@reblu/site-next 1.1.0 → 1.2.1

package/dist/auth.d.ts

@@ -0,0 +1,267 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+interface LoginFormCopy {
+    magicLinkTabLabel: string;
+    passwordTabLabel: string;
+    emailLabel: string;
+    emailPlaceholder: string;
+    passwordLabel: string;
+    passwordPlaceholder: string;
+    passwordSubmitCta: string;
+    forgotPasswordCta: string;
+    magicLinkSubmitCta: string;
+    magicLinkSuccessTitle: string;
+    magicLinkSuccessMessage: string;
+    mfaTitle: string;
+    mfaMessage: string;
+    mfaCodeLabel: string;
+    mfaCodePlaceholder: string;
+    mfaSubmitCta: string;
+    invalidEmailError: string;
+    networkError: string;
+    invalidCredentialsError: string;
+    mfaInvalidCodeError: string;
+}
+interface LoginFormProps {
+    passwordLoginUrl: string;
+    mfaVerifyUrl: string;
+    magicLinkRequestUrl: string;
+    resetPasswordUrl: string;
+    copy?: Partial<LoginFormCopy>;
+    className?: string;
+    defaultMethod?: 'magic-link' | 'password';
+    onPasswordSubmitted?: (email: string) => void;
+    onMagicLinkSubmitted?: (email: string) => void;
+    onMfaSubmitted?: () => void;
+}
+declare function LoginForm(props: LoginFormProps): react_jsx_runtime.JSX.Element;
+
+interface AuthCallbackCopy {
+    loadingTitle: string;
+    loadingMessage: string;
+    successMessage: string;
+    expiredTitle: string;
+    expiredMessage: string;
+    expiredCta: string;
+    networkErrorTitle: string;
+    networkErrorMessage: string;
+    networkErrorRetryCta: string;
+    networkErrorBackCta: string;
+    malformedTitle: string;
+    malformedMessage: string;
+    malformedCta: string;
+}
+interface AuthCallbackProps {
+    exchangeUrl: string;
+    loginUrl: string;
+    copy?: Partial<AuthCallbackCopy>;
+    onSuccess?: (redirectTo: string) => void;
+    onError?: (state: 'expired' | 'network' | 'malformed', error?: Error) => void;
+    className?: string;
+}
+declare function AuthCallback({ exchangeUrl, loginUrl, copy, onSuccess, onError, className, }: AuthCallbackProps): react_jsx_runtime.JSX.Element;
+
+/**
+ * Maps the raw `?error=` query param that Supabase appends when a magic link is
+ * already consumed or expired to a user-facing Spanish message.
+ *
+ * Supabase redirects to /login?error=... with a raw English message (e.g.
+ * "Email link is invalid or has expired"). Showing that verbatim is confusing,
+ * so we translate the common cases and signal whether the "Solicitar otro
+ * enlace" CTA should be offered.
+ *
+ * Matching is case-insensitive and whitespace-tolerant so it survives small
+ * variations in how the error text arrives.
+ *
+ * Relocated from apps/demo-site/src/lib/utils/login-errors.ts (REB-510 slice
+ * 2a) as a copy-injectable helper — Spanish defaults are unchanged, and a SITE
+ * MAY override individual messages via `Partial<LoginErrorCopy>`.
+ */
+interface LoginErrorInfo {
+    /** Message shown in the error card. */
+    message: string;
+    /** Whether to show the "Solicitar otro enlace" CTA. */
+    showRequestLink: boolean;
+}
+interface LoginErrorCopy {
+    expiredMessage: string;
+    missingTokenMessage: string;
+    genericMessage: string;
+}
+declare function mapLoginError(error: string | null | undefined, copy?: Partial<LoginErrorCopy>): LoginErrorInfo | null;
+
+interface AuthLogoCopy {
+    /**
+     * Overrides the rendered `<img>` alt text. Pass `''` explicitly to mark the
+     * logo as decorative (e.g. when an adjacent heading already announces
+     * `siteName`, so screen readers shouldn't read it twice) — `undefined`
+     * (the key simply omitted from `copy`) is what falls back to `siteName`.
