@zlooks.cn/password-auth-server 1.0.2 → 1.0.3

package/.hile-rsc/build-mtjl0eh7-90bc0b3a/client-ssr/src-plugin-password-form-3bd63d69e5-ESX5GCJR.js

@@ -1,708 +0,0 @@
-"use client";
-import {
-  RscLink,
-  USER_SESSION_COOKIE,
-  __toESM,
-  browserApiDispatchResponseSchema,
-  browserApiResponseSchema,
-  external_exports,
-  init_react,
-  isBrowserApiFailure,
-  jsx,
-  jsxs,
-  require_lib,
-  useEffect,
-  useRef,
-  useRequest,
-  useRscNavigation,
-  useState
-} from "./chunks/chunk-SH36JXFV.js";
-
-// ../user-shared/dist/identity.js
-var USER_SERVICE_NAMESPACE = "cn.zlooks.user.server";
-
-// ../user-shared/dist/events/snapshots.js
-var userSessionRevocationReasonSchema = external_exports.enum([
-  "logout",
-  "user-request",
-  "family-limit",
-  "credential-recovery"
-]);
-var displayNameSchema = external_exports.string().refine((value) => value === value.trim().normalize("NFKC"), "Display name must be normalized").refine((value) => Array.from(value).length >= 1 && Array.from(value).length <= 160, "Display name must contain 1 to 160 Unicode code points");
-var bioSchema = external_exports.string().refine((value) => value === value.trim().normalize("NFKC"), "Bio must be normalized").refine((value) => Array.from(value).length >= 1 && Array.from(value).length <= 500, "Bio must contain 1 to 500 Unicode code points");
-var httpUrlSchema = external_exports.url().max(2048).refine((value) => {
-  const protocol = new URL(value).protocol;
-  return protocol === "http:" || protocol === "https:";
-}, "URL must use HTTP or HTTPS").refine((value) => value === new URL(value).toString(), "URL must be canonical");
-var emailSchema = external_exports.email().max(320).refine((value) => value === value.toLocaleLowerCase("en-US"), "Email must be lowercase");
-var userEventSnapshotSchema = external_exports.strictObject({
-  id: external_exports.uuid(),
-  displayName: displayNameSchema.nullable(),
-  avatar: httpUrlSchema.nullable(),
-  homepage: httpUrlSchema.nullable(),
-  bio: bioSchema.nullable(),
-  email: emailSchema.nullable(),
-  emailVerified: external_exports.boolean(),
-  status: external_exports.enum(["active", "disabled", "deleted"]),
-  createdAt: external_exports.iso.datetime({ offset: true }),
-  updatedAt: external_exports.iso.datetime({ offset: true }),
-  version: external_exports.number().int().positive()
-}).superRefine((user, context) => {
-  if (user.emailVerified && user.email === null) {
-    context.addIssue({
-      code: "custom",
-      message: "A verified user snapshot must include its email",
-      path: ["email"]
-    });
-  }
-  if (Date.parse(user.updatedAt) < Date.parse(user.createdAt)) {
-    context.addIssue({
-      code: "custom",
-      message: "User updated time must not precede creation time",
-      path: ["updatedAt"]
-    });
-  }
-}).readonly();
-var userSessionFamilyEventSnapshotSchema = external_exports.strictObject({
-  id: external_exports.uuid(),
-  userId: external_exports.uuid(),
-  createdAt: external_exports.iso.datetime({ offset: true }),
-  expiresAt: external_exports.iso.datetime({ offset: true }),
-  lastSeenAt: external_exports.iso.datetime({ offset: true }),
-  revokedAt: external_exports.iso.datetime({ offset: true }).nullable(),
-  revokeReason: userSessionRevocationReasonSchema.nullable()
-}).superRefine((session, context) => {
-  const createdAt = Date.parse(session.createdAt);
-  if (session.revokedAt === null !== (session.revokeReason === null)) {
-    context.addIssue({
-      code: "custom",
-      message: "Session revocation time and reason must be present together",
-      path: ["revokedAt"]
-    });
-  }
-  if (Date.parse(session.expiresAt) <= createdAt) {
-    context.addIssue({
-      code: "custom",
-      message: "Session expiry must follow creation time",
-      path: ["expiresAt"]
-    });
-  }
-  const lastSeenAt = Date.parse(session.lastSeenAt);
-  if (lastSeenAt < createdAt || lastSeenAt > Date.parse(session.expiresAt)) {
-    context.addIssue({
-      code: "custom",
-      message: "Session last-seen time must fall within its lifetime",
-      path: ["lastSeenAt"]
