@luminaryworks/auth-react 0.5.0 → 0.7.0

package/dist/index.js

@@ -1,4 +1,4 @@
-(function(){if(typeof document==="undefined")return;var id="lw-auth-react-headless-login";if(document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent="/* src/HeadlessLoginPanel.module.scss */\n.HeadlessLoginPanel_module_panel {\n  --lw-auth-theme: #1677ff;\n  --lw-auth-theme-deep: color-mix(in srgb, var(--lw-auth-theme) 72%, #000);\n  width: min(100%, 400px);\n  padding: 28px 28px 22px;\n  border-radius: 16px;\n  background: rgba(255, 255, 255, 0.96);\n  color: #14212b;\n  box-shadow: 0 24px 64px rgba(15, 23, 42, 0.28);\n  font-family:\n    \"Segoe UI\",\n    \"PingFang SC\",\n    \"Noto Sans SC\",\n    sans-serif;\n}\n.HeadlessLoginPanel_module_brand {\n  display: flex;\n  gap: 14px;\n  align-items: center;\n  margin-bottom: 12px;\n}\n.HeadlessLoginPanel_module_logo {\n  border-radius: 12px;\n  display: block;\n}\n.HeadlessLoginPanel_module_product {\n  margin: 0;\n  font-size: 13px;\n  font-weight: 650;\n  letter-spacing: 0.04em;\n  text-transform: uppercase;\n  color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_title {\n  margin: 2px 0 0;\n  font-size: 22px;\n  font-weight: 700;\n  line-height: 1.25;\n}\n.HeadlessLoginPanel_module_subtitle {\n  margin: 0 0 18px;\n  font-size: 14px;\n  line-height: 1.5;\n  color: #4b5c68;\n}\n.HeadlessLoginPanel_module_form {\n  display: grid;\n  gap: 10px;\n}\n.HeadlessLoginPanel_module_channelTabs {\n  display: grid;\n  grid-template-columns: 1fr 1fr;\n  gap: 6px;\n  margin-bottom: 2px;\n}\n.HeadlessLoginPanel_module_channelTab {\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 8px 10px;\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #4b5c68;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_channelTab:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_channelTabActive {\n  color: var(--lw-auth-theme-deep);\n  border-color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 10%, #fff);\n}\n.HeadlessLoginPanel_module_codeRow {\n  display: grid;\n  grid-template-columns: 1fr auto;\n  gap: 8px;\n  align-items: stretch;\n}\n.HeadlessLoginPanel_module_codeInput {\n  min-width: 0;\n}\n.HeadlessLoginPanel_module_secondaryBtn {\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 0 12px;\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n  white-space: nowrap;\n}\n.HeadlessLoginPanel_module_secondaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialStack {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 10px;\n  font-size: 12px;\n}\n.HeadlessLoginPanel_module_input {\n  width: 100%;\n  box-sizing: border-box;\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 10px 12px;\n  font-size: 14px;\n  outline: none;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_input:focus {\n  border-color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_input:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_passwordField {\n  position: relative;\n  display: flex;\n  align-items: center;\n}\n.HeadlessLoginPanel_module_passwordInput {\n  padding-right: 42px;\n}\n.HeadlessLoginPanel_module_passwordToggle {\n  position: absolute;\n  right: 4px;\n  top: 50%;\n  transform: translateY(-50%);\n  z-index: 1;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 36px;\n  height: 36px;\n  border: none;\n  border-radius: 4px;\n  padding: 0;\n  color: #5a6b76;\n  background: transparent;\n  cursor: pointer;\n}\n.HeadlessLoginPanel_module_passwordToggle:hover:not(:disabled) {\n  color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 12%, transparent);\n}\n.HeadlessLoginPanel_module_passwordToggle:focus-visible {\n  outline: 2px solid var(--lw-auth-theme);\n  outline-offset: 1px;\n}\n.HeadlessLoginPanel_module_passwordToggle:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_primaryBtn {\n  border: none;\n  border-radius: 10px;\n  padding: 11px 14px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #fff;\n  background:\n    linear-gradient(\n      135deg,\n      var(--lw-auth-theme) 0%,\n      var(--lw-auth-theme-deep) 100%);\n}\n.HeadlessLoginPanel_module_primaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialBtn {\n  flex: 1 1 calc(50% - 5px);\n  min-width: min(140px, 100%);\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  gap: 8px;\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 11px 10px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n}\n.HeadlessLoginPanel_module_socialBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialLogo {\n  flex-shrink: 0;\n  display: block;\n}\n.HeadlessLoginPanel_module_logoFallback {\n  width: 18px;\n  height: 18px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--lw-auth-theme) 14%, #fff);\n  color: var(--lw-auth-theme-deep);\n  font-size: 11px;\n  font-weight: 700;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  flex-shrink: 0;\n}\n.HeadlessLoginPanel_module_cancelBtn {\n  margin-top: 10px;\n  width: 100%;\n  border: none;\n  background: transparent;\n  color: #5a6b76;\n  font-size: 13px;\n  cursor: pointer;\n  padding: 8px;\n}\n.HeadlessLoginPanel_module_cancelBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_divider {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  margin: 14px 0;\n  color: #90a0ab;\n}\n.HeadlessLoginPanel_module_dividerLine {\n  flex: 1;\n  height: 1px;\n  background: #d5e0e7;\n}\n.HeadlessLoginPanel_module_dividerText {\n  font-size: 12px;\n  text-transform: uppercase;\n  letter-spacing: 0.08em;\n}\n.HeadlessLoginPanel_module_hint {\n  margin: 10px 0 0;\n  font-size: 12px;\n  color: #6b7c87;\n  line-height: 1.45;\n}\n.HeadlessLoginPanel_module_domainsHint {\n  margin: -2px 0 0;\n  font-size: 12px;\n  line-height: 1.45;\n  color: #4b5c68;\n  word-break: break-word;\n}\n.HeadlessLoginPanel_module_switchMode {\n  margin: 12px 0 0;\n  text-align: center;\n}\n.HeadlessLoginPanel_module_switchModeBtn {\n  border: none;\n  background: transparent;\n  color: var(--lw-auth-theme);\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  padding: 4px 8px;\n  text-decoration: underline;\n  text-underline-offset: 3px;\n}\n.HeadlessLoginPanel_module_switchModeBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_error {\n  margin: 12px 0 0;\n  font-size: 13px;\n  color: #b42318;\n  line-height: 1.4;\n}\n.HeadlessLoginPanel_module_footer {\n  margin-top: 18px;\n  padding-top: 12px;\n  border-top: 1px solid #e4ebf0;\n  font-size: 12px;\n  color: #6b7c87;\n  display: flex;\n  gap: 8px;\n  justify-content: center;\n}\n/*# sourceMappingURL=index.css.map */";document.head.appendChild(s);})();
