@owlmeans/client-auth 0.1.18-rc.12 → 0.1.18-rc.13

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/client-auth",
-  "version": "0.1.18-rc.11",
-  "generatedAt": "2026-08-27T21:16:47.136Z",
+  "version": "0.1.18-rc.12",
+  "generatedAt": "2026-08-27T21:18:31.379Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/client-auth/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/client-auth
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-auth": "^0.1.18-rc.11"` in `dependencies`
+**Install:** `"@owlmeans/client-auth": "^0.1.18-rc.12"` in `dependencies`
 
 ## Key Exports
 

package/build/login/adopt.d.ts

@@ -12,4 +12,13 @@ import type { LoginContext } from './types.js';
  * moment any of it changes.
  */
 export declare const adoptToken: (ctx: LoginContext, token: string) => Promise<void>;
+/**
+ * The one path this context's authentication is dropped, and the exact mirror of {@link adoptToken}.
+ *
+ * `undefined`, not `null`: `undefined` is the declared clearing value, and on the web the auth
+ * service reacts to it by navigating to the dispatcher. Everything that signs a user out goes
+ * through here — the hook, both browser plugins and the surrogate screen — so there is one place
+ * where "signed out" is defined rather than four that agree until one of them changes.
+ */
+export declare const revokeToken: (ctx: LoginContext) => Promise<void>;
 //# sourceMappingURL=adopt.d.ts.map

package/build/login/adopt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../src/login/adopt.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU,QAAe,YAAY,SAAS,MAAM,KAAG,OAAO,CAAC,IAAI,CAE/E,CAAA"}
+{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../src/login/adopt.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,UAAU,QAAe,YAAY,SAAS,MAAM,KAAG,OAAO,CAAC,IAAI,CAE/E,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,QAAe,YAAY,KAAG,OAAO,CAAC,IAAI,CAEjE,CAAA"}

package/build/login/adopt.js

@@ -14,4 +14,15 @@ import { DEFAULT_ALIAS as AUTH_ALIAS } from '../consts.js';
 export const adoptToken = async (ctx, token) => {
     await ctx.service(AUTH_ALIAS).update(token);
 };
+/**
+ * The one path this context's authentication is dropped, and the exact mirror of {@link adoptToken}.
+ *
+ * `undefined`, not `null`: `undefined` is the declared clearing value, and on the web the auth
+ * service reacts to it by navigating to the dispatcher. Everything that signs a user out goes
+ * through here — the hook, both browser plugins and the surrogate screen — so there is one place
+ * where "signed out" is defined rather than four that agree until one of them changes.
+ */
+export const revokeToken = async (ctx) => {
+    await ctx.service(AUTH_ALIAS).update(undefined);
+};
 //# sourceMappingURL=adopt.js.map

package/build/login/adopt.js.map

@@ -1 +1 @@
-{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/login/adopt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,cAAc,CAAA;AAG1D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAiB,EAAE,KAAa,EAAiB,EAAE;IAClF,MAAM,GAAG,CAAC,OAAO,CAAc,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1D,CAAC,CAAA"}
+{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/login/adopt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,cAAc,CAAA;AAG1D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAiB,EAAE,KAAa,EAAiB,EAAE;IAClF,MAAM,GAAG,CAAC,OAAO,CAAc,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC1D,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,GAAiB,EAAiB,EAAE;IACpE,MAAM,GAAG,CAAC,OAAO,CAAc,UAAU,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;AAC9D,CAAC,CAAA"}

