@shipfox/client-auth 2.0.0 → 4.0.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 36 files with swc (378.5ms)
+Successfully compiled: 38 files with swc (507ms)

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # @shipfox/client-auth
 
+## 4.0.0
+
+### Minor Changes
+
+- 20e4feb: Adds provider-neutral authentication continuation primitives for reusable shells, email-code verification, and redirect context.
+
+### Patch Changes
+
+- 11b10f7: Prevents private React Query data from persisting across logout and authenticated user changes.
+- Updated dependencies [2e5b718]
+- Updated dependencies [769d919]
+- Updated dependencies [6b4a575]
+- Updated dependencies [11b10f7]
+- Updated dependencies [781a45b]
+  - @shipfox/client-ui@4.0.0
+  - @shipfox/client-shell@4.0.0
+  - @shipfox/api-auth-dto@7.1.0
+  - @shipfox/client-api@4.0.0
+
+## 3.0.1
+
+### Patch Changes
+
+- ffc7fc9: Republishes the affected release set after recovering package publication.
+- Updated dependencies [ffc7fc9]
+  - @shipfox/client-shell@3.0.1
+  - @shipfox/client-ui@3.0.1
+  - @shipfox/react-ui@0.3.5
+
+## 3.0.0
+
+### Patch Changes
+
+- Updated dependencies [cb58afe]
+- Updated dependencies [d735fe3]
+- Updated dependencies [5b06cd5]
+  - @shipfox/react-ui@0.3.4
+  - @shipfox/client-shell@3.0.0
+  - @shipfox/client-ui@3.0.0
+
 ## 2.0.0
 
 ### Major Changes

package/dist/components/auth-shell.d.ts

@@ -1,11 +1,13 @@
-import type { PropsWithChildren, ReactNode } from 'react';
-interface AuthShellProps {
+import { type HeaderProps } from '@shipfox/react-ui/typography';
+import type { PropsWithChildren, ReactNode, Ref } from 'react';
+export interface AuthShellProps {
     title: string;
     description: string;
     children: ReactNode;
     className?: string;
+    headingProps?: Omit<HeaderProps, 'children' | 'id'> | undefined;
+    headingRef?: Ref<HTMLHeadingElement> | undefined;
 }
-export declare function AuthShell({ title, description, children, className }: AuthShellProps): import("react").JSX.Element;
+export declare function AuthShell({ title, description, children, className, headingProps, headingRef, }: AuthShellProps): import("react").JSX.Element;
 export declare function AuthActions({ children }: PropsWithChildren): import("react").JSX.Element;
-export {};
 //# sourceMappingURL=auth-shell.d.ts.map

package/dist/components/auth-shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-shell.d.ts","sourceRoot":"","sources":["../../src/components/auth-shell.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,iBAAiB,EAAE,SAAS,EAAC,MAAM,OAAO,CAAC;AAExD,UAAU,cAAc;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,SAAS,CAAC,EAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAC,EAAE,cAAc,+BAqClF;AAED,wBAAgB,WAAW,CAAC,EAAC,QAAQ,EAAC,EAAE,iBAAiB,+BAExD"}
+{"version":3,"file":"auth-shell.d.ts","sourceRoot":"","sources":["../../src/components/auth-shell.tsx"],"names":[],"mappings":"AACA,OAAO,EAAS,KAAK,WAAW,EAAO,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAC,iBAAiB,EAAE,SAAS,EAAE,GAAG,EAAC,MAAM,OAAO,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IAChE,UAAU,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;CAClD;AAED,wBAAgB,SAAS,CAAC,EACxB,KAAK,EACL,WAAW,EACX,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,UAAU,GACX,EAAE,cAAc,+BA2ChB;AAED,wBAAgB,WAAW,CAAC,EAAC,QAAQ,EAAC,EAAE,iBAAiB,+BAExD"}

package/dist/components/auth-shell.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { Icon } from '@shipfox/react-ui/icon';
 import { Header, Text } from '@shipfox/react-ui/typography';
-export function AuthShell({ title, description, children, className }) {
+export function AuthShell({ title, description, children, className, headingProps, headingRef }) {
     return /*#__PURE__*/ _jsxs("main", {
         className: "relative flex min-h-screen items-center justify-center overflow-hidden bg-background-subtle-base px-24 py-32 max-[520px]:items-start max-[520px]:px-20 max-[520px]:pb-32 max-[520px]:pt-56",
         children: [
@@ -36,6 +36,11 @@ export function AuthShell({ title, description, children, className }) {
                                     /*#__PURE__*/ _jsx(Header, {
                                         id: "auth-title",
                                         variant: "h1",
+                                        tabIndex: -1,
+                                        ...headingProps,
+                                        ...headingRef ? {
+                                            ref: headingRef
+                                        } : {},
                                         children: title
                                     }),
                                     /*#__PURE__*/ _jsx(Text, {

