@udibo/oauth2 0.14.0 → 0.15.0

package/{esm → dist}/identity/service.js

@@ -17,7 +17,7 @@
  *
  * @module
  */
-import { delay } from "../deps/jsr.io/@std/async/1.5.0/delay.js";
+import { delay } from "../utils/_delay.js";
 import { buildResetUrl, buildSignInUrl, buildUnlockUrl, buildVerificationUrl, } from "./delivery.js";
 import { PasswordIdentityService, } from "./password.js";
 import { TokenPurpose, } from "./token-flow.js";
@@ -82,8 +82,7 @@ export class IdentityService {
         this.#rateLimiters = {
             signIn: options.rateLimiters?.signIn ?? options.rateLimiter,
             passwordReset: options.rateLimiters?.passwordReset ?? options.rateLimiter,
-            emailVerification: options.rateLimiters?.emailVerification ??
-                options.rateLimiter,
+            emailVerification: options.rateLimiters?.emailVerification ?? options.rateLimiter,
             accountUnlock: options.rateLimiters?.accountUnlock ?? options.rateLimiter,
             signInLink: options.rateLimiters?.signInLink ?? options.rateLimiter,
             signInCode: options.rateLimiters?.signInCode ?? options.rateLimiter,
@@ -102,11 +101,11 @@ export class IdentityService {
         this.#legacyVerifiers = options.legacyVerifiers?.length
             ? options.legacyVerifiers
             : undefined;
-        const floor = options.failedSignInFloorMs ??
-            DEFAULT_FAILED_SIGN_IN_FLOOR_MS;
-        this.#failedSignInFloorMs = Number.isFinite(floor) && floor >= 0
-            ? floor
-            : DEFAULT_FAILED_SIGN_IN_FLOOR_MS;
+        const floor = options.failedSignInFloorMs ?? DEFAULT_FAILED_SIGN_IN_FLOOR_MS;
+        this.#failedSignInFloorMs =
+            Number.isFinite(floor) && floor >= 0
+                ? floor
+                : DEFAULT_FAILED_SIGN_IN_FLOOR_MS;
     }
     /**
      * Create a user with a hashed password. `profile` is your app's own fields.
@@ -615,8 +614,7 @@ export class IdentityService {
         await this.#passwords.hash(password);
     }
     async #rejectSignIn(startedAt) {
-        const remaining = this.#failedSignInFloorMs -
-            (performance.now() - startedAt);
+        const remaining = this.#failedSignInFloorMs - (performance.now() - startedAt);
         if (remaining > 0)
             await delay(remaining);
         return null;
@@ -639,24 +637,26 @@ export class IdentityService {
         const credential = await this.#users.getCredential(userId);
         // Native credential is authoritative: only try an imported hash when there
         // is none, so a wrong password can't resurrect a stale one (no downgrade).
-        const legacyHash = credential ? null : await this.#getLegacyCredential(userId);
+        const legacyHash = credential
+            ? null
+            : await this.#getLegacyCredential(userId);
         if (!credential && !legacyHash) {
             await this.#equalizeTiming(password);
             return "no_password";
         }
-        if (credential && await this.#passwords.verify(password, credential)) {
-            return await this.#rehashCredential(userId, password, credential)
+        if (credential && (await this.#passwords.verify(password, credential))) {
+            return (await this.#rehashCredential(userId, password, credential))
                 ? "authenticated"
                 : "wrong_password";
         }
         if (!legacyHash)
             return "wrong_password";
         const verifier = findLegacyVerifier(this.#legacyVerifiers, legacyHash);
-        if (!verifier || !await this.#tryLegacy(verifier, password, legacyHash)) {
+        if (!verifier || !(await this.#tryLegacy(verifier, password, legacyHash))) {
             await this.#equalizeTiming(password);
             return "wrong_password";
         }
-        return await this.#upgradeCredential(userId, password, verifier.id)
+        return (await this.#upgradeCredential(userId, password, verifier.id))
             ? "authenticated"
             : "wrong_password";
     }
@@ -672,7 +672,7 @@ export class IdentityService {
             this.#logPersistFailure("password rehash", error);
             return true;
         }
-        return replaced || await this.#verifyCurrentCredential(userId, password);
+        return replaced || (await this.#verifyCurrentCredential(userId, password));
     }
     async #upgradeCredential(userId, password, verifierId) {
         if (!this.#users.replaceCredential)
@@ -698,8 +698,7 @@ export class IdentityService {
     }
     async #verifyCurrentCredential(userId, password) {
         const current = await this.#users.getCredential(userId);
-        return current !== undefined &&
-            await this.#passwords.verify(password, current);
+        return (current !== undefined && (await this.#passwords.verify(password, current)));
     }
     #logPersistFailure(operation, error) {
         console.error(`[@udibo/oauth2] ${operation} persist failed:`, error instanceof Error ? error.message : error);

package/{esm → dist}/identity/session.js

@@ -25,8 +25,8 @@
  * stateless one that only revokes returns `false`.
  */
 export function supportsSessionListing(service) {
-    return typeof service.listByUser ===
-        "function";
+    return (typeof service.listByUser ===
+        "function");
 }
 /**
  * Whether a session authenticated within `maxAgeMs` — a recent-auth ("step-up")

