@techzyapp/ui-library 1.0.49 → 1.0.51

package/dist/{AuthGuard-Ck31lvBA.js.map → AuthGuard-D6_sTASu.js.map}

@@ -1 +1 @@
-{"version":3,"file":"AuthGuard-Ck31lvBA.js","sources":["../src/auth/authRedirect.ts","../src/auth/AuthGuard.tsx"],"sourcesContent":["// Return-after-sign-in: where `AuthGuard` sent a signed-out visitor away from, read back once they've\n// signed in. The target travels in the login URL (`?redirect=…`) and, for a multi-step sign-in that moves\n// between auth routes and drops the query string, in a module-level slot for this tab — written when the\n// guard turns a visitor away and when a reader finds a safe param in the URL (a reloaded or shared login\n// link). Memory only — a path can carry record ids, so it never goes to localStorage / sessionStorage.\nimport { useRouter, useRouterState } from '@tanstack/react-router'\nimport { useRef } from 'react'\nimport { DEFAULT_REDIRECT_QUERY_KEY, useRedirectQueryKey } from '../theme/ConfigProvider'\n\n/** The longest target accepted (characters) — anything longer is treated as crafted. */\nexport const AUTH_REDIRECT_MAX_LENGTH = 2048\n\n/** What the safety check needs to know about the app's sign-in pages. */\nexport interface AuthRedirectContext {\n  /** The sign-in page — the target may not be it, or a step under it (`/login/mfa`). */\n  loginPath: string\n  /** Whether a path belongs to a public auth page (under `authRouteId`) — registered by `AdminRoot`. */\n  isAuthPath?: ((pathname: string) => boolean) | null\n  /** The origin a target must stay on. Defaults to `window.location.origin`. */\n  origin?: string\n}\n\n// The tab's state. `settings` is what the guard / shell last told us (the configured param name, the\n// login path, the auth-page matcher), so `getAuthRedirect` works outside React with no arguments.\nlet remembered: string | null = null\nlet signingOut = false\nconst settings: Required<Omit<AuthRedirectContext, 'origin'>> & { queryKey: string } = {\n  queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n  loginPath: '/login',\n  isAuthPath: null,\n}\n\n/** @internal Update what the module knows about the app (called by `AuthGuard` / `AdminRoot` / the hook). */\nexport function configureAuthRedirect(next: Partial<typeof settings>) {\n  Object.assign(settings, next)\n}\n\n// the memory slot is per browser tab — on a server it would be shared between visitors, so it's off there\nconst isBrowser = () => typeof window !== 'undefined'\n\nconst currentOrigin = () =>\n  typeof window === 'undefined' ? 'http://localhost' : window.location.origin\n\nconst isUnder = (pathname: string, base: string) => {\n  const b = base.length > 1 ? base.replace(/\\/+$/, '') : base\n  return pathname === b || pathname.startsWith(`${b}/`)\n}\n\n/**\n * The target, normalized to `pathname + search + hash`, when it's safe to navigate to — else `null`.\n * Safe = a string of at most `AUTH_REDIRECT_MAX_LENGTH` characters, starting with a single `/`, that\n * resolves to the same origin (rejects `https://evil.example`, `//evil.example`, `/\\evil.example`,\n * `javascript:…`), and isn't the login path, a step under it, or a public auth page.\n */\nexport function safeAuthRedirect(\n  value: unknown,\n  { loginPath, isAuthPath, origin = currentOrigin() }: AuthRedirectContext,\n): string | null {\n  if (typeof value !== 'string' || value.length === 0 || value.length > AUTH_REDIRECT_MAX_LENGTH)\n    return null\n  if (!value.startsWith('/') || value.startsWith('//') || value.startsWith('/\\\\')) return null\n  let url: URL\n  try {\n    url = new URL(value, origin)\n  } catch {\n    return null\n  }\n  // the parser drops tabs / newlines, so `/\\t/evil.example` only shows its real origin here\n  if (url.origin !== origin) return null\n  // …and collapses `/./`, `%2e` and `\\` — `/.//evil.example` normalizes to `//evil.example`\n  if (url.pathname.startsWith('//')) return null\n  if (isUnder(url.pathname, loginPath)) return null\n  try {\n    if (isAuthPath?.(url.pathname)) return null\n  } catch {\n    // an unmatchable path isn't an auth page\n  }\n  return `${url.pathname}${url.search}${url.hash}`\n}\n\n/** The safety check with the module's current settings. */\nconst safe = (value: unknown) =>\n  safeAuthRedirect(value, { loginPath: settings.loginPath, isAuthPath: settings.isAuthPath })\n\n/** Read a param out of a raw search string (`?a=1&b=2`). */\nconst paramOf = (searchStr: string, key: string) => {\n  try {\n    return new URLSearchParams(searchStr).get(key)\n  } catch {\n    return null\n  }\n}\n\n/**\n * A safe param a reader found in the login URL becomes the tab's target (the fresher intent), so the next\n * step of a sign-in — which drops the query string — still finds it. `?redirect=/` means home: it replaces\n * an older target by forgetting it.\n */\nconst rememberFromUrl = (target: string) => {\n  if (target === '/') {\n    if (!signingOut) remembered = null\n  } else rememberAuthRedirect(target)\n}\n\n/**\n * The target for a search string — its param, else the remembered one — or `null` when there's none. With\n * `remember`, a safe param is also remembered for the tab (see `rememberFromUrl`).\n */\nconst findAuthRedirect = (searchStr: string, queryKey: string, remember: boolean) => {\n  const fromParam = safe(paramOf(searchStr, queryKey))\n  if (fromParam) {\n    if (remember) rememberFromUrl(fromParam)\n    return fromParam\n  }\n  return isBrowser() ? safe(remembered) : null\n}\n\n/**\n * @internal The target for a search string: its param, else the remembered one, else `fallback`. Reads\n * only — `authLayoutRoute` bounces an already signed-in visitor with it, and that bounce has no later\n * sign-in step to remember anything for (a target left in memory while signed in would come back on the\n * next sign-in).\n */\nexport function resolveAuthRedirect(\n  searchStr: string,\n  fallback = '/',\n  queryKey = settings.queryKey,\n) {\n  return findAuthRedirect(searchStr, queryKey, false) ?? fallback\n}\n\n/**\n * @internal Remember a target for this tab — returns it (normalized) when it's worth remembering, `null`\n * otherwise (unsafe, `/`, the login path, or an explicit Sign Out is under way).\n */\nexport function rememberAuthRedirect(target: string): string | null {\n  if (signingOut || !isBrowser()) return null\n  const value = safe(target)\n  if (!value || value === '/') return null\n  remembered = value\n  return value\n}\n\n/**\n * @internal An explicit Sign Out: forget the target and remember nothing until `endSignOut` (once the\n * navigation to the login page has settled) or the next sign-in.\n */\nexport function beginSignOut() {\n  remembered = null\n  signingOut = isBrowser()\n}\n\n/** @internal The Sign Out navigation settled — later guard redirects remember their page again. */\nexport function endSignOut() {\n  signingOut = false\n}\n\n/** @internal Signed in (the guard rendered its content): the target is spent, Sign Out is over. */\nexport function authRedirectConsumed() {\n  remembered = null\n  signingOut = false\n}\n\n/**\n * Where to go after a successful sign-in, outside React (a route `beforeLoad`, a mutation's `onSuccess`):\n * the `?redirect=` param of `window.location` if it's safe, else the target remembered in this tab, else\n * `fallback` (default `'/'`). A safe param it finds is remembered for the tab, so a later step of the\n * sign-in that drops the query string still gets it (`?redirect=/` forgets an older target instead).\n * Unsafe params are ignored and never overwrite a remembered target. The param name follows\n * `config.keys.redirectQueryKey` once the guard, the shell or `useAuthRedirect` has rendered.\n */\nexport function getAuthRedirect(fallback = '/'): string {\n  const searchStr = typeof window === 'undefined' ? '' : window.location.search\n  return findAuthRedirect(searchStr, settings.queryKey, true) ?? fallback\n}\n\n/**\n * Where to go after a successful sign-in: the `?redirect=` param of the page this component is mounted on\n * (read from the router's location) if it's safe, else the target remembered in this tab, else `fallback`\n * (default `'/'`). A safe param it finds is remembered for the tab (a reloaded or shared login link then\n * survives a multi-step sign-in; `?redirect=/` forgets an older target instead). It never spends the\n * target; that's forgotten once `AuthGuard` renders signed-in content (or `clearAuthRedirect`).\n *\n * **Stable for the component's life:** once it has found a target it keeps returning it, and it listens\n * only to the `?redirect=` of the page it was mounted on. A `<Navigate>` to the target moves the router's\n * location there (no param any more) while the login page can still be mounted — e.g. a code-split route\n * whose chunk is loading — and a value that changed then would make the `<Navigate>` navigate again, to\n * the fallback; a re-render alone would too (TanStack's `<Navigate>` navigates on new props), so location\n * changes elsewhere don't re-render it. A new safe param on its own page (arriving after mount) still wins.\n *\n * @example\n * const to = useAuthRedirect('/')\n * if (status === 'authenticated') return <Navigate to={to} replace />\n */\nexport function useAuthRedirect(fallback = '/'): string {\n  const queryKey = useRedirectQueryKey()\n  configureAuthRedirect({ queryKey })\n  const router = useRouter()\n  // the page this component was mounted on — only its own URL is listened to\n  const page = useRef<string | null>(null)\n  if (page.current === null) page.current = router.state.location.pathname\n  // the param of that page, held once the router has moved on — so the navigation to the target (or a\n  // guard redirecting away from it) doesn't re-render this component, and its `<Navigate>` fires once\n  const heard = useRef<string | null>(null)\n  const param = useRouterState({\n    select: (s) => {\n      if (s.location.pathname === page.current)\n        heard.current = paramOf(s.location.searchStr, queryKey)\n      return heard.current\n    },\n  })\n  const found = useRef<string | null>(null)\n  const fromParam = safe(param)\n  if (fromParam) {\n    // a new param: remember it for the tab (idempotent, so the StrictMode double render is harmless)\n    if (fromParam !== found.current) rememberFromUrl(fromParam)\n    found.current = fromParam\n  } else if (found.current === null) found.current = findAuthRedirect('', queryKey, false)\n  return found.current ?? fallback\n}\n\n/**\n * Forget the remembered target. `AuthGuard` already does this once it renders signed-in content, so a\n * later sign-in in the same tab doesn't reuse it — call it yourself only when you navigate elsewhere.\n */\nexport function clearAuthRedirect(): void {\n  remembered = null\n}\n\n/** @internal Test-only: back to a fresh tab. */\nexport function resetAuthRedirect() {\n  remembered = null\n  signingOut = false\n  Object.assign(settings, {\n    queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n    loginPath: '/login',\n    isAuthPath: null,\n  })\n}\n","import { Navigate, useRouter, type LinkProps } from '@tanstack/react-router'\nimport { useEffect, useMemo, useRef, type ReactNode } from 'react'\nimport { useRedirectQueryKey } from '../theme/ConfigProvider'\nimport {\n  authRedirectConsumed,\n  clearAuthRedirect,\n  configureAuthRedirect,\n  rememberAuthRedirect,\n} from './authRedirect'\n\nexport interface AuthGuardProps {\n  /** Session check — a boolean, or a function that returns one (evaluated on render). */\n  isAuthenticated: boolean | (() => boolean)\n  /** Where to send an unauthenticated visitor. Defaults to `'/login'`. */\n  redirectTo?: string\n  /** The protected content, rendered only when authenticated. */\n  children: ReactNode\n}\n\n/**\n * Component-level auth guard: renders `children` only when authenticated, otherwise redirects to\n * `redirectTo` via `<Navigate replace>` (so Back from the login page doesn't bounce off the guard).\n *\n * The redirect **remembers the page**: it adds `?redirect=<path + search + hash>` to the login URL (the\n * param name follows `config.keys.redirectQueryKey`) and keeps the same target in memory for this tab, so\n * a multi-step sign-in that drops the query string still knows it. Read it back after sign-in with\n * `useAuthRedirect` / `getAuthRedirect`. Nothing is remembered from `/`, from the login path itself, or\n * during an explicit Sign Out (`AdminRoot`'s) — and turning a visitor away from such a page forgets an\n * older remembered target, so it can't come back on the next sign-in. Once it renders signed-in content,\n * the target is forgotten.\n *\n * Requires a `@tanstack/react-router` context (it renders `<Navigate>`), so use it inside a routed\n * tree. `redirectTo` is a plain string — the library can't know the app's typed route tree, so it's\n * cast loosely to the router's `to` type.\n *\n * @example\n * <AuthGuard isAuthenticated={session.isAuthenticated} redirectTo=\"/login\">\n *   <Dashboard />\n * </AuthGuard>\n */\nexport const AuthGuard = ({ isAuthenticated, redirectTo = '/login', children }: AuthGuardProps) => {\n  const ok = typeof isAuthenticated === 'function' ? isAuthenticated() : isAuthenticated\n  const queryKey = useRedirectQueryKey()\n  const router = useRouter()\n  configureAuthRedirect({ queryKey, loginPath: redirectTo })\n  // The target is taken once, when the guard first turns the visitor away, and read without subscribing:\n  // the router moves its location to the login URL before the login page mounts, so a later render here\n  // would read that instead (and a `<Navigate>` whose props change navigates again).\n  const target = useRef<string | null | undefined>(undefined)\n  if (ok) target.current = undefined\n  else if (target.current === undefined) {\n    const { pathname, searchStr, hash } = router.state.location\n    target.current = rememberAuthRedirect(`${pathname}${searchStr}${hash ? `#${hash}` : ''}`)\n    // the turn-away is authoritative: from a page not worth remembering (`/`), an older target mustn't\n    // come back on the next sign-in\n    if (target.current === null) clearAuthRedirect()\n  }\n  const redirect = useMemo(\n    () =>\n      ok ? null : (\n        <Navigate\n          to={redirectTo as LinkProps['to']}\n          search={(target.current ? { [queryKey]: target.current } : {}) as LinkProps['search']}\n          replace\n        />\n      ),\n    [ok, redirectTo, queryKey],\n  )\n\n  // signed in: a remembered target is spent (and a Sign Out is over) — idempotent, so StrictMode is fine\n  useEffect(() => {\n    if (ok) authRedirectConsumed()\n  }, [ok])\n\n  return ok ? <>{children}</> : redirect\n}\n"],"names":["AUTH_REDIRECT_MAX_LENGTH","remembered","signingOut","settings","DEFAULT_REDIRECT_QUERY_KEY","configureAuthRedirect","next","isBrowser","currentOrigin","isUnder","pathname","base","b","safeAuthRedirect","value","loginPath","isAuthPath","origin","url","safe","paramOf","searchStr","key","rememberFromUrl","target","findAuthRedirect","queryKey","remember","fromParam","resolveAuthRedirect","fallback","rememberAuthRedirect","beginSignOut","endSignOut","authRedirectConsumed","getAuthRedirect","useAuthRedirect","useRedirectQueryKey","router","useRouter","page","useRef","heard","param","useRouterState","s","found","clearAuthRedirect","AuthGuard","isAuthenticated","redirectTo","children","ok","hash","redirect","useMemo","jsx","Navigate","useEffect","Fragment"],"mappings":";;;;AAUO,MAAMA,IAA2B;AAcxC,IAAIC,IAA4B,MAC5BC,IAAa;AACjB,MAAMC,IAAiF;AAAA,EACrF,UAAUC;AAAA,EACV,WAAW;AAAA,EACX,YAAY;AACd;AAGO,SAASC,EAAsBC,GAAgC;AACpE,SAAO,OAAOH,GAAUG,CAAI;AAC9B;AAGA,MAAMC,IAAY,MAAM,OAAO,SAAW,KAEpCC,IAAgB,MACpB,OAAO,SAAW,MAAc,qBAAqB,OAAO,SAAS,QAEjEC,IAAU,CAACC,GAAkBC,MAAiB;AAClD,QAAMC,IAAID,EAAK,SAAS,IAAIA,EAAK,QAAQ,QAAQ,EAAE,IAAIA;AACvD,SAAOD,MAAaE,KAAKF,EAAS,WAAW,GAAGE,CAAC,GAAG;AACtD;AAQO,SAASC,EACdC,GACA,EAAE,WAAAC,GAAW,YAAAC,GAAY,QAAAC,IAAST,EAAA,KACnB;AAGf,MAFI,OAAOM,KAAU,YAAYA,EAAM,WAAW,KAAKA,EAAM,SAASd,KAElE,CAACc,EAAM,WAAW,GAAG,KAAKA,EAAM,WAAW,IAAI,KAAKA,EAAM,WAAW,KAAK,EAAG,QAAO;AACxF,MAAII;AACJ,MAAI;AACF,IAAAA,IAAM,IAAI,IAAIJ,GAAOG,CAAM;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AAKA,MAHIC,EAAI,WAAWD,KAEfC,EAAI,SAAS,WAAW,IAAI,KAC5BT,EAAQS,EAAI,UAAUH,CAAS,EAAG,QAAO;AAC7C,MAAI;AACF,QAAIC,KAAA,QAAAA,EAAaE,EAAI,UAAW,QAAO;AAAA,EACzC,QAAQ;AAAA,EAER;AACA,SAAO,GAAGA,EAAI,QAAQ,GAAGA,EAAI,MAAM,GAAGA,EAAI,IAAI;AAChD;AAGA,MAAMC,IAAO,CAACL,MACZD,EAAiBC,GAAO,EAAE,WAAWX,EAAS,WAAW,YAAYA,EAAS,WAAA,CAAY,GAGtFiB,IAAU,CAACC,GAAmBC,MAAgB;AAClD,MAAI;AACF,WAAO,IAAI,gBAAgBD,CAAS,EAAE,IAAIC,CAAG;AAAA,EAC/C,QAAQ;AACN,WAAO;AAAA,EACT;AACF,GAOMC,IAAkB,CAACC,MAAmB;AAC1C,EAAIA,MAAW,MACRtB,MAAYD,IAAa,UACJuB,CAAM;AACpC,GAMMC,IAAmB,CAACJ,GAAmBK,GAAkBC,MAAsB;AACnF,QAAMC,IAAYT,EAAKC,EAAQC,GAAWK,CAAQ,CAAC;AACnD,SAAIE,KACED,OAA0BC,CAAS,GAChCA,KAEFrB,EAAA,IAAcY,EAAKlB,CAAU,IAAI;AAC1C;AAQO,SAAS4B,EACdR,GACAS,IAAW,KACXJ,IAAWvB,EAAS,UACpB;AACA,SAAOsB,EAAiBJ,GAAWK,GAAU,EAAK,KAAKI;AACzD;AAMO,SAASC,EAAqBP,GAA+B;AAClE,MAAItB,KAAc,CAACK,EAAA,EAAa,QAAO;AACvC,QAAMO,IAAQK,EAAKK,CAAM;AACzB,SAAI,CAACV,KAASA,MAAU,MAAY,QACpCb,IAAaa,GACNA;AACT;AAMO,SAASkB,IAAe;AAC7B,EAAA/B,IAAa,MACbC,IAAaK,EAAA;AACf;AAGO,SAAS0B,IAAa;AAC3B,EAAA/B,IAAa;AACf;AAGO,SAASgC,IAAuB;AACrC,EAAAjC,IAAa,MACbC,IAAa;AACf;AAUO,SAASiC,EAAgBL,IAAW,KAAa;AACtD,QAAMT,IAAY,OAAO,SAAW,MAAc,KAAK,OAAO,SAAS;AACvE,SAAOI,EAAiBJ,GAAWlB,EAAS,UAAU,EAAI,KAAK2B;AACjE;AAoBO,SAASM,EAAgBN,IAAW,KAAa;AACtD,QAAMJ,IAAWW,EAAA;AACjB,EAAAhC,EAAsB,EAAE,UAAAqB,GAAU;AAClC,QAAMY,IAASC,EAAA,GAETC,IAAOC,EAAsB,IAAI;AACvC,EAAID,EAAK,YAAY,WAAW,UAAUF,EAAO,MAAM,SAAS;AAGhE,QAAMI,IAAQD,EAAsB,IAAI,GAClCE,IAAQC,EAAe;AAAA,IAC3B,QAAQ,CAACC,OACHA,EAAE,SAAS,aAAaL,EAAK,YAC/BE,EAAM,UAAUtB,EAAQyB,EAAE,SAAS,WAAWnB,CAAQ,IACjDgB,EAAM;AAAA,EACf,CACD,GACKI,IAAQL,EAAsB,IAAI,GAClCb,IAAYT,EAAKwB,CAAK;AAC5B,SAAIf,KAEEA,MAAckB,EAAM,WAASvB,EAAgBK,CAAS,GAC1DkB,EAAM,UAAUlB,KACPkB,EAAM,YAAY,WAAY,UAAUrB,EAAiB,IAAIC,GAAU,EAAK,IAChFoB,EAAM,WAAWhB;AAC1B;AAMO,SAASiB,IAA0B;AACxC,EAAA9C,IAAa;AACf;AC3LO,MAAM+C,IAAY,CAAC,EAAE,iBAAAC,GAAiB,YAAAC,IAAa,UAAU,UAAAC,QAA+B;AACjG,QAAMC,IAAK,OAAOH,KAAoB,aAAaA,MAAoBA,GACjEvB,IAAWW,EAAA,GACXC,IAASC,EAAA;AACf,EAAAlC,EAAsB,EAAE,UAAAqB,GAAU,WAAWwB,EAAA,CAAY;AAIzD,QAAM1B,IAASiB,EAAkC,MAAS;AAC1D,MAAIW,KAAW,UAAU;AAAA,WAChB5B,EAAO,YAAY,QAAW;AACrC,UAAM,EAAE,UAAAd,GAAU,WAAAW,GAAW,MAAAgC,EAAA,IAASf,EAAO,MAAM;AACnD,IAAAd,EAAO,UAAUO,EAAqB,GAAGrB,CAAQ,GAAGW,CAAS,GAAGgC,IAAO,IAAIA,CAAI,KAAK,EAAE,EAAE,GAGpF7B,EAAO,YAAY,QAAMuB,EAAA;AAAA,EAC/B;AACA,QAAMO,IAAWC;AAAA,IACf,MACEH,IAAK,OACH,gBAAAI;AAAA,MAACC;AAAA,MAAA;AAAA,QACC,IAAIP;AAAA,QACJ,QAAS1B,EAAO,UAAU,EAAE,CAACE,CAAQ,GAAGF,EAAO,QAAA,IAAY,CAAA;AAAA,QAC3D,SAAO;AAAA,MAAA;AAAA,IAAA;AAAA,IAGb,CAAC4B,GAAIF,GAAYxB,CAAQ;AAAA,EAAA;AAI3B,SAAAgC,EAAU,MAAM;AACd,IAAIN,KAAIlB,EAAA;AAAA,EACV,GAAG,CAACkB,CAAE,CAAC,GAEAA,IAAK,gBAAAI,EAAAG,GAAA,EAAG,UAAAR,EAAA,CAAS,IAAMG;AAChC;"}