-    });
-  }
-  if (session.revokedAt !== null && Date.parse(session.revokedAt) < createdAt) {
-    context.addIssue({
-      code: "custom",
-      message: "Session revoked time must not precede creation time",
-      path: ["revokedAt"]
-    });
-  }
-}).readonly();
-
-// ../event-bus/dist/index.js
-var eventType = external_exports.string().max(256).regex(/^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9-]*)+\.v[1-9][0-9]*$/);
-var serviceNamespace = external_exports.string().max(256).regex(/^[a-z][a-z0-9]*(?:\.[a-z][a-z0-9]*)+$/);
-var aggregateType = external_exports.string().regex(/^[a-z][a-z0-9-]{0,63}$/);
-var aggregateId = external_exports.string().trim().min(1).max(256);
-var eventEnvelopeSchema = external_exports.strictObject({
-  protocol: external_exports.literal("zlooks.event"),
-  protocolVersion: external_exports.literal(1),
-  eventId: external_exports.uuid(),
-  type: eventType,
-  producer: serviceNamespace,
-  aggregate: external_exports.strictObject({
-    type: aggregateType,
-    id: aggregateId
-  }).readonly(),
-  occurredAt: external_exports.iso.datetime({ offset: true }),
-  data: external_exports.unknown()
-}).readonly();
-function defineEvent(type, dataSchema5) {
-  const parsedType = eventType.parse(type);
-  return Object.freeze({
-    type: parsedType,
-    parse(value) {
-      const envelope = eventEnvelopeSchema.parse(value);
-      if (envelope.type !== parsedType) {
-        throw new TypeError(`Expected event type ${parsedType}`);
-      }
-      return Object.freeze({
-        ...envelope,
-        type: parsedType,
-        aggregate: Object.freeze({ ...envelope.aggregate }),
-        data: dataSchema5.parse(envelope.data)
-      });
-    }
-  });
-}
-
-// ../user-shared/dist/events/definition.js
-function defineUserEvent(type, aggregateType2, dataSchema5, aggregateId2) {
-  const base = defineEvent(type, dataSchema5);
-  return Object.freeze({
-    type: base.type,
-    parse(input) {
-      const event = base.parse(input);
-      if (event.producer !== USER_SERVICE_NAMESPACE) {
-        throw new TypeError(`Expected event producer ${USER_SERVICE_NAMESPACE}`);
-      }
-      if (event.aggregate.type !== aggregateType2 || event.aggregate.id !== aggregateId2(event.data)) {
-        throw new TypeError(`${type} aggregate does not identify its event data`);
-      }
-      return event;
-    }
-  });
-}
-
-// ../user-shared/dist/events/user-registered.js
-var USER_REGISTERED_EVENT_TYPE = "cn.zlooks.user.registered.v1";
-var userRegisteredDataSchema = external_exports.strictObject({
-  user: userEventSnapshotSchema
-}).refine((data) => data.user.status === "active", {
-  message: "A registered user snapshot must be active",
-  path: ["user", "status"]
-}).readonly();
-var userRegisteredEvent = defineUserEvent(USER_REGISTERED_EVENT_TYPE, "user", userRegisteredDataSchema, (data) => data.user.id);
-
-// ../user-shared/dist/events/user-email-verified.js
-var USER_EMAIL_VERIFIED_EVENT_TYPE = "cn.zlooks.user.email-verified.v1";
-var dataSchema = external_exports.strictObject({ user: userEventSnapshotSchema }).refine((data) => data.user.email !== null && data.user.emailVerified, {
-  message: "An email-verified event must contain a verified email snapshot",
-  path: ["user", "emailVerified"]
-}).readonly();
-var userEmailVerifiedEvent = defineUserEvent(USER_EMAIL_VERIFIED_EVENT_TYPE, "user", dataSchema, (data) => data.user.id);
-
-// ../user-shared/dist/events/user-profile-updated.js
-var USER_PROFILE_UPDATED_EVENT_TYPE = "cn.zlooks.user.profile-updated.v1";
-var userProfileFieldSchema = external_exports.enum(["displayName", "avatar", "homepage", "bio"]);
-var dataSchema2 = external_exports.strictObject({
-  user: userEventSnapshotSchema,
-  changedFields: external_exports.array(userProfileFieldSchema).min(1).max(4).refine((fields) => new Set(fields).size === fields.length, "Profile fields must be unique").readonly()
-}).readonly();
-var userProfileUpdatedEvent = defineUserEvent(USER_PROFILE_UPDATED_EVENT_TYPE, "user", dataSchema2, (data) => data.user.id);
-
-// ../user-shared/dist/events/user-session-created.js
