@reuters-graphics/gfx-better-auth 0.1.0

package/README.md

@@ -0,0 +1,81 @@
+# @reuters-graphics/gfx-better-auth
+
+Magic-link sign-in for Reuters Graphics SvelteKit apps, gated to Thomson Reuters staff. An
+opinionated [better-auth](https://better-auth.com) preset with the schema, routes, emails and dev
+flow already wired.
+
+> ### This package is for Reuters Graphics apps only
+>
+> The sign-in domain is **hardcoded to `@thomsonreuters.com`** and is deliberately not
+> configurable, so the package cannot do anything useful outside Thomson Reuters. It is published
+> publicly because that is how our own apps install it, not because it is a general-purpose
+> library.
+>
+> **Full documentation lives in the repository**, which is private. If you work here, start with
+> `USAGE.md`. If you don't, this is unlikely to be what you want —
+> [better-auth](https://better-auth.com) itself almost certainly is.
+
+## Install
+
+```sh
+pnpm add @reuters-graphics/gfx-better-auth
+```
+
+Peers: `better-auth` (`>=1.7.5 <1.8.0`), `drizzle-orm`, `@sveltejs/kit`, `svelte`. Node ≥ 22, plus
+a Postgres and a Drizzle instance.
+
+## Four edits
+
+```ts
+// 1. src/lib/server/db/schema/index.ts
+export * from '@reuters-graphics/gfx-better-auth/schema';
+
+// 2. src/lib/server/auth.ts
+import { createGfxAuth } from '@reuters-graphics/gfx-better-auth/server';
+export const auth = createGfxAuth({
+  db,
+  appName,
+  baseURL,
+  secret,
+  postmark,
+});
+
+// 3. src/hooks.server.ts
+import { building } from '$app/environment';
+export const handle = sequence(gfxAuth({ auth, building }), myHandle);
+
+// 4. src/app.d.ts
+interface Locals extends GfxAuthLocals {}
+```
+
+Then `pnpm db:generate && pnpm db:migrate`.
+
+⚠️ `gfxAuth` must come **before** anything reading `event.locals.user`. Pass `building` if your app
+prerenders anything.
+
+## What you get
+
+Magic-link sign-in gated at the endpoint; sign-in, sent, confirm and sign-out pages served from the
+hook with no route files and no JavaScript; `event.locals.user` and `.session`; a route guard; and
+a development flow that needs no credentials.
+
+You do **not** get roles or permissions — this package proves who someone is, not what they may do.
+
+## Entry points
+
+|            |                                                           |
+| ---------- | --------------------------------------------------------- |
+| `.`        | Types and the domain helpers. Safe anywhere               |
+| `./schema` | The four Drizzle tables, and columns to spread            |
+| `./server` | 🚨 `createGfxAuth`, the handle, `requireUser`, `signInAs` |
+| `./client` | The browser client. Optional                              |
+| `./emails` | The sign-in email, and `InactiveRecipientError`           |
+
+## Everything else
+
+Configuration, session semantics, extending the user model, testing, and the reasoning behind any
+of it: **see `USAGE.md` in the repository.**
+
+---
+
+MIT · [Reuters Graphics](https://github.com/reuters-graphics)