package/build/login/consts.d.ts

@@ -2,17 +2,38 @@ export declare const DEFAULT_ALIAS = "login-service";
 export declare const LOGIN_SERVICE = "login-service";
 /** Priority of a plugin that makes no claim about the environment. */
 export declare const DEFAULT_LOGIN_PRIORITY = 0;
+/** Order given to a method that declares none. */
+export declare const DEFAULT_METHOD_ORDER = 100;
 /**
- * Name given to the surrogate login window, and the marker it records about itself.
+ * Name given to the surrogate login window, the marker it records about itself, and the values the
+ * two documents exchange.
  *
- * These values are a wire protocol between two documents that may be running different builds —
- * an opener holding an older bundle and a surrogate freshly loaded, or the reverse. They are
- * therefore fixed, and must never be "tidied" to match a newer vocabulary.
+ * These are a wire protocol between two documents that may be running different builds — an opener
+ * holding an older bundle and a surrogate freshly loaded, or the reverse. They are therefore fixed,
+ * and must never be "tidied" to match a newer vocabulary. That applies to the query names and the
+ * message types added later just as much as to the original three.
  */
 export declare const LOGIN_SURROGATE_NAME = "owlmeans-oidc-login";
 export declare const LOGIN_TOKEN_MESSAGE = "owlmeans:oidc:popup-token";
+export declare const LOGIN_LOGOUT_MESSAGE = "owlmeans:oidc:popup-logout";
 export declare const LOGIN_SURROGATE_MARKER = "_owlmeans-oidc-popup";
 export declare const LOGIN_SURROGATE_FEATURES = "popup=yes,width=520,height=760";
 /** How often a surrogate window is checked for having been closed by the user. */
 export declare const LOGIN_WATCH_INTERVAL = 500;
+/** Carries WHY the surrogate window was opened across the window boundary. */
+export declare const LOGIN_INTENT_QUERY = "intent";
+/**
+ * Carries the address the surrogate should run, so the flow parameters the opener's URL held are
+ * forwarded rather than discarded.
+ */
+export declare const LOGIN_NEXT_QUERY = "next";
+/**
+ * Carries the method the user already chose, one window up.
+ *
+ * A surrogate acting on it is not an auto-redirect in the "never choose for the user" sense: the
+ * choice was made, by a person, in the document that opened this one.
+ */
+export declare const LOGIN_METHOD_QUERY = "method";
+/** Where a browser records that it agreed to one exact set of legal documents. */
+export declare const LOGIN_TERMS_STORAGE = "_owlmeans-login-terms";
 //# sourceMappingURL=consts.d.ts.map

package/build/login/consts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../src/login/consts.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,eAAO,MAAM,aAAa,kBAAgB,CAAA;AAE1C,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,wBAAwB,CAAA;AAEzD,eAAO,MAAM,mBAAmB,8BAA8B,CAAA;AAE9D,eAAO,MAAM,sBAAsB,yBAAyB,CAAA;AAE5D,eAAO,MAAM,wBAAwB,mCAAmC,CAAA;AAExE,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,MAAM,CAAA"}
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../src/login/consts.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,eAAO,MAAM,aAAa,kBAAgB,CAAA;AAE1C,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC,kDAAkD;AAClD,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,wBAAwB,CAAA;AAEzD,eAAO,MAAM,mBAAmB,8BAA8B,CAAA;AAE9D,eAAO,MAAM,oBAAoB,+BAA+B,CAAA;AAEhE,eAAO,MAAM,sBAAsB,yBAAyB,CAAA;AAE5D,eAAO,MAAM,wBAAwB,mCAAmC,CAAA;AAExE,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SAAS,CAAA;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,0BAA0B,CAAA"}

package/build/login/consts.js

@@ -2,17 +2,38 @@ export const DEFAULT_ALIAS = 'login-service';
 export const LOGIN_SERVICE = DEFAULT_ALIAS;
 /** Priority of a plugin that makes no claim about the environment. */
 export const DEFAULT_LOGIN_PRIORITY = 0;
+/** Order given to a method that declares none. */
+export const DEFAULT_METHOD_ORDER = 100;
 /**
- * Name given to the surrogate login window, and the marker it records about itself.
+ * Name given to the surrogate login window, the marker it records about itself, and the values the
+ * two documents exchange.
  *
- * These values are a wire protocol between two documents that may be running different builds —
- * an opener holding an older bundle and a surrogate freshly loaded, or the reverse. They are
- * therefore fixed, and must never be "tidied" to match a newer vocabulary.
+ * These are a wire protocol between two documents that may be running different builds — an opener
+ * holding an older bundle and a surrogate freshly loaded, or the reverse. They are therefore fixed,
+ * and must never be "tidied" to match a newer vocabulary. That applies to the query names and the
+ * message types added later just as much as to the original three.
  */
 export const LOGIN_SURROGATE_NAME = 'owlmeans-oidc-login';
 export const LOGIN_TOKEN_MESSAGE = 'owlmeans:oidc:popup-token';
+export const LOGIN_LOGOUT_MESSAGE = 'owlmeans:oidc:popup-logout';
 export const LOGIN_SURROGATE_MARKER = '_owlmeans-oidc-popup';
 export const LOGIN_SURROGATE_FEATURES = 'popup=yes,width=520,height=760';
 /** How often a surrogate window is checked for having been closed by the user. */
 export const LOGIN_WATCH_INTERVAL = 500;
+/** Carries WHY the surrogate window was opened across the window boundary. */
+export const LOGIN_INTENT_QUERY = 'intent';
+/**
+ * Carries the address the surrogate should run, so the flow parameters the opener's URL held are
+ * forwarded rather than discarded.
+ */
+export const LOGIN_NEXT_QUERY = 'next';
+/**
+ * Carries the method the user already chose, one window up.
+ *
+ * A surrogate acting on it is not an auto-redirect in the "never choose for the user" sense: the
+ * choice was made, by a person, in the document that opened this one.
+ */
+export const LOGIN_METHOD_QUERY = 'method';
+/** Where a browser records that it agreed to one exact set of legal documents. */
+export const LOGIN_TERMS_STORAGE = '_owlmeans-login-terms';
 //# sourceMappingURL=consts.js.map