package/dist/components/auth-shell.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/auth-shell.tsx"],"sourcesContent":["import {Icon} from '@shipfox/react-ui/icon';\nimport {Header, Text} from '@shipfox/react-ui/typography';\nimport type {PropsWithChildren, ReactNode} from 'react';\n\ninterface AuthShellProps {\n  title: string;\n  description: string;\n  children: ReactNode;\n  className?: string;\n}\n\nexport function AuthShell({title, description, children, className}: AuthShellProps) {\n  return (\n    <main className=\"relative flex min-h-screen items-center justify-center overflow-hidden bg-background-subtle-base px-24 py-32 max-[520px]:items-start max-[520px]:px-20 max-[520px]:pb-32 max-[520px]:pt-56\">\n      <div\n        className=\"pointer-events-none absolute left-1/2 top-0 h-[380px] w-full max-w-[880px] -translate-x-1/2 -translate-y-[120px] opacity-55 max-[520px]:-translate-y-[170px] max-[520px]:opacity-35\"\n        aria-hidden=\"true\"\n        style={{\n          maskImage:\n            'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',\n          WebkitMaskImage:\n            'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',\n        }}\n      >\n        <div className=\"h-full w-full bg-[radial-gradient(circle,rgba(230,62,0,0.48)_1.6px,transparent_1.8px)] bg-[length:44px_44px]\" />\n      </div>\n\n      <section\n        className={className ?? 'relative flex w-full max-w-[384px] flex-col items-stretch gap-28'}\n        aria-labelledby=\"auth-title\"\n      >\n        <div className=\"flex flex-col items-center gap-16\">\n          <div className=\"flex size-64 items-center justify-center rounded-12 border border-border-neutral-base bg-background-neutral-base p-10 shadow-button-neutral\">\n            <Icon name=\"shipfox\" className=\"size-42 text-background-highlight-interactive\" />\n          </div>\n          <div className=\"flex min-w-[128px] flex-col items-center gap-4 text-center\">\n            <Header id=\"auth-title\" variant=\"h1\">\n              {title}\n            </Header>\n            <Text size=\"sm\" className=\"text-foreground-neutral-subtle\">\n              {description}\n            </Text>\n          </div>\n        </div>\n        {children}\n      </section>\n    </main>\n  );\n}\n\nexport function AuthActions({children}: PropsWithChildren) {\n  return <div className=\"flex flex-col gap-20\">{children}</div>;\n}\n"],"names":["Icon","Header","Text","AuthShell","title","description","children","className","main","div","aria-hidden","style","maskImage","WebkitMaskImage","section","aria-labelledby","name","id","variant","size","AuthActions"],"mappings":";AAAA,SAAQA,IAAI,QAAO,yBAAyB;AAC5C,SAAQC,MAAM,EAAEC,IAAI,QAAO,+BAA+B;AAU1D,OAAO,SAASC,UAAU,EAACC,KAAK,EAAEC,WAAW,EAAEC,QAAQ,EAAEC,SAAS,EAAiB;IACjF,qBACE,MAACC;QAAKD,WAAU;;0BACd,KAACE;gBACCF,WAAU;gBACVG,eAAY;gBACZC,OAAO;oBACLC,WACE;oBACFC,iBACE;gBACJ;0BAEA,cAAA,KAACJ;oBAAIF,WAAU;;;0BAGjB,MAACO;gBACCP,WAAWA,aAAa;gBACxBQ,mBAAgB;;kCAEhB,MAACN;wBAAIF,WAAU;;0CACb,KAACE;gCAAIF,WAAU;0CACb,cAAA,KAACP;oCAAKgB,MAAK;oCAAUT,WAAU;;;0CAEjC,MAACE;gCAAIF,WAAU;;kDACb,KAACN;wCAAOgB,IAAG;wCAAaC,SAAQ;kDAC7Bd;;kDAEH,KAACF;wCAAKiB,MAAK;wCAAKZ,WAAU;kDACvBF;;;;;;oBAINC;;;;;AAIT;AAEA,OAAO,SAASc,YAAY,EAACd,QAAQ,EAAoB;IACvD,qBAAO,KAACG;QAAIF,WAAU;kBAAwBD;;AAChD"}
+{"version":3,"sources":["../../src/components/auth-shell.tsx"],"sourcesContent":["import {Icon} from '@shipfox/react-ui/icon';\nimport {Header, type HeaderProps, Text} from '@shipfox/react-ui/typography';\nimport type {PropsWithChildren, ReactNode, Ref} from 'react';\n\nexport interface AuthShellProps {\n  title: string;\n  description: string;\n  children: ReactNode;\n  className?: string;\n  headingProps?: Omit<HeaderProps, 'children' | 'id'> | undefined;\n  headingRef?: Ref<HTMLHeadingElement> | undefined;\n}\n\nexport function AuthShell({\n  title,\n  description,\n  children,\n  className,\n  headingProps,\n  headingRef,\n}: AuthShellProps) {\n  return (\n    <main className=\"relative flex min-h-screen items-center justify-center overflow-hidden bg-background-subtle-base px-24 py-32 max-[520px]:items-start max-[520px]:px-20 max-[520px]:pb-32 max-[520px]:pt-56\">\n      <div\n        className=\"pointer-events-none absolute left-1/2 top-0 h-[380px] w-full max-w-[880px] -translate-x-1/2 -translate-y-[120px] opacity-55 max-[520px]:-translate-y-[170px] max-[520px]:opacity-35\"\n        aria-hidden=\"true\"\n        style={{\n          maskImage:\n            'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',\n          WebkitMaskImage:\n            'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',\n        }}\n      >\n        <div className=\"h-full w-full bg-[radial-gradient(circle,rgba(230,62,0,0.48)_1.6px,transparent_1.8px)] bg-[length:44px_44px]\" />\n      </div>\n\n      <section\n        className={className ?? 'relative flex w-full max-w-[384px] flex-col items-stretch gap-28'}\n        aria-labelledby=\"auth-title\"\n      >\n        <div className=\"flex flex-col items-center gap-16\">\n          <div className=\"flex size-64 items-center justify-center rounded-12 border border-border-neutral-base bg-background-neutral-base p-10 shadow-button-neutral\">\n            <Icon name=\"shipfox\" className=\"size-42 text-background-highlight-interactive\" />\n          </div>\n          <div className=\"flex min-w-[128px] flex-col items-center gap-4 text-center\">\n            <Header\n              id=\"auth-title\"\n              variant=\"h1\"\n              tabIndex={-1}\n              {...headingProps}\n              {...(headingRef ? ({ref: headingRef} as HeaderProps) : {})}\n            >\n              {title}\n            </Header>\n            <Text size=\"sm\" className=\"text-foreground-neutral-subtle\">\n              {description}\n            </Text>\n          </div>\n        </div>\n        {children}\n      </section>\n    </main>\n  );\n}\n\nexport function AuthActions({children}: PropsWithChildren) {\n  return <div className=\"flex flex-col gap-20\">{children}</div>;\n}\n"],"names":["Icon","Header","Text","AuthShell","title","description","children","className","headingProps","headingRef","main","div","aria-hidden","style","maskImage","WebkitMaskImage","section","aria-labelledby","name","id","variant","tabIndex","ref","size","AuthActions"],"mappings":";AAAA,SAAQA,IAAI,QAAO,yBAAyB;AAC5C,SAAQC,MAAM,EAAoBC,IAAI,QAAO,+BAA+B;AAY5E,OAAO,SAASC,UAAU,EACxBC,KAAK,EACLC,WAAW,EACXC,QAAQ,EACRC,SAAS,EACTC,YAAY,EACZC,UAAU,EACK;IACf,qBACE,MAACC;QAAKH,WAAU;;0BACd,KAACI;gBACCJ,WAAU;gBACVK,eAAY;gBACZC,OAAO;oBACLC,WACE;oBACFC,iBACE;gBACJ;0BAEA,cAAA,KAACJ;oBAAIJ,WAAU;;;0BAGjB,MAACS;gBACCT,WAAWA,aAAa;gBACxBU,mBAAgB;;kCAEhB,MAACN;wBAAIJ,WAAU;;0CACb,KAACI;gCAAIJ,WAAU;0CACb,cAAA,KAACP;oCAAKkB,MAAK;oCAAUX,WAAU;;;0CAEjC,MAACI;gCAAIJ,WAAU;;kDACb,KAACN;wCACCkB,IAAG;wCACHC,SAAQ;wCACRC,UAAU,CAAC;wCACV,GAAGb,YAAY;wCACf,GAAIC,aAAc;4CAACa,KAAKb;wCAAU,IAAoB,CAAC,CAAC;kDAExDL;;kDAEH,KAACF;wCAAKqB,MAAK;wCAAKhB,WAAU;kDACvBF;;;;;;oBAINC;;;;;AAIT;AAEA,OAAO,SAASkB,YAAY,EAAClB,QAAQ,EAAoB;IACvD,qBAAO,KAACK;QAAIJ,WAAU;kBAAwBD;;AAChD"}

package/dist/components/email-code-verification.d.ts

@@ -0,0 +1,20 @@
+import type { HeaderProps } from '@shipfox/react-ui/typography';
+import type { ReactNode, Ref } from 'react';
+export interface EmailCodeVerificationProps {
+    destination: string;
+    expiresAt?: string | undefined;
+    nextResendAvailableAt?: string | undefined;
+    isResending?: boolean;
+    isVerifying?: boolean;
+    error?: string | undefined;
+    title?: string;
+    description?: string;
+    children?: ReactNode;
+    headingProps?: Omit<HeaderProps, 'children' | 'id'> | undefined;
+    headingRef?: Ref<HTMLHeadingElement> | undefined;
+    onResend: () => void | Promise<void>;
+    onUseAnotherEmail: () => void;
+    onVerify: (code: string) => void | Promise<void>;
+}
+export declare function EmailCodeVerification({ destination, expiresAt, nextResendAvailableAt, isResending, isVerifying, error, title, description, children, headingProps, headingRef, onResend, onUseAnotherEmail, onVerify, }: EmailCodeVerificationProps): import("react").JSX.Element;
+//# sourceMappingURL=email-code-verification.d.ts.map

package/dist/components/email-code-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-code-verification.d.ts","sourceRoot":"","sources":["../../src/components/email-code-verification.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAY,SAAS,EAAE,GAAG,EAAC,MAAM,OAAO,CAAC;AAMrD,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,YAAY,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IAChE,UAAU,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;IACjD,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAQD,wBAAgB,qBAAqB,CAAC,EACpC,WAAW,EACX,SAAS,EACT,qBAAqB,EACrB,WAAmB,EACnB,WAAmB,EACnB,KAAK,EACL,KAA0B,EAC1B,WAA2E,EAC3E,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,QAAQ,GACT,EAAE,0BAA0B,+BAgI5B"}