package/{esm → dist}/identity/token-flow.js

@@ -98,7 +98,7 @@ export class TokenFlowService {
         const status = this.#statusOf(await this.#store.get(tokenHash), purpose);
         if (status.status !== "valid")
             return null;
-        if (!await this.#store.markConsumed(tokenHash, Date.now()))
+        if (!(await this.#store.markConsumed(tokenHash, Date.now())))
             return null;
         return { subject: status.subject, data: status.data };
     }
@@ -162,7 +162,8 @@ export class MemoryTokenFlowStore {
      */
     deleteBySubject(purpose, subject) {
         for (const [hash, record] of this.#byHash) {
-            if (record.purpose === purpose && record.subject === subject &&
+            if (record.purpose === purpose &&
+                record.subject === subject &&
                 record.consumedAt === undefined) {
                 this.#byHash.delete(hash);
             }

package/{esm → dist}/models/authorization-code.d.ts

@@ -1,6 +1,6 @@
-import type { AbstractScope, BasicScope } from "./scope.js";
-import type { ClientInterface } from "./client.js";
-import type { AuthenticationContext } from "./authentication.js";
+import type { AbstractScope, BasicScope } from "./scope.ts";
+import type { ClientInterface } from "./client.ts";
+import type { AuthenticationContext } from "./authentication.ts";
 /**
  * Authorization code model.
  *

package/{esm → dist}/models/authorization.d.ts

@@ -16,7 +16,7 @@
  *
  * @module
  */
-import type { AbstractScope } from "./scope.js";
+import type { AbstractScope } from "./scope.ts";
 /**
  * The active organization a credential was issued in: the one organization
  * whose roles and permissions the credential carries. Absent (`null` on

package/{esm → dist}/models/authorization.js

@@ -88,8 +88,7 @@ export class Authorization {
             return false;
         if (idOrSlug === undefined)
             return true;
-        return this.organization.id === idOrSlug ||
-            this.organization.slug === idOrSlug;
+        return (this.organization.id === idOrSlug || this.organization.slug === idOrSlug);
     }
     /**
      * The first non-scope condition this authorization does not satisfy, or

package/{esm → dist}/models/device-authorization.d.ts

@@ -1,5 +1,5 @@
-import type { ClientInterface } from "./client.js";
-import type { AbstractScope, BasicScope } from "./scope.js";
+import type { ClientInterface } from "./client.ts";
+import type { AbstractScope, BasicScope } from "./scope.ts";
 /**
  * Device authorization request stored by the service.
  *

package/{esm → dist}/models/token.d.ts

@@ -1,6 +1,6 @@
-import type { AbstractScope, BasicScope } from "./scope.js";
-import type { ClientInterface } from "./client.js";
-import type { AuthenticationContext } from "./authentication.js";
+import type { AbstractScope, BasicScope } from "./scope.ts";
+import type { ClientInterface } from "./client.ts";
+import type { AuthenticationContext } from "./authentication.ts";
 /**
  * Token model representing an access token.
  *

package/{esm → dist}/react/callback.d.ts

@@ -14,7 +14,7 @@
  * @module
  */
 import { type ReactNode } from "react";
-import { type OAuth2Error } from "../client/mod.js";
+import { type OAuth2Error } from "../client/mod.ts";
 /** Props for {@link OAuth2Callback}. */
 export interface OAuth2CallbackProps {
     /**

package/{esm → dist}/react/callback.js

@@ -1,5 +1,4 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// deno-lint-ignore-file no-window -- browser-only; `window` used only after isBrowser() guards
 /**
  * `<OAuth2Callback>` — mount on the SPA's callback route when the app runs a
  * `DirectClient`. Calls `client.handleAuthorizationCallback` with the current

package/{esm → dist}/react/components/class-names.d.ts

@@ -12,7 +12,7 @@
  * @module
  */
 import { type ReactNode } from "react";
-import type { AuthFormClassNames } from "./types.js";
+import type { AuthFormClassNames } from "./types.ts";
 /**
  * Resolves the per-slot class map for this position in the tree: the nearest
  * {@link AuthFormClassNamesProvider}'s map with `overrides` applied slot by

package/{esm → dist}/react/components/class-names.js

@@ -27,7 +27,7 @@ function merge(inherited, overrides) {
 function slotKey(classNames) {
     const slots = Object.entries(classNames)
         .filter(([, value]) => value !== undefined)
-        .sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
     return JSON.stringify(slots);
 }
 /**
@@ -66,7 +66,8 @@ export function useAuthFormClassNames(overrides) {
     const inherited = useContext(AuthFormClassNamesContext);
     const key = overrides ? slotKey(overrides) : "";
     const held = useRef(null);
-    if (held.current === null || held.current.inherited !== inherited ||
+    if (held.current === null ||
+        held.current.inherited !== inherited ||
         held.current.key !== key) {
         held.current = {
             inherited,