+{"version":3,"file":"AuthGuard-D6_sTASu.js","sources":["../src/auth/authRedirect.ts","../src/auth/AuthGuard.tsx"],"sourcesContent":["// Return-after-sign-in: where `AuthGuard` sent a signed-out visitor away from, read back once they've\n// signed in. The target travels in the login URL (`?redirect=…`) and, for a multi-step sign-in that moves\n// between auth routes and drops the query string, in a module-level slot for this tab — written when the\n// guard turns a visitor away and when a reader finds a safe param in the URL (a reloaded or shared login\n// link). Memory only — a path can carry record ids, so it never goes to localStorage / sessionStorage.\nimport { useRouter, useRouterState } from '@tanstack/react-router'\nimport { useRef } from 'react'\nimport { DEFAULT_REDIRECT_QUERY_KEY, useRedirectQueryKey } from '../theme/ConfigProvider'\n\n/** The longest target accepted (characters) — anything longer is treated as crafted. */\nexport const AUTH_REDIRECT_MAX_LENGTH = 2048\n\n/** What the safety check needs to know about the app's sign-in pages. */\nexport interface AuthRedirectContext {\n  /** The sign-in page — the target may not be it, or a step under it (`/login/mfa`). */\n  loginPath: string\n  /** Whether a path belongs to a public auth page (under `authRouteId`) — registered by `AdminRoot`. */\n  isAuthPath?: ((pathname: string) => boolean) | null\n  /** The origin a target must stay on. Defaults to `window.location.origin`. */\n  origin?: string\n}\n\n// The tab's state. `settings` is what the guard / shell last told us (the configured param name, the\n// login path, the auth-page matcher), so `getAuthRedirect` works outside React with no arguments.\nlet remembered: string | null = null\nlet signingOut = false\nconst settings: Required<Omit<AuthRedirectContext, 'origin'>> & { queryKey: string } = {\n  queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n  loginPath: '/login',\n  isAuthPath: null,\n}\n\n/** @internal Update what the module knows about the app (called by `AuthGuard` / `AdminRoot` / the hook). */\nexport function configureAuthRedirect(next: Partial<typeof settings>) {\n  Object.assign(settings, next)\n}\n\n// the memory slot is per browser tab — on a server it would be shared between visitors, so it's off there\nconst isBrowser = () => typeof window !== 'undefined'\n\nconst currentOrigin = () =>\n  typeof window === 'undefined' ? 'http://localhost' : window.location.origin\n\nconst isUnder = (pathname: string, base: string) => {\n  const b = base.length > 1 ? base.replace(/\\/+$/, '') : base\n  return pathname === b || pathname.startsWith(`${b}/`)\n}\n\n/**\n * The target, normalized to `pathname + search + hash`, when it's safe to navigate to — else `null`.\n * Safe = a string of at most `AUTH_REDIRECT_MAX_LENGTH` characters, starting with a single `/`, that\n * resolves to the same origin (rejects `https://evil.example`, `//evil.example`, `/\\evil.example`,\n * `javascript:…`), and isn't the login path, a step under it, or a public auth page.\n */\nexport function safeAuthRedirect(\n  value: unknown,\n  { loginPath, isAuthPath, origin = currentOrigin() }: AuthRedirectContext,\n): string | null {\n  if (typeof value !== 'string' || value.length === 0 || value.length > AUTH_REDIRECT_MAX_LENGTH)\n    return null\n  if (!value.startsWith('/') || value.startsWith('//') || value.startsWith('/\\\\')) return null\n  let url: URL\n  try {\n    url = new URL(value, origin)\n  } catch {\n    return null\n  }\n  // the parser drops tabs / newlines, so `/\\t/evil.example` only shows its real origin here\n  if (url.origin !== origin) return null\n  // …and collapses `/./`, `%2e` and `\\` — `/.//evil.example` normalizes to `//evil.example`\n  if (url.pathname.startsWith('//')) return null\n  if (isUnder(url.pathname, loginPath)) return null\n  try {\n    if (isAuthPath?.(url.pathname)) return null\n  } catch {\n    // an unmatchable path isn't an auth page\n  }\n  return `${url.pathname}${url.search}${url.hash}`\n}\n\n/** The safety check with the module's current settings. */\nconst safe = (value: unknown) =>\n  safeAuthRedirect(value, { loginPath: settings.loginPath, isAuthPath: settings.isAuthPath })\n\n/** Read a param out of a raw search string (`?a=1&b=2`). */\nconst paramOf = (searchStr: string, key: string) => {\n  try {\n    return new URLSearchParams(searchStr).get(key)\n  } catch {\n    return null\n  }\n}\n\n/**\n * A safe param a reader found in the login URL becomes the tab's target (the fresher intent), so the next\n * step of a sign-in — which drops the query string — still finds it. `?redirect=/` means home: it replaces\n * an older target by forgetting it.\n */\nconst rememberFromUrl = (target: string) => {\n  if (target === '/') {\n    if (!signingOut) remembered = null\n  } else rememberAuthRedirect(target)\n}\n\n/**\n * The target for a search string — its param, else the remembered one — or `null` when there's none. With\n * `remember`, a safe param is also remembered for the tab (see `rememberFromUrl`).\n */\nconst findAuthRedirect = (searchStr: string, queryKey: string, remember: boolean) => {\n  const fromParam = safe(paramOf(searchStr, queryKey))\n  if (fromParam) {\n    if (remember) rememberFromUrl(fromParam)\n    return fromParam\n  }\n  return isBrowser() ? safe(remembered) : null\n}\n\n/**\n * @internal The target for a search string: its param, else the remembered one, else `fallback`. Reads\n * only — `authLayoutRoute` bounces an already signed-in visitor with it, and that bounce has no later\n * sign-in step to remember anything for (a target left in memory while signed in would come back on the\n * next sign-in).\n */\nexport function resolveAuthRedirect(\n  searchStr: string,\n  fallback = '/',\n  queryKey = settings.queryKey,\n) {\n  return findAuthRedirect(searchStr, queryKey, false) ?? fallback\n}\n\n/**\n * @internal Remember a target for this tab — returns it (normalized) when it's worth remembering, `null`\n * otherwise (unsafe, `/`, the login path, or an explicit Sign Out is under way).\n */\nexport function rememberAuthRedirect(target: string): string | null {\n  if (signingOut || !isBrowser()) return null\n  const value = safe(target)\n  if (!value || value === '/') return null\n  remembered = value\n  return value\n}\n\n/**\n * @internal An explicit Sign Out: forget the target and remember nothing until `endSignOut` (once the\n * navigation to the login page has settled) or the next sign-in.\n */\nexport function beginSignOut() {\n  remembered = null\n  signingOut = isBrowser()\n}\n\n/** @internal The Sign Out navigation settled — later guard redirects remember their page again. */\nexport function endSignOut() {\n  signingOut = false\n}\n\n/** @internal Signed in (the guard rendered its content): the target is spent, Sign Out is over. */\nexport function authRedirectConsumed() {\n  remembered = null\n  signingOut = false\n}\n\n/**\n * Where to go after a successful sign-in, outside React (a route `beforeLoad`, a mutation's `onSuccess`):\n * the `?redirect=` param of `window.location` if it's safe, else the target remembered in this tab, else\n * `fallback` (default `'/'`). A safe param it finds is remembered for the tab, so a later step of the\n * sign-in that drops the query string still gets it (`?redirect=/` forgets an older target instead).\n * Unsafe params are ignored and never overwrite a remembered target. The param name follows\n * `config.keys.redirectQueryKey` once the guard, the shell or `useAuthRedirect` has rendered.\n */\nexport function getAuthRedirect(fallback = '/'): string {\n  const searchStr = typeof window === 'undefined' ? '' : window.location.search\n  return findAuthRedirect(searchStr, settings.queryKey, true) ?? fallback\n}\n\n/**\n * Where to go after a successful sign-in: the `?redirect=` param of the page this component is mounted on\n * (read from the router's location) if it's safe, else the target remembered in this tab, else `fallback`\n * (default `'/'`). A safe param it finds is remembered for the tab (a reloaded or shared login link then\n * survives a multi-step sign-in; `?redirect=/` forgets an older target instead). It never spends the\n * target; that's forgotten once `AuthGuard` renders signed-in content (or `clearAuthRedirect`).\n *\n * **Stable for the component's life:** once it has found a target it keeps returning it, and it listens\n * only to the `?redirect=` of the page it was mounted on. A `<Navigate>` to the target moves the router's\n * location there (no param any more) while the login page can still be mounted — e.g. a code-split route\n * whose chunk is loading — and a value that changed then would make the `<Navigate>` navigate again, to\n * the fallback; a re-render alone would too (TanStack's `<Navigate>` navigates on new props), so location\n * changes elsewhere don't re-render it. A new safe param on its own page (arriving after mount) still wins.\n *\n * @example\n * const to = useAuthRedirect('/')\n * if (status === 'authenticated') return <Navigate to={to} replace />\n */\nexport function useAuthRedirect(fallback = '/'): string {\n  const queryKey = useRedirectQueryKey()\n  configureAuthRedirect({ queryKey })\n  const router = useRouter()\n  // the page this component was mounted on — only its own URL is listened to\n  const page = useRef<string | null>(null)\n  if (page.current === null) page.current = router.state.location.pathname\n  // the param of that page, held once the router has moved on — so the navigation to the target (or a\n  // guard redirecting away from it) doesn't re-render this component, and its `<Navigate>` fires once\n  const heard = useRef<string | null>(null)\n  const param = useRouterState({\n    select: (s) => {\n      if (s.location.pathname === page.current)\n        heard.current = paramOf(s.location.searchStr, queryKey)\n      return heard.current\n    },\n  })\n  const found = useRef<string | null>(null)\n  const fromParam = safe(param)\n  if (fromParam) {\n    // a new param: remember it for the tab (idempotent, so the StrictMode double render is harmless)\n    if (fromParam !== found.current) rememberFromUrl(fromParam)\n    found.current = fromParam\n  } else if (found.current === null) found.current = findAuthRedirect('', queryKey, false)\n  return found.current ?? fallback\n}\n\n/**\n * Forget the remembered target. `AuthGuard` already does this once it renders signed-in content, so a\n * later sign-in in the same tab doesn't reuse it — call it yourself only when you navigate elsewhere.\n */\nexport function clearAuthRedirect(): void {\n  remembered = null\n}\n\n/** @internal Test-only: back to a fresh tab. */\nexport function resetAuthRedirect() {\n  remembered = null\n  signingOut = false\n  Object.assign(settings, {\n    queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n    loginPath: '/login',\n    isAuthPath: null,\n  })\n}\n","import { Navigate, useRouter, type LinkProps } from '@tanstack/react-router'\nimport { useEffect, useMemo, useRef, type ReactNode } from 'react'\nimport { useRedirectQueryKey } from '../theme/ConfigProvider'\nimport {\n  authRedirectConsumed,\n  clearAuthRedirect,\n  configureAuthRedirect,\n  rememberAuthRedirect,\n} from './authRedirect'\n\nexport interface AuthGuardProps {\n  /** Session check — a boolean, or a function that returns one (evaluated on render). */\n  isAuthenticated: boolean | (() => boolean)\n  /** Where to send an unauthenticated visitor. Defaults to `'/login'`. */\n  redirectTo?: string\n  /** The protected content, rendered only when authenticated. */\n  children: ReactNode\n}\n\n/**\n * Component-level auth guard: renders `children` only when authenticated, otherwise redirects to\n * `redirectTo` via `<Navigate replace>` (so Back from the login page doesn't bounce off the guard).\n *\n * The redirect **remembers the page**: it adds `?redirect=<path + search + hash>` to the login URL (the\n * param name follows `config.keys.redirectQueryKey`) and keeps the same target in memory for this tab, so\n * a multi-step sign-in that drops the query string still knows it. Read it back after sign-in with\n * `useAuthRedirect` / `getAuthRedirect`. Nothing is remembered from `/`, from the login path itself, or\n * during an explicit Sign Out (`AdminRoot`'s) — and turning a visitor away from such a page forgets an\n * older remembered target, so it can't come back on the next sign-in. Once it renders signed-in content,\n * the target is forgotten.\n *\n * Requires a `@tanstack/react-router` context (it renders `<Navigate>`), so use it inside a routed\n * tree. `redirectTo` is a plain string — the library can't know the app's typed route tree, so it's\n * cast loosely to the router's `to` type.\n *\n * @example\n * <AuthGuard isAuthenticated={session.isAuthenticated} redirectTo=\"/login\">\n *   <Dashboard />\n * </AuthGuard>\n */\nexport const AuthGuard = ({ isAuthenticated, redirectTo = '/login', children }: AuthGuardProps) => {\n  const ok = typeof isAuthenticated === 'function' ? isAuthenticated() : isAuthenticated\n  const queryKey = useRedirectQueryKey()\n  const router = useRouter()\n  configureAuthRedirect({ queryKey, loginPath: redirectTo })\n  // The target is taken once, when the guard first turns the visitor away, and read without subscribing:\n  // the router moves its location to the login URL before the login page mounts, so a later render here\n  // would read that instead (and a `<Navigate>` whose props change navigates again).\n  const target = useRef<string | null | undefined>(undefined)\n  if (ok) target.current = undefined\n  else if (target.current === undefined) {\n    const { pathname, searchStr, hash } = router.state.location\n    target.current = rememberAuthRedirect(`${pathname}${searchStr}${hash ? `#${hash}` : ''}`)\n    // the turn-away is authoritative: from a page not worth remembering (`/`), an older target mustn't\n    // come back on the next sign-in\n    if (target.current === null) clearAuthRedirect()\n  }\n  const redirect = useMemo(\n    () =>\n      ok ? null : (\n        <Navigate\n          to={redirectTo as LinkProps['to']}\n          search={(target.current ? { [queryKey]: target.current } : {}) as LinkProps['search']}\n          replace\n        />\n      ),\n    [ok, redirectTo, queryKey],\n  )\n\n  // signed in: a remembered target is spent (and a Sign Out is over) — idempotent, so StrictMode is fine\n  useEffect(() => {\n    if (ok) authRedirectConsumed()\n  }, [ok])\n\n  return ok ? <>{children}</> : redirect\n}\n"],"names":["AUTH_REDIRECT_MAX_LENGTH","remembered","signingOut","settings","DEFAULT_REDIRECT_QUERY_KEY","configureAuthRedirect","next","isBrowser","currentOrigin","isUnder","pathname","base","b","safeAuthRedirect","value","loginPath","isAuthPath","origin","url","safe","paramOf","searchStr","key","rememberFromUrl","target","findAuthRedirect","queryKey","remember","fromParam","resolveAuthRedirect","fallback","rememberAuthRedirect","beginSignOut","endSignOut","authRedirectConsumed","getAuthRedirect","useAuthRedirect","useRedirectQueryKey","router","useRouter","page","useRef","heard","param","useRouterState","s","found","clearAuthRedirect","AuthGuard","isAuthenticated","redirectTo","children","ok","hash","redirect","useMemo","jsx","Navigate","useEffect","Fragment"],"mappings":";;;;AAUO,MAAMA,IAA2B;AAcxC,IAAIC,IAA4B,MAC5BC,IAAa;AACjB,MAAMC,IAAiF;AAAA,EACrF,UAAUC;AAAA,EACV,WAAW;AAAA,EACX,YAAY;AACd;AAGO,SAASC,EAAsBC,GAAgC;AACpE,SAAO,OAAOH,GAAUG,CAAI;AAC9B;AAGA,MAAMC,IAAY,MAAM,OAAO,SAAW,KAEpCC,IAAgB,MACpB,OAAO,SAAW,MAAc,qBAAqB,OAAO,SAAS,QAEjEC,IAAU,CAACC,GAAkBC,MAAiB;AAClD,QAAMC,IAAID,EAAK,SAAS,IAAIA,EAAK,QAAQ,QAAQ,EAAE,IAAIA;AACvD,SAAOD,MAAaE,KAAKF,EAAS,WAAW,GAAGE,CAAC,GAAG;AACtD;AAQO,SAASC,EACdC,GACA,EAAE,WAAAC,GAAW,YAAAC,GAAY,QAAAC,IAAST,EAAA,KACnB;AAGf,MAFI,OAAOM,KAAU,YAAYA,EAAM,WAAW,KAAKA,EAAM,SAASd,KAElE,CAACc,EAAM,WAAW,GAAG,KAAKA,EAAM,WAAW,IAAI,KAAKA,EAAM,WAAW,KAAK,EAAG,QAAO;AACxF,MAAII;AACJ,MAAI;AACF,IAAAA,IAAM,IAAI,IAAIJ,GAAOG,CAAM;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AAKA,MAHIC,EAAI,WAAWD,KAEfC,EAAI,SAAS,WAAW,IAAI,KAC5BT,EAAQS,EAAI,UAAUH,CAAS,EAAG,QAAO;AAC7C,MAAI;AACF,QAAIC,KAAA,QAAAA,EAAaE,EAAI,UAAW,QAAO;AAAA,EACzC,QAAQ;AAAA,EAER;AACA,SAAO,GAAGA,EAAI,QAAQ,GAAGA,EAAI,MAAM,GAAGA,EAAI,IAAI;AAChD;AAGA,MAAMC,IAAO,CAACL,MACZD,EAAiBC,GAAO,EAAE,WAAWX,EAAS,WAAW,YAAYA,EAAS,WAAA,CAAY,GAGtFiB,IAAU,CAACC,GAAmBC,MAAgB;AAClD,MAAI;AACF,WAAO,IAAI,gBAAgBD,CAAS,EAAE,IAAIC,CAAG;AAAA,EAC/C,QAAQ;AACN,WAAO;AAAA,EACT;AACF,GAOMC,IAAkB,CAACC,MAAmB;AAC1C,EAAIA,MAAW,MACRtB,MAAYD,IAAa,UACJuB,CAAM;AACpC,GAMMC,IAAmB,CAACJ,GAAmBK,GAAkBC,MAAsB;AACnF,QAAMC,IAAYT,EAAKC,EAAQC,GAAWK,CAAQ,CAAC;AACnD,SAAIE,KACED,OAA0BC,CAAS,GAChCA,KAEFrB,EAAA,IAAcY,EAAKlB,CAAU,IAAI;AAC1C;AAQO,SAAS4B,EACdR,GACAS,IAAW,KACXJ,IAAWvB,EAAS,UACpB;AACA,SAAOsB,EAAiBJ,GAAWK,GAAU,EAAK,KAAKI;AACzD;AAMO,SAASC,EAAqBP,GAA+B;AAClE,MAAItB,KAAc,CAACK,EAAA,EAAa,QAAO;AACvC,QAAMO,IAAQK,EAAKK,CAAM;AACzB,SAAI,CAACV,KAASA,MAAU,MAAY,QACpCb,IAAaa,GACNA;AACT;AAMO,SAASkB,IAAe;AAC7B,EAAA/B,IAAa,MACbC,IAAaK,EAAA;AACf;AAGO,SAAS0B,IAAa;AAC3B,EAAA/B,IAAa;AACf;AAGO,SAASgC,IAAuB;AACrC,EAAAjC,IAAa,MACbC,IAAa;AACf;AAUO,SAASiC,EAAgBL,IAAW,KAAa;AACtD,QAAMT,IAAY,OAAO,SAAW,MAAc,KAAK,OAAO,SAAS;AACvE,SAAOI,EAAiBJ,GAAWlB,EAAS,UAAU,EAAI,KAAK2B;AACjE;AAoBO,SAASM,EAAgBN,IAAW,KAAa;AACtD,QAAMJ,IAAWW,EAAA;AACjB,EAAAhC,EAAsB,EAAE,UAAAqB,GAAU;AAClC,QAAMY,IAASC,EAAA,GAETC,IAAOC,EAAsB,IAAI;AACvC,EAAID,EAAK,YAAY,WAAW,UAAUF,EAAO,MAAM,SAAS;AAGhE,QAAMI,IAAQD,EAAsB,IAAI,GAClCE,IAAQC,EAAe;AAAA,IAC3B,QAAQ,CAACC,OACHA,EAAE,SAAS,aAAaL,EAAK,YAC/BE,EAAM,UAAUtB,EAAQyB,EAAE,SAAS,WAAWnB,CAAQ,IACjDgB,EAAM;AAAA,EACf,CACD,GACKI,IAAQL,EAAsB,IAAI,GAClCb,IAAYT,EAAKwB,CAAK;AAC5B,SAAIf,KAEEA,MAAckB,EAAM,WAASvB,EAAgBK,CAAS,GAC1DkB,EAAM,UAAUlB,KACPkB,EAAM,YAAY,WAAY,UAAUrB,EAAiB,IAAIC,GAAU,EAAK,IAChFoB,EAAM,WAAWhB;AAC1B;AAMO,SAASiB,IAA0B;AACxC,EAAA9C,IAAa;AACf;AC3LO,MAAM+C,IAAY,CAAC,EAAE,iBAAAC,GAAiB,YAAAC,IAAa,UAAU,UAAAC,QAA+B;AACjG,QAAMC,IAAK,OAAOH,KAAoB,aAAaA,MAAoBA,GACjEvB,IAAWW,EAAA,GACXC,IAASC,EAAA;AACf,EAAAlC,EAAsB,EAAE,UAAAqB,GAAU,WAAWwB,EAAA,CAAY;AAIzD,QAAM1B,IAASiB,EAAkC,MAAS;AAC1D,MAAIW,KAAW,UAAU;AAAA,WAChB5B,EAAO,YAAY,QAAW;AACrC,UAAM,EAAE,UAAAd,GAAU,WAAAW,GAAW,MAAAgC,EAAA,IAASf,EAAO,MAAM;AACnD,IAAAd,EAAO,UAAUO,EAAqB,GAAGrB,CAAQ,GAAGW,CAAS,GAAGgC,IAAO,IAAIA,CAAI,KAAK,EAAE,EAAE,GAGpF7B,EAAO,YAAY,QAAMuB,EAAA;AAAA,EAC/B;AACA,QAAMO,IAAWC;AAAA,IACf,MACEH,IAAK,OACH,gBAAAI;AAAA,MAACC;AAAA,MAAA;AAAA,QACC,IAAIP;AAAA,QACJ,QAAS1B,EAAO,UAAU,EAAE,CAACE,CAAQ,GAAGF,EAAO,QAAA,IAAY,CAAA;AAAA,QAC3D,SAAO;AAAA,MAAA;AAAA,IAAA;AAAA,IAGb,CAAC4B,GAAIF,GAAYxB,CAAQ;AAAA,EAAA;AAI3B,SAAAgC,EAAU,MAAM;AACd,IAAIN,KAAIlB,EAAA;AAAA,EACV,GAAG,CAACkB,CAAE,CAAC,GAEAA,IAAK,gBAAAI,EAAAG,GAAA,EAAG,UAAAR,EAAA,CAAS,IAAMG;AAChC;"}