package/dist/components/email-code-verification.js

@@ -0,0 +1,136 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button } from '@shipfox/react-ui/button';
+import { Callout } from '@shipfox/react-ui/callout';
+import { FormField, FormFieldInput } from '@shipfox/react-ui/form-field';
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { AuthShell } from './auth-shell.js';
+const EIGHT_DIGIT_CODE_RE = /^\d{8}$/u;
+function timestamp(value) {
+    if (!value) return undefined;
+    const parsed = Date.parse(value);
+    return Number.isNaN(parsed) ? undefined : parsed;
+}
+export function EmailCodeVerification({ destination, expiresAt, nextResendAvailableAt, isResending = false, isVerifying = false, error, title = 'Check your email', description = `We sent an eight-digit verification code to ${destination}.`, children, headingProps, headingRef, onResend, onUseAnotherEmail, onVerify }) {
+    const [code, setCode] = useState('');
+    const [now, setNow] = useState(()=>Date.now());
+    const [codeError, setCodeError] = useState();
+    const localHeadingRef = useRef(null);
+    const resendAvailableAt = timestamp(nextResendAvailableAt);
+    const expiration = timestamp(expiresAt);
+    const resendRemainingSeconds = resendAvailableAt ? Math.max(0, Math.ceil((resendAvailableAt - now) / 1_000)) : 0;
+    const isResendCoolingDown = resendRemainingSeconds > 0;
+    const isExpired = expiration !== undefined && expiration <= now;
+    const isPending = isResending || isVerifying;
+    useEffect(()=>{
+        const isPending = (tickNow)=>resendAvailableAt !== undefined && resendAvailableAt > tickNow || expiration !== undefined && expiration > tickNow;
+        const tickNow = Date.now();
+        setNow(tickNow);
+        if (!isPending(tickNow)) return;
+        const interval = window.setInterval(()=>{
+            const nextTick = Date.now();
+            setNow(nextTick);
+            if (!isPending(nextTick)) {
+                window.clearInterval(interval);
+            }
+        }, 1_000);
+        return ()=>window.clearInterval(interval);
+    }, [
+        expiration,
+        resendAvailableAt
+    ]);
+    useEffect(()=>{
+        localHeadingRef.current?.focus();
+    }, []);
+    const setHeadingRef = useCallback((heading)=>{
+        localHeadingRef.current = heading;
+        if (typeof headingRef === 'function') {
+            headingRef(heading);
+        } else if (headingRef) {
+            headingRef.current = heading;
+        }
+    }, [
+        headingRef
+    ]);
+    function submit(event) {
+        event.preventDefault();
+        if (isExpired || isVerifying) return;
+        if (!validateCode()) return;
+        void onVerify(code);
+    }
+    function validateCode() {
+        const error = EIGHT_DIGIT_CODE_RE.test(code) ? undefined : 'Enter the eight-digit verification code.';
+        setCodeError(error);
+        return error === undefined;
+    }
+    return /*#__PURE__*/ _jsxs(AuthShell, {
+        title: title,
+        description: description,
+        headingProps: headingProps,
+        headingRef: setHeadingRef,
+        children: [
+            error ? /*#__PURE__*/ _jsx(Callout, {
+                role: "alert",
+                type: "error",
+                children: error
+            }) : null,
+            isExpired ? /*#__PURE__*/ _jsx(Callout, {
+                role: "alert",
+                type: "error",
+                children: "This verification code has expired. Use another email to try again."
+            }) : null,
+            /*#__PURE__*/ _jsxs("form", {
+                className: "flex flex-col gap-8",
+                noValidate: true,
+                onSubmit: submit,
+                children: [
+                    /*#__PURE__*/ _jsx(FormField, {
+                        label: "Verification code",
+                        id: "verification-code",
+                        error: codeError,
+                        children: /*#__PURE__*/ _jsx(FormFieldInput, {
+                            autoComplete: "one-time-code",
+                            inputMode: "numeric",
+                            maxLength: 8,
+                            pattern: "[0-9]{8}",
+                            value: code,
+                            onChange: (event)=>{
+                                setCode(event.target.value.replace(/\D/gu, '').slice(0, 8));
+                                setCodeError(undefined);
+                            },
+                            onBlur: validateCode
+                        })
+                    }),
+                    /*#__PURE__*/ _jsx(Button, {
+                        className: "w-full",
+                        type: "submit",
+                        disabled: isExpired,
+                        isLoading: isVerifying,
+                        children: "Verify email"
+                    }),
+                    /*#__PURE__*/ _jsx(Button, {
+                        "aria-disabled": isResendCoolingDown ? true : undefined,
+                        className: "w-full aria-disabled:cursor-not-allowed aria-disabled:opacity-70",
+                        variant: "secondary",
+                        type: "button",
+                        isLoading: isResending,
+                        onClick: ()=>{
+                            if (!isResendCoolingDown && !isResending) void onResend();
+                        },
+                        children: isResending ? 'Sending email...' : isResendCoolingDown ? `Resend in ${resendRemainingSeconds}s` : 'Resend verification email'
+                    })
+                ]
+            }),
+            /*#__PURE__*/ _jsx(Button, {
+                className: "w-full",
+                variant: "transparent",
+                type: "button",
+                disabled: isPending,
+                onClick: onUseAnotherEmail,
+                children: "Use another email"
+            }),
+            children
+        ]
+    });
+}
+
+//# sourceMappingURL=email-code-verification.js.map