+(function(){if(typeof document==="undefined")return;var id="lw-auth-react-headless-login";if(document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent="/* src/HeadlessLoginPanel.module.scss */\n.HeadlessLoginPanel_module_panel {\n  --lw-auth-theme: #1677ff;\n  --lw-auth-theme-deep: color-mix(in srgb, var(--lw-auth-theme) 72%, #000);\n  box-sizing: border-box;\n  width: min(100%, 400px);\n  max-width: 400px;\n  padding: 28px 28px 22px;\n  border-radius: 16px;\n  background: rgba(255, 255, 255, 0.96);\n  color: #14212b;\n  box-shadow: 0 24px 64px rgba(15, 23, 42, 0.28);\n  font-family:\n    \"Segoe UI\",\n    \"PingFang SC\",\n    \"Noto Sans SC\",\n    sans-serif;\n}\n.HeadlessLoginPanel_module_brand {\n  display: flex;\n  gap: 14px;\n  align-items: center;\n  margin-bottom: 12px;\n}\n.HeadlessLoginPanel_module_logo {\n  border-radius: 12px;\n  display: block;\n}\n.HeadlessLoginPanel_module_product {\n  margin: 0;\n  font-size: 13px;\n  font-weight: 650;\n  letter-spacing: 0.04em;\n  text-transform: uppercase;\n  color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_title {\n  margin: 2px 0 0;\n  font-size: 22px;\n  font-weight: 700;\n  line-height: 1.25;\n}\n.HeadlessLoginPanel_module_subtitle {\n  margin: 0 0 18px;\n  font-size: 14px;\n  line-height: 1.5;\n  color: #4b5c68;\n}\n.HeadlessLoginPanel_module_form {\n  display: grid;\n  gap: 10px;\n}\n.HeadlessLoginPanel_module_channelTabs {\n  display: grid;\n  grid-template-columns: 1fr 1fr;\n  gap: 6px;\n  margin-bottom: 2px;\n}\n.HeadlessLoginPanel_module_channelTab {\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 8px 10px;\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #4b5c68;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_channelTab:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_channelTabActive {\n  color: var(--lw-auth-theme-deep);\n  border-color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 10%, #fff);\n}\n.HeadlessLoginPanel_module_codeRow {\n  display: grid;\n  grid-template-columns: 1fr auto;\n  gap: 8px;\n  align-items: stretch;\n}\n.HeadlessLoginPanel_module_codeInput {\n  min-width: 0;\n}\n.HeadlessLoginPanel_module_secondaryBtn {\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 0 12px;\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n  white-space: nowrap;\n}\n.HeadlessLoginPanel_module_secondaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialStack {\n  display: grid;\n  grid-template-columns: repeat(2, minmax(0, 1fr));\n  gap: 10px;\n  font-size: 12px;\n}\n.HeadlessLoginPanel_module_input {\n  width: 100%;\n  box-sizing: border-box;\n  border: 1px solid #c9d5de;\n  border-radius: 10px;\n  padding: 10px 12px;\n  font-size: 14px;\n  outline: none;\n  background: #f7fafc;\n}\n.HeadlessLoginPanel_module_input:focus {\n  border-color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_input:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_passwordField {\n  position: relative;\n  display: flex;\n  align-items: center;\n}\n.HeadlessLoginPanel_module_passwordInput {\n  padding-right: 42px;\n}\n.HeadlessLoginPanel_module_passwordToggle {\n  position: absolute;\n  right: 4px;\n  top: 50%;\n  transform: translateY(-50%);\n  z-index: 1;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 36px;\n  height: 36px;\n  border: none;\n  border-radius: 4px;\n  padding: 0;\n  color: #5a6b76;\n  background: transparent;\n  cursor: pointer;\n}\n.HeadlessLoginPanel_module_passwordToggle:hover:not(:disabled) {\n  color: var(--lw-auth-theme);\n  background: color-mix(in srgb, var(--lw-auth-theme) 12%, transparent);\n}\n.HeadlessLoginPanel_module_passwordToggle:focus-visible {\n  outline: 2px solid var(--lw-auth-theme);\n  outline-offset: 1px;\n}\n.HeadlessLoginPanel_module_passwordToggle:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_primaryBtn {\n  border: none;\n  border-radius: 10px;\n  padding: 11px 14px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #fff;\n  background:\n    linear-gradient(\n      135deg,\n      var(--lw-auth-theme) 0%,\n      var(--lw-auth-theme-deep) 100%);\n}\n.HeadlessLoginPanel_module_primaryBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialBtn {\n  width: 100%;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  gap: 8px;\n  border: 1px solid #b7c9d4;\n  border-radius: 10px;\n  padding: 11px 10px;\n  font-size: 14px;\n  font-weight: 650;\n  cursor: pointer;\n  color: #14212b;\n  background: #fff;\n}\n.HeadlessLoginPanel_module_socialBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_socialLogo {\n  flex-shrink: 0;\n  display: block;\n}\n.HeadlessLoginPanel_module_logoFallback {\n  width: 18px;\n  height: 18px;\n  border-radius: 4px;\n  background: color-mix(in srgb, var(--lw-auth-theme) 14%, #fff);\n  color: var(--lw-auth-theme-deep);\n  font-size: 11px;\n  font-weight: 700;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  flex-shrink: 0;\n}\n.HeadlessLoginPanel_module_cancelBtn {\n  margin-top: 10px;\n  width: 100%;\n  border: none;\n  background: transparent;\n  color: #5a6b76;\n  font-size: 13px;\n  cursor: pointer;\n  padding: 8px;\n}\n.HeadlessLoginPanel_module_cancelBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_divider {\n  display: flex;\n  align-items: center;\n  gap: 10px;\n  margin: 14px 0;\n  color: #90a0ab;\n}\n.HeadlessLoginPanel_module_dividerLine {\n  flex: 1;\n  height: 1px;\n  background: #d5e0e7;\n}\n.HeadlessLoginPanel_module_dividerText {\n  font-size: 12px;\n  text-transform: uppercase;\n  letter-spacing: 0.08em;\n}\n.HeadlessLoginPanel_module_hint {\n  margin: 10px 0 0;\n  font-size: 12px;\n  color: #6b7c87;\n  line-height: 1.45;\n}\n.HeadlessLoginPanel_module_domainsHint {\n  margin: -2px 0 0;\n  font-size: 12px;\n  line-height: 1.45;\n  color: #4b5c68;\n  word-break: break-word;\n}\n.HeadlessLoginPanel_module_switchMode {\n  margin: 12px 0 0;\n  text-align: center;\n}\n.HeadlessLoginPanel_module_switchModeBtn {\n  border: none;\n  background: transparent;\n  color: var(--lw-auth-theme);\n  font-size: 13px;\n  font-weight: 650;\n  cursor: pointer;\n  padding: 4px 8px;\n  text-decoration: underline;\n  text-underline-offset: 3px;\n}\n.HeadlessLoginPanel_module_switchModeBtn:disabled {\n  opacity: 0.65;\n  cursor: not-allowed;\n}\n.HeadlessLoginPanel_module_error {\n  margin: 12px 0 0;\n  font-size: 13px;\n  color: #b42318;\n  line-height: 1.4;\n}\n.HeadlessLoginPanel_module_consent {\n  margin: 12px 0 0;\n  font-size: 13px;\n  line-height: 1.45;\n  color: #14212b;\n}\n.HeadlessLoginPanel_module_consentInvalid {\n  margin: 12px -8px 0;\n  padding: 8px;\n  border: 1px solid #b42318;\n  border-radius: 10px;\n  background: rgba(180, 35, 24, 0.06);\n}\n.HeadlessLoginPanel_module_consentError {\n  margin: 8px 0 0;\n  font-size: 13px;\n  font-weight: 650;\n  line-height: 1.4;\n  color: #b42318;\n}\n.HeadlessLoginPanel_module_consentLinks {\n  margin: 0;\n}\n.HeadlessLoginPanel_module_consentLinks a {\n  color: var(--lw-auth-theme);\n}\n.HeadlessLoginPanel_module_footer {\n  margin-top: 18px;\n  padding-top: 12px;\n  border-top: 1px solid #e4ebf0;\n  font-size: 12px;\n  color: #6b7c87;\n  display: flex;\n  gap: 8px;\n  justify-content: center;\n}\n@media (max-width: 420px) {\n  .HeadlessLoginPanel_module_panel {\n    padding: 22px 16px 18px;\n  }\n}\n\n/* src/LoginLanguageSwitcher.module.scss */\n.LoginLanguageSwitcher_module_switch {\n  position: relative;\n  display: inline-flex;\n}\n.LoginLanguageSwitcher_module_trigger {\n  display: inline-flex;\n  align-items: center;\n  gap: 6px;\n  height: 32px;\n  padding: 0 10px 0 8px;\n  border: 1px solid rgba(15, 23, 42, 0.12);\n  border-radius: 999px;\n  background: rgba(255, 255, 255, 0.86);\n  color: #243044;\n  font: inherit;\n  font-size: 13px;\n  line-height: 1;\n  cursor: pointer;\n  backdrop-filter: blur(8px);\n}\n.LoginLanguageSwitcher_module_trigger:hover,\n.LoginLanguageSwitcher_module_trigger[aria-expanded=true] {\n  border-color: var(--lw-login-accent, #1677ff);\n  color: #0f172a;\n}\n.LoginLanguageSwitcher_module_icon {\n  width: 14px;\n  height: 14px;\n  display: block;\n}\n.LoginLanguageSwitcher_module_caret {\n  width: 10px;\n  height: 10px;\n  opacity: 0.65;\n}\n.LoginLanguageSwitcher_module_menu {\n  position: absolute;\n  top: calc(100% + 6px);\n  right: 0;\n  z-index: 20;\n  min-width: 168px;\n  margin: 0;\n  