@genesislcap/foundation-auth 15.14.0 → 15.14.2-FUI-2603.1

package/dist/dts/machine/actions.d.ts

@@ -1,3 +1,15 @@
+type ErrorState = {
+    error?: unknown;
+    errors?: {
+        clear(): void;
+    };
+};
+/**
+ * Drop accumulated machine errors. `ErrorMap` is shared with `startingContext`, so
+ * reset must clear it in place rather than replacing the context object.
+ * @public
+ */
+export declare function clearAuthErrorState<T extends ErrorState>(context: T, starting?: T): T;
 /**
  * Set error action.
  * @remarks
@@ -12,4 +24,5 @@ export declare const setError: {
         assignment: import("xstate").Assigner<any, any> | import("xstate").PropertyAssigner<any, any>;
     }) => import("xstate").AnyState[];
 };
+export {};
 //# sourceMappingURL=actions.d.ts.map

package/dist/dts/machine/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/machine/actions.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,eAAO,MAAM,QAAQ;;;;;;;CAYnB,CAAC"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/machine/actions.ts"],"names":[],"mappings":"AAKA,KAAK,UAAU,GAAG;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,KAAK,IAAI,IAAI,CAAA;KAAE,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAOrF;AAED;;;;;GAKG;AACH,eAAO,MAAM,QAAQ;;;;;;;CAYnB,CAAC"}

package/dist/dts/machine/actions.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=actions.test.d.ts.map

package/dist/dts/machine/actions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.test.d.ts","sourceRoot":"","sources":["../../../src/machine/actions.test.ts"],"names":[],"mappings":""}

package/dist/dts/machine/errors.d.ts

@@ -23,4 +23,9 @@ export declare class NackError extends APIError {
      */
     static fromEntity(entity: Nack): NackError | null;
 }
+/**
+ * Build a {@link NackError} from a fetch/API/NACK payload.
+ * @public
+ */
+export declare function nackErrorFromUnknown(value: unknown): NackError | null;
 //# sourceMappingURL=errors.d.ts.map

package/dist/dts/machine/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/machine/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AACjE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtC;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAU,SAAQ,QAAQ;IAE5B,MAAM,EAAE,MAAM;IACd,IAAI,CAAC,EAAE,OAAO;gBADd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,EACrB,OAAO,GAAE,MAA6B;IAKxC;;;OAGG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI;CAmBlD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/machine/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAc,MAAM,uCAAuC,CAAC;AAE7E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGtC;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAU,SAAQ,QAAQ;IAE5B,MAAM,EAAE,MAAM;IACd,IAAI,CAAC,EAAE,OAAO;gBADd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,EACrB,OAAO,GAAE,MAA6B;IAKxC;;;OAGG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI;CAwBlD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAuBrE"}

package/dist/dts/machine/guards.d.ts

@@ -2,7 +2,8 @@ import { DoneInvokeEvent, EventObject } from 'xstate';
 /**
  * is200Nack.
  * @privateRemarks
- * Required until http status codes are aligned on backend.
+ * Required until http status codes are aligned on backend. HTTP status is ignored;
+ * Genesis MESSAGE_TYPE / ERROR determine failure.
  * @public
  */
 export declare const is200Nack: <TOutput = any>(event: EventObject | DoneInvokeEvent<TOutput>) => event is DoneInvokeEvent<TOutput>;

package/dist/dts/machine/guards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../../src/machine/guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAGtD;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,GAAG,GAAG,EACrC,OAAO,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,KAC5C,KAAK,IAAI,eAAe,CAAC,OAAO,CAGxB,CAAC"}
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../../src/machine/guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAGtD;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,GAAI,OAAO,GAAG,GAAG,EACrC,OAAO,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,KAC5C,KAAK,IAAI,eAAe,CAAC,OAAO,CAWlC,CAAC"}

package/dist/dts/machine/guards.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=guards.test.d.ts.map

package/dist/dts/machine/guards.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.test.d.ts","sourceRoot":"","sources":["../../../src/machine/guards.test.ts"],"names":[],"mappings":""}

package/dist/dts/machine/machine.d.ts

@@ -55,6 +55,10 @@ export declare class DefaultAuthMachine extends AbstractMachine<AuthMachineConte
             actions: string[];
             target: string;
         };
+        dismiss: {
+            actions: string[];
+            target: string;
+        };
     };
     protected dtoTransition: () => {
         actions: string[];

