@nebulr-group/bridge-auth-core 0.4.6 → 0.5.0

package/dist/i18n/messages.d.ts

@@ -0,0 +1,168 @@
+/**
+ * Message catalogue for the SDK auth components (TBP-630).
+ *
+ * Lives in auth-core, not in a framework package, so bridge-svelte, -react,
+ * -angular and -nextjs resolve identical copy instead of drifting into four
+ * slightly different logins. The strings are framework-agnostic; only the
+ * rendering is not.
+ *
+ * ## Where the line sits
+ *
+ * Bridge owns the MECHANICS and translates them: what a field is, what a button
+ * does, what went wrong, what succeeded. Those are facts about how the auth flow
+ * works, identical for every tenant, and no consuming app should be rewriting
+ * them.
+ *
+ * The consuming app owns VOICE and CONTEXT: the page title, the subtitle,
+ * anything naming the product or explaining why the user is on this screen.
+ * Bridge cannot know those — hence `heading={null}` / `description={null}`
+ * (TBP-631) rather than catalogue entries.
+ *
+ * ## Keys are flat and dotted
+ *
+ * `login.email`, not a nested object. A flat map makes the override prop a
+ * plain `Partial<Messages>`, keeps lookup a single property access with no
+ * traversal, and means a typo in a key is a TypeScript error rather than a
+ * silent `undefined` at render time.
+ */
+/** Every user-facing string the SDK auth components render. */
+export interface Messages {
+    'field.email': string;
+    'field.password': string;
+    'field.newPassword': string;
+    'field.confirmPassword': string;
+    'field.firstName': string;
+    'field.lastName': string;
+    'field.phoneNumber': string;
+    'field.verificationCode': string;
+    'field.authenticationCode': string;
+    'field.recoveryCode': string;
+    'placeholder.email': string;
+    'placeholder.password': string;
+    'placeholder.newPassword': string;
+    'placeholder.confirmPassword': string;
+    'placeholder.firstName': string;
+    'placeholder.lastName': string;
+    'placeholder.phoneNumber': string;
+    'placeholder.sixDigitCode': string;
+    'placeholder.recoveryCode': string;
+    'action.showPassword': string;
+    'action.hidePassword': string;
+    'action.showPasswords': string;
+    'action.hidePasswords': string;
+    'action.backToLogin': string;
+    'action.backToSignIn': string;
+    'action.resendCode': string;
+    'action.copy': string;
+    'action.copied': string;
+    'action.tryAgain': string;
+    'action.done': string;
+    /** The "or" rule between the password form and the alternative methods. */
+    'divider.or': string;
+    'login.heading': string;
+    'login.submit': string;
+    /** In-flight label on the login button. */
+    'login.submitting': string;
+    'login.forgotPassword': string;
+    'login.magicLink': string;
+    'login.signupPrompt': string;
+    'login.signupLink': string;
+    'login.error.invalidCredentials': string;
+    'forgot.headingRequest': string;
+    'forgot.headingSet': string;
+    'forgot.description': string;
+    'forgot.submit': string;
+    'forgot.setSubmit': string;
+    'forgot.emailSent': string;
+    'forgot.successHeading': string;
+    'forgot.error.send': string;
+    'forgot.error.update': string;
+    'forgot.error.mismatch': string;
+    'forgot.error.tooShort': string;
+    'magicLink.heading': string;
+    'magicLink.description': string;
+    'magicLink.submit': string;
+    /** Interpolates {expiry}, already formatted by the four keys below. */
+    'magicLink.sent': string;
+    /** Interpolates {count}. Split singular/plural because English needs both. */
+    'magicLink.expiryMinute': string;
+    'magicLink.expiryMinutes': string;
+    'magicLink.expirySeconds': string;
+    'magicLink.error.send': string;
+    'magicLink.error.auth': string;
+    'signup.heading': string;
+    'signup.submit': string;
+    'signup.successHeading': string;
+    /** Interpolates {email}. */
+    'signup.successDescription': string;
+    'signup.loginPrompt': string;
+    'signup.loginLink': string;
+    'signup.error.create': string;
+    'passkey.loginButton': string;
+    'passkey.createHeading': string;
+    'passkey.createPrompt': string;
+    'passkey.createLink': string;
+    'passkey.requestDescription': string;
+    'passkey.requestSubmit': string;
+    'passkey.sentHeading': string;
+    /** Interpolates {email}. */
+    'passkey.sentDescription': string;
+    /** Heading while the browser ceremony is in flight. */
+    'passkey.settingUpHeading': string;
+    /** Heading once the ceremony has failed. */
+    'passkey.setupHeading': string;
+    'passkey.signInNow': string;
+    'passkey.requestNewLink': string;
+    'passkey.setupDescription': string;
+    'passkey.setupSuccessHeading': string;
+    'passkey.setupSuccessDescription': string;
+    'passkey.error.cancelled': string;
+    /** Login ceremony aborted — distinct from `cancelled`, which is setup. */
+    'passkey.error.authCancelled': string;
+    'passkey.error.setupFailed': string;
+    'passkey.error.expired': string;
+    'passkey.error.unsupported': string;
+    'passkey.error.auth': string;
+    'passkey.error.setup': string;
+    'passkey.error.verify': string;
+    'passkey.error.sendLink': string;
+    'mfa.challengeHeading': string;
+    'mfa.submit': string;
+    'mfa.useRecoveryCode': string;
+    'mfa.useAuthenticationCode': string;
+    'mfa.recoverSubmit': string;
+    'mfa.resendPrompt': string;
+    /** Interpolates {seconds}. Carries the prompt too, so word order stays free. */
+    'mfa.resendCountdown': string;
+    'mfa.error.invalidCode': string;
+    'mfa.error.invalidRecoveryCode': string;
+    'mfa.error.resend': string;
+    'mfaSetup.heading': string;
+    'mfaSetup.phoneDescription': string;
+    'mfaSetup.sendCode': string;
+    'mfaSetup.verifyDescription': string;
+    'mfaSetup.verify': string;
+    'mfaSetup.changePhone': string;
+    'mfaSetup.backupDescription': string;
+    'mfaSetup.successHeading': string;
+    'mfaSetup.error.sendCode': string;
+    'mfaSetup.error.resend': string;
+}
+export type MessageKey = keyof Messages;
+/**
+ * English. This is the fallback for everything: an unknown locale, and an
+ * unknown key within a known locale, both land here. A raw key must never
+ * reach the screen.
+ */
+export declare const en: Messages;
+/**
+ * Swedish. Reviewed-locale status: this and `en` are the two locales shipping
+ * in v1 (owner decision 2026-09-11) precisely because they can be checked here.
+ * The remaining ten NorthWhistle needs — da, de, es, fi, fr, it, nb, nl, pl, pt
+ * — are a data-only follow-up requiring no code change: drop another `Messages`
+ * object into `LOCALES` below.
+ */
+export declare const sv: Messages;
+/** Locales shipping with the package. Adding one is data-only. */
+export declare const LOCALES: Record<string, Messages>;
+//# sourceMappingURL=messages.d.ts.map

package/dist/i18n/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/i18n/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,+DAA+D;AAC/D,MAAM,WAAW,QAAQ;IAEvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,6BAA6B,EAAE,MAAM,CAAC;IACtC,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAC;IAGrB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gCAAgC,EAAE,MAAM,CAAC;IAGzC,uBAAuB,EAAE,MAAM,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;IAG/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,4BAA4B;IAC5B,2BAA2B,EAAE,MAAM,CAAC;IACpC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAG9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4BAA4B,EAAE,MAAM,CAAC;IACrC,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,4BAA4B;IAC5B,yBAAyB,EAAE,MAAM,CAAC;IAClC,uDAAuD;IACvD,0BAA0B,EAAE,MAAM,CAAC;IACnC,4CAA4C;IAC5C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IACnC,6BAA6B,EAAE,MAAM,CAAC;IACtC,iCAAiC,EAAE,MAAM,CAAC;IAC1C,yBAAyB,EAAE,MAAM,CAAC;IAClC,0EAA0E;IAC1E,6BAA6B,EAAE,MAAM,CAAC;IACtC,2BAA2B,EAAE,MAAM,CAAC;IACpC,uBAAuB,EAAE,MAAM,CAAC;IAChC,2BAA2B,EAAE,MAAM,CAAC;IACpC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IAGjC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,2BAA2B,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,+BAA+B,EAAE,MAAM,CAAC;IACxC,kBAAkB,EAAE,MAAM,CAAC;IAG3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2BAA2B,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,EAAE,MAAM,CAAC;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,4BAA4B,EAAE,MAAM,CAAC;IACrC,yBAAyB,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,MAAM,CAAC;IAClC,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,EAAE,EAAE,QA6HhB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,EAAE,EAAE,QA8HhB,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAc,CAAC"}

