@hexclave/next 1.0.21 → 1.0.22

package/README.md

@@ -1,10 +1,190 @@
-# This package has been renamed.
+# Hexclave
+<div align="center">
 
-Stack Auth is now Hexclave! The new packages are:
+<img src=".github/assets/hexclave-header.svg" alt="Hexclave" width="320"/>
 
-- @hexclave/next
-- @hexclave/react
-- @hexclave/js
-- @hexclave/cli
+<br/>
 
-See the [migration guide](https://docs.hexclave.com/migration) for more information.
+**The user infrastructure platform.**
+
+Hexclave handles everything around your users: authentication, teams,
+payments, emails, analytics, and much more. Start in minutes on the hosted
+cloud. Your data is always yours to export and self-host.
+
+[Website](https://hexclave.com) · [Docs](https://docs.hexclave.com) · [Dashboard](https://app.hexclave.com) · [Discord](https://discord.hexclave.com)
+
+![License](https://img.shields.io/badge/license-MIT%20%2F%20AGPLv3-blue)
+![SDKs](https://img.shields.io/badge/SDKs-Next.js%20%C2%B7%20React%20%C2%B7%20JS-black)
+![Deploy](https://img.shields.io/badge/deploy-Cloud%20or%20self--hosted-success)
+
+</div>
+
+---
+
+<div align="center">
+  <img src=".github/assets/comparison.png" alt="Where Hexclave fits in the infrastructure stack" width="900"/>
+</div>
+
+## Get started
+
+Setting up Hexclave is one prompt. Paste this into your coding agent of choice:
+
+```text
+Read skill.hexclave.com and help me setup hexclave in this project
+```
+
+## For AI agents
+
+If you're an AI coding agent, use your web fetch tool or curl the skill documentation for up-to-date integration instructions:
+
+```
+curl -sSL "https://skill.hexclave.com?question=<your-question>&context=<your-context>"
+```
+
+## What's included
+
+Hexclave ships as a catalog of apps you switch on as your product needs them.
+Each one is built on the same user model, and new apps land regularly.
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/authentication.png" alt="" width="40" align="top"/> &nbsp; Authentication
+
+Authentication that just works with passkeys, OAuth, and CLI auth. Drop in one component and ship the whole flow; auth methods toggle from the dashboard with no code changes needed.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/authentication.png" width="520" alt="Authentication"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/teams.png" alt="" width="40" align="top"/> &nbsp; Teams
+
+Build for teams, not just users, with workspaces, email invites, and roles that actually gate the work. The workspace switcher remembers selection, invites auto sign up new users, and permissions hold up under audit.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/teams.png" width="520" alt="Teams"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/rbac.png" alt="" width="40" align="top"/> &nbsp; RBAC
+
+Permissions, sorted: roles that nest and one permission check that works the same on server or client. Define them in the dashboard, check them anywhere in your code.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/rbac.png" width="520" alt="RBAC"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/api-keys.png" alt="" width="40" align="top"/> &nbsp; API Keys
+
+API keys without the footguns: leaked keys get auto-revoked, work for users and teams, and show the full secret only once. We never keep the plaintext after creation.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/api-keys.png" width="520" alt="API Keys"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/payments.png" alt="" width="40" align="top"/> &nbsp; Payments
+
+Payments without the plumbing for subscriptions, one-time charges, and usage metering with credits. Bill a person or a whole team with one model, no separate codepath.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/payments.png" width="520" alt="Payments"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/emails.png" alt="" width="40" align="top"/> &nbsp; Emails
+
+Email that delivers and tells you so, handling transactional and marketing sends from one API. Edit templates with an AI editor, theme once, and track every open and click.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/emails.png" width="520" alt="Emails"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/analytics.png" alt="" width="40" align="top"/> &nbsp; Analytics
+
+Know your users with no data stack required, with live active user counts and session replays out of the box. Ask in plain English to build dashboards or write SQL to save queries, all with one flag enabled.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/analytics.png" width="520" alt="Analytics"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/webhooks.png" alt="" width="40" align="top"/> &nbsp; Webhooks
+
+React to every user event in real time with signed, tamper-proof webhooks. Retries and backoff are handled for you; verify in five lines and manage endpoints from the dashboard.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/webhooks.png" width="520" alt="Webhooks"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/data-vault.png" alt="" width="40" align="top"/> &nbsp; Data Vault
+
+A safe for the secrets your users hand you, locked with your secret so we never see the plaintext. Store and retrieve tokens in two lines each, server-only by design.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/data-vault.png" width="520" alt="Data Vault"/>
+</td>
+</tr></table>
+
+<table><tr>
+<td width="50%" valign="middle">
+
+### <img src=".github/assets/logos/launch-checklist.png" alt="" width="40" align="top"/> &nbsp; Launch Checklist
+
+Run through the must-do checks before flipping to production: domain setup, callbacks locked, secrets rotated. The progress tracker keeps your team aligned so nothing critical slips through on launch day.
+
+</td>
+<td width="50%" valign="middle" align="center">
+<img src=".github/assets/app-shots/launch-checklist.png" width="520" alt="Launch Checklist"/>
+</td>
+</tr></table>
+
+## Contributing
+
+Hexclave is open source, and contributions are welcome. Read
+[`CONTRIBUTING.md`](./CONTRIBUTING.md) to get started, and say hello in
+[Discord](https://discord.hexclave.com) before picking up anything large.
+Found a security issue? Email security@hexclave.com.
+
+## ❤ Contributors
+
+<a href="https://github.com/hexclave/hexclave/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=hexclave/hexclave&columns=9" alt="Contributors" width="100%" />
+</a>

package/dist/components-page/oauth-callback.js

@@ -12,7 +12,7 @@ let react_jsx_runtime = require("react/jsx-runtime");
 let _hexclave_shared = require("@hexclave/shared");
 let ___components_elements_maybe_full_page_js = require("../components/elements/maybe-full-page.js");
 let ___components_link_js = require("../components/link.js");
-let ___lib_hexclave_app_index_js = require("../lib/hexclave-app/index.js");
+let __error_page_js = require("./error-page.js");
 