-var USER_SESSION_CREATED_EVENT_TYPE = "cn.zlooks.user.session-created.v1";
-var dataSchema3 = external_exports.strictObject({
-  user: userEventSnapshotSchema,
-  sessionFamily: userSessionFamilyEventSnapshotSchema,
-  intent: external_exports.enum(["login", "registration", "recovery"])
-}).superRefine((data, context) => {
-  if (data.sessionFamily.userId !== data.user.id) {
-    context.addIssue({
-      code: "custom",
-      message: "Session and user snapshots must identify the same user",
-      path: ["sessionFamily", "userId"]
-    });
-  }
-  if (data.sessionFamily.revokedAt !== null) {
-    context.addIssue({
-      code: "custom",
-      message: "A created session snapshot must be active",
-      path: ["sessionFamily", "revokedAt"]
-    });
-  }
-  if (data.user.status !== "active") {
-    context.addIssue({
-      code: "custom",
-      message: "A session-created event must contain an active user snapshot",
-      path: ["user", "status"]
-    });
-  }
-}).readonly();
-var userSessionCreatedEvent = defineUserEvent(USER_SESSION_CREATED_EVENT_TYPE, "session-family", dataSchema3, (data) => data.sessionFamily.id);
-
-// ../user-shared/dist/events/user-session-revoked.js
-var USER_SESSION_REVOKED_EVENT_TYPE = "cn.zlooks.user.session-revoked.v1";
-var dataSchema4 = external_exports.strictObject({
-  user: userEventSnapshotSchema,
-  sessionFamily: userSessionFamilyEventSnapshotSchema
-}).superRefine((data, context) => {
-  if (data.sessionFamily.userId !== data.user.id) {
-    context.addIssue({
-      code: "custom",
-      message: "Session and user snapshots must identify the same user",
-      path: ["sessionFamily", "userId"]
-    });
-  }
-  if (data.sessionFamily.revokedAt === null) {
-    context.addIssue({
-      code: "custom",
-      message: "A revoked session snapshot must include its revocation",
-      path: ["sessionFamily", "revokedAt"]
-    });
-  }
-}).readonly();
-var userSessionRevokedEvent = defineUserEvent(USER_SESSION_REVOKED_EVENT_TYPE, "session-family", dataSchema4, (data) => data.sessionFamily.id);
-
-// ../user-shared/dist/index.js
-var USER_BROWSER_API_PUBLIC_ROUTES = Object.freeze([
-  Object.freeze({
-    exact: "/api/auth/methods",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    exact: "/api/user/shell",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/user",
-    methods: Object.freeze(["GET", "PATCH"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/user/sessions",
-    methods: Object.freeze(["GET"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/auth/transactions",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    prefix: "/api/auth/transactions/",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([])
-  }),
-  Object.freeze({
-    exact: "/api/auth/logout",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    exact: "/api/auth/session/refresh",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  }),
-  Object.freeze({
-    prefix: "/api/user/sessions/",
-    methods: Object.freeze(["POST"]),
-    forwardCookieNames: Object.freeze([USER_SESSION_COOKIE])
-  })
-]);
-var USER_ACCOUNT_HREF = "/user.account/account";
-var USER_BROWSER_API_ERROR_CODES = Object.freeze({
-  crossOriginRejected: 1001,
-  requestRejected: 1002,
-  authenticationRequired: 1003,
-  sessionExpired: 1004,
-  authenticationDenied: 1005,
-  authenticationPending: 1006,
-  routeNotFound: 1007,
-  accountNotFound: 1008,
-  accountAlreadyExists: 1009,
-  invalidVerificationCode: 1010,
-  verificationRateLimited: 1011,
-  emailDeliveryFailed: 1012,
-  serviceUnavailable: 1013
-});
-var absolutePath = external_exports.string().min(1).max(2048).regex(/^\/(?!\/)[^?#]*$/);
-var userShellViewSchema = external_exports.discriminatedUnion("status", [
-  external_exports.strictObject({
-    status: external_exports.literal("anonymous"),
-    loginMethods: external_exports.array(external_exports.strictObject({
-      id: external_exports.string().min(1).max(128),
-      label: external_exports.string().min(1).max(80),
-      href: absolutePath
-    })).max(64)
-  }),