package/dist/i18n/messages.js

@@ -0,0 +1,269 @@
+/**
+ * Message catalogue for the SDK auth components (TBP-630).
+ *
+ * Lives in auth-core, not in a framework package, so bridge-svelte, -react,
+ * -angular and -nextjs resolve identical copy instead of drifting into four
+ * slightly different logins. The strings are framework-agnostic; only the
+ * rendering is not.
+ *
+ * ## Where the line sits
+ *
+ * Bridge owns the MECHANICS and translates them: what a field is, what a button
+ * does, what went wrong, what succeeded. Those are facts about how the auth flow
+ * works, identical for every tenant, and no consuming app should be rewriting
+ * them.
+ *
+ * The consuming app owns VOICE and CONTEXT: the page title, the subtitle,
+ * anything naming the product or explaining why the user is on this screen.
+ * Bridge cannot know those — hence `heading={null}` / `description={null}`
+ * (TBP-631) rather than catalogue entries.
+ *
+ * ## Keys are flat and dotted
+ *
+ * `login.email`, not a nested object. A flat map makes the override prop a
+ * plain `Partial<Messages>`, keeps lookup a single property access with no
+ * traversal, and means a typo in a key is a TypeScript error rather than a
+ * silent `undefined` at render time.
+ */
+/**
+ * English. This is the fallback for everything: an unknown locale, and an
+ * unknown key within a known locale, both land here. A raw key must never
+ * reach the screen.
+ */
+export const en = {
+    'field.email': 'Email',
+    'field.password': 'Password',
+    'field.newPassword': 'New password',
+    'field.confirmPassword': 'Confirm password',
+    'field.firstName': 'First name',
+    'field.lastName': 'Last name',
+    'field.phoneNumber': 'Phone number',
+    'field.verificationCode': 'Verification code',
+    'field.authenticationCode': 'Authentication code',
+    'field.recoveryCode': 'Recovery code',
+    'placeholder.email': 'you@example.com',
+    'placeholder.password': 'Enter your password',
+    'placeholder.newPassword': 'At least 8 characters',
+    'placeholder.confirmPassword': 'Repeat password',
+    'placeholder.firstName': 'First name',
+    'placeholder.lastName': 'Last name',
+    // TBP-630 — was the US-format `+1 (555) 000-0000`, shown to every European
+    // workspace. A format hint that is wrong for most of the audience is worse
+    // than none, and the field already has a label.
+    'placeholder.phoneNumber': '',
+    'placeholder.sixDigitCode': 'Enter 6-digit code',
+    'placeholder.recoveryCode': 'Enter recovery code',
+    'action.showPassword': 'Show password',
+    'action.hidePassword': 'Hide password',
+    'action.showPasswords': 'Show passwords',
+    'action.hidePasswords': 'Hide passwords',
+    'action.backToLogin': 'Back to login',
+    'action.backToSignIn': 'Back to sign in',
+    'action.resendCode': 'Resend code',
+    'action.copy': 'Copy',
+    'action.copied': 'Copied!',
+    'action.tryAgain': 'Try again',
+    'action.done': 'Done',
+    'divider.or': 'or',
+    'login.heading': 'Log in to your account',
+    'login.submit': 'Sign in',
+    'login.submitting': 'Signing in…',
+    'login.forgotPassword': 'Forgot password?',
+    'login.magicLink': 'Sign in with Magic Link',
+    'login.signupPrompt': "Don't have an account?",
+    'login.signupLink': 'Sign up',
+    'login.error.invalidCredentials': 'Invalid email or password.',
+    'forgot.headingRequest': 'Reset your password',
+    'forgot.headingSet': 'Set new password',
+    'forgot.description': "Enter your email and we'll send you a link to reset your password.",
+    'forgot.submit': 'Send reset link',
+    'forgot.setSubmit': 'Set a password',
+    'forgot.emailSent': 'Check your email for a password reset link.',
+    'forgot.successHeading': 'Password set',
+    'forgot.error.send': 'Failed to send reset link.',
+    'forgot.error.update': 'Failed to update password.',
+    'forgot.error.mismatch': 'Passwords do not match.',
+    'forgot.error.tooShort': 'Password must be at least 8 characters.',
+    'magicLink.heading': 'Sign in with email link',
+    'magicLink.description': "Enter your email and we'll send you a sign-in link. No password needed.",
+    'magicLink.submit': 'Send magic link',
+    'magicLink.sent': 'Check your email — link expires in {expiry}.',
+    'magicLink.expiryMinute': '{count} minute',
+    'magicLink.expiryMinutes': '{count} minutes',
+    'magicLink.expirySeconds': '{count} seconds',
+    'magicLink.error.send': 'Failed to send magic link.',
+    'magicLink.error.auth': 'Magic link authentication failed.',
+    'signup.heading': 'Create your account',
+    'signup.submit': 'Sign up',
+    'signup.successHeading': 'Check your email',
+    'signup.successDescription': 'We sent a verification link to {email}. Check your inbox to activate your account.',
+    'signup.loginPrompt': 'Already have an account?',
+    'signup.loginLink': 'Log in',
+    'signup.error.create': 'Failed to create account.',
+    'passkey.loginButton': 'Sign in with Passkeys',
+    'passkey.createHeading': 'Create a passkey',
+    'passkey.createPrompt': "Don't have a passkey?",
+    'passkey.createLink': 'Create one.',
+    'passkey.requestDescription': 'Enter your email and we will send a link to create your passkey.',
+    'passkey.requestSubmit': 'Send setup link',
+    'passkey.sentHeading': 'Check your email',
+    'passkey.sentDescription': 'We sent a passkey setup link to {email}. Please check your inbox and click the link to create your passkey and finish signing in.',
+    'passkey.settingUpHeading': 'Setting up passkey',
+    'passkey.setupHeading': 'Passkey setup',
+    'passkey.signInNow': 'Sign in now',
+    'passkey.requestNewLink': 'Request new setup link',
+    'passkey.setupDescription': 'Follow the prompt from your browser or device to complete passkey setup.',
+    'passkey.setupSuccessHeading': 'Passkey created',
+    'passkey.setupSuccessDescription': 'Your passkey has been created.',
+    'passkey.error.cancelled': 'Passkey setup was cancelled.',
+    'passkey.error.authCancelled': 'Passkey authentication was cancelled.',
+    'passkey.error.setupFailed': 'Passkey setup failed.',
+    'passkey.error.expired': 'This setup link has expired or is invalid.',
+    'passkey.error.unsupported': 'Your browser does not support passkeys.',
+    'passkey.error.auth': 'Passkey authentication failed.',
+    'passkey.error.setup': 'An error occurred during passkey setup.',
+    'passkey.error.verify': 'Passkey registration could not be verified.',
+    'passkey.error.sendLink': 'Failed to send setup link.',
+    'mfa.challengeHeading': 'Two-factor authentication',
+    'mfa.submit': 'Verify',
+    'mfa.useRecoveryCode': 'Use recovery code',
+    'mfa.useAuthenticationCode': 'Use authentication code',
+    'mfa.recoverSubmit': 'Recover',
+    'mfa.resendPrompt': "Didn't get your text message?",
+    'mfa.resendCountdown': "Didn't get your text message? You can resend in {seconds}s.",
+    'mfa.error.invalidCode': 'Invalid code. Please try again.',
+    'mfa.error.invalidRecoveryCode': 'Invalid recovery code.',
+    'mfa.error.resend': 'Failed to resend code.',
+    'mfaSetup.heading': 'Set up two-factor authentication',
+    'mfaSetup.phoneDescription': 'Enter your phone number to receive a verification code via SMS.',
+    'mfaSetup.sendCode': 'Send code',
+    'mfaSetup.verifyDescription': 'Enter the 6-digit code sent to your phone.',
+    'mfaSetup.verify': 'Verify',
+    'mfaSetup.changePhone': 'Change phone number',
+    'mfaSetup.backupDescription': 'Save this recovery code in a safe place. You can use it to access your account if you lose your phone.',
+    'mfaSetup.successHeading': 'Two-factor authentication enabled!',
+    'mfaSetup.error.sendCode': 'Failed to send verification code.',
+    'mfaSetup.error.resend': 'Failed to resend verification code.',
+};
+/**
+ * Swedish. Reviewed-locale status: this and `en` are the two locales shipping
+ * in v1 (owner decision 2026-09-11) precisely because they can be checked here.
+ * The remaining ten NorthWhistle needs — da, de, es, fi, fr, it, nb, nl, pl, pt
+ * — are a data-only follow-up requiring no code change: drop another `Messages`
+ * object into `LOCALES` below.
+ */
+export const sv = {
+    'field.email': 'E-post',
+    'field.password': 'Lösenord',
+    'field.newPassword': 'Nytt lösenord',
+    'field.confirmPassword': 'Bekräfta lösenord',
+    'field.firstName': 'Förnamn',
+    'field.lastName': 'Efternamn',
+    'field.phoneNumber': 'Telefonnummer',
+    'field.verificationCode': 'Verifieringskod',
+    'field.authenticationCode': 'Autentiseringskod',
+    'field.recoveryCode': 'Återställningskod',
+    'placeholder.email': 'du@exempel.se',
+    'placeholder.password': 'Ange ditt lösenord',
+    'placeholder.newPassword': 'Minst 8 tecken',
+    'placeholder.confirmPassword': 'Upprepa lösenordet',
+    'placeholder.firstName': 'Förnamn',
+    'placeholder.lastName': 'Efternamn',
+    'placeholder.phoneNumber': '',
+    'placeholder.sixDigitCode': 'Ange 6-siffrig kod',
+    'placeholder.recoveryCode': 'Ange återställningskod',
+    'action.showPassword': 'Visa lösenord',
+    'action.hidePassword': 'Dölj lösenord',
+    'action.showPasswords': 'Visa lösenord',
+    'action.hidePasswords': 'Dölj lösenord',
+    'action.backToLogin': 'Tillbaka till inloggningen',
+    'action.backToSignIn': 'Tillbaka till inloggningen',
+    'action.resendCode': 'Skicka koden igen',
+    'action.copy': 'Kopiera',
+    'action.copied': 'Kopierad!',
+    'action.tryAgain': 'Försök igen',
+    'action.done': 'Klar',
+    'divider.or': 'eller',
+    'login.heading': 'Logga in på ditt konto',
+    'login.submit': 'Logga in',
+    'login.submitting': 'Loggar in…',
+    'login.forgotPassword': 'Glömt lösenordet?',
+    'login.magicLink': 'Logga in med magisk länk',
+    'login.signupPrompt': 'Har du inget konto?',
+    'login.signupLink': 'Skapa konto',
+    'login.error.invalidCredentials': 'Fel e-postadress eller lösenord.',
+    'forgot.headingRequest': 'Återställ ditt lösenord',
+    'forgot.headingSet': 'Ange nytt lösenord',
+    'forgot.description': 'Ange din e-postadress så skickar vi en länk för att återställa lösenordet.',
+    'forgot.submit': 'Skicka återställningslänk',
+    'forgot.setSubmit': 'Ange ett lösenord',
+    'forgot.emailSent': 'Kolla din e-post för en länk att återställa lösenordet.',
+    'forgot.successHeading': 'Lösenordet är sparat',
+    'forgot.error.send': 'Det gick inte att skicka återställningslänken.',
+    'forgot.error.update': 'Det gick inte att uppdatera lösenordet.',
+    'forgot.error.mismatch': 'Lösenorden stämmer inte överens.',
+    'forgot.error.tooShort': 'Lösenordet måste vara minst 8 tecken.',
+    'magicLink.heading': 'Logga in med e-postlänk',
+    'magicLink.description': 'Ange din e-postadress så skickar vi en inloggningslänk. Inget lösenord behövs.',
+    'magicLink.submit': 'Skicka magisk länk',
+    'magicLink.sent': 'Kolla din e-post — länken går ut om {expiry}.',
+    'magicLink.expiryMinute': '{count} minut',
+    'magicLink.expiryMinutes': '{count} minuter',
+    'magicLink.expirySeconds': '{count} sekunder',
+    'magicLink.error.send': 'Det gick inte att skicka den magiska länken.',
+    'magicLink.error.auth': 'Inloggningen med magisk länk misslyckades.',
+    'signup.heading': 'Skapa ditt konto',
+    'signup.submit': 'Skapa konto',
+    'signup.successHeading': 'Kolla din e-post',
+    'signup.successDescription': 'Vi har skickat en verifieringslänk till {email}. Kolla inkorgen för att aktivera ditt konto.',
+    'signup.loginPrompt': 'Har du redan ett konto?',
+    'signup.loginLink': 'Logga in',
+    'signup.error.create': 'Det gick inte att skapa kontot.',
+    'passkey.loginButton': 'Logga in med passkey',
+    'passkey.createHeading': 'Skapa en passkey',
+    'passkey.createPrompt': 'Har du ingen passkey än?',
+    'passkey.createLink': 'Skapa en.',
+    'passkey.requestDescription': 'Ange din e-postadress så skickar vi en länk för att skapa din passkey.',
+    'passkey.requestSubmit': 'Skicka länk',
+    'passkey.sentHeading': 'Kolla din e-post',
+    'passkey.sentDescription': 'Vi har skickat en länk till {email} för att skapa din passkey. Kolla inkorgen och klicka på länken för att skapa din passkey och slutföra inloggningen.',
+    'passkey.settingUpHeading': 'Skapar din passkey',
+    'passkey.setupHeading': 'Skapa passkey',
+    'passkey.signInNow': 'Logga in nu',
+    'passkey.requestNewLink': 'Begär en ny länk',
+    'passkey.setupDescription': 'Följ anvisningarna från din webbläsare eller enhet för att slutföra skapandet av din passkey.',
+    'passkey.setupSuccessHeading': 'Passkey skapad',
+    'passkey.setupSuccessDescription': 'Din passkey har skapats.',
+    'passkey.error.cancelled': 'Skapandet av passkey avbröts.',
+    'passkey.error.authCancelled': 'Inloggningen med passkey avbröts.',
+    'passkey.error.setupFailed': 'Det gick inte att skapa din passkey.',
+    'passkey.error.expired': 'Länken har upphört att gälla eller är ogiltig.',
+    'passkey.error.unsupported': 'Din webbläsare har inte stöd för passkeys.',
+    'passkey.error.auth': 'Inloggningen med passkey misslyckades.',
+    'passkey.error.setup': 'Ett fel uppstod när din passkey skulle skapas.',
+    'passkey.error.verify': 'Din passkey kunde inte verifieras.',
+    'passkey.error.sendLink': 'Det gick inte att skicka länken.',
+    'mfa.challengeHeading': 'Tvåfaktorsautentisering',
+    'mfa.submit': 'Verifiera',
+    'mfa.useRecoveryCode': 'Använd återställningskod',
+    'mfa.useAuthenticationCode': 'Använd autentiseringskod',
+    'mfa.recoverSubmit': 'Återställ',
+    'mfa.resendPrompt': 'Fick du inget SMS?',
+    'mfa.resendCountdown': 'Fick du inget SMS? Du kan skicka igen om {seconds} s.',
+    'mfa.error.invalidCode': 'Ogiltig kod. Försök igen.',
+    'mfa.error.invalidRecoveryCode': 'Ogiltig återställningskod.',
+    'mfa.error.resend': 'Det gick inte att skicka koden igen.',
+    'mfaSetup.heading': 'Aktivera tvåfaktorsautentisering',
+    'mfaSetup.phoneDescription': 'Ange ditt telefonnummer för att få en verifieringskod via SMS.',
+    'mfaSetup.sendCode': 'Skicka kod',
+    'mfaSetup.verifyDescription': 'Ange den 6-siffriga koden som skickades till din telefon.',
+    'mfaSetup.verify': 'Verifiera',
+    'mfaSetup.changePhone': 'Byt telefonnummer',
+    'mfaSetup.backupDescription': 'Spara den här återställningskoden på ett säkert ställe. Du kan använda den för att komma åt ditt konto om du förlorar din telefon.',
+    'mfaSetup.successHeading': 'Tvåfaktorsautentisering aktiverad!',
+    'mfaSetup.error.sendCode': 'Det gick inte att skicka verifieringskoden.',
+    'mfaSetup.error.resend': 'Det gick inte att skicka verifieringskoden igen.',
+};
+/** Locales shipping with the package. Adding one is data-only. */
+export const LOCALES = { en, sv };
+//# sourceMappingURL=messages.js.map

