@urbicon-ui/design-content 6.1.8

package/README.md

@@ -0,0 +1,54 @@
+# @urbicon-ui/design-content
+
+The version-pinned **bundle of Urbicon UI design knowledge** plus a package-relative
+locator for it. This is the **Knowledge plane** of the design tooling (the
+deterministic linter/manifest/rubric **Judgment** engine lives in
+[`@urbicon-ui/design-engine`](../design-engine)).
+
+Because the content ships _inside_ this package, consumers — the remote MCP server,
+the `urbicon` CLI, a CI hook — resolve it from their own install location with no
+monorepo sibling-path assumptions, and the knowledge is automatically coherent with
+the installed library version.
+
+## What's in the bundle
+
+The `content/` directory is a **build artifact** (git-ignored in dev, regenerated by
+`docs:gen:all` / `build`, shipped on publish):
+
+| File / dir | Contents |
+| --- | --- |
+| `component-catalog.json` | All components (props, variants, slots, tags) + recipes (with code) + tag index |
+| `<group>/<slug>/llm.txt` | Per-component LLM documentation (overview / examples / variants / api / slots) |
+| `design-system/principles.md` | Design principles, by topic |
+| `design-system/patterns/*.md` | Layer-4 composition patterns (dashboard, form-page, …) |
+| `guides/llms-full-template.md` | Source for the seven guide resources |
+| `icons.json` | Icon metadata (name → label / categories / keywords / component) |
+| `meta.json` | Build provenance `{ version, builtAt, contentHash }` |
+
+## API
+
+```ts
+import {
+  getCatalogPath,
+  getComponentLlmPath,
+  getContentDir,
+  getDesignSystemDir,
+  getIconsPath,
+  getTemplatePath,
+  loadContentMeta
+} from '@urbicon-ui/design-content';
+```
+
+The functions return absolute paths into the bundle (a thin, dependency-free locator);
+consumers do the reading/parsing. `loadContentMeta()` reads `meta.json`, or returns
+`null` when the bundle has not been generated yet.
+
+### Overriding the bundle location
+
+Set `URBICON_CONTENT_DIR` to point the locator at a different bundle — used in
+monorepo dev/tests against a freshly generated `content/`, or to serve an alternate
+content set.
+
+## License
+
+MIT

package/content/auth/components/account-settings/llm.txt

@@ -0,0 +1,33 @@
+
+---
+
+## AccountSettings
+Self-service account-settings panel: change name, email and
+password, and delete the account. Each section talks to `basePath` (default
+`/api/auth/account`); pair them with the server handlers
+`createUpdateProfileHandler`, `createChangeEmailHandler`,
+`createChangePasswordHandler` and `createDeleteAccountHandler`.
+
+**Import:** `import { AccountSettings } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<AccountSettings {user} onProfileUpdated={(u) => (auth.user = u)} onDeleted={() => goto('/')} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| user | `AuthUser | null` | yes |  | The current authenticated user — its `name` pre-fills the profile field and its `email` is shown as the current address. Pass `locals.user` / your auth store's user. While `null` the panel renders nothing. |
+| basePath | `string` | no | '/api/auth/account' | API base path for the account endpoints. |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| onDeleted | `() => void` | no |  | Called after the account has been deleted (e.g. redirect to a goodbye page). |
+| onProfileUpdated | `(user: AuthUser) => void` | no |  | Called with the refreshed user after a successful profile change (update your store here). |
+| slotClasses | `Partial<Record<'root' | 'title' | 'section' | 'sectionTitle' | 'field' | 'submit' | 'danger', string>>` | no |  | Per-slot class overrides. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `title`, `section`, `sectionTitle`, `field`, `submit`, `danger`

package/content/auth/components/forgot-password-page/llm.txt

@@ -0,0 +1,25 @@
+
+---
+
+## ForgotPasswordPage
+Pre-built forgot-password page. Sends POST to `apiPath` (default `/api/auth/forgot-password`).
+Pair with `createForgotPasswordHandler(authDeps)` on the server. Timing-safe to prevent email enumeration.
+
+**Import:** `import { ForgotPasswordPage } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<ForgotPasswordPage {t} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| apiPath | `string` | no | '/api/auth/forgot-password' | ApiPath property for the ForgotPasswordPage component |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| loginUrl | `string` | no | '/auth/login' | URL for the login page link. |
+| slotClasses | `AuthPageSlotClasses` | no |  | Per-slot class overrides. Keys: `root`, `card`, `title`, `form`, `field`, `submit`, `error`, `success`, `links`. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |

package/content/auth/components/invitation-manager/llm.txt

@@ -0,0 +1,28 @@
+
+---
+
+## InvitationManager
+Admin panel for managing invitation-gated registration with email toggle.
+Communicates with `basePath` (default `/api/invitations`). Pair with `createInvitationHandlers(authDeps, { authorize, roles })` on the server — mount its `POST` + `GET` on `/api/invitations` and `DELETE` on `/api/invitations/[id]`.
+
+**Import:** `import { InvitationManager } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<InvitationManager {t} roles={[{ value: 'ADMIN', label: 'Admin' }, { value: 'USER', label: 'User' }]} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| roles | `RoleOption[]` | yes |  | Available roles for the invitation menu. |
+| basePath | `string` | no | '/api/invitations' | BasePath property for the InvitationManager component |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| slotClasses | `Partial<Record<'root' | 'title' | 'form' | 'list' | 'item' | 'error', string>>` | no |  | Per-slot class overrides. See component source for available slot keys. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `title`, `form`, `list`, `item`, `error`

package/content/auth/components/login-page/llm.txt

@@ -0,0 +1,34 @@
+
+---
+
+## LoginPage
+Pre-built login page with email/password, optional passkey, and remember-me.
+Sends POST to `apiPath` (default `/api/auth/login`). Pair with `createLoginHandler(authDeps)` on the server.
+
+**Import:** `import { LoginPage } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<LoginPage {t} onSuccess={() => goto('/')} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| apiPath | `string` | no | '/api/auth/login' | API endpoint for the login request. |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| footer | `Snippet` | no |  | Content rendered below the form, above links (e.g. terms checkbox). |
+| forgotPasswordUrl | `string` | no | '/auth/forgot-password' | URL for the forgot-password page link. |
+| header | `Snippet` | no |  | Content rendered above the form (e.g. social login buttons, welcome text). |
+| links | `Snippet` | no |  | Replaces the link area below the form. |
+| mode | `'password' | 'passkey' | 'both'` | no | 'both' | Login mode. `'password'` shows only email/password, `'passkey'` shows only passkey button, `'both'` shows both with separator. |
+| onSuccess | `() => void` | no |  | Called after successful login. |
+| passkeyApiPath | `string` | no | undefined | Passkey API base path. Required when mode is `'passkey'` or `'both'`. |
+| registerUrl | `string` | no | '/auth/register' | URL for the register page link. |
+| rememberMe | `boolean` | no | false | Show a "Remember me" checkbox. When checked, sends `rememberMe: true` in the login request body. |
+| slotClasses | `AuthPageSlotClasses` | no |  | Per-slot class overrides. Keys: `root`, `card`, `title`, `form`, `field`, `submit`, `error`, `success`, `links`. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| twoFactorApiPath | `string` | no | '/api/auth/2fa/verify' | API endpoint for the 2FA verify step. When the login response signals `twoFactorRequired`, the page switches to a code-entry step that POSTs here. Pair with `createTwoFactorVerifyHandler`. |
+| unstyled | `boolean` | no |  | Strip all default styling. |

package/content/auth/components/notification-badge/llm.txt

@@ -0,0 +1,21 @@
+
+---
+
+## NotificationBadge
+Unread notification count badge. Uses blocks Badge primitive.
+Renders nothing when count is 0.
+
+**Import:** `import { NotificationBadge } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<NotificationBadge count={store.unreadCount} onclick={() => (open = !open)} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| count | `number` | yes |  | Number of unread notifications. Badge hidden when 0. |
+| class | `string` | no |  | Extra classes on the root element. |
+| onclick | `() => void` | no |  | Click handler (e.g. toggle notification center). |
+| unstyled | `boolean` | no |  | Strip all default styling. |