+     */
+    altText?: string;
+    /** Shown when neither a logo URL nor `siteName` is available. */
+    fallbackLabel: string;
+}
+interface AuthLogoProps {
+    logoLightExpandedUrl: string | null;
+    logoDarkExpandedUrl: string | null;
+    logoLightSmallUrl: string | null;
+    logoDarkSmallUrl: string | null;
+    siteName: string;
+    /** @default 'expanded' */
+    variant?: 'expanded' | 'compact';
+    className?: string;
+    copy?: Partial<AuthLogoCopy>;
+    /**
+     * When `true`, renders `null` instead of the `siteName`/fallback-label text
+     * span whenever no logo URL resolves for the active variant+theme, rather
+     * than showing the text. Use this when the consumer already renders
+     * `siteName` as a heading elsewhere on the page — without it, a visitor
+     * with no logo configured (or only a light-mode logo, viewed in dark mode)
+     * would see/hear `siteName` twice: once from this fallback, once from the
+     * consumer's own heading.
+     * @default false
+     */
+    hideTextFallback?: boolean;
+}
+/**
+ * Dynamic tenant logo for auth pages (REB-510 R1). Resolves expanded/compact ×
+ * light/dark from the 4 `/api/site/config` logo URLs, switching light/dark
+ * CLIENT-SIDE via `next-themes`. Falls back to `siteName` text, then a generic
+ * `copy.fallbackLabel`, whenever the resolved URL for the active
+ * variant+theme combination is `null` — it never silently swaps in the OTHER
+ * theme's logo.
+ *
+ * Hydration-safe: `next-themes`' `resolvedTheme` is `undefined` until it
+ * mounts client-side, so pre-mount `isDark` is always `false` — the same
+ * light-first markup the server rendered, avoiding a hydration mismatch.
+ *
+ * Renders a plain `<img>`, not `next/image`: this is a distributable SDK
+ * consumed by external SITE repos, so it cannot assume the consuming app's
+ * `next.config` `images.remotePatterns` allowlists the tenant's logo CDN.
+ */
+declare function AuthLogo(props: AuthLogoProps): react_jsx_runtime.JSX.Element | null;
+
+interface ResetPasswordRequestCopy {
+    emailLabel: string;
+    emailPlaceholder: string;
+    submitCta: string;
+    submittingCta: string;
+    successTitle: string;
+    successMessage: string;
+    backToLoginCta: string;
+    invalidEmailError: string;
+    networkError: string;
+}
+interface ResetPasswordRequestProps {
+    requestUrl: string;
+    loginUrl: string;
+    copy?: Partial<ResetPasswordRequestCopy>;
+    className?: string;
+    onSubmitted?: (email: string) => void;
+}
+/**
+ * Step 1 of the password-reset flow — anti-enumeration: always shows the same
+ * generic success message on a 2xx response, regardless of whether the email
+ * exists (the backend never leaks that).
+ */
+declare function ResetPasswordRequest(props: ResetPasswordRequestProps): react_jsx_runtime.JSX.Element;
+
+interface ResetPasswordConfirmCopy {
+    passwordLabel: string;
+    passwordPlaceholder: string;
+    confirmPasswordLabel: string;
+    confirmPasswordPlaceholder: string;
+    mfaCodeLabel: string;
+    mfaCodePlaceholder: string;
+    mfaHelpMessage: string;
+    submitCta: string;
+    submittingCta: string;
+    passwordTooShortError: string;
+    passwordMismatchError: string;
+    mfaInvalidCodeError: string;
+    genericError: string;
+    missingTokensTitle: string;
+    missingTokensMessage: string;
+    requestNewLinkCta: string;
+}
+interface ResetPasswordConfirmProps {
+    confirmUrl: string;
+    loginUrl: string;
+    resetRequestUrl: string;
+    copy?: Partial<ResetPasswordConfirmCopy>;
+    className?: string;
+    onSuccess?: () => void;
+}
+/**
+ * Step 2 of the password-reset flow. Reads `access_token`/`refresh_token`
+ * straight off `useSearchParams` — no `window.location.search` + effect-timing
+ * workaround needed here because, unlike a page-level default export, this is
+ * a component the SITE mounts inside its own `<Suspense>` boundary.