package/dist/i18n/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/i18n/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA+IH;;;;GAIG;AACH,MAAM,CAAC,MAAM,EAAE,GAAa;IAC1B,aAAa,EAAE,OAAO;IACtB,gBAAgB,EAAE,UAAU;IAC5B,mBAAmB,EAAE,cAAc;IACnC,uBAAuB,EAAE,kBAAkB;IAC3C,iBAAiB,EAAE,YAAY;IAC/B,gBAAgB,EAAE,WAAW;IAC7B,mBAAmB,EAAE,cAAc;IACnC,wBAAwB,EAAE,mBAAmB;IAC7C,0BAA0B,EAAE,qBAAqB;IACjD,oBAAoB,EAAE,eAAe;IACrC,mBAAmB,EAAE,iBAAiB;IACtC,sBAAsB,EAAE,qBAAqB;IAC7C,yBAAyB,EAAE,uBAAuB;IAClD,6BAA6B,EAAE,iBAAiB;IAChD,uBAAuB,EAAE,YAAY;IACrC,sBAAsB,EAAE,WAAW;IACnC,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,yBAAyB,EAAE,EAAE;IAC7B,0BAA0B,EAAE,oBAAoB;IAChD,0BAA0B,EAAE,qBAAqB;IACjD,qBAAqB,EAAE,eAAe;IACtC,qBAAqB,EAAE,eAAe;IACtC,sBAAsB,EAAE,gBAAgB;IACxC,sBAAsB,EAAE,gBAAgB;IACxC,oBAAoB,EAAE,eAAe;IACrC,qBAAqB,EAAE,iBAAiB;IACxC,mBAAmB,EAAE,aAAa;IAClC,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,SAAS;IAC1B,iBAAiB,EAAE,WAAW;IAC9B,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,IAAI;IAElB,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE,SAAS;IACzB,kBAAkB,EAAE,aAAa;IACjC,sBAAsB,EAAE,kBAAkB;IAC1C,iBAAiB,EAAE,yBAAyB;IAC5C,oBAAoB,EAAE,wBAAwB;IAC9C,kBAAkB,EAAE,SAAS;IAC7B,gCAAgC,EAAE,4BAA4B;IAE9D,uBAAuB,EAAE,qBAAqB;IAC9C,mBAAmB,EAAE,kBAAkB;IACvC,oBAAoB,EAAE,oEAAoE;IAC1F,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,gBAAgB;IACpC,kBAAkB,EAAE,6CAA6C;IACjE,uBAAuB,EAAE,cAAc;IACvC,mBAAmB,EAAE,4BAA4B;IACjD,qBAAqB,EAAE,4BAA4B;IACnD,uBAAuB,EAAE,yBAAyB;IAClD,uBAAuB,EAAE,yCAAyC;IAElE,mBAAmB,EAAE,yBAAyB;IAC9C,uBAAuB,EAAE,yEAAyE;IAClG,kBAAkB,EAAE,iBAAiB;IACrC,gBAAgB,EAAE,8CAA8C;IAChE,wBAAwB,EAAE,gBAAgB;IAC1C,yBAAyB,EAAE,iBAAiB;IAC5C,yBAAyB,EAAE,iBAAiB;IAC5C,sBAAsB,EAAE,4BAA4B;IACpD,sBAAsB,EAAE,mCAAmC;IAE3D,gBAAgB,EAAE,qBAAqB;IACvC,eAAe,EAAE,SAAS;IAC1B,uBAAuB,EAAE,kBAAkB;IAC3C,2BAA2B,EACzB,oFAAoF;IACtF,oBAAoB,EAAE,0BAA0B;IAChD,kBAAkB,EAAE,QAAQ;IAC5B,qBAAqB,EAAE,2BAA2B;IAElD,qBAAqB,EAAE,uBAAuB;IAC9C,uBAAuB,EAAE,kBAAkB;IAC3C,sBAAsB,EAAE,uBAAuB;IAC/C,oBAAoB,EAAE,aAAa;IACnC,4BAA4B,EAAE,kEAAkE;IAChG,uBAAuB,EAAE,iBAAiB;IAC1C,qBAAqB,EAAE,kBAAkB;IACzC,yBAAyB,EACvB,mIAAmI;IACrI,0BAA0B,EAAE,oBAAoB;IAChD,sBAAsB,EAAE,eAAe;IACvC,mBAAmB,EAAE,aAAa;IAClC,wBAAwB,EAAE,wBAAwB;IAClD,0BAA0B,EACxB,0EAA0E;IAC5E,6BAA6B,EAAE,iBAAiB;IAChD,iCAAiC,EAAE,gCAAgC;IACnE,yBAAyB,EAAE,8BAA8B;IACzD,6BAA6B,EAAE,uCAAuC;IACtE,2BAA2B,EAAE,uBAAuB;IACpD,uBAAuB,EAAE,4CAA4C;IACrE,2BAA2B,EAAE,yCAAyC;IACtE,oBAAoB,EAAE,gCAAgC;IACtD,qBAAqB,EAAE,yCAAyC;IAChE,sBAAsB,EAAE,6CAA6C;IACrE,wBAAwB,EAAE,4BAA4B;IAEtD,sBAAsB,EAAE,2BAA2B;IACnD,YAAY,EAAE,QAAQ;IACtB,qBAAqB,EAAE,mBAAmB;IAC1C,2BAA2B,EAAE,yBAAyB;IACtD,mBAAmB,EAAE,SAAS;IAC9B,kBAAkB,EAAE,+BAA+B;IACnD,qBAAqB,EAAE,6DAA6D;IACpF,uBAAuB,EAAE,iCAAiC;IAC1D,+BAA+B,EAAE,wBAAwB;IACzD,kBAAkB,EAAE,wBAAwB;IAE5C,kBAAkB,EAAE,kCAAkC;IACtD,2BAA2B,EAAE,iEAAiE;IAC9F,mBAAmB,EAAE,WAAW;IAChC,4BAA4B,EAAE,4CAA4C;IAC1E,iBAAiB,EAAE,QAAQ;IAC3B,sBAAsB,EAAE,qBAAqB;IAC7C,4BAA4B,EAC1B,wGAAwG;IAC1G,yBAAyB,EAAE,oCAAoC;IAC/D,yBAAyB,EAAE,mCAAmC;IAC9D,uBAAuB,EAAE,qCAAqC;CAC/D,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,EAAE,GAAa;IAC1B,aAAa,EAAE,QAAQ;IACvB,gBAAgB,EAAE,UAAU;IAC5B,mBAAmB,EAAE,eAAe;IACpC,uBAAuB,EAAE,mBAAmB;IAC5C,iBAAiB,EAAE,SAAS;IAC5B,gBAAgB,EAAE,WAAW;IAC7B,mBAAmB,EAAE,eAAe;IACpC,wBAAwB,EAAE,iBAAiB;IAC3C,0BAA0B,EAAE,mBAAmB;IAC/C,oBAAoB,EAAE,mBAAmB;IACzC,mBAAmB,EAAE,eAAe;IACpC,sBAAsB,EAAE,oBAAoB;IAC5C,yBAAyB,EAAE,gBAAgB;IAC3C,6BAA6B,EAAE,oBAAoB;IACnD,uBAAuB,EAAE,SAAS;IAClC,sBAAsB,EAAE,WAAW;IACnC,yBAAyB,EAAE,EAAE;IAC7B,0BAA0B,EAAE,oBAAoB;IAChD,0BAA0B,EAAE,wBAAwB;IACpD,qBAAqB,EAAE,eAAe;IACtC,qBAAqB,EAAE,eAAe;IACtC,sBAAsB,EAAE,eAAe;IACvC,sBAAsB,EAAE,eAAe;IACvC,oBAAoB,EAAE,4BAA4B;IAClD,qBAAqB,EAAE,4BAA4B;IACnD,mBAAmB,EAAE,mBAAmB;IACxC,aAAa,EAAE,SAAS;IACxB,eAAe,EAAE,WAAW;IAC5B,iBAAiB,EAAE,aAAa;IAChC,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,OAAO;IAErB,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE,UAAU;IAC1B,kBAAkB,EAAE,YAAY;IAChC,sBAAsB,EAAE,mBAAmB;IAC3C,iBAAiB,EAAE,0BAA0B;IAC7C,oBAAoB,EAAE,qBAAqB;IAC3C,kBAAkB,EAAE,aAAa;IACjC,gCAAgC,EAAE,kCAAkC;IAEpE,uBAAuB,EAAE,yBAAyB;IAClD,mBAAmB,EAAE,oBAAoB;IACzC,oBAAoB,EAClB,4EAA4E;IAC9E,eAAe,EAAE,2BAA2B;IAC5C,kBAAkB,EAAE,mBAAmB;IACvC,kBAAkB,EAAE,yDAAyD;IAC7E,uBAAuB,EAAE,sBAAsB;IAC/C,mBAAmB,EAAE,gDAAgD;IACrE,qBAAqB,EAAE,yCAAyC;IAChE,uBAAuB,EAAE,kCAAkC;IAC3D,uBAAuB,EAAE,uCAAuC;IAEhE,mBAAmB,EAAE,yBAAyB;IAC9C,uBAAuB,EACrB,gFAAgF;IAClF,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,+CAA+C;IACjE,wBAAwB,EAAE,eAAe;IACzC,yBAAyB,EAAE,iBAAiB;IAC5C,yBAAyB,EAAE,kBAAkB;IAC7C,sBAAsB,EAAE,8CAA8C;IACtE,sBAAsB,EAAE,4CAA4C;IAEpE,gBAAgB,EAAE,kBAAkB;IACpC,eAAe,EAAE,aAAa;IAC9B,uBAAuB,EAAE,kBAAkB;IAC3C,2BAA2B,EACzB,8FAA8F;IAChG,oBAAoB,EAAE,yBAAyB;IAC/C,kBAAkB,EAAE,UAAU;IAC9B,qBAAqB,EAAE,iCAAiC;IAExD,qBAAqB,EAAE,sBAAsB;IAC7C,uBAAuB,EAAE,kBAAkB;IAC3C,sBAAsB,EAAE,0BAA0B;IAClD,oBAAoB,EAAE,WAAW;IACjC,4BAA4B,EAC1B,wEAAwE;IAC1E,uBAAuB,EAAE,aAAa;IACtC,qBAAqB,EAAE,kBAAkB;IACzC,yBAAyB,EACvB,yJAAyJ;IAC3J,0BAA0B,EAAE,oBAAoB;IAChD,sBAAsB,EAAE,eAAe;IACvC,mBAAmB,EAAE,aAAa;IAClC,wBAAwB,EAAE,kBAAkB;IAC5C,0BAA0B,EACxB,+FAA+F;IACjG,6BAA6B,EAAE,gBAAgB;IAC/C,iCAAiC,EAAE,0BAA0B;IAC7D,yBAAyB,EAAE,+BAA+B;IAC1D,6BAA6B,EAAE,mCAAmC;IAClE,2BAA2B,EAAE,sCAAsC;IACnE,uBAAuB,EAAE,gDAAgD;IACzE,2BAA2B,EAAE,4CAA4C;IACzE,oBAAoB,EAAE,wCAAwC;IAC9D,qBAAqB,EAAE,gDAAgD;IACvE,sBAAsB,EAAE,oCAAoC;IAC5D,wBAAwB,EAAE,kCAAkC;IAE5D,sBAAsB,EAAE,yBAAyB;IACjD,YAAY,EAAE,WAAW;IACzB,qBAAqB,EAAE,0BAA0B;IACjD,2BAA2B,EAAE,0BAA0B;IACvD,mBAAmB,EAAE,WAAW;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,qBAAqB,EAAE,uDAAuD;IAC9E,uBAAuB,EAAE,2BAA2B;IACpD,+BAA+B,EAAE,4BAA4B;IAC7D,kBAAkB,EAAE,sCAAsC;IAE1D,kBAAkB,EAAE,kCAAkC;IACtD,2BAA2B,EACzB,gEAAgE;IAClE,mBAAmB,EAAE,YAAY;IACjC,4BAA4B,EAAE,2DAA2D;IACzF,iBAAiB,EAAE,WAAW;IAC9B,sBAAsB,EAAE,mBAAmB;IAC3C,4BAA4B,EAC1B,oIAAoI;IACtI,yBAAyB,EAAE,oCAAoC;IAC/D,yBAAyB,EAAE,6CAA6C;IACxE,uBAAuB,EAAE,kDAAkD;CAC5E,CAAC;AAEF,kEAAkE;AAClE,MAAM,CAAC,MAAM,OAAO,GAA6B,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC"}