package/dist/client/index.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Browser entry. Safe to import from components — nothing here touches the
+ * database, Postmark or a secret.
+ *
+ * ```ts
+ * // src/lib/auth-client.ts
+ * import { createGfxAuthClient } from '@reuters-graphics/gfx-better-auth/client';
+ * export const authClient = createGfxAuthClient();
+ *
+ * // in a component
+ * await authClient.signIn.magicLink({ email, callbackURL: '/' });
+ * await authClient.signOut();
+ * const session = authClient.useSession();   // a Svelte store
+ * ```
+ *
+ * ⚠️ **You usually do not need this.** The built-in pages at `/magic-link` are
+ * plain HTML forms served from the handle and require no client-side code at
+ * all (ADR-0008). Reach for this only when building your own sign-in UI.
+ *
+ * 🚨 **The domain gate is not here, and cannot be.** It runs in
+ * `hooks.before` on the server, because anything in the browser is advice
+ * rather than enforcement (ADR-0004). A non-Thomson-Reuters address fails with
+ * a 403 from the endpoint; surface that, do not pre-empt it.
+ */
+export declare const createGfxAuthClient: (options?: {
+    baseURL?: string;
+}) => import("better-auth/svelte").SvelteAuthClient<{
+    plugins: {
+        id: "magic-link";
+        version: string;
+        $InferServerPlugin: ReturnType<(options: import("better-auth/plugins").MagicLinkOptions) => {
+            id: "magic-link";
+            version: string;
+            endpoints: {
+                signInMagicLink: import("better-auth").StrictEndpoint<"/sign-in/magic-link", {
+                    method: "POST";
+                    requireHeaders: true;
+                    use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
+                    body: import("zod").ZodObject<{
+                        email: import("zod").ZodEmail;
+                        name: import("zod").ZodOptional<import("zod").ZodString>;
+                        callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                        newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                        errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                        metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+                    }, import("zod/v4/core").$strip>;
+                    metadata: {
+                        openapi: {
+                            operationId: string;
+                            description: string;
+                            responses: {
+                                200: {
+                                    description: string;
+                                    content: {
+                                        "application/json": {
+                                            schema: {
+                                                type: "object";
+                                                properties: {
+                                                    status: {
+                                                        type: string;
+                                                    };
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                }, {
+                    status: boolean;
+                }>;
+                magicLinkVerify: import("better-auth").StrictEndpoint<"/magic-link/verify", {
+                    method: "GET";
+                    query: import("zod").ZodObject<{
+                        token: import("zod").ZodString;
+                        callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                        errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                        newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                    }, import("zod/v4/core").$strip>;
+                    use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
+                    requireHeaders: true;
+                    metadata: {
+                        openapi: {
+                            operationId: string;
+                            description: string;
+                            responses: {
+                                200: {
+                                    description: string;
+                                    content: {
+                                        "application/json": {
+                                            schema: {
+                                                type: "object";
+                                                properties: {
+                                                    session: {
+                                                        $ref: string;
+                                                    };
+                                                    user: {
+                                                        $ref: string;
+                                                    };
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                }, {
+                    token: string;
+                    user: {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        email: string;
+                        emailVerified: boolean;
+                        name: string;
+                        image?: string | null | undefined;
+                    };
+                    session: {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        userId: string;
+                        expiresAt: Date;
+                        token: string;
+                        ipAddress?: string | null | undefined;
+                        userAgent?: string | null | undefined;
+                    };
+                }>;
+            };
+            rateLimit: {
+                pathMatcher(path: string): boolean;
+                window: number;
+                max: number;
+            }[];
+            options: import("better-auth/plugins").MagicLinkOptions;
+        }>;
+    }[];
+    baseURL?: string | undefined;
+}>;
+export type GfxAuthClient = ReturnType<typeof createGfxAuthClient>;

package/dist/client/index.js

@@ -0,0 +1,32 @@
+import { createAuthClient } from 'better-auth/svelte';
+import { magicLinkClient } from 'better-auth/client/plugins';
+/**
+ * Browser entry. Safe to import from components — nothing here touches the
+ * database, Postmark or a secret.
+ *
+ * ```ts
+ * // src/lib/auth-client.ts
+ * import { createGfxAuthClient } from '@reuters-graphics/gfx-better-auth/client';
+ * export const authClient = createGfxAuthClient();
+ *
+ * // in a component
+ * await authClient.signIn.magicLink({ email, callbackURL: '/' });
+ * await authClient.signOut();
+ * const session = authClient.useSession();   // a Svelte store
+ * ```
+ *
+ * ⚠️ **You usually do not need this.** The built-in pages at `/magic-link` are
+ * plain HTML forms served from the handle and require no client-side code at
+ * all (ADR-0008). Reach for this only when building your own sign-in UI.
+ *
+ * 🚨 **The domain gate is not here, and cannot be.** It runs in
+ * `hooks.before` on the server, because anything in the browser is advice
+ * rather than enforcement (ADR-0004). A non-Thomson-Reuters address fails with
+ * a 403 from the endpoint; surface that, do not pre-empt it.
+ */
+export const createGfxAuthClient = (options = {}) => createAuthClient({
+    // Defaults to the page's own origin, which is right for a SvelteKit app
+    // served from the same host as its API.
+    ...(options.baseURL ? { baseURL: options.baseURL } : {}),
+    plugins: [magicLinkClient()],
+});