package/dist/{AuthGuard-C2eA3mJA.cjs → AuthGuard-DM1nDTE5.cjs}

@@ -1,2 +1,2 @@
-"use strict";const g=require("react/jsx-runtime"),h=require("@tanstack/react-router"),o=require("react"),m=require("./ConfigProvider-CYSpuSMJ.cjs"),O=2048;let s=null,a=!1;const l={queryKey:m.DEFAULT_REDIRECT_QUERY_KEY,loginPath:"/login",isAuthPath:null};function y(e){Object.assign(l,e)}const p=()=>typeof window<"u",P=()=>typeof window>"u"?"http://localhost":window.location.origin,U=(e,t)=>{const u=t.length>1?t.replace(/\/+$/,""):t;return e===u||e.startsWith(`${u}/`)};function _(e,{loginPath:t,isAuthPath:u,origin:r=P()}){if(typeof e!="string"||e.length===0||e.length>O||!e.startsWith("/")||e.startsWith("//")||e.startsWith("/\\"))return null;let n;try{n=new URL(e,r)}catch{return null}if(n.origin!==r||n.pathname.startsWith("//")||U(n.pathname,t))return null;try{if(u!=null&&u(n.pathname))return null}catch{}return`${n.pathname}${n.search}${n.hash}`}const d=e=>_(e,{loginPath:l.loginPath,isAuthPath:l.isAuthPath}),q=(e,t)=>{try{return new URLSearchParams(e).get(t)}catch{return null}},E=e=>{e==="/"?a||(s=null):S(e)},A=(e,t,u)=>{const r=d(q(e,t));return r?(u&&E(r),r):p()?d(s):null};function b(e,t="/",u=l.queryKey){return A(e,u,!1)??t}function S(e){if(a||!p())return null;const t=d(e);return!t||t==="/"?null:(s=t,t)}function W(){s=null,a=p()}function j(){a=!1}function C(){s=null,a=!1}function L(e="/"){const t=typeof window>"u"?"":window.location.search;return A(t,l.queryKey,!0)??e}function x(e="/"){const t=m.useRedirectQueryKey();y({queryKey:t});const u=h.useRouter(),r=o.useRef(null);r.current===null&&(r.current=u.state.location.pathname);const n=o.useRef(null),R=h.useRouterState({select:f=>(f.location.pathname===r.current&&(n.current=q(f.location.searchStr,t)),n.current)}),c=o.useRef(null),i=d(R);return i?(i!==c.current&&E(i),c.current=i):c.current===null&&(c.current=A("",t,!1)),c.current??e}function $(){s=null}const D=({isAuthenticated:e,redirectTo:t="/login",children:u})=>{const r=typeof e=="function"?e():e,n=m.useRedirectQueryKey(),R=h.useRouter();y({queryKey:n,loginPath:t});const c=o.useRef(void 0);if(r)c.current=void 0;else if(c.current===void 0){const{pathname:f,searchStr:K,hash:w}=R.state.location;c.current=S(`${f}${K}${w?`#${w}`:""}`),c.current===null&&$()}const i=o.useMemo(()=>r?null:g.jsx(h.Navigate,{to:t,search:c.current?{[n]:c.current}:{},replace:!0}),[r,t,n]);return o.useEffect(()=>{r&&C()},[r]),r?g.jsx(g.Fragment,{children:u}):i};exports.AuthGuard=D;exports.beginSignOut=W;exports.clearAuthRedirect=$;exports.configureAuthRedirect=y;exports.endSignOut=j;exports.getAuthRedirect=L;exports.resolveAuthRedirect=b;exports.useAuthRedirect=x;
-//# sourceMappingURL=AuthGuard-C2eA3mJA.cjs.map
+"use strict";const g=require("react/jsx-runtime"),h=require("@tanstack/react-router"),o=require("react"),m=require("./ConfigProvider-DPk0aHDG.cjs"),O=2048;let s=null,a=!1;const l={queryKey:m.DEFAULT_REDIRECT_QUERY_KEY,loginPath:"/login",isAuthPath:null};function y(e){Object.assign(l,e)}const p=()=>typeof window<"u",P=()=>typeof window>"u"?"http://localhost":window.location.origin,U=(e,t)=>{const u=t.length>1?t.replace(/\/+$/,""):t;return e===u||e.startsWith(`${u}/`)};function _(e,{loginPath:t,isAuthPath:u,origin:r=P()}){if(typeof e!="string"||e.length===0||e.length>O||!e.startsWith("/")||e.startsWith("//")||e.startsWith("/\\"))return null;let n;try{n=new URL(e,r)}catch{return null}if(n.origin!==r||n.pathname.startsWith("//")||U(n.pathname,t))return null;try{if(u!=null&&u(n.pathname))return null}catch{}return`${n.pathname}${n.search}${n.hash}`}const d=e=>_(e,{loginPath:l.loginPath,isAuthPath:l.isAuthPath}),q=(e,t)=>{try{return new URLSearchParams(e).get(t)}catch{return null}},E=e=>{e==="/"?a||(s=null):S(e)},A=(e,t,u)=>{const r=d(q(e,t));return r?(u&&E(r),r):p()?d(s):null};function b(e,t="/",u=l.queryKey){return A(e,u,!1)??t}function S(e){if(a||!p())return null;const t=d(e);return!t||t==="/"?null:(s=t,t)}function W(){s=null,a=p()}function j(){a=!1}function C(){s=null,a=!1}function L(e="/"){const t=typeof window>"u"?"":window.location.search;return A(t,l.queryKey,!0)??e}function x(e="/"){const t=m.useRedirectQueryKey();y({queryKey:t});const u=h.useRouter(),r=o.useRef(null);r.current===null&&(r.current=u.state.location.pathname);const n=o.useRef(null),R=h.useRouterState({select:f=>(f.location.pathname===r.current&&(n.current=q(f.location.searchStr,t)),n.current)}),c=o.useRef(null),i=d(R);return i?(i!==c.current&&E(i),c.current=i):c.current===null&&(c.current=A("",t,!1)),c.current??e}function $(){s=null}const D=({isAuthenticated:e,redirectTo:t="/login",children:u})=>{const r=typeof e=="function"?e():e,n=m.useRedirectQueryKey(),R=h.useRouter();y({queryKey:n,loginPath:t});const c=o.useRef(void 0);if(r)c.current=void 0;else if(c.current===void 0){const{pathname:f,searchStr:K,hash:w}=R.state.location;c.current=S(`${f}${K}${w?`#${w}`:""}`),c.current===null&&$()}const i=o.useMemo(()=>r?null:g.jsx(h.Navigate,{to:t,search:c.current?{[n]:c.current}:{},replace:!0}),[r,t,n]);return o.useEffect(()=>{r&&C()},[r]),r?g.jsx(g.Fragment,{children:u}):i};exports.AuthGuard=D;exports.beginSignOut=W;exports.clearAuthRedirect=$;exports.configureAuthRedirect=y;exports.endSignOut=j;exports.getAuthRedirect=L;exports.resolveAuthRedirect=b;exports.useAuthRedirect=x;
+//# sourceMappingURL=AuthGuard-DM1nDTE5.cjs.map