padding: 6px;\n  list-style: none;\n  border-radius: 12px;\n  background: #fff;\n  box-shadow: 0 12px 40px rgba(15, 23, 42, 0.16);\n}\n.LoginLanguageSwitcher_module_item {\n  display: block;\n  width: 100%;\n  border: 0;\n  border-radius: 8px;\n  padding: 8px 10px;\n  background: transparent;\n  color: #1f2937;\n  font: inherit;\n  font-size: 14px;\n  text-align: left;\n  cursor: pointer;\n}\n.LoginLanguageSwitcher_module_item:hover {\n  background: #f3f6fb;\n}\n.LoginLanguageSwitcher_module_itemActive {\n  background: color-mix(in srgb, var(--lw-login-accent, #1677ff) 14%, #fff);\n  color: var(--lw-login-accent, #1677ff);\n  font-weight: 650;\n}\n.LoginLanguageSwitcher_module_onDark {\n  border-color: rgba(255, 255, 255, 0.22);\n  background: rgba(15, 23, 42, 0.28);\n  color: rgba(255, 255, 255, 0.92);\n}\n.LoginLanguageSwitcher_module_onDark:hover,\n.LoginLanguageSwitcher_module_onDark[aria-expanded=true] {\n  border-color: rgba(255, 255, 255, 0.55);\n  color: #fff;\n}\n\n/* src/LoginCanvas.module.scss */\n.LoginCanvas_module_canvas {\n  --lw-login-accent: #1677ff;\n  position: relative;\n  min-height: 100dvh;\n  display: grid;\n  place-items: center;\n  padding: 56px 20px 24px;\n  overflow: hidden;\n  background:\n    radial-gradient(\n      900px 480px at 8% -8%,\n      color-mix(in srgb, var(--lw-login-accent) 28%, transparent),\n      transparent 58%),\n    radial-gradient(\n      720px 420px at 100% 12%,\n      color-mix(in srgb, var(--lw-login-accent) 16%, transparent),\n      transparent 52%),\n    linear-gradient(\n      165deg,\n      var(--lw-login-bg-a, #f4f7fb) 0%,\n      var(--lw-login-bg-b, #e7eef6) 100%);\n  color: var(--lw-login-ink, #122033);\n}\n.LoginCanvas_module_canvas[data-tone=console] {\n  --lw-login-accent: #7eb6ff;\n  --lw-login-bg-a: #0e1726;\n  --lw-login-bg-b: #1a2740;\n  --lw-login-ink: #e8eef8;\n  --lw-login-grid: rgba(255, 255, 255, 0.05);\n}\n.LoginCanvas_module_canvas[data-tone=vista] {\n  --lw-login-accent: #1677ff;\n  --lw-login-bg-a: #f4f7fb;\n  --lw-login-bg-b: #dde7f0;\n  --lw-login-grid: rgba(11, 18, 32, 0.045);\n}\n.LoginCanvas_module_canvas[data-tone=data] {\n  --lw-login-accent: #7c3aed;\n  --lw-login-bg-a: #0a0f1e;\n  --lw-login-bg-b: #0a0f1e;\n  --lw-login-ink: #e8eefc;\n  --lw-login-grid: rgba(255, 255, 255, 0.045);\n}\n.LoginCanvas_module_canvas[data-tone=edu] {\n  --lw-login-accent: #7ec8ff;\n  --lw-login-bg-a: #0a348c;\n  --lw-login-bg-b: #1d7aef;\n  --lw-login-ink: #f4f8ff;\n  --lw-login-grid: rgba(255, 255, 255, 0.07);\n}\n.LoginCanvas_module_grid {\n  position: absolute;\n  inset: 0;\n  pointer-events: none;\n  background-image:\n    linear-gradient(var(--lw-login-grid, rgba(15, 23, 42, 0.04)) 1px, transparent 1px),\n    linear-gradient(\n      90deg,\n      var(--lw-login-grid, rgba(15, 23, 42, 0.04)) 1px,\n      transparent 1px);\n  background-size: 48px 48px;\n  mask-image:\n    radial-gradient(\n      ellipse at center,\n      #000 18%,\n      transparent 74%);\n}\n.LoginCanvas_module_lang {\n  position: fixed;\n  top: 14px;\n  right: 16px;\n  z-index: 5;\n}\n.LoginCanvas_module_decor {\n  position: absolute;\n  inset: 0;\n  pointer-events: none;\n  z-index: 0;\n}\n.LoginCanvas_module_slot {\n  position: relative;\n  z-index: 1;\n  width: min(440px, 100%);\n}\n.LoginCanvas_module_slotFill {\n  width: min(1120px, 100%);\n}\n@media (max-width: 720px) {\n  .LoginCanvas_module_canvas {\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    justify-content: flex-start;\n    overflow-x: hidden;\n    overflow-y: auto;\n    padding: 72px 16px 28px;\n  }\n  .LoginCanvas_module_lang {\n    top: 12px;\n    right: 12px;\n  }\n}\n@media (max-width: 420px) {\n  .LoginCanvas_module_canvas {\n    padding: 64px 12px 20px;\n  }\n}\n/*# sourceMappingURL=index.css.map */";document.head.appendChild(s);})();
 'use strict';
 
 var oidcClientTs = require('oidc-client-ts');
@@ -250,6 +250,20 @@ function isLogtoRegisterUsername(value) {
 function experienceUrl(apiBase, path) {
   return `${apiBase.replace(/\/$/, "")}/api/experience${path}`;
 }
+var ExperienceApiError = class extends Error {
+  status;
+  code;
+  constructor(status, code, message) {
+    super(message);
+    this.name = "ExperienceApiError";
+    this.status = status;
+    this.code = code;
+  }
+};
+var MFA_REQUIRED_CODE = "session.mfa.require_mfa_verification";
+function isMfaVerificationRequired(error) {
+  return error instanceof ExperienceApiError && error.code === MFA_REQUIRED_CODE;
+}
 async function experienceFetch(apiBase, path, init) {
   const res = await fetch(experienceUrl(apiBase, path), {
     credentials: "include",
@@ -270,8 +284,10 @@ async function experienceFetch(apiBase, path, init) {
     }
   }
   if (!res.ok) {
-    const msg = data && typeof data === "object" && data !== null && "message" in data ? String(data.message) : `Experience API ${res.status}`;
-    throw new Error(msg);
+    const body = data && typeof data === "object" && data !== null ? data : null;
+    const code = typeof body?.code === "string" ? body.code : "";
+    const msg = typeof body?.message === "string" ? body.message : `Experience API ${res.status}`;
+    throw new ExperienceApiError(res.status, code, msg);
   }
   return data;
 }
@@ -365,21 +381,44 @@ var LogtoExperienceAdapter = class {
           method: "POST",
           body: JSON.stringify({ verificationId })
         });
-        const submitted = await experienceFetch(
-          apiBase,
-          "/submit",
-          {
-            method: "POST",
-            body: JSON.stringify({})
+        try {
+          const submitted = await experienceFetch(
+            apiBase,
+            "/submit",
+            {
+              method: "POST",
+              body: JSON.stringify({})
+            }
+          );
+          return { redirectTo: submitted?.redirectTo, raw: submitted };
+        } catch (error) {
+          if (isMfaVerificationRequired(error)) {
+            return { mfaRequired: true };
           }
-        );
-        return { redirectTo: submitted?.redirectTo, raw: submitted };
+          throw error;
+        }
       } catch (error) {
         lastError = error instanceof Error ? error : new Error(String(error));
       }
     }
     throw lastError ?? new Error("Experience password sign-in failed");
   }
+  /** Verify the user's existing authenticator code, then submit the interaction. */
+  async experienceVerifyTotp(input) {
+    const code = input.code.trim();
+    if (!code) {
+      throw new Error("Authenticator code is required");
+    }
+    await experienceFetch(input.apiBase, "/verification/totp/verify", {
+      method: "POST",
+      body: JSON.stringify({ code })
+    });
+    const submitted = await experienceFetch(input.apiBase, "/submit", {
+      method: "POST",
+      body: JSON.stringify({})
+    });
+    return { redirectTo: submitted?.redirectTo, raw: submitted };
+  }
   /**
    * Register with username + password via NewPasswordIdentity.
    * Email/phone self-register requires verification codes — use social or invite instead.
@@ -920,6 +959,392 @@ function useLuminaryAuth() {
   return ctx;
 }
 
+// src/login-labels.ts
+var DEFAULT_LOGIN_LOCALES = [
+  { code: "zh-CN", label: "\u7B80\u4F53\u4E2D\u6587", short: "\u7B80" },
+  { code: "zh-TW", label: "\u7E41\u9AD4\u4E2D\u6587", short: "\u7E41" },
+  { code: "ja", label: "\u65E5\u672C\u8A9E", short: "JA" },
+  { code: "ko", label: "\uD55C\uAD6D\uC5B4", short: "KO" },