package/{esm → dist}/react/components/internal.d.ts

@@ -1,6 +1,6 @@
 import { type ReactNode, type Ref } from "react";
-import type { AuthFieldProps, AuthFormState } from "./use-auth-form.js";
-import type { AuthFormClassNames, AuthFormValues, SocialProvidersProps } from "./types.js";
+import type { AuthFieldProps, AuthFormState } from "./use-auth-form.ts";
+import type { AuthFormClassNames, AuthFormValues, SocialProvidersProps } from "./types.ts";
 /**
  * What every default form component returns: the shared root, `<form>` and
  * error summary, or the caller's `render` output instead, with the resolved

package/{esm → dist}/react/components/internal.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useRef, } from "react";
 import { AuthFormClassNamesScope, useAuthFormClassNames, } from "./class-names.js";
 /**
@@ -9,7 +9,7 @@ import { AuthFormClassNamesScope, useAuthFormClassNames, } from "./class-names.j
  */
 export function AuthFormShell(props) {
     const { name, form, className, classNames, render, rootProps, aboveForm, succeeded, children, action, method, formRef, } = props;
-    return (_jsx(AuthFormClassNamesScope, { classNames: classNames, children: render ? render(form) : (_jsxs("div", { "data-oauth2-form": name, ...rootProps, className: combineClassNames(className, classNames.root), children: [aboveForm, succeeded ?? (_jsxs("form", { onSubmit: form.handleSubmit, action: action, method: method ?? (action ? "post" : undefined), ref: formRef, noValidate: true, "data-oauth2-form-element": "", className: classNames.form, children: [_jsx(ErrorSummary, { error: form.formError, focusTrigger: form.submitCount }), children] }))] })) }));
+    return (_jsx(AuthFormClassNamesScope, { classNames: classNames, children: render ? (render(form)) : (_jsxs("div", { "data-oauth2-form": name, ...rootProps, className: combineClassNames(className, classNames.root), children: [aboveForm, succeeded ?? (_jsxs("form", { onSubmit: form.handleSubmit, action: action, method: method ?? (action ? "post" : undefined), ref: formRef, noValidate: true, "data-oauth2-form-element": "", className: classNames.form, children: [_jsx(ErrorSummary, { error: form.formError, focusTrigger: form.submitCount }), children] }))] })) }));
 }
 function ignoreActivation(event) {
     event.preventDefault();
@@ -22,9 +22,7 @@ export function SubmitButton(props) {
 export function TextField(props) {
     const { fieldProps, label, type = "text", autoComplete, required, error, inputRef, children, } = props;
     const classNames = useAuthFormClassNames();
-    return (_jsxs("div", { "data-oauth2-field": fieldProps.name, className: classNames.field, children: [_jsx("label", { htmlFor: fieldProps.id, "data-oauth2-label": "", className: classNames.label, children: label }), _jsx("input", { ...fieldProps, type: type, autoComplete: autoComplete, required: required, "data-oauth2-input": "", className: classNames.input, ref: inputRef }), children, error
-                ? (_jsx("p", { id: `${fieldProps.id}-error`, role: "alert", "data-oauth2-error": "", className: classNames.error, children: error }))
-                : null] }));
+    return (_jsxs("div", { "data-oauth2-field": fieldProps.name, className: classNames.field, children: [_jsx("label", { htmlFor: fieldProps.id, "data-oauth2-label": "", className: classNames.label, children: label }), _jsx("input", { ...fieldProps, type: type, autoComplete: autoComplete, required: required, "data-oauth2-input": "", className: classNames.input, ref: inputRef }), children, error ? (_jsx("p", { id: `${fieldProps.id}-error`, role: "alert", "data-oauth2-error": "", className: classNames.error, children: error })) : null] }));
 }
 export function ErrorSummary(props) {
     const { error, focusTrigger } = props;
@@ -68,12 +66,8 @@ export function SocialButtons(props) {
     const classNames = useAuthFormClassNames();
     if (!socialProviders || socialProviders.length === 0)
         return null;
-    const label = (provider) => (_jsxs(_Fragment, { children: [provider.iconSlot
-                ? _jsx("span", { "data-oauth2-social-icon": "", children: provider.iconSlot })
-                : null, _jsxs("span", { "data-oauth2-social-label": "", children: ["Continue with ", provider.name] })] }));
-    return (_jsxs(_Fragment, { children: [_jsx("div", { "data-oauth2-social": "", className: classNames.socialSection, children: socialProviders.map((provider) => socialHref
-                    ? (_jsx("a", { href: socialHref(provider), "data-oauth2-social-button": provider.id, className: classNames.socialButton, children: label(provider) }, provider.id))
-                    : (_jsx("button", { type: "button", onClick: () => onSocialSelect?.(provider), "data-oauth2-social-button": provider.id, className: classNames.socialButton, children: label(provider) }, provider.id))) }), _jsx("div", { "data-oauth2-social-divider": "", "aria-hidden": "true", className: classNames.socialDivider })] }));
+    const label = (provider) => (_jsxs(_Fragment, { children: [provider.iconSlot ? (_jsx("span", { "data-oauth2-social-icon": "", children: provider.iconSlot })) : null, _jsxs("span", { "data-oauth2-social-label": "", children: ["Continue with ", provider.name] })] }));
+    return (_jsxs(_Fragment, { children: [_jsx("div", { "data-oauth2-social": "", className: classNames.socialSection, children: socialProviders.map((provider) => socialHref ? (_jsx("a", { href: socialHref(provider), "data-oauth2-social-button": provider.id, className: classNames.socialButton, children: label(provider) }, provider.id)) : (_jsx("button", { type: "button", onClick: () => onSocialSelect?.(provider), "data-oauth2-social-button": provider.id, className: classNames.socialButton, children: label(provider) }, provider.id))) }), _jsx("div", { "data-oauth2-social-divider": "", "aria-hidden": "true", className: classNames.socialDivider })] }));
 }
 export function combineClassNames(className, slot) {
     return [className, slot].filter(Boolean).join(" ") || undefined;

