@xenosystem/blocks 0.20.0 → 0.22.0

package/dist/auth/index.d.ts

@@ -252,6 +252,12 @@ interface XenoAuthGateState {
     message?: string;
     /** For `expired-offline`: when the licence was last confirmed, so the plate can say how long ago. */
     lastVerifiedAt?: number;
+    /**
+     * The host name the system browser opens for sign-in (`xenosystem.ai`), as the HOST knows it — the gate
+     * does not. Named on the sign-in plate only when it is a plain host name; absent, the plate names no domain
+     * rather than guess one (apps sign in at different origins while the domain moves).
+     */
+    signInHost?: string;
     /** Which intents the host implements. A missing one hides its affordance (COMPONENTS §1.7). */
     capabilities?: Partial<Record<XenoAuthGateIntentKind, boolean>>;
 }

package/dist/auth/index.js

@@ -131,6 +131,11 @@ import { useEffect, useState } from "react";
 import { AuthDoor, SignInForm } from "@xenosystem/components/auth";
 
 // src/auth/gate/behaviour.ts
+var HOST = /^(?=.{3,253}$)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$/i;
+function signInNote(signInHost, productName) {
+  const where = signInHost && HOST.test(signInHost) ? `at ${signInHost.toLowerCase()}` : "to sign in";
+  return `Your browser opens ${where}, where you can continue with Google, GitHub or email. ${productName} never sees your password.`;
+}
 function authGateView(state, productName, now = Date.now()) {
   const phase = deriveAuthGatePhase(state);
   const copy = plateCopy(phase, productName, state.message, formatSince(state.lastVerifiedAt, now));
@@ -159,7 +164,7 @@ function authGateView(state, productName, now = Date.now()) {
     tag: copy.tag,
     title: copy.title,
     body: copy.body,
-    note: phase === "sign-in" && !state.pending ? `Your browser opens at xenostudio.ai, where you can continue with Google, GitHub or email. ${productName} never sees your password.` : void 0,
+    note: phase === "sign-in" && !state.pending ? signInNote(state.signInHost, productName) : void 0,
     warning: copy.note,
     identity: state.identity && phase !== "sign-in" ? state.identity.email ?? state.identity.name ?? state.identity.sub : void 0,
     actions