package/dist/i18n/resolver.d.ts

@@ -0,0 +1,62 @@
+import { type MessageKey, type Messages } from './messages.js';
+/**
+ * Message resolution for the SDK auth components (TBP-630).
+ *
+ * ## Synchronous, deliberately
+ *
+ * These components render during an auth redirect. An async catalogue load
+ * would paint English first and then swap — a visible flash on the one screen
+ * where the user is already waiting and already unsure. So every locale is
+ * bundled and lookup is a property access. The catalogue is small enough that
+ * this is cheaper than the machinery to avoid it.
+ *
+ * ## Resolution order
+ *
+ *   1. explicit per-key `messages` override
+ *   2. requested `locale`
+ *   3. English
+ *
+ * A missing key falls through to English, and a raw key NEVER renders. If the
+ * catalogue is wrong, the user sees the wrong language; if it rendered keys,
+ * they would see `login.submit` on a button. The first is a defect, the second
+ * is a broken product.
+ */
+export type MessageOverrides = Partial<Record<MessageKey, string>>;
+export interface Translator {
+    /** Resolve a key, substituting `{name}` placeholders from `vars`. */
+    (key: MessageKey, vars?: Record<string, string | number>): string;
+}
+/**
+ * Substitute `{name}` placeholders.
+ *
+ * A variable with no matching value is left as its literal placeholder rather
+ * than rendered as `undefined`. Neither is good, but `{email}` reads as
+ * obviously-missing data while `undefined` reads as a crash.
+ *
+ * Word order is the translator's business: the whole string is translated with
+ * the placeholder in it, so a locale that needs the variable first simply moves
+ * it. Nothing here concatenates fragments.
+ */
+export declare function interpolate(template: string, vars?: Record<string, string | number>): string;
+/** True when the locale has a catalogue. Consumers can use this to warn early. */
+export declare function hasLocale(locale: string | null | undefined): boolean;
+/**
+ * `sv-SE` → `sv`. Region variants share a catalogue until somebody has a reason
+ * to split them; matching `navigator.language` exactly would mean `en-GB` users
+ * falling back to... English, and `sv-SE` users falling back to English too,
+ * which is the bug.
+ */
+export declare function normalizeLocale(locale: string): string;
+/**
+ * Build a translator.
+ *
+ * `locale` unknown → English, no throw. That is a deliberate silent fallback:
+ * an app passing `locale="klingon"` should still render a usable login form,
+ * and a hard failure on the auth screen locks everybody out over a typo.
+ */
+export declare function createTranslator(args?: {
+    locale?: string | null;
+    messages?: MessageOverrides;
+}): Translator;
+export type { MessageKey, Messages };
+//# sourceMappingURL=resolver.d.ts.map