package/dist/domains.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Who counts as staff.
+ *
+ * ⚠️ **`@tr.com` is deliberately not here, and it will look like a bug.**
+ * Two Thomson Reuters domains are in circulation — the same person appears in
+ * neighbouring repos as both `…@thomsonreuters.com` and `…@tr.com` — so
+ * someone will eventually "fix" this by adding the second one.
+ *
+ * Don't. **`@tr.com` does not receive mail** (api-questions § 1, answered
+ * 2026-09-23). Accepting it would mail a magic link into a void while the
+ * person sat on "check your inbox" forever — a worse failure than the refusal
+ * they get now, because it is silent and looks like our bug rather than a
+ * wrong address.
+ */
+export declare const ALLOWED_EMAIL_DOMAINS: readonly ["thomsonreuters.com"];
+/**
+ * Canonical form of an address, so one person is one identity.
+ *
+ * Lowercases, trims, and strips plus-addressing — otherwise
+ * `Jane.Doe+test@thomsonreuters.com` and `jane.doe@thomsonreuters.com` become
+ * two accounts with two sets of saved work.
+ */
+export declare const normaliseEmail: (email: string) => string;
+export declare const isAllowedEmail: (email: string) => boolean;

package/dist/domains.js

@@ -0,0 +1,30 @@
+/**
+ * Who counts as staff.
+ *
+ * ⚠️ **`@tr.com` is deliberately not here, and it will look like a bug.**
+ * Two Thomson Reuters domains are in circulation — the same person appears in
+ * neighbouring repos as both `…@thomsonreuters.com` and `…@tr.com` — so
+ * someone will eventually "fix" this by adding the second one.
+ *
+ * Don't. **`@tr.com` does not receive mail** (api-questions § 1, answered
+ * 2026-09-23). Accepting it would mail a magic link into a void while the
+ * person sat on "check your inbox" forever — a worse failure than the refusal
+ * they get now, because it is silent and looks like our bug rather than a
+ * wrong address.
+ */
+export const ALLOWED_EMAIL_DOMAINS = ['thomsonreuters.com'];
+/**
+ * Canonical form of an address, so one person is one identity.
+ *
+ * Lowercases, trims, and strips plus-addressing — otherwise
+ * `Jane.Doe+test@thomsonreuters.com` and `jane.doe@thomsonreuters.com` become
+ * two accounts with two sets of saved work.
+ */
+export const normaliseEmail = (email) => {
+    const [local = '', domain = ''] = email.trim().toLowerCase().split('@');
+    return `${local.split('+')[0]}@${domain}`;
+};
+export const isAllowedEmail = (email) => {
+    const domain = normaliseEmail(email).split('@')[1];
+    return (!!domain && ALLOWED_EMAIL_DOMAINS.includes(domain));
+};