package/dist/{AuthGuard-C2eA3mJA.cjs.map → AuthGuard-DM1nDTE5.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"AuthGuard-C2eA3mJA.cjs","sources":["../src/auth/authRedirect.ts","../src/auth/AuthGuard.tsx"],"sourcesContent":["// Return-after-sign-in: where `AuthGuard` sent a signed-out visitor away from, read back once they've\n// signed in. The target travels in the login URL (`?redirect=…`) and, for a multi-step sign-in that moves\n// between auth routes and drops the query string, in a module-level slot for this tab — written when the\n// guard turns a visitor away and when a reader finds a safe param in the URL (a reloaded or shared login\n// link). Memory only — a path can carry record ids, so it never goes to localStorage / sessionStorage.\nimport { useRouter, useRouterState } from '@tanstack/react-router'\nimport { useRef } from 'react'\nimport { DEFAULT_REDIRECT_QUERY_KEY, useRedirectQueryKey } from '../theme/ConfigProvider'\n\n/** The longest target accepted (characters) — anything longer is treated as crafted. */\nexport const AUTH_REDIRECT_MAX_LENGTH = 2048\n\n/** What the safety check needs to know about the app's sign-in pages. */\nexport interface AuthRedirectContext {\n  /** The sign-in page — the target may not be it, or a step under it (`/login/mfa`). */\n  loginPath: string\n  /** Whether a path belongs to a public auth page (under `authRouteId`) — registered by `AdminRoot`. */\n  isAuthPath?: ((pathname: string) => boolean) | null\n  /** The origin a target must stay on. Defaults to `window.location.origin`. */\n  origin?: string\n}\n\n// The tab's state. `settings` is what the guard / shell last told us (the configured param name, the\n// login path, the auth-page matcher), so `getAuthRedirect` works outside React with no arguments.\nlet remembered: string | null = null\nlet signingOut = false\nconst settings: Required<Omit<AuthRedirectContext, 'origin'>> & { queryKey: string } = {\n  queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n  loginPath: '/login',\n  isAuthPath: null,\n}\n\n/** @internal Update what the module knows about the app (called by `AuthGuard` / `AdminRoot` / the hook). */\nexport function configureAuthRedirect(next: Partial<typeof settings>) {\n  Object.assign(settings, next)\n}\n\n// the memory slot is per browser tab — on a server it would be shared between visitors, so it's off there\nconst isBrowser = () => typeof window !== 'undefined'\n\nconst currentOrigin = () =>\n  typeof window === 'undefined' ? 'http://localhost' : window.location.origin\n\nconst isUnder = (pathname: string, base: string) => {\n  const b = base.length > 1 ? base.replace(/\\/+$/, '') : base\n  return pathname === b || pathname.startsWith(`${b}/`)\n}\n\n/**\n * The target, normalized to `pathname + search + hash`, when it's safe to navigate to — else `null`.\n * Safe = a string of at most `AUTH_REDIRECT_MAX_LENGTH` characters, starting with a single `/`, that\n * resolves to the same origin (rejects `https://evil.example`, `//evil.example`, `/\\evil.example`,\n * `javascript:…`), and isn't the login path, a step under it, or a public auth page.\n */\nexport function safeAuthRedirect(\n  value: unknown,\n  { loginPath, isAuthPath, origin = currentOrigin() }: AuthRedirectContext,\n): string | null {\n  if (typeof value !== 'string' || value.length === 0 || value.length > AUTH_REDIRECT_MAX_LENGTH)\n    return null\n  if (!value.startsWith('/') || value.startsWith('//') || value.startsWith('/\\\\')) return null\n  let url: URL\n  try {\n    url = new URL(value, origin)\n  } catch {\n    return null\n  }\n  // the parser drops tabs / newlines, so `/\\t/evil.example` only shows its real origin here\n  if (url.origin !== origin) return null\n  // …and collapses `/./`, `%2e` and `\\` — `/.//evil.example` normalizes to `//evil.example`\n  if (url.pathname.startsWith('//')) return null\n  if (isUnder(url.pathname, loginPath)) return null\n  try {\n    if (isAuthPath?.(url.pathname)) return null\n  } catch {\n    // an unmatchable path isn't an auth page\n  }\n  return `${url.pathname}${url.search}${url.hash}`\n}\n\n/** The safety check with the module's current settings. */\nconst safe = (value: unknown) =>\n  safeAuthRedirect(value, { loginPath: settings.loginPath, isAuthPath: settings.isAuthPath })\n\n/** Read a param out of a raw search string (`?a=1&b=2`). */\nconst paramOf = (searchStr: string, key: string) => {\n  try {\n    return new URLSearchParams(searchStr).get(key)\n  } catch {\n    return null\n  }\n}\n\n/**\n * A safe param a reader found in the login URL becomes the tab's target (the fresher intent), so the next\n * step of a sign-in — which drops the query string — still finds it. `?redirect=/` means home: it replaces\n * an older target by forgetting it.\n */\nconst rememberFromUrl = (target: string) => {\n  if (target === '/') {\n    if (!signingOut) remembered = null\n  } else rememberAuthRedirect(target)\n}\n\n/**\n * The target for a search string — its param, else the remembered one — or `null` when there's none. With\n * `remember`, a safe param is also remembered for the tab (see `rememberFromUrl`).\n */\nconst findAuthRedirect = (searchStr: string, queryKey: string, remember: boolean) => {\n  const fromParam = safe(paramOf(searchStr, queryKey))\n  if (fromParam) {\n    if (remember) rememberFromUrl(fromParam)\n    return fromParam\n  }\n  return isBrowser() ? safe(remembered) : null\n}\n\n/**\n * @internal The target for a search string: its param, else the remembered one, else `fallback`. Reads\n * only — `authLayoutRoute` bounces an already signed-in visitor with it, and that bounce has no later\n * sign-in step to remember anything for (a target left in memory while signed in would come back on the\n * next sign-in).\n */\nexport function resolveAuthRedirect(\n  searchStr: string,\n  fallback = '/',\n  queryKey = settings.queryKey,\n) {\n  return findAuthRedirect(searchStr, queryKey, false) ?? fallback\n}\n\n/**\n * @internal Remember a target for this tab — returns it (normalized) when it's worth remembering, `null`\n * otherwise (unsafe, `/`, the login path, or an explicit Sign Out is under way).\n */\nexport function rememberAuthRedirect(target: string): string | null {\n  if (signingOut || !isBrowser()) return null\n  const value = safe(target)\n  if (!value || value === '/') return null\n  remembered = value\n  return value\n}\n\n/**\n * @internal An explicit Sign Out: forget the target and remember nothing until `endSignOut` (once the\n * navigation to the login page has settled) or the next sign-in.\n */\nexport function beginSignOut() {\n  remembered = null\n  signingOut = isBrowser()\n}\n\n/** @internal The Sign Out navigation settled — later guard redirects remember their page again. */\nexport function endSignOut() {\n  signingOut = false\n}\n\n/** @internal Signed in (the guard rendered its content): the target is spent, Sign Out is over. */\nexport function authRedirectConsumed() {\n  remembered = null\n  signingOut = false\n}\n\n/**\n * Where to go after a successful sign-in, outside React (a route `beforeLoad`, a mutation's `onSuccess`):\n * the `?redirect=` param of `window.location` if it's safe, else the target remembered in this tab, else\n * `fallback` (default `'/'`). A safe param it finds is remembered for the tab, so a later step of the\n * sign-in that drops the query string still gets it (`?redirect=/` forgets an older target instead).\n * Unsafe params are ignored and never overwrite a remembered target. The param name follows\n * `config.keys.redirectQueryKey` once the guard, the shell or `useAuthRedirect` has rendered.\n */\nexport function getAuthRedirect(fallback = '/'): string {\n  const searchStr = typeof window === 'undefined' ? '' : window.location.search\n  return findAuthRedirect(searchStr, settings.queryKey, true) ?? fallback\n}\n\n/**\n * Where to go after a successful sign-in: the `?redirect=` param of the page this component is mounted on\n * (read from the router's location) if it's safe, else the target remembered in this tab, else `fallback`\n * (default `'/'`). A safe param it finds is remembered for the tab (a reloaded or shared login link then\n * survives a multi-step sign-in; `?redirect=/` forgets an older target instead). It never spends the\n * target; that's forgotten once `AuthGuard` renders signed-in content (or `clearAuthRedirect`).\n *\n * **Stable for the component's life:** once it has found a target it keeps returning it, and it listens\n * only to the `?redirect=` of the page it was mounted on. A `<Navigate>` to the target moves the router's\n * location there (no param any more) while the login page can still be mounted — e.g. a code-split route\n * whose chunk is loading — and a value that changed then would make the `<Navigate>` navigate again, to\n * the fallback; a re-render alone would too (TanStack's `<Navigate>` navigates on new props), so location\n * changes elsewhere don't re-render it. A new safe param on its own page (arriving after mount) still wins.\n *\n * @example\n * const to = useAuthRedirect('/')\n * if (status === 'authenticated') return <Navigate to={to} replace />\n */\nexport function useAuthRedirect(fallback = '/'): string {\n  const queryKey = useRedirectQueryKey()\n  configureAuthRedirect({ queryKey })\n  const router = useRouter()\n  // the page this component was mounted on — only its own URL is listened to\n  const page = useRef<string | null>(null)\n  if (page.current === null) page.current = router.state.location.pathname\n  // the param of that page, held once the router has moved on — so the navigation to the target (or a\n  // guard redirecting away from it) doesn't re-render this component, and its `<Navigate>` fires once\n  const heard = useRef<string | null>(null)\n  const param = useRouterState({\n    select: (s) => {\n      if (s.location.pathname === page.current)\n        heard.current = paramOf(s.location.searchStr, queryKey)\n      return heard.current\n    },\n  })\n  const found = useRef<string | null>(null)\n  const fromParam = safe(param)\n  if (fromParam) {\n    // a new param: remember it for the tab (idempotent, so the StrictMode double render is harmless)\n    if (fromParam !== found.current) rememberFromUrl(fromParam)\n    found.current = fromParam\n  } else if (found.current === null) found.current = findAuthRedirect('', queryKey, false)\n  return found.current ?? fallback\n}\n\n/**\n * Forget the remembered target. `AuthGuard` already does this once it renders signed-in content, so a\n * later sign-in in the same tab doesn't reuse it — call it yourself only when you navigate elsewhere.\n */\nexport function clearAuthRedirect(): void {\n  remembered = null\n}\n\n/** @internal Test-only: back to a fresh tab. */\nexport function resetAuthRedirect() {\n  remembered = null\n  signingOut = false\n  Object.assign(settings, {\n    queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n    loginPath: '/login',\n    isAuthPath: null,\n  })\n}\n","import { Navigate, useRouter, type LinkProps } from '@tanstack/react-router'\nimport { useEffect, useMemo, useRef, type ReactNode } from 'react'\nimport { useRedirectQueryKey } from '../theme/ConfigProvider'\nimport {\n  authRedirectConsumed,\n  clearAuthRedirect,\n  configureAuthRedirect,\n  rememberAuthRedirect,\n} from './authRedirect'\n\nexport interface AuthGuardProps {\n  /** Session check — a boolean, or a function that returns one (evaluated on render). */\n  isAuthenticated: boolean | (() => boolean)\n  /** Where to send an unauthenticated visitor. Defaults to `'/login'`. */\n  redirectTo?: string\n  /** The protected content, rendered only when authenticated. */\n  children: ReactNode\n}\n\n/**\n * Component-level auth guard: renders `children` only when authenticated, otherwise redirects to\n * `redirectTo` via `<Navigate replace>` (so Back from the login page doesn't bounce off the guard).\n *\n * The redirect **remembers the page**: it adds `?redirect=<path + search + hash>` to the login URL (the\n * param name follows `config.keys.redirectQueryKey`) and keeps the same target in memory for this tab, so\n * a multi-step sign-in that drops the query string still knows it. Read it back after sign-in with\n * `useAuthRedirect` / `getAuthRedirect`. Nothing is remembered from `/`, from the login path itself, or\n * during an explicit Sign Out (`AdminRoot`'s) — and turning a visitor away from such a page forgets an\n * older remembered target, so it can't come back on the next sign-in. Once it renders signed-in content,\n * the target is forgotten.\n *\n * Requires a `@tanstack/react-router` context (it renders `<Navigate>`), so use it inside a routed\n * tree. `redirectTo` is a plain string — the library can't know the app's typed route tree, so it's\n * cast loosely to the router's `to` type.\n *\n * @example\n * <AuthGuard isAuthenticated={session.isAuthenticated} redirectTo=\"/login\">\n *   <Dashboard />\n * </AuthGuard>\n */\nexport const AuthGuard = ({ isAuthenticated, redirectTo = '/login', children }: AuthGuardProps) => {\n  const ok = typeof isAuthenticated === 'function' ? isAuthenticated() : isAuthenticated\n  const queryKey = useRedirectQueryKey()\n  const router = useRouter()\n  configureAuthRedirect({ queryKey, loginPath: redirectTo })\n  // The target is taken once, when the guard first turns the visitor away, and read without subscribing:\n  // the router moves its location to the login URL before the login page mounts, so a later render here\n  // would read that instead (and a `<Navigate>` whose props change navigates again).\n  const target = useRef<string | null | undefined>(undefined)\n  if (ok) target.current = undefined\n  else if (target.current === undefined) {\n    const { pathname, searchStr, hash } = router.state.location\n    target.current = rememberAuthRedirect(`${pathname}${searchStr}${hash ? `#${hash}` : ''}`)\n    // the turn-away is authoritative: from a page not worth remembering (`/`), an older target mustn't\n    // come back on the next sign-in\n    if (target.current === null) clearAuthRedirect()\n  }\n  const redirect = useMemo(\n    () =>\n      ok ? null : (\n        <Navigate\n          to={redirectTo as LinkProps['to']}\n          search={(target.current ? { [queryKey]: target.current } : {}) as LinkProps['search']}\n          replace\n        />\n      ),\n    [ok, redirectTo, queryKey],\n  )\n\n  // signed in: a remembered target is spent (and a Sign Out is over) — idempotent, so StrictMode is fine\n  useEffect(() => {\n    if (ok) authRedirectConsumed()\n  }, [ok])\n\n  return ok ? <>{children}</> : redirect\n}\n"],"names":["AUTH_REDIRECT_MAX_LENGTH","remembered","signingOut","settings","DEFAULT_REDIRECT_QUERY_KEY","configureAuthRedirect","next","isBrowser","currentOrigin","isUnder","pathname","base","b","safeAuthRedirect","value","loginPath","isAuthPath","origin","url","safe","paramOf","searchStr","key","rememberFromUrl","target","findAuthRedirect","queryKey","remember","fromParam","resolveAuthRedirect","fallback","rememberAuthRedirect","beginSignOut","endSignOut","authRedirectConsumed","getAuthRedirect","useAuthRedirect","useRedirectQueryKey","router","useRouter","page","useRef","heard","param","useRouterState","s","found","clearAuthRedirect","AuthGuard","isAuthenticated","redirectTo","children","ok","hash","redirect","useMemo","jsx","Navigate","useEffect","Fragment"],"mappings":"oJAUaA,EAA2B,KAcxC,IAAIC,EAA4B,KAC5BC,EAAa,GACjB,MAAMC,EAAiF,CACrF,SAAUC,EAAAA,2BACV,UAAW,SACX,WAAY,IACd,EAGO,SAASC,EAAsBC,EAAgC,CACpE,OAAO,OAAOH,EAAUG,CAAI,CAC9B,CAGA,MAAMC,EAAY,IAAM,OAAO,OAAW,IAEpCC,EAAgB,IACpB,OAAO,OAAW,IAAc,mBAAqB,OAAO,SAAS,OAEjEC,EAAU,CAACC,EAAkBC,IAAiB,CAClD,MAAMC,EAAID,EAAK,OAAS,EAAIA,EAAK,QAAQ,OAAQ,EAAE,EAAIA,EACvD,OAAOD,IAAaE,GAAKF,EAAS,WAAW,GAAGE,CAAC,GAAG,CACtD,EAQO,SAASC,EACdC,EACA,CAAE,UAAAC,EAAW,WAAAC,EAAY,OAAAC,EAAST,EAAA,GACnB,CAGf,GAFI,OAAOM,GAAU,UAAYA,EAAM,SAAW,GAAKA,EAAM,OAASd,GAElE,CAACc,EAAM,WAAW,GAAG,GAAKA,EAAM,WAAW,IAAI,GAAKA,EAAM,WAAW,KAAK,EAAG,OAAO,KACxF,IAAII,EACJ,GAAI,CACFA,EAAM,IAAI,IAAIJ,EAAOG,CAAM,CAC7B,MAAQ,CACN,OAAO,IACT,CAKA,GAHIC,EAAI,SAAWD,GAEfC,EAAI,SAAS,WAAW,IAAI,GAC5BT,EAAQS,EAAI,SAAUH,CAAS,EAAG,OAAO,KAC7C,GAAI,CACF,GAAIC,GAAA,MAAAA,EAAaE,EAAI,UAAW,OAAO,IACzC,MAAQ,CAER,CACA,MAAO,GAAGA,EAAI,QAAQ,GAAGA,EAAI,MAAM,GAAGA,EAAI,IAAI,EAChD,CAGA,MAAMC,EAAQL,GACZD,EAAiBC,EAAO,CAAE,UAAWX,EAAS,UAAW,WAAYA,EAAS,UAAA,CAAY,EAGtFiB,EAAU,CAACC,EAAmBC,IAAgB,CAClD,GAAI,CACF,OAAO,IAAI,gBAAgBD,CAAS,EAAE,IAAIC,CAAG,CAC/C,MAAQ,CACN,OAAO,IACT,CACF,EAOMC,EAAmBC,GAAmB,CACtCA,IAAW,IACRtB,IAAYD,EAAa,QACJuB,CAAM,CACpC,EAMMC,EAAmB,CAACJ,EAAmBK,EAAkBC,IAAsB,CACnF,MAAMC,EAAYT,EAAKC,EAAQC,EAAWK,CAAQ,CAAC,EACnD,OAAIE,GACED,KAA0BC,CAAS,EAChCA,GAEFrB,EAAA,EAAcY,EAAKlB,CAAU,EAAI,IAC1C,EAQO,SAAS4B,EACdR,EACAS,EAAW,IACXJ,EAAWvB,EAAS,SACpB,CACA,OAAOsB,EAAiBJ,EAAWK,EAAU,EAAK,GAAKI,CACzD,CAMO,SAASC,EAAqBP,EAA+B,CAClE,GAAItB,GAAc,CAACK,EAAA,EAAa,OAAO,KACvC,MAAMO,EAAQK,EAAKK,CAAM,EACzB,MAAI,CAACV,GAASA,IAAU,IAAY,MACpCb,EAAaa,EACNA,EACT,CAMO,SAASkB,GAAe,CAC7B/B,EAAa,KACbC,EAAaK,EAAA,CACf,CAGO,SAAS0B,GAAa,CAC3B/B,EAAa,EACf,CAGO,SAASgC,GAAuB,CACrCjC,EAAa,KACbC,EAAa,EACf,CAUO,SAASiC,EAAgBL,EAAW,IAAa,CACtD,MAAMT,EAAY,OAAO,OAAW,IAAc,GAAK,OAAO,SAAS,OACvE,OAAOI,EAAiBJ,EAAWlB,EAAS,SAAU,EAAI,GAAK2B,CACjE,CAoBO,SAASM,EAAgBN,EAAW,IAAa,CACtD,MAAMJ,EAAWW,EAAAA,oBAAA,EACjBhC,EAAsB,CAAE,SAAAqB,EAAU,EAClC,MAAMY,EAASC,EAAAA,UAAA,EAETC,EAAOC,EAAAA,OAAsB,IAAI,EACnCD,EAAK,UAAY,SAAW,QAAUF,EAAO,MAAM,SAAS,UAGhE,MAAMI,EAAQD,EAAAA,OAAsB,IAAI,EAClCE,EAAQC,EAAAA,eAAe,CAC3B,OAASC,IACHA,EAAE,SAAS,WAAaL,EAAK,UAC/BE,EAAM,QAAUtB,EAAQyB,EAAE,SAAS,UAAWnB,CAAQ,GACjDgB,EAAM,QACf,CACD,EACKI,EAAQL,EAAAA,OAAsB,IAAI,EAClCb,EAAYT,EAAKwB,CAAK,EAC5B,OAAIf,GAEEA,IAAckB,EAAM,SAASvB,EAAgBK,CAAS,EAC1DkB,EAAM,QAAUlB,GACPkB,EAAM,UAAY,SAAY,QAAUrB,EAAiB,GAAIC,EAAU,EAAK,GAChFoB,EAAM,SAAWhB,CAC1B,CAMO,SAASiB,GAA0B,CACxC9C,EAAa,IACf,CC3LO,MAAM+C,EAAY,CAAC,CAAE,gBAAAC,EAAiB,WAAAC,EAAa,SAAU,SAAAC,KAA+B,CACjG,MAAMC,EAAK,OAAOH,GAAoB,WAAaA,IAAoBA,EACjEvB,EAAWW,EAAAA,oBAAA,EACXC,EAASC,EAAAA,UAAA,EACflC,EAAsB,CAAE,SAAAqB,EAAU,UAAWwB,CAAA,CAAY,EAIzD,MAAM1B,EAASiB,EAAAA,OAAkC,MAAS,EAC1D,GAAIW,IAAW,QAAU,eAChB5B,EAAO,UAAY,OAAW,CACrC,KAAM,CAAE,SAAAd,EAAU,UAAAW,EAAW,KAAAgC,CAAA,EAASf,EAAO,MAAM,SACnDd,EAAO,QAAUO,EAAqB,GAAGrB,CAAQ,GAAGW,CAAS,GAAGgC,EAAO,IAAIA,CAAI,GAAK,EAAE,EAAE,EAGpF7B,EAAO,UAAY,MAAMuB,EAAA,CAC/B,CACA,MAAMO,EAAWC,EAAAA,QACf,IACEH,EAAK,KACHI,EAAAA,IAACC,EAAAA,SAAA,CACC,GAAIP,EACJ,OAAS1B,EAAO,QAAU,CAAE,CAACE,CAAQ,EAAGF,EAAO,OAAA,EAAY,CAAA,EAC3D,QAAO,EAAA,CAAA,EAGb,CAAC4B,EAAIF,EAAYxB,CAAQ,CAAA,EAI3BgC,OAAAA,EAAAA,UAAU,IAAM,CACVN,GAAIlB,EAAA,CACV,EAAG,CAACkB,CAAE,CAAC,EAEAA,EAAKI,EAAAA,IAAAG,EAAAA,SAAA,CAAG,SAAAR,CAAA,CAAS,EAAMG,CAChC"}
+{"version":3,"file":"AuthGuard-DM1nDTE5.cjs","sources":["../src/auth/authRedirect.ts","../src/auth/AuthGuard.tsx"],"sourcesContent":["// Return-after-sign-in: where `AuthGuard` sent a signed-out visitor away from, read back once they've\n// signed in. The target travels in the login URL (`?redirect=…`) and, for a multi-step sign-in that moves\n// between auth routes and drops the query string, in a module-level slot for this tab — written when the\n// guard turns a visitor away and when a reader finds a safe param in the URL (a reloaded or shared login\n// link). Memory only — a path can carry record ids, so it never goes to localStorage / sessionStorage.\nimport { useRouter, useRouterState } from '@tanstack/react-router'\nimport { useRef } from 'react'\nimport { DEFAULT_REDIRECT_QUERY_KEY, useRedirectQueryKey } from '../theme/ConfigProvider'\n\n/** The longest target accepted (characters) — anything longer is treated as crafted. */\nexport const AUTH_REDIRECT_MAX_LENGTH = 2048\n\n/** What the safety check needs to know about the app's sign-in pages. */\nexport interface AuthRedirectContext {\n  /** The sign-in page — the target may not be it, or a step under it (`/login/mfa`). */\n  loginPath: string\n  /** Whether a path belongs to a public auth page (under `authRouteId`) — registered by `AdminRoot`. */\n  isAuthPath?: ((pathname: string) => boolean) | null\n  /** The origin a target must stay on. Defaults to `window.location.origin`. */\n  origin?: string\n}\n\n// The tab's state. `settings` is what the guard / shell last told us (the configured param name, the\n// login path, the auth-page matcher), so `getAuthRedirect` works outside React with no arguments.\nlet remembered: string | null = null\nlet signingOut = false\nconst settings: Required<Omit<AuthRedirectContext, 'origin'>> & { queryKey: string } = {\n  queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n  loginPath: '/login',\n  isAuthPath: null,\n}\n\n/** @internal Update what the module knows about the app (called by `AuthGuard` / `AdminRoot` / the hook). */\nexport function configureAuthRedirect(next: Partial<typeof settings>) {\n  Object.assign(settings, next)\n}\n\n// the memory slot is per browser tab — on a server it would be shared between visitors, so it's off there\nconst isBrowser = () => typeof window !== 'undefined'\n\nconst currentOrigin = () =>\n  typeof window === 'undefined' ? 'http://localhost' : window.location.origin\n\nconst isUnder = (pathname: string, base: string) => {\n  const b = base.length > 1 ? base.replace(/\\/+$/, '') : base\n  return pathname === b || pathname.startsWith(`${b}/`)\n}\n\n/**\n * The target, normalized to `pathname + search + hash`, when it's safe to navigate to — else `null`.\n * Safe = a string of at most `AUTH_REDIRECT_MAX_LENGTH` characters, starting with a single `/`, that\n * resolves to the same origin (rejects `https://evil.example`, `//evil.example`, `/\\evil.example`,\n * `javascript:…`), and isn't the login path, a step under it, or a public auth page.\n */\nexport function safeAuthRedirect(\n  value: unknown,\n  { loginPath, isAuthPath, origin = currentOrigin() }: AuthRedirectContext,\n): string | null {\n  if (typeof value !== 'string' || value.length === 0 || value.length > AUTH_REDIRECT_MAX_LENGTH)\n    return null\n  if (!value.startsWith('/') || value.startsWith('//') || value.startsWith('/\\\\')) return null\n  let url: URL\n  try {\n    url = new URL(value, origin)\n  } catch {\n    return null\n  }\n  // the parser drops tabs / newlines, so `/\\t/evil.example` only shows its real origin here\n  if (url.origin !== origin) return null\n  // …and collapses `/./`, `%2e` and `\\` — `/.//evil.example` normalizes to `//evil.example`\n  if (url.pathname.startsWith('//')) return null\n  if (isUnder(url.pathname, loginPath)) return null\n  try {\n    if (isAuthPath?.(url.pathname)) return null\n  } catch {\n    // an unmatchable path isn't an auth page\n  }\n  return `${url.pathname}${url.search}${url.hash}`\n}\n\n/** The safety check with the module's current settings. */\nconst safe = (value: unknown) =>\n  safeAuthRedirect(value, { loginPath: settings.loginPath, isAuthPath: settings.isAuthPath })\n\n/** Read a param out of a raw search string (`?a=1&b=2`). */\nconst paramOf = (searchStr: string, key: string) => {\n  try {\n    return new URLSearchParams(searchStr).get(key)\n  } catch {\n    return null\n  }\n}\n\n/**\n * A safe param a reader found in the login URL becomes the tab's target (the fresher intent), so the next\n * step of a sign-in — which drops the query string — still finds it. `?redirect=/` means home: it replaces\n * an older target by forgetting it.\n */\nconst rememberFromUrl = (target: string) => {\n  if (target === '/') {\n    if (!signingOut) remembered = null\n  } else rememberAuthRedirect(target)\n}\n\n/**\n * The target for a search string — its param, else the remembered one — or `null` when there's none. With\n * `remember`, a safe param is also remembered for the tab (see `rememberFromUrl`).\n */\nconst findAuthRedirect = (searchStr: string, queryKey: string, remember: boolean) => {\n  const fromParam = safe(paramOf(searchStr, queryKey))\n  if (fromParam) {\n    if (remember) rememberFromUrl(fromParam)\n    return fromParam\n  }\n  return isBrowser() ? safe(remembered) : null\n}\n\n/**\n * @internal The target for a search string: its param, else the remembered one, else `fallback`. Reads\n * only — `authLayoutRoute` bounces an already signed-in visitor with it, and that bounce has no later\n * sign-in step to remember anything for (a target left in memory while signed in would come back on the\n * next sign-in).\n */\nexport function resolveAuthRedirect(\n  searchStr: string,\n  fallback = '/',\n  queryKey = settings.queryKey,\n) {\n  return findAuthRedirect(searchStr, queryKey, false) ?? fallback\n}\n\n/**\n * @internal Remember a target for this tab — returns it (normalized) when it's worth remembering, `null`\n * otherwise (unsafe, `/`, the login path, or an explicit Sign Out is under way).\n */\nexport function rememberAuthRedirect(target: string): string | null {\n  if (signingOut || !isBrowser()) return null\n  const value = safe(target)\n  if (!value || value === '/') return null\n  remembered = value\n  return value\n}\n\n/**\n * @internal An explicit Sign Out: forget the target and remember nothing until `endSignOut` (once the\n * navigation to the login page has settled) or the next sign-in.\n */\nexport function beginSignOut() {\n  remembered = null\n  signingOut = isBrowser()\n}\n\n/** @internal The Sign Out navigation settled — later guard redirects remember their page again. */\nexport function endSignOut() {\n  signingOut = false\n}\n\n/** @internal Signed in (the guard rendered its content): the target is spent, Sign Out is over. */\nexport function authRedirectConsumed() {\n  remembered = null\n  signingOut = false\n}\n\n/**\n * Where to go after a successful sign-in, outside React (a route `beforeLoad`, a mutation's `onSuccess`):\n * the `?redirect=` param of `window.location` if it's safe, else the target remembered in this tab, else\n * `fallback` (default `'/'`). A safe param it finds is remembered for the tab, so a later step of the\n * sign-in that drops the query string still gets it (`?redirect=/` forgets an older target instead).\n * Unsafe params are ignored and never overwrite a remembered target. The param name follows\n * `config.keys.redirectQueryKey` once the guard, the shell or `useAuthRedirect` has rendered.\n */\nexport function getAuthRedirect(fallback = '/'): string {\n  const searchStr = typeof window === 'undefined' ? '' : window.location.search\n  return findAuthRedirect(searchStr, settings.queryKey, true) ?? fallback\n}\n\n/**\n * Where to go after a successful sign-in: the `?redirect=` param of the page this component is mounted on\n * (read from the router's location) if it's safe, else the target remembered in this tab, else `fallback`\n * (default `'/'`). A safe param it finds is remembered for the tab (a reloaded or shared login link then\n * survives a multi-step sign-in; `?redirect=/` forgets an older target instead). It never spends the\n * target; that's forgotten once `AuthGuard` renders signed-in content (or `clearAuthRedirect`).\n *\n * **Stable for the component's life:** once it has found a target it keeps returning it, and it listens\n * only to the `?redirect=` of the page it was mounted on. A `<Navigate>` to the target moves the router's\n * location there (no param any more) while the login page can still be mounted — e.g. a code-split route\n * whose chunk is loading — and a value that changed then would make the `<Navigate>` navigate again, to\n * the fallback; a re-render alone would too (TanStack's `<Navigate>` navigates on new props), so location\n * changes elsewhere don't re-render it. A new safe param on its own page (arriving after mount) still wins.\n *\n * @example\n * const to = useAuthRedirect('/')\n * if (status === 'authenticated') return <Navigate to={to} replace />\n */\nexport function useAuthRedirect(fallback = '/'): string {\n  const queryKey = useRedirectQueryKey()\n  configureAuthRedirect({ queryKey })\n  const router = useRouter()\n  // the page this component was mounted on — only its own URL is listened to\n  const page = useRef<string | null>(null)\n  if (page.current === null) page.current = router.state.location.pathname\n  // the param of that page, held once the router has moved on — so the navigation to the target (or a\n  // guard redirecting away from it) doesn't re-render this component, and its `<Navigate>` fires once\n  const heard = useRef<string | null>(null)\n  const param = useRouterState({\n    select: (s) => {\n      if (s.location.pathname === page.current)\n        heard.current = paramOf(s.location.searchStr, queryKey)\n      return heard.current\n    },\n  })\n  const found = useRef<string | null>(null)\n  const fromParam = safe(param)\n  if (fromParam) {\n    // a new param: remember it for the tab (idempotent, so the StrictMode double render is harmless)\n    if (fromParam !== found.current) rememberFromUrl(fromParam)\n    found.current = fromParam\n  } else if (found.current === null) found.current = findAuthRedirect('', queryKey, false)\n  return found.current ?? fallback\n}\n\n/**\n * Forget the remembered target. `AuthGuard` already does this once it renders signed-in content, so a\n * later sign-in in the same tab doesn't reuse it — call it yourself only when you navigate elsewhere.\n */\nexport function clearAuthRedirect(): void {\n  remembered = null\n}\n\n/** @internal Test-only: back to a fresh tab. */\nexport function resetAuthRedirect() {\n  remembered = null\n  signingOut = false\n  Object.assign(settings, {\n    queryKey: DEFAULT_REDIRECT_QUERY_KEY,\n    loginPath: '/login',\n    isAuthPath: null,\n  })\n}\n","import { Navigate, useRouter, type LinkProps } from '@tanstack/react-router'\nimport { useEffect, useMemo, useRef, type ReactNode } from 'react'\nimport { useRedirectQueryKey } from '../theme/ConfigProvider'\nimport {\n  authRedirectConsumed,\n  clearAuthRedirect,\n  configureAuthRedirect,\n  rememberAuthRedirect,\n} from './authRedirect'\n\nexport interface AuthGuardProps {\n  /** Session check — a boolean, or a function that returns one (evaluated on render). */\n  isAuthenticated: boolean | (() => boolean)\n  /** Where to send an unauthenticated visitor. Defaults to `'/login'`. */\n  redirectTo?: string\n  /** The protected content, rendered only when authenticated. */\n  children: ReactNode\n}\n\n/**\n * Component-level auth guard: renders `children` only when authenticated, otherwise redirects to\n * `redirectTo` via `<Navigate replace>` (so Back from the login page doesn't bounce off the guard).\n *\n * The redirect **remembers the page**: it adds `?redirect=<path + search + hash>` to the login URL (the\n * param name follows `config.keys.redirectQueryKey`) and keeps the same target in memory for this tab, so\n * a multi-step sign-in that drops the query string still knows it. Read it back after sign-in with\n * `useAuthRedirect` / `getAuthRedirect`. Nothing is remembered from `/`, from the login path itself, or\n * during an explicit Sign Out (`AdminRoot`'s) — and turning a visitor away from such a page forgets an\n * older remembered target, so it can't come back on the next sign-in. Once it renders signed-in content,\n * the target is forgotten.\n *\n * Requires a `@tanstack/react-router` context (it renders `<Navigate>`), so use it inside a routed\n * tree. `redirectTo` is a plain string — the library can't know the app's typed route tree, so it's\n * cast loosely to the router's `to` type.\n *\n * @example\n * <AuthGuard isAuthenticated={session.isAuthenticated} redirectTo=\"/login\">\n *   <Dashboard />\n * </AuthGuard>\n */\nexport const AuthGuard = ({ isAuthenticated, redirectTo = '/login', children }: AuthGuardProps) => {\n  const ok = typeof isAuthenticated === 'function' ? isAuthenticated() : isAuthenticated\n  const queryKey = useRedirectQueryKey()\n  const router = useRouter()\n  configureAuthRedirect({ queryKey, loginPath: redirectTo })\n  // The target is taken once, when the guard first turns the visitor away, and read without subscribing:\n  // the router moves its location to the login URL before the login page mounts, so a later render here\n  // would read that instead (and a `<Navigate>` whose props change navigates again).\n  const target = useRef<string | null | undefined>(undefined)\n  if (ok) target.current = undefined\n  else if (target.current === undefined) {\n    const { pathname, searchStr, hash } = router.state.location\n    target.current = rememberAuthRedirect(`${pathname}${searchStr}${hash ? `#${hash}` : ''}`)\n    // the turn-away is authoritative: from a page not worth remembering (`/`), an older target mustn't\n    // come back on the next sign-in\n    if (target.current === null) clearAuthRedirect()\n  }\n  const redirect = useMemo(\n    () =>\n      ok ? null : (\n        <Navigate\n          to={redirectTo as LinkProps['to']}\n          search={(target.current ? { [queryKey]: target.current } : {}) as LinkProps['search']}\n          replace\n        />\n      ),\n    [ok, redirectTo, queryKey],\n  )\n\n  // signed in: a remembered target is spent (and a Sign Out is over) — idempotent, so StrictMode is fine\n  useEffect(() => {\n    if (ok) authRedirectConsumed()\n  }, [ok])\n\n  return ok ? <>{children}</> : redirect\n}\n"],"names":["AUTH_REDIRECT_MAX_LENGTH","remembered","signingOut","settings","DEFAULT_REDIRECT_QUERY_KEY","configureAuthRedirect","next","isBrowser","currentOrigin","isUnder","pathname","base","b","safeAuthRedirect","value","loginPath","isAuthPath","origin","url","safe","paramOf","searchStr","key","rememberFromUrl","target","findAuthRedirect","queryKey","remember","fromParam","resolveAuthRedirect","fallback","rememberAuthRedirect","beginSignOut","endSignOut","authRedirectConsumed","getAuthRedirect","useAuthRedirect","useRedirectQueryKey","router","useRouter","page","useRef","heard","param","useRouterState","s","found","clearAuthRedirect","AuthGuard","isAuthenticated","redirectTo","children","ok","hash","redirect","useMemo","jsx","Navigate","useEffect","Fragment"],"mappings":"oJAUaA,EAA2B,KAcxC,IAAIC,EAA4B,KAC5BC,EAAa,GACjB,MAAMC,EAAiF,CACrF,SAAUC,EAAAA,2BACV,UAAW,SACX,WAAY,IACd,EAGO,SAASC,EAAsBC,EAAgC,CACpE,OAAO,OAAOH,EAAUG,CAAI,CAC9B,CAGA,MAAMC,EAAY,IAAM,OAAO,OAAW,IAEpCC,EAAgB,IACpB,OAAO,OAAW,IAAc,mBAAqB,OAAO,SAAS,OAEjEC,EAAU,CAACC,EAAkBC,IAAiB,CAClD,MAAMC,EAAID,EAAK,OAAS,EAAIA,EAAK,QAAQ,OAAQ,EAAE,EAAIA,EACvD,OAAOD,IAAaE,GAAKF,EAAS,WAAW,GAAGE,CAAC,GAAG,CACtD,EAQO,SAASC,EACdC,EACA,CAAE,UAAAC,EAAW,WAAAC,EAAY,OAAAC,EAAST,EAAA,GACnB,CAGf,GAFI,OAAOM,GAAU,UAAYA,EAAM,SAAW,GAAKA,EAAM,OAASd,GAElE,CAACc,EAAM,WAAW,GAAG,GAAKA,EAAM,WAAW,IAAI,GAAKA,EAAM,WAAW,KAAK,EAAG,OAAO,KACxF,IAAII,EACJ,GAAI,CACFA,EAAM,IAAI,IAAIJ,EAAOG,CAAM,CAC7B,MAAQ,CACN,OAAO,IACT,CAKA,GAHIC,EAAI,SAAWD,GAEfC,EAAI,SAAS,WAAW,IAAI,GAC5BT,EAAQS,EAAI,SAAUH,CAAS,EAAG,OAAO,KAC7C,GAAI,CACF,GAAIC,GAAA,MAAAA,EAAaE,EAAI,UAAW,OAAO,IACzC,MAAQ,CAER,CACA,MAAO,GAAGA,EAAI,QAAQ,GAAGA,EAAI,MAAM,GAAGA,EAAI,IAAI,EAChD,CAGA,MAAMC,EAAQL,GACZD,EAAiBC,EAAO,CAAE,UAAWX,EAAS,UAAW,WAAYA,EAAS,UAAA,CAAY,EAGtFiB,EAAU,CAACC,EAAmBC,IAAgB,CAClD,GAAI,CACF,OAAO,IAAI,gBAAgBD,CAAS,EAAE,IAAIC,CAAG,CAC/C,MAAQ,CACN,OAAO,IACT,CACF,EAOMC,EAAmBC,GAAmB,CACtCA,IAAW,IACRtB,IAAYD,EAAa,QACJuB,CAAM,CACpC,EAMMC,EAAmB,CAACJ,EAAmBK,EAAkBC,IAAsB,CACnF,MAAMC,EAAYT,EAAKC,EAAQC,EAAWK,CAAQ,CAAC,EACnD,OAAIE,GACED,KAA0BC,CAAS,EAChCA,GAEFrB,EAAA,EAAcY,EAAKlB,CAAU,EAAI,IAC1C,EAQO,SAAS4B,EACdR,EACAS,EAAW,IACXJ,EAAWvB,EAAS,SACpB,CACA,OAAOsB,EAAiBJ,EAAWK,EAAU,EAAK,GAAKI,CACzD,CAMO,SAASC,EAAqBP,EAA+B,CAClE,GAAItB,GAAc,CAACK,EAAA,EAAa,OAAO,KACvC,MAAMO,EAAQK,EAAKK,CAAM,EACzB,MAAI,CAACV,GAASA,IAAU,IAAY,MACpCb,EAAaa,EACNA,EACT,CAMO,SAASkB,GAAe,CAC7B/B,EAAa,KACbC,EAAaK,EAAA,CACf,CAGO,SAAS0B,GAAa,CAC3B/B,EAAa,EACf,CAGO,SAASgC,GAAuB,CACrCjC,EAAa,KACbC,EAAa,EACf,CAUO,SAASiC,EAAgBL,EAAW,IAAa,CACtD,MAAMT,EAAY,OAAO,OAAW,IAAc,GAAK,OAAO,SAAS,OACvE,OAAOI,EAAiBJ,EAAWlB,EAAS,SAAU,EAAI,GAAK2B,CACjE,CAoBO,SAASM,EAAgBN,EAAW,IAAa,CACtD,MAAMJ,EAAWW,EAAAA,oBAAA,EACjBhC,EAAsB,CAAE,SAAAqB,EAAU,EAClC,MAAMY,EAASC,EAAAA,UAAA,EAETC,EAAOC,EAAAA,OAAsB,IAAI,EACnCD,EAAK,UAAY,SAAW,QAAUF,EAAO,MAAM,SAAS,UAGhE,MAAMI,EAAQD,EAAAA,OAAsB,IAAI,EAClCE,EAAQC,EAAAA,eAAe,CAC3B,OAASC,IACHA,EAAE,SAAS,WAAaL,EAAK,UAC/BE,EAAM,QAAUtB,EAAQyB,EAAE,SAAS,UAAWnB,CAAQ,GACjDgB,EAAM,QACf,CACD,EACKI,EAAQL,EAAAA,OAAsB,IAAI,EAClCb,EAAYT,EAAKwB,CAAK,EAC5B,OAAIf,GAEEA,IAAckB,EAAM,SAASvB,EAAgBK,CAAS,EAC1DkB,EAAM,QAAUlB,GACPkB,EAAM,UAAY,SAAY,QAAUrB,EAAiB,GAAIC,EAAU,EAAK,GAChFoB,EAAM,SAAWhB,CAC1B,CAMO,SAASiB,GAA0B,CACxC9C,EAAa,IACf,CC3LO,MAAM+C,EAAY,CAAC,CAAE,gBAAAC,EAAiB,WAAAC,EAAa,SAAU,SAAAC,KAA+B,CACjG,MAAMC,EAAK,OAAOH,GAAoB,WAAaA,IAAoBA,EACjEvB,EAAWW,EAAAA,oBAAA,EACXC,EAASC,EAAAA,UAAA,EACflC,EAAsB,CAAE,SAAAqB,EAAU,UAAWwB,CAAA,CAAY,EAIzD,MAAM1B,EAASiB,EAAAA,OAAkC,MAAS,EAC1D,GAAIW,IAAW,QAAU,eAChB5B,EAAO,UAAY,OAAW,CACrC,KAAM,CAAE,SAAAd,EAAU,UAAAW,EAAW,KAAAgC,CAAA,EAASf,EAAO,MAAM,SACnDd,EAAO,QAAUO,EAAqB,GAAGrB,CAAQ,GAAGW,CAAS,GAAGgC,EAAO,IAAIA,CAAI,GAAK,EAAE,EAAE,EAGpF7B,EAAO,UAAY,MAAMuB,EAAA,CAC/B,CACA,MAAMO,EAAWC,EAAAA,QACf,IACEH,EAAK,KACHI,EAAAA,IAACC,EAAAA,SAAA,CACC,GAAIP,EACJ,OAAS1B,EAAO,QAAU,CAAE,CAACE,CAAQ,EAAGF,EAAO,OAAA,EAAY,CAAA,EAC3D,QAAO,EAAA,CAAA,EAGb,CAAC4B,EAAIF,EAAYxB,CAAQ,CAAA,EAI3BgC,OAAAA,EAAAA,UAAU,IAAM,CACVN,GAAIlB,EAAA,CACV,EAAG,CAACkB,CAAE,CAAC,EAEAA,EAAKI,EAAAA,IAAAG,EAAAA,SAAA,CAAG,SAAAR,CAAA,CAAS,EAAMG,CAChC"}