+  { code: "en", label: "English", short: "EN" },
+  { code: "pt", label: "Portugu\xEAs", short: "PT" },
+  { code: "nl", label: "Nederlands", short: "NL" },
+  { code: "it", label: "Italiano", short: "IT" },
+  { code: "es", label: "Espa\xF1ol", short: "ES" },
+  { code: "fr", label: "Fran\xE7ais", short: "FR" }
+];
+var ZH_CN = {
+  title: "\u767B\u5F55",
+  subtitle: "\u4F7F\u7528 LuminaryWorks \u7EDF\u4E00\u8D26\u53F7",
+  identifierPlaceholder: "\u90AE\u7BB1\u6216\u7528\u6237\u540D",
+  registerIdentifierPlaceholder: "\u7528\u6237\u540D",
+  passwordPlaceholder: "\u5BC6\u7801",
+  confirmPasswordPlaceholder: "\u786E\u8BA4\u5BC6\u7801",
+  submitPassword: "\u5BC6\u7801\u767B\u5F55",
+  submitRegister: "\u521B\u5EFA\u8D26\u53F7",
+  submitSso: "\u4F7F\u7528\u7EDF\u4E00\u8D26\u53F7\u7EE7\u7EED",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "\u6216",
+  hint: "\u793E\u4EA4\u8D26\u53F7\u4F1A\u76F4\u63A5\u6253\u5F00\u5BF9\u5E94\u670D\u52A1\u3002\u5BC6\u7801\u767B\u5F55\u4F7F\u7528\u4F60\u7684 LuminaryWorks \u8D26\u53F7\u3002",
+  registerHint: "\u90AE\u7BB1\u6CE8\u518C\u9700\u8981\u9A8C\u8BC1\u7801\u3002\u4E5F\u53EF\u4EE5\u7528\u7528\u6237\u540D\u6CE8\u518C\uFF0C\u6216\u6539\u7528\u793E\u4EA4\u8D26\u53F7\u4E00\u952E\u767B\u5F55\u3002",
+  cancel: "\u53D6\u6D88",
+  experienceUnavailable: "\u5BC6\u7801\u767B\u5F55\u6682\u4E0D\u53EF\u7528\uFF0C\u8BF7\u6539\u7528\u793E\u4EA4\u8D26\u53F7\u3002",
+  showPassword: "\u663E\u793A\u5BC6\u7801",
+  hidePassword: "\u9690\u85CF\u5BC6\u7801",
+  registerLink: "\u521B\u5EFA\u8D26\u53F7",
+  loginLink: "\u5DF2\u6709\u8D26\u53F7\uFF1F\u53BB\u767B\u5F55",
+  passwordMismatch: "\u4E24\u6B21\u5BC6\u7801\u4E0D\u4E00\u81F4",
+  registerTitle: "\u521B\u5EFA\u8D26\u53F7",
+  registerSubtitle: "\u521B\u5EFA LuminaryWorks \u7EDF\u4E00\u8D26\u53F7",
+  registerWithEmail: "\u90AE\u7BB1",
+  registerWithUsername: "\u7528\u6237\u540D",
+  emailPlaceholder: "\u90AE\u7BB1",
+  verificationCodePlaceholder: "\u9A8C\u8BC1\u7801",
+  sendCode: "\u53D1\u9001\u9A8C\u8BC1\u7801",
+  resendCode: "\u91CD\u65B0\u53D1\u9001",
+  allowedDomainsPrefix: "\u5141\u8BB8\u7684\u90AE\u7BB1\u57DF\u540D",
+  allowedDomainsOpen: "\u5927\u591A\u6570\u90AE\u7BB1\u90FD\u53EF\u4EE5\u6CE8\u518C\u3002",
+  allowedDomainsBlocklist: "\u5927\u591A\u6570\u90AE\u7BB1\u53EF\u7528\u3002\u4E34\u65F6\u90AE\u7BB1\u4F1A\u88AB\u62D2\u7EDD\u3002",
+  waitingExternalBrowser: "\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u5B8C\u6210\u767B\u5F55\uFF0C\u7136\u540E\u56DE\u5230\u672C\u5E94\u7528\u3002",
+  consentRequired: "\u8BF7\u5148\u540C\u610F\u7528\u6237\u534F\u8BAE\u540E\u518D\u7EE7\u7EED\u3002",
+  mfaTitle: "\u8EAB\u4EFD\u9A8C\u8BC1\u7801",
+  mfaSubtitle: "\u8F93\u5165\u9A8C\u8BC1\u5668\u5E94\u7528\u4E2D\u7684 6 \u4F4D\u6570\u5B57\u3002",
+  mfaCodePlaceholder: "6 \u4F4D\u9A8C\u8BC1\u7801",
+  mfaSubmit: "\u9A8C\u8BC1\u5E76\u7EE7\u7EED",
+  mfaBack: "\u8FD4\u56DE"
+};
+var ZH_TW = {
+  title: "\u767B\u5165",
+  subtitle: "\u4F7F\u7528 LuminaryWorks \u7D71\u4E00\u5E33\u865F",
+  identifierPlaceholder: "\u96FB\u5B50\u90F5\u4EF6\u6216\u4F7F\u7528\u8005\u540D\u7A31",
+  registerIdentifierPlaceholder: "\u4F7F\u7528\u8005\u540D\u7A31",
+  passwordPlaceholder: "\u5BC6\u78BC",
+  confirmPasswordPlaceholder: "\u78BA\u8A8D\u5BC6\u78BC",
+  submitPassword: "\u5BC6\u78BC\u767B\u5165",
+  submitRegister: "\u5EFA\u7ACB\u5E33\u865F",
+  submitSso: "\u4F7F\u7528\u7D71\u4E00\u5E33\u865F\u7E7C\u7E8C",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "\u6216",
+  hint: "\u793E\u4EA4\u5E33\u865F\u6703\u76F4\u63A5\u958B\u555F\u5C0D\u61C9\u670D\u52D9\u3002\u5BC6\u78BC\u767B\u5165\u4F7F\u7528\u4F60\u7684 LuminaryWorks \u5E33\u865F\u3002",
+  registerHint: "\u96FB\u5B50\u90F5\u4EF6\u8A3B\u518A\u9700\u8981\u9A57\u8B49\u78BC\u3002\u4E5F\u53EF\u4EE5\u7528\u4F7F\u7528\u8005\u540D\u7A31\u8A3B\u518A\uFF0C\u6216\u6539\u7528\u793E\u4EA4\u5E33\u865F\u3002",
+  cancel: "\u53D6\u6D88",
+  experienceUnavailable: "\u5BC6\u78BC\u767B\u5165\u66AB\u4E0D\u53EF\u7528\uFF0C\u8ACB\u6539\u7528\u793E\u4EA4\u5E33\u865F\u3002",
+  showPassword: "\u986F\u793A\u5BC6\u78BC",
+  hidePassword: "\u96B1\u85CF\u5BC6\u78BC",
+  registerLink: "\u5EFA\u7ACB\u5E33\u865F",
+  loginLink: "\u5DF2\u6709\u5E33\u865F\uFF1F\u53BB\u767B\u5165",
+  passwordMismatch: "\u5169\u6B21\u5BC6\u78BC\u4E0D\u4E00\u81F4",
+  registerTitle: "\u5EFA\u7ACB\u5E33\u865F",
+  registerSubtitle: "\u5EFA\u7ACB LuminaryWorks \u7D71\u4E00\u5E33\u865F",
+  registerWithEmail: "\u96FB\u5B50\u90F5\u4EF6",
+  registerWithUsername: "\u4F7F\u7528\u8005\u540D\u7A31",
+  emailPlaceholder: "\u96FB\u5B50\u90F5\u4EF6",
+  verificationCodePlaceholder: "\u9A57\u8B49\u78BC",
+  sendCode: "\u767C\u9001\u9A57\u8B49\u78BC",
+  resendCode: "\u91CD\u65B0\u767C\u9001",
+  allowedDomainsPrefix: "\u5141\u8A31\u7684\u96FB\u5B50\u90F5\u4EF6\u7DB2\u57DF",
+  allowedDomainsOpen: "\u5927\u591A\u6578\u96FB\u5B50\u90F5\u4EF6\u90FD\u53EF\u4EE5\u8A3B\u518A\u3002",
+  allowedDomainsBlocklist: "\u5927\u591A\u6578\u96FB\u5B50\u90F5\u4EF6\u53EF\u7528\u3002\u81E8\u6642\u4FE1\u7BB1\u6703\u88AB\u62D2\u7D55\u3002",
+  waitingExternalBrowser: "\u8ACB\u5728\u700F\u89BD\u5668\u4E2D\u5B8C\u6210\u767B\u5165\uFF0C\u7136\u5F8C\u56DE\u5230\u672C\u61C9\u7528\u3002",
+  consentRequired: "\u8ACB\u5148\u540C\u610F\u4F7F\u7528\u689D\u6B3E\u5F8C\u518D\u7E7C\u7E8C\u3002",
+  mfaTitle: "\u8EAB\u5206\u9A57\u8B49\u78BC",
+  mfaSubtitle: "\u8F38\u5165\u9A57\u8B49\u5668\u61C9\u7528\u7A0B\u5F0F\u4E2D\u7684 6 \u4F4D\u6578\u5B57\u3002",
+  mfaCodePlaceholder: "6 \u4F4D\u9A57\u8B49\u78BC",
+  mfaSubmit: "\u9A57\u8B49\u4E26\u7E7C\u7E8C",
+  mfaBack: "\u8FD4\u56DE"
+};
+var ES = {
+  title: "Iniciar sesi\xF3n",
+  subtitle: "Usa tu cuenta unificada de LuminaryWorks",
+  identifierPlaceholder: "Correo o usuario",
+  registerIdentifierPlaceholder: "Usuario",
+  passwordPlaceholder: "Contrase\xF1a",
+  confirmPasswordPlaceholder: "Confirmar contrase\xF1a",
+  submitPassword: "Entrar con contrase\xF1a",
+  submitRegister: "Crear cuenta",
+  submitSso: "Continuar con la cuenta unificada",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "o",
+  hint: "Las redes abren el proveedor directamente. La contrase\xF1a usa tu cuenta LuminaryWorks.",
+  registerHint: "El registro por correo pide un c\xF3digo. Tambi\xE9n puedes usar un nombre de usuario o una red social.",
+  cancel: "Cancelar",
+  experienceUnavailable: "El inicio con contrase\xF1a no est\xE1 disponible. Usa una red social.",
+  showPassword: "Mostrar contrase\xF1a",
+  hidePassword: "Ocultar contrase\xF1a",
+  registerLink: "Crear una cuenta",
+  loginLink: "\xBFYa tienes cuenta? Inicia sesi\xF3n",
+  passwordMismatch: "Las contrase\xF1as no coinciden",
+  registerTitle: "Crear cuenta",
+  registerSubtitle: "Crea tu cuenta unificada de LuminaryWorks",
+  registerWithEmail: "Correo",
+  registerWithUsername: "Usuario",
+  emailPlaceholder: "Correo",
+  verificationCodePlaceholder: "C\xF3digo",
+  sendCode: "Enviar c\xF3digo",
+  resendCode: "Reenviar",
+  allowedDomainsPrefix: "Dominios de correo permitidos",
+  allowedDomainsOpen: "El registro por correo est\xE1 abierto para la mayor\xEDa de proveedores.",
+  allowedDomainsBlocklist: "Se aceptan la mayor\xEDa de correos. Se bloquean direcciones temporales.",
+  waitingExternalBrowser: "Termina el inicio de sesi\xF3n en el navegador y vuelve a esta app.",
+  consentRequired: "Acepta los t\xE9rminos antes de continuar."
