@domainkit/react 0.9.0 → 0.10.0

package/dist/index.mjs

@@ -2,7 +2,7 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { DnsRecord, DomainKit, Reason, Receipt } from "domainkit";
 import * as Effect from "effect/Effect";
-import { createContext, useCallback, useContext, useEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
+import { createContext, useCallback, useContext, useEffect, useId, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import * as Data from "effect/Data";
 import { Transport } from "domainkit/client";
 import { useRender } from "@base-ui/react/use-render";
@@ -84,7 +84,12 @@ const defaultIcons = {
 		cx: "12",
 		cy: "12",
 		r: "9"
-	}), /* @__PURE__ */ jsx("path", { d: "m8.5 12.5 2.5 2.5 4.5-5" })] })
+	}), /* @__PURE__ */ jsx("path", { d: "m8.5 12.5 2.5 2.5 4.5-5" })] }),
+	warning: /* @__PURE__ */ jsxs(Glyph, { children: [
+		/* @__PURE__ */ jsx("path", { d: "M10.3 3.9 2.4 17.5a2 2 0 0 0 1.7 3h15.8a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0Z" }),
+		/* @__PURE__ */ jsx("path", { d: "M12 9v4" }),
+		/* @__PURE__ */ jsx("path", { d: "M12 17h.01" })
+	] })
 };
 const IconsContext = createContext(defaultIcons);
 function IconsProvider({ children, icons }) {
@@ -105,7 +110,8 @@ function useIcons() {
 var messages_exports = /* @__PURE__ */ __exportAll({
 	english: () => english,
 	failure: () => failure,
-	merge: () => merge
+	merge: () => merge,
+	outcome: () => outcome
 });
 const entity = {
 	approval: "approval",
@@ -135,6 +141,10 @@ const recordTypes = {
 	SRV: "SRV",
 	TXT: "TXT"
 };
+/** The provider the customer acted on, or a neutral stand-in when the flow does not know it. */
+const named = (provider) => provider ?? "The provider";
+/** The domain the failure is about, or a neutral stand-in. */
+const where = (domain) => domain ?? "this domain";
 /** `accountId` reads as "Account id" until a host names the field itself. */
 const humanize = (name) => {
 	const spaced = name.replaceAll(/([a-z0-9])([A-Z])/g, "$1 $2").replaceAll(/[_-]+/g, " ").trim();
@@ -142,7 +152,9 @@ const humanize = (name) => {
 };
 const english = {
 	connect: "Connect",
-	connectWith: (method) => method,
+	methodToken: "Connect with an API token",
+	methodOAuth: (provider) => `Continue with ${provider}`,
+	methodIntegration: (provider) => `Install the ${provider} integration`,
 	disconnect: "Disconnect",
 	detach: "Detach domain",
 	cancel: "Cancel",
@@ -155,6 +167,8 @@ const english = {
 	checkDns: "Check DNS",
 	checkAgain: "Check again",
 	moreActions: "More actions",
+	moreOptions: "Need an account id?",
+	useAnotherProvider: "Use a different provider",
 	copy: "Copy",
 	copied: "Copied",
 	copyZone: "Copy zone file",
@@ -175,7 +189,8 @@ const english = {
 	cleaning: "Removing records…",
 	observing: "Checking DNS…",
 	connectTitle: (provider) => `Connect ${provider}`,
-	connectAnyTitle: "Connect your DNS provider",
+	connectAnyTitle: "Connect a DNS provider",
+	hostOwnsZone: "Owns DNS for this domain.",
 	connectDescription: (domain) => `Authorize DNS changes for ${domain}.`,
 	connectedTo: (provider) => `${provider} connected`,
 	notConnected: "No DNS provider is connected.",
@@ -240,9 +255,11 @@ const english = {
 	recordType: (record) => record._tag === "Opaque" ? record.type : recordTypes[record._tag],
 	applied: (receipt) => receipt.status === "complete" ? "DNS records added." : "Some DNS records were not added.",
 	cleaned: (receipt) => receipt.status === "complete" ? "DNS records removed." : "Some DNS records were not removed.",
-	partiallyApplied: "Some DNS changes failed. Review and retry safely.",
-	partiallyCleaned: "Some DNS records could not be deleted. Review and retry safely.",
-	outcome: (outcome) => {
+	partiallyAppliedTitle: "Some DNS changes did not land",
+	partiallyApplied: "Review what applied, then retry. Retrying is safe.",
+	partiallyCleanedTitle: "Some DNS records are still there",
+	partiallyCleaned: "Review what is left, then retry. Retrying is safe.",
+	receiptOutcome: (outcome) => {
 		switch (outcome._tag) {
 			case "Applied": return "Done";
 			case "Skipped": return "Skipped";
@@ -292,49 +309,102 @@ const english = {
 	nextCheckAt: (at) => `Next check ${at}`,
 	hostEvidence: "Other checks",
 	noEvidence: "Nothing has been checked yet.",
-	invalidInput: (reason) => reason.field === void 0 ? reason.message : `${humanize(reason.field)}: ${reason.message}`,
-	unauthenticated: () => "The provider rejected these credentials.",
-	forbidden: () => "You do not have access to this domain.",
-	notFound: (reason) => `That ${entity[reason.entity]} no longer exists.`,
-	conflict: (reason) => reason.operations.length === 1 ? "One DNS record conflicts with what is already in the zone." : `${reason.operations.length} DNS records conflict with what is already in the zone.`,
-	stale: () => "The zone changed while you were reviewing. Build a new plan.",
-	expired: (reason) => `That ${expiredEntity[reason.entity]} expired. Start again.`,
-	busy: () => "Another change is running. Try again in a moment.",
-	providerRejected: (reason) => `${reason.provider} refused the change: ${reason.message}`,
-	providerUnavailable: (reason) => `${reason.provider} is unreachable right now.`,
-	providerConflict: (reason) => `${reason.provider} already holds a conflicting record.`,
-	unsupported: (reason) => `${reason.provider} cannot ${reason.operation}.`,
-	reconnect: (reason) => `Reconnect ${reason.provider} to continue.`,
-	storageFailed: () => "The change could not be saved. Try again.",
-	cryptoFailed: () => "A stored credential could not be read.",
-	resolverFailed: (reason) => `DNS lookups through ${reason.resolver} failed.`
+	invalidInput: (reason) => ({
+		description: reason.message,
+		title: reason.field === void 0 ? "Check what you entered" : `Check the ${humanize(reason.field).toLowerCase()}`
+	}),
+	unauthenticated: (_reason, context) => ({
