleContainer.appendChild(h3);
112
+ titleContainer.appendChild(p);
113
+ titleContainer.appendChild(btn);
114
+
115
+ headerRow.appendChild(icon);
116
+ headerRow.appendChild(titleContainer);
117
+
118
+ outer.appendChild(headerRow);
119
+
120
+ return outer;
121
+ }, width);
122
+
123
+ setMinH(h);
124
+ }, [titleText, bodyText, actionLabel, containerClass, titleClass, bodyClass, buttonClass, iconSizePx]);
125
+
126
+ React.useLayoutEffect(() => {
127
+ recompute();
128
+ if (hostRef.current) {
129
+ return observeForRecalc(hostRef.current, recompute);
130
+ }
131
+ }, [recompute]);
132
+
133
+ return (
134
+ <div
135
+ ref={hostRef}
136
+ className={className}
137
+ style={{ minHeight: minH ? `${minH}px` : undefined, transition: "none" }}
138
+ data-testid="recovery-warning-wrap"
139
+ >
140
+ {show ? children : null}
141
+ </div>
142
+ );
143
+ }
144
+
145
+ export default ReservedRecoveryWarning;
146
+
147
+ /*
148
+ MATHEMATICAL NOTES (documented per spec):
149
+ - We compute the exact height of the fully-rendered warning box by mirroring its DOM:
150
+ - Icon+title row (flex items-start space-x-3)
151
+ - Title (h3 with font-medium)
152
+ - Body paragraph (text-sm)
153
+ - CTA button (full-width)
154
+
155
+ - Height = Σ(child block heights) + (vertical gaps) + (padding top/bottom from p-4) + (borders)
156
+ - Text block heights come from exact font-size × line-height and wrapping given the actual width
157
+ - This is evaluated via offscreen DOM to preserve precision across zoom/browsers
158
+ - No transitions applied; min-height is a fixed px value at any zoom level
159
+ - Space is reserved even when content is hidden (show=false), eliminating jump
160
+ */
@@ -0,0 +1,118 @@
1
+ /**
2
+ * ReservedStatusBox - Deterministic Reserved Space for Status Messages
3
+ *
4
+ * PURPOSE: Eliminate layout shift when status messages (ready/submitting/error/success)
5
+ * appear/disappear by reserving exact height mathematically.
6
+ *
7
+ * MATHEMATICAL APPROACH:
8
+ * - Measures all candidate messages at current container width
9
+ * - Computes height = max(iconSizePx, text block height) + paddings + borders
10
+ * - Font metrics from Tailwind: text-sm (0.875rem = 14px), leading-relaxed (1.625)
11
+ * - Padding from p-3: 0.75rem = 12px (top + bottom = 24px)
12
+ * - Border from border class: 1px (top + bottom = 2px)
13
+ * - Sets minHeight to the maximum of all candidates
14
+ *
15
+ * CRITICAL: No transitions on height; exact px value at any zoom level
16
+ */
17
+
18
+ import React from "react";
19
+ import { measureNodeHeightAtWidth, observeForRecalc } from "../../utils/layout/reservedSpace";
20
+
21
+ type Props = {
22
+ className?: string;
23
+ /** List of candidate messages representing the longest possible strings for each state */
24
+ candidates: string[];
25
+ /** Tailwind classes applied to the live status container (must match for accurate measurement) */
26
+ containerClass?: string; // e.g., "p-3 text-sm leading-relaxed rounded-md border"
27
+ /** Icon size in px (default 16 for w-4 h-4) */
28
+ iconSizePx?: number;
29
+ /** The dynamic status content */
30
+ children?: React.ReactNode;
31
+ };
32
+
33
+ export function ReservedStatusBox({
34
+ className,
35
+ candidates,
36
+ containerClass = "p-3 text-sm leading-relaxed rounded-md border",
37
+ iconSizePx = 16,
38
+ children,
39
+ }: Props) {
40
+ const hostRef = React.useRef<HTMLDivElement | null>(null);
41
+
42
+ // Estimate initial height to prevent collapse during SSR/hydration
43
+ // Formula: iconSize + padding (p-3 = 24px) + border (2px) = conservative minimum
44
+ const estimatedMinHeight = iconSizePx + 24 + 2; // ~42px for 16px icon
45
+
46
+ const [minH, setMinH] = React.useState<number>(estimatedMinHeight);
47
+
48
+ const recompute = React.useCallback(() => {
49
+ const el = hostRef.current;
50
+ if (!el) return;
51
+ const width = el.clientWidth; // width the status box will render at
52
+