+};
+var JA = {
+  title: "\u30ED\u30B0\u30A4\u30F3",
+  subtitle: "LuminaryWorks \u7D71\u5408\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F7F\u7528",
+  identifierPlaceholder: "\u30E1\u30FC\u30EB\u307E\u305F\u306F\u30E6\u30FC\u30B6\u30FC\u540D",
+  registerIdentifierPlaceholder: "\u30E6\u30FC\u30B6\u30FC\u540D",
+  passwordPlaceholder: "\u30D1\u30B9\u30EF\u30FC\u30C9",
+  confirmPasswordPlaceholder: "\u30D1\u30B9\u30EF\u30FC\u30C9\u78BA\u8A8D",
+  submitPassword: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3067\u30ED\u30B0\u30A4\u30F3",
+  submitRegister: "\u30A2\u30AB\u30A6\u30F3\u30C8\u4F5C\u6210",
+  submitSso: "\u7D71\u5408\u30A2\u30AB\u30A6\u30F3\u30C8\u3067\u7D9A\u3051\u308B",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "\u307E\u305F\u306F",
+  hint: "\u30BD\u30FC\u30B7\u30E3\u30EB\u306F\u5404\u30B5\u30FC\u30D3\u30B9\u3092\u76F4\u63A5\u958B\u304D\u307E\u3059\u3002\u30D1\u30B9\u30EF\u30FC\u30C9\u306F LuminaryWorks \u30A2\u30AB\u30A6\u30F3\u30C8\u3067\u3059\u3002",
+  registerHint: "\u30E1\u30FC\u30EB\u767B\u9332\u306B\u306F\u78BA\u8A8D\u30B3\u30FC\u30C9\u304C\u5FC5\u8981\u3067\u3059\u3002\u30E6\u30FC\u30B6\u30FC\u540D\u307E\u305F\u306F\u30BD\u30FC\u30B7\u30E3\u30EB\u3082\u4F7F\u3048\u307E\u3059\u3002",
+  cancel: "\u30AD\u30E3\u30F3\u30BB\u30EB",
+  experienceUnavailable: "\u30D1\u30B9\u30EF\u30FC\u30C9\u30ED\u30B0\u30A4\u30F3\u306F\u4F7F\u3048\u307E\u305B\u3093\u3002\u30BD\u30FC\u30B7\u30E3\u30EB\u3092\u304A\u4F7F\u3044\u304F\u3060\u3055\u3044\u3002",
+  showPassword: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u8868\u793A",
+  hidePassword: "\u30D1\u30B9\u30EF\u30FC\u30C9\u3092\u96A0\u3059",
+  registerLink: "\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F5C\u6210",
+  loginLink: "\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u304A\u6301\u3061\u3067\u3059\u304B\uFF1F\u30ED\u30B0\u30A4\u30F3",
+  passwordMismatch: "\u30D1\u30B9\u30EF\u30FC\u30C9\u304C\u4E00\u81F4\u3057\u307E\u305B\u3093",
+  registerTitle: "\u30A2\u30AB\u30A6\u30F3\u30C8\u4F5C\u6210",
+  registerSubtitle: "LuminaryWorks \u7D71\u5408\u30A2\u30AB\u30A6\u30F3\u30C8\u3092\u4F5C\u6210",
+  registerWithEmail: "\u30E1\u30FC\u30EB",
+  registerWithUsername: "\u30E6\u30FC\u30B6\u30FC\u540D",
+  emailPlaceholder: "\u30E1\u30FC\u30EB",
+  verificationCodePlaceholder: "\u78BA\u8A8D\u30B3\u30FC\u30C9",
+  sendCode: "\u30B3\u30FC\u30C9\u3092\u9001\u4FE1",
+  resendCode: "\u518D\u9001\u4FE1",
+  allowedDomainsPrefix: "\u5229\u7528\u3067\u304D\u308B\u30E1\u30FC\u30EB\u30C9\u30E1\u30A4\u30F3",
+  allowedDomainsOpen: "\u307B\u3068\u3093\u3069\u306E\u30E1\u30FC\u30EB\u3067\u767B\u9332\u3067\u304D\u307E\u3059\u3002",
+  allowedDomainsBlocklist: "\u307B\u3068\u3093\u3069\u306E\u30E1\u30FC\u30EB\u306F\u4F7F\u3048\u307E\u3059\u3002\u4F7F\u3044\u6368\u3066\u30A2\u30C9\u30EC\u30B9\u306F\u62D2\u5426\u3055\u308C\u307E\u3059\u3002",
+  waitingExternalBrowser: "\u30D6\u30E9\u30A6\u30B6\u3067\u30ED\u30B0\u30A4\u30F3\u3092\u7D42\u3048\u305F\u3089\u3001\u3053\u306E\u30A2\u30D7\u30EA\u306B\u623B\u3063\u3066\u304F\u3060\u3055\u3044\u3002",
+  consentRequired: "\u7D9A\u3051\u308B\u524D\u306B\u5229\u7528\u898F\u7D04\u3078\u540C\u610F\u3057\u3066\u304F\u3060\u3055\u3044\u3002"
+};
+var KO = {
+  title: "\uB85C\uADF8\uC778",
+  subtitle: "LuminaryWorks \uD1B5\uD569 \uACC4\uC815 \uC0AC\uC6A9",
+  identifierPlaceholder: "\uC774\uBA54\uC77C \uB610\uB294 \uC0AC\uC6A9\uC790 \uC774\uB984",
+  registerIdentifierPlaceholder: "\uC0AC\uC6A9\uC790 \uC774\uB984",
+  passwordPlaceholder: "\uBE44\uBC00\uBC88\uD638",
+  confirmPasswordPlaceholder: "\uBE44\uBC00\uBC88\uD638 \uD655\uC778",
+  submitPassword: "\uBE44\uBC00\uBC88\uD638\uB85C \uB85C\uADF8\uC778",
+  submitRegister: "\uACC4\uC815 \uB9CC\uB4E4\uAE30",
+  submitSso: "\uD1B5\uD569 \uACC4\uC815\uC73C\uB85C \uACC4\uC18D",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "\uB610\uB294",
+  hint: "\uC18C\uC15C \uB85C\uADF8\uC778\uC740 \uD574\uB2F9 \uC11C\uBE44\uC2A4\uB97C \uBC14\uB85C \uC5FD\uB2C8\uB2E4. \uBE44\uBC00\uBC88\uD638\uB294 LuminaryWorks \uACC4\uC815\uC785\uB2C8\uB2E4.",
+  registerHint: "\uC774\uBA54\uC77C \uAC00\uC785\uC5D0\uB294 \uC778\uC99D \uCF54\uB4DC\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. \uC0AC\uC6A9\uC790 \uC774\uB984\uC774\uB098 \uC18C\uC15C\uB3C4 \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+  cancel: "\uCDE8\uC18C",
+  experienceUnavailable: "\uBE44\uBC00\uBC88\uD638 \uB85C\uADF8\uC778\uC744 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC18C\uC15C \uB85C\uADF8\uC778\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.",
+  showPassword: "\uBE44\uBC00\uBC88\uD638 \uD45C\uC2DC",
+  hidePassword: "\uBE44\uBC00\uBC88\uD638 \uC228\uAE30\uAE30",
+  registerLink: "\uACC4\uC815 \uB9CC\uB4E4\uAE30",
+  loginLink: "\uACC4\uC815\uC774 \uC788\uB098\uC694? \uB85C\uADF8\uC778",
+  passwordMismatch: "\uBE44\uBC00\uBC88\uD638\uAC00 \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4",
+  registerTitle: "\uACC4\uC815 \uB9CC\uB4E4\uAE30",
+  registerSubtitle: "LuminaryWorks \uD1B5\uD569 \uACC4\uC815 \uB9CC\uB4E4\uAE30",
+  registerWithEmail: "\uC774\uBA54\uC77C",
+  registerWithUsername: "\uC0AC\uC6A9\uC790 \uC774\uB984",
+  emailPlaceholder: "\uC774\uBA54\uC77C",
+  verificationCodePlaceholder: "\uC778\uC99D \uCF54\uB4DC",
+  sendCode: "\uCF54\uB4DC \uBCF4\uB0B4\uAE30",
+  resendCode: "\uB2E4\uC2DC \uBCF4\uB0B4\uAE30",
+  allowedDomainsPrefix: "\uD5C8\uC6A9\uB41C \uC774\uBA54\uC77C \uB3C4\uBA54\uC778",
+  allowedDomainsOpen: "\uB300\uBD80\uBD84\uC758 \uC774\uBA54\uC77C\uB85C \uAC00\uC785\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+  allowedDomainsBlocklist: "\uB300\uBD80\uBD84\uC758 \uC774\uBA54\uC77C\uC744 \uD5C8\uC6A9\uD569\uB2C8\uB2E4. \uC784\uC2DC \uC8FC\uC18C\uB294 \uAC70\uBD80\uB429\uB2C8\uB2E4.",
+  waitingExternalBrowser: "\uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uB85C\uADF8\uC778\uC744 \uB9C8\uCE5C \uB4A4 \uC774 \uC571\uC73C\uB85C \uB3CC\uC544\uC624\uC138\uC694.",
+  consentRequired: "\uACC4\uC18D\uD558\uB824\uBA74 \uC57D\uAD00\uC5D0 \uB3D9\uC758\uD558\uC138\uC694."
+};
+var PT = {
+  title: "Entrar",
+  subtitle: "Use a conta unificada LuminaryWorks",
+  identifierPlaceholder: "E-mail ou usu\xE1rio",
+  registerIdentifierPlaceholder: "Usu\xE1rio",
+  passwordPlaceholder: "Senha",
+  confirmPasswordPlaceholder: "Confirmar senha",
+  submitPassword: "Entrar com senha",
+  submitRegister: "Criar conta",
+  submitSso: "Continuar com a conta unificada",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "ou",
+  hint: "Redes sociais abrem o provedor direto. A senha usa sua conta LuminaryWorks.",
+  registerHint: "O cadastro por e-mail pede um c\xF3digo. Tamb\xE9m d\xE1 para usar usu\xE1rio ou rede social.",
+  cancel: "Cancelar",
+  experienceUnavailable: "Entrada por senha indispon\xEDvel. Use uma rede social.",
+  showPassword: "Mostrar senha",
+  hidePassword: "Ocultar senha",
+  registerLink: "Criar uma conta",
+  loginLink: "J\xE1 tem conta? Entrar",
+  passwordMismatch: "As senhas n\xE3o coincidem",
+  registerTitle: "Criar conta",
+  registerSubtitle: "Crie sua conta unificada LuminaryWorks",
+  registerWithEmail: "E-mail",
+  registerWithUsername: "Usu\xE1rio",
+  emailPlaceholder: "E-mail",
+  verificationCodePlaceholder: "C\xF3digo",
+  sendCode: "Enviar c\xF3digo",
+  resendCode: "Reenviar",
+  allowedDomainsPrefix: "Dom\xEDnios de e-mail permitidos",
+  allowedDomainsOpen: "O cadastro por e-mail est\xE1 aberto para a maioria dos provedores.",
+  allowedDomainsBlocklist: "A maioria dos e-mails \xE9 aceita. Endere\xE7os tempor\xE1rios s\xE3o bloqueados.",
+  waitingExternalBrowser: "Conclua o login no navegador e volte a este app.",
+  consentRequired: "Aceite os termos antes de continuar."
+};
+var NL = {
+  title: "Inloggen",
+  subtitle: "Gebruik je LuminaryWorks-account",
+  identifierPlaceholder: "E-mail of gebruikersnaam",
+  registerIdentifierPlaceholder: "Gebruikersnaam",
+  passwordPlaceholder: "Wachtwoord",
+  confirmPasswordPlaceholder: "Bevestig wachtwoord",
+  submitPassword: "Inloggen met wachtwoord",
+  submitRegister: "Account maken",
+  submitSso: "Doorgaan met unified account",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "of",
+  hint: "Sociale logins openen de provider direct. Het wachtwoord is je LuminaryWorks-account.",
+  registerHint: "Registreren via e-mail vraagt een code. Een gebruikersnaam of sociale login kan ook.",
+  cancel: "Annuleren",
+  experienceUnavailable: "Inloggen met wachtwoord is niet beschikbaar. Gebruik een sociale login.",
+  showPassword: "Wachtwoord tonen",
+  hidePassword: "Wachtwoord verbergen",
+  registerLink: "Account maken",
+  loginLink: "Al een account? Inloggen",
+  passwordMismatch: "Wachtwoorden komen niet overeen",
+  registerTitle: "Account maken",
+  registerSubtitle: "Maak je LuminaryWorks-account",
+  registerWithEmail: "E-mail",
+  registerWithUsername: "Gebruikersnaam",
+  emailPlaceholder: "E-mail",
+  verificationCodePlaceholder: "Code",
+  sendCode: "Code versturen",
+  resendCode: "Opnieuw",
+  allowedDomainsPrefix: "Toegestane e-maildomeinen",
+  allowedDomainsOpen: "Registreren kan met de meeste e-mailproviders.",
+  allowedDomainsBlocklist: "De meeste adressen zijn toegestaan. Tijdelijke adressen worden geweigerd.",
+  waitingExternalBrowser: "Rond het inloggen af in de browser en kom terug naar deze app.",
+  consentRequired: "Ga eerst akkoord met de voorwaarden."