package/{esm → dist}/react/components/mfa-challenge-form.d.ts

@@ -7,8 +7,8 @@
  * @module
  */
 import type { ReactNode } from "react";
-import type { AuthFormState } from "./use-auth-form.js";
-import type { BaseAuthFormProps } from "./types.js";
+import type { AuthFormState } from "./use-auth-form.ts";
+import type { BaseAuthFormProps } from "./types.ts";
 /** Which credential the user is submitting. */
 export type MfaChallengeMethod = "totp" | "recovery";
 /** Values collected by {@link MfaChallengeForm}. */

package/{esm → dist}/react/components/mfa-challenge-form.js

@@ -37,10 +37,8 @@ export function MfaChallengeForm(props) {
         });
     };
     return (_jsxs(AuthFormShell, { name: "mfa-challenge", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, rootProps: { "data-oauth2-method": form.values.method }, children: [_jsx(TextField, { fieldProps: form.getFieldProps("code"), label: isRecovery
-                    ? labels?.recoveryCode ?? "Recovery code"
-                    : labels?.code ?? "Authentication code", autoComplete: isRecovery ? "off" : "one-time-code", required: true, error: form.errors.code }), _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Verify", submittingLabel: labels?.submitting ?? "Verifying…" }), allowRecoveryCode
-                ? (_jsx("button", { type: "button", onClick: toggleMethod, "data-oauth2-secondary": "", "data-oauth2-toggle-recovery": "", className: classNames.secondary, children: isRecovery
-                        ? labels?.useAuthenticator ?? "Use your authenticator app"
-                        : labels?.useRecovery ?? "Use a recovery code" }))
-                : null] }));
+                    ? (labels?.recoveryCode ?? "Recovery code")
+                    : (labels?.code ?? "Authentication code"), autoComplete: isRecovery ? "off" : "one-time-code", required: true, error: form.errors.code }), _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Verify", submittingLabel: labels?.submitting ?? "Verifying…" }), allowRecoveryCode ? (_jsx("button", { type: "button", onClick: toggleMethod, "data-oauth2-secondary": "", "data-oauth2-toggle-recovery": "", className: classNames.secondary, children: isRecovery
+                    ? (labels?.useAuthenticator ?? "Use your authenticator app")
+                    : (labels?.useRecovery ?? "Use a recovery code") })) : null] }));
 }

package/{esm → dist}/react/components/mfa-enrollment-form.d.ts

@@ -10,8 +10,8 @@
  * @module
  */
 import type { ReactNode } from "react";
-import type { AuthFormState } from "./use-auth-form.js";
-import type { BaseAuthFormProps } from "./types.js";
+import type { AuthFormState } from "./use-auth-form.ts";
+import type { BaseAuthFormProps } from "./types.ts";
 /** The enrollment secret material to display, produced server-side. */
 export interface MfaEnrollmentData {
     /** Base32 shared secret for manual entry into an authenticator app. */