 //#region src/components-page/oauth-callback.tsx
 function OAuthCallback({ fullPage }) {
@@ -20,36 +20,32 @@ function OAuthCallback({ fullPage }) {
 	const app = (0, ___index_js.useStackApp)();
 	const called = (0, react.useRef)(false);
 	const [showRedirectLink, setShowRedirectLink] = (0, react.useState)(false);
-	const [redirectUrl, setRedirectUrl] = (0, react.useState)(null);
+	const [errorSearchParams, setErrorSearchParams] = (0, react.useState)(null);
 	(0, react.useEffect)(() => (0, _hexclave_shared_dist_utils_promises.runAsynchronously)(async () => {
 		if (called.current) return;
 		called.current = true;
-		const redirectToError = async (url) => {
-			const urlString = url.toString();
-			if (app[___lib_hexclave_app_index_js.hexclaveAppInternalsSymbol].getRedirectMethod() === "none") {
-				setRedirectUrl(urlString);
-				return;
-			}
-			await app[___lib_hexclave_app_index_js.hexclaveAppInternalsSymbol].redirectToUrl(urlString, { replace: true });
-		};
 		try {
 			if (!await app.callOAuthCallback()) await app.redirectToSignIn({ noRedirectBack: true });
 		} catch (e) {
 			if (_hexclave_shared.KnownError.isKnownError(e)) {
-				const errorUrl = new URL(app.urls.error, window.location.href);
-				errorUrl.searchParams.set("errorCode", e.errorCode);
-				errorUrl.searchParams.set("message", e.message);
-				errorUrl.searchParams.set("details", JSON.stringify(e.details ?? {}));
-				await redirectToError(errorUrl);
+				setErrorSearchParams({
+					errorCode: e.errorCode,
+					message: e.message,
+					details: JSON.stringify(e.details ?? {})
+				});
 				return;
 			}
 			(0, _hexclave_shared_dist_utils_errors.captureError)("<OAuthCallback />", e);
-			await redirectToError(new URL(app.urls.error, window.location.href));
+			setErrorSearchParams({});
 		}
 	}), [app]);
 	(0, react.useEffect)(() => {
 		setTimeout(() => setShowRedirectLink(true), 3e3);
 	}, []);
+	if (errorSearchParams != null) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__error_page_js.ErrorPage, {
+		searchParams: errorSearchParams,
+		fullPage
+	});
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(___components_elements_maybe_full_page_js.MaybeFullPage, {
 		fullPage: fullPage ?? false,
 		containerClassName: "flex items-center justify-center",
@@ -58,11 +54,10 @@ function OAuthCallback({ fullPage }) {
 			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "flex flex-col justify-center items-center gap-4",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_hexclave_ui.Spinner, { size: 20 })
-			}), showRedirectLink || redirectUrl != null ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", { children: [t("If you are not redirected automatically, "), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(___components_link_js.StyledLink, {
+			}), showRedirectLink ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", { children: [t("If you are not redirected automatically, "), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(___components_link_js.StyledLink, {
 				className: "whitespace-nowrap",
-				href: redirectUrl ?? "#",
+				href: "#",
 				onClick: (e) => {
-					if (redirectUrl != null) return;
 					e.preventDefault();
 					(0, _hexclave_shared_dist_utils_promises.runAsynchronously)(app.redirectToHome());
 				},