+};
+var IT = {
+  title: "Accedi",
+  subtitle: "Usa l'account unificato LuminaryWorks",
+  identifierPlaceholder: "Email o nome utente",
+  registerIdentifierPlaceholder: "Nome utente",
+  passwordPlaceholder: "Password",
+  confirmPasswordPlaceholder: "Conferma password",
+  submitPassword: "Accedi con password",
+  submitRegister: "Crea account",
+  submitSso: "Continua con l'account unificato",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "oppure",
+  hint: "I social aprono il provider. La password usa il tuo account LuminaryWorks.",
+  registerHint: "La registrazione email chiede un codice. Puoi anche usare un nome utente o un social.",
+  cancel: "Annulla",
+  experienceUnavailable: "Accesso con password non disponibile. Usa un social.",
+  showPassword: "Mostra password",
+  hidePassword: "Nascondi password",
+  registerLink: "Crea un account",
+  loginLink: "Hai gi\xE0 un account? Accedi",
+  passwordMismatch: "Le password non coincidono",
+  registerTitle: "Crea account",
+  registerSubtitle: "Crea il tuo account unificato LuminaryWorks",
+  registerWithEmail: "Email",
+  registerWithUsername: "Nome utente",
+  emailPlaceholder: "Email",
+  verificationCodePlaceholder: "Codice",
+  sendCode: "Invia codice",
+  resendCode: "Invia di nuovo",
+  allowedDomainsPrefix: "Domini email consentiti",
+  allowedDomainsOpen: "La registrazione email \xE8 aperta per la maggior parte dei provider.",
+  allowedDomainsBlocklist: "La maggior parte delle email \xE8 accettata. Gli indirizzi temporanei sono bloccati.",
+  waitingExternalBrowser: "Completa l'accesso nel browser e torna a questa app.",
+  consentRequired: "Accetta i termini prima di continuare."
+};
+var FR = {
+  title: "Connexion",
+  subtitle: "Utilisez votre compte unifi\xE9 LuminaryWorks",
+  identifierPlaceholder: "E-mail ou nom d'utilisateur",
+  registerIdentifierPlaceholder: "Nom d'utilisateur",
+  passwordPlaceholder: "Mot de passe",
+  confirmPasswordPlaceholder: "Confirmer le mot de passe",
+  submitPassword: "Se connecter avec mot de passe",
+  submitRegister: "Cr\xE9er un compte",
+  submitSso: "Continuer avec le compte unifi\xE9",
+  submitGoogle: "Google",
+  submitGithub: "GitHub",
+  socialDivider: "ou",
+  hint: "Les r\xE9seaux ouvrent le fournisseur. Le mot de passe utilise votre compte LuminaryWorks.",
+  registerHint: "L'inscription par e-mail demande un code. Un nom d'utilisateur ou un r\xE9seau social convient aussi.",
+  cancel: "Annuler",
+  experienceUnavailable: "Connexion par mot de passe indisponible. Utilisez un r\xE9seau social.",
+  showPassword: "Afficher le mot de passe",
+  hidePassword: "Masquer le mot de passe",
+  registerLink: "Cr\xE9er un compte",
+  loginLink: "D\xE9j\xE0 un compte ? Se connecter",
+  passwordMismatch: "Les mots de passe ne correspondent pas",
+  registerTitle: "Cr\xE9er un compte",
+  registerSubtitle: "Cr\xE9ez votre compte unifi\xE9 LuminaryWorks",
+  registerWithEmail: "E-mail",
+  registerWithUsername: "Nom d'utilisateur",
+  emailPlaceholder: "E-mail",
+  verificationCodePlaceholder: "Code",
+  sendCode: "Envoyer le code",
+  resendCode: "Renvoyer",
+  allowedDomainsPrefix: "Domaines e-mail autoris\xE9s",
+  allowedDomainsOpen: "L'inscription par e-mail est ouverte pour la plupart des fournisseurs.",
+  allowedDomainsBlocklist: "La plupart des e-mails sont accept\xE9s. Les adresses jetables sont refus\xE9es.",
+  waitingExternalBrowser: "Terminez la connexion dans le navigateur, puis revenez \xE0 cette application.",
+  consentRequired: "Acceptez les conditions avant de continuer.",
+  mfaTitle: "Code d'authentification",
+  mfaSubtitle: "Saisissez le code \xE0 6 chiffres de votre application.",
+  mfaCodePlaceholder: "123456",
+  mfaSubmit: "V\xE9rifier et continuer",
+  mfaBack: "Retour"
+};
+var BY_LOCALE = {
+  en: void 0,
+  "zh-CN": ZH_CN,
+  "zh-TW": ZH_TW,
+  ja: JA,
+  ko: KO,
+  pt: PT,
+  nl: NL,
+  it: IT,
+  es: ES,
+  fr: FR
+};
+function normalizeLoginLocale(locale) {
+  const raw = (locale ?? "en").trim().toLowerCase();
+  if (raw === "zh" || raw === "zh-cn" || raw === "zh-hans" || raw.startsWith("zh-cn")) {
+    return "zh-CN";
+  }
+  if (raw === "zh-tw" || raw === "zh-hant" || raw.startsWith("zh-tw") || raw.startsWith("zh-hk")) {
+    return "zh-TW";
+  }
+  if (raw === "ja" || raw.startsWith("ja-")) return "ja";
+  if (raw === "ko" || raw.startsWith("ko-")) return "ko";
+  if (raw === "pt" || raw.startsWith("pt-")) return "pt";
+  if (raw === "nl" || raw.startsWith("nl-")) return "nl";
+  if (raw === "it" || raw.startsWith("it-")) return "it";
+  if (raw === "es" || raw.startsWith("es-")) return "es";
+  if (raw === "fr" || raw.startsWith("fr-")) return "fr";
+  if (raw === "en" || raw.startsWith("en-")) return "en";
+  return "en";
+}
+function loginLabels(locale) {
+  return BY_LOCALE[normalizeLoginLocale(locale)] ?? {};
+}
+
 // src/HeadlessLoginPanel.module.scss
 var HeadlessLoginPanel_module_default = {
   panel: "HeadlessLoginPanel_module_panel",
@@ -953,9 +1378,14 @@ var HeadlessLoginPanel_module_default = {
   switchMode: "HeadlessLoginPanel_module_switchMode",
   switchModeBtn: "HeadlessLoginPanel_module_switchModeBtn",
   error: "HeadlessLoginPanel_module_error",
+  consent: "HeadlessLoginPanel_module_consent",
+  consentInvalid: "HeadlessLoginPanel_module_consentInvalid",
+  consentError: "HeadlessLoginPanel_module_consentError",
+  consentLinks: "HeadlessLoginPanel_module_consentLinks",
   footer: "HeadlessLoginPanel_module_footer"
 };
 var DEFAULT_LOGIN_THEME_COLOR = "#1677ff";
+var LOGIN_CARD_MAX_WIDTH = 400;
 var defaults = {
   title: "Sign in",
   subtitle: "Use your LuminaryWorks unified account",
@@ -989,7 +1419,13 @@ var defaults = {
   allowedDomainsPrefix: "Allowed email domains",
   allowedDomainsOpen: "Email registration is open for most providers.",
   allowedDomainsBlocklist: "Most email providers are accepted. Temporary / disposable addresses are blocked.",
-  waitingExternalBrowser: "Finish signing in with your browser, then return to this app."