package/dist/{AuthLayout-BI1wLuDl.js → AuthLayout-BDRJFSpi.js}

@@ -1,7 +1,7 @@
 import { jsxs as n, jsx as a } from "react/jsx-runtime";
 import { forwardRef as g } from "react";
 import { clsx as y } from "clsx";
-import { A as f } from "./Avatar-CaYyv5wk.js";
+import { A as f } from "./Avatar-C4qgzth2.js";
 import { T as u } from "./Typography-ChSuxgkc.js";
 const p = "_authLayout_1vumg_3", N = "_logo_1vumg_20", L = "_card_1vumg_36", A = "_icon_1vumg_50", x = "_header_1vumg_55", b = "_body_1vumg_62", j = "_footer_1vumg_68", o = {
   authLayout: p,
@@ -40,4 +40,4 @@ const p = "_authLayout_1vumg_3", N = "_logo_1vumg_20", L = "_card_1vumg_36", A =
 export {
   B as A
 };
-//# sourceMappingURL=AuthLayout-BI1wLuDl.js.map
+//# sourceMappingURL=AuthLayout-BDRJFSpi.js.map

package/dist/{AuthLayout-BI1wLuDl.js.map → AuthLayout-BDRJFSpi.js.map}

@@ -1 +1 @@
-{"version":3,"file":"AuthLayout-BI1wLuDl.js","sources":["../src/components/AuthLayout/AuthLayout.tsx"],"sourcesContent":["import { forwardRef, type CSSProperties, type HTMLAttributes, type ReactNode } from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar } from '../Avatar'\nimport { Typography } from '../Typography'\nimport type { IconName } from '../../icons/names'\nimport styles from './AuthLayout.module.css'\n\nexport interface AuthLayoutProps extends Omit<HTMLAttributes<HTMLDivElement>, 'title'> {\n  /** Heading — the page name (e.g. `\"Login\"`, `\"Forgot Password\"`, `\"Verify Code\"`). */\n  title?: ReactNode\n  /** Muted line under the title (e.g. `\"Enter your email to receive a reset link\"`). */\n  subtitle?: ReactNode\n  /**\n   * Brand slot centered on the canvas, above the card (a logo `<img>` / `<svg>` / any node). The slot\n   * is the constraint box (capped width + height) — an `<img>`/`<svg>` inside fills it 100% (aspect\n   * kept), so you can pass an unsized logo and it's sized/centered for you.\n   */\n  logo?: ReactNode\n  /** Optional glyph in a solid `color`-filled circle above the title — an `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Bottom slot under the form — e.g. a \"Back to login\" / \"Sign up\" link row. */\n  footer?: ReactNode\n  /** Theme token that tints the `icon` circle. Defaults to `accent`. */\n  color?: ThemeColor\n  /** Max width of the centered card in px. Defaults to `400`. */\n  maxWidth?: number\n  /** The auth form (fields + submit) — usually a `<Form>`. */\n  children?: ReactNode\n}\n\n/**\n * A ready-made, centered page frame for **authentication pages** (login, forgot-password,\n * reset-password, OTP, …) — so each page just supplies its `title` + form instead of hand-building the\n * layout. Fills the viewport (`100dvh`) with the app `background` canvas and vertically centers a\n * `logo` (on the canvas, above the card) + an elevated `surface` card, as a group. The card stacks: an\n * optional `icon` (in a solid `color`-filled `Avatar` circle), the `title` + `subtitle` (centered), the\n * `children` (your form), and an optional `footer` (link row). Token-only styling; responsive.\n *\n * @example\n * <AuthLayout title=\"Login\" subtitle=\"Welcome back\" logo={<Logo />}>\n *   <Form form={form}>…</Form>\n * </AuthLayout>\n */\nexport const AuthLayout = forwardRef<HTMLDivElement, AuthLayoutProps>(function AuthLayout(\n  {\n    title,\n    subtitle,\n    logo,\n    icon,\n    footer,\n    color = 'accent',\n    maxWidth = 400,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  return (\n    <div ref={ref} className={clsx(styles.authLayout, className)} style={style} {...props}>\n      {logo != null && <div className={styles.logo}>{logo}</div>}\n      <div className={styles.card} style={{ maxWidth } as CSSProperties}>\n        {icon != null && (\n          <Avatar className={styles.icon} icon={icon} color={color} size=\"lg\" aria-hidden />\n        )}\n        {(title != null || subtitle != null) && (\n          <div className={styles.header}>\n            {title != null && (\n              <Typography variant=\"h2\" align=\"center\">\n                {title}\n              </Typography>\n            )}\n            {subtitle != null && (\n              <Typography color=\"muted\" align=\"center\">\n                {subtitle}\n              </Typography>\n            )}\n          </div>\n        )}\n        {children != null && <div className={styles.body}>{children}</div>}\n        {footer != null && <div className={styles.footer}>{footer}</div>}\n      </div>\n    </div>\n  )\n})\n"],"names":["AuthLayout","forwardRef","title","subtitle","logo","icon","footer","color","maxWidth","className","style","children","props","ref","jsxs","clsx","styles","jsx","Avatar","Typography"],"mappings":";;;;;;;;;;;;;GA4CaA,IAAaC,EAA4C,SACpE;AAAA,EACE,OAAAC;AAAA,EACA,UAAAC;AAAA,EACA,MAAAC;AAAA,EACA,MAAAC;AAAA,EACA,QAAAC;AAAA,EACA,OAAAC,IAAQ;AAAA,EACR,UAAAC,IAAW;AAAA,EACX,WAAAC;AAAA,EACA,OAAAC;AAAA,EACA,UAAAC;AAAA,EACA,GAAGC;AACL,GACAC,GACA;AACA,SACE,gBAAAC,EAAC,OAAA,EAAI,KAAAD,GAAU,WAAWE,EAAKC,EAAO,YAAYP,CAAS,GAAG,OAAAC,GAAe,GAAGE,GAC7E,UAAA;AAAA,IAAAR,KAAQ,QAAQ,gBAAAa,EAAC,OAAA,EAAI,WAAWD,EAAO,MAAO,UAAAZ,GAAK;AAAA,IACpD,gBAAAU,EAAC,SAAI,WAAWE,EAAO,MAAM,OAAO,EAAE,UAAAR,KACnC,UAAA;AAAA,MAAAH,KAAQ,QACP,gBAAAY,EAACC,GAAA,EAAO,WAAWF,EAAO,MAAM,MAAAX,GAAY,OAAAE,GAAc,MAAK,MAAK,eAAW,GAAA,CAAC;AAAA,OAEhFL,KAAS,QAAQC,KAAY,2BAC5B,OAAA,EAAI,WAAWa,EAAO,QACpB,UAAA;AAAA,QAAAd,KAAS,QACR,gBAAAe,EAACE,GAAA,EAAW,SAAQ,MAAK,OAAM,UAC5B,UAAAjB,EAAA,CACH;AAAA,QAEDC,KAAY,QACX,gBAAAc,EAACE,GAAA,EAAW,OAAM,SAAQ,OAAM,UAC7B,UAAAhB,EAAA,CACH;AAAA,MAAA,GAEJ;AAAA,MAEDQ,KAAY,QAAQ,gBAAAM,EAAC,SAAI,WAAWD,EAAO,MAAO,UAAAL,GAAS;AAAA,MAC3DL,KAAU,QAAQ,gBAAAW,EAAC,SAAI,WAAWD,EAAO,QAAS,UAAAV,EAAA,CAAO;AAAA,IAAA,EAAA,CAC5D;AAAA,EAAA,GACF;AAEJ,CAAC;"}
+{"version":3,"file":"AuthLayout-BDRJFSpi.js","sources":["../src/components/AuthLayout/AuthLayout.tsx"],"sourcesContent":["import { forwardRef, type CSSProperties, type HTMLAttributes, type ReactNode } from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar } from '../Avatar'\nimport { Typography } from '../Typography'\nimport type { IconName } from '../../icons/names'\nimport styles from './AuthLayout.module.css'\n\nexport interface AuthLayoutProps extends Omit<HTMLAttributes<HTMLDivElement>, 'title'> {\n  /** Heading — the page name (e.g. `\"Login\"`, `\"Forgot Password\"`, `\"Verify Code\"`). */\n  title?: ReactNode\n  /** Muted line under the title (e.g. `\"Enter your email to receive a reset link\"`). */\n  subtitle?: ReactNode\n  /**\n   * Brand slot centered on the canvas, above the card (a logo `<img>` / `<svg>` / any node). The slot\n   * is the constraint box (capped width + height) — an `<img>`/`<svg>` inside fills it 100% (aspect\n   * kept), so you can pass an unsized logo and it's sized/centered for you.\n   */\n  logo?: ReactNode\n  /** Optional glyph in a solid `color`-filled circle above the title — an `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Bottom slot under the form — e.g. a \"Back to login\" / \"Sign up\" link row. */\n  footer?: ReactNode\n  /** Theme token that tints the `icon` circle. Defaults to `accent`. */\n  color?: ThemeColor\n  /** Max width of the centered card in px. Defaults to `400`. */\n  maxWidth?: number\n  /** The auth form (fields + submit) — usually a `<Form>`. */\n  children?: ReactNode\n}\n\n/**\n * A ready-made, centered page frame for **authentication pages** (login, forgot-password,\n * reset-password, OTP, …) — so each page just supplies its `title` + form instead of hand-building the\n * layout. Fills the viewport (`100dvh`) with the app `background` canvas and vertically centers a\n * `logo` (on the canvas, above the card) + an elevated `surface` card, as a group. The card stacks: an\n * optional `icon` (in a solid `color`-filled `Avatar` circle), the `title` + `subtitle` (centered), the\n * `children` (your form), and an optional `footer` (link row). Token-only styling; responsive.\n *\n * @example\n * <AuthLayout title=\"Login\" subtitle=\"Welcome back\" logo={<Logo />}>\n *   <Form form={form}>…</Form>\n * </AuthLayout>\n */\nexport const AuthLayout = forwardRef<HTMLDivElement, AuthLayoutProps>(function AuthLayout(\n  {\n    title,\n    subtitle,\n    logo,\n    icon,\n    footer,\n    color = 'accent',\n    maxWidth = 400,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  return (\n    <div ref={ref} className={clsx(styles.authLayout, className)} style={style} {...props}>\n      {logo != null && <div className={styles.logo}>{logo}</div>}\n      <div className={styles.card} style={{ maxWidth } as CSSProperties}>\n        {icon != null && (\n          <Avatar className={styles.icon} icon={icon} color={color} size=\"lg\" aria-hidden />\n        )}\n        {(title != null || subtitle != null) && (\n          <div className={styles.header}>\n            {title != null && (\n              <Typography variant=\"h2\" align=\"center\">\n                {title}\n              </Typography>\n            )}\n            {subtitle != null && (\n              <Typography color=\"muted\" align=\"center\">\n                {subtitle}\n              </Typography>\n            )}\n          </div>\n        )}\n        {children != null && <div className={styles.body}>{children}</div>}\n        {footer != null && <div className={styles.footer}>{footer}</div>}\n      </div>\n    </div>\n  )\n})\n"],"names":["AuthLayout","forwardRef","title","subtitle","logo","icon","footer","color","maxWidth","className","style","children","props","ref","jsxs","clsx","styles","jsx","Avatar","Typography"],"mappings":";;;;;;;;;;;;;GA4CaA,IAAaC,EAA4C,SACpE;AAAA,EACE,OAAAC;AAAA,EACA,UAAAC;AAAA,EACA,MAAAC;AAAA,EACA,MAAAC;AAAA,EACA,QAAAC;AAAA,EACA,OAAAC,IAAQ;AAAA,EACR,UAAAC,IAAW;AAAA,EACX,WAAAC;AAAA,EACA,OAAAC;AAAA,EACA,UAAAC;AAAA,EACA,GAAGC;AACL,GACAC,GACA;AACA,SACE,gBAAAC,EAAC,OAAA,EAAI,KAAAD,GAAU,WAAWE,EAAKC,EAAO,YAAYP,CAAS,GAAG,OAAAC,GAAe,GAAGE,GAC7E,UAAA;AAAA,IAAAR,KAAQ,QAAQ,gBAAAa,EAAC,OAAA,EAAI,WAAWD,EAAO,MAAO,UAAAZ,GAAK;AAAA,IACpD,gBAAAU,EAAC,SAAI,WAAWE,EAAO,MAAM,OAAO,EAAE,UAAAR,KACnC,UAAA;AAAA,MAAAH,KAAQ,QACP,gBAAAY,EAACC,GAAA,EAAO,WAAWF,EAAO,MAAM,MAAAX,GAAY,OAAAE,GAAc,MAAK,MAAK,eAAW,GAAA,CAAC;AAAA,OAEhFL,KAAS,QAAQC,KAAY,2BAC5B,OAAA,EAAI,WAAWa,EAAO,QACpB,UAAA;AAAA,QAAAd,KAAS,QACR,gBAAAe,EAACE,GAAA,EAAW,SAAQ,MAAK,OAAM,UAC5B,UAAAjB,EAAA,CACH;AAAA,QAEDC,KAAY,QACX,gBAAAc,EAACE,GAAA,EAAW,OAAM,SAAQ,OAAM,UAC7B,UAAAhB,EAAA,CACH;AAAA,MAAA,GAEJ;AAAA,MAEDQ,KAAY,QAAQ,gBAAAM,EAAC,SAAI,WAAWD,EAAO,MAAO,UAAAL,GAAS;AAAA,MAC3DL,KAAU,QAAQ,gBAAAW,EAAC,SAAI,WAAWD,EAAO,QAAS,UAAAV,EAAA,CAAO;AAAA,IAAA,EAAA,CAC5D;AAAA,EAAA,GACF;AAEJ,CAAC;"}

package/dist/{AuthLayout-Bzlsvicf.cjs → AuthLayout-D7mSMdM4.cjs}

@@ -1,2 +1,2 @@
-"use strict";const a=require("react/jsx-runtime"),g=require("react"),m=require("clsx"),v=require("./Avatar-BBqX1732.cjs"),u=require("./Typography-d97DdbNd.cjs"),x="_authLayout_1vumg_3",j="_logo_1vumg_20",L="_card_1vumg_36",N="_icon_1vumg_50",f="_header_1vumg_55",p="_body_1vumg_62",q="_footer_1vumg_68",o={authLayout:x,logo:j,card:L,icon:N,header:f,body:p,footer:q},A=g.forwardRef(function({title:s,subtitle:e,logo:c,icon:r,footer:n,color:l="accent",maxWidth:d=400,className:i,style:h,children:t,..._},y){return a.jsxs("div",{ref:y,className:m.clsx(o.authLayout,i),style:h,..._,children:[c!=null&&a.jsx("div",{className:o.logo,children:c}),a.jsxs("div",{className:o.card,style:{maxWidth:d},children:[r!=null&&a.jsx(v.Avatar,{className:o.icon,icon:r,color:l,size:"lg","aria-hidden":!0}),(s!=null||e!=null)&&a.jsxs("div",{className:o.header,children:[s!=null&&a.jsx(u.Typography,{variant:"h2",align:"center",children:s}),e!=null&&a.jsx(u.Typography,{color:"muted",align:"center",children:e})]}),t!=null&&a.jsx("div",{className:o.body,children:t}),n!=null&&a.jsx("div",{className:o.footer,children:n})]})]})});exports.AuthLayout=A;
-//# sourceMappingURL=AuthLayout-Bzlsvicf.cjs.map
+"use strict";const a=require("react/jsx-runtime"),g=require("react"),m=require("clsx"),v=require("./Avatar-BwGJl-ru.cjs"),u=require("./Typography-d97DdbNd.cjs"),x="_authLayout_1vumg_3",j="_logo_1vumg_20",L="_card_1vumg_36",N="_icon_1vumg_50",f="_header_1vumg_55",p="_body_1vumg_62",q="_footer_1vumg_68",o={authLayout:x,logo:j,card:L,icon:N,header:f,body:p,footer:q},A=g.forwardRef(function({title:s,subtitle:e,logo:c,icon:r,footer:n,color:l="accent",maxWidth:d=400,className:i,style:h,children:t,..._},y){return a.jsxs("div",{ref:y,className:m.clsx(o.authLayout,i),style:h,..._,children:[c!=null&&a.jsx("div",{className:o.logo,children:c}),a.jsxs("div",{className:o.card,style:{maxWidth:d},children:[r!=null&&a.jsx(v.Avatar,{className:o.icon,icon:r,color:l,size:"lg","aria-hidden":!0}),(s!=null||e!=null)&&a.jsxs("div",{className:o.header,children:[s!=null&&a.jsx(u.Typography,{variant:"h2",align:"center",children:s}),e!=null&&a.jsx(u.Typography,{color:"muted",align:"center",children:e})]}),t!=null&&a.jsx("div",{className:o.body,children:t}),n!=null&&a.jsx("div",{className:o.footer,children:n})]})]})});exports.AuthLayout=A;
+//# sourceMappingURL=AuthLayout-D7mSMdM4.cjs.map

package/dist/{AuthLayout-Bzlsvicf.cjs.map → AuthLayout-D7mSMdM4.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"AuthLayout-Bzlsvicf.cjs","sources":["../src/components/AuthLayout/AuthLayout.tsx"],"sourcesContent":["import { forwardRef, type CSSProperties, type HTMLAttributes, type ReactNode } from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar } from '../Avatar'\nimport { Typography } from '../Typography'\nimport type { IconName } from '../../icons/names'\nimport styles from './AuthLayout.module.css'\n\nexport interface AuthLayoutProps extends Omit<HTMLAttributes<HTMLDivElement>, 'title'> {\n  /** Heading — the page name (e.g. `\"Login\"`, `\"Forgot Password\"`, `\"Verify Code\"`). */\n  title?: ReactNode\n  /** Muted line under the title (e.g. `\"Enter your email to receive a reset link\"`). */\n  subtitle?: ReactNode\n  /**\n   * Brand slot centered on the canvas, above the card (a logo `<img>` / `<svg>` / any node). The slot\n   * is the constraint box (capped width + height) — an `<img>`/`<svg>` inside fills it 100% (aspect\n   * kept), so you can pass an unsized logo and it's sized/centered for you.\n   */\n  logo?: ReactNode\n  /** Optional glyph in a solid `color`-filled circle above the title — an `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Bottom slot under the form — e.g. a \"Back to login\" / \"Sign up\" link row. */\n  footer?: ReactNode\n  /** Theme token that tints the `icon` circle. Defaults to `accent`. */\n  color?: ThemeColor\n  /** Max width of the centered card in px. Defaults to `400`. */\n  maxWidth?: number\n  /** The auth form (fields + submit) — usually a `<Form>`. */\n  children?: ReactNode\n}\n\n/**\n * A ready-made, centered page frame for **authentication pages** (login, forgot-password,\n * reset-password, OTP, …) — so each page just supplies its `title` + form instead of hand-building the\n * layout. Fills the viewport (`100dvh`) with the app `background` canvas and vertically centers a\n * `logo` (on the canvas, above the card) + an elevated `surface` card, as a group. The card stacks: an\n * optional `icon` (in a solid `color`-filled `Avatar` circle), the `title` + `subtitle` (centered), the\n * `children` (your form), and an optional `footer` (link row). Token-only styling; responsive.\n *\n * @example\n * <AuthLayout title=\"Login\" subtitle=\"Welcome back\" logo={<Logo />}>\n *   <Form form={form}>…</Form>\n * </AuthLayout>\n */\nexport const AuthLayout = forwardRef<HTMLDivElement, AuthLayoutProps>(function AuthLayout(\n  {\n    title,\n    subtitle,\n    logo,\n    icon,\n    footer,\n    color = 'accent',\n    maxWidth = 400,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  return (\n    <div ref={ref} className={clsx(styles.authLayout, className)} style={style} {...props}>\n      {logo != null && <div className={styles.logo}>{logo}</div>}\n      <div className={styles.card} style={{ maxWidth } as CSSProperties}>\n        {icon != null && (\n          <Avatar className={styles.icon} icon={icon} color={color} size=\"lg\" aria-hidden />\n        )}\n        {(title != null || subtitle != null) && (\n          <div className={styles.header}>\n            {title != null && (\n              <Typography variant=\"h2\" align=\"center\">\n                {title}\n              </Typography>\n            )}\n            {subtitle != null && (\n              <Typography color=\"muted\" align=\"center\">\n                {subtitle}\n              </Typography>\n            )}\n          </div>\n        )}\n        {children != null && <div className={styles.body}>{children}</div>}\n        {footer != null && <div className={styles.footer}>{footer}</div>}\n      </div>\n    </div>\n  )\n})\n"],"names":["AuthLayout","forwardRef","title","subtitle","logo","icon","footer","color","maxWidth","className","style","children","props","ref","jsxs","clsx","styles","jsx","Avatar","Typography"],"mappings":"8WA4CaA,EAAaC,EAAAA,WAA4C,SACpE,CACE,MAAAC,EACA,SAAAC,EACA,KAAAC,EACA,KAAAC,EACA,OAAAC,EACA,MAAAC,EAAQ,SACR,SAAAC,EAAW,IACX,UAAAC,EACA,MAAAC,EACA,SAAAC,EACA,GAAGC,CACL,EACAC,EACA,CACA,OACEC,EAAAA,KAAC,MAAA,CAAI,IAAAD,EAAU,UAAWE,EAAAA,KAAKC,EAAO,WAAYP,CAAS,EAAG,MAAAC,EAAe,GAAGE,EAC7E,SAAA,CAAAR,GAAQ,MAAQa,EAAAA,IAAC,MAAA,CAAI,UAAWD,EAAO,KAAO,SAAAZ,EAAK,EACpDU,OAAC,OAAI,UAAWE,EAAO,KAAM,MAAO,CAAE,SAAAR,GACnC,SAAA,CAAAH,GAAQ,MACPY,EAAAA,IAACC,EAAAA,OAAA,CAAO,UAAWF,EAAO,KAAM,KAAAX,EAAY,MAAAE,EAAc,KAAK,KAAK,cAAW,EAAA,CAAC,GAEhFL,GAAS,MAAQC,GAAY,cAC5B,MAAA,CAAI,UAAWa,EAAO,OACpB,SAAA,CAAAd,GAAS,MACRe,MAACE,EAAAA,WAAA,CAAW,QAAQ,KAAK,MAAM,SAC5B,SAAAjB,CAAA,CACH,EAEDC,GAAY,MACXc,MAACE,EAAAA,WAAA,CAAW,MAAM,QAAQ,MAAM,SAC7B,SAAAhB,CAAA,CACH,CAAA,EAEJ,EAEDQ,GAAY,MAAQM,EAAAA,IAAC,OAAI,UAAWD,EAAO,KAAO,SAAAL,EAAS,EAC3DL,GAAU,MAAQW,EAAAA,IAAC,OAAI,UAAWD,EAAO,OAAS,SAAAV,CAAA,CAAO,CAAA,CAAA,CAC5D,CAAA,EACF,CAEJ,CAAC"}
+{"version":3,"file":"AuthLayout-D7mSMdM4.cjs","sources":["../src/components/AuthLayout/AuthLayout.tsx"],"sourcesContent":["import { forwardRef, type CSSProperties, type HTMLAttributes, type ReactNode } from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar } from '../Avatar'\nimport { Typography } from '../Typography'\nimport type { IconName } from '../../icons/names'\nimport styles from './AuthLayout.module.css'\n\nexport interface AuthLayoutProps extends Omit<HTMLAttributes<HTMLDivElement>, 'title'> {\n  /** Heading — the page name (e.g. `\"Login\"`, `\"Forgot Password\"`, `\"Verify Code\"`). */\n  title?: ReactNode\n  /** Muted line under the title (e.g. `\"Enter your email to receive a reset link\"`). */\n  subtitle?: ReactNode\n  /**\n   * Brand slot centered on the canvas, above the card (a logo `<img>` / `<svg>` / any node). The slot\n   * is the constraint box (capped width + height) — an `<img>`/`<svg>` inside fills it 100% (aspect\n   * kept), so you can pass an unsized logo and it's sized/centered for you.\n   */\n  logo?: ReactNode\n  /** Optional glyph in a solid `color`-filled circle above the title — an `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Bottom slot under the form — e.g. a \"Back to login\" / \"Sign up\" link row. */\n  footer?: ReactNode\n  /** Theme token that tints the `icon` circle. Defaults to `accent`. */\n  color?: ThemeColor\n  /** Max width of the centered card in px. Defaults to `400`. */\n  maxWidth?: number\n  /** The auth form (fields + submit) — usually a `<Form>`. */\n  children?: ReactNode\n}\n\n/**\n * A ready-made, centered page frame for **authentication pages** (login, forgot-password,\n * reset-password, OTP, …) — so each page just supplies its `title` + form instead of hand-building the\n * layout. Fills the viewport (`100dvh`) with the app `background` canvas and vertically centers a\n * `logo` (on the canvas, above the card) + an elevated `surface` card, as a group. The card stacks: an\n * optional `icon` (in a solid `color`-filled `Avatar` circle), the `title` + `subtitle` (centered), the\n * `children` (your form), and an optional `footer` (link row). Token-only styling; responsive.\n *\n * @example\n * <AuthLayout title=\"Login\" subtitle=\"Welcome back\" logo={<Logo />}>\n *   <Form form={form}>…</Form>\n * </AuthLayout>\n */\nexport const AuthLayout = forwardRef<HTMLDivElement, AuthLayoutProps>(function AuthLayout(\n  {\n    title,\n    subtitle,\n    logo,\n    icon,\n    footer,\n    color = 'accent',\n    maxWidth = 400,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  return (\n    <div ref={ref} className={clsx(styles.authLayout, className)} style={style} {...props}>\n      {logo != null && <div className={styles.logo}>{logo}</div>}\n      <div className={styles.card} style={{ maxWidth } as CSSProperties}>\n        {icon != null && (\n          <Avatar className={styles.icon} icon={icon} color={color} size=\"lg\" aria-hidden />\n        )}\n        {(title != null || subtitle != null) && (\n          <div className={styles.header}>\n            {title != null && (\n              <Typography variant=\"h2\" align=\"center\">\n                {title}\n              </Typography>\n            )}\n            {subtitle != null && (\n              <Typography color=\"muted\" align=\"center\">\n                {subtitle}\n              </Typography>\n            )}\n          </div>\n        )}\n        {children != null && <div className={styles.body}>{children}</div>}\n        {footer != null && <div className={styles.footer}>{footer}</div>}\n      </div>\n    </div>\n  )\n})\n"],"names":["AuthLayout","forwardRef","title","subtitle","logo","icon","footer","color","maxWidth","className","style","children","props","ref","jsxs","clsx","styles","jsx","Avatar","Typography"],"mappings":"8WA4CaA,EAAaC,EAAAA,WAA4C,SACpE,CACE,MAAAC,EACA,SAAAC,EACA,KAAAC,EACA,KAAAC,EACA,OAAAC,EACA,MAAAC,EAAQ,SACR,SAAAC,EAAW,IACX,UAAAC,EACA,MAAAC,EACA,SAAAC,EACA,GAAGC,CACL,EACAC,EACA,CACA,OACEC,EAAAA,KAAC,MAAA,CAAI,IAAAD,EAAU,UAAWE,EAAAA,KAAKC,EAAO,WAAYP,CAAS,EAAG,MAAAC,EAAe,GAAGE,EAC7E,SAAA,CAAAR,GAAQ,MAAQa,EAAAA,IAAC,MAAA,CAAI,UAAWD,EAAO,KAAO,SAAAZ,EAAK,EACpDU,OAAC,OAAI,UAAWE,EAAO,KAAM,MAAO,CAAE,SAAAR,GACnC,SAAA,CAAAH,GAAQ,MACPY,EAAAA,IAACC,EAAAA,OAAA,CAAO,UAAWF,EAAO,KAAM,KAAAX,EAAY,MAAAE,EAAc,KAAK,KAAK,cAAW,EAAA,CAAC,GAEhFL,GAAS,MAAQC,GAAY,cAC5B,MAAA,CAAI,UAAWa,EAAO,OACpB,SAAA,CAAAd,GAAS,MACRe,MAACE,EAAAA,WAAA,CAAW,QAAQ,KAAK,MAAM,SAC5B,SAAAjB,CAAA,CACH,EAEDC,GAAY,MACXc,MAACE,EAAAA,WAAA,CAAW,MAAM,QAAQ,MAAM,SAC7B,SAAAhB,CAAA,CACH,CAAA,EAEJ,EAEDQ,GAAY,MAAQM,EAAAA,IAAC,OAAI,UAAWD,EAAO,KAAO,SAAAL,EAAS,EAC3DL,GAAU,MAAQW,EAAAA,IAAC,OAAI,UAAWD,EAAO,OAAS,SAAAV,CAAA,CAAO,CAAA,CAAA,CAC5D,CAAA,EACF,CAEJ,CAAC"}