+		description: "Check the token can read and edit DNS for this zone, then try again.",
+		title: `${named(context.provider)} didn't accept this token`
+	}),
+	forbidden: (_reason, context) => ({
+		description: `The connection needs permission to edit DNS for ${where(context.domain)}.`,
+		title: "This connection can't change DNS here"
+	}),
+	notFound: (reason) => ({
+		description: "Reload the page and start this step again.",
+		title: `That ${entity[reason.entity]} no longer exists`
+	}),
+	conflict: (reason) => ({
+		description: "Review what the zone already holds, then build a new plan.",
+		title: reason.operations.length === 1 ? "A record is in the way" : `${reason.operations.length} records are in the way`
+	}),
+	stale: () => ({
+		description: "Review the new plan before you apply it.",
+		title: "The zone changed since you reviewed"
+	}),
+	expired: (reason) => ({
+		description: "Start this step again.",
+		title: `That ${expiredEntity[reason.entity]} expired`
+	}),
+	busy: () => ({
+		description: "Wait for it to finish, then try again.",
+		title: "Another change is running"
+	}),
+	providerRejected: (reason, context) => ({
+		description: reason.message,
+		title: `${named(context.provider ?? reason.provider)} refused the change`
+	}),
+	providerUnavailable: (reason, context) => ({
+		description: "Nothing changed. Try again in a minute.",
+		title: `${named(context.provider ?? reason.provider)} isn't responding`
+	}),
+	providerConflict: (reason, context) => ({
+		description: "Remove or rename that record at the provider, then try again.",
+		title: `${named(context.provider ?? reason.provider)} already holds a conflicting record`
+	}),
+	unsupported: (reason, context) => ({
+		description: "Nothing changed. This step needs a provider that can do it.",
+		title: `${named(context.provider ?? reason.provider)} cannot ${reason.operation}`
+	}),
+	reconnect: (reason, context) => ({
+		description: "The stored credential no longer works. Connect again to continue.",
+		title: `Reconnect ${named(context.provider ?? reason.provider)}`
+	}),
+	storageFailed: () => ({
+		description: "Nothing changed. Try again.",
+		title: "The change could not be saved"
+	}),
+	cryptoFailed: () => ({
+		description: "Connect the provider again to replace it.",
+		title: "A stored credential could not be read"
+	}),
+	resolverFailed: (reason) => ({
+		description: "The lookup failed, which says nothing about your DNS. Try again in a moment.",
+		title: `DNS lookups through ${reason.resolver} failed`
+	})
 };
 const merge = (overrides = {}) => ({
 	...english,
 	...overrides
 });
-/** The user-facing sentence for a failure, chosen by the error's reason. */
-const failure = (error, catalog) => {
+/** The title and description for a failure, chosen by the error's reason. */
+const outcome = (error, catalog, context = {}) => {
 	const reason = error.reason;
 	switch (reason._tag) {
-		case "InvalidInput": return catalog.invalidInput(reason);
-		case "Unauthenticated": return catalog.unauthenticated(reason);
-		case "Forbidden": return catalog.forbidden(reason);
-		case "NotFound": return catalog.notFound(reason);
-		case "Conflict": return catalog.conflict(reason);
-		case "Stale": return catalog.stale(reason);
-		case "Expired": return catalog.expired(reason);
-		case "Busy": return catalog.busy(reason);
-		case "ProviderRejected": return catalog.providerRejected(reason);
-		case "ProviderUnavailable": return catalog.providerUnavailable(reason);
-		case "ProviderConflict": return catalog.providerConflict(reason);
-		case "Unsupported": return catalog.unsupported(reason);
-		case "Reconnect": return catalog.reconnect(reason);
-		case "StorageFailed": return catalog.storageFailed(reason);
-		case "CryptoFailed": return catalog.cryptoFailed(reason);
-		case "ResolverFailed": return catalog.resolverFailed(reason);
+		case "InvalidInput": return catalog.invalidInput(reason, context);
+		case "Unauthenticated": return catalog.unauthenticated(reason, context);
+		case "Forbidden": return catalog.forbidden(reason, context);
+		case "NotFound": return catalog.notFound(reason, context);
+		case "Conflict": return catalog.conflict(reason, context);
+		case "Stale": return catalog.stale(reason, context);
+		case "Expired": return catalog.expired(reason, context);
+		case "Busy": return catalog.busy(reason, context);
+		case "ProviderRejected": return catalog.providerRejected(reason, context);
+		case "ProviderUnavailable": return catalog.providerUnavailable(reason, context);
+		case "ProviderConflict": return catalog.providerConflict(reason, context);
+		case "Unsupported": return catalog.unsupported(reason, context);
+		case "Reconnect": return catalog.reconnect(reason, context);
+		case "StorageFailed": return catalog.storageFailed(reason, context);
+		case "CryptoFailed": return catalog.cryptoFailed(reason, context);
+		case "ResolverFailed": return catalog.resolverFailed(reason, context);
 	}
 };
+/** The same failure as one sentence, for a host that renders text rather than a card. */
+const failure = (error, catalog, context = {}) => {
+	const { description, title } = outcome(error, catalog, context);
+	return `${title}. ${description}`;
+};
 //#endregion
 //#region src/theme.ts
 var theme_exports = /* @__PURE__ */ __exportAll({ toStyle: () => toStyle });
@@ -352,7 +422,8 @@ const variables = {
 	radius: "--domainkit-radius",
 	shadow: "--domainkit-shadow",
 	success: "--domainkit-success",
-	text: "--domainkit-text"
+	text: "--domainkit-text",
+	warning: "--domainkit-warning"
 };
 function toStyle(theme = {}) {
 	return Object.fromEntries(Object.entries(theme).flatMap(([key, value]) => value === void 0 ? [] : [[variables[key], value]]));
@@ -361,13 +432,13 @@ function toStyle(theme = {}) {
 //#region src/domain-kit.tsx
 var domain_kit_exports = /* @__PURE__ */ __exportAll({