package/build/login/consts.js.map

@@ -1 +1 @@
-{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../src/login/consts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAA;AAE5C,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAA;AAE1C,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAEvC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAA;AAEzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAA;AAE9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAA;AAE5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAA;AAExE,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAA"}
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../src/login/consts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAA;AAE5C,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAA;AAE1C,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAEvC,kDAAkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAEvC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAA;AAEzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAA;AAE9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAA;AAEhE,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAA;AAE5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAA;AAExE,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAEvC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAA"}

package/build/login/credit.d.ts

@@ -0,0 +1,19 @@
+import type { BrandSettings, LoginCreditConfig } from '@owlmeans/config';
+export interface ResolvedCredit {
+    /** Whether "Powered by OwlMeans" is rendered. */
+    poweredBy: boolean;
+    /** The product and organization line, already composed. Null when there is nothing to say. */
+    line: string | null;
+}
+/**
+ * What the bottom of the sign-in screen says.
+ *
+ * The organization falls back to its slug because an organization record carries no readable name
+ * — so "no name" is the ordinary case, not an error, and a screen that rendered an empty line for
+ * it would be worse than one that renders the slug.
+ *
+ * `line` replaces everything when an app supplies it: a product with its own legal wording should
+ * not have to defeat a composition rule to use it.
+ */
+export declare const resolveCredit: (cfg?: LoginCreditConfig, brand?: BrandSettings, service?: string) => ResolvedCredit;
+//# sourceMappingURL=credit.d.ts.map

package/build/login/credit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit.d.ts","sourceRoot":"","sources":["../../src/login/credit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAExE,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,SAAS,EAAE,OAAO,CAAA;IAClB,8FAA8F;IAC9F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,SAClB,iBAAiB,UAAU,aAAa,YAAY,MAAM,KAC/D,cAeF,CAAA"}

package/build/login/credit.js

@@ -0,0 +1,24 @@
+/**
+ * What the bottom of the sign-in screen says.
+ *
+ * The organization falls back to its slug because an organization record carries no readable name
+ * — so "no name" is the ordinary case, not an error, and a screen that rendered an empty line for
+ * it would be worse than one that renders the slug.
+ *
+ * `line` replaces everything when an app supplies it: a product with its own legal wording should
+ * not have to defeat a composition rule to use it.
+ */
+export const resolveCredit = (cfg, brand, service) => {
+    const poweredBy = cfg?.poweredBy ?? true;
+    if (cfg?.line != null && cfg.line !== '') {
+        return { poweredBy, line: cfg.line };
+    }
+    const product = cfg?.product ?? brand?.name ?? service ?? null;
+    const organization = cfg?.organization ?? brand?.organization
+        ?? cfg?.entity ?? brand?.entity ?? null;
+    const line = product != null && organization != null && product !== organization
+        ? `${product} — ${organization}`
+        : product ?? organization;
+    return { poweredBy, line: line != null && line !== '' ? line : null };
+};
+//# sourceMappingURL=credit.js.map