package/dist/dts/machine/machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../src/machine/machine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAEf,YAAY,EACZ,iBAAiB,EAMjB,OAAO,EACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EACL,IAAI,EAQL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAEL,iBAAiB,EAIlB,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,iBAAiB,EAQlB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,KAAK,EAEV,kBAAkB,EAClB,gBAAgB,EAGhB,WAAW,EACX,WAAW,EAEZ,MAAM,SAAS,CAAC;AAGjB;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;CAAG;AAErF;;;GAGG;AACH,qBAAa,kBACX,SAAQ,eAAe,CAAC,kBAAkB,EAAE,gBAAgB,CAC5D,YAAW,WAAW;IAGd,OAAO,CAAC,IAAI;IACJ,OAAO,CAAC,YAAY;IACf,OAAO,CAAC,EAAE;IACvB,OAAO,CAAC,IAAI;IACC,OAAO,CAAC,aAAa;IAC5B,OAAO,CAAC,MAAM;IACb,OAAO,CAAC,OAAO;gBANd,IAAI,EAAE,IAAI,EACF,YAAY,EAAE,YAAY,EACrB,EAAE,EAAE,iBAAiB,EAClC,IAAI,EAAE,IAAI,EACG,aAAa,EAAE,iBAAiB,EACvC,MAAM,EAAE,UAAU,EACjB,OAAO,EAAE,WAAW;IAipB3C,KAAK,CACH,OAAO,GAAE,kBAAkB,CAAC,OAAO,IAAI,CAAC,OAAO,CAM9C;IAKH;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB,SAAS,CAAC,sBAAsB,IAAI,WAAW;IAQ/C,SAAS,CAAC,+BAA+B,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW;IAuB3E,SAAS,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,iBAAiB;IAgB3E,SAAS,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;MAwBpB;IAEF,SAAS,CAAC,aAAa;;;MAGpB;CACJ;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,mEAA0E,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C"}
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../src/machine/machine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAEf,YAAY,EACZ,iBAAiB,EAMjB,OAAO,EACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EACL,IAAI,EAQL,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAEL,iBAAiB,EAIlB,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,iBAAiB,EAQlB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,KAAK,EAEV,kBAAkB,EAClB,gBAAgB,EAGhB,WAAW,EACX,WAAW,EAEZ,MAAM,SAAS,CAAC;AAGjB;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;CAAG;AAErF;;;GAGG;AACH,qBAAa,kBACX,SAAQ,eAAe,CAAC,kBAAkB,EAAE,gBAAgB,CAC5D,YAAW,WAAW;IAGd,OAAO,CAAC,IAAI;IACJ,OAAO,CAAC,YAAY;IACf,OAAO,CAAC,EAAE;IACvB,OAAO,CAAC,IAAI;IACC,OAAO,CAAC,aAAa;IAC5B,OAAO,CAAC,MAAM;IACb,OAAO,CAAC,OAAO;gBANd,IAAI,EAAE,IAAI,EACF,YAAY,EAAE,YAAY,EACrB,EAAE,EAAE,iBAAiB,EAClC,IAAI,EAAE,IAAI,EACG,aAAa,EAAE,iBAAiB,EACvC,MAAM,EAAE,UAAU,EACjB,OAAO,EAAE,WAAW;IAyqB3C,KAAK,CACH,OAAO,GAAE,kBAAkB,CAAC,OAAO,IAAI,CAAC,OAAO,CAM9C;IAKH;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAIxB,SAAS,CAAC,sBAAsB,IAAI,WAAW;IAQ/C,SAAS,CAAC,+BAA+B,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW;IAuB3E,SAAS,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,iBAAiB;IAgB3E,SAAS,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;MA4BpB;IAEF,SAAS,CAAC,aAAa;;;MAGpB;CACJ;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,mEAA0E,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C"}

package/dist/dts/machine/types.d.ts

@@ -99,6 +99,8 @@ export type AuthMachineEvent = {
     type: 'logout';
 } | {
     type: 'cancel-mfa';
+} | {
+    type: 'dismiss';
 } | {
     type: 'change-password';
     params: ChangePasswordParams;