package/dist/emails/Template.d.ts

@@ -0,0 +1,36 @@
+export interface SignInEmailContext {
+    /**
+     * Where the button points. 🚨 In this package that is
+     * `/magic-link/confirm?token=…`, **not** the verify endpoint — Outlook
+     * SafeLinks pre-fetches URLs in email and consumes single-use tokens, so a
+     * scanner must only ever reach a page (ADR-0002). This template does not
+     * enforce that; it is just the reason the URL it is handed looks the way it
+     * does.
+     */
+    url: string;
+    /** e.g. `"lightbox"`. Used in the subject, the heading and the button. */
+    appName: string;
+    /**
+     * How long the link is good for, **in seconds**. Optional, and omitted from
+     * the copy entirely when absent.
+     *
+     * ⚠️ `rngs.io` and decision-desk both hardcode "5 minutes" in the template.
+     * Ours is configurable, so a hardcoded number is a lie waiting to happen.
+     */
+    expiresIn?: number;
+}
+/**
+ * Seconds to something a person reads. Rounds to the nearest whole unit, and
+ * refuses to invent precision — 90 minutes reads as "2 hours", which is the
+ * right kind of wrong in a sentence that only sets expectations.
+ */
+export declare const formatDuration: (seconds: number) => string;
+/** The subject line, kept next to the template that has to match it. */
+export declare const subject: (appName: string) => string;
+/**
+ * The plain-text alternative. Hand-written rather than derived from the HTML:
+ * the one thing it must do is show the URL unmangled, and a converter is a
+ * strange thing to trust with that.
+ */
+export declare const text: ({ url, appName, expiresIn }: SignInEmailContext) => string;
+export declare const Template: ({ url, appName, expiresIn }: SignInEmailContext) => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").HtmlHTMLAttributes<HTMLHtmlElement>, HTMLHtmlElement>, "ref">> & import("react").RefAttributes<HTMLHtmlElement>>;

package/dist/emails/Template.js

@@ -0,0 +1,82 @@
+import { createElement as h } from 'react';
+import { Body, Html, Link, Preview, Text } from 'react-email';
+import { Brand, CentreCard, CentreWell, colors, fontFamily, Footer, Head, OpenButton, } from './_components/index.js';
+const introStyle = {
+    fontSize: '16px',
+    lineHeight: '22px',
+    margin: '18px 0 0',
+};
+const fineStyle = {
+    color: colors.muted,
+    fontSize: '13px',
+    lineHeight: '19px',
+    margin: '0 0 12px',
+};
+const fallbackLinkStyle = {
+    color: colors.text,
+    fontSize: '13px',
+    lineHeight: '19px',
+    wordBreak: 'break-all',
+};
+const bodyStyle = {
+    backgroundColor: colors.page,
+    fontFamily,
+    margin: 0,
+    padding: 0,
+};
+/**
+ * Seconds to something a person reads. Rounds to the nearest whole unit, and
+ * refuses to invent precision — 90 minutes reads as "2 hours", which is the
+ * right kind of wrong in a sentence that only sets expectations.
+ */
+export const formatDuration = (seconds) => {
+    if (!Number.isFinite(seconds) || seconds <= 0)
+        return 'a moment';
+    // Round within a unit *before* deciding whether to promote to the next one,
+    // so 3600s is "1 hour" rather than "60 minutes".
+    const s = Math.max(1, Math.round(seconds));
+    if (s < 60)
+        return `${s} ${s === 1 ? 'second' : 'seconds'}`;
+    const minutes = Math.round(s / 60);
+    if (minutes < 60)
+        return `${minutes} ${minutes === 1 ? 'minute' : 'minutes'}`;
+    const hours = Math.round(s / 3600);
+    if (hours < 24)
+        return `${hours} ${hours === 1 ? 'hour' : 'hours'}`;
+    const days = Math.round(s / 86400);
+    return `${days} ${days === 1 ? 'day' : 'days'}`;
+};
+/** The subject line, kept next to the template that has to match it. */
+export const subject = (appName) => `Sign in to ${appName}`;
+/**
+ * The plain-text alternative. Hand-written rather than derived from the HTML:
+ * the one thing it must do is show the URL unmangled, and a converter is a
+ * strange thing to trust with that.
+ */
+export const text = ({ url, appName, expiresIn }) => [
+    `Sign in to ${appName}`,
+    '',
+    'Open this link to sign in:',
+    url,
+    '',
+    expiresIn === undefined ?
+        'The link can only be used once.'
+        : `The link expires in ${formatDuration(expiresIn)} and can only be used once.`,
+    '',
+    "If you didn't ask to sign in, you can ignore this email.",
+].join('\n');
+export const Template = ({ url, appName, expiresIn }) => h(Html, { lang: 'en' }, h(Head, {
+    title: subject(appName),
+    description: `Sign in to ${appName}, from Reuters Graphics.`,
+}), 
+// ⚠️ `useTitleTag: false`. react-email 6's `Preview` renders its own
+// `<title>` by default, which React 19 hoists into `<head>` — so the
+// obvious version of this template ships two `<title>` elements. The
+// authoritative one is {@link Head}'s.
+h(Preview, { useTitleTag: false, children: `Sign in to ${appName}` }), h(Body, { style: bodyStyle }, h(CentreCard, null, h(CentreWell, null, h(Brand, { appName }), h(Text, { style: introStyle }, 'Sign in below for newsroom tools from the global graphics team at Thomson Reuters:'), 
+// Children go in the props object, not the rest argument:
+// `createElement`'s overloads do not satisfy a required `children`
+// prop from varargs, so the rest form fails to typecheck.
+h(OpenButton, { href: url, children: `Sign in to ${appName}` }), h(Text, { style: fineStyle }, 'Or paste this link into your browser:'), h(Text, { style: fineStyle }, h(Link, { href: url, style: fallbackLinkStyle }, url)), h(Text, { style: fineStyle }, expiresIn === undefined ?
+    'The link can only be used once.'
+    : `The link expires in ${formatDuration(expiresIn)} and can only be used once.`), h(Text, { style: fineStyle }, "If you didn't ask to sign in, you can ignore this email."), h(Footer, null)))));