package/build/login/credit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit.js","sourceRoot":"","sources":["../../src/login/credit.ts"],"names":[],"mappings":"AASA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,GAAuB,EAAE,KAAqB,EAAE,OAAgB,EAChD,EAAE;IAClB,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,IAAI,IAAI,CAAA;IACxC,IAAI,GAAG,EAAE,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACzC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,OAAO,IAAI,IAAI,CAAA;IAC9D,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,KAAK,EAAE,YAAY;WACxD,GAAG,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,CAAA;IAEzC,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI,IAAI,YAAY,IAAI,IAAI,IAAI,OAAO,KAAK,YAAY;QAC9E,CAAC,CAAC,GAAG,OAAO,MAAM,YAAY,EAAE;QAChC,CAAC,CAAC,OAAO,IAAI,YAAY,CAAA;IAE3B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AACvE,CAAC,CAAA"}

package/build/login/hook.d.ts

@@ -19,8 +19,19 @@ export declare const useLogin: (target?: string) => readonly [string, (event?: M
 /**
  * Wiring for a "Log out" control.
  *
- * `update(undefined)` — not `null`. The declared clearing value is `undefined`, and on the web the
- * auth service reacts to it by navigating to the dispatcher, so this is the whole logout.
+ * One control, one handler, no decision — the mirror of {@link useLogin}. Where the session has to
+ * be ended (here, or one window up in a surrogate whose storage partition this document cannot
+ * reach) is the login plugin's call.
+ *
+ * NOT async, and nothing is awaited before delegating: logging out of a framed application opens a
+ * window, and a window opened after the gesture has finished being handled is eaten by the popup
+ * blocker. The surrogate entrypoint is resolved INSIDE the hook for the same reason `useLogin`
+ * resolves the dispatcher there.
+ *
+ * The return shape stays a bare handler rather than `useLogin`'s tuple: a logout control has no
+ * address to point at, and every generated application carries a copy of a component that writes
+ * `const onLogOut = useLogout()`. `(event?: MouseEvent) => void` is assignable to `() => void`, so
+ * `onClick={onLogOut}` keeps compiling everywhere.
  */
-export declare const useLogout: () => (() => void);
+export declare const useLogout: (target?: string) => ((event?: MouseEvent) => void);
 //# sourceMappingURL=hook.d.ts.map

package/build/login/hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/login/hook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAUvC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,YAAa,MAAM,KAAG,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,IAAI,CAmBxF,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,QAAO,CAAC,MAAM,IAAI,CAQvC,CAAA"}
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/login/hook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAUvC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,YAAa,MAAM,KAAG,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,IAAI,CAmBxF,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,SAAS,YAAa,MAAM,KAAG,CAAC,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,IAAI,CAcxE,CAAA"}

package/build/login/hook.js

@@ -1,8 +1,9 @@
 import { useCallback } from 'react';
 import { useContext, useNavigate } from '@owlmeans/client';
 import { DISPATCHER } from '@owlmeans/auth';
-import { DEFAULT_ALIAS as AUTH_ALIAS } from '../consts.js';
+import { LoginIntent } from './types.js';
 import { LOGIN_SERVICE } from './consts.js';
+import { surrogatePath } from './surrogate.js';
 /**
  * Wiring for a "Log in" control: where it points, and what it does when clicked.
  *
@@ -40,15 +41,32 @@ export const useLogin = (target) => {
 /**
  * Wiring for a "Log out" control.
  *
- * `update(undefined)` — not `null`. The declared clearing value is `undefined`, and on the web the
- * auth service reacts to it by navigating to the dispatcher, so this is the whole logout.
+ * One control, one handler, no decision — the mirror of {@link useLogin}. Where the session has to
+ * be ended (here, or one window up in a surrogate whose storage partition this document cannot
+ * reach) is the login plugin's call.
+ *
+ * NOT async, and nothing is awaited before delegating: logging out of a framed application opens a
+ * window, and a window opened after the gesture has finished being handled is eaten by the popup
+ * blocker. The surrogate entrypoint is resolved INSIDE the hook for the same reason `useLogin`
+ * resolves the dispatcher there.
+ *
+ * The return shape stays a bare handler rather than `useLogin`'s tuple: a logout control has no
+ * address to point at, and every generated application carries a copy of a component that writes
+ * `const onLogOut = useLogout()`. `(event?: MouseEvent) => void` is assignable to `() => void`, so
+ * `onClick={onLogOut}` keeps compiling everywhere.
  */
-export const useLogout = () => {
+export const useLogout = (target) => {
     const context = useContext();
-    return useCallback(() => {
-        void context.service(AUTH_ALIAS).update(undefined)
-            .then(() => { window.location.reload(); })
-            .catch(console.error);
-    }, [context]);
+    const nav = useNavigate();
+    const path = surrogatePath(context, { intent: LoginIntent.Logout });
+    return useCallback((event) => {
+        event?.preventDefault();
+        const login = context.service(LOGIN_SERVICE);
+        void login.logout({
+            // An application whose entrypoint list predates the surrogate route logs out in place.
+            url: path ?? '',
+            ...(target != null ? { navigate: () => { nav.go(target); } } : {}),
+        });
+    }, [context, path, target]);
 };
 //# sourceMappingURL=hook.js.map