package/dist/i18n/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/i18n/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnE,MAAM,WAAW,UAAU;IACzB,qEAAqE;IACrE,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;CACnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GACrC,MAAM,CAKR;AAED,kFAAkF;AAClF,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,GAAG,UAAU,CASb;AAED,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC"}

package/dist/i18n/resolver.js

@@ -0,0 +1,46 @@
+import { en, LOCALES } from './messages.js';
+/**
+ * Substitute `{name}` placeholders.
+ *
+ * A variable with no matching value is left as its literal placeholder rather
+ * than rendered as `undefined`. Neither is good, but `{email}` reads as
+ * obviously-missing data while `undefined` reads as a crash.
+ *
+ * Word order is the translator's business: the whole string is translated with
+ * the placeholder in it, so a locale that needs the variable first simply moves
+ * it. Nothing here concatenates fragments.
+ */
+export function interpolate(template, vars) {
+    if (!vars)
+        return template;
+    return template.replace(/\{(\w+)\}/g, (match, name) => name in vars ? String(vars[name]) : match);
+}
+/** True when the locale has a catalogue. Consumers can use this to warn early. */
+export function hasLocale(locale) {
+    return !!locale && !!LOCALES[normalizeLocale(locale)];
+}
+/**
+ * `sv-SE` → `sv`. Region variants share a catalogue until somebody has a reason
+ * to split them; matching `navigator.language` exactly would mean `en-GB` users
+ * falling back to... English, and `sv-SE` users falling back to English too,
+ * which is the bug.
+ */
+export function normalizeLocale(locale) {
+    return locale.toLowerCase().split(/[-_]/)[0];
+}
+/**
+ * Build a translator.
+ *
+ * `locale` unknown → English, no throw. That is a deliberate silent fallback:
+ * an app passing `locale="klingon"` should still render a usable login form,
+ * and a hard failure on the auth screen locks everybody out over a typo.
+ */
+export function createTranslator(args) {
+    const { locale, messages } = args ?? {};
+    const catalogue = (locale && LOCALES[normalizeLocale(locale)]) || en;
+    return (key, vars) => {
+        const template = messages?.[key] ?? catalogue[key] ?? en[key];
+        return interpolate(template, vars);
+    };
+}
+//# sourceMappingURL=resolver.js.map