+  waitingExternalBrowser: "Finish signing in with your browser, then return to this app.",
+  consentRequired: "Please agree to the terms before continuing.",
+  mfaTitle: "Authenticator code",
+  mfaSubtitle: "Enter the 6-digit code from your authenticator app.",
+  mfaCodePlaceholder: "123456",
+  mfaSubmit: "Verify and continue",
+  mfaBack: "Back"
 };
 function resolveSieBase(config) {
   const explicit = config.experienceApiBase?.trim();
@@ -1016,6 +1452,7 @@ function HeadlessLoginPanel({
   productName,
   logoSrc,
   labels: labelsProp,
+  locale,
   returnUrl,
   mode = "popup",
   openExternalUrl,
@@ -1029,6 +1466,12 @@ function HeadlessLoginPanel({
   onCancel,
   onOidcSession,
   onExperienceRedirect,
+  consent,
+  consentDocuments,
+  consentOk = true,
+  onConsentBlocked,
+  initialIdentifier,
+  onIdentifierChange,
   footer,
   className,
   style,
@@ -1073,22 +1516,34 @@ function HeadlessLoginPanel({
       experienceAdapter.emailPolicy = emailPolicy;
     }
   }, [emailPolicy, experienceAdapter]);
-  const labels = { ...defaults, ...labelsProp };
+  const labels = { ...defaults, ...loginLabels(locale), ...labelsProp };
   const configured = isIdpConfigured(config);
   const [panelMode, setPanelMode] = react.useState("sign-in");
   const [registerChannel, setRegisterChannel] = react.useState("email");
-  const [identifier, setIdentifier] = react.useState("");
+  const [identifier, setIdentifier] = react.useState(initialIdentifier ?? "");
+  const hydratedIdentifier = react.useRef(false);
+  react.useEffect(() => {
+    if (hydratedIdentifier.current) return;
+    if (!initialIdentifier) return;
+    hydratedIdentifier.current = true;
+    setIdentifier(initialIdentifier);
+  }, [initialIdentifier]);
   const [password, setPassword] = react.useState("");
   const [confirmPassword, setConfirmPassword] = react.useState("");
   const [verificationCode, setVerificationCode] = react.useState("");
   const [emailVerificationId, setEmailVerificationId] = react.useState(null);
   const [passwordVisible, setPasswordVisible] = react.useState(false);
   const panelStyle = {
+    width: `min(100%, ${LOGIN_CARD_MAX_WIDTH}px)`,
+    maxWidth: LOGIN_CARD_MAX_WIDTH,
     ...style,
     ["--lw-auth-theme"]: themeColor || DEFAULT_LOGIN_THEME_COLOR
   };
   const [loading, setLoading] = react.useState(null);
   const [error, setError] = react.useState("");
+  const [consentBlocked, setConsentBlocked] = react.useState(false);
+  const [mfaPending, setMfaPending] = react.useState(false);
+  const [mfaCode, setMfaCode] = react.useState("");
   const [awaitingExternal, setAwaitingExternal] = react.useState(false);
   const [connectors, setConnectors] = react.useState([]);
   const socialEnabled = showSocialConnectors !== false && !(Array.isArray(socialProviders) && socialProviders.length === 0) && experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.socialConnectors) && experienceAdapter.capabilities.includes(LOGIN_EXPERIENCE_CAPABILITIES.socialDirectSignIn) && typeof experienceAdapter.fetchSocialConnectors === "function" && typeof experienceAdapter.createSocialSignInRequest === "function";
@@ -1143,6 +1598,15 @@ function HeadlessLoginPanel({
     socialEnabled,
     socialProviders
   ]);
+  react.useEffect(() => {
+    if (consentOk) setConsentBlocked(false);
+  }, [consentOk]);
+  const ensureConsent = () => {
+    if (consentOk) return true;
+    setConsentBlocked(true);
+    onConsentBlocked?.();
+    return false;
+  };
   const runOidc = async (experienceRequest) => {
     if (!configured) throw new Error("IdP not configured");
     if (mode === "external") {
@@ -1169,6 +1633,7 @@ function HeadlessLoginPanel({
     await onOidcSession?.(session, next);
   };
   const runSocial = async (target) => {
+    if (!ensureConsent()) return;
     setError("");
     setLoading(target);
     try {
@@ -1185,6 +1650,7 @@ function HeadlessLoginPanel({
     }
   };
   const runHostedOidc = async () => {
+    if (!ensureConsent()) return;
     setError("");
     setLoading("sso");
     try {
@@ -1205,6 +1671,7 @@ function HeadlessLoginPanel({
   const runPassword = async (event) => {
     event.preventDefault();
     if (!configured) return;
+    if (!ensureConsent()) return;
     setError("");
     setLoading("password");
     try {
@@ -1281,6 +1748,36 @@ function HeadlessLoginPanel({
         scopes: config.scopes,
         returnUrl
       });
+      if (result.mfaRequired) {
+        setMfaPending(true);
+        setMfaCode("");
+        setLoading(null);
+        return;
+      }
+      if (result.redirectTo) {
+        followExperienceRedirect(result.redirectTo);
+        return;
+      }
+      throw new Error("Experience API did not return redirectTo");
+    } catch (e) {
+      setError(e instanceof Error ? e.message : String(e));
+      setLoading(null);
+    }
+  };
+  const runMfa = async (event) => {
+    event.preventDefault();
+    if (!configured || !ensureConsent()) return;
+    setError("");
+    setLoading("mfa");
+    try {
+      const apiBase = config.experienceApiBase?.trim();
+      if (!apiBase || !experienceAdapter.experienceVerifyTotp) {
+        throw new Error(labels.experienceUnavailable);
+      }
+      const result = await experienceAdapter.experienceVerifyTotp({
+        apiBase,
+        code: mfaCode
+      });
       if (result.redirectTo) {
         followExperienceRedirect(result.redirectTo);
         return;
@@ -1293,6 +1790,7 @@ function HeadlessLoginPanel({
   };
   const runSendCode = async () => {
     if (!configured || !useEmailRegister) return;
+    if (!ensureConsent()) return;
     setError("");
     setLoading("send-code");
     try {
@@ -1334,8 +1832,8 @@ function HeadlessLoginPanel({
   const showSocial = socialEnabled && connectors.length > 0;
   const showHint = Boolean(labelsProp?.hint) || showSocial || isRegister;
   const formReady = Boolean(identifier.trim()) && Boolean(password) && (!isRegister || Boolean(confirmPassword)) && (!useEmailRegister || Boolean(verificationCode.trim()) && Boolean(emailVerificationId));
-  const titleText = isRegister ? labels.registerTitle : labels.title;
-  const subtitleText = isRegister ? labels.registerSubtitle : labels.subtitle;
+  const titleText = mfaPending ? labels.mfaTitle : isRegister ? labels.registerTitle : labels.title;
+  const subtitleText = mfaPending ? labels.mfaSubtitle : isRegister ? labels.registerSubtitle : labels.subtitle;
   const identifierPlaceholder = isRegister ? useEmailRegister ? labels.emailPlaceholder : labels.registerIdentifierPlaceholder : labels.identifierPlaceholder;
   const submitLabel = isRegister ? labels.submitRegister : labels.submitPassword;
   const hintText = isRegister ? labels.registerHint : labels.hint;
@@ -1354,7 +1852,44 @@ function HeadlessLoginPanel({
     ] }),
     /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.subtitle, children: subtitleText }),
     configured ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-      passwordEnabled ? /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: (e) => void runPassword(e), className: HeadlessLoginPanel_module_default.form, children: [
+      passwordEnabled && mfaPending ? /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: (e) => void runMfa(e), className: HeadlessLoginPanel_module_default.form, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "input",
+          {
+            inputMode: "numeric",
+            autoComplete: "one-time-code",
+            name: "totp",
+            placeholder: labels.mfaCodePlaceholder,
+            value: mfaCode,
+            onChange: (e) => setMfaCode(e.target.value),
+            className: HeadlessLoginPanel_module_default.input,
+            disabled: busy
+          }
+        ),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "button",
+          {
+            type: "submit",
+            className: HeadlessLoginPanel_module_default.primaryBtn,
+            disabled: busy || mfaCode.trim().length < 6,
+            children: loading === "mfa" ? "\u2026" : labels.mfaSubmit
+          }
+        ),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "button",
+          {
+            type: "button",
+            className: HeadlessLoginPanel_module_default.cancelBtn,
+            disabled: busy,
+            onClick: () => {
+              setMfaPending(false);
+              setMfaCode("");
+              setError("");
+            },
+            children: labels.mfaBack
+          }
+        )
+      ] }) : passwordEnabled ? /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: (e) => void runPassword(e), className: HeadlessLoginPanel_module_default.form, children: [
         isRegister && emailRegisterEnabled && usernameRegisterEnabled ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: HeadlessLoginPanel_module_default.channelTabs, role: "tablist", "aria-label": "Register method", children: [
           /* @__PURE__ */ jsxRuntime.jsx(
             "button",
@@ -1406,7 +1941,9 @@ function HeadlessLoginPanel({
             placeholder: identifierPlaceholder,
             value: identifier,
             onChange: (e) => {
-              setIdentifier(e.target.value);
+              const next = e.target.value;
+              setIdentifier(next);
+              onIdentifierChange?.(next);
               if (useEmailRegister) {
                 setEmailVerificationId(null);
               }
@@ -1493,6 +2030,13 @@ function HeadlessLoginPanel({
           children: loading === "sso" ? "\u2026" : labels.submitSso
         }
       ) }),
+      consent || consentDocuments && consentDocuments.length > 0 || consentBlocked ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: cx(HeadlessLoginPanel_module_default.consent, consentBlocked && HeadlessLoginPanel_module_default.consentInvalid), children: [
+        consent ? consent : consentDocuments && consentDocuments.length > 0 ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.consentLinks, children: consentDocuments.map((doc, index) => /* @__PURE__ */ jsxRuntime.jsxs("span", { children: [