package/build/login/hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/login/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG1D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,cAAc,CAAA;AAG1D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAmD,EAAE;IAC3F,MAAM,OAAO,GAAG,UAAU,EAA8B,CAAA;IACxD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAmB,UAAU,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,CAAA;IAEjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,KAAkB,EAAE,EAAE;QACjD,KAAK,EAAE,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAe,aAAa,CAAC,CAAA;QAC1D,KAAK,KAAK,CAAC,KAAK,CAAC;YACf,GAAG,EAAE,IAAI;YACT,MAAM;YACN,uFAAuF;YACvF,uCAAuC;YACvC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,UAAU,CAAC,CAAA,CAAC,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAE3B,OAAO,CAAC,IAAI,EAAE,OAAO,CAAU,CAAA;AACjC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAiB,EAAE;IAC1C,MAAM,OAAO,GAAG,UAAU,EAA8B,CAAA;IAExD,OAAO,WAAW,CAAC,GAAG,EAAE;QACtB,KAAK,OAAO,CAAC,OAAO,CAAc,UAAU,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;aAC5D,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,CAAC;aACxC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;AACf,CAAC,CAAA"}
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/login/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG1D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAmD,EAAE;IAC3F,MAAM,OAAO,GAAG,UAAU,EAA8B,CAAA;IACxD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAmB,UAAU,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,CAAA;IAEjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,KAAkB,EAAE,EAAE;QACjD,KAAK,EAAE,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAe,aAAa,CAAC,CAAA;QAC1D,KAAK,KAAK,CAAC,KAAK,CAAC;YACf,GAAG,EAAE,IAAI;YACT,MAAM;YACN,uFAAuF;YACvF,uCAAuC;YACvC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,UAAU,CAAC,CAAA,CAAC,CAAC;SACjD,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAE3B,OAAO,CAAC,IAAI,EAAE,OAAO,CAAU,CAAA;AACjC,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAe,EAAkC,EAAE;IAC3E,MAAM,OAAO,GAAG,UAAU,EAA8B,CAAA;IACxD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IACzB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAkC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAA;IAE9F,OAAO,WAAW,CAAC,CAAC,KAAkB,EAAE,EAAE;QACxC,KAAK,EAAE,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAe,aAAa,CAAC,CAAA;QAC1D,KAAK,KAAK,CAAC,MAAM,CAAC;YAChB,uFAAuF;YACvF,GAAG,EAAE,IAAI,IAAI,EAAE;YACf,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AAC7B,CAAC,CAAA"}

package/build/login/i18n/be.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Уваход",
+        "subtitle": "Абярыце спосаб уваходу.",
+        "busy": "Адкрываем акно ўваходу…",
+        "empty": "Для гэтай праграмы не наладжаны ніводзін спосаб уваходу.",
+        "method": {
+            "google": "Працягнуць з Google",
+            "oidc": "Працягнуць з {{provider}}",
+            "oidc-default": "Увайсці",
+            "oidc-client": "Працягнуць з {{provider}}",
+            "basic-ed25519": "Увайсці з ключом",
+            "pk-supervisor": "Сакрэтны ключ (аператар)",
+            "wallet-consumer": "Гаманец OwlMeans ID",
+            "one-time-token": "Увайсці па кодзе з ліста",
+            "fallback": "Працягнуць з {{method}}"
+        },
+        "terms": {
+            "agreement": "Я прачытаў(-ла) і прымаю {{terms}} і {{privacy}}.",
+            "terms": "Умовы карыстання",
+            "privacy": "Палітыку прыватнасці",
+            "cookies": "Палітыку файлаў cookie",
+            "required": "Каб працягнуць, пацвердзіце Умовы карыстання і Палітыку прыватнасці."
+        },
+        "consent": {
+            "required": "Уваход захоўвае сеансавы файл cookie. Прыміце неабходныя файлы cookie, каб працягнуць."
+        },
+        "credit": {
+            "powered": "Працуе на OwlMeans"
+        },
+        "error": {
+            "failed": "Уваход не завершаны. Паспрабуйце яшчэ раз.",
+            "blocked": "Акно ўваходу заблакавана. Дазвольце ўсплывальныя вокны для гэтага сайта і паспрабуйце зноў."
+        },
+        "orphaned": "Уваход выкананы. Можаце закрыць гэтае акно і вярнуцца ў праграму."
+    }
+}