package/dist/i18n/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/i18n/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAkC,MAAM,eAAe,CAAC;AA+B5E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,IAAsC;IAEtC,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC3B,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAC5D,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAC1C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,MAAiC;IACzD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAGhC;IACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACxC,MAAM,SAAS,GACb,CAAC,MAAM,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAErD,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9D,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { loadedInstanceCount, __resetInstanceRegistryForTests, } from './instance-guard.js';
 export { BridgeAuth } from './bridge-auth.js';
-export type { AppConfig, AuthConfigResponse, AuthResult, AuthState, BridgeAuthConfig, BridgeAuthEventName, BridgeAuthEvents, CheckoutSession, CurrentUser, FederationConnection, FlagRequirement, IDToken, MagicLinkResult, MfaResult, NavigationDecision, PasskeyAuthOptions, PasskeyRegistrationOptions, PasskeyVerificationResult, PaymentClaims, Plan, PriceOfferSdk, Profile, ResolvedConfig, RouteGuard, RouteGuardConfig, RouteRule, SessionStalePayload, SignupResult, SsoOptions, SsoResult, SubscriptionStatus, TenantUser, TokenSet, TokenStorage, Workspace, } from './types.js';
+export type { AppConfig, AuthConfigResponse, AuthResult, AuthState, BridgeAuthConfig, BridgeAuthEventName, BridgeAuthEvents, CheckoutSession, CurrentUser, FederationConnection, FlagRequirement, IDToken, MagicLinkResult, MfaResult, NavigationDecision, PasskeyAuthOptions, PasskeyRegistrationOptions, PasskeyVerificationResult, PaymentClaims, Plan, PriceOfferSdk, Profile, ResolvedConfig, ReturnToConfig, RouteGuard, RouteGuardConfig, RouteRule, SessionStalePayload, SignupResult, SsoOptions, SsoResult, SubscriptionStatus, TenantUser, TokenSet, TokenStorage, Workspace, } from './types.js';
 export { TeamService } from './team-service.js';
 export type { TeamProfile, TeamProfileUpdateInput, TeamUser, TeamUserListResult, TeamUserUpdateInput, TeamWorkspace, TeamWorkspaceUpdateInput, } from './team-types.js';
 export { ApiTokenService } from './api-token-service.js';
@@ -34,4 +34,9 @@ export { EntitlementsStore } from './billing/entitlements-store.js';
 export type { EntitlementSnapshot } from './billing/entitlements-store.js';
 export { deriveNoticeState, deriveSeverity } from './billing/types.js';
 export type { BillingSubscriptionStatus, BillingSeverity, PastDueReason, BillingPlanRef, BillingSubscriptionState, BillingSubscriptionSnapshot, BillingNoticeState, BillingLockedPayload, MountOptions, } from './billing/types.js';
+export { DEFAULT_RETURN_TO_PARAM, RETURN_TO_STORAGE_KEY, readReturnTo, sanitizeReturnTo, stashReturnTo, takeReturnTo, withReturnTo, } from './return-to.js';
+export { createTranslator, hasLocale, interpolate, normalizeLocale, } from './i18n/resolver.js';
+export type { MessageOverrides, Translator } from './i18n/resolver.js';
+export { LOCALES, en, sv } from './i18n/messages.js';
+export type { MessageKey, Messages } from './i18n/messages.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,OAAO,EACP,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,yBAAyB,EACzB,aAAa,EACb,IAAI,EACJ,aAAa,EACb,OAAO,EACP,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,SAAS,GACV,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,WAAW,EACX,sBAAsB,EACtB,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAG7E,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EACV,gBAAgB,EAEhB,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,wBAAwB,EAEzE,cAAc,EAAE,mBAAmB,EAAE,mBAAmB,EAExD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAElD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACrE,sBAAsB,EAAE,sBAAsB,EAE9C,YAAY,EAAE,eAAe,EAAE,eAAe,EAC9C,eAAe,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAClD,YAAY,EAEZ,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAAE,oBAAoB,EAE9E,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,EAE7D,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAEpD,UAAU,EAAE,WAAW,EAEvB,kBAAkB,EAAE,uBAAuB,EAE3C,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAMhE,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,QAAQ,EACR,aAAa,EACb,SAAS,EACT,cAAc,EACd,eAAe,EACf,MAAM,EACN,IAAI,EACJ,SAAS,EACT,WAAW,EACX,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC9B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,EACf,UAAU,EACV,aAAa,GACd,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,YAAY,EACV,yBAAyB,EACzB,eAAe,EACf,aAAa,EACb,cAAc,EACd,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GACb,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,OAAO,EACP,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,yBAAyB,EACzB,aAAa,EACb,IAAI,EACJ,aAAa,EACb,OAAO,EACP,cAAc,EACd,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,SAAS,GACV,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,WAAW,EACX,sBAAsB,EACtB,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAG7E,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EACV,gBAAgB,EAEhB,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,wBAAwB,EAEzE,cAAc,EAAE,mBAAmB,EAAE,mBAAmB,EAExD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAElD,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EACrE,sBAAsB,EAAE,sBAAsB,EAE9C,YAAY,EAAE,eAAe,EAAE,eAAe,EAC9C,eAAe,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAClD,YAAY,EAEZ,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAAE,oBAAoB,EAE9E,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,EAE7D,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAEpD,UAAU,EAAE,WAAW,EAEvB,kBAAkB,EAAE,uBAAuB,EAE3C,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAMhE,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,QAAQ,EACR,aAAa,EACb,SAAS,EACT,cAAc,EACd,eAAe,EACf,MAAM,EACN,IAAI,EACJ,SAAS,EACT,WAAW,EACX,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC9B,uBAAuB,EACvB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,EACf,UAAU,EACV,aAAa,GACd,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,YAAY,EACV,yBAAyB,EACzB,eAAe,EACf,aAAa,EACb,cAAc,EACd,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -48,4 +48,13 @@ export { QuotaStore } from './billing/quota-store.js';
 // Billing 2.0 US-12 — entitlement cache + types.
 export { EntitlementsStore } from './billing/entitlements-store.js';
 export { deriveNoticeState, deriveSeverity } from './billing/types.js';
+// TBP-629 — deep-link preservation for SDK-mode route guards. Exported so a
+// consumer's login page can read the return target back with the validation
+// already applied, rather than each app reinventing the open-redirect check.
+export { DEFAULT_RETURN_TO_PARAM, RETURN_TO_STORAGE_KEY, readReturnTo, sanitizeReturnTo, stashReturnTo, takeReturnTo, withReturnTo, } from './return-to.js';
+// TBP-630 — SDK auth message catalogue. Lives in core so bridge-svelte,
+// -react, -angular and -nextjs resolve identical copy rather than drifting
+// into four slightly different logins.
+export { createTranslator, hasLocale, interpolate, normalizeLocale, } from './i18n/resolver.js';
+export { LOCALES, en, sv } from './i18n/messages.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,gBAAgB,EAAE,CAAC;AAEnB,OAAO,EACL,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAyC9C,kBAAkB;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAWhD,uBAAuB;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAQzD,SAAS;AACT,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7E,8CAA8C;AAC9C,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExE,YAAY;AACZ,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtG,yCAAyC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAgC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,+EAA+E;AAC/E,6EAA6E;AAC7E,0EAA0E;AAC1E,iEAAiE;AACjE,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAoD1B,+EAA+E;AAC/E,2EAA2E;AAC3E,4DAA4D;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAOpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,iDAAiD;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,gBAAgB,EAAE,CAAC;AAEnB,OAAO,EACL,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AA0C9C,kBAAkB;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAWhD,uBAAuB;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAQzD,SAAS;AACT,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7E,8CAA8C;AAC9C,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExE,YAAY;AACZ,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtG,yCAAyC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAgC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,+EAA+E;AAC/E,6EAA6E;AAC7E,0EAA0E;AAC1E,iEAAiE;AACjE,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAoD1B,+EAA+E;AAC/E,2EAA2E;AAC3E,4DAA4D;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAOpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,iDAAiD;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAavE,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,gBAAgB,CAAC;AAExB,wEAAwE;AACxE,2EAA2E;AAC3E,uCAAuC;AACvC,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/return-to.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Return-to handling for the SDK-mode route guard (TBP-629).
+ *
+ * When the guard turns an unauthenticated visitor away from a protected route,
+ * the path they asked for has to survive the trip through the login page or the
+ * deep link is lost. In SDK mode that means carrying it as a query parameter on
+ * the consumer's own login route.
+ *
+ * A query parameter is the deliberate choice over sessionStorage. Storage has a
+ * smaller attack surface — nothing attacker-controllable ever enters the URL —
+ * but it does not survive a cross-tab click, and a link mailed to somebody and
+ * opened in a fresh tab is the exact case that prompted this. Storage would
+ * silently fail at the only job it was hired for.
+ *
+ * The cost of that choice is that the value is attacker-controllable, so it is
+ * untrusted input and this module treats it as such. Consumers should not have
+ * to know that: {@link sanitizeReturnTo} is applied on the way in AND on the way
+ * out, so a hostile value cannot reach a navigation call even if a consumer
+ * forgets to check.
+ */
+/** Query parameter carrying the return target. Matches hosted mode's `redirectUri`
+ *  vocabulary on purpose, so consumers do not learn a second name for one idea. */
+export declare const DEFAULT_RETURN_TO_PARAM = "redirectUri";
+/**
+ * Reduce an untrusted return target to a same-origin path, or null.
+ *
+ * Only same-origin, path-absolute targets survive. Everything else is rejected
+ * rather than repaired — a value we have to fix up is a value we do not
+ * understand, and "understood well enough to edit" is how open redirects get
+ * shipped.
+ *
+ * Rejected, and why each one matters:
+ *
+ * | Input | Why |
+ * |---|---|
+ * | `https://evil.test/x` | absolute URL — classic open redirect |
+ * | `//evil.test/x` | protocol-relative; browsers treat it as absolute |
+ * | `/\evil.test` , `\\evil.test` | browsers normalise `\` to `/`, so this IS protocol-relative |
+ * | `javascript:alert(1)` | scheme payload; no leading `/` so it fails anyway, rejected explicitly for clarity |
+ * | `x/y` | relative — resolves against whatever page it lands on, so the destination is not knowable here |
+ * | anything with CR/LF/TAB/NUL | header and URL smuggling |
+ *
+ * Note `/\` and `\\` are checked on the RAW string before any normalisation.
+ * Checking after normalising would be checking the wrong string, which is the
+ * usual way this validation is written wrong.
+ */
+export declare function sanitizeReturnTo(value: string | null | undefined): string | null;
+/**
+ * Build the login route with the return target attached.
+ *
+ * Returns `loginRoute` untouched when there is nothing safe to carry, so the
+ * caller never has to branch on it. Preserves any query string the consumer
+ * already put on their `loginRoute`.
+ */
+export declare function withReturnTo(loginRoute: string, returnTo: string | null | undefined, param?: string): string;
+/**
+ * Read the return target back off the login page's URL, validated.
+ *
+ * This is the half consumers would otherwise have to write themselves, and the
+ * half where forgetting the validation is an open redirect. Accepts a `URL`, a
+ * `URLSearchParams`, or a raw query/href string so it can be called from a load
+ * function, a component, or a plain browser context without ceremony.
+ *
+ * Returns null when absent or unsafe — callers should fall back to their own
+ * default route, never navigate to null.
+ */
+export declare function readReturnTo(source: URL | URLSearchParams | string | null | undefined, param?: string): string | null;
+/**
+ * Storage key for the hosted-mode return target. Namespaced like the other
+ * Bridge-owned sessionStorage entries (`bridge_checkout_session_id`).
+ */
+export declare const RETURN_TO_STORAGE_KEY = "bridge_return_to";
+/**
+ * Hosted mode carries the return target in sessionStorage, NOT in the URL
+ * (TBP-629).
+ *
+ * This is not a stylistic difference from SDK mode — it is forced. Hosted login
+ * hands `redirectUri` to the OAuth authorize call, and bridge-api validates it
+ * with `appConfig.allowedRedirectUris.includes(redirect_uri)`: an exact string
+ * match. Appending `?redirectUri=/deep/link` to the callback URL would fail that
+ * check and break login outright, so the OAuth contract has to stay byte-for-byte
+ * what it is today.
+ *
+ * sessionStorage is sound here for a reason that does NOT hold in general: the
+ * whole round-trip happens in one tab and returns to the origin that wrote the
+ * value. The visitor opens the deep link (tab A), we stash and redirect tab A to
+ * the hosted portal, they sign in, the portal returns tab A to our callback on
+ * our origin — where the value is still sitting.
+ *
+ * Every failure mode here is "fall back to the default route", never "throw":
+ * Safari in private mode throws on setItem, and SSR has no sessionStorage at all.
+ * Losing a deep link is the bug we are fixing; breaking login would be worse.
+ */
+export declare function stashReturnTo(value: string | null | undefined): void;
+/**
+ * Read and CLEAR the stashed return target. One-shot by design: a value left
+ * behind would hijack the next login in this tab, sending somebody to a page
+ * they asked for ten minutes ago.
+ *
+ * Re-sanitized on the way out. The value is same-origin and was sanitized on the
+ * way in, so this is belt-and-braces — but it is the difference between "storage
+ * was tampered with" being a routing oddity and being an open redirect.
+ */
+export declare function takeReturnTo(): string | null;
+//# sourceMappingURL=return-to.d.ts.map

package/dist/return-to.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-to.d.ts","sourceRoot":"","sources":["../src/return-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;mFACmF;AACnF,eAAO,MAAM,uBAAuB,gBAAgB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CA0BhF;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,KAAK,GAAE,MAAgC,GACtC,MAAM,CAMR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,GAAG,GAAG,eAAe,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACzD,KAAK,GAAE,MAAgC,GACtC,MAAM,GAAG,IAAI,CAoBf;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CASpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAS5C"}