package/dist/dts/machine/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/machine/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAkB,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,oBAAoB,GACpB,oBAAoB,GACpB,mBAAmB,GACnB,WAAW,CAAC;AAEhB;;;;;GAKG;AACH,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD;;OAEG;IACH,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC;;OAEG;IACH,GAAG,EAAE,OAAO,CAAC;IACb;;OAEG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;CACZ;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;CACrB,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;CAChB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;CACpB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;CAC7B,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,qBAAqB,CAAC;CAC/B,GACD,eAAe,CAAC,OAAO,CAAC,GACxB,UAAU,CAAC,OAAO,CAAC,CAAC;AAExB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,gBAAgB,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,OAAO,CAAC,kBAAkB,CAKjE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,IAAI,WAAW,CAGnF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,oBAAoB,CAGhC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,oBAAoB,CAGhC;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,mBAAmB,CAG/B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,IAAI,WAAW,CAGnF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/machine/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAkB,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,oBAAoB,GACpB,oBAAoB,GACpB,mBAAmB,GACnB,WAAW,CAAC;AAEhB;;;;;GAKG;AACH,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD;;OAEG;IACH,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC;;OAEG;IACH,GAAG,EAAE,OAAO,CAAC;IACb;;OAEG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;CACZ;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;CACrB,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;CAChB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;CACpB,GACD;IACE,IAAI,EAAE,SAAS,CAAC;CACjB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,oBAAoB,CAAC;CAC9B,GACD;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,mBAAmB,CAAC;CAC7B,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,qBAAqB,CAAC;CAC/B,GACD,eAAe,CAAC,OAAO,CAAC,GACxB,UAAU,CAAC,OAAO,CAAC,CAAC;AAExB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,oBAAoB,EAAE,gBAAgB,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,OAAO,CAAC,kBAAkB,CAKjE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,IAAI,WAAW,CAGnF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,oBAAoB,CAGhC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,oBAAoB,CAGhC;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,IAAI,mBAAmB,CAG/B;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,IAAI,WAAW,CAGnF"}

package/dist/dts/mapper/utils.d.ts

@@ -44,6 +44,17 @@ export declare const fromIDPDTO: (dto: IDENTITY_PROVIDER) => IdentityProvider;
  * @public
  */
 export declare function isNackDTO(dto: unknown): dto is NACK;
+/**
+ * True when a Genesis payload contains at least one ERROR item.
+ * @public
+ */
+export declare function hasDTOErrors(dto: unknown): boolean;
+/**
+ * True when a Genesis payload must be treated as failure.
+ * HTTP status is intentionally ignored; MESSAGE_TYPE and ERROR are the contract.
+ * @public
+ */
+export declare function isFailedAuthDTO(dto: unknown): boolean;
 /**
  * isNackEntity.
  * @param entity - Potential Nack.

package/dist/dts/mapper/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/mapper/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAsB,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE/E;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,EAAE,KAAG,MAAM,EACN,CAAC;AA0CpD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,KAAK,gBAAgB,EAAE,KAAG,MACyB,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,KAAK,IAAI,EAAE,MAAM,MAAM,YAI7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,KAAK,GAAG,KAAG,GAGpC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,WAAW,GAAI,KAAK,IAAI,KAAG,IAavC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,KAAK,iBAAiB,KAAG,gBAMnD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,IAAI,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,IAAI,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,WAAW,GAAE,MAA0C,GACtD,WAAW,CAWb"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/mapper/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAsB,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE/E;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,EAAE,KAAG,MAAM,EACN,CAAC;AA0CpD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,KAAK,gBAAgB,EAAE,KAAG,MACyB,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,KAAK,IAAI,EAAE,MAAM,MAAM,YAI7D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,KAAK,GAAG,KAAG,GAGpC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,WAAW,GAAI,KAAK,IAAI,KAAG,IAavC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,KAAK,iBAAiB,KAAG,gBAMnD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,IAAI,CAEnD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGlD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,IAAI,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,WAAW,GAAE,MAA0C,GACtD,WAAW,CAWb"}

package/dist/dts/mapper/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/dts/mapper/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../src/mapper/utils.test.ts"],"names":[],"mappings":""}

package/dist/dts/routes/base.d.ts

@@ -404,6 +404,7 @@ export declare class BaseRoute extends ConfigHostElement {
     user: User;
     store: AuthStore;
     routing: AuthRouting;
+    connectedCallback(): void;
     onBack: () => void;
     toLocalisedText(text: string): string;
 }