 	ReadOnly: () => ReadOnly,
-	Root: () => Root$6,
+	Root: () => Root$7,
 	useCapabilities: () => useCapabilities,
 	useDomainKit: () => useDomainKit,
 	useReadOnly: () => useReadOnly,
 	useTransport: () => useTransport
 });
-const Context = createContext(null);
+const Context$1 = createContext(null);
 const navigateInBrowser = (url) => {
 	if (typeof window === "undefined") throw new Error("DomainKit provider authorization requires a browser or a `navigate` prop");
 	window.location.assign(url);
@@ -417,7 +488,7 @@ const usePortalContainer = (container) => {
 	const getSnapshot = useCallback(() => resolvePortalContainer(container, ownerDocument), [container, ownerDocument]);
 	return useSyncExternalStore(subscribe, getSnapshot, getSnapshot);
 };
-function Root$6({ children, colorScheme = "inherit", icons, marks = {}, messages, navigate = navigateInBrowser, onEvent, portalContainer = null, readOnly = false, revision = 0, theme, transport, ...props }) {
+function Root$7({ children, colorScheme = "inherit", icons, marks = {}, messages, navigate = navigateInBrowser, onEvent, portalContainer = null, readOnly = false, revision = 0, theme, transport, ...props }) {
 	const { capabilities, transport: stable } = useStableTransport(transport);
 	const onEventRef = useRef(onEvent);
 	useLayoutEffect(() => {
@@ -450,7 +521,7 @@ function Root$6({ children, colorScheme = "inherit", icons, marks = {}, messages
 		"data-domainkit-root": "",
 		style: themeStyle
 	});
-	return /* @__PURE__ */ jsx(Context.Provider, {
+	return /* @__PURE__ */ jsx(Context$1.Provider, {
 		value,
 		children: /* @__PURE__ */ jsx(IconsProvider, {
 			...icons === void 0 ? {} : { icons },
@@ -459,7 +530,7 @@ function Root$6({ children, colorScheme = "inherit", icons, marks = {}, messages
 	});
 }
 function useDomainKit() {
-	const value = useContext(Context);
+	const value = useContext(Context$1);
 	if (value === null) throw new Error("DomainKit components must be rendered inside DomainKit.Root");
 	return value;
 }
@@ -760,6 +831,155 @@ function useAttempt(options) {
 	};
 }
 //#endregion
+//#region src/outcome.tsx
+/**
+* What a flow says when a step ends badly: media, title, description, and the action that follows.
+* Every flow's `Outcome` binds its controller to these parts, so a failure reads the same way in
+* the connect dialog, the review dialog, and the verification popover.
+*
+*   <Connect.Outcome controller={connection} />            the default composition
+*
+*   <Connect.Outcome controller={connection}>              a composition of your own
+*     <Outcome.Header>
+*       <Outcome.Media><MyIcon /></Outcome.Media>
+*       <Outcome.Title />
+*       <Outcome.Description />
+*     </Outcome.Header>
+*     <Outcome.Content />
+*   </Connect.Outcome>
+*/
+var outcome_exports = /* @__PURE__ */ __exportAll({
+	Composition: () => Composition,
+	Content: () => Content,
+	Description: () => Description,
+	Header: () => Header$1,
+	Media: () => Media,
+	Provider: () => Provider,
+	Root: () => Root$6,
+	Title: () => Title,
+	useOutcome: () => useOutcome
+});
+const fallback = {
+	description: "",
+	layout: "card",
+	retry: null,
+	retryPart: "flow-retry",
+	title: "",
+	tone: "danger"
+};
+const Context = createContext(null);
+/** What the surrounding flow resolved, for a part of your own inside `X.Outcome`. */
+function useOutcome() {
+	return useContext(Context) ?? fallback;
+}
+/** Binds a resolved outcome to the parts below it. Flows render this; hosts rarely do. */
+function Provider({ children, value }) {
+	return /* @__PURE__ */ jsx(Context.Provider, {
+		value,
+		children
+	});
+}
+/**
+* The outcome itself. It announces, so a customer reading with assistive tech hears it. A `tone`
+* or `layout` of its own reaches every part below it, so the glyph and the words agree with the
+* root's own attributes.
+*/
+function Root$6({ layout, tone, ...props }) {
+	const value = useOutcome();
+	const resolved = {
+		...value,
+		layout: layout ?? value.layout,
+		tone: tone ?? value.tone
+	};
+	const element = usePart("div", props, {
+		layout: resolved.layout,
+		tone: resolved.tone
+	}, {
+		"data-domainkit-part": "outcome",
+		"data-layout": resolved.layout,
+		"data-tone": resolved.tone,
+		role: "alert"
+	});
+	return /* @__PURE__ */ jsx(Provider, {
+		value: resolved,
+		children: element
+	});
+}
+/** Media, title, and description together, so the action below them can move on its own. */
+function Header$1(props) {
+	const { layout, tone } = useOutcome();
+	return usePart("div", props, {
+		layout,
+		tone
+	}, { "data-domainkit-part": "outcome-header" });
+}
+/** The glyph for the tone. Children replace it; `icons` on `DomainKit.Root` replaces the set. */
+function Media({ variant = "icon", ...props }) {
+	const { layout, tone } = useOutcome();
+	const icons = useIcons();
+	const glyph = tone === "success" ? icons.success : tone === "warning" ? icons.warning : icons.failure;
+	return usePart("div", props, {
+		layout,
+		tone
+	}, {
+		"aria-hidden": "true",
+		children: glyph,
+		"data-domainkit-part": "outcome-media",
+		"data-variant": variant
+	});
+}
+/** The heading from the catalog. Children win, for a host that words it itself. */
+function Title(props) {
+	const { layout, title, tone } = useOutcome();
+	return usePart("div", props, {
+		layout,
+		tone
+	}, {
+		children: title,
+		"data-domainkit-part": "outcome-title"
+	});
+}
+/** What to do about it, from the catalog. */
+function Description(props) {
+	const { description, layout, tone } = useOutcome();
+	return usePart("p", props, {
+		layout,
+		tone
+	}, {
+		children: description,
+		"data-domainkit-part": "outcome-description"
+	});
+}
+/**
+* The actions under the header. Without children it is the flow's retry, and a flow that allows
+* none renders nothing: read-only hides every control that would start a write again.