package/{esm → dist}/react/components/mfa-enrollment-form.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useAuthForm } from "./use-auth-form.js";
 import { AuthFormShell, SubmitButton, TextField, useFocusFirstError, } from "./internal.js";
 import { useAuthFormClassNames } from "./class-names.js";
@@ -33,9 +33,5 @@ export function MfaEnrollmentForm(props) {
     useFocusFirstError(form);
     const classNames = useAuthFormClassNames(props.classNames);
     const qr = typeof qrSlot === "function" ? qrSlot(data.otpauthUri) : qrSlot;
-    return (_jsxs(AuthFormShell, { name: "mfa-enrollment", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, aboveForm: _jsxs(_Fragment, { children: [_jsxs("div", { "data-oauth2-secret": "", className: classNames.secret, children: [_jsx("p", { role: "heading", "aria-level": 2, "data-oauth2-secret-heading": "", children: labels?.secretHeading ?? "Scan this QR code" }), qr
-                            ? _jsx("div", { "data-oauth2-qr": "", className: classNames.qr, children: qr })
-                            : null, _jsxs("p", { "data-oauth2-secret-hint": "", children: [labels?.secretHint ?? "Or enter this code:", " ", _jsx("code", { "data-oauth2-secret-value": "", children: data.secret })] })] }), data.recoveryCodes && data.recoveryCodes.length > 0
-                    ? (_jsxs("div", { "data-oauth2-recovery": "", children: [_jsx("p", { role: "heading", "aria-level": 2, "data-oauth2-recovery-heading": "", children: labels?.recoveryHeading ?? "Save your recovery codes" }), _jsx("ul", { "data-oauth2-recovery-codes": "", className: classNames.recoveryCodes, children: data.recoveryCodes.map((recoveryCode) => (_jsx("li", { "data-oauth2-recovery-code": "", className: classNames.recoveryCode, children: _jsx("code", { children: recoveryCode }) }, recoveryCode))) })] }))
-                    : null] }), children: [_jsx(TextField, { fieldProps: form.getFieldProps("code"), label: labels?.code ?? "Authentication code", autoComplete: "one-time-code", required: true, error: form.errors.code }), _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Confirm", submittingLabel: labels?.submitting ?? "Confirming…" })] }));
+    return (_jsxs(AuthFormShell, { name: "mfa-enrollment", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, aboveForm: _jsxs(_Fragment, { children: [_jsxs("div", { "data-oauth2-secret": "", className: classNames.secret, children: [_jsx("p", { role: "heading", "aria-level": 2, "data-oauth2-secret-heading": "", children: labels?.secretHeading ?? "Scan this QR code" }), qr ? (_jsx("div", { "data-oauth2-qr": "", className: classNames.qr, children: qr })) : null, _jsxs("p", { "data-oauth2-secret-hint": "", children: [labels?.secretHint ?? "Or enter this code:", " ", _jsx("code", { "data-oauth2-secret-value": "", children: data.secret })] })] }), data.recoveryCodes && data.recoveryCodes.length > 0 ? (_jsxs("div", { "data-oauth2-recovery": "", children: [_jsx("p", { role: "heading", "aria-level": 2, "data-oauth2-recovery-heading": "", children: labels?.recoveryHeading ?? "Save your recovery codes" }), _jsx("ul", { "data-oauth2-recovery-codes": "", className: classNames.recoveryCodes, children: data.recoveryCodes.map((recoveryCode) => (_jsx("li", { "data-oauth2-recovery-code": "", className: classNames.recoveryCode, children: _jsx("code", { children: recoveryCode }) }, recoveryCode))) })] })) : null] }), children: [_jsx(TextField, { fieldProps: form.getFieldProps("code"), label: labels?.code ?? "Authentication code", autoComplete: "one-time-code", required: true, error: form.errors.code }), _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Confirm", submittingLabel: labels?.submitting ?? "Confirming…" })] }));
 }

package/{esm → dist}/react/components/mod.d.ts

@@ -1,7 +1,7 @@
 /**
  * Prebuilt React auth components for `@udibo/oauth2` — the composable,
  * headless-first, themeable form set an app assembles into its own auth
- * surface. Works in both plain React Router v7 and Juniper (SSR React).
+ * surface. Works with React Router v7 in data or framework mode.
  *
  * These components are **composed by your app**: you own the routes, storage,
  * session, and the submit wiring. Nothing here mounts routes, talks to a
@@ -83,23 +83,22 @@
  *
  * @module
  */
-import "../../_dnt.polyfills.js";
-export { useAuthForm } from "./use-auth-form.js";
-export type { AuthFieldProps, AuthFormState, AuthFormStatus, UseAuthFormOptions, } from "./use-auth-form.js";
-export type { AuthFormClassNames, AuthFormErrors, AuthFormResult, AuthFormValues, AuthSubmitHandler, BaseAuthFormProps, BaseClassNames, SocialProvider, SocialProvidersProps, } from "./types.js";
-export { AuthFormClassNamesProvider, useAuthFormClassNames, } from "./class-names.js";
-export type { AuthFormClassNamesProviderProps } from "./class-names.js";
-export { SignInForm } from "./sign-in-form.js";
-export type { SignInFormProps, SignInLabels, SignInValues, } from "./sign-in-form.js";
-export { SignUpForm } from "./sign-up-form.js";
-export type { SignUpFormProps, SignUpLabels, SignUpValues, } from "./sign-up-form.js";
-export { RequestPasswordResetForm } from "./request-password-reset-form.js";
-export type { RequestPasswordResetFormProps, RequestPasswordResetLabels, RequestPasswordResetValues, } from "./request-password-reset-form.js";
-export { ResetPasswordForm } from "./reset-password-form.js";
-export type { ResetPasswordFormProps, ResetPasswordLabels, ResetPasswordValues, } from "./reset-password-form.js";
-export { MfaEnrollmentForm } from "./mfa-enrollment-form.js";
-export type { MfaEnrollmentData, MfaEnrollmentFormProps, MfaEnrollmentLabels, MfaEnrollmentValues, } from "./mfa-enrollment-form.js";
-export { MfaChallengeForm } from "./mfa-challenge-form.js";
-export type { MfaChallengeFormProps, MfaChallengeLabels, MfaChallengeMethod, MfaChallengeValues, } from "./mfa-challenge-form.js";
-export { UserMenu } from "./user-menu.js";
-export type { UserMenuClassNames, UserMenuLabels, UserMenuProps, } from "./user-menu.js";
+export { useAuthForm } from "./use-auth-form.ts";
+export type { AuthFieldProps, AuthFormState, AuthFormStatus, UseAuthFormOptions, } from "./use-auth-form.ts";
+export type { AuthFormClassNames, AuthFormErrors, AuthFormResult, AuthFormValues, AuthSubmitHandler, BaseAuthFormProps, BaseClassNames, SocialProvider, SocialProvidersProps, } from "./types.ts";
+export { AuthFormClassNamesProvider, useAuthFormClassNames, } from "./class-names.tsx";
+export type { AuthFormClassNamesProviderProps } from "./class-names.tsx";
+export { SignInForm } from "./sign-in-form.tsx";
+export type { SignInFormProps, SignInLabels, SignInValues, } from "./sign-in-form.tsx";
+export { SignUpForm } from "./sign-up-form.tsx";
+export type { SignUpFormProps, SignUpLabels, SignUpValues, } from "./sign-up-form.tsx";
+export { RequestPasswordResetForm } from "./request-password-reset-form.tsx";
+export type { RequestPasswordResetFormProps, RequestPasswordResetLabels, RequestPasswordResetValues, } from "./request-password-reset-form.tsx";
+export { ResetPasswordForm } from "./reset-password-form.tsx";
+export type { ResetPasswordFormProps, ResetPasswordLabels, ResetPasswordValues, } from "./reset-password-form.tsx";
+export { MfaEnrollmentForm } from "./mfa-enrollment-form.tsx";
+export type { MfaEnrollmentData, MfaEnrollmentFormProps, MfaEnrollmentLabels, MfaEnrollmentValues, } from "./mfa-enrollment-form.tsx";
+export { MfaChallengeForm } from "./mfa-challenge-form.tsx";
+export type { MfaChallengeFormProps, MfaChallengeLabels, MfaChallengeMethod, MfaChallengeValues, } from "./mfa-challenge-form.tsx";
+export { UserMenu } from "./user-menu.tsx";
+export type { UserMenuClassNames, UserMenuLabels, UserMenuProps, } from "./user-menu.tsx";