package/content/auth/components/notification-center/llm.txt

@@ -0,0 +1,33 @@
+
+---
+
+## NotificationCenter
+Menu-ready notification list with mark-as-read, delete, and empty state.
+Renders each notification as a clickable card with timestamp.
+
+**Import:** `import { NotificationCenter } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<NotificationCenter {t} notifications={store.notifications}
+  onMarkAsRead={(id) => store.markAsRead(id)}
+  onMarkAllAsRead={() => store.markAllAsRead()}
+/>
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| notifications | `import('../../../server/adapters/types.js').NotificationRecord[]` | yes |  | Notification records to display. |
+| class | `string` | no |  | Extra classes on the root element. |
+| item | `Snippet<[import('../../../server/adapters/types.js').NotificationRecord]>` | no |  | Custom notification item renderer. |
+| onClick | `(notification: import('../../../server/adapters/types.js').NotificationRecord) => void` | no |  | Called when a notification is clicked (e.g. to navigate to a URL). SECURITY: `notification.url` is DB-/server-sourced and untrusted — before passing it to `goto()` / `window.location`, validate it is same-origin or relative (reject `javascript:` and absolute cross-origin URLs). Never navigate to a raw `notification.url`. |
+| onDelete | `(id: string) => void` | no |  | Called when a notification is deleted. |
+| onMarkAllAsRead | `() => void` | no |  | Called when all notifications are marked as read. |
+| onMarkAsRead | `(id: string) => void` | no |  | Called when a single notification is marked as read. |
+| slotClasses | `Partial<Record<'root' | 'header' | 'list' | 'item' | 'empty', string>>` | no |  | Per-slot class overrides. See component source for available slot keys. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `header`, `list`, `item`, `empty`

package/content/auth/components/notification-listener/llm.txt

@@ -0,0 +1,24 @@
+
+---
+
+## NotificationListener
+Headless SSE listener for real-time notifications. Reconnects with exponential backoff (1–30s).
+Connects to `basePath` (default `/api/notifications/stream`). Pair with `createStreamHandler(sse)` on the server — mount its `GET` on the stream route.
+
+**Import:** `import { NotificationListener } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<NotificationListener onNotification={(n) => store.add(n)} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| basePath | `string` | no | '/api/notifications/stream' | SSE stream endpoint. Read once when the component mounts — to switch endpoints (e.g. after a user change), unmount and remount the listener. |
+| maxReconnectAttempts | `number` | no | 5 | Maximum reconnection attempts before giving up. Read once at mount. |
+| onError | `(error: Event) => void` | no |  | Called when the SSE connection encounters an error. |
+| onNotification | `(
+    notification: import('../../../server/adapters/types.js').NotificationRecord
+  ) => void` | no |  | Called when a new notification arrives via SSE. |
+| onReconnect | `(attempt: number) => void` | no |  | Called when a reconnection attempt starts. Receives current attempt number. |

package/content/auth/components/passkey-manager/llm.txt

@@ -0,0 +1,27 @@
+
+---
+
+## PasskeyManager
+Admin panel for managing passkeys (WebAuthn credentials). Register and delete passkeys.
+Communicates with `basePath` (default `/api/auth/passkey`). Pair with the `createPasskeyRegistrationOptionsHandler`, `createPasskeyRegistrationVerifyHandler`, `createPasskeyAuthenticationOptionsHandler` and `createPasskeyAuthenticationVerifyHandler` server handlers.
+
+**Import:** `import { PasskeyManager } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<PasskeyManager {t} basePath="/api/auth/passkey" />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| basePath | `string` | no | '/api/auth/passkey' | API base path for passkey operations. |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| slotClasses | `Partial<Record<'root' | 'title' | 'list' | 'item' | 'empty', string>>` | no |  | Per-slot class overrides. See component source for available slot keys. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `title`, `list`, `item`, `empty`