+*/
+function Content(props) {
+	const { messages } = useDomainKit();
+	const { layout, retry, retryPart, tone } = useOutcome();
+	const element = usePart("div", props, {
+		layout,
+		tone
+	}, {
+		children: retry === null ? null : /* @__PURE__ */ jsx("button", {
+			"data-domainkit-part": retryPart,
+			onClick: retry,
+			type: "button",
+			children: messages.retry
+		}),
+		"data-domainkit-part": "outcome-content"
+	});
+	return retry === null && props.children === void 0 ? null : element;
+}
+/** Media, title, and description in a header, then the action. What `X.Outcome` renders alone. */
+function Composition() {
+	return /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsxs(Header$1, { children: [
+		/* @__PURE__ */ jsx(Media, {}),
+		/* @__PURE__ */ jsx(Title, {}),
+		/* @__PURE__ */ jsx(Description, {})
+	] }), /* @__PURE__ */ jsx(Content, {})] });
+}
+//#endregion
 //#region src/records.tsx
 var records_exports = /* @__PURE__ */ __exportAll({
 	Body: () => Body$1,
@@ -1103,24 +1323,35 @@ function Status$4({ controller, kind, ...props }) {
 		role: busy(state._tag) ? "status" : void 0
 	});
 }
-/** The failure sentence from the error's reason, with the retry the flow allows. */
-function Outcome$4({ controller, kind, ...props }) {
+/**
+* The failure, or a receipt that only partly landed: media, title, description, and the retry the
+* flow allows. Children replace the composition and keep the binding.
+*/
+function Outcome$4({ children, controller, kind, ...props }) {
 	const { messages } = useDomainKit();
 	const readOnly = useReadOnly();
 	const state = controller.state;
 	const partial = state._tag === "Applied" && state.receipt.status === "partial";
-	const element = usePart("p", props, { status: state._tag }, {
-		children: state._tag === "Failure" ? /* @__PURE__ */ jsxs(Fragment, { children: [failure(state.error, messages), readOnly ? null : /* @__PURE__ */ jsxs(Fragment, { children: [" ", /* @__PURE__ */ jsx("button", {
-			"data-domainkit-part": kind === "provisioning" ? "provisioning-retry" : "cleanup-retry",
-			onClick: controller.retry,
-			type: "button",
-			children: messages.retry
-		})] })] }) : partial ? kind === "provisioning" ? messages.partiallyApplied : messages.partiallyCleaned : null,
-		"data-domainkit-part": "flow-outcome",
-		"data-tone": "danger",
-		role: "alert"
+	const retryPart = kind === "provisioning" ? "provisioning-retry" : "cleanup-retry";
+	if (state._tag !== "Failure" && !partial) return null;
+	const words = state._tag === "Failure" ? outcome(state.error, messages) : {
+		description: kind === "provisioning" ? messages.partiallyApplied : messages.partiallyCleaned,
+		title: kind === "provisioning" ? messages.partiallyAppliedTitle : messages.partiallyCleanedTitle
+	};
+	return /* @__PURE__ */ jsx(Provider, {
+		value: {
+			description: words.description,
+			layout: props.layout ?? "card",
+			retry: readOnly || state._tag !== "Failure" ? null : controller.retry,
+			retryPart,
+			title: words.title,
+			tone: state._tag === "Failure" ? "danger" : "warning"
+		},
+		children: /* @__PURE__ */ jsx(Root$6, {
+			...props,
+			children: children ?? /* @__PURE__ */ jsx(Composition, {})
+		})
 	});
-	return state._tag === "Failure" || partial ? element : null;
 }
 /**
 * Approve and Decline. Approve authorizes the digest and applies it; Decline records the refusal
@@ -1388,9 +1619,12 @@ var connect_exports = /* @__PURE__ */ __exportAll({
 	Flow: () => Flow$2,
 	Form: () => Form,
 	Outcome: () => Outcome$2,
+	Prompt: () => Prompt,
 	Root: () => Root$2,
 	State: () => State$1,
 	Status: () => Status$2,
+	answeredInPlace: () => answeredInPlace,
+	hostProvider: () => hostProvider,
 	useController: () => useController$2
 });
 const State$1 = Data.taggedEnum();
@@ -1403,9 +1637,9 @@ const snapshotOf = (state) => {
 		case "Disconnected": return state.snapshot;
 		case "Loading":
 		case "Submitting":
-		case "SelectionRequired": return state.snapshot;
-		case "Redirecting":
-		case "Failure": return null;
+		case "SelectionRequired":
+		case "Failure": return state.snapshot;
+		case "Redirecting": return null;
 	}
 };
 const settled = (snapshot, discovery) => {
@@ -1435,6 +1669,7 @@ function useController$2({ domain, returnTo }) {
 		snapshot: null
 	});
 	const lastCommand = useRef(null);
+	const attempted = useRef(null);
 	const [inspected, setInspected] = useState(domain);
 	if (inspected !== domain) {
 		setInspected(domain);
@@ -1448,7 +1683,12 @@ function useController$2({ domain, returnTo }) {
 		setState(State$1.Loading({ snapshot: null }));
 	}
 	const onFailure = useCallback((error) => {
-		setState(State$1.Failure({ error }));
+		setState(State$1.Failure({
+			attempt: attempted.current,
+			discovery: held.current.discovery,
+			error,
+			snapshot: held.current.snapshot
+		}));
 		emit(Event.Failed({
 			domain,
 			error
@@ -1457,6 +1697,7 @@ function useController$2({ domain, returnTo }) {
 	const load = useCallback(() => {
 		if (connection === void 0) return;
 		lastCommand.current = null;
+		attempted.current = null;
 		held.current = {
 			discovery: null,
 			domain,
@@ -1521,8 +1762,9 @@ function useController$2({ domain, returnTo }) {
 		emit,
 		navigate
 	]);
-	const submit = useCallback((effect) => {
+	const submit = useCallback((effect, attempt) => {
 		if (held.current.domain !== domain) return;
+		attempted.current = attempt;
 		const command = () => {
 			setState(State$1.Submitting({ snapshot: held.current.snapshot }));
 			runner.run(effect, {
@@ -1550,7 +1792,10 @@ function useController$2({ domain, returnTo }) {
 			domain,
 			method,
 			provider: input.provider
-		}));
+		}), {
+			method: input.method,
+			provider: input.provider
+		});
 	}, [
 		connection,
 		domain,
@@ -1563,7 +1808,7 @@ function useController$2({ domain, returnTo }) {
 			connectionId: input.connectionId,
 			domain,
 			...input.zone === void 0 ? {} : { zone: input.zone }
-		}));
+		}), null);
 	}, [
 		connection,
 		domain,
@@ -1578,6 +1823,7 @@ function useController$2({ domain, returnTo }) {
 	}, [reuse, state]);
 	const release = useCallback((effect, event) => {
 		if (held.current.domain !== domain) return;
+		attempted.current = null;
 		const command = () => {
 			setState(State$1.Submitting({ snapshot: held.current.snapshot }));
 			runner.run(effect, {
@@ -1634,7 +1880,7 @@ function useController$2({ domain, returnTo }) {
 		connect,
 		detach,
 		disconnect,
-		discovery: state._tag === "Disconnected" ? state.discovery : null,
+		discovery: state._tag === "Disconnected" || state._tag === "Failure" ? state.discovery : null,
 		providers: snapshotOf(state)?.providers ?? [],
 		refresh: load,
 		retry,
@@ -1650,23 +1896,51 @@ function Root$2({ controller, ...props }) {
 		"data-state": controller.state._tag
 	});
 }
-/** The failure sentence, chosen by the error's reason, plus the retry that reason allows. */
-function Outcome$2({ controller, ...props }) {
+/**
+* Whether a failure is already answered where it was raised: beside the method the customer used.