package/{esm → dist}/react/components/mod.js

@@ -1,7 +1,7 @@
 /**
  * Prebuilt React auth components for `@udibo/oauth2` — the composable,
  * headless-first, themeable form set an app assembles into its own auth
- * surface. Works in both plain React Router v7 and Juniper (SSR React).
+ * surface. Works with React Router v7 in data or framework mode.
  *
  * These components are **composed by your app**: you own the routes, storage,
  * session, and the submit wiring. Nothing here mounts routes, talks to a
@@ -83,7 +83,6 @@
  *
  * @module
  */
-import "../../_dnt.polyfills.js";
 export { useAuthForm } from "./use-auth-form.js";
 export { AuthFormClassNamesProvider, useAuthFormClassNames, } from "./class-names.js";
 export { SignInForm } from "./sign-in-form.js";

package/{esm → dist}/react/components/request-password-reset-form.d.ts

@@ -7,8 +7,8 @@
  * @module
  */
 import type { ReactNode } from "react";
-import type { AuthFormState } from "./use-auth-form.js";
-import type { BaseAuthFormProps } from "./types.js";
+import type { AuthFormState } from "./use-auth-form.ts";
+import type { BaseAuthFormProps } from "./types.ts";
 /** Values collected by {@link RequestPasswordResetForm}. */
 export type RequestPasswordResetValues = {
     /** The email to send the reset link to. */

package/{esm → dist}/react/components/request-password-reset-form.js

@@ -35,7 +35,5 @@ export function RequestPasswordResetForm(props) {
     });
     useFocusFirstError(form);
     const classNames = useAuthFormClassNames(props.classNames);
-    return (_jsxs(AuthFormShell, { name: "request-password-reset", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, succeeded: form.succeeded
-            ? (_jsx("div", { "data-oauth2-success": "", role: "status", className: classNames.success, children: labels?.success ?? DEFAULT_SUCCESS }))
-            : null, children: [_jsx(TextField, { fieldProps: form.getFieldProps("email"), label: labels?.email ?? "Email", type: "email", autoComplete: "email", required: true, error: form.errors.email }), _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Send reset link", submittingLabel: labels?.submitting ?? "Sending…" })] }));
+    return (_jsxs(AuthFormShell, { name: "request-password-reset", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, succeeded: form.succeeded ? (_jsx("div", { "data-oauth2-success": "", role: "status", className: classNames.success, children: labels?.success ?? DEFAULT_SUCCESS })) : null, children: [_jsx(TextField, { fieldProps: form.getFieldProps("email"), label: labels?.email ?? "Email", type: "email", autoComplete: "email", required: true, error: form.errors.email }), _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Send reset link", submittingLabel: labels?.submitting ?? "Sending…" })] }));
 }

package/{esm → dist}/react/components/reset-password-form.d.ts

@@ -7,8 +7,8 @@
  * @module
  */
 import { type ReactNode } from "react";
-import type { AuthFormState } from "./use-auth-form.js";
-import type { BaseAuthFormProps } from "./types.js";
+import type { AuthFormState } from "./use-auth-form.ts";
+import type { BaseAuthFormProps } from "./types.ts";
 /** Values collected by {@link ResetPasswordForm}. */
 export type ResetPasswordValues = {
     /** The new password. */

