@owlmeans/client-auth 0.1.18-rc.40 → 0.1.18-rc.42

package/README.md

@@ -12,7 +12,7 @@ legacy). The server-side counterpart is `@owlmeans/server-auth`.
 ## Installation
 
 ```bash
-bun add @owlmeans/client-auth@^0.1.18-rc.40
+bun add @owlmeans/client-auth@^0.1.18-rc.42
 ```
 
 ## Concepts
@@ -319,7 +319,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.31
+npx @owlmeans/agent-skills@^0.1.18-rc.33
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/client-auth",
-  "version": "0.1.18-rc.40",
-  "generatedAt": "2026-09-21T21:54:22.941Z",
+  "version": "0.1.18-rc.42",
+  "generatedAt": "2026-09-22T17:37:10.893Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/client-auth/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/client-auth
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-auth": "^0.1.18-rc.40"` in `dependencies`
+**Install:** `"@owlmeans/client-auth": "^0.1.18-rc.42"` in `dependencies`
 
 Five subpaths, five jobs:
 
@@ -87,9 +87,12 @@ browsing context the round trip can complete at all.
 | `LoginPlugin`, `LoginEnv`, `LoginRequest`, `LogoutRequest`, `LoginOutcome`, `LoginIntent`, `LoginService`, `LoginContext`, `LoginPrecondition` | The contract |
 | `registerMethodSource`, `listMethodSources`, `resolveLoginMethods`, `primaryLoginMethod` | Which sign-in methods are offered — see `login-methods` |
 | `LoginMethod`, `LoginMethodSource`, `LoginMethodContext` | Method types |
-| `resolveTerms`, `termsAccepted`, `acceptTerms`, `ResolvedTerms` | The confirmation, recorded in `localStorage` against a version derived from the resolved URLs |
+| `landAfterLogin(ctx, opts?)`, `continueLogin(ctx, opts?)`, `landingUrl(ctx, landing)`, `useContinueLogin()` | The post-login landing decision (`src/login/land.ts`) — see `login-plugins`. `landAfterLogin` runs due landing hooks then delegates to `continueLogin`, which walks pending `LoginStep`s, then `resumeSuspendedFlow`, then `LandOptions.fallback ?? { alias: HOME }`; `landingUrl` builds the absolute URL a plugin's own `window.location.href` needs; `useContinueLogin()` is what a step's own screen calls once satisfied |
+| `LoginStep`, `LoginLanding`, `LoginLandingHook`, `LandOptions`, `LoginLandingParams` | Landing-seam types. `registerStep`/`steps`/`onLanded`/`landingHooks` on `LoginService` are the same replace-by-alias, priority-sorted registries as `registerPlugin` |
+| `LOGIN_STEP_TIMEOUT`, `LOGIN_LANDED_STORAGE` | A step's `pending`/a hook's `landed` is bounded by the former; the latter is where the last-landed token is recorded (the raw string, never a digest) |
+| `resolveTerms`, `termsAccepted`, `acceptTerms`, `termsSentence`, `ResolvedTerms`, `ResolvedTermsDocument`, `TermsSentencePart` | The confirmation. `resolveTerms` produces `documents` (what the checkbox agrees to: terms, then billing/product/custom when configured) and `notices` (what is only disclosed: privacy, plus cookies per its own inclusion rule) — see the terms-confirmation section of `login-methods`. The extra `LoginTermsConfig` fields (`billing`, `product`, `documents`, `revisions`, `showRevision`) are added by module augmentation in `src/login/terms-config.ts`, never by editing `@owlmeans/config` — importing anything from `@owlmeans/client-auth/login` pulls it in |
 | `resolveCredit`, `ResolvedCredit` | The credit and copyright line |
-| `FallbackLoginScreen`, `LoginScreenProps`, `LoginScreenComponent` | The plain sign-in screen a relying party renders when no UI family registered one |
+| `FallbackLoginScreen`, `LoginScreenProps` (now also carries `locale?: string`, for `Intl.ListFormat` and a custom document's locale-keyed label), `LoginScreenComponent` | The plain sign-in screen a relying party renders when no UI family registered one |
 | `surrogatePath(ctx, target)`, `SurrogateTarget` | Where a surrogate login window opens; `null` on an older entrypoint list |
 | `resumeAction(outcome)`, `ResumeAction`, `loginAttemptError(outcome)` | The one reading of a `resume` outcome, and the one reading of a finished attempt |
 | `registerNotifier(notifier)` (on `LoginService`), `LoginNotifier` | Surfaces a `begin`/`logout` outcome that has no inline screen to render it on — e.g. a toast on `LoginOutcome.Blocked` for a header "Log in"/"Log out" control. `web-panel`'s `appendLoginScreen` registers a default; unregistered, it is silence |
@@ -146,10 +149,10 @@ a web application only calls these when it builds its context by hand.
   `persist()` / `restore()` / `hasPersistentState()` / `cleanUpState()`. They keep the type, stage
   and allowance in the `FLOW_STATE` resource under an id this package owns and does not export —
   restore before submitting the credential, and clean up after.
-- After a sign-in, `DispatcherHOC.navigate` resumes a landing suspended in `@owlmeans/client-flow`
-  (`resumeSuspendedFlow`, one-shot, an entrypoint alias plus its query) before it falls back to `HOME`;
-  it is read BEFORE `alias` is defaulted to `HOME`. Login plugins that navigate on their own do the same
-  — see `login-plugins`.
+- After a sign-in, `DispatcherHOC.navigate` calls `landAfterLogin` — a pending `LoginStep`, else a
+  landing suspended in `@owlmeans/client-flow` (`resumeSuspendedFlow`, one-shot, an entrypoint alias
+  plus its query), else `HOME` — read BEFORE `alias` is defaulted to `HOME`. Login plugins that
+  navigate on their own do the same — see `login-plugins`.
 - The browser ends up holding an ordinary OwlMeans bearer token whichever provider issued the
   login. Product authorization stays server-side, in entrypoint gates and handler checks — never in
   client-only state.