+* A flow rendering its own `Outcome` beside the dialog skips it, so the failure announces once.
+*/
+const answeredInPlace = (controller) => controller.state._tag === "Failure" && controller.state.attempt !== null;
+/**
+* The provider whose nameservers serve this domain, as the snapshot describes it. Discovery names
+* it by id; without a descriptor there is nothing to draw, so there is no host.
+*/
+const hostProvider = (controller) => {
+	const discovery = controller.discovery;
+	if (discovery === null || discovery._tag !== "NotFound" || discovery.host === null) return null;
+	const named = discovery.host.provider;
+	return controller.providers.find((entry) => entry.id === named) ?? null;
+};
+/** The provider as the customer knows it, falling back to the id when the snapshot has no name. */
+const displayName = (controller, provider) => controller.providers.find((entry) => entry.id === provider)?.name ?? provider;
+/**
+* The last failure as a card: media, the catalog's title and description, and the retry the flow
+* allows. Children replace the composition and keep the binding.
+*/
+function Outcome$2({ children, controller, ...props }) {
 	const { messages } = useDomainKit();
 	const readOnly = useReadOnly();
 	const state = controller.state;
-	const element = usePart("p", props, { status: state._tag }, {
-		children: state._tag === "Failure" ? /* @__PURE__ */ jsxs(Fragment, { children: [failure(state.error, messages), readOnly ? null : /* @__PURE__ */ jsxs(Fragment, { children: [" ", /* @__PURE__ */ jsx("button", {
-			"data-domainkit-part": "connection-retry",
-			onClick: controller.retry,
-			type: "button",
-			children: messages.retry
-		})] })] }) : null,
-		"data-domainkit-part": "flow-outcome",
-		"data-tone": "danger",
-		role: "alert"
+	if (state._tag !== "Failure") return null;
+	const acted = state.attempt === null ? void 0 : displayName(controller, state.attempt.provider);
+	const words = outcome(state.error, messages, {
+		...controller.snapshot === null ? {} : { domain: controller.snapshot.domain },
+		...acted === void 0 ? {} : { provider: acted }
+	});
+	return /* @__PURE__ */ jsx(Provider, {
+		value: {
+			description: words.description,
+			layout: props.layout ?? "card",
+			retry: readOnly ? null : controller.retry,
+			retryPart: "connection-retry",
+			title: words.title,
+			tone: "danger"
+		},
+		children: /* @__PURE__ */ jsx(Root$6, {
+			...props,
+			children: children ?? /* @__PURE__ */ jsx(Composition, {})
+		})
 	});
-	return state._tag === "Failure" ? element : null;
 }
 function Status$2({ controller, ...props }) {
 	const { messages } = useDomainKit();
@@ -1692,14 +1966,78 @@ function Status$2({ controller, ...props }) {
 	});
 }
 /**
+* The one field a rejected command was about, if any. A provider that turns down credentials is
+* answering the secret it was given, and it names no field, so the first secret carries the
+* answer; anything else is about the request rather than one input.
+*/
+const rejected = (reason, fields) => {
+	if (reason === null) return null;
+	if (reason._tag === "InvalidInput") return fields.find((field) => field.name === reason.field)?.name ?? null;
+	if (reason._tag !== "Unauthenticated" && reason._tag !== "Forbidden") return null;
+	return fields.find((field) => field.secret)?.name ?? null;
+};
+/**
+* One declared field in shadcn's `Field` anatomy: the label, the control, the note under it, and
+* the error the provider answered with. The docs link rides the field it explains.
+*/
+function TokenField({ controller, docsUrl, field, invalid }) {
+	const { messages } = useDomainKit();
+	const icons = useIcons();
+	const id = useId();
+	return /* @__PURE__ */ jsxs("div", {
+		"data-domainkit-part": "field",
+		"data-invalid": invalid ? "" : void 0,
+		"data-orientation": "vertical",
+		children: [
+			/* @__PURE__ */ jsxs("label", {
+				"data-domainkit-part": "field-label",
+				htmlFor: id,
+				children: [messages.fieldLabel(field.name), field.required ? null : /* @__PURE__ */ jsx("span", {
+					"data-domainkit-part": "field-optional",
+					children: messages.optionalField
+				})]
+			}),
+			/* @__PURE__ */ jsx("input", {
+				"aria-invalid": invalid ? true : void 0,
+				autoComplete: "off",
+				"data-domainkit-part": "field-input",
+				id,
+				name: field.name,
+				required: field.required,
+				type: field.secret ? "password" : "text"
+			}),
+			docsUrl === null ? null : /* @__PURE__ */ jsxs("a", {
+				"data-domainkit-part": "field-description",
+				href: docsUrl,
+				rel: "noreferrer",
+				target: "_blank",
+				children: [messages.getToken, /* @__PURE__ */ jsx("span", {
+					"aria-hidden": "true",
+					"data-icon": "inline-end",
+					children: icons.external
+				})]
+			}),
+			invalid ? /* @__PURE__ */ jsx("div", {
+				"data-domainkit-part": "field-error",
+				children: /* @__PURE__ */ jsx(Outcome$2, {
+					controller,
+					layout: "inline"
+				})
+			}) : null
+		]
+	});
+}
+/**
 * One auth method, rendered from its descriptor. A token method draws an input per declared
-* field, so a provider that needs an account id alongside a token needs no code here.