package/{esm → dist}/react/components/reset-password-form.js

@@ -40,8 +40,8 @@ export function ResetPasswordForm(props) {
         validate: (values) => {
             const errors = {};
             if (values.password !== values.confirmPassword) {
-                errors.confirmPassword = labels?.passwordMismatch ??
-                    "Passwords do not match.";
+                errors.confirmPassword =
+                    labels?.passwordMismatch ?? "Passwords do not match.";
             }
             return errors;
         },

package/{esm → dist}/react/components/sign-in-form.d.ts

@@ -8,8 +8,8 @@
  * @module
  */
 import type { ReactNode } from "react";
-import type { AuthFormState } from "./use-auth-form.js";
-import type { BaseAuthFormProps, SocialProvidersProps } from "./types.js";
+import type { AuthFormState } from "./use-auth-form.ts";
+import type { BaseAuthFormProps, SocialProvidersProps } from "./types.ts";
 /** Values collected by {@link SignInForm}. */
 export type SignInValues = {
     /** Email address or username. */

package/{esm → dist}/react/components/sign-in-form.js

@@ -35,9 +35,5 @@ export function SignInForm(props) {
     useFocusFirstError(form);
     const classNames = useAuthFormClassNames(props.classNames);
     const rememberField = form.getFieldProps("remember");
-    return (_jsxs(AuthFormShell, { name: "sign-in", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, aboveForm: _jsx(SocialButtons, { socialProviders: socialProviders, onSocialSelect: onSocialSelect, socialHref: socialHref }), children: [_jsx(TextField, { fieldProps: form.getFieldProps("identifier"), label: labels?.identifier ?? "Email or username", autoComplete: "username", required: true, error: form.errors.identifier }), _jsx(TextField, { fieldProps: form.getFieldProps("password"), label: labels?.password ?? "Password", type: "password", autoComplete: "current-password", required: true, error: form.errors.password, children: forgotPasswordHref
-                    ? (_jsx("a", { href: forgotPasswordHref, "data-oauth2-forgot-password": "", className: classNames.hint, children: labels?.forgotPassword ?? "Forgot password?" }))
-                    : null }), showRemember
-                ? (_jsx("div", { "data-oauth2-field": "remember", className: classNames.field, children: _jsxs("label", { htmlFor: rememberField.id, "data-oauth2-label": "", className: classNames.label, children: [_jsx("input", { ...rememberField, type: "checkbox", "data-oauth2-input": "", className: classNames.input }), labels?.remember ?? "Remember me"] }) }))
-                : null, _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Sign in", submittingLabel: labels?.submitting ?? "Signing in…" })] }));
+    return (_jsxs(AuthFormShell, { name: "sign-in", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, aboveForm: _jsx(SocialButtons, { socialProviders: socialProviders, onSocialSelect: onSocialSelect, socialHref: socialHref }), children: [_jsx(TextField, { fieldProps: form.getFieldProps("identifier"), label: labels?.identifier ?? "Email or username", autoComplete: "username", required: true, error: form.errors.identifier }), _jsx(TextField, { fieldProps: form.getFieldProps("password"), label: labels?.password ?? "Password", type: "password", autoComplete: "current-password", required: true, error: form.errors.password, children: forgotPasswordHref ? (_jsx("a", { href: forgotPasswordHref, "data-oauth2-forgot-password": "", className: classNames.hint, children: labels?.forgotPassword ?? "Forgot password?" })) : null }), showRemember ? (_jsx("div", { "data-oauth2-field": "remember", className: classNames.field, children: _jsxs("label", { htmlFor: rememberField.id, "data-oauth2-label": "", className: classNames.label, children: [_jsx("input", { ...rememberField, type: "checkbox", "data-oauth2-input": "", className: classNames.input }), labels?.remember ?? "Remember me"] }) })) : null, _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Sign in", submittingLabel: labels?.submitting ?? "Signing in…" })] }));
 }

package/{esm → dist}/react/components/sign-up-form.d.ts

@@ -7,8 +7,8 @@
  * @module
  */
 import type { ReactNode } from "react";
-import type { AuthFormState } from "./use-auth-form.js";
-import type { BaseAuthFormProps, SocialProvidersProps } from "./types.js";
+import type { AuthFormState } from "./use-auth-form.ts";
+import type { BaseAuthFormProps, SocialProvidersProps } from "./types.ts";
 /** Values collected by {@link SignUpForm}. */
 export type SignUpValues = {
     /** Email address. */