+ *
+ * REB-378: when the account has a verified MFA factor, the recovery session
+ * (AAL1) cannot change the password on its own. The backend responds
+ * `{ data: { mfaRequired: true } }` and this reveals a 6-digit TOTP field so
+ * the user can resubmit with the code (the recovery tokens stay valid).
+ */
+declare function ResetPasswordConfirm(props: ResetPasswordConfirmProps): react_jsx_runtime.JSX.Element;
+
+interface SetPasswordCopy {
+    passwordLabel: string;
+    passwordPlaceholder: string;
+    confirmPasswordLabel: string;
+    confirmPasswordPlaceholder: string;
+    submitCta: string;
+    submittingCta: string;
+    passwordTooShortError: string;
+    passwordMismatchError: string;
+    genericError: string;
+    missingTokenTitle: string;
+    missingTokenMessage: string;
+    backToLoginCta: string;
+}
+interface SetPasswordProps {
+    submitUrl: string;
+    loginUrl: string;
+    copy?: Partial<SetPasswordCopy>;
+    className?: string;
+    onSuccess?: (sessionExchangeUrl: string) => void;
+}
+/**
+ * Invite flow — for a user setting their initial password. Reads
+ * `session_exchange_token` off `useSearchParams`; on success, redirects via
+ * `window.location.assign` (NOT the Next router) because the returned
+ * `sessionExchangeUrl` points at base-api's own domain to set cookies, not a
+ * same-origin SITE route.
+ */
+declare function SetPassword(props: SetPasswordProps): react_jsx_runtime.JSX.Element;
+
+interface AuthConfirmCopy {
+    loadingMessage: string;
+    successTitle: string;
+    successMessage: string;
+    successCta: string;
+    errorTitle: string;
+    errorMessage: string;
+    errorCta: string;
+}
+interface AuthConfirmProps {
+    confirmUrl: string;
+    loginUrl: string;
+    copy?: Partial<AuthConfirmCopy>;
+    className?: string;
+}
+/**
+ * Dual-mode email confirmation (signup / email-change):
+ *
+ * 1. `?success=true` — base-api already ran `verifyOtp` server-side and
+ *    redirected here. Shows the confirmed message with no API call.
+ * 2. `?token_hash=&type=` — client-initiated verify: POSTs to `confirmUrl`
+ *    and follows the returned `sessionExchangeUrl`, or shows success/error
+ *    copy based on the response.
+ *
+ * Neither param present → shown as an error state with a link back to login,
+ * rather than a silent client-side redirect.
+ */
+declare function AuthConfirm(props: AuthConfirmProps): react_jsx_runtime.JSX.Element;
+
+export { AuthCallback, type AuthCallbackCopy, type AuthCallbackProps, AuthConfirm, type AuthConfirmCopy, type AuthConfirmProps, AuthLogo, type AuthLogoCopy, type AuthLogoProps, type LoginErrorCopy, type LoginErrorInfo, LoginForm, type LoginFormCopy, type LoginFormProps, ResetPasswordConfirm, type ResetPasswordConfirmCopy, type ResetPasswordConfirmProps, ResetPasswordRequest, type ResetPasswordRequestCopy, type ResetPasswordRequestProps, SetPassword, type SetPasswordCopy, type SetPasswordProps, mapLoginError };