package/build/login/i18n/de.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Anmelden",
+        "subtitle": "Wählen Sie, wie Sie fortfahren möchten.",
+        "busy": "Anmeldung wird geöffnet…",
+        "empty": "Für diese Anwendung ist keine Anmeldemethode konfiguriert.",
+        "method": {
+            "google": "Mit Google fortfahren",
+            "oidc": "Mit {{provider}} fortfahren",
+            "oidc-default": "Anmelden",
+            "oidc-client": "Mit {{provider}} fortfahren",
+            "basic-ed25519": "Mit einem Schlüssel anmelden",
+            "pk-supervisor": "Geheimer Schlüssel (Betreiber)",
+            "wallet-consumer": "OwlMeans-ID-Wallet",
+            "one-time-token": "Mit einem E-Mail-Code anmelden",
+            "fallback": "Mit {{method}} fortfahren"
+        },
+        "terms": {
+            "agreement": "Ich habe die {{terms}} und die {{privacy}} gelesen und stimme ihnen zu.",
+            "terms": "Allgemeinen Geschäftsbedingungen",
+            "privacy": "Datenschutzerklärung",
+            "cookies": "Cookie-Richtlinie",
+            "required": "Bitte bestätigen Sie die Allgemeinen Geschäftsbedingungen und die Datenschutzerklärung, um fortzufahren."
+        },
+        "consent": {
+            "required": "Bei der Anmeldung wird ein Sitzungs-Cookie gespeichert. Akzeptieren Sie die notwendigen Cookies, um fortzufahren."
+        },
+        "credit": {
+            "powered": "Betrieben mit OwlMeans"
+        },
+        "error": {
+            "failed": "Die Anmeldung wurde nicht abgeschlossen. Bitte versuchen Sie es erneut.",
+            "blocked": "Das Anmeldefenster wurde blockiert. Erlauben Sie Pop-ups für diese Website und versuchen Sie es erneut."
+        },
+        "orphaned": "Angemeldet. Sie können dieses Fenster schließen und in der Anwendung fortfahren."
+    }
+}

package/build/login/i18n/en.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Sign in",
+        "subtitle": "Choose how you would like to continue.",
+        "busy": "Opening sign-in…",
+        "empty": "No sign-in method is configured for this application.",
+        "method": {
+            "google": "Continue with Google",
+            "oidc": "Continue with {{provider}}",
+            "oidc-default": "Sign in",
+            "oidc-client": "Continue with {{provider}}",
+            "basic-ed25519": "Sign in with a key",
+            "pk-supervisor": "Secret key (operator)",
+            "wallet-consumer": "OwlMeans ID wallet",
+            "one-time-token": "Sign in with an email code",
+            "fallback": "Continue with {{method}}"
+        },
+        "terms": {
+            "agreement": "I have read and agree to the {{terms}} and the {{privacy}}.",
+            "terms": "Terms & Conditions",
+            "privacy": "Privacy Policy",
+            "cookies": "Cookie Policy",
+            "required": "Please confirm the Terms & Conditions and the Privacy Policy to continue."
+        },
+        "consent": {
+            "required": "Signing in stores a session cookie. Accept essential cookies to continue."
+        },
+        "credit": {
+            "powered": "Powered by OwlMeans"
+        },
+        "error": {
+            "failed": "Sign-in did not complete. Please try again.",
+            "blocked": "The sign-in window was blocked. Allow pop-ups for this site and try again."
+        },
+        "orphaned": "Signed in. You can close this window and continue in the application."
+    }
+}