+          index > 0 ? " \xB7 " : null,
+          /* @__PURE__ */ jsxRuntime.jsx("a", { href: doc.href, target: "_blank", rel: "noopener noreferrer", children: doc.label })
+        ] }, doc.id)) }) : null,
+        consentBlocked ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.consentError, children: labels.consentRequired }) : null
+      ] }) : null,
       showHint ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.hint, children: hintText }) : null,
       registerEnabled && passwordEnabled ? /* @__PURE__ */ jsxRuntime.jsx("p", { className: HeadlessLoginPanel_module_default.switchMode, children: /* @__PURE__ */ jsxRuntime.jsx(
         "button",
@@ -1678,6 +2222,159 @@ function useAuthGateOptional() {
   return react.useContext(AuthGateContext);
 }
 
+// src/login-legal.ts
+var DEFAULT_PLATFORM_TERMS_URL = "https://luminaryworks.dev/legal/terms";
+var DEFAULT_PLATFORM_PRIVACY_URL = "https://luminaryworks.dev/legal/privacy";
+function pickEnv(env, name) {
+  const keys = [`VITE_${name}`, `PUBLIC_${name}`, `NEXT_PUBLIC_${name}`, name];
+  for (const key of keys) {
+    const value = env[key]?.trim();
+    if (value) return value;
+  }
+  return void 0;
+}
+function readLoginLegalConfigFromEnv(env, defaults2) {
+  return {
+    platformTermsUrl: pickEnv(env, "LEGAL_PLATFORM_TERMS_URL") || defaults2?.platformTermsUrl || DEFAULT_PLATFORM_TERMS_URL,
+    platformPrivacyUrl: pickEnv(env, "LEGAL_PLATFORM_PRIVACY_URL") || defaults2?.platformPrivacyUrl || DEFAULT_PLATFORM_PRIVACY_URL,
+    productTermsUrl: pickEnv(env, "LEGAL_PRODUCT_TERMS_URL") || defaults2?.productTermsUrl || "/legal/terms",
+    productPrivacyUrl: pickEnv(env, "LEGAL_PRODUCT_PRIVACY_URL") || defaults2?.productPrivacyUrl || "/legal/privacy"
+  };
+}
+function buildLoginLegalDocuments(urls, labels) {
+  const docs = [
+    {
+      id: "product-terms",
+      href: urls.productTermsUrl,
+      label: labels.productTerms
+    },
+    {
+      id: "privacy",
+      href: urls.productPrivacyUrl || urls.platformPrivacyUrl,
+      label: labels.privacy
+    }
+  ];
+  return docs.filter((row) => row.href.length > 0 && row.label.length > 0);
+}
+
+// src/LoginLanguageSwitcher.module.scss
+var LoginLanguageSwitcher_module_default = {
+  switch: "LoginLanguageSwitcher_module_switch",
+  trigger: "LoginLanguageSwitcher_module_trigger",
+  icon: "LoginLanguageSwitcher_module_icon",
+  caret: "LoginLanguageSwitcher_module_caret",
+  menu: "LoginLanguageSwitcher_module_menu",
+  item: "LoginLanguageSwitcher_module_item",
+  itemActive: "LoginLanguageSwitcher_module_itemActive",
+  onDark: "LoginLanguageSwitcher_module_onDark"
+};
+function GlobeIcon() {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { className: LoginLanguageSwitcher_module_default.icon, viewBox: "0 0 24 24", "aria-hidden": "true", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "9", fill: "none", stroke: "currentColor", strokeWidth: "1.6" }),
+    /* @__PURE__ */ jsxRuntime.jsx("ellipse", { cx: "12", cy: "12", rx: "4", ry: "9", fill: "none", stroke: "currentColor", strokeWidth: "1.6" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M3 12h18M5 8h14M5 16h14", fill: "none", stroke: "currentColor", strokeWidth: "1.6" })
+  ] });
+}
+function LoginLanguageSwitcher({
+  locale,
+  onChange,
+  locales = DEFAULT_LOGIN_LOCALES,
+  label = "Language",
+  variant = "default"
+}) {
+  const [open, setOpen] = react.useState(false);
+  const rootRef = react.useRef(null);
+  const menuId = react.useId();
+  const current = locales.find((item) => item.code === locale) ?? locales.find((item) => normalizeLoginLocale(item.code) === normalizeLoginLocale(locale)) ?? locales[0];
+  react.useEffect(() => {
+    if (!open) return;
+    const onPointer = (event) => {
+      if (!rootRef.current?.contains(event.target)) setOpen(false);
+    };
+    const onKey = (event) => {
+      if (event.key === "Escape") setOpen(false);
+    };
+    document.addEventListener("mousedown", onPointer);
+    document.addEventListener("keydown", onKey);
+    return () => {
+      document.removeEventListener("mousedown", onPointer);
+      document.removeEventListener("keydown", onKey);
+    };
+  }, [open]);
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: LoginLanguageSwitcher_module_default.switch, ref: rootRef, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "button",
+      {
+        type: "button",
+        className: variant === "onDark" ? `${LoginLanguageSwitcher_module_default.trigger} ${LoginLanguageSwitcher_module_default.onDark}` : LoginLanguageSwitcher_module_default.trigger,
+        "aria-label": label,
+        "aria-haspopup": "listbox",
+        "aria-expanded": open,
+        "aria-controls": menuId,
+        onClick: () => setOpen((value) => !value),
+        children: [
+          /* @__PURE__ */ jsxRuntime.jsx(GlobeIcon, {}),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { children: current?.short ?? "EN" }),
+          /* @__PURE__ */ jsxRuntime.jsx("svg", { className: LoginLanguageSwitcher_module_default.caret, viewBox: "0 0 12 12", "aria-hidden": "true", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M2.5 4.5 6 8l3.5-3.5", fill: "none", stroke: "currentColor", strokeWidth: "1.4" }) })
+        ]
+      }
+    ),
+    open ? /* @__PURE__ */ jsxRuntime.jsx("ul", { className: LoginLanguageSwitcher_module_default.menu, id: menuId, role: "listbox", "aria-label": label, children: locales.map((item) => {
+      const active = item.code === current?.code;
+      return /* @__PURE__ */ jsxRuntime.jsx("li", { role: "presentation", children: /* @__PURE__ */ jsxRuntime.jsx(
+        "button",
+        {
+          type: "button",
+          role: "option",
+          "aria-selected": active,
+          className: active ? `${LoginLanguageSwitcher_module_default.item} ${LoginLanguageSwitcher_module_default.itemActive}` : LoginLanguageSwitcher_module_default.item,
+          onClick: () => {
+            onChange(item.code);
+            setOpen(false);
+          },
+          children: item.label
+        }
+      ) }, item.code);
+    }) }) : null
+  ] });
+}
+
+// src/LoginCanvas.module.scss
+var LoginCanvas_module_default = {
+  canvas: "LoginCanvas_module_canvas",
+  grid: "LoginCanvas_module_grid",
+  lang: "LoginCanvas_module_lang",
+  decor: "LoginCanvas_module_decor",
+  slot: "LoginCanvas_module_slot",
+  slotFill: "LoginCanvas_module_slotFill"
+};
+function LoginCanvas({
+  tone,
+  locale,
+  onLocaleChange,
+  locales,
+  languageLabel,
+  fill = false,
+  decor,
+  children
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: LoginCanvas_module_default.canvas, "data-tone": tone, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: LoginCanvas_module_default.grid, "aria-hidden": "true" }),
+    decor ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: LoginCanvas_module_default.decor, children: decor }) : null,
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: LoginCanvas_module_default.lang, children: /* @__PURE__ */ jsxRuntime.jsx(
+      LoginLanguageSwitcher,
+      {
+        locale,
+        onChange: onLocaleChange,
+        locales,
+        label: languageLabel,
+        variant: tone === "console" || tone === "data" || tone === "edu" ? "onDark" : "default"
+      }
+    ) }),
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: fill ? `${LoginCanvas_module_default.slot} ${LoginCanvas_module_default.slotFill}` : LoginCanvas_module_default.slot, children })
+  ] });
+}
+
 // src/post-login-path.ts
 var DEFAULT_UNSAFE = ["/login", "/auth", "/exception"];
 function normalizeAppPath(path, fallback) {
@@ -1730,15 +2427,23 @@ function createPostLoginPathHelpers(options) {
 
 exports.AuthGateProvider = AuthGateProvider;
 exports.DEFAULT_DISPOSABLE_EMAIL_BLOCKLIST = DEFAULT_DISPOSABLE_EMAIL_BLOCKLIST;
+exports.DEFAULT_LOGIN_LOCALES = DEFAULT_LOGIN_LOCALES;
 exports.DEFAULT_LOGIN_THEME_COLOR = DEFAULT_LOGIN_THEME_COLOR;
+exports.DEFAULT_PLATFORM_PRIVACY_URL = DEFAULT_PLATFORM_PRIVACY_URL;
+exports.DEFAULT_PLATFORM_TERMS_URL = DEFAULT_PLATFORM_TERMS_URL;
 exports.DEFAULT_REGISTER_EMAIL_ALLOWLIST = DEFAULT_REGISTER_EMAIL_ALLOWLIST;
+exports.ExperienceApiError = ExperienceApiError;
 exports.HeadlessLoginPanel = HeadlessLoginPanel;
 exports.HostedOidcExperienceAdapter = HostedOidcExperienceAdapter;
+exports.LOGIN_CARD_MAX_WIDTH = LOGIN_CARD_MAX_WIDTH;
 exports.LOGIN_EXPERIENCE_CAPABILITIES = LOGIN_EXPERIENCE_CAPABILITIES;
+exports.LoginCanvas = LoginCanvas;
+exports.LoginLanguageSwitcher = LoginLanguageSwitcher;
 exports.LogtoExperienceAdapter = LogtoExperienceAdapter;
 exports.LuminaryAuthProvider = LuminaryAuthProvider;
 exports.ReauthOverlay = ReauthOverlay;
 exports.authGate = authGate;
+exports.buildLoginLegalDocuments = buildLoginLegalDocuments;
 exports.clearStoredSession = clearStoredSession;
 exports.createLoginExperienceAdapter = createLoginExperienceAdapter;
 exports.createLogtoDirectSignInRequest = createLogtoDirectSignInRequest;
@@ -1756,11 +2461,15 @@ exports.handleSignInCallback = handleSignInCallback;
 exports.handleSignInPopupCallback = handleSignInPopupCallback;
 exports.isIdpConfigured = isIdpConfigured;
 exports.isLogtoRegisterUsername = isLogtoRegisterUsername;
+exports.isMfaVerificationRequired = isMfaVerificationRequired;
 exports.isOidcPopupWindow = isOidcPopupWindow;
 exports.isValidEmailShape = isValidEmailShape;
+exports.loginLabels = loginLabels;
+exports.normalizeLoginLocale = normalizeLoginLocale;
 exports.normalizeRegisterEmailMode = normalizeRegisterEmailMode;
 exports.prepareSignInRequestUrl = prepareSignInRequestUrl;
 exports.readIdpConfigFromEnv = readIdpConfigFromEnv;
+exports.readLoginLegalConfigFromEnv = readLoginLegalConfigFromEnv;
 exports.readRegisterEmailPolicyFromEnv = readRegisterEmailPolicyFromEnv;
 exports.registerEmailDomainsHint = registerEmailDomainsHint;
 exports.registerEmailRejectionMessage = registerEmailRejectionMessage;