53
+ // Wait for layout - clientWidth === 0 means container not laid out yet
54
+ if (width === 0) {
55
+ // Retry after next frame when layout is ready
56
+ requestAnimationFrame(recompute);
57
+ return;
58
+ }
59
+
60
+ // For each candidate, build a DOM subtree matching the live structure and measure its height
61
+ const heights = candidates.map((msg) =>
62
+ measureNodeHeightAtWidth(() => {
63
+ const outer = document.createElement("div");
64
+ outer.className = containerClass + " flex items-center space-x-2"; // must match live
65
+
66
+ // icon placeholder
67
+ const icon = document.createElement("div");
68
+ icon.style.width = iconSizePx + "px";
69
+ icon.style.height = iconSizePx + "px";
70
+ icon.style.flexShrink = "0";
71
+
72
+ // message text
73
+ const span = document.createElement("span");
74
+ span.className = "flex-1"; // let text wrap if needed
75
+ span.textContent = msg;
76
+
77
+ outer.appendChild(icon);
78
+ outer.appendChild(span);
79
+ return outer;
80
+ }, width)
81
+ );
82
+
83
+ const max = Math.max(0, ...heights);
84
+ setMinH(max);
85
+ }, [candidates, containerClass, iconSizePx]);
86
+
87
+ React.useLayoutEffect(() => {
88
+ recompute();
89
+ if (hostRef.current) {
90
+ return observeForRecalc(hostRef.current, recompute);
91
+ }
92
+ }, [recompute]);
93
+
94
+ return (
95
+ <div
96
+ ref={hostRef}
97
+ className={className}
98
+ style={{ minHeight: minH ? `${minH}px` : undefined, transition: "none" }}
99
+ data-testid="status-wrap"
100
+ >
101
+ {children}
102
+ </div>
103
+ );
104
+ }
105
+
106
+ export default ReservedStatusBox;
107
+
108
+ /*
109
+ MATHEMATICAL NOTES (documented per spec):
110
+ - We force the exact height by measuring the maximum of all candidate messages rendered with:
111
+ - Font metrics from applied classes: text-sm (font-size), leading-relaxed (line-height)
112
+ - Padding p-3 (top+bottom = 2 × 12px = 24px)
113
+ - Border widths from Tailwind's border class (1px top and bottom by default = 2px)
114
+ - The height is the max of (iconSizePx, text line block height) plus paddings and borders,
115
+ computed by the browser for precision
116
+ - No transitions applied; min-height is a fixed px value at any zoom level
117
+ - Text wrapping is accounted for by measuring at the actual container width
118
+ */
@@ -0,0 +1,58 @@
1
+ 'use client';
2
+
3
+ import React from 'react';
4
+
5
+ export interface BetaBadgeProps {
6
+ /** Text to display (default: 'beta') */
7
+ text?: string;
8
+ /** Additional CSS classes */
9
+ className?: string;
10
+ /** Badge variant */
11
+ variant?: 'subtle' | 'outlined' | 'solid';
12
+ }
13
+
14
+ /**
15
+ * A subtle badge component for indicating pre-release status.
16
+ *
17
+ * Controlled by NEXT_PUBLIC_SHOW_BETA_BADGE env var.
18
+ * When env var is not 'true', renders nothing.
19
+ *
20
+ * @example
21
+ * ```tsx
22
+ * // In your header, next to logo
23
+ * <Logo />
24
+ * <BetaBadge />
25
+ *
26
+ * // Custom text
27
+ * <BetaBadge text="preview" />
28
+ *
29
+ * // Different variant
30
+ * <BetaBadge variant="outlined" text="coming soon" />
31
+ * ```
32
+ */
33
+ export function BetaBadge({
34
+ text = 'beta',
35
+ className = '',
36
+ variant = 'subtle'
37
+ }: BetaBadgeProps) {
38
+ // Check env var - only render if explicitly enabled
39
+ if (process.env.NEXT_PUBLIC_SHOW_BETA_BADGE !== 'true') {
40
+ return null;
41
+ }
42
+
43
+ const baseStyles = 'inline-flex items-center px-2 py-0.5 text-xs font-medium rounded-full lowercase tracking-wide';
44
+
45
+ const variantStyles = {
46
+ subtle: 'bg-gray-100 text-gray-500 dark:bg-gray-800 dark:text-gray-400',
47
+ outlined: 'border border-gray-300 text-gray-500 dark:border-gray-600 dark:text-gray-400',
48
+ solid: 'bg-gray-500 text-white dark:bg-gray-600',
49
+ };
50
+
51
+ return (
52
+ <span className={`${baseStyles} ${variantStyles[variant]} ${className}`}>
53
+ {text}
54
+ </span>
55
+ );
56
+ }
57
+
58
+ export default BetaBadge;