package/dist/{Avatar-BBqX1732.cjs → Avatar-BwGJl-ru.cjs}

@@ -1,2 +1,2 @@
-"use strict";const n=require("react/jsx-runtime"),r=require("react"),N=require("clsx"),f=require("./Icon-CBg21lKA.cjs"),R=require("./Skeleton-DK0lAjS9.cjs"),w="_avatar_m3hkg_3",C="_circle_m3hkg_17",L="_square_m3hkg_21",P="_img_m3hkg_25",U="_pending_m3hkg_33",z="_imgPending_m3hkg_36",B="_skeleton_m3hkg_39",M="_fallback_m3hkg_49",O="_sm_m3hkg_55",$="_md_m3hkg_61",F="_lg_m3hkg_67",T="_group_m3hkg_75",W="_item_m3hkg_80",t={avatar:w,circle:C,square:L,img:P,pending:U,imgPending:z,skeleton:B,fallback:M,sm:O,md:$,lg:F,group:T,item:W},D=new Set(f.ICON_NAMES);function G(d){const e=d.trim().split(/\s+/).filter(Boolean);return e.length===0?"":e.length===1?e[0].slice(0,2).toUpperCase():(e[0][0]+e[e.length-1][0]).toUpperCase()}const H=r.forwardRef(function({src:e,alt:q,icon:a,name:m,size:g="md",shape:I="circle",color:k="accent",loading:s=!1,className:S,style:j,children:_,...E},y){const[A,h]=r.useState(!1),[p,u]=r.useState(!1),v=r.useRef(null),b=r.useRef(e);b.current!==e&&(b.current=e,h(!1),u(!1));const o=!s&&!!e&&!A;r.useLayoutEffect(()=>{const i=v.current;i!=null&&i.complete&&i.naturalWidth>0&&u(!0)},[e,o]);const x=s||o&&!p,l=q??m;let c;return a!==void 0?c=typeof a=="string"&&D.has(a)?n.jsx(f.Icon,{name:a,size:g}):a:_!=null&&_!==""?c=_:m?c=G(m):c=n.jsx(f.Icon,{name:"User",size:g}),n.jsxs("div",{ref:y,className:N.clsx(t.avatar,t[g],t[I],x&&t.pending,S),style:{"--tz-btn-rgb":`var(--tz-color-${k}-rgb)`,"--tz-btn-on":`var(--tz-color-${k}-contrast, #fff)`,...j},role:!s&&!o&&l?"img":void 0,"aria-label":!s&&!o&&l?l:void 0,"aria-busy":s||void 0,...E,children:[x&&n.jsx(R.Skeleton,{variant:"rect",width:"100%",height:"100%",className:t.skeleton}),s?null:o?n.jsx("img",{ref:v,src:e,alt:l??"",className:N.clsx(t.img,!p&&t.imgPending),onLoad:()=>u(!0),onError:()=>h(!0)}):n.jsx("span",{className:t.fallback,"aria-hidden":l?!0:void 0,children:c})]})});exports.Avatar=H;exports.styles=t;
-//# sourceMappingURL=Avatar-BBqX1732.cjs.map
+"use strict";const n=require("react/jsx-runtime"),r=require("react"),N=require("clsx"),f=require("./Icon-BoQmbW7j.cjs"),R=require("./Skeleton-DK0lAjS9.cjs"),w="_avatar_m3hkg_3",C="_circle_m3hkg_17",L="_square_m3hkg_21",P="_img_m3hkg_25",U="_pending_m3hkg_33",z="_imgPending_m3hkg_36",B="_skeleton_m3hkg_39",M="_fallback_m3hkg_49",O="_sm_m3hkg_55",$="_md_m3hkg_61",F="_lg_m3hkg_67",T="_group_m3hkg_75",W="_item_m3hkg_80",t={avatar:w,circle:C,square:L,img:P,pending:U,imgPending:z,skeleton:B,fallback:M,sm:O,md:$,lg:F,group:T,item:W},D=new Set(f.ICON_NAMES);function G(d){const e=d.trim().split(/\s+/).filter(Boolean);return e.length===0?"":e.length===1?e[0].slice(0,2).toUpperCase():(e[0][0]+e[e.length-1][0]).toUpperCase()}const H=r.forwardRef(function({src:e,alt:q,icon:a,name:m,size:g="md",shape:I="circle",color:k="accent",loading:s=!1,className:S,style:j,children:_,...E},y){const[A,h]=r.useState(!1),[p,u]=r.useState(!1),v=r.useRef(null),b=r.useRef(e);b.current!==e&&(b.current=e,h(!1),u(!1));const o=!s&&!!e&&!A;r.useLayoutEffect(()=>{const i=v.current;i!=null&&i.complete&&i.naturalWidth>0&&u(!0)},[e,o]);const x=s||o&&!p,l=q??m;let c;return a!==void 0?c=typeof a=="string"&&D.has(a)?n.jsx(f.Icon,{name:a,size:g}):a:_!=null&&_!==""?c=_:m?c=G(m):c=n.jsx(f.Icon,{name:"User",size:g}),n.jsxs("div",{ref:y,className:N.clsx(t.avatar,t[g],t[I],x&&t.pending,S),style:{"--tz-btn-rgb":`var(--tz-color-${k}-rgb)`,"--tz-btn-on":`var(--tz-color-${k}-contrast, #fff)`,...j},role:!s&&!o&&l?"img":void 0,"aria-label":!s&&!o&&l?l:void 0,"aria-busy":s||void 0,...E,children:[x&&n.jsx(R.Skeleton,{variant:"rect",width:"100%",height:"100%",className:t.skeleton}),s?null:o?n.jsx("img",{ref:v,src:e,alt:l??"",className:N.clsx(t.img,!p&&t.imgPending),onLoad:()=>u(!0),onError:()=>h(!0)}):n.jsx("span",{className:t.fallback,"aria-hidden":l?!0:void 0,children:c})]})});exports.Avatar=H;exports.styles=t;
+//# sourceMappingURL=Avatar-BwGJl-ru.cjs.map

package/dist/{Avatar-BBqX1732.cjs.map → Avatar-BwGJl-ru.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"Avatar-BBqX1732.cjs","sources":["../src/components/Avatar/Avatar.tsx"],"sourcesContent":["import {\n  forwardRef,\n  useLayoutEffect,\n  useRef,\n  useState,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Icon } from '../Icon'\nimport { Skeleton } from '../Skeleton'\nimport { ICON_NAMES, type IconName } from '../../icons/names'\nimport styles from './Avatar.module.css'\n\nexport type AvatarSize = 'sm' | 'md' | 'lg'\nexport type AvatarShape = 'circle' | 'square'\n\nexport interface AvatarProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** Image URL. When set (and it loads), the avatar shows the photo; on error it falls back. */\n  src?: string\n  /** Alt text for the image / accessible name for an icon-or-initials avatar (falls back to `name`). */\n  alt?: string\n  /** An icon to show when there's no image — a known `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Full name — used to derive initials (e.g. \"David Savaneli\" → \"DS\") and as the accessible name. */\n  name?: string\n  /** Preset size: `sm` 32 · `md` 40 · `lg` 48 px. Defaults to `md`. */\n  size?: AvatarSize\n  /** `circle` (default) or `square` (rounded rectangle). */\n  shape?: AvatarShape\n  /** Theme palette token for the icon/initials background. Defaults to `accent`. */\n  color?: ThemeColor\n  /**\n   * Render a skeleton disc (same size / shape) instead of any content — while the user is still being\n   * fetched. An image avatar also shows the skeleton on its own until the photo has loaded. Defaults to `false`.\n   */\n  loading?: boolean\n}\n\nconst ICON_NAME_SET = new Set<string>(ICON_NAMES)\n\n/** First letters of the first and last word, uppercased — e.g. \"David Savaneli\" → \"DS\". */\nfunction initialsFromName(name: string): string {\n  const parts = name.trim().split(/\\s+/).filter(Boolean)\n  if (parts.length === 0) return ''\n  if (parts.length === 1) return parts[0].slice(0, 2).toUpperCase()\n  return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase()\n}\n\n/**\n * A user avatar that shows — in priority order — an image (`src`), an `icon`, explicit `children`\n * (e.g. initials `\"D.S.\"`), initials derived from `name`, or a default user icon. If the image fails\n * to load it falls back automatically; until it has loaded (and whenever `loading` is set) a `Skeleton`\n * of the same size / shape stands in. The icon/initials background is tinted by `color` via the\n * shared `--tz-btn-rgb` / `--tz-btn-on` pattern. Token-only styling; pairs with `AvatarGroup`.\n */\nexport const Avatar = forwardRef<HTMLDivElement, AvatarProps>(function Avatar(\n  {\n    src,\n    alt,\n    icon,\n    name,\n    size = 'md',\n    shape = 'circle',\n    color = 'accent',\n    loading = false,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  const [imgError, setImgError] = useState(false)\n  const [imgLoaded, setImgLoaded] = useState(false)\n  const imgRef = useRef<HTMLImageElement>(null)\n  // reset the error when `src` changes, so a new/valid image isn't stuck on the fallback forever\n  // (React-blessed \"adjust state on prop change\" — restarts the render, no fallback flash)\n  const lastSrc = useRef(src)\n  if (lastSrc.current !== src) {\n    lastSrc.current = src\n    setImgError(false)\n    setImgLoaded(false)\n  }\n  const showImage = !loading && Boolean(src) && !imgError\n  // a cached image can finish before React wires `onLoad` — catch that case on mount / src change\n  useLayoutEffect(() => {\n    const img = imgRef.current\n    if (img?.complete && img.naturalWidth > 0) setImgLoaded(true)\n  }, [src, showImage])\n  // skeleton while fetching the user (`loading`) or while the photo is still on its way\n  const pending = loading || (showImage && !imgLoaded)\n  const label = alt ?? name\n\n  let fallback: ReactNode\n  if (icon !== undefined) {\n    fallback =\n      typeof icon === 'string' && ICON_NAME_SET.has(icon) ? (\n        <Icon name={icon as IconName} size={size} />\n      ) : (\n        icon\n      )\n  } else if (children != null && children !== '') {\n    fallback = children\n  } else if (name) {\n    fallback = initialsFromName(name)\n  } else {\n    fallback = <Icon name=\"User\" size={size} />\n  }\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(\n        styles.avatar,\n        styles[size],\n        styles[shape],\n        pending && styles.pending,\n        className,\n      )}\n      style={\n        {\n          '--tz-btn-rgb': `var(--tz-color-${color}-rgb)`,\n          '--tz-btn-on': `var(--tz-color-${color}-contrast, #fff)`,\n          ...style,\n        } as CSSProperties\n      }\n      role={!loading && !showImage && label ? 'img' : undefined}\n      aria-label={!loading && !showImage && label ? label : undefined}\n      aria-busy={loading || undefined}\n      {...props}\n    >\n      {pending && (\n        <Skeleton variant=\"rect\" width=\"100%\" height=\"100%\" className={styles.skeleton} />\n      )}\n      {loading ? null : showImage ? (\n        <img\n          ref={imgRef}\n          src={src}\n          alt={label ?? ''}\n          className={clsx(styles.img, !imgLoaded && styles.imgPending)}\n          onLoad={() => setImgLoaded(true)}\n          onError={() => setImgError(true)}\n        />\n      ) : (\n        <span className={styles.fallback} aria-hidden={label ? true : undefined}>\n          {fallback}\n        </span>\n      )}\n    </div>\n  )\n})\n"],"names":["ICON_NAME_SET","ICON_NAMES","initialsFromName","name","parts","Avatar","forwardRef","src","alt","icon","size","shape","color","loading","className","style","children","props","ref","imgError","setImgError","useState","imgLoaded","setImgLoaded","imgRef","useRef","lastSrc","showImage","useLayoutEffect","img","pending","label","fallback","jsx","Icon","jsxs","clsx","styles","Skeleton"],"mappings":"ohBAyCMA,EAAgB,IAAI,IAAYC,YAAU,EAGhD,SAASC,EAAiBC,EAAsB,CAC9C,MAAMC,EAAQD,EAAK,KAAA,EAAO,MAAM,KAAK,EAAE,OAAO,OAAO,EACrD,OAAIC,EAAM,SAAW,EAAU,GAC3BA,EAAM,SAAW,EAAUA,EAAM,CAAC,EAAE,MAAM,EAAG,CAAC,EAAE,YAAA,GAC5CA,EAAM,CAAC,EAAE,CAAC,EAAIA,EAAMA,EAAM,OAAS,CAAC,EAAE,CAAC,GAAG,YAAA,CACpD,CASO,MAAMC,EAASC,EAAAA,WAAwC,SAC5D,CACE,IAAAC,EACA,IAAAC,EACA,KAAAC,EACA,KAAAN,EACA,KAAAO,EAAO,KACP,MAAAC,EAAQ,SACR,MAAAC,EAAQ,SACR,QAAAC,EAAU,GACV,UAAAC,EACA,MAAAC,EACA,SAAAC,EACA,GAAGC,CACL,EACAC,EACA,CACA,KAAM,CAACC,EAAUC,CAAW,EAAIC,EAAAA,SAAS,EAAK,EACxC,CAACC,EAAWC,CAAY,EAAIF,EAAAA,SAAS,EAAK,EAC1CG,EAASC,EAAAA,OAAyB,IAAI,EAGtCC,EAAUD,EAAAA,OAAOlB,CAAG,EACtBmB,EAAQ,UAAYnB,IACtBmB,EAAQ,QAAUnB,EAClBa,EAAY,EAAK,EACjBG,EAAa,EAAK,GAEpB,MAAMI,EAAY,CAACd,GAAW,EAAQN,GAAQ,CAACY,EAE/CS,EAAAA,gBAAgB,IAAM,CACpB,MAAMC,EAAML,EAAO,QACfK,GAAA,MAAAA,EAAK,UAAYA,EAAI,aAAe,KAAgB,EAAI,CAC9D,EAAG,CAACtB,EAAKoB,CAAS,CAAC,EAEnB,MAAMG,EAAUjB,GAAYc,GAAa,CAACL,EACpCS,EAAQvB,GAAOL,EAErB,IAAI6B,EACJ,OAAIvB,IAAS,OACXuB,EACE,OAAOvB,GAAS,UAAYT,EAAc,IAAIS,CAAI,EAChDwB,EAAAA,IAACC,EAAAA,KAAA,CAAK,KAAMzB,EAAkB,KAAAC,CAAA,CAAY,EAE1CD,EAEKO,GAAY,MAAQA,IAAa,GAC1CgB,EAAWhB,EACFb,EACT6B,EAAW9B,EAAiBC,CAAI,EAEhC6B,EAAWC,EAAAA,IAACC,EAAAA,KAAA,CAAK,KAAK,OAAO,KAAAxB,EAAY,EAIzCyB,EAAAA,KAAC,MAAA,CACC,IAAAjB,EACA,UAAWkB,EAAAA,KACTC,EAAO,OACPA,EAAO3B,CAAI,EACX2B,EAAO1B,CAAK,EACZmB,GAAWO,EAAO,QAClBvB,CAAA,EAEF,MACE,CACE,eAAgB,kBAAkBF,CAAK,QACvC,cAAe,kBAAkBA,CAAK,mBACtC,GAAGG,CAAA,EAGP,KAAM,CAACF,GAAW,CAACc,GAAaI,EAAQ,MAAQ,OAChD,aAAY,CAAClB,GAAW,CAACc,GAAaI,EAAQA,EAAQ,OACtD,YAAWlB,GAAW,OACrB,GAAGI,EAEH,SAAA,CAAAa,GACCG,EAAAA,IAACK,EAAAA,SAAA,CAAS,QAAQ,OAAO,MAAM,OAAO,OAAO,OAAO,UAAWD,EAAO,QAAA,CAAU,EAEjFxB,EAAU,KAAOc,EAChBM,EAAAA,IAAC,MAAA,CACC,IAAKT,EACL,IAAAjB,EACA,IAAKwB,GAAS,GACd,UAAWK,EAAAA,KAAKC,EAAO,IAAK,CAACf,GAAae,EAAO,UAAU,EAC3D,OAAQ,IAAMd,EAAa,EAAI,EAC/B,QAAS,IAAMH,EAAY,EAAI,CAAA,CAAA,EAGjCa,MAAC,OAAA,CAAK,UAAWI,EAAO,SAAU,cAAaN,EAAQ,GAAO,OAC3D,SAAAC,CAAA,CACH,CAAA,CAAA,CAAA,CAIR,CAAC"}
+{"version":3,"file":"Avatar-BwGJl-ru.cjs","sources":["../src/components/Avatar/Avatar.tsx"],"sourcesContent":["import {\n  forwardRef,\n  useLayoutEffect,\n  useRef,\n  useState,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Icon } from '../Icon'\nimport { Skeleton } from '../Skeleton'\nimport { ICON_NAMES, type IconName } from '../../icons/names'\nimport styles from './Avatar.module.css'\n\nexport type AvatarSize = 'sm' | 'md' | 'lg'\nexport type AvatarShape = 'circle' | 'square'\n\nexport interface AvatarProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** Image URL. When set (and it loads), the avatar shows the photo; on error it falls back. */\n  src?: string\n  /** Alt text for the image / accessible name for an icon-or-initials avatar (falls back to `name`). */\n  alt?: string\n  /** An icon to show when there's no image — a known `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Full name — used to derive initials (e.g. \"David Savaneli\" → \"DS\") and as the accessible name. */\n  name?: string\n  /** Preset size: `sm` 32 · `md` 40 · `lg` 48 px. Defaults to `md`. */\n  size?: AvatarSize\n  /** `circle` (default) or `square` (rounded rectangle). */\n  shape?: AvatarShape\n  /** Theme palette token for the icon/initials background. Defaults to `accent`. */\n  color?: ThemeColor\n  /**\n   * Render a skeleton disc (same size / shape) instead of any content — while the user is still being\n   * fetched. An image avatar also shows the skeleton on its own until the photo has loaded. Defaults to `false`.\n   */\n  loading?: boolean\n}\n\nconst ICON_NAME_SET = new Set<string>(ICON_NAMES)\n\n/** First letters of the first and last word, uppercased — e.g. \"David Savaneli\" → \"DS\". */\nfunction initialsFromName(name: string): string {\n  const parts = name.trim().split(/\\s+/).filter(Boolean)\n  if (parts.length === 0) return ''\n  if (parts.length === 1) return parts[0].slice(0, 2).toUpperCase()\n  return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase()\n}\n\n/**\n * A user avatar that shows — in priority order — an image (`src`), an `icon`, explicit `children`\n * (e.g. initials `\"D.S.\"`), initials derived from `name`, or a default user icon. If the image fails\n * to load it falls back automatically; until it has loaded (and whenever `loading` is set) a `Skeleton`\n * of the same size / shape stands in. The icon/initials background is tinted by `color` via the\n * shared `--tz-btn-rgb` / `--tz-btn-on` pattern. Token-only styling; pairs with `AvatarGroup`.\n */\nexport const Avatar = forwardRef<HTMLDivElement, AvatarProps>(function Avatar(\n  {\n    src,\n    alt,\n    icon,\n    name,\n    size = 'md',\n    shape = 'circle',\n    color = 'accent',\n    loading = false,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  const [imgError, setImgError] = useState(false)\n  const [imgLoaded, setImgLoaded] = useState(false)\n  const imgRef = useRef<HTMLImageElement>(null)\n  // reset the error when `src` changes, so a new/valid image isn't stuck on the fallback forever\n  // (React-blessed \"adjust state on prop change\" — restarts the render, no fallback flash)\n  const lastSrc = useRef(src)\n  if (lastSrc.current !== src) {\n    lastSrc.current = src\n    setImgError(false)\n    setImgLoaded(false)\n  }\n  const showImage = !loading && Boolean(src) && !imgError\n  // a cached image can finish before React wires `onLoad` — catch that case on mount / src change\n  useLayoutEffect(() => {\n    const img = imgRef.current\n    if (img?.complete && img.naturalWidth > 0) setImgLoaded(true)\n  }, [src, showImage])\n  // skeleton while fetching the user (`loading`) or while the photo is still on its way\n  const pending = loading || (showImage && !imgLoaded)\n  const label = alt ?? name\n\n  let fallback: ReactNode\n  if (icon !== undefined) {\n    fallback =\n      typeof icon === 'string' && ICON_NAME_SET.has(icon) ? (\n        <Icon name={icon as IconName} size={size} />\n      ) : (\n        icon\n      )\n  } else if (children != null && children !== '') {\n    fallback = children\n  } else if (name) {\n    fallback = initialsFromName(name)\n  } else {\n    fallback = <Icon name=\"User\" size={size} />\n  }\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(\n        styles.avatar,\n        styles[size],\n        styles[shape],\n        pending && styles.pending,\n        className,\n      )}\n      style={\n        {\n          '--tz-btn-rgb': `var(--tz-color-${color}-rgb)`,\n          '--tz-btn-on': `var(--tz-color-${color}-contrast, #fff)`,\n          ...style,\n        } as CSSProperties\n      }\n      role={!loading && !showImage && label ? 'img' : undefined}\n      aria-label={!loading && !showImage && label ? label : undefined}\n      aria-busy={loading || undefined}\n      {...props}\n    >\n      {pending && (\n        <Skeleton variant=\"rect\" width=\"100%\" height=\"100%\" className={styles.skeleton} />\n      )}\n      {loading ? null : showImage ? (\n        <img\n          ref={imgRef}\n          src={src}\n          alt={label ?? ''}\n          className={clsx(styles.img, !imgLoaded && styles.imgPending)}\n          onLoad={() => setImgLoaded(true)}\n          onError={() => setImgError(true)}\n        />\n      ) : (\n        <span className={styles.fallback} aria-hidden={label ? true : undefined}>\n          {fallback}\n        </span>\n      )}\n    </div>\n  )\n})\n"],"names":["ICON_NAME_SET","ICON_NAMES","initialsFromName","name","parts","Avatar","forwardRef","src","alt","icon","size","shape","color","loading","className","style","children","props","ref","imgError","setImgError","useState","imgLoaded","setImgLoaded","imgRef","useRef","lastSrc","showImage","useLayoutEffect","img","pending","label","fallback","jsx","Icon","jsxs","clsx","styles","Skeleton"],"mappings":"ohBAyCMA,EAAgB,IAAI,IAAYC,YAAU,EAGhD,SAASC,EAAiBC,EAAsB,CAC9C,MAAMC,EAAQD,EAAK,KAAA,EAAO,MAAM,KAAK,EAAE,OAAO,OAAO,EACrD,OAAIC,EAAM,SAAW,EAAU,GAC3BA,EAAM,SAAW,EAAUA,EAAM,CAAC,EAAE,MAAM,EAAG,CAAC,EAAE,YAAA,GAC5CA,EAAM,CAAC,EAAE,CAAC,EAAIA,EAAMA,EAAM,OAAS,CAAC,EAAE,CAAC,GAAG,YAAA,CACpD,CASO,MAAMC,EAASC,EAAAA,WAAwC,SAC5D,CACE,IAAAC,EACA,IAAAC,EACA,KAAAC,EACA,KAAAN,EACA,KAAAO,EAAO,KACP,MAAAC,EAAQ,SACR,MAAAC,EAAQ,SACR,QAAAC,EAAU,GACV,UAAAC,EACA,MAAAC,EACA,SAAAC,EACA,GAAGC,CACL,EACAC,EACA,CACA,KAAM,CAACC,EAAUC,CAAW,EAAIC,EAAAA,SAAS,EAAK,EACxC,CAACC,EAAWC,CAAY,EAAIF,EAAAA,SAAS,EAAK,EAC1CG,EAASC,EAAAA,OAAyB,IAAI,EAGtCC,EAAUD,EAAAA,OAAOlB,CAAG,EACtBmB,EAAQ,UAAYnB,IACtBmB,EAAQ,QAAUnB,EAClBa,EAAY,EAAK,EACjBG,EAAa,EAAK,GAEpB,MAAMI,EAAY,CAACd,GAAW,EAAQN,GAAQ,CAACY,EAE/CS,EAAAA,gBAAgB,IAAM,CACpB,MAAMC,EAAML,EAAO,QACfK,GAAA,MAAAA,EAAK,UAAYA,EAAI,aAAe,KAAgB,EAAI,CAC9D,EAAG,CAACtB,EAAKoB,CAAS,CAAC,EAEnB,MAAMG,EAAUjB,GAAYc,GAAa,CAACL,EACpCS,EAAQvB,GAAOL,EAErB,IAAI6B,EACJ,OAAIvB,IAAS,OACXuB,EACE,OAAOvB,GAAS,UAAYT,EAAc,IAAIS,CAAI,EAChDwB,EAAAA,IAACC,EAAAA,KAAA,CAAK,KAAMzB,EAAkB,KAAAC,CAAA,CAAY,EAE1CD,EAEKO,GAAY,MAAQA,IAAa,GAC1CgB,EAAWhB,EACFb,EACT6B,EAAW9B,EAAiBC,CAAI,EAEhC6B,EAAWC,EAAAA,IAACC,EAAAA,KAAA,CAAK,KAAK,OAAO,KAAAxB,EAAY,EAIzCyB,EAAAA,KAAC,MAAA,CACC,IAAAjB,EACA,UAAWkB,EAAAA,KACTC,EAAO,OACPA,EAAO3B,CAAI,EACX2B,EAAO1B,CAAK,EACZmB,GAAWO,EAAO,QAClBvB,CAAA,EAEF,MACE,CACE,eAAgB,kBAAkBF,CAAK,QACvC,cAAe,kBAAkBA,CAAK,mBACtC,GAAGG,CAAA,EAGP,KAAM,CAACF,GAAW,CAACc,GAAaI,EAAQ,MAAQ,OAChD,aAAY,CAAClB,GAAW,CAACc,GAAaI,EAAQA,EAAQ,OACtD,YAAWlB,GAAW,OACrB,GAAGI,EAEH,SAAA,CAAAa,GACCG,EAAAA,IAACK,EAAAA,SAAA,CAAS,QAAQ,OAAO,MAAM,OAAO,OAAO,OAAO,UAAWD,EAAO,QAAA,CAAU,EAEjFxB,EAAU,KAAOc,EAChBM,EAAAA,IAAC,MAAA,CACC,IAAKT,EACL,IAAAjB,EACA,IAAKwB,GAAS,GACd,UAAWK,EAAAA,KAAKC,EAAO,IAAK,CAACf,GAAae,EAAO,UAAU,EAC3D,OAAQ,IAAMd,EAAa,EAAI,EAC/B,QAAS,IAAMH,EAAY,EAAI,CAAA,CAAA,EAGjCa,MAAC,OAAA,CAAK,UAAWI,EAAO,SAAU,cAAaN,EAAQ,GAAO,OAC3D,SAAAC,CAAA,CACH,CAAA,CAAA,CAAA,CAIR,CAAC"}