-  external_exports.strictObject({
-    status: external_exports.literal("authenticated"),
-    user: external_exports.strictObject({
-      label: external_exports.string().min(1).max(160),
-      secondary: external_exports.string().min(1).max(320).optional(),
-      avatarText: external_exports.string().min(1).max(8),
-      avatarUrl: external_exports.url({ protocol: /^https?$/ }).max(2048).optional()
-    }),
-    accountHref: absolutePath,
-    logoutHref: absolutePath
-  })
-]).readonly();
-var sessionCookieSchema = external_exports.discriminatedUnion("action", [
-  external_exports.strictObject({
-    action: external_exports.literal("set"),
-    value: external_exports.string().min(1).max(4096),
-    expiresAt: external_exports.iso.datetime({ offset: true })
-  }),
-  external_exports.strictObject({ action: external_exports.literal("clear") })
-]);
-var userCurrentUserRequestSchema = external_exports.strictObject({}).readonly();
-var userPublicProfileSchema = external_exports.strictObject({
-  id: external_exports.uuid(),
-  displayName: external_exports.string().trim().min(1).max(160).nullable(),
-  avatar: external_exports.url({ protocol: /^https?$/ }).max(2048).nullable(),
-  homepage: external_exports.url({ protocol: /^https?$/ }).max(2048).nullable().optional(),
-  bio: external_exports.string().trim().min(1).max(500).nullable().optional()
-}).readonly();
-var userCurrentUserSchema = userPublicProfileSchema;
-var userCurrentUserResponseSchema = external_exports.discriminatedUnion("authenticated", [
-  external_exports.strictObject({ authenticated: external_exports.literal(false) }),
-  external_exports.strictObject({
-    authenticated: external_exports.literal(true),
-    user: userCurrentUserSchema
-  })
-]).readonly();
-var userPublicProfilesRequestSchema = external_exports.strictObject({
-  userIds: external_exports.array(external_exports.uuid()).min(1).max(100).refine((userIds) => new Set(userIds).size === userIds.length, { message: "User IDs must be unique" }).readonly()
-}).readonly();
-var userPublicProfilesResponseSchema = external_exports.strictObject({
-  users: external_exports.array(userPublicProfileSchema).max(100).refine((users) => new Set(users.map((user) => user.id)).size === users.length, { message: "Public user profiles must be unique" }).readonly()
-}).readonly();
-var userBrowserApiRequestSchema = external_exports.strictObject({
-  method: external_exports.enum(["GET", "POST", "PATCH"]),
-  path: absolutePath,
-  origin: external_exports.string().max(2048).optional(),
-  clientKey: external_exports.string().regex(/^[a-f0-9]{64}$/),
-  body: external_exports.unknown().optional()
-}).readonly();
-var userBrowserApiProviderRequestSchema = external_exports.strictObject({
-  method: external_exports.enum(["GET", "POST", "PATCH"]),
-  path: absolutePath,
-  origin: external_exports.string().max(2048).optional(),
-  clientKey: external_exports.string().regex(/^[a-f0-9]{64}$/),
-  body: external_exports.unknown().optional()
-}).readonly();
-var userBrowserApiProviderResponseSchema = browserApiDispatchResponseSchema.superRefine((response, context) => {
-  for (const [index, effect] of (response.cookieEffects ?? []).entries()) {
-    if (effect.name === USER_SESSION_COOKIE)
-      continue;
-    context.addIssue({
-      code: "custom",
-      message: "User Browser API may only mutate its declared session cookie",
-      path: ["cookieEffects", index, "name"]
-    });
-  }
-}).readonly();
-var userBrowserApiResponseSchema = external_exports.strictObject({
-  status: external_exports.number().int().min(200).max(599).refine((status) => status < 300 || status >= 400),
-  body: browserApiResponseSchema,
-  sessionCookie: sessionCookieSchema.optional()
-}).superRefine((response, context) => {
-  const httpSucceeded = response.status >= 200 && response.status < 300;
-  if (httpSucceeded === !isBrowserApiFailure(response.body))
-    return;
-  context.addIssue({
-    code: "custom",
-    message: "HTTP status and browser API response code disagree",
-    path: ["body", "code"]
-  });
-}).readonly();