+* field, so a provider that needs an account id alongside a token needs no code here. The fields
+* a provider does not need sit behind a disclosure, so the common form is one field.
 */
 function Method({ controller, method, provider }) {
 	const { messages } = useDomainKit();
-	const icons = useIcons();
-	const busy = controller.state._tag === "Submitting";
-	if (method.fields === null) return /* @__PURE__ */ jsx("button", {
+	const state = controller.state;
+	const busy = state._tag === "Submitting";
+	const failed = state._tag === "Failure" && state.attempt !== null && state.attempt.provider === provider.id && state.attempt.method === method.kind;
+	if (method.fields === null) return /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("button", {
 		"data-domainkit-part": method.kind === "oauth" ? "oauth-connect" : "integration-connect",
 		"data-provider": provider.id,
 		disabled: busy,
@@ -1708,9 +2046,22 @@ function Method({ controller, method, provider }) {
 			provider: provider.id
 		}),
 		type: "button",
-		children: messages.connectWith(method.label)
-	});
+		children: method.kind === "oauth" ? messages.methodOAuth(provider.name) : messages.methodIntegration(provider.name)
+	}), failed ? /* @__PURE__ */ jsx(Outcome$2, {
+		controller,
+		layout: "inline"
+	}) : null] });
 	const fields = method.fields;
+	const answered = rejected(failed && state._tag === "Failure" ? state.error.reason : null, fields);
+	const required = fields.filter((field) => field.required);
+	const optional = fields.filter((field) => !field.required);
+	const explains = (required.find((field) => field.secret) ?? required[0] ?? optional[0])?.name;
+	const render = (field) => /* @__PURE__ */ jsx(TokenField, {
+		controller,
+		docsUrl: field.name === explains ? method.docsUrl : null,
+		field,
+		invalid: field.name === answered
+	}, field.name);
 	return /* @__PURE__ */ jsxs("form", {
 		"data-domainkit-part": "token-connect",
 		"data-provider": provider.id,
@@ -1729,48 +2080,58 @@ function Method({ controller, method, provider }) {
 			});
 		},
 		children: [
-			fields.map((field) => /* @__PURE__ */ jsxs("label", {
-				"data-domainkit-part": "token-field",
-				children: [/* @__PURE__ */ jsxs("span", {
-					"data-domainkit-part": "token-field-label",
-					children: [messages.fieldLabel(field.name), field.required ? null : /* @__PURE__ */ jsx("span", {
-						"data-domainkit-part": "token-field-optional",
-						children: messages.optionalField
-					})]
-				}), /* @__PURE__ */ jsx("input", {
-					autoComplete: "off",
-					"data-domainkit-part": "token-field-input",
-					name: field.name,
-					required: field.required,
-					type: field.secret ? "password" : "text"
-				})]
-			}, field.name)),
-			method.docsUrl === null ? null : /* @__PURE__ */ jsxs("a", {
-				"data-domainkit-part": "token-docs",
-				href: method.docsUrl,
-				rel: "noreferrer",
-				target: "_blank",
-				children: [messages.getToken, /* @__PURE__ */ jsx("span", {
-					"aria-hidden": "true",
-					"data-icon": "inline-end",
-					children: icons.external
-				})]
+			required.map(render),
+			optional.length === 0 ? null : /* @__PURE__ */ jsxs("details", {
+				"data-domainkit-part": "more-options",
+				open: optional.some((field) => field.name === answered) || void 0,
+				children: [/* @__PURE__ */ jsx("summary", {
+					"data-domainkit-part": "more-options-trigger",
+					children: messages.moreOptions
+				}), optional.map(render)]
 			}),
+			failed && answered === null ? /* @__PURE__ */ jsx(Outcome$2, {
+				controller,
+				layout: "inline"
+			}) : null,
 			/* @__PURE__ */ jsx("button", {
 				"data-domainkit-part": "token-submit",
 				disabled: busy,
 				type: "submit",
-				children: messages.connectWith(method.label)
+				children: messages.methodToken
 			})
 		]
 	});
 }
 /**
+* One provider's methods. With a heading it is a disclosure the customer opens; the provider a
+* narrowed dialog is about carries no heading, because the dialog title already names it.
+*/
+function Authentication({ controller, onOpen, open, provider }) {
+	const methods = provider.methods.map((method) => /* @__PURE__ */ jsx(Method, {
+		controller,
+		method,
+		provider
+	}, `${provider.id}:${method.kind}`));
+	return /* @__PURE__ */ jsxs("section", {
+		"data-domainkit-part": "provider-authentication",
+		"data-provider": provider.id,
+		"data-state": open ? "open" : "closed",
+		children: [onOpen === void 0 ? null : /* @__PURE__ */ jsxs("button", {
+			"aria-expanded": open,
+			"data-domainkit-part": "provider-heading",
+			onClick: onOpen,
+			type: "button",
+			children: [/* @__PURE__ */ jsx(Mark, { provider }), /* @__PURE__ */ jsx("strong", { children: provider.name })]
+		}), open ? methods : null]
+	});
+}
+/**
 * Everything a disconnected domain can do: a connection discovery already found, the connections
 * this owner already has, then each provider's declared methods.