package/dist/components/email-code-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/components/email-code-verification.tsx"],"sourcesContent":["import {Button} from '@shipfox/react-ui/button';\nimport {Callout} from '@shipfox/react-ui/callout';\nimport {FormField, FormFieldInput} from '@shipfox/react-ui/form-field';\nimport type {HeaderProps} from '@shipfox/react-ui/typography';\nimport type {FormEvent, ReactNode, Ref} from 'react';\nimport {useCallback, useEffect, useRef, useState} from 'react';\nimport {AuthShell} from './auth-shell.js';\n\nconst EIGHT_DIGIT_CODE_RE = /^\\d{8}$/u;\n\nexport interface EmailCodeVerificationProps {\n  destination: string;\n  expiresAt?: string | undefined;\n  nextResendAvailableAt?: string | undefined;\n  isResending?: boolean;\n  isVerifying?: boolean;\n  error?: string | undefined;\n  title?: string;\n  description?: string;\n  children?: ReactNode;\n  headingProps?: Omit<HeaderProps, 'children' | 'id'> | undefined;\n  headingRef?: Ref<HTMLHeadingElement> | undefined;\n  onResend: () => void | Promise<void>;\n  onUseAnotherEmail: () => void;\n  onVerify: (code: string) => void | Promise<void>;\n}\n\nfunction timestamp(value: string | undefined): number | undefined {\n  if (!value) return undefined;\n  const parsed = Date.parse(value);\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n\nexport function EmailCodeVerification({\n  destination,\n  expiresAt,\n  nextResendAvailableAt,\n  isResending = false,\n  isVerifying = false,\n  error,\n  title = 'Check your email',\n  description = `We sent an eight-digit verification code to ${destination}.`,\n  children,\n  headingProps,\n  headingRef,\n  onResend,\n  onUseAnotherEmail,\n  onVerify,\n}: EmailCodeVerificationProps) {\n  const [code, setCode] = useState('');\n  const [now, setNow] = useState(() => Date.now());\n  const [codeError, setCodeError] = useState<string>();\n  const localHeadingRef = useRef<HTMLHeadingElement>(null);\n  const resendAvailableAt = timestamp(nextResendAvailableAt);\n  const expiration = timestamp(expiresAt);\n  const resendRemainingSeconds = resendAvailableAt\n    ? Math.max(0, Math.ceil((resendAvailableAt - now) / 1_000))\n    : 0;\n  const isResendCoolingDown = resendRemainingSeconds > 0;\n  const isExpired = expiration !== undefined && expiration <= now;\n  const isPending = isResending || isVerifying;\n\n  useEffect(() => {\n    const isPending = (tickNow: number) =>\n      (resendAvailableAt !== undefined && resendAvailableAt > tickNow) ||\n      (expiration !== undefined && expiration > tickNow);\n\n    const tickNow = Date.now();\n    setNow(tickNow);\n    if (!isPending(tickNow)) return;\n\n    const interval = window.setInterval(() => {\n      const nextTick = Date.now();\n      setNow(nextTick);\n      if (!isPending(nextTick)) {\n        window.clearInterval(interval);\n      }\n    }, 1_000);\n    return () => window.clearInterval(interval);\n  }, [expiration, resendAvailableAt]);\n\n  useEffect(() => {\n    localHeadingRef.current?.focus();\n  }, []);\n\n  const setHeadingRef = useCallback(\n    (heading: HTMLHeadingElement | null) => {\n      localHeadingRef.current = heading;\n      if (typeof headingRef === 'function') {\n        headingRef(heading);\n      } else if (headingRef) {\n        headingRef.current = heading;\n      }\n    },\n    [headingRef],\n  );\n\n  function submit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault();\n    if (isExpired || isVerifying) return;\n    if (!validateCode()) return;\n    void onVerify(code);\n  }\n\n  function validateCode() {\n    const error = EIGHT_DIGIT_CODE_RE.test(code)\n      ? undefined\n      : 'Enter the eight-digit verification code.';\n    setCodeError(error);\n    return error === undefined;\n  }\n\n  return (\n    <AuthShell\n      title={title}\n      description={description}\n      headingProps={headingProps}\n      headingRef={setHeadingRef}\n    >\n      {error ? (\n        <Callout role=\"alert\" type=\"error\">\n          {error}\n        </Callout>\n      ) : null}\n      {isExpired ? (\n        <Callout role=\"alert\" type=\"error\">\n          This verification code has expired. Use another email to try again.\n        </Callout>\n      ) : null}\n      <form className=\"flex flex-col gap-8\" noValidate onSubmit={submit}>\n        <FormField label=\"Verification code\" id=\"verification-code\" error={codeError}>\n          <FormFieldInput\n            autoComplete=\"one-time-code\"\n            inputMode=\"numeric\"\n            maxLength={8}\n            pattern=\"[0-9]{8}\"\n            value={code}\n            onChange={(event) => {\n              setCode(event.target.value.replace(/\\D/gu, '').slice(0, 8));\n              setCodeError(undefined);\n            }}\n            onBlur={validateCode}\n          />\n        </FormField>\n        <Button className=\"w-full\" type=\"submit\" disabled={isExpired} isLoading={isVerifying}>\n          Verify email\n        </Button>\n        <Button\n          aria-disabled={isResendCoolingDown ? true : undefined}\n          className=\"w-full aria-disabled:cursor-not-allowed aria-disabled:opacity-70\"\n          variant=\"secondary\"\n          type=\"button\"\n          isLoading={isResending}\n          onClick={() => {\n            if (!isResendCoolingDown && !isResending) void onResend();\n          }}\n        >\n          {isResending\n            ? 'Sending email...'\n            : isResendCoolingDown\n              ? `Resend in ${resendRemainingSeconds}s`\n              : 'Resend verification email'}\n        </Button>\n      </form>\n      <Button\n        className=\"w-full\"\n        variant=\"transparent\"\n        type=\"button\"\n        disabled={isPending}\n        onClick={onUseAnotherEmail}\n      >\n        Use another email\n      </Button>\n      {children}\n    </AuthShell>\n  );\n}\n"],"names":["Button","Callout","FormField","FormFieldInput","useCallback","useEffect","useRef","useState","AuthShell","EIGHT_DIGIT_CODE_RE","timestamp","value","undefined","parsed","Date","parse","Number","isNaN","EmailCodeVerification","destination","expiresAt","nextResendAvailableAt","isResending","isVerifying","error","title","description","children","headingProps","headingRef","onResend","onUseAnotherEmail","onVerify","code","setCode","now","setNow","codeError","setCodeError","localHeadingRef","resendAvailableAt","expiration","resendRemainingSeconds","Math","max","ceil","isResendCoolingDown","isExpired","isPending","tickNow","interval","window","setInterval","nextTick","clearInterval","current","focus","setHeadingRef","heading","submit","event","preventDefault","validateCode","test","role","type","form","className","noValidate","onSubmit","label","id","autoComplete","inputMode","maxLength","pattern","onChange","target","replace","slice","onBlur","disabled","isLoading","aria-disabled","variant","onClick"],"mappings":";AAAA,SAAQA,MAAM,QAAO,2BAA2B;AAChD,SAAQC,OAAO,QAAO,4BAA4B;AAClD,SAAQC,SAAS,EAAEC,cAAc,QAAO,+BAA+B;AAGvE,SAAQC,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAO,QAAQ;AAC/D,SAAQC,SAAS,QAAO,kBAAkB;AAE1C,MAAMC,sBAAsB;AAmB5B,SAASC,UAAUC,KAAyB;IAC1C,IAAI,CAACA,OAAO,OAAOC;IACnB,MAAMC,SAASC,KAAKC,KAAK,CAACJ;IAC1B,OAAOK,OAAOC,KAAK,CAACJ,UAAUD,YAAYC;AAC5C;AAEA,OAAO,SAASK,sBAAsB,EACpCC,WAAW,EACXC,SAAS,EACTC,qBAAqB,EACrBC,cAAc,KAAK,EACnBC,cAAc,KAAK,EACnBC,KAAK,EACLC,QAAQ,kBAAkB,EAC1BC,cAAc,CAAC,4CAA4C,EAAEP,YAAY,CAAC,CAAC,EAC3EQ,QAAQ,EACRC,YAAY,EACZC,UAAU,EACVC,QAAQ,EACRC,iBAAiB,EACjBC,QAAQ,EACmB;IAC3B,MAAM,CAACC,MAAMC,QAAQ,GAAG3B,SAAS;IACjC,MAAM,CAAC4B,KAAKC,OAAO,GAAG7B,SAAS,IAAMO,KAAKqB,GAAG;IAC7C,MAAM,CAACE,WAAWC,aAAa,GAAG/B;IAClC,MAAMgC,kBAAkBjC,OAA2B;IACnD,MAAMkC,oBAAoB9B,UAAUW;IACpC,MAAMoB,aAAa/B,UAAUU;IAC7B,MAAMsB,yBAAyBF,oBAC3BG,KAAKC,GAAG,CAAC,GAAGD,KAAKE,IAAI,CAAC,AAACL,CAAAA,oBAAoBL,GAAE,IAAK,UAClD;IACJ,MAAMW,sBAAsBJ,yBAAyB;IACrD,MAAMK,YAAYN,eAAe7B,aAAa6B,cAAcN;IAC5D,MAAMa,YAAY1B,eAAeC;IAEjClB,UAAU;QACR,MAAM2C,YAAY,CAACC,UACjB,AAACT,sBAAsB5B,aAAa4B,oBAAoBS,WACvDR,eAAe7B,aAAa6B,aAAaQ;QAE5C,MAAMA,UAAUnC,KAAKqB,GAAG;QACxBC,OAAOa;QACP,IAAI,CAACD,UAAUC,UAAU;QAEzB,MAAMC,WAAWC,OAAOC,WAAW,CAAC;YAClC,MAAMC,WAAWvC,KAAKqB,GAAG;YACzBC,OAAOiB;YACP,IAAI,CAACL,UAAUK,WAAW;gBACxBF,OAAOG,aAAa,CAACJ;YACvB;QACF,GAAG;QACH,OAAO,IAAMC,OAAOG,aAAa,CAACJ;IACpC,GAAG;QAACT;QAAYD;KAAkB;IAElCnC,UAAU;QACRkC,gBAAgBgB,OAAO,EAAEC;IAC3B,GAAG,EAAE;IAEL,MAAMC,gBAAgBrD,YACpB,CAACsD;QACCnB,gBAAgBgB,OAAO,GAAGG;QAC1B,IAAI,OAAO7B,eAAe,YAAY;YACpCA,WAAW6B;QACb,OAAO,IAAI7B,YAAY;YACrBA,WAAW0B,OAAO,GAAGG;QACvB;IACF,GACA;QAAC7B;KAAW;IAGd,SAAS8B,OAAOC,KAAiC;QAC/CA,MAAMC,cAAc;QACpB,IAAId,aAAaxB,aAAa;QAC9B,IAAI,CAACuC,gBAAgB;QACrB,KAAK9B,SAASC;IAChB;IAEA,SAAS6B;QACP,MAAMtC,QAAQf,oBAAoBsD,IAAI,CAAC9B,QACnCrB,YACA;QACJ0B,aAAad;QACb,OAAOA,UAAUZ;IACnB;IAEA,qBACE,MAACJ;QACCiB,OAAOA;QACPC,aAAaA;QACbE,cAAcA;QACdC,YAAY4B;;YAEXjC,sBACC,KAACvB;gBAAQ+D,MAAK;gBAAQC,MAAK;0BACxBzC;iBAED;YACHuB,0BACC,KAAC9C;gBAAQ+D,MAAK;gBAAQC,MAAK;0BAAQ;iBAGjC;0BACJ,MAACC;gBAAKC,WAAU;gBAAsBC,UAAU;gBAACC,UAAUV;;kCACzD,KAACzD;wBAAUoE,OAAM;wBAAoBC,IAAG;wBAAoB/C,OAAOa;kCACjE,cAAA,KAAClC;4BACCqE,cAAa;4BACbC,WAAU;4BACVC,WAAW;4BACXC,SAAQ;4BACRhE,OAAOsB;4BACP2C,UAAU,CAAChB;gCACT1B,QAAQ0B,MAAMiB,MAAM,CAAClE,KAAK,CAACmE,OAAO,CAAC,QAAQ,IAAIC,KAAK,CAAC,GAAG;gCACxDzC,aAAa1B;4BACf;4BACAoE,QAAQlB;;;kCAGZ,KAAC9D;wBAAOmE,WAAU;wBAASF,MAAK;wBAASgB,UAAUlC;wBAAWmC,WAAW3D;kCAAa;;kCAGtF,KAACvB;wBACCmF,iBAAerC,sBAAsB,OAAOlC;wBAC5CuD,WAAU;wBACViB,SAAQ;wBACRnB,MAAK;wBACLiB,WAAW5D;wBACX+D,SAAS;4BACP,IAAI,CAACvC,uBAAuB,CAACxB,aAAa,KAAKQ;wBACjD;kCAECR,cACG,qBACAwB,sBACE,CAAC,UAAU,EAAEJ,uBAAuB,CAAC,CAAC,GACtC;;;;0BAGV,KAAC1C;gBACCmE,WAAU;gBACViB,SAAQ;gBACRnB,MAAK;gBACLgB,UAAUjC;gBACVqC,SAAStD;0BACV;;YAGAJ;;;AAGP"}

package/dist/components/redirect-context.d.ts

@@ -0,0 +1,11 @@
+export interface RedirectContext {
+    invitationToken?: string;
+    returnTo?: string;
+}
+/**
+ * Separates a safe post-authentication destination from an invitation token.
+ * The token never remains in `returnTo`, so callers can keep it in their
+ * short-lived invitation flow instead of forwarding it through generic redirects.
+ */
+export declare function parseRedirectContext(value: unknown): RedirectContext;
+//# sourceMappingURL=redirect-context.d.ts.map

package/dist/components/redirect-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-context.d.ts","sourceRoot":"","sources":["../../src/components/redirect-context.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAWpE"}