package/build/login/i18n/es.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Iniciar sesión",
+        "subtitle": "Elige cómo quieres continuar.",
+        "busy": "Abriendo el inicio de sesión…",
+        "empty": "No hay ningún método de inicio de sesión configurado para esta aplicación.",
+        "method": {
+            "google": "Continuar con Google",
+            "oidc": "Continuar con {{provider}}",
+            "oidc-default": "Iniciar sesión",
+            "oidc-client": "Continuar con {{provider}}",
+            "basic-ed25519": "Iniciar sesión con una clave",
+            "pk-supervisor": "Clave secreta (operador)",
+            "wallet-consumer": "Cartera OwlMeans ID",
+            "one-time-token": "Iniciar sesión con un código por correo",
+            "fallback": "Continuar con {{method}}"
+        },
+        "terms": {
+            "agreement": "He leído y acepto los {{terms}} y la {{privacy}}.",
+            "terms": "Términos y Condiciones",
+            "privacy": "Política de Privacidad",
+            "cookies": "Política de Cookies",
+            "required": "Confirma los Términos y Condiciones y la Política de Privacidad para continuar."
+        },
+        "consent": {
+            "required": "Iniciar sesión guarda una cookie de sesión. Acepta las cookies esenciales para continuar."
+        },
+        "credit": {
+            "powered": "Con tecnología de OwlMeans"
+        },
+        "error": {
+            "failed": "El inicio de sesión no se completó. Inténtalo de nuevo.",
+            "blocked": "Se bloqueó la ventana de inicio de sesión. Permite las ventanas emergentes para este sitio e inténtalo de nuevo."
+        },
+        "orphaned": "Sesión iniciada. Puedes cerrar esta ventana y continuar en la aplicación."
+    }
+}

package/build/login/i18n/pl.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Zaloguj się",
+        "subtitle": "Wybierz sposób, w jaki chcesz kontynuować.",
+        "busy": "Otwieranie logowania…",
+        "empty": "Dla tej aplikacji nie skonfigurowano żadnej metody logowania.",
+        "method": {
+            "google": "Kontynuuj z Google",
+            "oidc": "Kontynuuj z {{provider}}",
+            "oidc-default": "Zaloguj się",
+            "oidc-client": "Kontynuuj z {{provider}}",
+            "basic-ed25519": "Zaloguj się kluczem",
+            "pk-supervisor": "Klucz tajny (operator)",
+            "wallet-consumer": "Portfel OwlMeans ID",
+            "one-time-token": "Zaloguj się kodem e-mail",
+            "fallback": "Kontynuuj z {{method}}"
+        },
+        "terms": {
+            "agreement": "Przeczytałem(-am) i akceptuję {{terms}} oraz {{privacy}}.",
+            "terms": "Regulamin",
+            "privacy": "Politykę prywatności",
+            "cookies": "Politykę plików cookie",
+            "required": "Aby kontynuować, potwierdź Regulamin i Politykę prywatności."
+        },
+        "consent": {
+            "required": "Logowanie zapisuje plik cookie sesji. Zaakceptuj niezbędne pliki cookie, aby kontynuować."
+        },
+        "credit": {
+            "powered": "Napędzane przez OwlMeans"
+        },
+        "error": {
+            "failed": "Logowanie nie zostało ukończone. Spróbuj ponownie.",
+            "blocked": "Okno logowania zostało zablokowane. Zezwól na wyskakujące okienka dla tej witryny i spróbuj ponownie."
+        },
+        "orphaned": "Zalogowano. Możesz zamknąć to okno i kontynuować w aplikacji."
+    }
+}