 */
 function Form({ controller, ...props }) {
 	const { messages } = useDomainKit();
+	const [opened, setOpened] = useState(null);
 	const state = controller.state;
 	const snapshot = controller.snapshot;
 	const discovery = controller.discovery;
@@ -1781,6 +2142,14 @@ function Form({ controller, ...props }) {
 	const resolved = discovery !== null && discovery._tag === "Resolved" ? discovery : null;
 	const reusable = snapshot?.reusable ?? [];
 	const providers = controller.providers;
+	const host = hostProvider(controller);
+	const others = providers.filter((provider) => provider.id !== host?.id);
+	const authentication = (provider, open) => /* @__PURE__ */ jsx(Authentication, {
+		controller,
+		onOpen: () => setOpened(open ? "" : provider.id),
+		open,
+		provider
+	}, provider.id);
 	return usePart("div", props, { status: state._tag }, {
 		children: /* @__PURE__ */ jsxs(Fragment, { children: [
 			resolved === null ? null : /* @__PURE__ */ jsxs("section", {
@@ -1827,17 +2196,17 @@ function Form({ controller, ...props }) {
 			providers.length === 0 ? /* @__PURE__ */ jsx("p", {
 				"data-domainkit-part": "target-unavailable",
 				children: messages.noProviders
-			}) : providers.map((provider) => /* @__PURE__ */ jsxs("section", {
-				"data-domainkit-part": "provider-authentication",
-				children: [/* @__PURE__ */ jsxs("div", {
-					"data-domainkit-part": "provider-heading",
-					children: [/* @__PURE__ */ jsx(Mark, { provider }), /* @__PURE__ */ jsx("strong", { children: provider.name })]
-				}), provider.methods.map((method) => /* @__PURE__ */ jsx(Method, {
-					controller,
-					method,
-					provider
-				}, `${provider.id}:${method.kind}`))]
-			}, provider.id))
+			}) : host === null ? others.map((provider) => authentication(provider, opened === null ? provider.id === others[0]?.id : opened === provider.id)) : /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Authentication, {
+				controller,
+				open: true,
+				provider: host
+			}), others.length === 0 ? null : /* @__PURE__ */ jsxs("details", {
+				"data-domainkit-part": "other-providers",
+				children: [/* @__PURE__ */ jsx("summary", {
+					"data-domainkit-part": "other-providers-trigger",
+					children: messages.useAnotherProvider
+				}), others.map((provider) => authentication(provider, opened === provider.id))]
+			})] })
 		] }),
 		"data-domainkit-part": "connection-form"
 	});
@@ -1847,17 +2216,23 @@ function Dialog$2({ children, controller, render, title, trigger }) {
 	const { colorScheme, messages, portalContainer, themeStyle } = useDomainKit();
 	const readOnly = useReadOnly();
 	const [open, setOpen] = useState(false);
-	const busy = controller.state._tag === "Submitting";
+	const state = controller.state;
+	const busy = state._tag === "Submitting";
+	const unattributed = state._tag === "Failure" && !answeredInPlace(controller);
 	const snapshot = controller.snapshot;
-	const provider = snapshot?.provider;
-	const heading = title ?? (provider === null || provider === void 0 ? messages.connectAnyTitle : messages.connectTitle(provider));
+	const attached = snapshot?.provider ?? null;
+	const host = hostProvider(controller);
+	const named = attached === null ? host?.name ?? null : displayName(controller, attached);
+	const heading = title ?? (named === null ? messages.connectAnyTitle : messages.connectTitle(named));
+	const running = state._tag === "Loading" || state._tag === "Submitting" || state._tag === "Redirecting" || state._tag === "SelectionRequired";
+	const label = named === null ? messages.connectAnyTitle : messages.connect;
 	const body = children ?? /* @__PURE__ */ jsx(Form, { controller });
 	if (readOnly) return /* @__PURE__ */ jsx(Fragment, {});
 	if (render !== void 0) return /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("button", {
 		"data-domainkit-part": "connection-trigger",
 		onClick: () => setOpen(!open),
 		type: "button",
-		children: trigger ?? messages.connect
+		children: trigger ?? label
 	}), render({
 		children: body,
 		open
@@ -1873,7 +2248,7 @@ function Dialog$2({ children, controller, render, title, trigger }) {
 		open,
 		children: [/* @__PURE__ */ jsx(Dialog.Trigger, {
 			"data-domainkit-part": "connection-trigger",
-			children: trigger ?? messages.connect
+			children: trigger ?? label
 		}), /* @__PURE__ */ jsxs(Dialog.Portal, {
 			container: portalContainer,
 			children: [/* @__PURE__ */ jsx(Dialog.Backdrop, {
@@ -1907,9 +2282,9 @@ function Dialog$2({ children, controller, render, title, trigger }) {
 					/* @__PURE__ */ jsxs("div", {
 						"data-domainkit-part": "dialog-body",
 						children: [
-							/* @__PURE__ */ jsx(Status$2, { controller }),
+							running ? /* @__PURE__ */ jsx(Status$2, { controller }) : null,
 							body,
-							/* @__PURE__ */ jsx(Outcome$2, { controller })
+							unattributed ? /* @__PURE__ */ jsx(Outcome$2, { controller }) : null
 						]
 					}),
 					busy ? null : /* @__PURE__ */ jsx("div", {
@@ -1924,6 +2299,41 @@ function Dialog$2({ children, controller, render, title, trigger }) {
 		})]
 	});
 }
+/**
+* The disconnected offer: the provider whose nameservers serve the domain, what that means, and
+* the trigger that connects it. With no host detected there is nothing to offer, so nothing
+* renders unless the host application asks for the dialog anyway.