package/dist/components/redirect-context.js

@@ -0,0 +1,22 @@
+import { sanitizeRedirectPath } from './redirect-target.js';
+const INVITATION_ACCEPT_PATH = '/invitations/accept';
+/**
+ * Separates a safe post-authentication destination from an invitation token.
+ * The token never remains in `returnTo`, so callers can keep it in their
+ * short-lived invitation flow instead of forwarding it through generic redirects.
+ */ export function parseRedirectContext(value) {
+    const redirect = sanitizeRedirectPath(value);
+    if (!redirect) return {};
+    const decoded = decodeURIComponent(redirect);
+    const [path, queryString = ''] = decoded.split('?', 2);
+    if (path !== INVITATION_ACCEPT_PATH) return {
+        returnTo: redirect
+    };
+    const params = new URLSearchParams(queryString);
+    const invitationToken = params.get('token');
+    return invitationToken ? {
+        invitationToken
+    } : {};
+}
+
+//# sourceMappingURL=redirect-context.js.map

package/dist/components/redirect-context.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/components/redirect-context.ts"],"sourcesContent":["import {sanitizeRedirectPath} from './redirect-target.js';\n\nconst INVITATION_ACCEPT_PATH = '/invitations/accept';\n\nexport interface RedirectContext {\n  invitationToken?: string;\n  returnTo?: string;\n}\n\n/**\n * Separates a safe post-authentication destination from an invitation token.\n * The token never remains in `returnTo`, so callers can keep it in their\n * short-lived invitation flow instead of forwarding it through generic redirects.\n */\nexport function parseRedirectContext(value: unknown): RedirectContext {\n  const redirect = sanitizeRedirectPath(value);\n  if (!redirect) return {};\n\n  const decoded = decodeURIComponent(redirect);\n  const [path, queryString = ''] = decoded.split('?', 2);\n  if (path !== INVITATION_ACCEPT_PATH) return {returnTo: redirect};\n\n  const params = new URLSearchParams(queryString);\n  const invitationToken = params.get('token');\n  return invitationToken ? {invitationToken} : {};\n}\n"],"names":["sanitizeRedirectPath","INVITATION_ACCEPT_PATH","parseRedirectContext","value","redirect","decoded","decodeURIComponent","path","queryString","split","returnTo","params","URLSearchParams","invitationToken","get"],"mappings":"AAAA,SAAQA,oBAAoB,QAAO,uBAAuB;AAE1D,MAAMC,yBAAyB;AAO/B;;;;CAIC,GACD,OAAO,SAASC,qBAAqBC,KAAc;IACjD,MAAMC,WAAWJ,qBAAqBG;IACtC,IAAI,CAACC,UAAU,OAAO,CAAC;IAEvB,MAAMC,UAAUC,mBAAmBF;IACnC,MAAM,CAACG,MAAMC,cAAc,EAAE,CAAC,GAAGH,QAAQI,KAAK,CAAC,KAAK;IACpD,IAAIF,SAASN,wBAAwB,OAAO;QAACS,UAAUN;IAAQ;IAE/D,MAAMO,SAAS,IAAIC,gBAAgBJ;IACnC,MAAMK,kBAAkBF,OAAOG,GAAG,CAAC;IACnC,OAAOD,kBAAkB;QAACA;IAAe,IAAI,CAAC;AAChD"}

package/dist/components/redirect-target.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect-target.d.ts","sourceRoot":"","sources":["../../src/components/redirect-target.ts"],"names":[],"mappings":"AAKA,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAevE"}
+{"version":3,"file":"redirect-target.d.ts","sourceRoot":"","sources":["../../src/components/redirect-target.ts"],"names":[],"mappings":"AAIA,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAiBvE"}

package/dist/components/redirect-target.js

@@ -1,22 +1,23 @@
-const SEARCH_OR_HASH_RE = /[?#]/u;
-// Returns the input string only if it is a same-origin internal path safe to
-// navigate to after authentication. We decode before checking so percent-encoded
-// variants like `/%61uth/login` cannot bypass the `/auth/*` rejection.
+const REDIRECT_ORIGIN = 'https://shipfox-redirect.invalid';
+// Resolves and canonicalizes an internal path before returning it, so browser URL
+// parsing cannot turn a seemingly safe path into an external or auth route.
 export function sanitizeRedirectPath(value) {
-    if (typeof value !== 'string') return undefined;
+    if (typeof value !== 'string' || !value.startsWith('/')) return undefined;
     let decoded;
     try {
         decoded = decodeURIComponent(value);
     } catch  {
         return undefined;
     }
-    if (!decoded.startsWith('/')) return undefined;
-    if (decoded.startsWith('//')) return undefined;
-    // Strip search/hash before the /auth check so /auth?token=x and /auth#x
-    // cannot bypass the prefix match.
-    const pathOnly = decoded.split(SEARCH_OR_HASH_RE, 1)[0] ?? decoded;
-    if (pathOnly === '/auth' || pathOnly.startsWith('/auth/')) return undefined;
-    return value;
+    let target;
+    try {
+        target = new URL(decoded, REDIRECT_ORIGIN);
+    } catch  {
+        return undefined;
+    }
+    if (target.origin !== REDIRECT_ORIGIN) return undefined;
+    if (target.pathname === '/auth' || target.pathname.startsWith('/auth/')) return undefined;
+    return `${target.pathname}${target.search}${target.hash}`;
 }
 
 //# sourceMappingURL=redirect-target.js.map

package/dist/components/redirect-target.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/redirect-target.ts"],"sourcesContent":["const SEARCH_OR_HASH_RE = /[?#]/u;\n\n// Returns the input string only if it is a same-origin internal path safe to\n// navigate to after authentication. We decode before checking so percent-encoded\n// variants like `/%61uth/login` cannot bypass the `/auth/*` rejection.\nexport function sanitizeRedirectPath(value: unknown): string | undefined {\n  if (typeof value !== 'string') return undefined;\n  let decoded: string;\n  try {\n    decoded = decodeURIComponent(value);\n  } catch {\n    return undefined;\n  }\n  if (!decoded.startsWith('/')) return undefined;\n  if (decoded.startsWith('//')) return undefined;\n  // Strip search/hash before the /auth check so /auth?token=x and /auth#x\n  // cannot bypass the prefix match.\n  const pathOnly = decoded.split(SEARCH_OR_HASH_RE, 1)[0] ?? decoded;\n  if (pathOnly === '/auth' || pathOnly.startsWith('/auth/')) return undefined;\n  return value;\n}\n"],"names":["SEARCH_OR_HASH_RE","sanitizeRedirectPath","value","undefined","decoded","decodeURIComponent","startsWith","pathOnly","split"],"mappings":"AAAA,MAAMA,oBAAoB;AAE1B,6EAA6E;AAC7E,iFAAiF;AACjF,uEAAuE;AACvE,OAAO,SAASC,qBAAqBC,KAAc;IACjD,IAAI,OAAOA,UAAU,UAAU,OAAOC;IACtC,IAAIC;IACJ,IAAI;QACFA,UAAUC,mBAAmBH;IAC/B,EAAE,OAAM;QACN,OAAOC;IACT;IACA,IAAI,CAACC,QAAQE,UAAU,CAAC,MAAM,OAAOH;IACrC,IAAIC,QAAQE,UAAU,CAAC,OAAO,OAAOH;IACrC,wEAAwE;IACxE,kCAAkC;IAClC,MAAMI,WAAWH,QAAQI,KAAK,CAACR,mBAAmB,EAAE,CAAC,EAAE,IAAII;IAC3D,IAAIG,aAAa,WAAWA,SAASD,UAAU,CAAC,WAAW,OAAOH;IAClE,OAAOD;AACT"}
+{"version":3,"sources":["../../src/components/redirect-target.ts"],"sourcesContent":["const REDIRECT_ORIGIN = 'https://shipfox-redirect.invalid';\n\n// Resolves and canonicalizes an internal path before returning it, so browser URL\n// parsing cannot turn a seemingly safe path into an external or auth route.\nexport function sanitizeRedirectPath(value: unknown): string | undefined {\n  if (typeof value !== 'string' || !value.startsWith('/')) return undefined;\n  let decoded: string;\n  try {\n    decoded = decodeURIComponent(value);\n  } catch {\n    return undefined;\n  }\n  let target: URL;\n  try {\n    target = new URL(decoded, REDIRECT_ORIGIN);\n  } catch {\n    return undefined;\n  }\n  if (target.origin !== REDIRECT_ORIGIN) return undefined;\n  if (target.pathname === '/auth' || target.pathname.startsWith('/auth/')) return undefined;\n  return `${target.pathname}${target.search}${target.hash}`;\n}\n"],"names":["REDIRECT_ORIGIN","sanitizeRedirectPath","value","startsWith","undefined","decoded","decodeURIComponent","target","URL","origin","pathname","search","hash"],"mappings":"AAAA,MAAMA,kBAAkB;AAExB,kFAAkF;AAClF,4EAA4E;AAC5E,OAAO,SAASC,qBAAqBC,KAAc;IACjD,IAAI,OAAOA,UAAU,YAAY,CAACA,MAAMC,UAAU,CAAC,MAAM,OAAOC;IAChE,IAAIC;IACJ,IAAI;QACFA,UAAUC,mBAAmBJ;IAC/B,EAAE,OAAM;QACN,OAAOE;IACT;IACA,IAAIG;IACJ,IAAI;QACFA,SAAS,IAAIC,IAAIH,SAASL;IAC5B,EAAE,OAAM;QACN,OAAOI;IACT;IACA,IAAIG,OAAOE,MAAM,KAAKT,iBAAiB,OAAOI;IAC9C,IAAIG,OAAOG,QAAQ,KAAK,WAAWH,OAAOG,QAAQ,CAACP,UAAU,CAAC,WAAW,OAAOC;IAChF,OAAO,GAAGG,OAAOG,QAAQ,GAAGH,OAAOI,MAAM,GAAGJ,OAAOK,IAAI,EAAE;AAC3D"}