package/content/auth/components/push-permission-prompt/llm.txt

@@ -0,0 +1,32 @@
+
+---
+
+## PushPermissionPrompt
+Dismissible prompt asking the user to enable push notifications.
+Handles VAPID subscription and server-side registration.
+
+**Import:** `import { PushPermissionPrompt } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<PushPermissionPrompt {t} vapidPublicKey={PUBLIC_VAPID_KEY}
+  onSubscribed={(sub) => console.log('Subscribed', sub)}
+/>
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| vapidPublicKey | `string` | yes |  | VAPID public key for push subscription. |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| onDismissed | `() => void` | no |  | Called when the user dismisses the prompt. |
+| onSubscribed | `(subscription: PushSubscription) => void` | no |  | Called after successful push subscription. |
+| slotClasses | `Partial<Record<'root' | 'text' | 'actions', string>>` | no |  | Per-slot class overrides. See component source for available slot keys. |
+| subscriptionEndpoint | `string` | no | '/api/notifications/push-subscription' | API endpoint for registering subscriptions. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `text`, `actions`

package/content/auth/components/register-page/llm.txt

@@ -0,0 +1,35 @@
+
+---
+
+## RegisterPage
+Pre-built registration page with invitation-gated signup, password requirements checklist, and confirm field.
+Sends POST to `apiPath` (default `/api/auth/register`). Pair with `createRegisterHandler(authDeps)` on the server.
+
+**Import:** `import { RegisterPage } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<RegisterPage {t} onSuccess={() => goto('/')} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| apiPath | `string` | no | '/api/auth/register' | ApiPath property for the RegisterPage component |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| footer | `Snippet` | no |  | Content rendered below the form, above links (e.g. terms checkbox). |
+| header | `Snippet` | no |  | Content rendered above the form (e.g. social login buttons). |
+| links | `Snippet` | no |  | Replaces the link area. |
+| loginUrl | `string` | no | '/auth/login' | URL for the login page link. |
+| onSuccess | `() => void` | no |  | Called after successful registration. |
+| passwordMinLength | `number` | no | 8 | Minimum password length. |
+| requireDigit | `boolean` | no | true | RequireDigit property for the RegisterPage component |
+| requireLowercase | `boolean` | no | true | Require lowercase letter. |
+| requireSpecial | `boolean` | no | false | Require special character. |
+| requireUppercase | `boolean` | no | true | Require uppercase letter. |
+| showRequirements | `boolean` | no | true | Show real-time password requirements checklist. |
+| slotClasses | `AuthPageSlotClasses` | no |  | Per-slot class overrides. Keys: `root`, `card`, `title`, `form`, `field`, `submit`, `error`, `success`, `links`. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |

package/content/auth/components/reset-password-page/llm.txt

@@ -0,0 +1,26 @@
+
+---
+
+## ResetPasswordPage
+Pre-built reset-password page with password confirmation.
+Sends POST to `apiPath` (default `/api/auth/reset-password`). Pair with `createResetPasswordHandler(authDeps)` on the server.
+
+**Import:** `import { ResetPasswordPage } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<ResetPasswordPage {t} token={$page.url.searchParams.get('token') ?? ''} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| token | `string` | yes |  | Reset token from URL query parameter. |
+| apiPath | `string` | no | '/api/auth/reset-password' | ApiPath property for the ResetPasswordPage component |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| loginUrl | `string` | no | '/auth/login' | URL for the login page link. |
+| slotClasses | `AuthPageSlotClasses` | no |  | Per-slot class overrides. Keys: `root`, `card`, `title`, `form`, `field`, `submit`, `error`, `success`, `links`. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |

package/content/auth/components/session-manager/llm.txt

@@ -0,0 +1,32 @@
+
+---
+
+## SessionManager
+Lists the user's active sessions (refresh-token families) with a
+device label, last-active time and a "this device" badge, and lets them sign
+out an individual session or all other devices. Requires refresh-token
+rotation on the server (`config.refreshToken`); without it the list reports
+itself unavailable. Pair with `createListSessionsHandler` (GET `basePath`),
+`createRevokeSessionHandler` (POST `basePath/revoke`) and
+`createRevokeOtherSessionsHandler` (POST `basePath/revoke-others`).
+
+**Import:** `import { SessionManager } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<SessionManager basePath="/api/auth/sessions" />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| basePath | `string` | no | '/api/auth/sessions' | API base path for the session endpoints. |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| slotClasses | `Partial<Record<'root' | 'title' | 'list' | 'item' | 'empty' | 'badge', string>>` | no |  | Per-slot class overrides. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `title`, `list`, `item`, `empty`, `badge`