package/dist/return-to.js

@@ -0,0 +1,182 @@
+/**
+ * Return-to handling for the SDK-mode route guard (TBP-629).
+ *
+ * When the guard turns an unauthenticated visitor away from a protected route,
+ * the path they asked for has to survive the trip through the login page or the
+ * deep link is lost. In SDK mode that means carrying it as a query parameter on
+ * the consumer's own login route.
+ *
+ * A query parameter is the deliberate choice over sessionStorage. Storage has a
+ * smaller attack surface — nothing attacker-controllable ever enters the URL —
+ * but it does not survive a cross-tab click, and a link mailed to somebody and
+ * opened in a fresh tab is the exact case that prompted this. Storage would
+ * silently fail at the only job it was hired for.
+ *
+ * The cost of that choice is that the value is attacker-controllable, so it is
+ * untrusted input and this module treats it as such. Consumers should not have
+ * to know that: {@link sanitizeReturnTo} is applied on the way in AND on the way
+ * out, so a hostile value cannot reach a navigation call even if a consumer
+ * forgets to check.
+ */
+/** Query parameter carrying the return target. Matches hosted mode's `redirectUri`
+ *  vocabulary on purpose, so consumers do not learn a second name for one idea. */
+export const DEFAULT_RETURN_TO_PARAM = 'redirectUri';
+/**
+ * Reduce an untrusted return target to a same-origin path, or null.
+ *
+ * Only same-origin, path-absolute targets survive. Everything else is rejected
+ * rather than repaired — a value we have to fix up is a value we do not
+ * understand, and "understood well enough to edit" is how open redirects get
+ * shipped.
+ *
+ * Rejected, and why each one matters:
+ *
+ * | Input | Why |
+ * |---|---|
+ * | `https://evil.test/x` | absolute URL — classic open redirect |
+ * | `//evil.test/x` | protocol-relative; browsers treat it as absolute |
+ * | `/\evil.test` , `\\evil.test` | browsers normalise `\` to `/`, so this IS protocol-relative |
+ * | `javascript:alert(1)` | scheme payload; no leading `/` so it fails anyway, rejected explicitly for clarity |
+ * | `x/y` | relative — resolves against whatever page it lands on, so the destination is not knowable here |
+ * | anything with CR/LF/TAB/NUL | header and URL smuggling |
+ *
+ * Note `/\` and `\\` are checked on the RAW string before any normalisation.
+ * Checking after normalising would be checking the wrong string, which is the
+ * usual way this validation is written wrong.
+ */
+export function sanitizeReturnTo(value) {
+    if (typeof value !== 'string')
+        return null;
+    const raw = value.trim();
+    if (raw.length === 0)
+        return null;
+    // Control characters anywhere — smuggling vectors, never legitimate in a path.
+    // Written as escapes, not literal bytes: a raw NUL in a source file is a hazard
+    // in its own right.
+    // eslint-disable-next-line no-control-regex
+    if (/[\u0000-\u001f\u007f]/.test(raw))
+        return null;
+    // Must be path-absolute. This alone kills `javascript:`, `data:`, `https://…`
+    // and every relative form, but the explicit cases below are what a reader
+    // checks this function against.
+    if (!raw.startsWith('/'))
+        return null;
+    // Protocol-relative, in both spellings the browser accepts.
+    if (raw.startsWith('//') || raw.startsWith('/\\'))
+        return null;
+    // A backslash anywhere in the authority position is the same trick with an
+    // extra step; reject the character outright rather than reasoning about where
+    // it is safe.
+    if (raw.includes('\\'))
+        return null;
+    return raw;
+}
+/**
+ * Build the login route with the return target attached.
+ *
+ * Returns `loginRoute` untouched when there is nothing safe to carry, so the
+ * caller never has to branch on it. Preserves any query string the consumer
+ * already put on their `loginRoute`.
+ */
+export function withReturnTo(loginRoute, returnTo, param = DEFAULT_RETURN_TO_PARAM) {
+    const safe = sanitizeReturnTo(returnTo);
+    if (!safe)
+        return loginRoute;
+    const separator = loginRoute.includes('?') ? '&' : '?';
+    return `${loginRoute}${separator}${param}=${encodeURIComponent(safe)}`;
+}
+/**
+ * Read the return target back off the login page's URL, validated.
+ *
+ * This is the half consumers would otherwise have to write themselves, and the
+ * half where forgetting the validation is an open redirect. Accepts a `URL`, a
+ * `URLSearchParams`, or a raw query/href string so it can be called from a load
+ * function, a component, or a plain browser context without ceremony.
+ *
+ * Returns null when absent or unsafe — callers should fall back to their own
+ * default route, never navigate to null.
+ */
+export function readReturnTo(source, param = DEFAULT_RETURN_TO_PARAM) {
+    if (!source)
+        return null;
+    let params;
+    if (source instanceof URLSearchParams) {
+        params = source;
+    }
+    else if (typeof source === 'string') {
+        try {
+            // Works for a full href, and for a bare "?a=b" or "a=b".
+            params = source.includes('://')
+                ? new URL(source).searchParams
+                : new URLSearchParams(source.startsWith('?') ? source.slice(1) : source);
+        }
+        catch {
+            return null;
+        }
+    }
+    else {
+        params = source.searchParams;
+    }
+    return sanitizeReturnTo(params.get(param));
+}
+/**
+ * Storage key for the hosted-mode return target. Namespaced like the other
+ * Bridge-owned sessionStorage entries (`bridge_checkout_session_id`).
+ */
+export const RETURN_TO_STORAGE_KEY = 'bridge_return_to';
+/**
+ * Hosted mode carries the return target in sessionStorage, NOT in the URL
+ * (TBP-629).
+ *
+ * This is not a stylistic difference from SDK mode — it is forced. Hosted login
+ * hands `redirectUri` to the OAuth authorize call, and bridge-api validates it
+ * with `appConfig.allowedRedirectUris.includes(redirect_uri)`: an exact string
+ * match. Appending `?redirectUri=/deep/link` to the callback URL would fail that
+ * check and break login outright, so the OAuth contract has to stay byte-for-byte
+ * what it is today.
+ *
+ * sessionStorage is sound here for a reason that does NOT hold in general: the
+ * whole round-trip happens in one tab and returns to the origin that wrote the
+ * value. The visitor opens the deep link (tab A), we stash and redirect tab A to
+ * the hosted portal, they sign in, the portal returns tab A to our callback on
+ * our origin — where the value is still sitting.
+ *
+ * Every failure mode here is "fall back to the default route", never "throw":
+ * Safari in private mode throws on setItem, and SSR has no sessionStorage at all.
+ * Losing a deep link is the bug we are fixing; breaking login would be worse.
+ */
+export function stashReturnTo(value) {
+    const safe = sanitizeReturnTo(value);
+    if (!safe)
+        return;
+    try {
+        if (typeof sessionStorage === 'undefined')
+            return;
+        sessionStorage.setItem(RETURN_TO_STORAGE_KEY, safe);
+    }
+    catch {
+        // Private mode / quota / disabled storage — deep link is lost, login is not.
+    }
+}
+/**
+ * Read and CLEAR the stashed return target. One-shot by design: a value left
+ * behind would hijack the next login in this tab, sending somebody to a page
+ * they asked for ten minutes ago.
+ *
+ * Re-sanitized on the way out. The value is same-origin and was sanitized on the
+ * way in, so this is belt-and-braces — but it is the difference between "storage
+ * was tampered with" being a routing oddity and being an open redirect.
+ */
+export function takeReturnTo() {
+    try {
+        if (typeof sessionStorage === 'undefined')
+            return null;
+        const raw = sessionStorage.getItem(RETURN_TO_STORAGE_KEY);
+        sessionStorage.removeItem(RETURN_TO_STORAGE_KEY);
+        return sanitizeReturnTo(raw);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=return-to.js.map

package/dist/return-to.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-to.js","sourceRoot":"","sources":["../src/return-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;mFACmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,+EAA+E;IAC/E,gFAAgF;IAChF,oBAAoB;IACpB,4CAA4C;IAC5C,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,8EAA8E;IAC9E,0EAA0E;IAC1E,gCAAgC;IAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,4DAA4D;IAC5D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,2EAA2E;IAC3E,8EAA8E;IAC9E,cAAc;IACd,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,QAAmC,EACnC,QAAgB,uBAAuB;IAEvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC;IAE7B,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAyD,EACzD,QAAgB,uBAAuB;IAEvC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAuB,CAAC;IAC5B,IAAI,MAAM,YAAY,eAAe,EAAE,CAAC;QACtC,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC7B,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY;gBAC9B,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;IAC/B,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,KAAgC;IAC5D,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC;QACH,IAAI,OAAO,cAAc,KAAK,WAAW;YAAE,OAAO;QAClD,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,IAAI,OAAO,cAAc,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC1D,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;QACjD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/route-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-guard.d.ts","sourceRoot":"","sources":["../src/route-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAGV,cAAc,EACd,UAAU,EACV,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAsBpB,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,gBAAgB,EAC7B,UAAU,EAAE,cAAc,EAC1B,eAAe,EAAE,MAAM,OAAO,EAC9B,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,MAAM,EAC3D,YAAY,EAAE,kBAAkB,EAChC,MAAM,EAAE,MAAM,GACb,UAAU,CAwEZ"}
+{"version":3,"file":"route-guard.d.ts","sourceRoot":"","sources":["../src/route-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAGV,cAAc,EACd,UAAU,EACV,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAsBpB,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,gBAAgB,EAC7B,UAAU,EAAE,cAAc,EAC1B,eAAe,EAAE,MAAM,OAAO,EAC9B,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,MAAM,EAC3D,YAAY,EAAE,kBAAkB,EAChC,MAAM,EAAE,MAAM,GACb,UAAU,CAwHZ"}

package/dist/route-guard.js

@@ -1,3 +1,4 @@
+import { sanitizeReturnTo } from './return-to.js';
 import { useBridge } from './billing/use-bridge.js';
 function escapeRegex(text) {
     return text.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
@@ -66,9 +67,51 @@ export function createRouteGuard(guardConfig, authConfig, isAuthenticated, creat
     function getLoginRedirect() {
         return createLoginUrl();
     }
-    async function getNavigationDecision(pathname) {
+    /**
+     * TBP-629 — decide what the visitor should be sent back to after logging in.
+     *
+     * Returns null rather than a best guess whenever the answer is not clearly
+     * safe and useful. A null here just means the consumer falls back to its
+     * `defaultRedirectRoute`, i.e. exactly the old behaviour, so failing closed
+     * costs nothing.
+     *
+     * The login route excludes itself. Without that, a visitor bounced through
+     * `/auth/login` comes back carrying `?redirectUri=/auth/login`, which either
+     * loops or strands them on a login form they have already completed — a
+     * worse outcome than the bug this is fixing.
+     */
+    function resolveReturnTo(attempted) {
+        const returnToConfig = guardConfig.returnTo;
+        if (returnToConfig?.enabled === false)
+            return null;
+        const safe = sanitizeReturnTo(attempted);
+        if (!safe)
+            return null;
+        // Compare paths only — a query string must not let `/auth/login?x=1` slip
+        // past an exclusion written as `/auth/login`.
+        const path = safe.split('?')[0];
+        const loginRoute = returnToConfig?.loginRoute;
+        if (loginRoute && path === loginRoute.split('?')[0])
+            return null;
+        const excluded = returnToConfig?.exclude ?? [];
+        if (excluded.some((pattern) => toRegExp(pattern).test(path)))
+            return null;
+        // A public route is never what the guard turned somebody away from, and
+        // sending them "back" to one after login is noise.
+        if (isPublicRoute(path))
+            return null;
+        return safe;
+    }
+    async function getNavigationDecision(pathname, attempted) {
         if (shouldRedirectToLogin(pathname)) {
-            return { type: 'login', loginUrl: getLoginRedirect() };
+            // Fall back to the bare pathname when the caller did not supply the full
+            // attempted URL, so older adapters still preserve something useful.
+            const returnTo = resolveReturnTo(attempted ?? pathname);
+            return {
+                type: 'login',
+                loginUrl: getLoginRedirect(),
+                ...(returnTo ? { returnTo } : {}),
+            };
         }
         const redirectTo = await checkRouteRestrictions(pathname);
         if (redirectTo) {
@@ -83,6 +126,7 @@ export function createRouteGuard(guardConfig, authConfig, isAuthenticated, creat
         checkRouteRestrictions,
         getLoginRedirect,
         getNavigationDecision,
+        resolveReturnTo,
     };
 }
 //# sourceMappingURL=route-guard.js.map