package/dist/dts/routes/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/routes/base.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAGpD,OAAO,EAEL,OAAO,EAQR,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;GAEG;AACH,KAAK,QAAQ,GAAG,YAAY,GAAG,qBAAqB,GAAG,EAAE,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,SAAS,yKAAiC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,UAAU,yKAAkC,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEF;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,sBAAoC,YAAW,UAAU;IACnF,SAAS,EAAE,SAAS,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IAC/B;;;OAGG;IACM,OAAO,EAAG,OAAO,CAAC;IAE3B,iBAAiB;CAYlB;AAED;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,iBAAiB;IACxC,IAAI,EAAE,IAAI,CAAC;IACN,KAAK,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IAElC,MAAM,aAAsC;IAE5C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAGtC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,SAAS,6DAsBpD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,GAAI,CAAC,SAAS,SAAS,6DAmBhD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,SAAS,6DAoB7C,CAAC;AAoBF;;GAEG;AACH,eAAO,MAAM,aAAa,GAAI,CAAC,SAAS,SAAS,EAAE,QAAQ,MAAM,2DAgBhE,CAAC;AAyBF;;GAEG;AACH,eAAO,MAAM,cAAc,GAAI,CAAC,SAAS,SAAS,EAChD,MAAM,KAAK,GAAG,cAAc,GAAG,YAAY,2DAkB5C,CAAC;AAoHF;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,UAAU,EAAE,SAAS,OAAO,EAAE,OAAO,MAAM,2DAU/E,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,CAAC,SAAS,UAAU,EAC/C,OAAO,MAAM,EACb,aAAY,MAAiB,EAC7B,WAAU,OAAe,2DAW1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,GAAI,CAAC,SAAS,SAAS,6DAO3D,CAAC"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/routes/base.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAGpD,OAAO,EAEL,OAAO,EAQR,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;GAEG;AACH,KAAK,QAAQ,GAAG,YAAY,GAAG,qBAAqB,GAAG,EAAE,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,SAAS,yKAAiC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,UAAU,yKAAkC,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEF;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,sBAAoC,YAAW,UAAU;IACnF,SAAS,EAAE,SAAS,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IAC/B;;;OAGG;IACM,OAAO,EAAG,OAAO,CAAC;IAE3B,iBAAiB;CAYlB;AAED;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,iBAAiB;IACxC,IAAI,EAAE,IAAI,CAAC;IACN,KAAK,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IAElC,iBAAiB;IAMjB,MAAM,aAAsC;IAE5C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAGtC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,SAAS,6DAsBpD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,GAAI,CAAC,SAAS,SAAS,6DAmBhD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,SAAS,6DAoB7C,CAAC;AAoBF;;GAEG;AACH,eAAO,MAAM,aAAa,GAAI,CAAC,SAAS,SAAS,EAAE,QAAQ,MAAM,2DAgBhE,CAAC;AAyBF;;GAEG;AACH,eAAO,MAAM,cAAc,GAAI,CAAC,SAAS,SAAS,EAChD,MAAM,KAAK,GAAG,cAAc,GAAG,YAAY,2DAkB5C,CAAC;AAoHF;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,UAAU,EAAE,SAAS,OAAO,EAAE,OAAO,MAAM,2DAU/E,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,CAAC,SAAS,UAAU,EAC/C,OAAO,MAAM,EACb,aAAY,MAAiB,EAC7B,WAAU,OAAe,2DAW1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,GAAI,CAAC,SAAS,SAAS,6DAO3D,CAAC"}

package/dist/dts/routes/forgot-password/forgot-password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forgot-password.d.ts","sourceRoot":"","sources":["../../../../src/routes/forgot-password/forgot-password.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC;;;;;;;;GAQG;AACH,qBAKa,cAAe,SAAQ,SAAS;IACrC,QAAQ;CAUf"}
+{"version":3,"file":"forgot-password.d.ts","sourceRoot":"","sources":["../../../../src/routes/forgot-password/forgot-password.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIpC;;;;;;;;GAQG;AACH,qBAKa,cAAe,SAAQ,SAAS;IACrC,QAAQ;CAcf"}