package/dist/{Avatar-CaYyv5wk.js → Avatar-C4qgzth2.js}

@@ -1,7 +1,7 @@
 import { jsx as l, jsxs as P } from "react/jsx-runtime";
 import { forwardRef as q, useState as b, useRef as N, useLayoutEffect as R } from "react";
 import { clsx as E } from "clsx";
-import { b as S, a as U } from "./Icon-B7DJn8Tw.js";
+import { b as S, a as U } from "./Icon-DMMO32p6.js";
 import { S as j } from "./Skeleton-_-uGax2j.js";
 const z = "_avatar_m3hkg_3", B = "_circle_m3hkg_17", M = "_square_m3hkg_21", O = "_img_m3hkg_25", $ = "_pending_m3hkg_33", F = "_imgPending_m3hkg_36", T = "_skeleton_m3hkg_39", W = "_fallback_m3hkg_49", D = "_sm_m3hkg_55", G = "_md_m3hkg_61", H = "_lg_m3hkg_67", J = "_group_m3hkg_75", K = "_item_m3hkg_80", e = {
   avatar: z,
@@ -86,4 +86,4 @@ export {
   at as A,
   e as s
 };
-//# sourceMappingURL=Avatar-CaYyv5wk.js.map
+//# sourceMappingURL=Avatar-C4qgzth2.js.map

package/dist/{Avatar-CaYyv5wk.js.map → Avatar-C4qgzth2.js.map}

@@ -1 +1 @@
-{"version":3,"file":"Avatar-CaYyv5wk.js","sources":["../src/components/Avatar/Avatar.tsx"],"sourcesContent":["import {\n  forwardRef,\n  useLayoutEffect,\n  useRef,\n  useState,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Icon } from '../Icon'\nimport { Skeleton } from '../Skeleton'\nimport { ICON_NAMES, type IconName } from '../../icons/names'\nimport styles from './Avatar.module.css'\n\nexport type AvatarSize = 'sm' | 'md' | 'lg'\nexport type AvatarShape = 'circle' | 'square'\n\nexport interface AvatarProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** Image URL. When set (and it loads), the avatar shows the photo; on error it falls back. */\n  src?: string\n  /** Alt text for the image / accessible name for an icon-or-initials avatar (falls back to `name`). */\n  alt?: string\n  /** An icon to show when there's no image — a known `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Full name — used to derive initials (e.g. \"David Savaneli\" → \"DS\") and as the accessible name. */\n  name?: string\n  /** Preset size: `sm` 32 · `md` 40 · `lg` 48 px. Defaults to `md`. */\n  size?: AvatarSize\n  /** `circle` (default) or `square` (rounded rectangle). */\n  shape?: AvatarShape\n  /** Theme palette token for the icon/initials background. Defaults to `accent`. */\n  color?: ThemeColor\n  /**\n   * Render a skeleton disc (same size / shape) instead of any content — while the user is still being\n   * fetched. An image avatar also shows the skeleton on its own until the photo has loaded. Defaults to `false`.\n   */\n  loading?: boolean\n}\n\nconst ICON_NAME_SET = new Set<string>(ICON_NAMES)\n\n/** First letters of the first and last word, uppercased — e.g. \"David Savaneli\" → \"DS\". */\nfunction initialsFromName(name: string): string {\n  const parts = name.trim().split(/\\s+/).filter(Boolean)\n  if (parts.length === 0) return ''\n  if (parts.length === 1) return parts[0].slice(0, 2).toUpperCase()\n  return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase()\n}\n\n/**\n * A user avatar that shows — in priority order — an image (`src`), an `icon`, explicit `children`\n * (e.g. initials `\"D.S.\"`), initials derived from `name`, or a default user icon. If the image fails\n * to load it falls back automatically; until it has loaded (and whenever `loading` is set) a `Skeleton`\n * of the same size / shape stands in. The icon/initials background is tinted by `color` via the\n * shared `--tz-btn-rgb` / `--tz-btn-on` pattern. Token-only styling; pairs with `AvatarGroup`.\n */\nexport const Avatar = forwardRef<HTMLDivElement, AvatarProps>(function Avatar(\n  {\n    src,\n    alt,\n    icon,\n    name,\n    size = 'md',\n    shape = 'circle',\n    color = 'accent',\n    loading = false,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  const [imgError, setImgError] = useState(false)\n  const [imgLoaded, setImgLoaded] = useState(false)\n  const imgRef = useRef<HTMLImageElement>(null)\n  // reset the error when `src` changes, so a new/valid image isn't stuck on the fallback forever\n  // (React-blessed \"adjust state on prop change\" — restarts the render, no fallback flash)\n  const lastSrc = useRef(src)\n  if (lastSrc.current !== src) {\n    lastSrc.current = src\n    setImgError(false)\n    setImgLoaded(false)\n  }\n  const showImage = !loading && Boolean(src) && !imgError\n  // a cached image can finish before React wires `onLoad` — catch that case on mount / src change\n  useLayoutEffect(() => {\n    const img = imgRef.current\n    if (img?.complete && img.naturalWidth > 0) setImgLoaded(true)\n  }, [src, showImage])\n  // skeleton while fetching the user (`loading`) or while the photo is still on its way\n  const pending = loading || (showImage && !imgLoaded)\n  const label = alt ?? name\n\n  let fallback: ReactNode\n  if (icon !== undefined) {\n    fallback =\n      typeof icon === 'string' && ICON_NAME_SET.has(icon) ? (\n        <Icon name={icon as IconName} size={size} />\n      ) : (\n        icon\n      )\n  } else if (children != null && children !== '') {\n    fallback = children\n  } else if (name) {\n    fallback = initialsFromName(name)\n  } else {\n    fallback = <Icon name=\"User\" size={size} />\n  }\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(\n        styles.avatar,\n        styles[size],\n        styles[shape],\n        pending && styles.pending,\n        className,\n      )}\n      style={\n        {\n          '--tz-btn-rgb': `var(--tz-color-${color}-rgb)`,\n          '--tz-btn-on': `var(--tz-color-${color}-contrast, #fff)`,\n          ...style,\n        } as CSSProperties\n      }\n      role={!loading && !showImage && label ? 'img' : undefined}\n      aria-label={!loading && !showImage && label ? label : undefined}\n      aria-busy={loading || undefined}\n      {...props}\n    >\n      {pending && (\n        <Skeleton variant=\"rect\" width=\"100%\" height=\"100%\" className={styles.skeleton} />\n      )}\n      {loading ? null : showImage ? (\n        <img\n          ref={imgRef}\n          src={src}\n          alt={label ?? ''}\n          className={clsx(styles.img, !imgLoaded && styles.imgPending)}\n          onLoad={() => setImgLoaded(true)}\n          onError={() => setImgError(true)}\n        />\n      ) : (\n        <span className={styles.fallback} aria-hidden={label ? true : undefined}>\n          {fallback}\n        </span>\n      )}\n    </div>\n  )\n})\n"],"names":["ICON_NAME_SET","ICON_NAMES","initialsFromName","name","parts","Avatar","forwardRef","src","alt","icon","size","shape","color","loading","className","style","children","props","ref","imgError","setImgError","useState","imgLoaded","setImgLoaded","imgRef","useRef","lastSrc","showImage","useLayoutEffect","img","pending","label","fallback","jsx","Icon","jsxs","clsx","styles","Skeleton"],"mappings":";;;;;;;;;;;;;;;;;;;GAyCMA,IAAgB,IAAI,IAAYC,CAAU;AAGhD,SAASC,EAAiBC,GAAsB;AAC9C,QAAMC,IAAQD,EAAK,KAAA,EAAO,MAAM,KAAK,EAAE,OAAO,OAAO;AACrD,SAAIC,EAAM,WAAW,IAAU,KAC3BA,EAAM,WAAW,IAAUA,EAAM,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,YAAA,KAC5CA,EAAM,CAAC,EAAE,CAAC,IAAIA,EAAMA,EAAM,SAAS,CAAC,EAAE,CAAC,GAAG,YAAA;AACpD;AASO,MAAMC,KAASC,EAAwC,SAC5D;AAAA,EACE,KAAAC;AAAA,EACA,KAAAC;AAAA,EACA,MAAAC;AAAA,EACA,MAAAN;AAAA,EACA,MAAAO,IAAO;AAAA,EACP,OAAAC,IAAQ;AAAA,EACR,OAAAC,IAAQ;AAAA,EACR,SAAAC,IAAU;AAAA,EACV,WAAAC;AAAA,EACA,OAAAC;AAAA,EACA,UAAAC;AAAA,EACA,GAAGC;AACL,GACAC,GACA;AACA,QAAM,CAACC,GAAUC,CAAW,IAAIC,EAAS,EAAK,GACxC,CAACC,GAAWC,CAAY,IAAIF,EAAS,EAAK,GAC1CG,IAASC,EAAyB,IAAI,GAGtCC,IAAUD,EAAOlB,CAAG;AAC1B,EAAImB,EAAQ,YAAYnB,MACtBmB,EAAQ,UAAUnB,GAClBa,EAAY,EAAK,GACjBG,EAAa,EAAK;AAEpB,QAAMI,IAAY,CAACd,KAAW,EAAQN,KAAQ,CAACY;AAE/C,EAAAS,EAAgB,MAAM;AACpB,UAAMC,IAAML,EAAO;AACnB,IAAIK,KAAA,QAAAA,EAAK,YAAYA,EAAI,eAAe,OAAgB,EAAI;AAAA,EAC9D,GAAG,CAACtB,GAAKoB,CAAS,CAAC;AAEnB,QAAMG,IAAUjB,KAAYc,KAAa,CAACL,GACpCS,IAAQvB,KAAOL;AAErB,MAAI6B;AACJ,SAAIvB,MAAS,SACXuB,IACE,OAAOvB,KAAS,YAAYT,EAAc,IAAIS,CAAI,IAChD,gBAAAwB,EAACC,GAAA,EAAK,MAAMzB,GAAkB,MAAAC,EAAA,CAAY,IAE1CD,IAEKO,KAAY,QAAQA,MAAa,KAC1CgB,IAAWhB,IACFb,IACT6B,IAAW9B,EAAiBC,CAAI,IAEhC6B,IAAW,gBAAAC,EAACC,GAAA,EAAK,MAAK,QAAO,MAAAxB,GAAY,GAIzC,gBAAAyB;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,KAAAjB;AAAA,MACA,WAAWkB;AAAA,QACTC,EAAO;AAAA,QACPA,EAAO3B,CAAI;AAAA,QACX2B,EAAO1B,CAAK;AAAA,QACZmB,KAAWO,EAAO;AAAA,QAClBvB;AAAA,MAAA;AAAA,MAEF,OACE;AAAA,QACE,gBAAgB,kBAAkBF,CAAK;AAAA,QACvC,eAAe,kBAAkBA,CAAK;AAAA,QACtC,GAAGG;AAAA,MAAA;AAAA,MAGP,MAAM,CAACF,KAAW,CAACc,KAAaI,IAAQ,QAAQ;AAAA,MAChD,cAAY,CAAClB,KAAW,CAACc,KAAaI,IAAQA,IAAQ;AAAA,MACtD,aAAWlB,KAAW;AAAA,MACrB,GAAGI;AAAA,MAEH,UAAA;AAAA,QAAAa,KACC,gBAAAG,EAACK,GAAA,EAAS,SAAQ,QAAO,OAAM,QAAO,QAAO,QAAO,WAAWD,EAAO,SAAA,CAAU;AAAA,QAEjFxB,IAAU,OAAOc,IAChB,gBAAAM;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,KAAKT;AAAA,YACL,KAAAjB;AAAA,YACA,KAAKwB,KAAS;AAAA,YACd,WAAWK,EAAKC,EAAO,KAAK,CAACf,KAAae,EAAO,UAAU;AAAA,YAC3D,QAAQ,MAAMd,EAAa,EAAI;AAAA,YAC/B,SAAS,MAAMH,EAAY,EAAI;AAAA,UAAA;AAAA,QAAA,IAGjC,gBAAAa,EAAC,QAAA,EAAK,WAAWI,EAAO,UAAU,eAAaN,IAAQ,KAAO,QAC3D,UAAAC,EAAA,CACH;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAIR,CAAC;"}
+{"version":3,"file":"Avatar-C4qgzth2.js","sources":["../src/components/Avatar/Avatar.tsx"],"sourcesContent":["import {\n  forwardRef,\n  useLayoutEffect,\n  useRef,\n  useState,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Icon } from '../Icon'\nimport { Skeleton } from '../Skeleton'\nimport { ICON_NAMES, type IconName } from '../../icons/names'\nimport styles from './Avatar.module.css'\n\nexport type AvatarSize = 'sm' | 'md' | 'lg'\nexport type AvatarShape = 'circle' | 'square'\n\nexport interface AvatarProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** Image URL. When set (and it loads), the avatar shows the photo; on error it falls back. */\n  src?: string\n  /** Alt text for the image / accessible name for an icon-or-initials avatar (falls back to `name`). */\n  alt?: string\n  /** An icon to show when there's no image — a known `IconName` or any node. */\n  icon?: IconName | ReactNode\n  /** Full name — used to derive initials (e.g. \"David Savaneli\" → \"DS\") and as the accessible name. */\n  name?: string\n  /** Preset size: `sm` 32 · `md` 40 · `lg` 48 px. Defaults to `md`. */\n  size?: AvatarSize\n  /** `circle` (default) or `square` (rounded rectangle). */\n  shape?: AvatarShape\n  /** Theme palette token for the icon/initials background. Defaults to `accent`. */\n  color?: ThemeColor\n  /**\n   * Render a skeleton disc (same size / shape) instead of any content — while the user is still being\n   * fetched. An image avatar also shows the skeleton on its own until the photo has loaded. Defaults to `false`.\n   */\n  loading?: boolean\n}\n\nconst ICON_NAME_SET = new Set<string>(ICON_NAMES)\n\n/** First letters of the first and last word, uppercased — e.g. \"David Savaneli\" → \"DS\". */\nfunction initialsFromName(name: string): string {\n  const parts = name.trim().split(/\\s+/).filter(Boolean)\n  if (parts.length === 0) return ''\n  if (parts.length === 1) return parts[0].slice(0, 2).toUpperCase()\n  return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase()\n}\n\n/**\n * A user avatar that shows — in priority order — an image (`src`), an `icon`, explicit `children`\n * (e.g. initials `\"D.S.\"`), initials derived from `name`, or a default user icon. If the image fails\n * to load it falls back automatically; until it has loaded (and whenever `loading` is set) a `Skeleton`\n * of the same size / shape stands in. The icon/initials background is tinted by `color` via the\n * shared `--tz-btn-rgb` / `--tz-btn-on` pattern. Token-only styling; pairs with `AvatarGroup`.\n */\nexport const Avatar = forwardRef<HTMLDivElement, AvatarProps>(function Avatar(\n  {\n    src,\n    alt,\n    icon,\n    name,\n    size = 'md',\n    shape = 'circle',\n    color = 'accent',\n    loading = false,\n    className,\n    style,\n    children,\n    ...props\n  },\n  ref,\n) {\n  const [imgError, setImgError] = useState(false)\n  const [imgLoaded, setImgLoaded] = useState(false)\n  const imgRef = useRef<HTMLImageElement>(null)\n  // reset the error when `src` changes, so a new/valid image isn't stuck on the fallback forever\n  // (React-blessed \"adjust state on prop change\" — restarts the render, no fallback flash)\n  const lastSrc = useRef(src)\n  if (lastSrc.current !== src) {\n    lastSrc.current = src\n    setImgError(false)\n    setImgLoaded(false)\n  }\n  const showImage = !loading && Boolean(src) && !imgError\n  // a cached image can finish before React wires `onLoad` — catch that case on mount / src change\n  useLayoutEffect(() => {\n    const img = imgRef.current\n    if (img?.complete && img.naturalWidth > 0) setImgLoaded(true)\n  }, [src, showImage])\n  // skeleton while fetching the user (`loading`) or while the photo is still on its way\n  const pending = loading || (showImage && !imgLoaded)\n  const label = alt ?? name\n\n  let fallback: ReactNode\n  if (icon !== undefined) {\n    fallback =\n      typeof icon === 'string' && ICON_NAME_SET.has(icon) ? (\n        <Icon name={icon as IconName} size={size} />\n      ) : (\n        icon\n      )\n  } else if (children != null && children !== '') {\n    fallback = children\n  } else if (name) {\n    fallback = initialsFromName(name)\n  } else {\n    fallback = <Icon name=\"User\" size={size} />\n  }\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(\n        styles.avatar,\n        styles[size],\n        styles[shape],\n        pending && styles.pending,\n        className,\n      )}\n      style={\n        {\n          '--tz-btn-rgb': `var(--tz-color-${color}-rgb)`,\n          '--tz-btn-on': `var(--tz-color-${color}-contrast, #fff)`,\n          ...style,\n        } as CSSProperties\n      }\n      role={!loading && !showImage && label ? 'img' : undefined}\n      aria-label={!loading && !showImage && label ? label : undefined}\n      aria-busy={loading || undefined}\n      {...props}\n    >\n      {pending && (\n        <Skeleton variant=\"rect\" width=\"100%\" height=\"100%\" className={styles.skeleton} />\n      )}\n      {loading ? null : showImage ? (\n        <img\n          ref={imgRef}\n          src={src}\n          alt={label ?? ''}\n          className={clsx(styles.img, !imgLoaded && styles.imgPending)}\n          onLoad={() => setImgLoaded(true)}\n          onError={() => setImgError(true)}\n        />\n      ) : (\n        <span className={styles.fallback} aria-hidden={label ? true : undefined}>\n          {fallback}\n        </span>\n      )}\n    </div>\n  )\n})\n"],"names":["ICON_NAME_SET","ICON_NAMES","initialsFromName","name","parts","Avatar","forwardRef","src","alt","icon","size","shape","color","loading","className","style","children","props","ref","imgError","setImgError","useState","imgLoaded","setImgLoaded","imgRef","useRef","lastSrc","showImage","useLayoutEffect","img","pending","label","fallback","jsx","Icon","jsxs","clsx","styles","Skeleton"],"mappings":";;;;;;;;;;;;;;;;;;;GAyCMA,IAAgB,IAAI,IAAYC,CAAU;AAGhD,SAASC,EAAiBC,GAAsB;AAC9C,QAAMC,IAAQD,EAAK,KAAA,EAAO,MAAM,KAAK,EAAE,OAAO,OAAO;AACrD,SAAIC,EAAM,WAAW,IAAU,KAC3BA,EAAM,WAAW,IAAUA,EAAM,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,YAAA,KAC5CA,EAAM,CAAC,EAAE,CAAC,IAAIA,EAAMA,EAAM,SAAS,CAAC,EAAE,CAAC,GAAG,YAAA;AACpD;AASO,MAAMC,KAASC,EAAwC,SAC5D;AAAA,EACE,KAAAC;AAAA,EACA,KAAAC;AAAA,EACA,MAAAC;AAAA,EACA,MAAAN;AAAA,EACA,MAAAO,IAAO;AAAA,EACP,OAAAC,IAAQ;AAAA,EACR,OAAAC,IAAQ;AAAA,EACR,SAAAC,IAAU;AAAA,EACV,WAAAC;AAAA,EACA,OAAAC;AAAA,EACA,UAAAC;AAAA,EACA,GAAGC;AACL,GACAC,GACA;AACA,QAAM,CAACC,GAAUC,CAAW,IAAIC,EAAS,EAAK,GACxC,CAACC,GAAWC,CAAY,IAAIF,EAAS,EAAK,GAC1CG,IAASC,EAAyB,IAAI,GAGtCC,IAAUD,EAAOlB,CAAG;AAC1B,EAAImB,EAAQ,YAAYnB,MACtBmB,EAAQ,UAAUnB,GAClBa,EAAY,EAAK,GACjBG,EAAa,EAAK;AAEpB,QAAMI,IAAY,CAACd,KAAW,EAAQN,KAAQ,CAACY;AAE/C,EAAAS,EAAgB,MAAM;AACpB,UAAMC,IAAML,EAAO;AACnB,IAAIK,KAAA,QAAAA,EAAK,YAAYA,EAAI,eAAe,OAAgB,EAAI;AAAA,EAC9D,GAAG,CAACtB,GAAKoB,CAAS,CAAC;AAEnB,QAAMG,IAAUjB,KAAYc,KAAa,CAACL,GACpCS,IAAQvB,KAAOL;AAErB,MAAI6B;AACJ,SAAIvB,MAAS,SACXuB,IACE,OAAOvB,KAAS,YAAYT,EAAc,IAAIS,CAAI,IAChD,gBAAAwB,EAACC,GAAA,EAAK,MAAMzB,GAAkB,MAAAC,EAAA,CAAY,IAE1CD,IAEKO,KAAY,QAAQA,MAAa,KAC1CgB,IAAWhB,IACFb,IACT6B,IAAW9B,EAAiBC,CAAI,IAEhC6B,IAAW,gBAAAC,EAACC,GAAA,EAAK,MAAK,QAAO,MAAAxB,GAAY,GAIzC,gBAAAyB;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,KAAAjB;AAAA,MACA,WAAWkB;AAAA,QACTC,EAAO;AAAA,QACPA,EAAO3B,CAAI;AAAA,QACX2B,EAAO1B,CAAK;AAAA,QACZmB,KAAWO,EAAO;AAAA,QAClBvB;AAAA,MAAA;AAAA,MAEF,OACE;AAAA,QACE,gBAAgB,kBAAkBF,CAAK;AAAA,QACvC,eAAe,kBAAkBA,CAAK;AAAA,QACtC,GAAGG;AAAA,MAAA;AAAA,MAGP,MAAM,CAACF,KAAW,CAACc,KAAaI,IAAQ,QAAQ;AAAA,MAChD,cAAY,CAAClB,KAAW,CAACc,KAAaI,IAAQA,IAAQ;AAAA,MACtD,aAAWlB,KAAW;AAAA,MACrB,GAAGI;AAAA,MAEH,UAAA;AAAA,QAAAa,KACC,gBAAAG,EAACK,GAAA,EAAS,SAAQ,QAAO,OAAM,QAAO,QAAO,QAAO,WAAWD,EAAO,SAAA,CAAU;AAAA,QAEjFxB,IAAU,OAAOc,IAChB,gBAAAM;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,KAAKT;AAAA,YACL,KAAAjB;AAAA,YACA,KAAKwB,KAAS;AAAA,YACd,WAAWK,EAAKC,EAAO,KAAK,CAACf,KAAae,EAAO,UAAU;AAAA,YAC3D,QAAQ,MAAMd,EAAa,EAAI;AAAA,YAC/B,SAAS,MAAMH,EAAY,EAAI;AAAA,UAAA;AAAA,QAAA,IAGjC,gBAAAa,EAAC,QAAA,EAAK,WAAWI,EAAO,UAAU,eAAaN,IAAQ,KAAO,QAC3D,UAAAC,EAAA,CACH;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAIR,CAAC;"}