package/{esm → dist}/react/components/sign-up-form.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useAuthForm } from "./use-auth-form.js";
 import { AuthFormShell, SocialButtons, SubmitButton, TextField, useFocusFirstError, } from "./internal.js";
 import { useAuthFormClassNames } from "./class-names.js";
@@ -39,19 +39,13 @@ export function SignUpForm(props) {
         validate: (values) => {
             const errors = {};
             if (showConfirmPassword && values.password !== values.confirmPassword) {
-                errors.confirmPassword = labels?.passwordMismatch ??
-                    "Passwords do not match.";
+                errors.confirmPassword =
+                    labels?.passwordMismatch ?? "Passwords do not match.";
             }
             return errors;
         },
     });
     useFocusFirstError(form);
     const classNames = useAuthFormClassNames(props.classNames);
-    return (_jsxs(AuthFormShell, { name: "sign-up", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, aboveForm: _jsx(SocialButtons, { socialProviders: socialProviders, onSocialSelect: onSocialSelect, socialHref: socialHref }), children: [showUsername
-                ? (_jsx(TextField, { fieldProps: form.getFieldProps("username"), label: labels?.username ?? "Username", autoComplete: "username", required: true, error: form.errors.username }))
-                : null, _jsx(TextField, { fieldProps: form.getFieldProps("email"), label: labels?.email ?? "Email", type: "email", autoComplete: "email", required: true, error: form.errors.email }), showName
-                ? (_jsxs(_Fragment, { children: [_jsx(TextField, { fieldProps: form.getFieldProps("firstName"), label: labels?.firstName ?? "First name", autoComplete: "given-name", required: true, error: form.errors.firstName }), _jsx(TextField, { fieldProps: form.getFieldProps("lastName"), label: labels?.lastName ?? "Last name", autoComplete: "family-name", required: true, error: form.errors.lastName })] }))
-                : null, _jsx(TextField, { fieldProps: form.getFieldProps("password"), label: labels?.password ?? "Password", type: "password", autoComplete: "new-password", required: true, error: form.errors.password }), showConfirmPassword
-                ? (_jsx(TextField, { fieldProps: form.getFieldProps("confirmPassword"), label: labels?.confirmPassword ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, error: form.errors.confirmPassword }))
-                : null, _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Create account", submittingLabel: labels?.submitting ?? "Creating account…" })] }));
+    return (_jsxs(AuthFormShell, { name: "sign-up", form: form, className: className, classNames: classNames, render: children, action: props.action, method: props.method, formRef: props.formRef, aboveForm: _jsx(SocialButtons, { socialProviders: socialProviders, onSocialSelect: onSocialSelect, socialHref: socialHref }), children: [showUsername ? (_jsx(TextField, { fieldProps: form.getFieldProps("username"), label: labels?.username ?? "Username", autoComplete: "username", required: true, error: form.errors.username })) : null, _jsx(TextField, { fieldProps: form.getFieldProps("email"), label: labels?.email ?? "Email", type: "email", autoComplete: "email", required: true, error: form.errors.email }), showName ? (_jsxs(_Fragment, { children: [_jsx(TextField, { fieldProps: form.getFieldProps("firstName"), label: labels?.firstName ?? "First name", autoComplete: "given-name", required: true, error: form.errors.firstName }), _jsx(TextField, { fieldProps: form.getFieldProps("lastName"), label: labels?.lastName ?? "Last name", autoComplete: "family-name", required: true, error: form.errors.lastName })] })) : null, _jsx(TextField, { fieldProps: form.getFieldProps("password"), label: labels?.password ?? "Password", type: "password", autoComplete: "new-password", required: true, error: form.errors.password }), showConfirmPassword ? (_jsx(TextField, { fieldProps: form.getFieldProps("confirmPassword"), label: labels?.confirmPassword ?? "Confirm password", type: "password", autoComplete: "new-password", required: true, error: form.errors.confirmPassword })) : null, _jsx(SubmitButton, { isSubmitting: form.isSubmitting, label: labels?.submit ?? "Create account", submittingLabel: labels?.submitting ?? "Creating account…" })] }));
 }

package/{esm → dist}/react/components/types.d.ts

@@ -37,8 +37,8 @@ export interface AuthFormResult {
 }
 /**
  * The app-provided function that performs a form's action — a client-side
- * `fetch` in a plain React Router app, or a call that submits a router action
- * in Juniper. Receives the collected values; resolve/return an
+ * `fetch`, or a call that submits a React Router action. Receives the
+ * collected values; resolve/return an
  * {@link AuthFormResult} (or throw) to report the outcome.
  */
 export type AuthSubmitHandler<V extends AuthFormValues> = (values: V) => Promise<AuthFormResult | void> | AuthFormResult | void;

package/{esm → dist}/react/components/use-auth-form.d.ts

@@ -5,15 +5,15 @@
  * It owns field values, per-field and form-level errors, and the submit
  * lifecycle, and stays entirely presentation-free: no markup, no styling, no
  * router or network assumptions. The action is injected as `onSubmit`, so the
- * same hook drives a client-side `fetch` in a plain React Router app or a
- * router-action submit in Juniper. Reach for it directly when you want to own
+ * same hook drives a client-side `fetch` or a React Router action submit.
+ * Reach for it directly when you want to own
  * the markup completely (the "eject to headless" path); otherwise use a
  * default component, which is built on this hook.
  *
  * @module
  */
 import { type ChangeEvent } from "react";
-import type { AuthFormErrors, AuthFormValues, AuthSubmitHandler } from "./types.js";
+import type { AuthFormErrors, AuthFormValues, AuthSubmitHandler } from "./types.ts";
 /** Lifecycle status of an {@link useAuthForm} instance. */
 export type AuthFormStatus = "idle" | "submitting" | "success" | "error";
 /**