package/dist/dts/routes/reset-password/reset-identity.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Identity captured during forgot-password so the token reset screen can
+ * submit USER_NAME without asking the user to type it again.
+ */
+export declare const RESET_IDENTITY_STORAGE_KEY = "foundation-auth:password-reset-identity";
+/**
+ * @public
+ */
+export type ResetIdentity = {
+    username: string;
+    organisation?: string;
+};
+type QueryParams = Record<string, string | undefined>;
+/**
+ * @public
+ */
+export declare function persistResetIdentity(identity: ResetIdentity, storage?: Storage): void;
+/**
+ * @public
+ */
+export declare function readResetIdentity(storage?: Storage): ResetIdentity | undefined;
+/**
+ * @public
+ */
+export declare function clearResetIdentity(storage?: Storage): void;
+/**
+ * @public
+ */
+export declare function resolveResetUsername(queryParams?: QueryParams, stored?: ResetIdentity): string;
+/**
+ * Username is required by EVENT_PASSWORD_RESET_ACTION. Hide it only when a
+ * reset token is present and the username is already known.
+ *
+ * @public
+ */
+export declare function shouldShowIdentityFields(passwordResetToken: string, username: string): boolean;
+export {};
+//# sourceMappingURL=reset-identity.d.ts.map

package/dist/dts/routes/reset-password/reset-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-identity.d.ts","sourceRoot":"","sources":["../../../../src/routes/reset-password/reset-identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,0BAA0B,4CAA4C,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAatD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAmBrF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAqB9E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAU1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,GAAE,WAAgB,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,MAAM,CAQR;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE9F"}

package/dist/dts/routes/reset-password/reset-identity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=reset-identity.test.d.ts.map

package/dist/dts/routes/reset-password/reset-identity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-identity.test.d.ts","sourceRoot":"","sources":["../../../../src/routes/reset-password/reset-identity.test.ts"],"names":[],"mappings":""}

package/dist/dts/routes/reset-password/reset-password.d.ts

@@ -19,7 +19,9 @@ export declare class ResetPassword extends BaseRoute {
     hasPasswordExpired: boolean;
     passwordResetToken: string;
     enter(phase: NavigationPhase<Settings>): void;
+    private applyResetIdentity;
     onSubmit(): Promise<void>;
     get headingText(): "Change Password" | "You are required to change your password";
+    get showIdentityFields(): boolean;
 }
 //# sourceMappingURL=reset-password.d.ts.map

package/dist/dts/routes/reset-password/reset-password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../../../src/routes/reset-password/reset-password.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGzC;;;;;;;;;;;;;GAaG;AACH,qBAKa,aAAc,SAAQ,SAAS;IAC9B,kBAAkB,EAAE,OAAO,CAAS;IACpC,kBAAkB,EAAE,MAAM,CAAM;IAE5C,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC;IAKhC,QAAQ;IAwBd,IACI,WAAW,mEAEd;CACF"}
+{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../../../src/routes/reset-password/reset-password.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAQzC;;;;;;;;;;;;;GAaG;AACH,qBAKa,aAAc,SAAQ,SAAS;IAC9B,kBAAkB,EAAE,OAAO,CAAS;IACpC,kBAAkB,EAAE,MAAM,CAAM;IAE5C,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC;IAMtC,OAAO,CAAC,kBAAkB;IAmBpB,QAAQ;IAwBd,IACI,WAAW,mEAEd;IAED,IACI,kBAAkB,YAErB;CACF"}

package/dist/dts/routes/reset-password/reset-password.template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reset-password.template.d.ts","sourceRoot":"","sources":["../../../../src/routes/reset-password/reset-password.template.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,oEAoCjC,CAAC"}
+{"version":3,"file":"reset-password.template.d.ts","sourceRoot":"","sources":["../../../../src/routes/reset-password/reset-password.template.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,oEA8CjC,CAAC"}

package/dist/esm/machine/actions.js

@@ -1,8 +1,17 @@
-import { isErrorEvent } from '@genesislcap/foundation-state-machine';
+import { isDoneInvokeEvent, isErrorEvent } from '@genesislcap/foundation-state-machine';
 import { assign } from 'xstate';
 import { logger } from '../utils';
-import { NackError } from './errors';
-import { is200Nack } from './guards';
+import { nackErrorFromUnknown } from './errors';
+/**
+ * Drop accumulated machine errors. `ErrorMap` is shared with `startingContext`, so
+ * reset must clear it in place rather than replacing the context object.
+ * @public
+ */
+export function clearAuthErrorState(context, starting) {
+    var _a, _b;
+    (_a = context.errors) === null || _a === void 0 ? void 0 : _a.clear();
+    return Object.assign(Object.assign({}, (starting !== null && starting !== void 0 ? starting : context)), { error: undefined, errors: (_b = context.errors) !== null && _b !== void 0 ? _b : starting === null || starting === void 0 ? void 0 : starting.errors });
+}
 /**
  * Set error action.
  * @remarks
@@ -10,15 +19,16 @@ import { is200Nack } from './guards';
  * @public
  */
 export const setError = assign(({ event }) => {
+    var _a, _b;
     if (isErrorEvent(event)) {
         return {
-            error: event.data,
+            error: (_a = nackErrorFromUnknown(event.data)) !== null && _a !== void 0 ? _a : event.data,
         };
     }
-    if (is200Nack(event)) {
+    if (isDoneInvokeEvent(event)) {
         logger.debug(`setError action called with non error event type.`, event);
         return {
-            error: NackError.fromEntity(event.output),
+            error: (_b = nackErrorFromUnknown(event.output)) !== null && _b !== void 0 ? _b : event.output,
         };
     }
 });