package/dist/components-page/oauth-callback.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-callback.js","names":["hexclaveAppInternalsSymbol","KnownError","MaybeFullPage","Spinner","StyledLink"],"sources":["../../src/components-page/oauth-callback.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { KnownError } from \"@hexclave/shared\";\nimport { captureError } from \"@hexclave/shared/dist/utils/errors\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { Spinner, cn } from \"@hexclave/ui\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useStackApp } from \"..\";\nimport { MaybeFullPage } from \"../components/elements/maybe-full-page\";\nimport { StyledLink } from \"../components/link\";\nimport { hexclaveAppInternalsSymbol } from \"../lib/hexclave-app\";\nimport { useTranslation } from \"../lib/translations\";\n\nexport function OAuthCallback({ fullPage }: { fullPage?: boolean }) {\n  const { t } = useTranslation();\n  const app = useStackApp();\n  const called = useRef(false);\n  const [showRedirectLink, setShowRedirectLink] = useState(false);\n  const [redirectUrl, setRedirectUrl] = useState<string | null>(null);\n\n  useEffect(() => runAsynchronously(async () => {\n    if (called.current) return;\n    called.current = true;\n    const redirectToError = async (url: URL) => {\n      const urlString = url.toString();\n      if (app[hexclaveAppInternalsSymbol].getRedirectMethod() === \"none\") {\n        setRedirectUrl(urlString);\n        return;\n      }\n      await app[hexclaveAppInternalsSymbol].redirectToUrl(urlString, { replace: true });\n    };\n    try {\n      const hasRedirected = await app.callOAuthCallback();\n      if (!hasRedirected) {\n        await app.redirectToSignIn({ noRedirectBack: true });\n      }\n    } catch (e) {\n      if (KnownError.isKnownError(e)) {\n        const errorUrl = new URL(app.urls.error, window.location.href);\n        errorUrl.searchParams.set(\"errorCode\", e.errorCode);\n        errorUrl.searchParams.set(\"message\", e.message);\n        errorUrl.searchParams.set(\"details\", JSON.stringify(e.details ?? {}));\n        await redirectToError(errorUrl);\n        return;\n      }\n      captureError(\"<OAuthCallback />\", e);\n      await redirectToError(new URL(app.urls.error, window.location.href));\n    }\n  }), [app]);\n\n  useEffect(() => {\n    setTimeout(() => setShowRedirectLink(true), 3000);\n  }, []);\n\n  return (\n    <MaybeFullPage\n      fullPage={fullPage ?? false}\n      containerClassName=\"flex items-center justify-center\"\n    >\n      <div\n        className={cn(\n          \"text-center justify-center items-center stack-scope flex flex-col gap-4 max-w-[380px]\",\n          fullPage ? \"p-4\" : \"p-0\"\n        )}\n      >\n        <div className=\"flex flex-col justify-center items-center gap-4\">\n          <Spinner size={20} />\n        </div>\n        {showRedirectLink || redirectUrl != null ? <p>{t('If you are not redirected automatically, ')}<StyledLink\n          className=\"whitespace-nowrap\"\n          href={redirectUrl ?? \"#\"}\n          onClick={(e) => {\n            if (redirectUrl != null) return;\n            e.preventDefault();\n            runAsynchronously(app.redirectToHome());\n          }}\n        >{t(\"click here\")}</StyledLink></p> : null}\n      </div>\n    </MaybeFullPage>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,SAAgB,cAAc,EAAE,YAAoC;CAClE,MAAM,EAAE,kDAAsB;CAC9B,MAAM,oCAAmB;CACzB,MAAM,2BAAgB,MAAM;CAC5B,MAAM,CAAC,kBAAkB,2CAAgC,MAAM;CAC/D,MAAM,CAAC,aAAa,sCAA0C,KAAK;AAEnE,wFAAkC,YAAY;AAC5C,MAAI,OAAO,QAAS;AACpB,SAAO,UAAU;EACjB,MAAM,kBAAkB,OAAO,QAAa;GAC1C,MAAM,YAAY,IAAI,UAAU;AAChC,OAAI,IAAIA,yDAA4B,mBAAmB,KAAK,QAAQ;AAClE,mBAAe,UAAU;AACzB;;AAEF,SAAM,IAAIA,yDAA4B,cAAc,WAAW,EAAE,SAAS,MAAM,CAAC;;AAEnF,MAAI;AAEF,OAAI,CADkB,MAAM,IAAI,mBAAmB,CAEjD,OAAM,IAAI,iBAAiB,EAAE,gBAAgB,MAAM,CAAC;WAE/C,GAAG;AACV,OAAIC,4BAAW,aAAa,EAAE,EAAE;IAC9B,MAAM,WAAW,IAAI,IAAI,IAAI,KAAK,OAAO,OAAO,SAAS,KAAK;AAC9D,aAAS,aAAa,IAAI,aAAa,EAAE,UAAU;AACnD,aAAS,aAAa,IAAI,WAAW,EAAE,QAAQ;AAC/C,aAAS,aAAa,IAAI,WAAW,KAAK,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;AACrE,UAAM,gBAAgB,SAAS;AAC/B;;AAEF,wDAAa,qBAAqB,EAAE;AACpC,SAAM,gBAAgB,IAAI,IAAI,IAAI,KAAK,OAAO,OAAO,SAAS,KAAK,CAAC;;GAEtE,EAAE,CAAC,IAAI,CAAC;AAEV,4BAAgB;AACd,mBAAiB,oBAAoB,KAAK,EAAE,IAAK;IAChD,EAAE,CAAC;AAEN,QACE,2CAACC;EACC,UAAU,YAAY;EACtB,oBAAmB;YAEnB,4CAAC;GACC,gCACE,yFACA,WAAW,QAAQ,MACpB;cAED,2CAAC;IAAI,WAAU;cACb,2CAACC,wBAAQ,MAAM,KAAM;KACjB,EACL,oBAAoB,eAAe,OAAO,4CAAC,kBAAG,EAAE,4CAA4C,EAAC,2CAACC;IAC7F,WAAU;IACV,MAAM,eAAe;IACrB,UAAU,MAAM;AACd,SAAI,eAAe,KAAM;AACzB,OAAE,gBAAgB;AAClB,iEAAkB,IAAI,gBAAgB,CAAC;;cAEzC,EAAE,aAAa;KAAc,IAAI,GAAG;IAClC;GACQ"}
+{"version":3,"file":"oauth-callback.js","names":["KnownError","ErrorPage","MaybeFullPage","Spinner","StyledLink"],"sources":["../../src/components-page/oauth-callback.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { KnownError } from \"@hexclave/shared\";\nimport { captureError } from \"@hexclave/shared/dist/utils/errors\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { Spinner, cn } from \"@hexclave/ui\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useStackApp } from \"..\";\nimport { MaybeFullPage } from \"../components/elements/maybe-full-page\";\nimport { StyledLink } from \"../components/link\";\nimport { useTranslation } from \"../lib/translations\";\nimport { ErrorPage } from \"./error-page\";\n\nexport function OAuthCallback({ fullPage }: { fullPage?: boolean }) {\n  const { t } = useTranslation();\n  const app = useStackApp();\n  const called = useRef(false);\n  const [showRedirectLink, setShowRedirectLink] = useState(false);\n  const [errorSearchParams, setErrorSearchParams] = useState<Record<string, string> | null>(null);\n\n  useEffect(() => runAsynchronously(async () => {\n    if (called.current) return;\n    called.current = true;\n    try {\n      const hasRedirected = await app.callOAuthCallback();\n      if (!hasRedirected) {\n        await app.redirectToSignIn({ noRedirectBack: true });\n      }\n    } catch (e) {\n      if (KnownError.isKnownError(e)) {\n        setErrorSearchParams({\n          errorCode: e.errorCode,\n          message: e.message,\n          details: JSON.stringify(e.details ?? {}),\n        });\n        return;\n      }\n      captureError(\"<OAuthCallback />\", e);\n      setErrorSearchParams({});\n    }\n  }), [app]);\n\n  useEffect(() => {\n    setTimeout(() => setShowRedirectLink(true), 3000);\n  }, []);\n\n  if (errorSearchParams != null) {\n    return <ErrorPage searchParams={errorSearchParams} fullPage={fullPage} />;\n  }\n\n  return (\n    <MaybeFullPage\n      fullPage={fullPage ?? false}\n      containerClassName=\"flex items-center justify-center\"\n    >\n      <div\n        className={cn(\n          \"text-center justify-center items-center stack-scope flex flex-col gap-4 max-w-[380px]\",\n          fullPage ? \"p-4\" : \"p-0\"\n        )}\n      >\n        <div className=\"flex flex-col justify-center items-center gap-4\">\n          <Spinner size={20} />\n        </div>\n        {showRedirectLink ? <p>{t('If you are not redirected automatically, ')}<StyledLink\n          className=\"whitespace-nowrap\"\n          href=\"#\"\n          onClick={(e) => {\n            e.preventDefault();\n            runAsynchronously(app.redirectToHome());\n          }}\n        >{t(\"click here\")}</StyledLink></p> : null}\n      </div>\n    </MaybeFullPage>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,SAAgB,cAAc,EAAE,YAAoC;CAClE,MAAM,EAAE,kDAAsB;CAC9B,MAAM,oCAAmB;CACzB,MAAM,2BAAgB,MAAM;CAC5B,MAAM,CAAC,kBAAkB,2CAAgC,MAAM;CAC/D,MAAM,CAAC,mBAAmB,4CAAgE,KAAK;AAE/F,wFAAkC,YAAY;AAC5C,MAAI,OAAO,QAAS;AACpB,SAAO,UAAU;AACjB,MAAI;AAEF,OAAI,CADkB,MAAM,IAAI,mBAAmB,CAEjD,OAAM,IAAI,iBAAiB,EAAE,gBAAgB,MAAM,CAAC;WAE/C,GAAG;AACV,OAAIA,4BAAW,aAAa,EAAE,EAAE;AAC9B,yBAAqB;KACnB,WAAW,EAAE;KACb,SAAS,EAAE;KACX,SAAS,KAAK,UAAU,EAAE,WAAW,EAAE,CAAC;KACzC,CAAC;AACF;;AAEF,wDAAa,qBAAqB,EAAE;AACpC,wBAAqB,EAAE,CAAC;;GAE1B,EAAE,CAAC,IAAI,CAAC;AAEV,4BAAgB;AACd,mBAAiB,oBAAoB,KAAK,EAAE,IAAK;IAChD,EAAE,CAAC;AAEN,KAAI,qBAAqB,KACvB,QAAO,2CAACC;EAAU,cAAc;EAA6B;GAAY;AAG3E,QACE,2CAACC;EACC,UAAU,YAAY;EACtB,oBAAmB;YAEnB,4CAAC;GACC,gCACE,yFACA,WAAW,QAAQ,MACpB;cAED,2CAAC;IAAI,WAAU;cACb,2CAACC,wBAAQ,MAAM,KAAM;KACjB,EACL,mBAAmB,4CAAC,kBAAG,EAAE,4CAA4C,EAAC,2CAACC;IACtE,WAAU;IACV,MAAK;IACL,UAAU,MAAM;AACd,OAAE,gBAAgB;AAClB,iEAAkB,IAAI,gBAAgB,CAAC;;cAEzC,EAAE,aAAa;KAAc,IAAI,GAAG;IAClC;GACQ"}

package/dist/components-page/oauth-callback.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/components-page/oauth-callback.test.js