package/dist/route-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-guard.js","sourceRoot":"","sources":["../src/route-guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAWpD,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAwB;IACxC,IAAI,OAAO,YAAY,MAAM;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,KAAkB;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAA6B,EAC7B,UAA0B,EAC1B,eAA8B,EAC9B,cAA2D,EAC3D,YAAgC,EAChC,MAAc;IAEd,SAAS,aAAa,CAAC,QAAgB;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,OAAO,CAAC,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,KAAK,QAAQ,CAAC;IACjE,CAAC;IAED,SAAS,gBAAgB,CAAC,QAAgB;QACxC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,SAAS,qBAAqB,CAAC,QAAgB;QAC7C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,UAAU,uBAAuB,CAAC,GAAoB;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,QAAgB;QACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACzC,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,4BAA4B,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,gBAAgB;QACvB,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,UAAU,qBAAqB,CAAC,QAAgB;QACnD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,aAAa;QACb,gBAAgB;QAChB,qBAAqB;QACrB,sBAAsB;QACtB,gBAAgB;QAChB,qBAAqB;KACtB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"route-guard.js","sourceRoot":"","sources":["../src/route-guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAWpD,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAwB;IACxC,IAAI,OAAO,YAAY,MAAM;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,KAAkB;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAA6B,EAC7B,UAA0B,EAC1B,eAA8B,EAC9B,cAA2D,EAC3D,YAAgC,EAChC,MAAc;IAEd,SAAS,aAAa,CAAC,QAAgB;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,OAAO,CAAC,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,KAAK,QAAQ,CAAC;IACjE,CAAC;IAED,SAAS,gBAAgB,CAAC,QAAgB;QACxC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,SAAS,qBAAqB,CAAC,QAAgB;QAC7C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,UAAU,uBAAuB,CAAC,GAAoB;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,QAAgB;QACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACzC,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,4BAA4B,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,gBAAgB;QACvB,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,SAAS,eAAe,CAAC,SAAoC;QAC3D,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC;QAC5C,IAAI,cAAc,EAAE,OAAO,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAEnD,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,0EAA0E;QAC1E,8CAA8C;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhC,MAAM,UAAU,GAAG,cAAc,EAAE,UAAU,CAAC;QAC9C,IAAI,UAAU,IAAI,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjE,MAAM,QAAQ,GAAG,cAAc,EAAE,OAAO,IAAI,EAAE,CAAC;QAC/C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1E,wEAAwE;QACxE,mDAAmD;QACnD,IAAI,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAErC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,qBAAqB,CAClC,QAAgB,EAChB,SAAkB;QAElB,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;YACxD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,gBAAgB,EAAE;gBAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,aAAa;QACb,gBAAgB;QAChB,qBAAqB;QACrB,sBAAsB;QACtB,gBAAgB;QAChB,qBAAqB;QACrB,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -204,12 +204,53 @@ export interface RouteRule {
 export interface RouteGuardConfig {
     rules: RouteRule[];
     defaultAccess?: 'public' | 'protected';
+    /**
+     * Deep-link preservation for SDK mode (TBP-629).
+     *
+     * Without this the guard sends an unauthenticated visitor to the login route
+     * and forgets what they asked for, so every protected deep link collapses to
+     * `defaultRedirectRoute` after sign-in — silently, with no error.
+     */
+    returnTo?: ReturnToConfig;
+}
+export interface ReturnToConfig {
+    /**
+     * Default true. Set false to keep the pre-TBP-629 behaviour, where every
+     * login lands on the app's default route regardless of what was asked for.
+     */
+    enabled?: boolean;
+    /**
+     * Query parameter carrying the attempted path. Defaults to `redirectUri`,
+     * matching hosted mode rather than inventing a second vocabulary.
+     */
+    param?: string;
+    /**
+     * Paths that must never become a return target, in addition to the login
+     * route itself (which the guard always excludes). Accepts the same
+     * string-with-`*` or RegExp forms as `RouteRule.match`.
+     *
+     * The point is to stop a bounce through an auth screen coming back as
+     * `?redirectUri=/auth/login`, which either loops or strands the visitor.
+     */
+    exclude?: (string | RegExp)[];
+    /**
+     * The app's login route, so the guard can exclude it from being its own
+     * destination. Framework adapters pass this from their own config; consumers
+     * of `createRouteGuard` directly can set it here.
+     */
+    loginRoute?: string;
 }
 export type NavigationDecision = {
     type: 'allow';
 } | {
     type: 'login';
     loginUrl: string;
+    /**
+     * The path+query the visitor was turned away from, sanitized and safe to
+     * navigate to, or undefined when there is nothing worth carrying (opted
+     * out, excluded, or the attempt was not supplied). TBP-629.
+     */
+    returnTo?: string;
 } | {
     type: 'redirect';
     to: string;
@@ -220,7 +261,14 @@ export interface RouteGuard {
     shouldRedirectToLogin(pathname: string): boolean;
     checkRouteRestrictions(pathname: string): Promise<string | null>;
     getLoginRedirect(): string;
-    getNavigationDecision(pathname: string): Promise<NavigationDecision>;
+    /**
+     * `attempted` is the full path+query the visitor asked for. Optional so the
+     * existing single-argument callers keep working unchanged; supplying it is
+     * what turns deep-link preservation on.
+     */
+    getNavigationDecision(pathname: string, attempted?: string): Promise<NavigationDecision>;
+    /** Sanitized return target for a path, or null. Exposed for adapters. */
+    resolveReturnTo(attempted: string | null | undefined): string | null;
 }
 /** Token storage interface — pluggable */
 export interface TokenStorage {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IAEd,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;+CAC2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;gDAC4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iFAAiF;IACjF,OAAO,CAAC,EAAE,YAAY,CAAC;IAEvB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAe,SAAQ,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACjF,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oCAAoC;AACpC,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,yCAAyC;AACzC,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,kGAAkG;IAClG,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,gCAAgC;AAChC,MAAM,MAAM,SAAS,GACjB,iBAAiB,GACjB,uBAAuB,GACvB,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,eAAe,CAAC;AAEpB,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,wCAAwC;AACxC,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,gCAAgC;AAChC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,uBAAuB;AACvB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,cAAc,GAAG,mBAAmB,GAAG,uBAAuB,GAAG,YAAY,CAAC;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAwB;AACxB,MAAM,MAAM,eAAe,GACvB,MAAM,GACN;IAAE,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GACjB;IAAE,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEtB,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CACxC;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5C,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,gBAAgB,IAAI,MAAM,CAAC;IAC3B,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtE;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB;oGACgG;IAChG,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,gHAAgH;IAChH,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACtB;AAED,qCAAqC;AACrC,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,6BAA6B;AAC7B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;CACvD;AAED,kCAAkC;AAClC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,iEAAiE;AACjE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAC;IACnB;oEACgE;IAChE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,QAAQ,CAAC;IACvB,aAAa,EAAE,IAAI,CAAC;IACpB,sBAAsB,EAAE,QAAQ,CAAC;IACjC,2BAA2B,EAAE,KAAK,CAAC;IACnC,mBAAmB,EAAE,SAAS,CAAC;IAC/B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,KAAK,CAAC;IACpB,wBAAwB,EAAE,QAAQ,CAAC;IACnC,oBAAoB,EAAE,mBAAmB,CAAC;CAC3C;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC;AAIzD,kCAAkC;AAClC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,oDAAoD;AACpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IAEd,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;+CAC2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;gDAC4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iFAAiF;IACjF,OAAO,CAAC,EAAE,YAAY,CAAC;IAEvB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAe,SAAQ,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACjF,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,6CAA6C;AAC7C,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oCAAoC;AACpC,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,yCAAyC;AACzC,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,kGAAkG;IAClG,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,gCAAgC;AAChC,MAAM,MAAM,SAAS,GACjB,iBAAiB,GACjB,uBAAuB,GACvB,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,eAAe,CAAC;AAEpB,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,wCAAwC;AACxC,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,gCAAgC;AAChC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,uBAAuB;AACvB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,cAAc,GAAG,mBAAmB,GAAG,uBAAuB,GAAG,YAAY,CAAC;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAwB;AACxB,MAAM,MAAM,eAAe,GACvB,MAAM,GACN;IAAE,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,GACjB;IAAE,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEtB,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC9B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5C,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjD,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,gBAAgB,IAAI,MAAM,CAAC;IAC3B;;;;OAIG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzF,yEAAyE;IACzE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAAC;CACtE;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB;oGACgG;IAChG,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,gHAAgH;IAChH,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACtB;AAED,qCAAqC;AACrC,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,6BAA6B;AAC7B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;CACvD;AAED,kCAAkC;AAClC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,iEAAiE;AACjE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAC;IACnB;oEACgE;IAChE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,mCAAmC;AACnC,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,QAAQ,CAAC;IACvB,aAAa,EAAE,IAAI,CAAC;IACpB,sBAAsB,EAAE,QAAQ,CAAC;IACjC,2BAA2B,EAAE,KAAK,CAAC;IACnC,mBAAmB,EAAE,SAAS,CAAC;IAC/B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,KAAK,CAAC;IACpB,wBAAwB,EAAE,QAAQ,CAAC;IACnC,oBAAoB,EAAE,mBAAmB,CAAC;CAC3C;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAAC;AAIzD,kCAAkC;AAClC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B;IACzC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,oDAAoD;AACpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;CACnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nebulr-group/bridge-auth-core",
-  "version": "0.4.6",
+  "version": "0.5.0",
   "description": "Framework-agnostic auth core for Bridge platform",
   "type": "module",
   "main": "./dist/index.js",