package/dist/esm/machine/actions.test.js

@@ -0,0 +1,21 @@
+import { assert, createLogicSuite } from '@genesislcap/foundation-testing';
+import { createErrorMap } from '@genesislcap/foundation-utils';
+import { clearAuthErrorState } from './actions';
+const Suite = createLogicSuite('clearAuthErrorState');
+Suite('clears shared ErrorMap in place so startingContext does not keep stale errors', () => {
+    const errors = createErrorMap(() => { });
+    errors.set('reset-password-error', new Error('Password validation failed'));
+    errors.set('silent-login-error', new Error('ERROR_SILENT_LOGIN'));
+    const starting = { errors, error: undefined, params: undefined };
+    const context = { errors, error: new Error('stale'), params: { username: 'Jane' } };
+    const next = clearAuthErrorState(context, starting);
+    assert.is(errors.size, 0);
+    assert.is(next.error, undefined);
+    assert.is(next.errors, errors);
+    assert.is(next.params, undefined);
+});
+Suite('does not throw when errors is missing', () => {
+    const next = clearAuthErrorState({ error: new Error('x') });
+    assert.is(next.error, undefined);
+});
+Suite.run();

package/dist/esm/machine/errors.js

@@ -1,4 +1,6 @@
-import { APIError } from '@genesislcap/foundation-state-machine';
+import { APIError, isAPIError } from '@genesislcap/foundation-state-machine';
+import { StatusCodes } from 'http-status-codes';
+import { fromDTONack, isNackDTO, isNackEntity } from '../mapper/utils';
 /**
  * NackError.
  *
@@ -26,15 +28,44 @@ export class NackError extends APIError {
         if (!entity) {
             return null;
         }
-        /**
-         * Prioritize errors
-         */
-        if (entity.normalisedErrorStatusCode > 0) {
-            return new NackError(entity.normalisedErrorStatusCode, entity, entity.normalisedErrorText);
+        if (entity.normalisedErrorText) {
+            return new NackError(entity.normalisedErrorStatusCode > 0
+                ? entity.normalisedErrorStatusCode
+                : StatusCodes.INTERNAL_SERVER_ERROR, entity, entity.normalisedErrorText);
         }
-        if (entity.normalisedWarningStatusCode > 0) {
-            return new NackError(entity.normalisedWarningStatusCode, entity, entity.normalisedWarningText);
+        if (entity.normalisedWarningText) {
+            return new NackError(entity.normalisedWarningStatusCode > 0
+                ? entity.normalisedWarningStatusCode
+                : StatusCodes.BAD_REQUEST, entity, entity.normalisedWarningText);
         }
         return null;
     }
 }
+/**
+ * Build a {@link NackError} from a fetch/API/NACK payload.
+ * @public
+ */
+export function nackErrorFromUnknown(value) {
+    if (value == null) {
+        return null;
+    }
+    if (value instanceof NackError) {
+        return value;
+    }
+    if (isAPIError(value)) {
+        return nackErrorFromUnknown(value.data);
+    }
+    if (typeof value === 'object' && value !== null && 'data' in value) {
+        const nested = nackErrorFromUnknown(value.data);
+        if (nested) {
+            return nested;
+        }
+    }
+    if (isNackDTO(value)) {
+        return NackError.fromEntity(fromDTONack(value));
+    }
+    if (isNackEntity(value)) {
+        return NackError.fromEntity(value);
+    }
+    return null;
+}