package/dist/emails/_components/Brand.d.ts

@@ -0,0 +1,13 @@
+/**
+ * 🚨 **Rewritten, not ported.** `rngs.io`'s `Brand.tsx` imports `$app/paths`
+ * and `$lib/utils/links` to build absolute URLs for two PNGs. Neither the
+ * aliases nor the assets exist inside a published npm package, so this is
+ * type instead of images: an eyebrow, the app's own name, and the orange rule
+ * {@link CentreCard} draws. No asset to host, nothing to break when an app's
+ * `assets` path changes, and nothing to load before the email reads.
+ */
+export declare const Brand: ({ appName }: {
+    appName: string;
+}) => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").TableHTMLAttributes<HTMLTableElement>, HTMLTableElement>, "ref">> & {
+    tdClassName?: string;
+} & import("react").RefAttributes<HTMLTableElement>>;

package/dist/emails/_components/Brand.js

@@ -0,0 +1,28 @@
+import { createElement as h } from 'react';
+import { Container, Heading, Text } from 'react-email';
+import { colors } from './tokens.js';
+const eyebrowStyle = {
+    color: colors.muted,
+    fontSize: '11px',
+    fontWeight: 700,
+    letterSpacing: '0.12em',
+    lineHeight: '14px',
+    margin: '0 0 6px',
+    textTransform: 'uppercase',
+};
+const headingStyle = {
+    color: colors.text,
+    fontSize: '30px',
+    fontWeight: 700,
+    lineHeight: 1.1,
+    margin: '0',
+};
+/**
+ * 🚨 **Rewritten, not ported.** `rngs.io`'s `Brand.tsx` imports `$app/paths`
+ * and `$lib/utils/links` to build absolute URLs for two PNGs. Neither the
+ * aliases nor the assets exist inside a published npm package, so this is
+ * type instead of images: an eyebrow, the app's own name, and the orange rule
+ * {@link CentreCard} draws. No asset to host, nothing to break when an app's
+ * `assets` path changes, and nothing to load before the email reads.
+ */
+export const Brand = ({ appName }) => h(Container, { style: { textAlign: 'left' } }, h(Text, { style: eyebrowStyle }, 'Reuters Graphics'), h(Heading, { as: 'h1', style: headingStyle }, appName));