package/build/components/dispatcher/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,YAAY,CAAA;AAczE,eAAO,MAAM,aAAa,EAAE,cAyF3B,CAAA"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,YAAY,CAAA;AAezE,eAAO,MAAM,aAAa,EAAE,cAqG3B,CAAA"}

package/build/components/dispatcher/component.js

@@ -4,36 +4,43 @@ import { AUTH_QUERY, DISPATCHER } from '@owlmeans/auth';
 import { HOME } from '@owlmeans/context';
 import { DEFAULT_ALIAS, DEFAULT_ENTITY } from '../../consts.js';
 import { useNavigate } from '@owlmeans/client';
-import { DEFAULT_ALIAS as FLOW_SERVICE, resumeSuspendedFlow } from '@owlmeans/client-flow';
+import { DEFAULT_ALIAS as FLOW_SERVICE } from '@owlmeans/client-flow';
 import { FLOW_PLACEHOLDER, OidcAuthStep, STD_OIDC_FLOW } from '@owlmeans/flow';
 import { SERVICE_PARAM } from '@owlmeans/web-flow';
+import { landAfterLogin } from '../../login/land.js';
 export const DispatcherHOC = Renderer => ({ context, params, alias, query, payload }) => {
     const [forwarding, setForwarding] = useState();
     const navigator = useNavigate();
     const navigate = useCallback(async () => {
         if (alias == null || alias === DISPATCHER) {
             // A sign-in that started elsewhere — a device or authorization-code consent screen, most
-            // commonly — suspended itself here before leaving. Resuming it takes priority over the
-            // ordinary HOME landing, and does so BEFORE `alias` is overwritten, because once it is
-            // `HOME` there is no way back to tell the two cases apart.
-            const landing = await resumeSuspendedFlow(context);
-            if (landing != null) {
-                await navigator.navigate(context.entrypoint(landing.entrypoint), { query: landing.query });
+            // commonly — suspended itself here before leaving, or a registered step still has
+            // something to collect (a marketing-consent screen, say). `landAfterLogin` is the whole
+            // post-sign-in landing decision (steps, landing hooks, the suspended flow, then HOME) and
+            // takes priority over the ordinary HOME landing, resolved BEFORE `alias` is overwritten,
+            // because once it is `HOME` there is no way back to tell the cases apart.
+            const landing = await landAfterLogin(context);
+            if (landing.alias !== HOME) {
+                await navigator.navigate(context.entrypoint(landing.alias), { params: landing.params, query: landing.query });
                 return;
             }
             alias = HOME;
         }
-        const module = context.entrypoint(alias);
-        if (alias === HOME) {
-            params = {};
-            query = {};
-        }
         else {
+            // A concrete destination already exists (an OIDC `?code=` return, etc.) — a registered step
+            // still gets to interject, but `resumeSuspendedFlow` must not run a second time: this
+            // branch already has somewhere to go.
             query = { ...forwarding?.query, ...query };
             if (query != null && AUTH_QUERY in query) {
                 delete query[AUTH_QUERY];
             }
+            const landing = await landAfterLogin(context, { fallback: { alias, params, query }, resume: false });
+            await navigator.navigate(context.entrypoint(landing.alias), { params: landing.params, query: landing.query });
+            return;
         }
+        const module = context.entrypoint(alias);
+        params = {};
+        query = {};
         await navigator.navigate(module, { params, query });
     }, [forwarding]);
     useEffect(() => {