package/dist/{AvatarGroup-DrkzAt1-.cjs → AvatarGroup-B8u8ONs5.cjs}

@@ -1,2 +1,2 @@
-"use strict";const i=require("react/jsx-runtime"),e=require("react"),p=require("clsx"),r=require("./Avatar-BBqX1732.cjs"),g={sm:"-6px",md:"-8px",lg:"-10px"},h=e.forwardRef(function({children:u,max:s,size:l="md",color:m="accent",className:d,style:v,...x},y){const a=e.Children.toArray(u).filter(e.isValidElement),t=a.length,A=s&&s>0&&t>s?s-1:t,c=a.slice(0,A),o=t-c.length;return i.jsxs("div",{ref:y,className:p.clsx(r.styles.group,d),style:{"--avatar-overlap":g[l],...v},...x,children:[c.map((n,f)=>e.cloneElement(n,{size:l,className:p.clsx(r.styles.item,n.props.className),style:{zIndex:t-f,...n.props.style}})),o>0&&i.jsxs(r.Avatar,{size:l,color:m,className:r.styles.item,style:{zIndex:0},children:["+",o]})]})});exports.AvatarGroup=h;
-//# sourceMappingURL=AvatarGroup-DrkzAt1-.cjs.map
+"use strict";const i=require("react/jsx-runtime"),e=require("react"),p=require("clsx"),r=require("./Avatar-BwGJl-ru.cjs"),g={sm:"-6px",md:"-8px",lg:"-10px"},h=e.forwardRef(function({children:u,max:s,size:l="md",color:m="accent",className:d,style:v,...x},y){const a=e.Children.toArray(u).filter(e.isValidElement),t=a.length,A=s&&s>0&&t>s?s-1:t,c=a.slice(0,A),o=t-c.length;return i.jsxs("div",{ref:y,className:p.clsx(r.styles.group,d),style:{"--avatar-overlap":g[l],...v},...x,children:[c.map((n,f)=>e.cloneElement(n,{size:l,className:p.clsx(r.styles.item,n.props.className),style:{zIndex:t-f,...n.props.style}})),o>0&&i.jsxs(r.Avatar,{size:l,color:m,className:r.styles.item,style:{zIndex:0},children:["+",o]})]})});exports.AvatarGroup=h;
+//# sourceMappingURL=AvatarGroup-B8u8ONs5.cjs.map

package/dist/{AvatarGroup-DrkzAt1-.cjs.map → AvatarGroup-B8u8ONs5.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"AvatarGroup-DrkzAt1-.cjs","sources":["../src/components/Avatar/AvatarGroup.tsx"],"sourcesContent":["import {\n  Children,\n  cloneElement,\n  forwardRef,\n  isValidElement,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactElement,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar, type AvatarProps, type AvatarSize } from './Avatar'\nimport styles from './Avatar.module.css'\n\nexport interface AvatarGroupProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** `Avatar` elements to overlap. */\n  children: ReactNode\n  /** Show at most this many slots; the rest collapse into a trailing `+N` avatar. */\n  max?: number\n  /** Size applied to every avatar in the group (incl. the `+N`). Defaults to `md`. */\n  size?: AvatarSize\n  /** Theme palette token for the `+N` surplus avatar. Defaults to `accent`. */\n  color?: ThemeColor\n}\n\nconst OVERLAP: Record<AvatarSize, string> = { sm: '-6px', md: '-8px', lg: '-10px' }\n\n/**\n * Overlaps a row of `Avatar`s with a ring between them, and collapses the overflow past `max` into a\n * trailing `+N` avatar (like a stacked team list). All avatars are normalized to the group's `size`.\n * Token-only styling.\n */\nexport const AvatarGroup = forwardRef<HTMLDivElement, AvatarGroupProps>(function AvatarGroup(\n  { children, max, size = 'md', color = 'accent', className, style, ...props },\n  ref,\n) {\n  const items = Children.toArray(children).filter(isValidElement) as ReactElement<AvatarProps>[]\n  const total = items.length\n  const limit = max && max > 0 && total > max ? max - 1 : total\n  const shown = items.slice(0, limit)\n  const surplus = total - shown.length\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(styles.group, className)}\n      style={{ '--avatar-overlap': OVERLAP[size], ...style } as CSSProperties}\n      {...props}\n    >\n      {shown.map((child, index) =>\n        cloneElement(child, {\n          size,\n          className: clsx(styles.item, child.props.className),\n          style: { zIndex: total - index, ...child.props.style } as CSSProperties,\n        }),\n      )}\n      {surplus > 0 && (\n        <Avatar size={size} color={color} className={styles.item} style={{ zIndex: 0 }}>\n          +{surplus}\n        </Avatar>\n      )}\n    </div>\n  )\n})\n"],"names":["OVERLAP","AvatarGroup","forwardRef","children","max","size","color","className","style","props","ref","items","Children","isValidElement","total","limit","shown","surplus","jsxs","clsx","styles","child","index","cloneElement","Avatar"],"mappings":"0HA0BMA,EAAsC,CAAE,GAAI,OAAQ,GAAI,OAAQ,GAAI,OAAA,EAO7DC,EAAcC,EAAAA,WAA6C,SACtE,CAAE,SAAAC,EAAU,IAAAC,EAAK,KAAAC,EAAO,KAAM,MAAAC,EAAQ,SAAU,UAAAC,EAAW,MAAAC,EAAO,GAAGC,CAAA,EACrEC,EACA,CACA,MAAMC,EAAQC,EAAAA,SAAS,QAAQT,CAAQ,EAAE,OAAOU,gBAAc,EACxDC,EAAQH,EAAM,OACdI,EAAQX,GAAOA,EAAM,GAAKU,EAAQV,EAAMA,EAAM,EAAIU,EAClDE,EAAQL,EAAM,MAAM,EAAGI,CAAK,EAC5BE,EAAUH,EAAQE,EAAM,OAE9B,OACEE,EAAAA,KAAC,MAAA,CACC,IAAAR,EACA,UAAWS,EAAAA,KAAKC,SAAO,MAAOb,CAAS,EACvC,MAAO,CAAE,mBAAoBP,EAAQK,CAAI,EAAG,GAAGG,CAAA,EAC9C,GAAGC,EAEH,SAAA,CAAAO,EAAM,IAAI,CAACK,EAAOC,IACjBC,EAAAA,aAAaF,EAAO,CAClB,KAAAhB,EACA,UAAWc,EAAAA,KAAKC,EAAAA,OAAO,KAAMC,EAAM,MAAM,SAAS,EAClD,MAAO,CAAE,OAAQP,EAAQQ,EAAO,GAAGD,EAAM,MAAM,KAAA,CAAM,CACtD,CAAA,EAEFJ,EAAU,GACTC,EAAAA,KAACM,EAAAA,OAAA,CAAO,KAAAnB,EAAY,MAAAC,EAAc,UAAWc,EAAAA,OAAO,KAAM,MAAO,CAAE,OAAQ,GAAK,SAAA,CAAA,IAC5EH,CAAA,CAAA,CACJ,CAAA,CAAA,CAAA,CAIR,CAAC"}
+{"version":3,"file":"AvatarGroup-B8u8ONs5.cjs","sources":["../src/components/Avatar/AvatarGroup.tsx"],"sourcesContent":["import {\n  Children,\n  cloneElement,\n  forwardRef,\n  isValidElement,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactElement,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar, type AvatarProps, type AvatarSize } from './Avatar'\nimport styles from './Avatar.module.css'\n\nexport interface AvatarGroupProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** `Avatar` elements to overlap. */\n  children: ReactNode\n  /** Show at most this many slots; the rest collapse into a trailing `+N` avatar. */\n  max?: number\n  /** Size applied to every avatar in the group (incl. the `+N`). Defaults to `md`. */\n  size?: AvatarSize\n  /** Theme palette token for the `+N` surplus avatar. Defaults to `accent`. */\n  color?: ThemeColor\n}\n\nconst OVERLAP: Record<AvatarSize, string> = { sm: '-6px', md: '-8px', lg: '-10px' }\n\n/**\n * Overlaps a row of `Avatar`s with a ring between them, and collapses the overflow past `max` into a\n * trailing `+N` avatar (like a stacked team list). All avatars are normalized to the group's `size`.\n * Token-only styling.\n */\nexport const AvatarGroup = forwardRef<HTMLDivElement, AvatarGroupProps>(function AvatarGroup(\n  { children, max, size = 'md', color = 'accent', className, style, ...props },\n  ref,\n) {\n  const items = Children.toArray(children).filter(isValidElement) as ReactElement<AvatarProps>[]\n  const total = items.length\n  const limit = max && max > 0 && total > max ? max - 1 : total\n  const shown = items.slice(0, limit)\n  const surplus = total - shown.length\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(styles.group, className)}\n      style={{ '--avatar-overlap': OVERLAP[size], ...style } as CSSProperties}\n      {...props}\n    >\n      {shown.map((child, index) =>\n        cloneElement(child, {\n          size,\n          className: clsx(styles.item, child.props.className),\n          style: { zIndex: total - index, ...child.props.style } as CSSProperties,\n        }),\n      )}\n      {surplus > 0 && (\n        <Avatar size={size} color={color} className={styles.item} style={{ zIndex: 0 }}>\n          +{surplus}\n        </Avatar>\n      )}\n    </div>\n  )\n})\n"],"names":["OVERLAP","AvatarGroup","forwardRef","children","max","size","color","className","style","props","ref","items","Children","isValidElement","total","limit","shown","surplus","jsxs","clsx","styles","child","index","cloneElement","Avatar"],"mappings":"0HA0BMA,EAAsC,CAAE,GAAI,OAAQ,GAAI,OAAQ,GAAI,OAAA,EAO7DC,EAAcC,EAAAA,WAA6C,SACtE,CAAE,SAAAC,EAAU,IAAAC,EAAK,KAAAC,EAAO,KAAM,MAAAC,EAAQ,SAAU,UAAAC,EAAW,MAAAC,EAAO,GAAGC,CAAA,EACrEC,EACA,CACA,MAAMC,EAAQC,EAAAA,SAAS,QAAQT,CAAQ,EAAE,OAAOU,gBAAc,EACxDC,EAAQH,EAAM,OACdI,EAAQX,GAAOA,EAAM,GAAKU,EAAQV,EAAMA,EAAM,EAAIU,EAClDE,EAAQL,EAAM,MAAM,EAAGI,CAAK,EAC5BE,EAAUH,EAAQE,EAAM,OAE9B,OACEE,EAAAA,KAAC,MAAA,CACC,IAAAR,EACA,UAAWS,EAAAA,KAAKC,SAAO,MAAOb,CAAS,EACvC,MAAO,CAAE,mBAAoBP,EAAQK,CAAI,EAAG,GAAGG,CAAA,EAC9C,GAAGC,EAEH,SAAA,CAAAO,EAAM,IAAI,CAACK,EAAOC,IACjBC,EAAAA,aAAaF,EAAO,CAClB,KAAAhB,EACA,UAAWc,EAAAA,KAAKC,EAAAA,OAAO,KAAMC,EAAM,MAAM,SAAS,EAClD,MAAO,CAAE,OAAQP,EAAQQ,EAAO,GAAGD,EAAM,MAAM,KAAA,CAAM,CACtD,CAAA,EAEFJ,EAAU,GACTC,EAAAA,KAACM,EAAAA,OAAA,CAAO,KAAAnB,EAAY,MAAAC,EAAc,UAAWc,EAAAA,OAAO,KAAM,MAAO,CAAE,OAAQ,GAAK,SAAA,CAAA,IAC5EH,CAAA,CAAA,CACJ,CAAA,CAAA,CAAA,CAIR,CAAC"}

package/dist/{AvatarGroup-6fhm-van.js → AvatarGroup-BqxTFzRc.js}

@@ -1,7 +1,7 @@
 import { jsxs as m } from "react/jsx-runtime";
 import { forwardRef as x, Children as g, isValidElement as h, cloneElement as N } from "react";
 import { clsx as p } from "clsx";
-import { s as o, A as E } from "./Avatar-CaYyv5wk.js";
+import { s as o, A as E } from "./Avatar-C4qgzth2.js";
 const w = { sm: "-6px", md: "-8px", lg: "-10px" }, C = x(function({ children: c, max: t, size: r = "md", color: i = "accent", className: d, style: f, ...u }, A) {
   const a = g.toArray(c).filter(h), s = a.length, v = t && t > 0 && s > t ? t - 1 : s, l = a.slice(0, v), n = s - l.length;
   return /* @__PURE__ */ m(
@@ -30,4 +30,4 @@ const w = { sm: "-6px", md: "-8px", lg: "-10px" }, C = x(function({ children: c,
 export {
   C as A
 };
-//# sourceMappingURL=AvatarGroup-6fhm-van.js.map
+//# sourceMappingURL=AvatarGroup-BqxTFzRc.js.map

package/dist/{AvatarGroup-6fhm-van.js.map → AvatarGroup-BqxTFzRc.js.map}

@@ -1 +1 @@
-{"version":3,"file":"AvatarGroup-6fhm-van.js","sources":["../src/components/Avatar/AvatarGroup.tsx"],"sourcesContent":["import {\n  Children,\n  cloneElement,\n  forwardRef,\n  isValidElement,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactElement,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar, type AvatarProps, type AvatarSize } from './Avatar'\nimport styles from './Avatar.module.css'\n\nexport interface AvatarGroupProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** `Avatar` elements to overlap. */\n  children: ReactNode\n  /** Show at most this many slots; the rest collapse into a trailing `+N` avatar. */\n  max?: number\n  /** Size applied to every avatar in the group (incl. the `+N`). Defaults to `md`. */\n  size?: AvatarSize\n  /** Theme palette token for the `+N` surplus avatar. Defaults to `accent`. */\n  color?: ThemeColor\n}\n\nconst OVERLAP: Record<AvatarSize, string> = { sm: '-6px', md: '-8px', lg: '-10px' }\n\n/**\n * Overlaps a row of `Avatar`s with a ring between them, and collapses the overflow past `max` into a\n * trailing `+N` avatar (like a stacked team list). All avatars are normalized to the group's `size`.\n * Token-only styling.\n */\nexport const AvatarGroup = forwardRef<HTMLDivElement, AvatarGroupProps>(function AvatarGroup(\n  { children, max, size = 'md', color = 'accent', className, style, ...props },\n  ref,\n) {\n  const items = Children.toArray(children).filter(isValidElement) as ReactElement<AvatarProps>[]\n  const total = items.length\n  const limit = max && max > 0 && total > max ? max - 1 : total\n  const shown = items.slice(0, limit)\n  const surplus = total - shown.length\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(styles.group, className)}\n      style={{ '--avatar-overlap': OVERLAP[size], ...style } as CSSProperties}\n      {...props}\n    >\n      {shown.map((child, index) =>\n        cloneElement(child, {\n          size,\n          className: clsx(styles.item, child.props.className),\n          style: { zIndex: total - index, ...child.props.style } as CSSProperties,\n        }),\n      )}\n      {surplus > 0 && (\n        <Avatar size={size} color={color} className={styles.item} style={{ zIndex: 0 }}>\n          +{surplus}\n        </Avatar>\n      )}\n    </div>\n  )\n})\n"],"names":["OVERLAP","AvatarGroup","forwardRef","children","max","size","color","className","style","props","ref","items","Children","isValidElement","total","limit","shown","surplus","jsxs","clsx","styles","child","index","cloneElement","Avatar"],"mappings":";;;;AA0BA,MAAMA,IAAsC,EAAE,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAA,GAO7DC,IAAcC,EAA6C,SACtE,EAAE,UAAAC,GAAU,KAAAC,GAAK,MAAAC,IAAO,MAAM,OAAAC,IAAQ,UAAU,WAAAC,GAAW,OAAAC,GAAO,GAAGC,EAAA,GACrEC,GACA;AACA,QAAMC,IAAQC,EAAS,QAAQT,CAAQ,EAAE,OAAOU,CAAc,GACxDC,IAAQH,EAAM,QACdI,IAAQX,KAAOA,IAAM,KAAKU,IAAQV,IAAMA,IAAM,IAAIU,GAClDE,IAAQL,EAAM,MAAM,GAAGI,CAAK,GAC5BE,IAAUH,IAAQE,EAAM;AAE9B,SACE,gBAAAE;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,KAAAR;AAAA,MACA,WAAWS,EAAKC,EAAO,OAAOb,CAAS;AAAA,MACvC,OAAO,EAAE,oBAAoBP,EAAQK,CAAI,GAAG,GAAGG,EAAA;AAAA,MAC9C,GAAGC;AAAA,MAEH,UAAA;AAAA,QAAAO,EAAM;AAAA,UAAI,CAACK,GAAOC,MACjBC,EAAaF,GAAO;AAAA,YAClB,MAAAhB;AAAA,YACA,WAAWc,EAAKC,EAAO,MAAMC,EAAM,MAAM,SAAS;AAAA,YAClD,OAAO,EAAE,QAAQP,IAAQQ,GAAO,GAAGD,EAAM,MAAM,MAAA;AAAA,UAAM,CACtD;AAAA,QAAA;AAAA,QAEFJ,IAAU,KACT,gBAAAC,EAACM,GAAA,EAAO,MAAAnB,GAAY,OAAAC,GAAc,WAAWc,EAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,UAAA;AAAA,UAAA;AAAA,UAC5EH;AAAA,QAAA,EAAA,CACJ;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAIR,CAAC;"}
+{"version":3,"file":"AvatarGroup-BqxTFzRc.js","sources":["../src/components/Avatar/AvatarGroup.tsx"],"sourcesContent":["import {\n  Children,\n  cloneElement,\n  forwardRef,\n  isValidElement,\n  type CSSProperties,\n  type HTMLAttributes,\n  type ReactElement,\n  type ReactNode,\n} from 'react'\nimport { clsx } from 'clsx'\nimport type { ThemeColor } from '../../theme'\nimport { Avatar, type AvatarProps, type AvatarSize } from './Avatar'\nimport styles from './Avatar.module.css'\n\nexport interface AvatarGroupProps extends Omit<HTMLAttributes<HTMLDivElement>, 'color'> {\n  /** `Avatar` elements to overlap. */\n  children: ReactNode\n  /** Show at most this many slots; the rest collapse into a trailing `+N` avatar. */\n  max?: number\n  /** Size applied to every avatar in the group (incl. the `+N`). Defaults to `md`. */\n  size?: AvatarSize\n  /** Theme palette token for the `+N` surplus avatar. Defaults to `accent`. */\n  color?: ThemeColor\n}\n\nconst OVERLAP: Record<AvatarSize, string> = { sm: '-6px', md: '-8px', lg: '-10px' }\n\n/**\n * Overlaps a row of `Avatar`s with a ring between them, and collapses the overflow past `max` into a\n * trailing `+N` avatar (like a stacked team list). All avatars are normalized to the group's `size`.\n * Token-only styling.\n */\nexport const AvatarGroup = forwardRef<HTMLDivElement, AvatarGroupProps>(function AvatarGroup(\n  { children, max, size = 'md', color = 'accent', className, style, ...props },\n  ref,\n) {\n  const items = Children.toArray(children).filter(isValidElement) as ReactElement<AvatarProps>[]\n  const total = items.length\n  const limit = max && max > 0 && total > max ? max - 1 : total\n  const shown = items.slice(0, limit)\n  const surplus = total - shown.length\n\n  return (\n    <div\n      ref={ref}\n      className={clsx(styles.group, className)}\n      style={{ '--avatar-overlap': OVERLAP[size], ...style } as CSSProperties}\n      {...props}\n    >\n      {shown.map((child, index) =>\n        cloneElement(child, {\n          size,\n          className: clsx(styles.item, child.props.className),\n          style: { zIndex: total - index, ...child.props.style } as CSSProperties,\n        }),\n      )}\n      {surplus > 0 && (\n        <Avatar size={size} color={color} className={styles.item} style={{ zIndex: 0 }}>\n          +{surplus}\n        </Avatar>\n      )}\n    </div>\n  )\n})\n"],"names":["OVERLAP","AvatarGroup","forwardRef","children","max","size","color","className","style","props","ref","items","Children","isValidElement","total","limit","shown","surplus","jsxs","clsx","styles","child","index","cloneElement","Avatar"],"mappings":";;;;AA0BA,MAAMA,IAAsC,EAAE,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAA,GAO7DC,IAAcC,EAA6C,SACtE,EAAE,UAAAC,GAAU,KAAAC,GAAK,MAAAC,IAAO,MAAM,OAAAC,IAAQ,UAAU,WAAAC,GAAW,OAAAC,GAAO,GAAGC,EAAA,GACrEC,GACA;AACA,QAAMC,IAAQC,EAAS,QAAQT,CAAQ,EAAE,OAAOU,CAAc,GACxDC,IAAQH,EAAM,QACdI,IAAQX,KAAOA,IAAM,KAAKU,IAAQV,IAAMA,IAAM,IAAIU,GAClDE,IAAQL,EAAM,MAAM,GAAGI,CAAK,GAC5BE,IAAUH,IAAQE,EAAM;AAE9B,SACE,gBAAAE;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,KAAAR;AAAA,MACA,WAAWS,EAAKC,EAAO,OAAOb,CAAS;AAAA,MACvC,OAAO,EAAE,oBAAoBP,EAAQK,CAAI,GAAG,GAAGG,EAAA;AAAA,MAC9C,GAAGC;AAAA,MAEH,UAAA;AAAA,QAAAO,EAAM;AAAA,UAAI,CAACK,GAAOC,MACjBC,EAAaF,GAAO;AAAA,YAClB,MAAAhB;AAAA,YACA,WAAWc,EAAKC,EAAO,MAAMC,EAAM,MAAM,SAAS;AAAA,YAClD,OAAO,EAAE,QAAQP,IAAQQ,GAAO,GAAGD,EAAM,MAAM,MAAA;AAAA,UAAM,CACtD;AAAA,QAAA;AAAA,QAEFJ,IAAU,KACT,gBAAAC,EAACM,GAAA,EAAO,MAAAnB,GAAY,OAAAC,GAAc,WAAWc,EAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,UAAA;AAAA,UAAA;AAAA,UAC5EH;AAAA,QAAA,EAAA,CACJ;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAIR,CAAC;"}