+*/
+function Prompt({ connect = "detected", controller, ...props }) {
+	const { messages } = useDomainKit();
+	const readOnly = useReadOnly();
+	const state = controller.state;
+	const host = hostProvider(controller);
+	const discovery = controller.discovery;
+	const offers = host !== null || discovery !== null && discovery._tag !== "NotFound" || (controller.snapshot?.reusable.length ?? 0) > 0;
+	const inFlight = state._tag === "Submitting" || state._tag === "Redirecting" || state._tag === "SelectionRequired" || state._tag === "Reconnect";
+	const element = usePart("div", props, { status: state._tag }, {
+		children: /* @__PURE__ */ jsxs(Fragment, { children: [host === null ? null : /* @__PURE__ */ jsxs("div", {
+			"data-domainkit-part": "host-identity",
+			children: [
+				/* @__PURE__ */ jsx(Mark, { provider: host }),
+				/* @__PURE__ */ jsx("span", {
+					"data-domainkit-part": "host-name",
+					children: host.name
+				}),
+				/* @__PURE__ */ jsx("span", {
+					"data-domainkit-part": "host-statement",
+					children: messages.hostOwnsZone
+				})
+			]
+		}), /* @__PURE__ */ jsx(Dialog$2, { controller })] }),
+		"data-domainkit-part": "connect-prompt",
+		"data-host": host?.id
+	});
+	if (!inFlight && !offers && connect !== "always") return null;
+	if (readOnly && host === null) return null;
+	return element;
+}
 /** A connected domain: which provider holds it, and how to let it go. */
 function Card({ controller, ...props }) {
 	const { messages } = useDomainKit();
@@ -1958,8 +2368,8 @@ function Card({ controller, ...props }) {
 		"data-domainkit-part": "connected-card"
 	});
 }
-/** Connection on its own: the card once connected, the dialog until then. */
-function Flow$2({ domain, returnTo, ...props }) {
+/** Connection on its own: the card once connected, the prompt until then. */
+function Flow$2({ connect, domain, returnTo, ...props }) {
 	const controller = useController$2({
 		domain,
 		...returnTo === void 0 ? {} : { returnTo }
@@ -1968,7 +2378,10 @@ function Flow$2({ domain, returnTo, ...props }) {
 	return /* @__PURE__ */ jsx(Root$2, {
 		controller,
 		...props,
-		children: state._tag === "Connected" ? /* @__PURE__ */ jsx(Card, { controller }) : /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Dialog$2, { controller }), /* @__PURE__ */ jsx(Outcome$2, { controller })] })
+		children: state._tag === "Connected" ? /* @__PURE__ */ jsx(Card, { controller }) : /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx(Prompt, {
+			controller,
+			...connect === void 0 ? {} : { connect }
+		}), answeredInPlace(controller) ? null : /* @__PURE__ */ jsx(Outcome$2, { controller })] })
 	});
 }
 //#endregion
@@ -2242,25 +2655,29 @@ function Evidence({ readiness }) {
 		})]
 	});
 }
-function Outcome({ controller, ...props }) {
+/**
+* The last observation that failed. Observing reads the world rather than changing the domain, so
+* the retry stays even in read-only.
+*/
+function Outcome({ children, controller, ...props }) {
 	const { messages } = useDomainKit();
 	const state = controller.state;
-	const element = usePart("p", props, { status: state._tag }, {
-		children: state._tag === "Failure" ? /* @__PURE__ */ jsxs(Fragment, { children: [
-			failure(state.error, messages),
-			" ",
-			/* @__PURE__ */ jsx("button", {
-				"data-domainkit-part": "verification-retry",
-				onClick: controller.retry,
-				type: "button",
-				children: messages.retry
-			})
-		] }) : null,
-		"data-domainkit-part": "flow-outcome",
-		"data-tone": "danger",
-		role: "alert"
+	if (state._tag !== "Failure") return null;
+	const words = outcome(state.error, messages);
+	return /* @__PURE__ */ jsx(Provider, {
+		value: {
+			description: words.description,
+			layout: props.layout ?? "card",
+			retry: controller.retry,
+			retryPart: "verification-retry",
+			title: words.title,
+			tone: "danger"
+		},
+		children: /* @__PURE__ */ jsx(Root$6, {
+			...props,
+			children: children ?? /* @__PURE__ */ jsx(Composition, {})
+		})
 	});
-	return state._tag === "Failure" ? element : null;
 }
 /** The default verification slot: a button that observes, with the evidence behind it. */
 function Status({ controller, render, ...props }) {
@@ -2306,11 +2723,15 @@ function Status({ controller, render, ...props }) {
 //#endregion
 //#region src/domain.tsx
 var domain_exports = /* @__PURE__ */ __exportAll({ Flow: () => Flow });
-function DefaultConnection({ controller }) {
+function DefaultConnection({ connect, controller }) {
+	const stated = controller.state._tag === "Disconnected" && hostProvider(controller) !== null;
 	return controller.state._tag === "Connected" ? /* @__PURE__ */ jsx(Card, { controller }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-		/* @__PURE__ */ jsx(Status$2, { controller }),
-		/* @__PURE__ */ jsx(Dialog$2, { controller }),
-		/* @__PURE__ */ jsx(Outcome$2, { controller })
+		stated ? null : /* @__PURE__ */ jsx(Status$2, { controller }),
+		/* @__PURE__ */ jsx(Prompt, {
+			connect,
+			controller
+		}),
+		answeredInPlace(controller) ? null : /* @__PURE__ */ jsx(Outcome$2, { controller })
 	] });
 }
 function DefaultActions({ cleanup, connection, provisioning }) {
@@ -2353,7 +2774,7 @@ function DefaultActions({ cleanup, connection, provisioning }) {
 * only what the transport declares, and every part of it is a slot with a default. It adds no
 * layout containers of its own, so a host's grid can place the slot output directly.
 */
-function Flow({ domain, onApplied, onCleaned, readOnly, requirements, returnTo, slots = {}, ...props }) {
+function Flow({ connect = "detected", domain, onApplied, onCleaned, readOnly, requirements, returnTo, slots = {}, ...props }) {
 	const { capabilities } = useDomainKit();
 	const inherited = useReadOnly();
 	const connection = useController$2({
@@ -2390,9 +2811,11 @@ function Flow({ domain, onApplied, onCleaned, readOnly, requirements, returnTo,
 			value: readOnly ?? inherited,
 			children: [
 				!capabilities.includes("connection") ? null : slots.connection === void 0 ? /* @__PURE__ */ jsx(DefaultConnection, {
+					connect,
 					controller: connection,
 					domain
 				}) : slots.connection({
+					connect,
 					controller: connection,
 					domain
 				}),
@@ -2438,6 +2861,6 @@ const transport = Testing.transport;
 //#region src/failure.ts
 const Failure = Data.taggedEnum();
 //#endregion
-export { cleanup_exports as Cleanup, connect_exports as Connect, domain_exports as Domain, domain_kit_exports as DomainKit, Event, Failure, messages_exports as Messages, operations_exports as Operations, provider_exports as Provider, provision_exports as Provision, records_exports as Records, testing_exports as Testing, theme_exports as Theme, verify_exports as Verify, defaultIcons, useIcons };
+export { cleanup_exports as Cleanup, connect_exports as Connect, domain_exports as Domain, domain_kit_exports as DomainKit, Event, Failure, messages_exports as Messages, operations_exports as Operations, outcome_exports as Outcome, provider_exports as Provider, provision_exports as Provision, records_exports as Records, testing_exports as Testing, theme_exports as Theme, verify_exports as Verify, defaultIcons, useIcons };
 
 //# sourceMappingURL=index.mjs.map