-var userCredentialLifecycleEventSchema = external_exports.strictObject({
-  protocol: external_exports.literal("zlooks.user.credential-lifecycle"),
-  kind: external_exports.enum(["registration", "recovery"]),
-  authenticationTransactionId: external_exports.uuid(),
-  extensionId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
-  methodId: external_exports.string().regex(/^[a-z][a-z0-9._-]{0,127}$/),
-  subject: external_exports.string().trim().min(1).max(512),
-  email: external_exports.email().max(320),
-  occurredAt: external_exports.iso.datetime({ offset: true })
-}).readonly();
-var userCredentialLifecycleResponseSchema = external_exports.strictObject({
-  acknowledged: external_exports.literal(true)
-}).readonly();
-
-// src/plugin/password-form.tsx
-var import_antd = __toESM(require_lib(), 1);
-init_react();
-
-// src/plugin/auth-response.ts
-function parseAuthenticationCompletion(input) {
-  if (input === null || typeof input !== "object" || Array.isArray(input)) {
-    throw new Error("\u8BA4\u8BC1\u54CD\u5E94\u65E0\u6548");
-  }
-  const response = input;
-  if (response.status === "verified") return { status: "verified" };
-  if (response.status === "denied") throw new Error("\u8BA4\u8BC1\u4FE1\u606F\u65E0\u6548\uFF0C\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5");
-  if (response.status === "pending") throw new Error("\u8BA4\u8BC1\u4ECD\u5728\u5904\u7406\u4E2D\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5");
-  throw new Error("\u8BA4\u8BC1\u54CD\u5E94\u65E0\u6548");
-}
-function parseAuthenticationChallenge(input) {
-  if (input === null || typeof input !== "object" || Array.isArray(input)) {
-    throw new Error("\u9A8C\u8BC1\u7801\u54CD\u5E94\u65E0\u6548");
-  }
-  const response = input;
-  if (response.status !== "pending" || !Number.isSafeInteger(response.retryAfterMs) || response.retryAfterMs <= 0 || response.retryAfterMs > 6e4) {
-    throw new Error("\u9A8C\u8BC1\u7801\u54CD\u5E94\u65E0\u6548");
-  }
-  return { retryAfterMs: response.retryAfterMs };
-}
-
-// src/plugin/password-form.module.css
-var password_form_default = {
-  authShell: "password_form_authShell",
-  introduction: "password_form_introduction",
-  eyebrow: "password_form_eyebrow",
-  introductionTitle: "password_form_introductionTitle",
-  introductionCopy: "password_form_introductionCopy",
-  formRegion: "password_form_formRegion",
-  formBody: "password_form_formBody",
-  formNote: "password_form_formNote",
-  codeRow: "password_form_codeRow",
-  changeEmail: "password_form_changeEmail",
-  alternate: "password_form_alternate",
-  alternateLinks: "password_form_alternateLinks"
-};
-
-// src/plugin/password-form.tsx
-function PasswordForm(props) {
-  const [form] = import_antd.Form.useForm();
-  const { message } = import_antd.App.useApp();
-  const request = useRequest();
-  const navigation = useRscNavigation();
-  const [transactionId, setTransactionId] = useState(props.transactionId);
-  const [mode, setMode] = useState("password");
-  const [codeSent, setCodeSent] = useState(false);
-  const [countdown, setCountdown] = useState(0);
-  const [submitting, setSubmitting] = useState(false);
-  const [sending, setSending] = useState(false);
-  const pendingSend = useRef(void 0);
-  const usesCode = props.intent !== "login" || mode === "code";
-  const needsPassword = props.intent !== "login" || mode === "password";
-  useEffect(() => {
-    if (countdown <= 0) return;
-    const timer = window.setInterval(() => setCountdown((value) => Math.max(0, value - 1)), 1e3);
-    return () => window.clearInterval(timer);
-  }, [countdown > 0]);
-  async function ensureTransaction() {
-    if (transactionId) return transactionId;
-    const created = await beginTransaction(request, props.intent);
-    setTransactionId(created);
-    return created;
-  }
-  async function sendCode() {
-    try {
-      const { email } = await form.validateFields(["email"]);
-      setSending(true);
-      const currentTransactionId = await ensureTransaction();
-      const requestId = pendingSend.current?.email === email ? pendingSend.current.requestId : crypto.randomUUID();