@@ -0,0 +1,90 @@
+const require_chunk = require('../chunk-BE-pF4vm.js');
+let react = require("react");
+react = require_chunk.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+let _hexclave_shared = require("@hexclave/shared");
+let react_dom_client = require("react-dom/client");
+let vitest = require("vitest");
+let __oauth_callback_js = require("./oauth-callback.js");
+let ___providers_translation_provider_client_js = require("../providers/translation-provider-client.js");
+
+//#region src/components-page/oauth-callback.test.tsx
+// @vitest-environment jsdom
+const appMockState = vitest.vi.hoisted(() => ({ app: null }));
+vitest.vi.mock("..", () => ({ useStackApp: () => {
+	if (appMockState.app == null) throw new Error("Expected test app to be set before rendering.");
+	return appMockState.app;
+} }));
+vitest.vi.mock("@hexclave/ui", async () => {
+	await import("react");
+	return {
+		Button: (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+			type: "button",
+			onClick: props.onClick,
+			children: props.children
+		}),
+		Spinner: () => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { "data-testid": "spinner" }),
+		Typography: (props) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: props.children }),
+		cn: (...classes) => classes.filter(Boolean).join(" ")
+	};
+});
+const previousActEnvironment = Reflect.get(globalThis, "IS_REACT_ACT_ENVIRONMENT");
+function createAppTestDouble(options) {
+	return {
+		callOAuthCallback: options.callOAuthCallback,
+		redirectToSignIn: vitest.vi.fn(async () => {}),
+		redirectToHome: vitest.vi.fn(async () => {})
+	};
+}
+let root = null;
+let container = null;
+async function renderWithApp(app) {
+	appMockState.app = app;
+	container = document.createElement("div");
+	document.body.append(container);
+	root = (0, react_dom_client.createRoot)(container);
+	await (0, react.act)(async () => {
+		root?.render(/* @__PURE__ */ (0, react_jsx_runtime.jsx)(___providers_translation_provider_client_js.TranslationProviderClient, {
+			quetzalKeys: /* @__PURE__ */ new Map(),
+			quetzalLocale: /* @__PURE__ */ new Map(),
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(__oauth_callback_js.OAuthCallback, {})
+		}));
+	});
+}
+async function flushEffects() {
+	await (0, react.act)(async () => {
+		await new Promise((resolve) => setTimeout(resolve, 0));
+	});
+}
+(0, vitest.describe)("OAuthCallback", () => {
+	(0, vitest.beforeEach)(() => {
+		Reflect.set(globalThis, "IS_REACT_ACT_ENVIRONMENT", true);
+	});
+	(0, vitest.afterEach)(() => {
+		(0, react.act)(() => {
+			root?.unmount();
+		});
+		container?.remove();
+		root = null;
+		container = null;
+		appMockState.app = null;
+		vitest.vi.restoreAllMocks();
+		Reflect.set(globalThis, "IS_REACT_ACT_ENVIRONMENT", previousActEnvironment);
+	});
+	(0, vitest.it)("renders backend-encoded OAuth callback errors on the callback page", async () => {
+		const errorMessage = "Your sign up was rejected by an administrator's sign-up rule.";
+		const callOAuthCallback = vitest.vi.fn(async () => {
+			throw new _hexclave_shared.KnownErrors.SignUpRejected(errorMessage);
+		});
+		const app = createAppTestDouble({ callOAuthCallback });
+		await renderWithApp(app);
+		await flushEffects();
+		(0, vitest.expect)(callOAuthCallback).toHaveBeenCalledOnce();
+		(0, vitest.expect)(container?.textContent).toContain("SIGN_UP_REJECTED");
+		(0, vitest.expect)(container?.textContent).toContain(errorMessage);
+		(0, vitest.expect)(app.redirectToSignIn).not.toHaveBeenCalled();
+	});
+});
+
+//#endregion
+//# sourceMappingURL=oauth-callback.test.js.map

package/dist/components-page/oauth-callback.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-callback.test.js","names":["vi","TranslationProviderClient","OAuthCallback","KnownErrors"],"sources":["../../src/components-page/oauth-callback.test.tsx"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { KnownErrors } from \"@hexclave/shared\";\nimport React, { act } from \"react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { StackClientApp } from \"../lib/hexclave-app/apps/interfaces/client-app\";\nimport { TranslationProviderClient } from \"../providers/translation-provider-client\";\nimport { OAuthCallback } from \"./oauth-callback\";\n\nconst appMockState = vi.hoisted(() => ({ app: null as unknown }));\n\nvi.mock(\"..\", () => ({\n  useStackApp: () => {\n    if (appMockState.app == null) {\n      throw new Error(\"Expected test app to be set before rendering.\");\n    }\n    return appMockState.app;\n  },\n}));\n\nvi.mock(\"@hexclave/ui\", async () => {\n  const React = await import(\"react\");\n  return {\n    Button: (props: { children: React.ReactNode, onClick?: () => void }) => (\n      <button type=\"button\" onClick={props.onClick}>{props.children}</button>\n    ),\n    Spinner: () => <div data-testid=\"spinner\" />,\n    Typography: (props: { children: React.ReactNode }) => <div>{props.children}</div>,\n    cn: (...classes: (string | false | null | undefined)[]) => classes.filter(Boolean).join(\" \"),\n  };\n});\n\nconst previousActEnvironment = Reflect.get(globalThis, \"IS_REACT_ACT_ENVIRONMENT\");\n\nfunction createAppTestDouble(options: {\n  callOAuthCallback: () => Promise<boolean>,\n}) {\n  const app = {\n    callOAuthCallback: options.callOAuthCallback,\n    redirectToSignIn: vi.fn(async () => {}),\n    redirectToHome: vi.fn(async () => {}),\n  };\n\n  // This test double intentionally implements only the StackClientApp surface\n  // that OAuthCallback and the rendered error card touch.\n  return app as unknown as StackClientApp<true>;\n}\n\nlet root: Root | null = null;\nlet container: HTMLDivElement | null = null;\n\nasync function renderWithApp(app: StackClientApp<true>) {\n  appMockState.app = app;\n  container = document.createElement(\"div\");\n  document.body.append(container);\n  root = createRoot(container);\n  await act(async () => {\n    root?.render(\n      <TranslationProviderClient quetzalKeys={new Map()} quetzalLocale={new Map()}>\n        <OAuthCallback />\n      </TranslationProviderClient>\n    );\n  });\n}\n\nasync function flushEffects() {\n  await act(async () => {\n    await new Promise((resolve) => setTimeout(resolve, 0));\n  });\n}\n\ndescribe(\"OAuthCallback\", () => {\n  beforeEach(() => {\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", true);\n  });\n\n  afterEach(() => {\n    act(() => {\n      root?.unmount();\n    });\n    container?.remove();\n    root = null;\n    container = null;\n    appMockState.app = null;\n    vi.restoreAllMocks();\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", previousActEnvironment);\n  });\n\n  it(\"renders backend-encoded OAuth callback errors on the callback page\", async () => {\n    const errorMessage = \"Your sign up was rejected by an administrator's sign-up rule.\";\n    const callOAuthCallback = vi.fn(async () => {\n      throw new KnownErrors.SignUpRejected(errorMessage);\n    });\n    const app = createAppTestDouble({ callOAuthCallback });\n\n    await renderWithApp(app);\n    await flushEffects();\n\n    expect(callOAuthCallback).toHaveBeenCalledOnce();\n    expect(container?.textContent).toContain(\"SIGN_UP_REJECTED\");\n    expect(container?.textContent).toContain(errorMessage);\n    expect(app.redirectToSignIn).not.toHaveBeenCalled();\n  });\n});\n"],"mappings":";;;;;;;;;;;;AAcA,MAAM,eAAeA,UAAG,eAAe,EAAE,KAAK,MAAiB,EAAE;AAEjEA,UAAG,KAAK,aAAa,EACnB,mBAAmB;AACjB,KAAI,aAAa,OAAO,KACtB,OAAM,IAAI,MAAM,gDAAgD;AAElE,QAAO,aAAa;GAEvB,EAAE;AAEHA,UAAG,KAAK,gBAAgB,YAAY;AACpB,OAAM,OAAO;AAC3B,QAAO;EACL,SAAS,UACP,2CAAC;GAAO,MAAK;GAAS,SAAS,MAAM;aAAU,MAAM;IAAkB;EAEzE,eAAe,2CAAC,SAAI,eAAY,YAAY;EAC5C,aAAa,UAAyC,2CAAC,mBAAK,MAAM,WAAe;EACjF,KAAK,GAAG,YAAmD,QAAQ,OAAO,QAAQ,CAAC,KAAK,IAAI;EAC7F;EACD;AAEF,MAAM,yBAAyB,QAAQ,IAAI,YAAY,2BAA2B;AAElF,SAAS,oBAAoB,SAE1B;AASD,QARY;EACV,mBAAmB,QAAQ;EAC3B,kBAAkBA,UAAG,GAAG,YAAY,GAAG;EACvC,gBAAgBA,UAAG,GAAG,YAAY,GAAG;EACtC;;AAOH,IAAI,OAAoB;AACxB,IAAI,YAAmC;AAEvC,eAAe,cAAc,KAA2B;AACtD,cAAa,MAAM;AACnB,aAAY,SAAS,cAAc,MAAM;AACzC,UAAS,KAAK,OAAO,UAAU;AAC/B,yCAAkB,UAAU;AAC5B,sBAAU,YAAY;AACpB,QAAM,OACJ,2CAACC;GAA0B,6BAAa,IAAI,KAAK;GAAE,+BAAe,IAAI,KAAK;aACzE,2CAACC,sCAAgB;IACS,CAC7B;GACD;;AAGJ,eAAe,eAAe;AAC5B,sBAAU,YAAY;AACpB,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;GACtD;;qBAGK,uBAAuB;AAC9B,8BAAiB;AACf,UAAQ,IAAI,YAAY,4BAA4B,KAAK;GACzD;AAEF,6BAAgB;AACd,uBAAU;AACR,SAAM,SAAS;IACf;AACF,aAAW,QAAQ;AACnB,SAAO;AACP,cAAY;AACZ,eAAa,MAAM;AACnB,YAAG,iBAAiB;AACpB,UAAQ,IAAI,YAAY,4BAA4B,uBAAuB;GAC3E;AAEF,gBAAG,sEAAsE,YAAY;EACnF,MAAM,eAAe;EACrB,MAAM,oBAAoBF,UAAG,GAAG,YAAY;AAC1C,SAAM,IAAIG,6BAAY,eAAe,aAAa;IAClD;EACF,MAAM,MAAM,oBAAoB,EAAE,mBAAmB,CAAC;AAEtD,QAAM,cAAc,IAAI;AACxB,QAAM,cAAc;AAEpB,qBAAO,kBAAkB,CAAC,sBAAsB;AAChD,qBAAO,WAAW,YAAY,CAAC,UAAU,mBAAmB;AAC5D,qBAAO,WAAW,YAAY,CAAC,UAAU,aAAa;AACtD,qBAAO,IAAI,iBAAiB,CAAC,IAAI,kBAAkB;GACnD;EACF"}