package/content/auth/components/two-factor-manager/llm.txt

@@ -0,0 +1,40 @@
+
+---
+
+## TwoFactorManager
+Self-service two-factor (TOTP) management: enrol with an
+authenticator app, show one-time backup codes, and disable with a password
+re-auth. Talks to `basePath` (default `/api/auth/account/2fa`); pair with the
+server handlers `createTwoFactorSetupHandler`, `createTwoFactorEnableHandler`
+and `createTwoFactorDisableHandler`. The core stays zero-dependency, so QR
+rendering is delegated to the `qr` snippet — without it the otpauth URI +
+Base32 secret are shown for manual entry.
+
+**Import:** `import { TwoFactorManager } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<TwoFactorManager {user} onEnabled={() => auth.checkStatus()}>
+  {#snippet qr({ uri })}
+    <MyQrCode value={uri} />
+  {/snippet}
+</TwoFactorManager>
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| user | `AuthUser | null` | yes |  | The current authenticated user — its `totpEnabled` seeds the initial state and its `email` labels the otpauth entry. While `null` the panel renders nothing. Resolve `user` before mount, or remount with `{#key user?.id}…{/key}` to re-seed after an async load. |
+| basePath | `string` | no | '/api/auth/account/2fa' | API base path for the 2FA account endpoints. |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. |
+| onDisabled | `() => void` | no |  | Called after 2FA was disabled. |
+| onEnabled | `() => void` | no |  | Called after 2FA was successfully enabled (e.g. refresh your auth store). |
+| qr | `Snippet<[{ uri: string; secret: string }]>` | no |  | QR-code renderer for the otpauth URI shown during setup. Receives the `otpauth://` `uri` and the Base32 `secret`. Optional — the package ships no QR encoder (zero-dep), so without this snippet only the URI + secret are shown for manual entry. |
+| slotClasses | `Partial<Record<'root' | 'title' | 'section' | 'sectionTitle' | 'field' | 'submit' | 'code' | 'backupCode', string>>` | no |  | Per-slot class overrides. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |
+
+### Slots (slotClasses keys)
+`root`, `title`, `section`, `sectionTitle`, `field`, `submit`, `code`, `backupCode`

package/content/auth/components/verify-email-page/llm.txt

@@ -0,0 +1,25 @@
+
+---
+
+## VerifyEmailPage
+Auto-verifying email confirmation page. Sends GET to `apiPath` (default `/api/auth/verify-email`) on mount.
+Pair with `createVerifyEmailHandler(authDeps)` on the server.
+
+**Import:** `import { VerifyEmailPage } from '@urbicon-ui/auth';`
+
+### Examples
+```svelte
+<VerifyEmailPage {t} token={$page.url.searchParams.get('token') ?? ''} />
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| token | `string` | yes |  | Verification token from URL query parameter. |
+| apiPath | `string` | no | '/api/auth/verify-email' | ApiPath property for the VerifyEmailPage component |
+| class | `string` | no |  | Extra classes on the root element. |
+| csrf | `CsrfClientOptions` | no |  | CSRF cookie/header names — only needed when the server overrides the defaults via `config.csrf`. Mutating requests echo the token automatically. |
+| fetcher | `typeof globalThis.fetch` | no |  | Custom fetch implementation for all API calls. Defaults to the global `fetch`. Useful for mock backends in demos/tests or custom retry/auth layers. |
+| slotClasses | `AuthPageSlotClasses` | no |  | Per-slot class overrides. Keys: `root`, `card`, `title`, `form`, `field`, `submit`, `error`, `success`, `links`. |
+| t | `AuthLocale` | no |  | Locale bundle. Auto-detected from i18n context when omitted. |
+| unstyled | `boolean` | no |  | Strip all default styling. |