-      pendingSend.current = { email, requestId };
-      const challenge = await request(
-        `/api/auth/transactions/${encodeURIComponent(currentTransactionId)}/complete`,
-        {
-          method: "POST",
-          headers: { "content-type": "application/json" },
-          credentials: "same-origin",
-          body: JSON.stringify({ input: { action: "send-code", email, requestId } })
-        },
-        { errorMessage: "\u9A8C\u8BC1\u7801\u53D1\u9001\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", parse: parseAuthenticationChallenge }
-      );
-      setCodeSent(true);
-      setCountdown(Math.ceil(challenge.retryAfterMs / 1e3));
-      pendingSend.current = void 0;
-      void message.success("\u9A8C\u8BC1\u7801\u5DF2\u53D1\u9001");
-    } catch {
-    } finally {
-      setSending(false);
-    }
-  }
-  async function submit(values) {
-    setSubmitting(true);
-    try {
-      const currentTransactionId = await ensureTransaction();
-      const input = usesCode ? {
-        action: "verify-code",
-        email: values.email,
-        code: values.code,
-        ...needsPassword ? { password: values.password } : {}
-      } : { action: "password-login", email: values.email, password: values.password };
-      await request(`/api/auth/transactions/${encodeURIComponent(currentTransactionId)}/complete`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        credentials: "same-origin",
-        body: JSON.stringify({ input })
-      }, { errorMessage: "\u6CA1\u6709\u5B8C\u6210\uFF0C\u8BF7\u68C0\u67E5\u8F93\u5165\u540E\u91CD\u8BD5", parse: parseAuthenticationCompletion });
-      if (props.intent === "registration") {
-        navigation.replace(USER_ACCOUNT_HREF);
-        return;
-      }
-      navigation.replace("/");
-    } catch {
-    } finally {
-      setSubmitting(false);
-    }
-  }
-  const copy = pageCopy(props.intent);
-  return /* @__PURE__ */ jsxs(
-    "section",
-    {
-      "aria-labelledby": "password-auth-title",
-      className: password_form_default.authShell,
-      "data-auth-method": "password",
-      "data-flat-auth-layout": true,
-      children: [
-        /* @__PURE__ */ jsxs("div", { className: password_form_default.introduction, children: [
-          /* @__PURE__ */ jsx("p", { className: password_form_default.eyebrow, children: copy.step }),
-          /* @__PURE__ */ jsx("h1", { className: password_form_default.introductionTitle, id: "password-auth-title", children: copy.title }),
-          /* @__PURE__ */ jsx("p", { className: password_form_default.introductionCopy, children: copy.introduction }),
-          /* @__PURE__ */ jsx(AlternateLinks, { intent: props.intent })
-        ] }),
-        /* @__PURE__ */ jsxs("div", { className: password_form_default.formRegion, children: [
-          /* @__PURE__ */ jsx("div", { className: password_form_default.formBody, children: /* @__PURE__ */ jsxs(
-            import_antd.Form,
-            {
-              form,
-              layout: "vertical",
-              requiredMark: false,
-              scrollToFirstError: { focus: true },
-              validateTrigger: "onBlur",
-              onFinish: submit,
-              children: [
-                props.intent === "login" ? /* @__PURE__ */ jsx(import_antd.Form.Item, { children: /* @__PURE__ */ jsx(
-                  import_antd.Segmented,
-                  {
-                    "aria-label": "\u9009\u62E9\u767B\u5F55\u65B9\u5F0F",
-                    block: true,
-                    options: [{ label: "\u5BC6\u7801\u767B\u5F55", value: "password" }, { label: "\u9A8C\u8BC1\u7801\u767B\u5F55", value: "code" }],
-                    size: "large",
-                    value: mode,
-                    onChange: (value) => {
-                      setMode(value);
-                      setCodeSent(false);
-                      setCountdown(0);
-                      setTransactionId(props.transactionId);
-                      pendingSend.current = void 0;
-                      form.resetFields(["code"]);
-                    }
-                  }
-                ) }) : null,