package/dist/esm/components-page/oauth-callback.js

@@ -10,7 +10,7 @@ import { jsx, jsxs } from "react/jsx-runtime";
 import { KnownError } from "@hexclave/shared";
 import { MaybeFullPage } from "../components/elements/maybe-full-page.js";
 import { StyledLink } from "../components/link.js";
-import { hexclaveAppInternalsSymbol } from "../lib/hexclave-app/index.js";
+import { ErrorPage } from "./error-page.js";
 
 //#region src/components-page/oauth-callback.tsx
 function OAuthCallback({ fullPage }) {
@@ -18,36 +18,32 @@ function OAuthCallback({ fullPage }) {
 	const app = useStackApp();
 	const called = useRef(false);
 	const [showRedirectLink, setShowRedirectLink] = useState(false);
-	const [redirectUrl, setRedirectUrl] = useState(null);
+	const [errorSearchParams, setErrorSearchParams] = useState(null);
 	useEffect(() => runAsynchronously(async () => {
 		if (called.current) return;
 		called.current = true;
-		const redirectToError = async (url) => {
-			const urlString = url.toString();
-			if (app[hexclaveAppInternalsSymbol].getRedirectMethod() === "none") {
-				setRedirectUrl(urlString);
-				return;
-			}
-			await app[hexclaveAppInternalsSymbol].redirectToUrl(urlString, { replace: true });
-		};
 		try {
 			if (!await app.callOAuthCallback()) await app.redirectToSignIn({ noRedirectBack: true });
 		} catch (e) {
 			if (KnownError.isKnownError(e)) {
-				const errorUrl = new URL(app.urls.error, window.location.href);
-				errorUrl.searchParams.set("errorCode", e.errorCode);
-				errorUrl.searchParams.set("message", e.message);
-				errorUrl.searchParams.set("details", JSON.stringify(e.details ?? {}));
-				await redirectToError(errorUrl);
+				setErrorSearchParams({
+					errorCode: e.errorCode,
+					message: e.message,
+					details: JSON.stringify(e.details ?? {})
+				});
 				return;
 			}
 			captureError("<OAuthCallback />", e);
-			await redirectToError(new URL(app.urls.error, window.location.href));
+			setErrorSearchParams({});
 		}
 	}), [app]);
 	useEffect(() => {
 		setTimeout(() => setShowRedirectLink(true), 3e3);
 	}, []);
+	if (errorSearchParams != null) return /* @__PURE__ */ jsx(ErrorPage, {
+		searchParams: errorSearchParams,
+		fullPage
+	});
 	return /* @__PURE__ */ jsx(MaybeFullPage, {
 		fullPage: fullPage ?? false,
 		containerClassName: "flex items-center justify-center",
@@ -56,11 +52,10 @@ function OAuthCallback({ fullPage }) {
 			children: [/* @__PURE__ */ jsx("div", {
 				className: "flex flex-col justify-center items-center gap-4",
 				children: /* @__PURE__ */ jsx(Spinner, { size: 20 })
-			}), showRedirectLink || redirectUrl != null ? /* @__PURE__ */ jsxs("p", { children: [t("If you are not redirected automatically, "), /* @__PURE__ */ jsx(StyledLink, {
+			}), showRedirectLink ? /* @__PURE__ */ jsxs("p", { children: [t("If you are not redirected automatically, "), /* @__PURE__ */ jsx(StyledLink, {
 				className: "whitespace-nowrap",
-				href: redirectUrl ?? "#",
+				href: "#",
 				onClick: (e) => {
-					if (redirectUrl != null) return;
 					e.preventDefault();
 					runAsynchronously(app.redirectToHome());
 				},