package/content/blocks/components/area-chart/llm.txt

@@ -0,0 +1,46 @@
+
+---
+
+## AreaChart
+Area chart for trends with volume emphasis — filled regions
+under each series, optionally stacked. Zero-dependency SVG on the design-
+token palette, responsive, dark-mode aware, with a screen-reader data-table
+fallback.
+
+**Import:** `import { AreaChart } from '@urbicon-ui/blocks';`
+
+### Examples
+```svelte
+<AreaChart
+  stacked
+  data={[
+    { label: 'Jan', values: [4, 6] },
+    { label: 'Feb', values: [7, 3] }
+  ]}
+  series={[{ label: 'New' }, { label: 'Returning' }]}
+/>
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| data | `CartesianDatum[]` | yes |  | Ordered categories with per-series values. |
+| ...HTMLAttributes<HTMLElement> | `HTMLAttributes` | no |  | HTML attributes (excluding: 'children') |
+| ariaLabel | `string` | no |  | Accessible label; a summary is generated when omitted. |
+| class | `string` | no |  | Extra classes merged onto the wrapper. |
+| fillOpacity | `number` | no | 0.2 (overlay) / 0.85 (stacked) | Opacity of the area fill (0–1). |
+| formatValue | `(value: number) => string` | no |  | Format values for axis labels, tooltips, and the data table. |
+| height | `number` | no | 240 | Height property for the AreaChart component |
+| locale | `string` | no |  | BCP-47 locale for the default number formatter. |
+| margin | `ChartMargin` | no |  | Plot margins; merged over the defaults. |
+| preset | `string` | no |  | Apply a named preset registered on `<BlocksProvider>`. |
+| series | `ChartSeries[]` | no |  | Series metadata (labels + colors); defaults to one per value column. |
+| showGrid | `boolean` | no | true | Render horizontal gridlines. |
+| showLegend | `boolean` | no | true | Show the series legend (only renders with >1 series). |
+| slotClasses | `ChartSlotClasses` | no |  | Per-slot class overrides. |
+| stacked | `boolean` | no | false | Stack series cumulatively instead of overlaying them. |
+| unstyled | `boolean` | no |  | Remove all default tv classes. |
+| width | `number` | no |  | Fixed width in px; omit for responsive width. |
+
+Inherited from:
+- Omit<HTMLAttributes<HTMLElement>, 'children'> (omit-pattern)

package/content/blocks/components/bar-chart/llm.txt

@@ -0,0 +1,44 @@
+
+---
+
+## BarChart
+Categorical bar chart — single, grouped, or stacked. Zero-
+dependency SVG rendering on the design-token chart palette, responsive via
+ResizeObserver, dark-mode aware, with a screen-reader data-table fallback.
+
+**Import:** `import { BarChart } from '@urbicon-ui/blocks';`
+
+### Examples
+```svelte
+<BarChart
+  data={[
+    { label: 'Q1', values: [12, 8] },
+    { label: 'Q2', values: [19, 11] }
+  ]}
+  series={[{ label: 'Revenue' }, { label: 'Cost' }]}
+  formatValue={(v) => `${v}k`}
+/>
+```
+
+### Api
+| Prop | Type | Required | Default | Description |
+| --- | --- | :---: | --- | --- |
+| data | `BarChartDatum[]` | yes |  | Categories with per-series values. |
+| ...HTMLAttributes<HTMLElement> | `HTMLAttributes` | no |  | HTML attributes (excluding: 'children') |
+| ariaLabel | `string` | no |  | Accessible label; a summary is generated when omitted. |
+| class | `string` | no |  | Extra classes merged onto the wrapper. |
+| formatValue | `(value: number) => string` | no |  | Format values for axis labels, tooltips, and the data table. |
+| height | `number` | no | 240 | Height property for the BarChart component |
+| locale | `string` | no |  | BCP-47 locale for the default number formatter (when no `formatValue`). |
+| margin | `ChartMargin` | no |  | Plot margins; merged over the defaults. |
+| preset | `string` | no |  | Apply a named preset registered on `<BlocksProvider>`. |
+| series | `ChartSeries[]` | no |  | Series metadata (labels + colors). Defaults to one generic series per value column found in `data`. |
+| showGrid | `boolean` | no | true | Render horizontal gridlines. |
+| showLegend | `boolean` | no | true | Show the series legend (only renders with >1 series). |
+| slotClasses | `ChartSlotClasses` | no |  | Per-slot class overrides. |
+| stacked | `boolean` | no | false | Stack series instead of grouping them side by side. |
+| unstyled | `boolean` | no |  | Remove all default tv classes. |
+| width | `number` | no |  | Fixed width in px; omit for responsive width. |
+
+Inherited from:
+- Omit<HTMLAttributes<HTMLElement>, 'children'> (omit-pattern)