package/dist/continuation.d.ts

@@ -0,0 +1,4 @@
+export { AuthActions, AuthShell, type AuthShellProps } from './components/auth-shell.js';
+export { EmailCodeVerification, type EmailCodeVerificationProps, } from './components/email-code-verification.js';
+export { parseRedirectContext, type RedirectContext } from './components/redirect-context.js';
+//# sourceMappingURL=continuation.d.ts.map

package/dist/continuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuation.d.ts","sourceRoot":"","sources":["../src/continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAE,SAAS,EAAE,KAAK,cAAc,EAAC,MAAM,4BAA4B,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,GAChC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAC,oBAAoB,EAAE,KAAK,eAAe,EAAC,MAAM,kCAAkC,CAAC"}

package/dist/continuation.js

@@ -0,0 +1,5 @@
+export { AuthActions, AuthShell } from './components/auth-shell.js';
+export { EmailCodeVerification } from './components/email-code-verification.js';
+export { parseRedirectContext } from './components/redirect-context.js';
+
+//# sourceMappingURL=continuation.js.map

package/dist/continuation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/continuation.ts"],"sourcesContent":["export {AuthActions, AuthShell, type AuthShellProps} from './components/auth-shell.js';\nexport {\n  EmailCodeVerification,\n  type EmailCodeVerificationProps,\n} from './components/email-code-verification.js';\nexport {parseRedirectContext, type RedirectContext} from './components/redirect-context.js';\n"],"names":["AuthActions","AuthShell","EmailCodeVerification","parseRedirectContext"],"mappings":"AAAA,SAAQA,WAAW,EAAEC,SAAS,QAA4B,6BAA6B;AACvF,SACEC,qBAAqB,QAEhB,0CAA0C;AACjD,SAAQC,oBAAoB,QAA6B,mCAAmC"}

package/dist/hooks/api/login-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-auth.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/login-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAmB,MAAM,uBAAuB,CAAC;AAQ1E,wBAAsB,SAAS,CAAC,IAAI,EAAE,YAAY;;;;;;;;;;;GAEjD;AAED,wBAAgB,YAAY;;;;;;;;;;;;;;YA4B3B"}
+{"version":3,"file":"login-auth.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/login-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,YAAY,EAAmB,MAAM,uBAAuB,CAAC;AAK1E,wBAAsB,SAAS,CAAC,IAAI,EAAE,YAAY;;;;;;;;;;;GAEjD;AAED,wBAAgB,YAAY;;;;;;;;;;;;;;YAO3B"}

package/dist/hooks/api/login-auth.js

@@ -1,9 +1,6 @@
 import { apiRequest } from '@shipfox/client-api';
-import { useMutation, useQueryClient } from '@tanstack/react-query';
-import { useSetAtom } from 'jotai';
-import { authStateAtom, toAuthenticatedState } from '#state/auth.js';
-import { authRefreshQueryKey } from './refresh-auth.js';
-import { listUserWorkspaces, userWorkspacesQueryKey } from './workspace-auth.js';
+import { useMutation } from '@tanstack/react-query';
+import { useAuthTransition } from '#state/auth.js';
 export async function loginAuth(body) {
     return await apiRequest('/auth/login', {
         method: 'POST',
@@ -11,31 +8,10 @@ export async function loginAuth(body) {
     });
 }
 export function useLoginAuth() {
-    const queryClient = useQueryClient();
-    const setState = useSetAtom(authStateAtom);
+    const { enterAuthenticated } = useAuthTransition();
     return useMutation({
         mutationFn: loginAuth,
-        onSuccess: async (result)=>{
-            queryClient.setQueryData(authRefreshQueryKey, result);
-            // Resolve workspaces before flipping auth state to authenticated. A
-            // single atomic setState avoids the intermediate window where the user
-            // appears authenticated with zero workspaces, which sent users with
-            // workspaces straight to `/setup/workspaces/new` after form login.
-            let memberships = [];
-            try {
-                const workspaces = await queryClient.fetchQuery({
-                    queryKey: userWorkspacesQueryKey,
-                    queryFn: ()=>listUserWorkspaces(result.token),
-                    retry: false,
-                    staleTime: 0
-                });
-                memberships = workspaces.memberships;
-                queryClient.setQueryData(userWorkspacesQueryKey, workspaces);
-            } catch  {
-            // The user is authenticated even if workspace hydration fails.
-            }
-            setState(toAuthenticatedState(result, memberships));
-        }
+        onSuccess: enterAuthenticated
     });
 }
 

package/dist/hooks/api/login-auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/hooks/api/login-auth.ts"],"sourcesContent":["import type {LoginBodyDto, LoginResponseDto} from '@shipfox/api-auth-dto';\nimport {apiRequest} from '@shipfox/client-api';\nimport {useMutation, useQueryClient} from '@tanstack/react-query';\nimport {useSetAtom} from 'jotai';\nimport {authStateAtom, toAuthenticatedState} from '#state/auth.js';\nimport {authRefreshQueryKey} from './refresh-auth.js';\nimport {listUserWorkspaces, userWorkspacesQueryKey} from './workspace-auth.js';\n\nexport async function loginAuth(body: LoginBodyDto) {\n  return await apiRequest<LoginResponseDto>('/auth/login', {method: 'POST', body});\n}\n\nexport function useLoginAuth() {\n  const queryClient = useQueryClient();\n  const setState = useSetAtom(authStateAtom);\n\n  return useMutation({\n    mutationFn: loginAuth,\n    onSuccess: async (result) => {\n      queryClient.setQueryData(authRefreshQueryKey, result);\n      // Resolve workspaces before flipping auth state to authenticated. A\n      // single atomic setState avoids the intermediate window where the user\n      // appears authenticated with zero workspaces, which sent users with\n      // workspaces straight to `/setup/workspaces/new` after form login.\n      let memberships: Awaited<ReturnType<typeof listUserWorkspaces>>['memberships'] = [];\n      try {\n        const workspaces = await queryClient.fetchQuery({\n          queryKey: userWorkspacesQueryKey,\n          queryFn: () => listUserWorkspaces(result.token),\n          retry: false,\n          staleTime: 0,\n        });\n        memberships = workspaces.memberships;\n        queryClient.setQueryData(userWorkspacesQueryKey, workspaces);\n      } catch {\n        // The user is authenticated even if workspace hydration fails.\n      }\n      setState(toAuthenticatedState(result, memberships));\n    },\n  });\n}\n"],"names":["apiRequest","useMutation","useQueryClient","useSetAtom","authStateAtom","toAuthenticatedState","authRefreshQueryKey","listUserWorkspaces","userWorkspacesQueryKey","loginAuth","body","method","useLoginAuth","queryClient","setState","mutationFn","onSuccess","result","setQueryData","memberships","workspaces","fetchQuery","queryKey","queryFn","token","retry","staleTime"],"mappings":"AACA,SAAQA,UAAU,QAAO,sBAAsB;AAC/C,SAAQC,WAAW,EAAEC,cAAc,QAAO,wBAAwB;AAClE,SAAQC,UAAU,QAAO,QAAQ;AACjC,SAAQC,aAAa,EAAEC,oBAAoB,QAAO,iBAAiB;AACnE,SAAQC,mBAAmB,QAAO,oBAAoB;AACtD,SAAQC,kBAAkB,EAAEC,sBAAsB,QAAO,sBAAsB;AAE/E,OAAO,eAAeC,UAAUC,IAAkB;IAChD,OAAO,MAAMV,WAA6B,eAAe;QAACW,QAAQ;QAAQD;IAAI;AAChF;AAEA,OAAO,SAASE;IACd,MAAMC,cAAcX;IACpB,MAAMY,WAAWX,WAAWC;IAE5B,OAAOH,YAAY;QACjBc,YAAYN;QACZO,WAAW,OAAOC;YAChBJ,YAAYK,YAAY,CAACZ,qBAAqBW;YAC9C,oEAAoE;YACpE,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,IAAIE,cAA6E,EAAE;YACnF,IAAI;gBACF,MAAMC,aAAa,MAAMP,YAAYQ,UAAU,CAAC;oBAC9CC,UAAUd;oBACVe,SAAS,IAAMhB,mBAAmBU,OAAOO,KAAK;oBAC9CC,OAAO;oBACPC,WAAW;gBACb;gBACAP,cAAcC,WAAWD,WAAW;gBACpCN,YAAYK,YAAY,CAACV,wBAAwBY;YACnD,EAAE,OAAM;YACN,+DAA+D;YACjE;YACAN,SAAST,qBAAqBY,QAAQE;QACxC;IACF;AACF"}
+{"version":3,"sources":["../../../src/hooks/api/login-auth.ts"],"sourcesContent":["import type {LoginBodyDto, LoginResponseDto} from '@shipfox/api-auth-dto';\nimport {apiRequest} from '@shipfox/client-api';\nimport {useMutation} from '@tanstack/react-query';\nimport {useAuthTransition} from '#state/auth.js';\n\nexport async function loginAuth(body: LoginBodyDto) {\n  return await apiRequest<LoginResponseDto>('/auth/login', {method: 'POST', body});\n}\n\nexport function useLoginAuth() {\n  const {enterAuthenticated} = useAuthTransition();\n\n  return useMutation({\n    mutationFn: loginAuth,\n    onSuccess: enterAuthenticated,\n  });\n}\n"],"names":["apiRequest","useMutation","useAuthTransition","loginAuth","body","method","useLoginAuth","enterAuthenticated","mutationFn","onSuccess"],"mappings":"AACA,SAAQA,UAAU,QAAO,sBAAsB;AAC/C,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,iBAAiB,QAAO,iBAAiB;AAEjD,OAAO,eAAeC,UAAUC,IAAkB;IAChD,OAAO,MAAMJ,WAA6B,eAAe;QAACK,QAAQ;QAAQD;IAAI;AAChF;AAEA,OAAO,SAASE;IACd,MAAM,EAACC,kBAAkB,EAAC,GAAGL;IAE7B,OAAOD,YAAY;QACjBO,YAAYL;QACZM,WAAWF;IACb;AACF"}