package/dist/esm/components-page/oauth-callback.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-callback.js","names":[],"sources":["../../../src/components-page/oauth-callback.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { KnownError } from \"@hexclave/shared\";\nimport { captureError } from \"@hexclave/shared/dist/utils/errors\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { Spinner, cn } from \"@hexclave/ui\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useStackApp } from \"..\";\nimport { MaybeFullPage } from \"../components/elements/maybe-full-page\";\nimport { StyledLink } from \"../components/link\";\nimport { hexclaveAppInternalsSymbol } from \"../lib/hexclave-app\";\nimport { useTranslation } from \"../lib/translations\";\n\nexport function OAuthCallback({ fullPage }: { fullPage?: boolean }) {\n  const { t } = useTranslation();\n  const app = useStackApp();\n  const called = useRef(false);\n  const [showRedirectLink, setShowRedirectLink] = useState(false);\n  const [redirectUrl, setRedirectUrl] = useState<string | null>(null);\n\n  useEffect(() => runAsynchronously(async () => {\n    if (called.current) return;\n    called.current = true;\n    const redirectToError = async (url: URL) => {\n      const urlString = url.toString();\n      if (app[hexclaveAppInternalsSymbol].getRedirectMethod() === \"none\") {\n        setRedirectUrl(urlString);\n        return;\n      }\n      await app[hexclaveAppInternalsSymbol].redirectToUrl(urlString, { replace: true });\n    };\n    try {\n      const hasRedirected = await app.callOAuthCallback();\n      if (!hasRedirected) {\n        await app.redirectToSignIn({ noRedirectBack: true });\n      }\n    } catch (e) {\n      if (KnownError.isKnownError(e)) {\n        const errorUrl = new URL(app.urls.error, window.location.href);\n        errorUrl.searchParams.set(\"errorCode\", e.errorCode);\n        errorUrl.searchParams.set(\"message\", e.message);\n        errorUrl.searchParams.set(\"details\", JSON.stringify(e.details ?? {}));\n        await redirectToError(errorUrl);\n        return;\n      }\n      captureError(\"<OAuthCallback />\", e);\n      await redirectToError(new URL(app.urls.error, window.location.href));\n    }\n  }), [app]);\n\n  useEffect(() => {\n    setTimeout(() => setShowRedirectLink(true), 3000);\n  }, []);\n\n  return (\n    <MaybeFullPage\n      fullPage={fullPage ?? false}\n      containerClassName=\"flex items-center justify-center\"\n    >\n      <div\n        className={cn(\n          \"text-center justify-center items-center stack-scope flex flex-col gap-4 max-w-[380px]\",\n          fullPage ? \"p-4\" : \"p-0\"\n        )}\n      >\n        <div className=\"flex flex-col justify-center items-center gap-4\">\n          <Spinner size={20} />\n        </div>\n        {showRedirectLink || redirectUrl != null ? <p>{t('If you are not redirected automatically, ')}<StyledLink\n          className=\"whitespace-nowrap\"\n          href={redirectUrl ?? \"#\"}\n          onClick={(e) => {\n            if (redirectUrl != null) return;\n            e.preventDefault();\n            runAsynchronously(app.redirectToHome());\n          }}\n        >{t(\"click here\")}</StyledLink></p> : null}\n      </div>\n    </MaybeFullPage>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,SAAgB,cAAc,EAAE,YAAoC;CAClE,MAAM,EAAE,MAAM,gBAAgB;CAC9B,MAAM,MAAM,aAAa;CACzB,MAAM,SAAS,OAAO,MAAM;CAC5B,MAAM,CAAC,kBAAkB,uBAAuB,SAAS,MAAM;CAC/D,MAAM,CAAC,aAAa,kBAAkB,SAAwB,KAAK;AAEnE,iBAAgB,kBAAkB,YAAY;AAC5C,MAAI,OAAO,QAAS;AACpB,SAAO,UAAU;EACjB,MAAM,kBAAkB,OAAO,QAAa;GAC1C,MAAM,YAAY,IAAI,UAAU;AAChC,OAAI,IAAI,4BAA4B,mBAAmB,KAAK,QAAQ;AAClE,mBAAe,UAAU;AACzB;;AAEF,SAAM,IAAI,4BAA4B,cAAc,WAAW,EAAE,SAAS,MAAM,CAAC;;AAEnF,MAAI;AAEF,OAAI,CADkB,MAAM,IAAI,mBAAmB,CAEjD,OAAM,IAAI,iBAAiB,EAAE,gBAAgB,MAAM,CAAC;WAE/C,GAAG;AACV,OAAI,WAAW,aAAa,EAAE,EAAE;IAC9B,MAAM,WAAW,IAAI,IAAI,IAAI,KAAK,OAAO,OAAO,SAAS,KAAK;AAC9D,aAAS,aAAa,IAAI,aAAa,EAAE,UAAU;AACnD,aAAS,aAAa,IAAI,WAAW,EAAE,QAAQ;AAC/C,aAAS,aAAa,IAAI,WAAW,KAAK,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;AACrE,UAAM,gBAAgB,SAAS;AAC/B;;AAEF,gBAAa,qBAAqB,EAAE;AACpC,SAAM,gBAAgB,IAAI,IAAI,IAAI,KAAK,OAAO,OAAO,SAAS,KAAK,CAAC;;GAEtE,EAAE,CAAC,IAAI,CAAC;AAEV,iBAAgB;AACd,mBAAiB,oBAAoB,KAAK,EAAE,IAAK;IAChD,EAAE,CAAC;AAEN,QACE,oBAAC;EACC,UAAU,YAAY;EACtB,oBAAmB;YAEnB,qBAAC;GACC,WAAW,GACT,yFACA,WAAW,QAAQ,MACpB;cAED,oBAAC;IAAI,WAAU;cACb,oBAAC,WAAQ,MAAM,KAAM;KACjB,EACL,oBAAoB,eAAe,OAAO,qBAAC,kBAAG,EAAE,4CAA4C,EAAC,oBAAC;IAC7F,WAAU;IACV,MAAM,eAAe;IACrB,UAAU,MAAM;AACd,SAAI,eAAe,KAAM;AACzB,OAAE,gBAAgB;AAClB,uBAAkB,IAAI,gBAAgB,CAAC;;cAEzC,EAAE,aAAa;KAAc,IAAI,GAAG;IAClC;GACQ"}
+{"version":3,"file":"oauth-callback.js","names":[],"sources":["../../../src/components-page/oauth-callback.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { KnownError } from \"@hexclave/shared\";\nimport { captureError } from \"@hexclave/shared/dist/utils/errors\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { Spinner, cn } from \"@hexclave/ui\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useStackApp } from \"..\";\nimport { MaybeFullPage } from \"../components/elements/maybe-full-page\";\nimport { StyledLink } from \"../components/link\";\nimport { useTranslation } from \"../lib/translations\";\nimport { ErrorPage } from \"./error-page\";\n\nexport function OAuthCallback({ fullPage }: { fullPage?: boolean }) {\n  const { t } = useTranslation();\n  const app = useStackApp();\n  const called = useRef(false);\n  const [showRedirectLink, setShowRedirectLink] = useState(false);\n  const [errorSearchParams, setErrorSearchParams] = useState<Record<string, string> | null>(null);\n\n  useEffect(() => runAsynchronously(async () => {\n    if (called.current) return;\n    called.current = true;\n    try {\n      const hasRedirected = await app.callOAuthCallback();\n      if (!hasRedirected) {\n        await app.redirectToSignIn({ noRedirectBack: true });\n      }\n    } catch (e) {\n      if (KnownError.isKnownError(e)) {\n        setErrorSearchParams({\n          errorCode: e.errorCode,\n          message: e.message,\n          details: JSON.stringify(e.details ?? {}),\n        });\n        return;\n      }\n      captureError(\"<OAuthCallback />\", e);\n      setErrorSearchParams({});\n    }\n  }), [app]);\n\n  useEffect(() => {\n    setTimeout(() => setShowRedirectLink(true), 3000);\n  }, []);\n\n  if (errorSearchParams != null) {\n    return <ErrorPage searchParams={errorSearchParams} fullPage={fullPage} />;\n  }\n\n  return (\n    <MaybeFullPage\n      fullPage={fullPage ?? false}\n      containerClassName=\"flex items-center justify-center\"\n    >\n      <div\n        className={cn(\n          \"text-center justify-center items-center stack-scope flex flex-col gap-4 max-w-[380px]\",\n          fullPage ? \"p-4\" : \"p-0\"\n        )}\n      >\n        <div className=\"flex flex-col justify-center items-center gap-4\">\n          <Spinner size={20} />\n        </div>\n        {showRedirectLink ? <p>{t('If you are not redirected automatically, ')}<StyledLink\n          className=\"whitespace-nowrap\"\n          href=\"#\"\n          onClick={(e) => {\n            e.preventDefault();\n            runAsynchronously(app.redirectToHome());\n          }}\n        >{t(\"click here\")}</StyledLink></p> : null}\n      </div>\n    </MaybeFullPage>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,SAAgB,cAAc,EAAE,YAAoC;CAClE,MAAM,EAAE,MAAM,gBAAgB;CAC9B,MAAM,MAAM,aAAa;CACzB,MAAM,SAAS,OAAO,MAAM;CAC5B,MAAM,CAAC,kBAAkB,uBAAuB,SAAS,MAAM;CAC/D,MAAM,CAAC,mBAAmB,wBAAwB,SAAwC,KAAK;AAE/F,iBAAgB,kBAAkB,YAAY;AAC5C,MAAI,OAAO,QAAS;AACpB,SAAO,UAAU;AACjB,MAAI;AAEF,OAAI,CADkB,MAAM,IAAI,mBAAmB,CAEjD,OAAM,IAAI,iBAAiB,EAAE,gBAAgB,MAAM,CAAC;WAE/C,GAAG;AACV,OAAI,WAAW,aAAa,EAAE,EAAE;AAC9B,yBAAqB;KACnB,WAAW,EAAE;KACb,SAAS,EAAE;KACX,SAAS,KAAK,UAAU,EAAE,WAAW,EAAE,CAAC;KACzC,CAAC;AACF;;AAEF,gBAAa,qBAAqB,EAAE;AACpC,wBAAqB,EAAE,CAAC;;GAE1B,EAAE,CAAC,IAAI,CAAC;AAEV,iBAAgB;AACd,mBAAiB,oBAAoB,KAAK,EAAE,IAAK;IAChD,EAAE,CAAC;AAEN,KAAI,qBAAqB,KACvB,QAAO,oBAAC;EAAU,cAAc;EAA6B;GAAY;AAG3E,QACE,oBAAC;EACC,UAAU,YAAY;EACtB,oBAAmB;YAEnB,qBAAC;GACC,WAAW,GACT,yFACA,WAAW,QAAQ,MACpB;cAED,oBAAC;IAAI,WAAU;cACb,oBAAC,WAAQ,MAAM,KAAM;KACjB,EACL,mBAAmB,qBAAC,kBAAG,EAAE,4CAA4C,EAAC,oBAAC;IACtE,WAAU;IACV,MAAK;IACL,UAAU,MAAM;AACd,OAAE,gBAAgB;AAClB,uBAAkB,IAAI,gBAAgB,CAAC;;cAEzC,EAAE,aAAa;KAAc,IAAI,GAAG;IAClC;GACQ"}