package/dist/emails/_components/CentreCard.d.ts

@@ -0,0 +1,10 @@
+import type { ReactNode } from 'react';
+/**
+ * The dark card. Ported from `rngs.io`, plus the Reuters-orange top rule that
+ * replaces the wordmark image this package cannot ship.
+ */
+export declare const CentreCard: ({ children }: {
+    children: ReactNode;
+}) => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").TableHTMLAttributes<HTMLTableElement>, HTMLTableElement>, "ref">> & {
+    tdClassName?: string;
+} & import("react").RefAttributes<HTMLTableElement>>;

package/dist/emails/_components/CentreCard.js

@@ -0,0 +1,22 @@
+import { createElement as h } from 'react';
+import { Container, Section } from 'react-email';
+import { colors, fontFamily } from './tokens.js';
+const sectionStyle = {
+    backgroundColor: colors.page,
+};
+const containerStyle = {
+    backgroundColor: colors.card,
+    color: colors.text,
+    fontFamily,
+    margin: '20px auto',
+    padding: '32px 20px 10px',
+    borderRadius: '4px',
+    borderTop: `3px solid ${colors.reuters}`,
+    boxShadow: '0 3px 6px rgba(0,0,0,0.16), 0 3px 6px rgba(0,0,0,0.23)',
+    maxWidth: '600px',
+};
+/**
+ * The dark card. Ported from `rngs.io`, plus the Reuters-orange top rule that
+ * replaces the wordmark image this package cannot ship.
+ */
+export const CentreCard = ({ children }) => h(Section, { style: sectionStyle }, h(Container, { style: containerStyle }, children));

package/dist/emails/_components/CentreWell.d.ts

@@ -0,0 +1,7 @@
+import type { ReactNode } from 'react';
+/** The narrow measure inside the card. Ported from `rngs.io` unchanged. */
+export declare const CentreWell: ({ children }: {
+    children: ReactNode;
+}) => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").TableHTMLAttributes<HTMLTableElement>, HTMLTableElement>, "ref">> & {
+    tdClassName?: string;
+} & import("react").RefAttributes<HTMLTableElement>>;

package/dist/emails/_components/CentreWell.js

@@ -0,0 +1,9 @@
+import { createElement as h } from 'react';
+import { Container } from 'react-email';
+const style = {
+    maxWidth: '380px',
+    margin: '0 auto',
+    textAlign: 'left',
+};
+/** The narrow measure inside the card. Ported from `rngs.io` unchanged. */
+export const CentreWell = ({ children }) => h(Container, { style }, children);

package/dist/emails/_components/Footer.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Ported from `rngs.io`, with the copy generalised — the original named
+ * RNGS.io, and this ships to every app.
+ */
+export declare const Footer: () => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").TableHTMLAttributes<HTMLTableElement>, HTMLTableElement>, "ref">> & {
+    tdClassName?: string;
+} & import("react").RefAttributes<HTMLTableElement>>;

package/dist/emails/_components/Footer.js

@@ -0,0 +1,26 @@
+import { createElement as h } from 'react';
+import { Container, Hr, Link, Text } from 'react-email';
+import { colors, supportEmail } from './tokens.js';
+const containerStyle = {
+    margin: '32px auto 0',
+    textAlign: 'left',
+};
+const hrStyle = {
+    borderColor: colors.rule,
+    margin: '0 0 16px',
+};
+const textStyle = {
+    color: colors.muted,
+    fontSize: '12px',
+    lineHeight: '16px',
+    margin: '0 0 20px',
+};
+const linkStyle = {
+    color: colors.text,
+    fontWeight: 700,
+};
+/**
+ * Ported from `rngs.io`, with the copy generalised — the original named
+ * RNGS.io, and this ships to every app.
+ */
+export const Footer = () => h(Container, { style: containerStyle }, h(Hr, { style: hrStyle }), h(Text, { style: textStyle }, 'An automated message from newsroom tools built by the graphics team at Thomson Reuters. Questions to ', h(Link, { href: `mailto:${supportEmail}`, style: linkStyle }, supportEmail), '.'));