package/dist/hooks/api/logout-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout-auth.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/logout-auth.ts"],"names":[],"mappings":"AAcA,wBAAgB,aAAa,kFAW5B"}
+{"version":3,"file":"logout-auth.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/logout-auth.ts"],"names":[],"mappings":"AAYA,wBAAgB,aAAa,kFAO5B"}

package/dist/hooks/api/logout-auth.js

@@ -1,8 +1,6 @@
 import { apiRequest } from '@shipfox/client-api';
-import { useMutation, useQueryClient } from '@tanstack/react-query';
-import { useSetAtom } from 'jotai';
-import { authStateAtom } from '#state/auth.js';
-import { authRefreshQueryKey } from './refresh-auth.js';
+import { useMutation } from '@tanstack/react-query';
+import { useAuthTransition } from '#state/auth.js';
 async function logoutAuth() {
     try {
         await apiRequest('/auth/logout', {
@@ -14,18 +12,10 @@ async function logoutAuth() {
     }
 }
 export function useLogoutAuth() {
-    const queryClient = useQueryClient();
-    const setState = useSetAtom(authStateAtom);
+    const { enterGuest } = useAuthTransition();
     return useMutation({
         mutationFn: logoutAuth,
-        onSettled: ()=>{
-            setState({
-                status: 'guest'
-            });
-            queryClient.removeQueries({
-                queryKey: authRefreshQueryKey
-            });
-        }
+        onSettled: enterGuest
     });
 }
 

package/dist/hooks/api/logout-auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/hooks/api/logout-auth.ts"],"sourcesContent":["import {apiRequest} from '@shipfox/client-api';\nimport {useMutation, useQueryClient} from '@tanstack/react-query';\nimport {useSetAtom} from 'jotai';\nimport {authStateAtom} from '#state/auth.js';\nimport {authRefreshQueryKey} from './refresh-auth.js';\n\nasync function logoutAuth() {\n  try {\n    await apiRequest<void>('/auth/logout', {method: 'POST', body: {}});\n  } catch {\n    // Logout is best-effort: local session state must clear even if the API is offline.\n  }\n}\n\nexport function useLogoutAuth() {\n  const queryClient = useQueryClient();\n  const setState = useSetAtom(authStateAtom);\n\n  return useMutation({\n    mutationFn: logoutAuth,\n    onSettled: () => {\n      setState({status: 'guest'});\n      queryClient.removeQueries({queryKey: authRefreshQueryKey});\n    },\n  });\n}\n"],"names":["apiRequest","useMutation","useQueryClient","useSetAtom","authStateAtom","authRefreshQueryKey","logoutAuth","method","body","useLogoutAuth","queryClient","setState","mutationFn","onSettled","status","removeQueries","queryKey"],"mappings":"AAAA,SAAQA,UAAU,QAAO,sBAAsB;AAC/C,SAAQC,WAAW,EAAEC,cAAc,QAAO,wBAAwB;AAClE,SAAQC,UAAU,QAAO,QAAQ;AACjC,SAAQC,aAAa,QAAO,iBAAiB;AAC7C,SAAQC,mBAAmB,QAAO,oBAAoB;AAEtD,eAAeC;IACb,IAAI;QACF,MAAMN,WAAiB,gBAAgB;YAACO,QAAQ;YAAQC,MAAM,CAAC;QAAC;IAClE,EAAE,OAAM;IACN,oFAAoF;IACtF;AACF;AAEA,OAAO,SAASC;IACd,MAAMC,cAAcR;IACpB,MAAMS,WAAWR,WAAWC;IAE5B,OAAOH,YAAY;QACjBW,YAAYN;QACZO,WAAW;YACTF,SAAS;gBAACG,QAAQ;YAAO;YACzBJ,YAAYK,aAAa,CAAC;gBAACC,UAAUX;YAAmB;QAC1D;IACF;AACF"}
+{"version":3,"sources":["../../../src/hooks/api/logout-auth.ts"],"sourcesContent":["import {apiRequest} from '@shipfox/client-api';\nimport {useMutation} from '@tanstack/react-query';\nimport {useAuthTransition} from '#state/auth.js';\n\nasync function logoutAuth() {\n  try {\n    await apiRequest<void>('/auth/logout', {method: 'POST', body: {}});\n  } catch {\n    // Logout is best-effort: local session state must clear even if the API is offline.\n  }\n}\n\nexport function useLogoutAuth() {\n  const {enterGuest} = useAuthTransition();\n\n  return useMutation({\n    mutationFn: logoutAuth,\n    onSettled: enterGuest,\n  });\n}\n"],"names":["apiRequest","useMutation","useAuthTransition","logoutAuth","method","body","useLogoutAuth","enterGuest","mutationFn","onSettled"],"mappings":"AAAA,SAAQA,UAAU,QAAO,sBAAsB;AAC/C,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,iBAAiB,QAAO,iBAAiB;AAEjD,eAAeC;IACb,IAAI;QACF,MAAMH,WAAiB,gBAAgB;YAACI,QAAQ;YAAQC,MAAM,CAAC;QAAC;IAClE,EAAE,OAAM;IACN,oFAAoF;IACtF;AACF;AAEA,OAAO,SAASC;IACd,MAAM,EAACC,UAAU,EAAC,GAAGL;IAErB,OAAOD,YAAY;QACjBO,YAAYL;QACZM,WAAWF;IACb;AACF"}

package/dist/hooks/api/password-reset-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-reset-auth.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/password-reset-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAE3B,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAQ/B,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,2BAA2B,iBAE3E;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,2BAA2B;;;;;;;;;;;GAK3E;AAED,wBAAgB,2BAA2B;;YAE1C;AAED,wBAAgB,2BAA2B;;;;;;;;;;;;;;YAuB1C"}
+{"version":3,"file":"password-reset-auth.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/password-reset-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAE3B,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAK/B,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,2BAA2B,iBAE3E;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,2BAA2B;;;;;;;;;;;GAK3E;AAED,wBAAgB,2BAA2B;;YAE1C;AAED,wBAAgB,2BAA2B;;;;;;;;;;;;;;YAO1C"}