package/dist/esm/machine/guards.js

@@ -1,11 +1,19 @@
 import { isDoneInvokeEvent } from '@genesislcap/foundation-state-machine';
-import { isNackDTO, isNackEntity } from '../mapper';
+import { isFailedAuthDTO, isNackDTO, isNackEntity } from '../mapper/utils';
 /**
  * is200Nack.
  * @privateRemarks
- * Required until http status codes are aligned on backend.
+ * Required until http status codes are aligned on backend. HTTP status is ignored;
+ * Genesis MESSAGE_TYPE / ERROR determine failure.
  * @public
  */
-export const is200Nack = (event) => isDoneInvokeEvent(event)
-    ? isNackEntity(event.output) || isNackDTO(event.output)
-    : false;
+export const is200Nack = (event) => {
+    if (!isDoneInvokeEvent(event)) {
+        return false;
+    }
+    const output = event.output;
+    return (isNackEntity(output) ||
+        isNackDTO(output) ||
+        isFailedAuthDTO(output === null || output === void 0 ? void 0 : output.data) ||
+        isNackEntity(output === null || output === void 0 ? void 0 : output.data));
+};

package/dist/esm/machine/guards.test.js

@@ -0,0 +1,53 @@
+import { assert, createLogicSuite } from '@genesislcap/foundation-testing';
+import { is200Nack } from './guards';
+import { isResetPasswordParams } from './types';
+const Suite = createLogicSuite('auth machine password reset guards');
+const nackDto = {
+    MESSAGE_TYPE: 'EVENT_NACK',
+    SOURCE_REF: 'ref',
+    ERROR: [
+        {
+            '@type': 'StandardError',
+            CODE: 'INTERNAL_ERROR',
+            TEXT: 'Password validation failed',
+            STATUS_CODE: '500 Internal Server Error',
+        },
+    ],
+    WARNING: [],
+};
+Suite('is200Nack is true for FetchMachineOutput wrapping EVENT_NACK', () => {
+    assert.ok(is200Nack({
+        type: 'done.invoke.resetPasswordFetcher',
+        output: { data: nackDto, response: { ok: true } },
+    }));
+});
+Suite('is200Nack is true for EVENT_NACK even when HTTP is not ok', () => {
+    assert.ok(is200Nack({
+        type: 'done.invoke.resetPasswordFetcher',
+        output: { data: nackDto, response: { ok: false } },
+    }));
+});
+Suite('is200Nack is false for EVENT_ACK without errors', () => {
+    assert.not.ok(is200Nack({
+        type: 'done.invoke.resetPasswordFetcher',
+        output: { data: { MESSAGE_TYPE: 'EVENT_ACK', SOURCE_REF: 'ref' }, response: { ok: true } },
+    }));
+});
+Suite('isResetPasswordParams requires username, token and new password', () => {
+    assert.ok(isResetPasswordParams({
+        username: 'JaneDee',
+        resetToken: 'token',
+        newPassword: 'Password11*',
+    }));
+    assert.not.ok(isResetPasswordParams({
+        username: '',
+        resetToken: 'token',
+        newPassword: 'Password11*',
+    }));
+    assert.not.ok(isResetPasswordParams({
+        username: 'JaneDee',
+        resetToken: '',
+        newPassword: 'Password11*',
+    }));
+});
+Suite.run();