package/dist/emails/_components/Head.d.ts

@@ -0,0 +1,10 @@
+export interface HeadProps {
+    title: string;
+    description: string;
+}
+/**
+ * Ported from `rngs.io/src/lib/emails/_components/Head.tsx`, with one fix: the
+ * original wrote `background-color: '#323944'` — quotes and all — inside a
+ * `<style>` block, which is not valid CSS and so was silently dropped.
+ */
+export declare const Head: ({ title, description }: HeadProps) => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").HTMLAttributes<HTMLHeadElement>, HTMLHeadElement>, "ref">> & import("react").RefAttributes<HTMLHeadElement>>;

package/dist/emails/_components/Head.js

@@ -0,0 +1,19 @@
+import { createElement as h } from 'react';
+import { Head as ReactEmailHead } from 'react-email';
+import { colors, fontFamily } from './tokens.js';
+/**
+ * Ported from `rngs.io/src/lib/emails/_components/Head.tsx`, with one fix: the
+ * original wrote `background-color: '#323944'` — quotes and all — inside a
+ * `<style>` block, which is not valid CSS and so was silently dropped.
+ */
+export const Head = ({ title, description }) => h(ReactEmailHead, null, h('title', { key: 'title' }, title), h('meta', {
+    key: 'description',
+    name: 'description',
+    content: description,
+}), h('style', { key: 'style' }, `@import url('https://fonts.googleapis.com/css2?family=Inter+Tight:wght@400;700&display=swap');
+body {
+  background-color: ${colors.page};
+  font-family: ${fontFamily};
+  margin: 0;
+  padding: 0;
+}`));

package/dist/emails/_components/OpenButton.d.ts

@@ -0,0 +1,8 @@
+import type { ReactNode } from 'react';
+/** Ported from `rngs.io` — the one thing in the email anybody clicks. */
+export declare const OpenButton: ({ href, children, }: {
+    href: string;
+    children: ReactNode;
+}) => import("react").FunctionComponentElement<Readonly<Omit<import("react").DetailedHTMLProps<import("react").TableHTMLAttributes<HTMLTableElement>, HTMLTableElement>, "ref">> & {
+    tdClassName?: string;
+} & import("react").RefAttributes<HTMLTableElement>>;

package/dist/emails/_components/OpenButton.js

@@ -0,0 +1,21 @@
+import { createElement as h } from 'react';
+import { Button, Container } from 'react-email';
+import { colors } from './tokens.js';
+const containerStyle = {
+    margin: '24px auto',
+};
+const buttonStyle = {
+    backgroundColor: colors.buttonBg,
+    color: colors.text,
+    borderRadius: '3px',
+    border: `1px solid ${colors.buttonBorder}`,
+    fontSize: '18px',
+    fontWeight: 700,
+    textDecoration: 'none',
+    textAlign: 'center',
+    display: 'block',
+    padding: '12px 32px',
+    margin: '0 auto',
+};
+/** Ported from `rngs.io` — the one thing in the email anybody clicks. */
+export const OpenButton = ({ href, children, }) => h(Container, { style: containerStyle }, h(Button, { href, style: buttonStyle }, children));

package/dist/emails/_components/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Brand components for the sign-in email, ported from
+ * `rngs.io/src/lib/emails/_components/`.
+ *
+ * Not in the package's `exports` map, so not public API — a consumer cannot
+ * import these, and they can change without a major.
+ */
+export { Brand } from './Brand.js';
+export { CentreCard } from './CentreCard.js';
+export { CentreWell } from './CentreWell.js';
+export { Footer } from './Footer.js';
+export { Head } from './Head.js';
+export { OpenButton } from './OpenButton.js';
+export { colors, fontFamily, supportEmail } from './tokens.js';