package/dist/esm/components-page/oauth-callback.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/esm/components-page/oauth-callback.test.js

@@ -0,0 +1,89 @@
+import React, { act } from "react";
+import { jsx } from "react/jsx-runtime";
+import { KnownErrors } from "@hexclave/shared";
+import { createRoot } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { OAuthCallback } from "./oauth-callback.js";
+import { TranslationProviderClient } from "../providers/translation-provider-client.js";
+
+//#region src/components-page/oauth-callback.test.tsx
+// @vitest-environment jsdom
+const appMockState = vi.hoisted(() => ({ app: null }));
+vi.mock("..", () => ({ useStackApp: () => {
+	if (appMockState.app == null) throw new Error("Expected test app to be set before rendering.");
+	return appMockState.app;
+} }));
+vi.mock("@hexclave/ui", async () => {
+	await import("react");
+	return {
+		Button: (props) => /* @__PURE__ */ jsx("button", {
+			type: "button",
+			onClick: props.onClick,
+			children: props.children
+		}),
+		Spinner: () => /* @__PURE__ */ jsx("div", { "data-testid": "spinner" }),
+		Typography: (props) => /* @__PURE__ */ jsx("div", { children: props.children }),
+		cn: (...classes) => classes.filter(Boolean).join(" ")
+	};
+});
+const previousActEnvironment = Reflect.get(globalThis, "IS_REACT_ACT_ENVIRONMENT");
+function createAppTestDouble(options) {
+	return {
+		callOAuthCallback: options.callOAuthCallback,
+		redirectToSignIn: vi.fn(async () => {}),
+		redirectToHome: vi.fn(async () => {})
+	};
+}
+let root = null;
+let container = null;
+async function renderWithApp(app) {
+	appMockState.app = app;
+	container = document.createElement("div");
+	document.body.append(container);
+	root = createRoot(container);
+	await act(async () => {
+		root?.render(/* @__PURE__ */ jsx(TranslationProviderClient, {
+			quetzalKeys: /* @__PURE__ */ new Map(),
+			quetzalLocale: /* @__PURE__ */ new Map(),
+			children: /* @__PURE__ */ jsx(OAuthCallback, {})
+		}));
+	});
+}
+async function flushEffects() {
+	await act(async () => {
+		await new Promise((resolve) => setTimeout(resolve, 0));
+	});
+}
+describe("OAuthCallback", () => {
+	beforeEach(() => {
+		Reflect.set(globalThis, "IS_REACT_ACT_ENVIRONMENT", true);
+	});
+	afterEach(() => {
+		act(() => {
+			root?.unmount();
+		});
+		container?.remove();
+		root = null;
+		container = null;
+		appMockState.app = null;
+		vi.restoreAllMocks();
+		Reflect.set(globalThis, "IS_REACT_ACT_ENVIRONMENT", previousActEnvironment);
+	});
+	it("renders backend-encoded OAuth callback errors on the callback page", async () => {
+		const errorMessage = "Your sign up was rejected by an administrator's sign-up rule.";
+		const callOAuthCallback = vi.fn(async () => {
+			throw new KnownErrors.SignUpRejected(errorMessage);
+		});
+		const app = createAppTestDouble({ callOAuthCallback });
+		await renderWithApp(app);
+		await flushEffects();
+		expect(callOAuthCallback).toHaveBeenCalledOnce();
+		expect(container?.textContent).toContain("SIGN_UP_REJECTED");
+		expect(container?.textContent).toContain(errorMessage);
+		expect(app.redirectToSignIn).not.toHaveBeenCalled();
+	});
+});
+
+//#endregion
+export {  };
+//# sourceMappingURL=oauth-callback.test.js.map