-                /* @__PURE__ */ jsx(import_antd.Form.Item, { label: "\u90AE\u7BB1", name: "email", rules: emailRules, children: /* @__PURE__ */ jsx(import_antd.Input, { autoComplete: "username", disabled: codeSent, inputMode: "email", maxLength: 320, placeholder: "name@example.com", size: "large", type: "email" }) }),
-                codeSent ? /* @__PURE__ */ jsx(
-                  import_antd.Button,
-                  {
-                    className: password_form_default.changeEmail,
-                    disabled: sending || submitting,
-                    type: "link",
-                    onClick: () => {
-                      setCodeSent(false);
-                      setCountdown(0);
-                      setTransactionId(void 0);
-                      pendingSend.current = void 0;
-                      form.resetFields(["code"]);
-                      window.requestAnimationFrame(() => form.focusField("email"));
-                    },
-                    children: "\u4FEE\u6539\u90AE\u7BB1"
-                  }
-                ) : null,
-                usesCode ? /* @__PURE__ */ jsx(import_antd.Form.Item, { label: "\u9A8C\u8BC1\u7801", required: true, children: /* @__PURE__ */ jsxs("div", { className: password_form_default.codeRow, children: [
-                  /* @__PURE__ */ jsx(import_antd.Form.Item, { noStyle: true, name: "code", rules: [{ required: true, message: "\u8BF7\u8F93\u5165\u9A8C\u8BC1\u7801" }, { len: 6, message: "\u9A8C\u8BC1\u7801\u5E94\u4E3A 6 \u4F4D\u6570\u5B57" }, { pattern: /^\d{6}$/, message: "\u9A8C\u8BC1\u7801\u5E94\u4E3A 6 \u4F4D\u6570\u5B57" }], children: /* @__PURE__ */ jsx(import_antd.Input, { "aria-label": "\u9A8C\u8BC1\u7801", autoComplete: "one-time-code", inputMode: "numeric", maxLength: 6, placeholder: "6 \u4F4D\u9A8C\u8BC1\u7801", size: "large" }) }),
-                  /* @__PURE__ */ jsx(import_antd.Button, { disabled: countdown > 0 || submitting, loading: sending, onClick: sendCode, size: "large", children: countdown > 0 ? `${countdown} \u79D2\u540E\u91CD\u53D1` : codeSent ? "\u91CD\u65B0\u53D1\u9001" : "\u53D1\u9001\u9A8C\u8BC1\u7801" })
-                ] }) }) : null,
-                needsPassword ? /* @__PURE__ */ jsx(
-                  import_antd.Form.Item,
-                  {
-                    extra: props.intent !== "login" ? "\u81F3\u5C11 12 \u4E2A\u5B57\u7B26\uFF0C\u5EFA\u8BAE\u4F7F\u7528\u5BC6\u7801\u7BA1\u7406\u5668\u751F\u6210\u5E76\u4FDD\u5B58\u3002" : void 0,
-                    label: props.intent === "recovery" ? "\u65B0\u5BC6\u7801" : "\u5BC6\u7801",
-                    name: "password",
-                    rules: passwordRules(props.intent !== "login"),
-                    children: /* @__PURE__ */ jsx(
-                      import_antd.Input.Password,
-                      {
-                        autoComplete: props.intent === "login" ? "current-password" : "new-password",
-                        maxLength: 128,
-                        placeholder: props.intent === "login" ? "\u8F93\u5165\u5BC6\u7801" : "\u521B\u5EFA\u4E00\u4E2A\u5B89\u5168\u5BC6\u7801",
-                        size: "large"
-                      }
-                    )
-                  }
-                ) : null,
-                /* @__PURE__ */ jsx(import_antd.Button, { block: true, htmlType: "submit", loading: submitting, size: "large", type: "primary", disabled: sending || usesCode && !codeSent, children: copy.submit })
-              ]
-            }
-          ) }),
-          /* @__PURE__ */ jsxs("aside", { className: password_form_default.formNote, children: [
-            /* @__PURE__ */ jsx("p", { children: copy.description }),
-            /* @__PURE__ */ jsx("span", { children: "\u4F60\u7684\u767B\u5F55\u4FE1\u606F\u53EA\u7528\u4E8E\u8BC6\u522B\u8D26\u6237\u3002" })
-          ] })
-        ] })
-      ]
-    }
-  );
-}
-function AlternateLinks({ intent }) {
-  if (intent === "registration") return /* @__PURE__ */ jsxs("p", { className: password_form_default.alternate, children: [
-    "\u5DF2\u7ECF\u6709\u8D26\u53F7\uFF1F",