package/dist/hooks/api/password-reset-auth.js

@@ -1,9 +1,6 @@
 import { apiRequest } from '@shipfox/client-api';
-import { useMutation, useQueryClient } from '@tanstack/react-query';
-import { useSetAtom } from 'jotai';
-import { authStateAtom, toAuthenticatedState } from '#state/auth.js';
-import { authRefreshQueryKey } from './refresh-auth.js';
-import { listUserWorkspaces, userWorkspacesQueryKey } from './workspace-auth.js';
+import { useMutation } from '@tanstack/react-query';
+import { useAuthTransition } from '#state/auth.js';
 export async function requestPasswordReset(body) {
     await apiRequest('/auth/password-reset', {
         method: 'POST',
@@ -22,26 +19,10 @@ export function useRequestPasswordResetAuth() {
     });
 }
 export function useConfirmPasswordResetAuth() {
-    const queryClient = useQueryClient();
-    const setState = useSetAtom(authStateAtom);
+    const { enterAuthenticated } = useAuthTransition();
     return useMutation({
         mutationFn: confirmPasswordReset,
-        onSuccess: async (result)=>{
-            setState(toAuthenticatedState(result));
-            queryClient.setQueryData(authRefreshQueryKey, result);
-            try {
-                const workspaces = await queryClient.fetchQuery({
-                    queryKey: userWorkspacesQueryKey,
-                    queryFn: ()=>listUserWorkspaces(result.token),
-                    retry: false,
-                    staleTime: 0
-                });
-                setState(toAuthenticatedState(result, workspaces.memberships));
-                queryClient.setQueryData(userWorkspacesQueryKey, workspaces);
-            } catch  {
-            // The user is authenticated even if workspace hydration fails.
-            }
-        }
+        onSuccess: enterAuthenticated
     });
 }
 

package/dist/hooks/api/password-reset-auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/hooks/api/password-reset-auth.ts"],"sourcesContent":["import type {\n  PasswordResetConfirmBodyDto,\n  PasswordResetConfirmResponseDto,\n  PasswordResetRequestBodyDto,\n} from '@shipfox/api-auth-dto';\nimport {apiRequest} from '@shipfox/client-api';\nimport {useMutation, useQueryClient} from '@tanstack/react-query';\nimport {useSetAtom} from 'jotai';\nimport {authStateAtom, toAuthenticatedState} from '#state/auth.js';\nimport {authRefreshQueryKey} from './refresh-auth.js';\nimport {listUserWorkspaces, userWorkspacesQueryKey} from './workspace-auth.js';\n\nexport async function requestPasswordReset(body: PasswordResetRequestBodyDto) {\n  await apiRequest<void>('/auth/password-reset', {method: 'POST', body});\n}\n\nexport async function confirmPasswordReset(body: PasswordResetConfirmBodyDto) {\n  return await apiRequest<PasswordResetConfirmResponseDto>('/auth/password-reset/confirm', {\n    method: 'POST',\n    body,\n  });\n}\n\nexport function useRequestPasswordResetAuth() {\n  return useMutation({mutationFn: requestPasswordReset});\n}\n\nexport function useConfirmPasswordResetAuth() {\n  const queryClient = useQueryClient();\n  const setState = useSetAtom(authStateAtom);\n\n  return useMutation({\n    mutationFn: confirmPasswordReset,\n    onSuccess: async (result) => {\n      setState(toAuthenticatedState(result));\n      queryClient.setQueryData(authRefreshQueryKey, result);\n      try {\n        const workspaces = await queryClient.fetchQuery({\n          queryKey: userWorkspacesQueryKey,\n          queryFn: () => listUserWorkspaces(result.token),\n          retry: false,\n          staleTime: 0,\n        });\n        setState(toAuthenticatedState(result, workspaces.memberships));\n        queryClient.setQueryData(userWorkspacesQueryKey, workspaces);\n      } catch {\n        // The user is authenticated even if workspace hydration fails.\n      }\n    },\n  });\n}\n"],"names":["apiRequest","useMutation","useQueryClient","useSetAtom","authStateAtom","toAuthenticatedState","authRefreshQueryKey","listUserWorkspaces","userWorkspacesQueryKey","requestPasswordReset","body","method","confirmPasswordReset","useRequestPasswordResetAuth","mutationFn","useConfirmPasswordResetAuth","queryClient","setState","onSuccess","result","setQueryData","workspaces","fetchQuery","queryKey","queryFn","token","retry","staleTime","memberships"],"mappings":"AAKA,SAAQA,UAAU,QAAO,sBAAsB;AAC/C,SAAQC,WAAW,EAAEC,cAAc,QAAO,wBAAwB;AAClE,SAAQC,UAAU,QAAO,QAAQ;AACjC,SAAQC,aAAa,EAAEC,oBAAoB,QAAO,iBAAiB;AACnE,SAAQC,mBAAmB,QAAO,oBAAoB;AACtD,SAAQC,kBAAkB,EAAEC,sBAAsB,QAAO,sBAAsB;AAE/E,OAAO,eAAeC,qBAAqBC,IAAiC;IAC1E,MAAMV,WAAiB,wBAAwB;QAACW,QAAQ;QAAQD;IAAI;AACtE;AAEA,OAAO,eAAeE,qBAAqBF,IAAiC;IAC1E,OAAO,MAAMV,WAA4C,gCAAgC;QACvFW,QAAQ;QACRD;IACF;AACF;AAEA,OAAO,SAASG;IACd,OAAOZ,YAAY;QAACa,YAAYL;IAAoB;AACtD;AAEA,OAAO,SAASM;IACd,MAAMC,cAAcd;IACpB,MAAMe,WAAWd,WAAWC;IAE5B,OAAOH,YAAY;QACjBa,YAAYF;QACZM,WAAW,OAAOC;YAChBF,SAASZ,qBAAqBc;YAC9BH,YAAYI,YAAY,CAACd,qBAAqBa;YAC9C,IAAI;gBACF,MAAME,aAAa,MAAML,YAAYM,UAAU,CAAC;oBAC9CC,UAAUf;oBACVgB,SAAS,IAAMjB,mBAAmBY,OAAOM,KAAK;oBAC9CC,OAAO;oBACPC,WAAW;gBACb;gBACAV,SAASZ,qBAAqBc,QAAQE,WAAWO,WAAW;gBAC5DZ,YAAYI,YAAY,CAACZ,wBAAwBa;YACnD,EAAE,OAAM;YACN,+DAA+D;YACjE;QACF;IACF;AACF"}
+{"version":3,"sources":["../../../src/hooks/api/password-reset-auth.ts"],"sourcesContent":["import type {\n  PasswordResetConfirmBodyDto,\n  PasswordResetConfirmResponseDto,\n  PasswordResetRequestBodyDto,\n} from '@shipfox/api-auth-dto';\nimport {apiRequest} from '@shipfox/client-api';\nimport {useMutation} from '@tanstack/react-query';\nimport {useAuthTransition} from '#state/auth.js';\n\nexport async function requestPasswordReset(body: PasswordResetRequestBodyDto) {\n  await apiRequest<void>('/auth/password-reset', {method: 'POST', body});\n}\n\nexport async function confirmPasswordReset(body: PasswordResetConfirmBodyDto) {\n  return await apiRequest<PasswordResetConfirmResponseDto>('/auth/password-reset/confirm', {\n    method: 'POST',\n    body,\n  });\n}\n\nexport function useRequestPasswordResetAuth() {\n  return useMutation({mutationFn: requestPasswordReset});\n}\n\nexport function useConfirmPasswordResetAuth() {\n  const {enterAuthenticated} = useAuthTransition();\n\n  return useMutation({\n    mutationFn: confirmPasswordReset,\n    onSuccess: enterAuthenticated,\n  });\n}\n"],"names":["apiRequest","useMutation","useAuthTransition","requestPasswordReset","body","method","confirmPasswordReset","useRequestPasswordResetAuth","mutationFn","useConfirmPasswordResetAuth","enterAuthenticated","onSuccess"],"mappings":"AAKA,SAAQA,UAAU,QAAO,sBAAsB;AAC/C,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,iBAAiB,QAAO,iBAAiB;AAEjD,OAAO,eAAeC,qBAAqBC,IAAiC;IAC1E,MAAMJ,WAAiB,wBAAwB;QAACK,QAAQ;QAAQD;IAAI;AACtE;AAEA,OAAO,eAAeE,qBAAqBF,IAAiC;IAC1E,OAAO,MAAMJ,WAA4C,gCAAgC;QACvFK,QAAQ;QACRD;IACF;AACF;AAEA,OAAO,SAASG;IACd,OAAON,YAAY;QAACO,YAAYL;IAAoB;AACtD;AAEA,OAAO,SAASM;IACd,MAAM,EAACC,kBAAkB,EAAC,GAAGR;IAE7B,OAAOD,YAAY;QACjBO,YAAYF;QACZK,WAAWD;IACb;AACF"}