package/dist/esm/components-page/oauth-callback.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-callback.test.js","names":[],"sources":["../../../src/components-page/oauth-callback.test.tsx"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { KnownErrors } from \"@hexclave/shared\";\nimport React, { act } from \"react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { StackClientApp } from \"../lib/hexclave-app/apps/interfaces/client-app\";\nimport { TranslationProviderClient } from \"../providers/translation-provider-client\";\nimport { OAuthCallback } from \"./oauth-callback\";\n\nconst appMockState = vi.hoisted(() => ({ app: null as unknown }));\n\nvi.mock(\"..\", () => ({\n  useStackApp: () => {\n    if (appMockState.app == null) {\n      throw new Error(\"Expected test app to be set before rendering.\");\n    }\n    return appMockState.app;\n  },\n}));\n\nvi.mock(\"@hexclave/ui\", async () => {\n  const React = await import(\"react\");\n  return {\n    Button: (props: { children: React.ReactNode, onClick?: () => void }) => (\n      <button type=\"button\" onClick={props.onClick}>{props.children}</button>\n    ),\n    Spinner: () => <div data-testid=\"spinner\" />,\n    Typography: (props: { children: React.ReactNode }) => <div>{props.children}</div>,\n    cn: (...classes: (string | false | null | undefined)[]) => classes.filter(Boolean).join(\" \"),\n  };\n});\n\nconst previousActEnvironment = Reflect.get(globalThis, \"IS_REACT_ACT_ENVIRONMENT\");\n\nfunction createAppTestDouble(options: {\n  callOAuthCallback: () => Promise<boolean>,\n}) {\n  const app = {\n    callOAuthCallback: options.callOAuthCallback,\n    redirectToSignIn: vi.fn(async () => {}),\n    redirectToHome: vi.fn(async () => {}),\n  };\n\n  // This test double intentionally implements only the StackClientApp surface\n  // that OAuthCallback and the rendered error card touch.\n  return app as unknown as StackClientApp<true>;\n}\n\nlet root: Root | null = null;\nlet container: HTMLDivElement | null = null;\n\nasync function renderWithApp(app: StackClientApp<true>) {\n  appMockState.app = app;\n  container = document.createElement(\"div\");\n  document.body.append(container);\n  root = createRoot(container);\n  await act(async () => {\n    root?.render(\n      <TranslationProviderClient quetzalKeys={new Map()} quetzalLocale={new Map()}>\n        <OAuthCallback />\n      </TranslationProviderClient>\n    );\n  });\n}\n\nasync function flushEffects() {\n  await act(async () => {\n    await new Promise((resolve) => setTimeout(resolve, 0));\n  });\n}\n\ndescribe(\"OAuthCallback\", () => {\n  beforeEach(() => {\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", true);\n  });\n\n  afterEach(() => {\n    act(() => {\n      root?.unmount();\n    });\n    container?.remove();\n    root = null;\n    container = null;\n    appMockState.app = null;\n    vi.restoreAllMocks();\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", previousActEnvironment);\n  });\n\n  it(\"renders backend-encoded OAuth callback errors on the callback page\", async () => {\n    const errorMessage = \"Your sign up was rejected by an administrator's sign-up rule.\";\n    const callOAuthCallback = vi.fn(async () => {\n      throw new KnownErrors.SignUpRejected(errorMessage);\n    });\n    const app = createAppTestDouble({ callOAuthCallback });\n\n    await renderWithApp(app);\n    await flushEffects();\n\n    expect(callOAuthCallback).toHaveBeenCalledOnce();\n    expect(container?.textContent).toContain(\"SIGN_UP_REJECTED\");\n    expect(container?.textContent).toContain(errorMessage);\n    expect(app.redirectToSignIn).not.toHaveBeenCalled();\n  });\n});\n"],"mappings":";;;;;;;;;;AAcA,MAAM,eAAe,GAAG,eAAe,EAAE,KAAK,MAAiB,EAAE;AAEjE,GAAG,KAAK,aAAa,EACnB,mBAAmB;AACjB,KAAI,aAAa,OAAO,KACtB,OAAM,IAAI,MAAM,gDAAgD;AAElE,QAAO,aAAa;GAEvB,EAAE;AAEH,GAAG,KAAK,gBAAgB,YAAY;AACpB,OAAM,OAAO;AAC3B,QAAO;EACL,SAAS,UACP,oBAAC;GAAO,MAAK;GAAS,SAAS,MAAM;aAAU,MAAM;IAAkB;EAEzE,eAAe,oBAAC,SAAI,eAAY,YAAY;EAC5C,aAAa,UAAyC,oBAAC,mBAAK,MAAM,WAAe;EACjF,KAAK,GAAG,YAAmD,QAAQ,OAAO,QAAQ,CAAC,KAAK,IAAI;EAC7F;EACD;AAEF,MAAM,yBAAyB,QAAQ,IAAI,YAAY,2BAA2B;AAElF,SAAS,oBAAoB,SAE1B;AASD,QARY;EACV,mBAAmB,QAAQ;EAC3B,kBAAkB,GAAG,GAAG,YAAY,GAAG;EACvC,gBAAgB,GAAG,GAAG,YAAY,GAAG;EACtC;;AAOH,IAAI,OAAoB;AACxB,IAAI,YAAmC;AAEvC,eAAe,cAAc,KAA2B;AACtD,cAAa,MAAM;AACnB,aAAY,SAAS,cAAc,MAAM;AACzC,UAAS,KAAK,OAAO,UAAU;AAC/B,QAAO,WAAW,UAAU;AAC5B,OAAM,IAAI,YAAY;AACpB,QAAM,OACJ,oBAAC;GAA0B,6BAAa,IAAI,KAAK;GAAE,+BAAe,IAAI,KAAK;aACzE,oBAAC,kBAAgB;IACS,CAC7B;GACD;;AAGJ,eAAe,eAAe;AAC5B,OAAM,IAAI,YAAY;AACpB,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;GACtD;;AAGJ,SAAS,uBAAuB;AAC9B,kBAAiB;AACf,UAAQ,IAAI,YAAY,4BAA4B,KAAK;GACzD;AAEF,iBAAgB;AACd,YAAU;AACR,SAAM,SAAS;IACf;AACF,aAAW,QAAQ;AACnB,SAAO;AACP,cAAY;AACZ,eAAa,MAAM;AACnB,KAAG,iBAAiB;AACpB,UAAQ,IAAI,YAAY,4BAA4B,uBAAuB;GAC3E;AAEF,IAAG,sEAAsE,YAAY;EACnF,MAAM,eAAe;EACrB,MAAM,oBAAoB,GAAG,GAAG,YAAY;AAC1C,SAAM,IAAI,YAAY,eAAe,aAAa;IAClD;EACF,MAAM,MAAM,oBAAoB,EAAE,mBAAmB,CAAC;AAEtD,QAAM,cAAc,IAAI;AACxB,QAAM,cAAc;AAEpB,SAAO,kBAAkB,CAAC,sBAAsB;AAChD,SAAO,WAAW,YAAY,CAAC,UAAU,mBAAmB;AAC5D,SAAO,WAAW,YAAY,CAAC,UAAU,aAAa;AACtD,SAAO,IAAI,iBAAiB,CAAC,IAAI,kBAAkB;GACnD;EACF"}