-    /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/login", children: "\u8FD4\u56DE\u767B\u5F55" })
-  ] });
-  if (intent === "recovery") return /* @__PURE__ */ jsxs("p", { className: password_form_default.alternate, children: [
-    "\u60F3\u8D77\u5BC6\u7801\u4E86\uFF1F",
-    /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/login", children: "\u8FD4\u56DE\u767B\u5F55" })
-  ] });
-  return /* @__PURE__ */ jsxs("div", { className: password_form_default.alternateLinks, children: [
-    /* @__PURE__ */ jsxs("p", { children: [
-      /* @__PURE__ */ jsx("span", { children: "\u8FD8\u6CA1\u6709\u8D26\u6237\uFF1F" }),
-      /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/register", children: "\u521B\u5EFA\u8D26\u6237" })
-    ] }),
-    /* @__PURE__ */ jsxs("p", { children: [
-      /* @__PURE__ */ jsx("span", { children: "\u5FD8\u8BB0\u5BC6\u7801\uFF1F" }),
-      /* @__PURE__ */ jsx(RscLink, { href: "/auth.password/recovery", children: "\u627E\u56DE\u5BC6\u7801" })
-    ] })
-  ] });
-}
-async function beginTransaction(request, intent) {
-  return request("/api/auth/transactions", {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    credentials: "same-origin",
-    body: JSON.stringify({ methodId: "password", intent })
-  }, { errorMessage: "\u6682\u65F6\u65E0\u6CD5\u7EE7\u7EED\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", parse: parseTransactionId });
-}
-function parseTransactionId(data) {
-  if (data === null || typeof data !== "object" || Array.isArray(data)) throw new Error("Invalid transaction response");
-  const transactionId = data.transactionId;
-  if (typeof transactionId !== "string" || !UUID.test(transactionId)) {
-    throw new Error("Invalid transaction response");
-  }
-  return transactionId;
-}
-var emailRules = [
-  { required: true, message: "\u8BF7\u8F93\u5165\u90AE\u7BB1", whitespace: true },
-  { type: "email", message: "\u8BF7\u8F93\u5165\u6709\u6548\u7684\u90AE\u7BB1\u5730\u5740" },
-  { max: 320, message: "\u90AE\u7BB1\u5730\u5740\u4E0D\u80FD\u8D85\u8FC7 320 \u4E2A\u5B57\u7B26" }
-];
-function passwordRules(requireMinimum) {
-  return [
-    { required: true, message: "\u8BF7\u8F93\u5165\u5BC6\u7801" },
-    ...requireMinimum ? [{
-      validator: async (_rule, value) => {
-        if (!value) return;
-        if (Array.from(value).length < 12) throw new Error("\u5BC6\u7801\u81F3\u5C11\u9700\u8981 12 \u4E2A\u5B57\u7B26");
-        if (new TextEncoder().encode(value).byteLength > 128) throw new Error("\u5BC6\u7801\u8FC7\u957F\uFF0C\u8BF7\u7F29\u77ED\u540E\u91CD\u8BD5");
-      }
-    }] : [{ max: 128, message: "\u5BC6\u7801\u4E0D\u80FD\u8D85\u8FC7 128 \u4E2A\u5B57\u7B26" }]
-  ];
-}
-var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-function pageCopy(intent) {
-  if (intent === "registration") return {
-    introduction: "\u9A8C\u8BC1\u90AE\u7BB1\u5E76\u521B\u5EFA\u8D26\u53F7\u540E\uFF0C\u53EF\u4EE5\u7EE7\u7EED\u5B8C\u5584\u8D44\u6599\uFF0C\u6574\u7406\u5C5E\u4E8E\u4F60\u7684\u8BB0\u5F55\u3002",
-    step: "ACCOUNT / REGISTER",
-    title: "\u521B\u5EFA\u8D26\u6237",
-    description: "\u4F7F\u7528\u90AE\u7BB1\u9A8C\u8BC1\u7801\u548C\u5BC6\u7801\u521B\u5EFA\u8D26\u53F7\u3002",
-    submit: "\u521B\u5EFA\u8D26\u53F7"
-  };
-  if (intent === "recovery") return {
-    introduction: "\u9A8C\u8BC1\u6CE8\u518C\u90AE\u7BB1\u540E\u8BBE\u7F6E\u65B0\u5BC6\u7801\uFF0C\u65E7\u8BBE\u5907\u4E0A\u7684\u767B\u5F55\u4F1A\u81EA\u52A8\u9000\u51FA\u3002",
-    step: "ACCOUNT / RECOVERY",
-    title: "\u627E\u56DE\u5BC6\u7801",
-    description: "\u9A8C\u8BC1\u7801\u53EA\u4F1A\u53D1\u9001\u5230\u5DF2\u7ECF\u6CE8\u518C\u7684\u90AE\u7BB1\u3002",
-    submit: "\u66F4\u65B0\u5BC6\u7801\u5E76\u767B\u5F55"
-  };
-  return {
-    introduction: "\u767B\u5F55\u540E\u53EF\u4EE5\u7BA1\u7406\u4E2A\u4EBA\u8D44\u6599\u4E0E\u767B\u5F55\u4F1A\u8BDD\u3002",
-    step: "ACCOUNT / SIGN IN",
-    title: "\u767B\u5F55\u8D26\u6237",
-    description: "\u4F7F\u7528\u5BC6\u7801\u6216\u90AE\u7BB1\u9A8C\u8BC1\u7801\u767B\u5F55\u4F60\u7684\u8D26\u6237\u3002",
-    submit: "\u767B\u5F55"
-  };
-}
-export {
-  PasswordForm as default
-};