package/dist/esm/machine/machine.js

@@ -7,10 +7,11 @@ import { and, assign, createMachine, fromPromise, not, or, raise, sendTo } from
 import { AuthConfig } from '../config/config';
 import { CredentialManager, CredentialType, } from '../credential';
 import { MESSAGE_TYPE } from '../dto';
-import { AuthMessageMapper, createHTTPHeadersFromDTO, isLoginAckEntity, isLoginDetailsAckEntity, isLoginNackEntity, isLogoutAckEntity, isLogoutNackEntity, isNackDTO, } from '../mapper';
+import { AuthMessageMapper, createHTTPHeadersFromDTO, isLoginAckEntity, isLoginDetailsAckEntity, isLoginNackEntity, isLogoutAckEntity, isLogoutNackEntity, isFailedAuthDTO, } from '../mapper';
+import { clearResetIdentity } from '../routes/reset-password/reset-identity';
 import { AuthRouting } from '../routes/routing';
 import { logger } from '../utils';
-import { setError } from './actions';
+import { clearAuthErrorState, setError } from './actions';
 import { defaultAuthMachineContext, isLoginParams, isQueryParams } from './types';
 /**
  * Default AuthMachine.
@@ -49,6 +50,10 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                     actions,
                     target: '#authMachine.resetPassword',
                 },
+                dismiss: {
+                    actions: ['resetContext'],
+                    target: '#authMachine.idle',
+                },
             };
         };
         this.dtoTransition = () => ({
@@ -236,7 +241,15 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                     invoke: {
                         id: 'forgotPasswordFetcher',
                         src: fetchMachine.machine,
-                        onDone: 'feedback.forgotPassword',
+                        onDone: [
+                            {
+                                guard: 'is200NackDTO',
+                                target: 'error.forgotPassword',
+                            },
+                            {
+                                target: 'feedback.forgotPassword',
+                            },
+                        ],
                         onError: 'error.forgotPassword',
                     },
                     entry: [
@@ -294,19 +307,26 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                     invoke: {
                         id: 'resetPasswordFetcher',
                         src: fetchMachine.machine,
-                        onDone: {
-                            actions: [
-                                ({ context }) => {
-                                    const params = context.params;
-                                    this.cm.storeCredentials({
-                                        id: params.username,
-                                        name: params.username,
-                                        password: params.newPassword,
-                                    });
-                                },
-                            ],
-                            target: 'feedback.resetPassword',
-                        },
+                        onDone: [
+                            {
+                                guard: 'is200NackDTO',
+                                target: 'error.resetPassword',
+                            },
+                            {
+                                actions: [
+                                    ({ context }) => {
+                                        const params = context.params;
+                                        this.cm.storeCredentials({
+                                            id: params.username,
+                                            name: params.username,
+                                            password: params.newPassword,
+                                        });
+                                    },
+                                    () => clearResetIdentity(),
+                                ],
+                                target: 'feedback.resetPassword',
+                            },
+                        ],
                         onError: 'error.resetPassword',
                     },
                     entry: [
@@ -454,6 +474,12 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                  */
                 feedback: {
                     initial: 'none',
+                    on: {
+                        dismiss: {
+                            actions: ['resetContext'],
+                            target: '#authMachine.idle',
+                        },
+                    },
                     states: {
                         none: {
                             tags: ['feedback', 'none'],
@@ -616,7 +642,7 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                     }
                 },
                 setError,
-                resetContext: assign(() => this.startingContext),
+                resetContext: assign(({ context }) => clearAuthErrorState(context, this.startingContext)),
                 preventSilentAccess: () => __awaiter(this, void 0, void 0, function* () {
                     yield this.cm.preventSilentAccess();
                 }),
@@ -675,11 +701,12 @@ let DefaultAuthMachine = class DefaultAuthMachine extends AbstractMachine {
                 isLogoutNackEntity: ({ event }) => isDoneInvokeEvent(event) ? isLogoutNackEntity(event.output) : false,
                 /**
                  * Required until strict http status codes are enabled on the backend by default.
+                 * Treats EVENT_NACK / ERROR payloads as failure regardless of HTTP status.
                  */
                 is200NackDTO: ({ event }) => {
-                    var _a, _b;
+                    var _a;
                     return isDoneInvokeEvent(event)
-                        ? ((_b = (_a = event.output) === null || _a === void 0 ? void 0 : _a.response) === null || _b === void 0 ? void 0 : _b.ok) && isNackDTO(event.output.data)
+                        ? isFailedAuthDTO((_a = event.output) === null || _a === void 0 ? void 0 : _a.data)
                         : false;
                 },
             },

package/dist/esm/mapper/utils.js

@@ -107,6 +107,22 @@ export function isNackDTO(dto) {
     var _a;
     return (_a = dto === null || dto === void 0 ? void 0 : dto.MESSAGE_TYPE) === null || _a === void 0 ? void 0 : _a.endsWith('_NACK');
 }
+/**
+ * True when a Genesis payload contains at least one ERROR item.
+ * @public
+ */
+export function hasDTOErrors(dto) {
+    const errors = dto === null || dto === void 0 ? void 0 : dto.ERROR;
+    return Array.isArray(errors) && errors.length > 0;
+}
+/**
+ * True when a Genesis payload must be treated as failure.
+ * HTTP status is intentionally ignored; MESSAGE_TYPE and ERROR are the contract.
+ * @public
+ */
+export function isFailedAuthDTO(dto) {
+    return isNackDTO(dto) || hasDTOErrors(dto);
+}
 /**
  * isNackEntity.
  * @param entity - Potential Nack.