package/build/login/i18n/ru.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Вход",
+        "subtitle": "Выберите способ входа.",
+        "busy": "Открываем окно входа…",
+        "empty": "Для этого приложения не настроен ни один способ входа.",
+        "method": {
+            "google": "Продолжить с Google",
+            "oidc": "Продолжить с {{provider}}",
+            "oidc-default": "Войти",
+            "oidc-client": "Продолжить с {{provider}}",
+            "basic-ed25519": "Войти с ключом",
+            "pk-supervisor": "Секретный ключ (оператор)",
+            "wallet-consumer": "Кошелёк OwlMeans ID",
+            "one-time-token": "Войти по коду из письма",
+            "fallback": "Продолжить с {{method}}"
+        },
+        "terms": {
+            "agreement": "Я прочитал(а) и принимаю {{terms}} и {{privacy}}.",
+            "terms": "Условия использования",
+            "privacy": "Политику конфиденциальности",
+            "cookies": "Политику файлов cookie",
+            "required": "Чтобы продолжить, подтвердите Условия использования и Политику конфиденциальности."
+        },
+        "consent": {
+            "required": "Вход сохраняет сессионный файл cookie. Примите необходимые файлы cookie, чтобы продолжить."
+        },
+        "credit": {
+            "powered": "Работает на OwlMeans"
+        },
+        "error": {
+            "failed": "Вход не завершён. Попробуйте ещё раз.",
+            "blocked": "Окно входа заблокировано. Разрешите всплывающие окна для этого сайта и попробуйте снова."
+        },
+        "orphaned": "Вход выполнен. Можете закрыть это окно и вернуться в приложение."
+    }
+}

package/build/login/i18n/uk.json

@@ -0,0 +1,37 @@
+{
+    "login": {
+        "title": "Вхід",
+        "subtitle": "Оберіть спосіб входу.",
+        "busy": "Відкриваємо вікно входу…",
+        "empty": "Для цього застосунку не налаштовано жодного способу входу.",
+        "method": {
+            "google": "Продовжити з Google",
+            "oidc": "Продовжити з {{provider}}",
+            "oidc-default": "Увійти",
+            "oidc-client": "Продовжити з {{provider}}",
+            "basic-ed25519": "Увійти з ключем",
+            "pk-supervisor": "Секретний ключ (оператор)",
+            "wallet-consumer": "Гаманець OwlMeans ID",
+            "one-time-token": "Увійти за кодом з листа",
+            "fallback": "Продовжити з {{method}}"
+        },
+        "terms": {
+            "agreement": "Я прочитав(-ла) і приймаю {{terms}} та {{privacy}}.",
+            "terms": "Умови користування",
+            "privacy": "Політику конфіденційності",
+            "cookies": "Політику файлів cookie",
+            "required": "Щоб продовжити, підтвердьте Умови користування та Політику конфіденційності."
+        },
+        "consent": {
+            "required": "Вхід зберігає сеансовий файл cookie. Прийміть необхідні файли cookie, щоб продовжити."
+        },
+        "credit": {
+            "powered": "Працює на OwlMeans"
+        },
+        "error": {
+            "failed": "Вхід не завершено. Спробуйте ще раз.",
+            "blocked": "Вікно входу заблоковано. Дозвольте спливаючі вікна для цього сайту та спробуйте знову."
+        },
+        "orphaned": "Вхід виконано. Можете закрити це вікно й повернутися до застосунку."
+    }
+}

package/build/login/i18n.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=i18n.d.ts.map

package/build/login/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../src/login/i18n.ts"],"names":[],"mappings":""}

package/build/login/i18n.js

@@ -0,0 +1,25 @@
+import { addI18nLib } from '@owlmeans/i18n';
+import en from './i18n/en.json' with { type: 'json' };
+import pl from './i18n/pl.json' with { type: 'json' };
+import ru from './i18n/ru.json' with { type: 'json' };
+import be from './i18n/be.json' with { type: 'json' };
+import uk from './i18n/uk.json' with { type: 'json' };
+import es from './i18n/es.json' with { type: 'json' };
+import de from './i18n/de.json' with { type: 'json' };
+/**
+ * The sign-in screen's copy, registered into the `auth` library resource.
+ *
+ * `_addI18n` PUSHES rather than replaces, so this coexists with `@owlmeans/web-client`'s own
+ * `auth` registration (which owns `dispatcher.*` and `surrogate.*`) and the two merge by tier and
+ * priority. Registering here rather than in a UI package is what lets the plain fallback screen
+ * and every styled one read the same keys — so the seven-language rule holds on every path a user
+ * can actually reach, not only the pretty one.
+ */
+addI18nLib('en', 'auth', en);
+addI18nLib('pl', 'auth', pl);
+addI18nLib('ru', 'auth', ru);
+addI18nLib('be', 'auth', be);
+addI18nLib('uk', 'auth', uk);
+addI18nLib('es', 'auth', es);
+addI18nLib('de', 'auth', de);
+//# sourceMappingURL=i18n.js.map

package/build/login/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../../src/login/i18n.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAErD;;;;;;;;GAQG;AACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA"}