package/build/components/dispatcher/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAGxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG9C,OAAO,EAAE,aAAa,IAAI,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC1F,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,MAAM,CAAC,MAAM,aAAa,GAAmB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;IACtG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,EAA0B,CAAA;IAEtE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACtC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,yFAAyF;YACzF,uFAAuF;YACvF,uFAAuF;YACvF,2DAA2D;YAC3D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAA;YAClD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAC3F,CAAA;gBACD,OAAM;YACR,CAAC;YACD,KAAK,GAAG,IAAI,CAAA;QACd,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAA2B,KAAK,CAAC,CAAA;QAClE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,EAAE,CAAA;YACX,KAAK,GAAG,EAAE,CAAA;QACZ,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAA;YAC1C,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gBACvD,mGAAmG;gBACnG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC3B,kDAAkD;oBAClD,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;wBAChC,0EAA0E;wBAC1E,2EAA2E;wBAC3E,qEAAqE;wBACrE,mFAAmF;wBACnF,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;4BAClC,OAAM;wBACR,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAA;oBACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;oBACtE,MAAM,MAAM,GAAG,CACb,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CACnD,CAAA;oBACvB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;wBACnB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;4BACpB,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;wBAC9B,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAA;wBACnC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAA;wBACrC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;4BACnB,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;wBAC9B,CAAC;wBACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;4BAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;wBAC7C,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;gBACtB,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,aAAa,CAAC,CAAA;gBACxD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAClD,OAAO,MAAM,QAAQ,EAAE,CAAA;gBACzB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE;oBACpB,oCAAoC;oBACpC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAClB,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;IAEvB,MAAM,YAAY,GAAG,WAAW,CAA0C,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACzF,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACjC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,KAAC,QAAQ,IAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,GAAI,CAAA;AACrE,CAAC,CAAA"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAGxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG9C,OAAO,EAAE,aAAa,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,MAAM,CAAC,MAAM,aAAa,GAAmB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;IACtG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,EAA0B,CAAA;IAEtE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACtC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,yFAAyF;YACzF,kFAAkF;YAClF,wFAAwF;YACxF,0FAA0F;YAC1F,yFAAyF;YACzF,0EAA0E;YAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAA;YAC7C,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,EAC3D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACjD,CAAA;gBACD,OAAM;YACR,CAAC;YACD,KAAK,GAAG,IAAI,CAAA;QACd,CAAC;aAAM,CAAC;YACN,4FAA4F;YAC5F,sFAAsF;YACtF,sCAAsC;YACtC,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAA;YAC1C,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAC/D,CAAA;YACD,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,EAC3D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACjD,CAAA;YACD,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAA2B,KAAK,CAAC,CAAA;QAClE,MAAM,GAAG,EAAE,CAAA;QACX,KAAK,GAAG,EAAE,CAAA;QACV,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gBACvD,mGAAmG;gBACnG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC3B,kDAAkD;oBAClD,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;wBAChC,0EAA0E;wBAC1E,2EAA2E;wBAC3E,qEAAqE;wBACrE,mFAAmF;wBACnF,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;4BAClC,OAAM;wBACR,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAA;oBACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;oBACtE,MAAM,MAAM,GAAG,CACb,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CACnD,CAAA;oBACvB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;wBACnB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;4BACpB,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;wBAC9B,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAA;wBACnC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAA;wBACrC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;4BACnB,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;wBAC9B,CAAC;wBACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;4BAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;wBAC7C,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;gBACtB,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,aAAa,CAAC,CAAA;gBACxD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAClD,OAAO,MAAM,QAAQ,EAAE,CAAA;gBACzB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE;oBACpB,oCAAoC;oBACpC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAClB,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;IAEvB,MAAM,YAAY,GAAG,WAAW,CAA0C,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACzF,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACjC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,KAAC,QAAQ,IAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,GAAI,CAAA;AACrE,CAAC,CAAA"}

package/build/login/i18n/be.json

@@ -16,11 +16,15 @@
             "fallback": "Працягнуць з {{method}}"
         },
         "terms": {
-            "agreement": "Я прачытаў(-ла) і прымаю {{terms}} і {{privacy}}.",
+            "accept": "Я прачытаў(-ла) і прымаю {{documents}}.",
             "terms": "Умовы карыстання",
             "privacy": "Палітыку прыватнасці",
             "cookies": "Палітыку файлаў cookie",
-            "required": "Каб працягнуць, пацвердзіце Умовы карыстання і Палітыку прыватнасці."
+            "billing": "Умовы аплаты",
+            "product": "Умовы прадукту {{product}}",
+            "notice": "Як мы апрацоўваем вашы асабістыя дадзеныя: {{notices}}.",
+            "revised": "Апошняе абнаўленне: {{date}}",
+            "required": "Каб працягнуць, пацвердзіце {{documents}}."
         },
         "consent": {
             "required": "Уваход захоўвае сеансавы файл cookie. Прыміце неабходныя файлы cookie, каб працягнуць."

package/build/login/i18n/de.json

@@ -16,11 +16,15 @@
             "fallback": "Mit {{method}} fortfahren"
         },
         "terms": {
-            "agreement": "Ich habe die {{terms}} und die {{privacy}} gelesen und stimme ihnen zu.",
+            "accept": "Ich habe {{documents}} gelesen und stimme ihnen zu.",
             "terms": "Allgemeinen Geschäftsbedingungen",
             "privacy": "Datenschutzerklärung",
             "cookies": "Cookie-Richtlinie",
-            "required": "Bitte bestätigen Sie die Allgemeinen Geschäftsbedingungen und die Datenschutzerklärung, um fortzufahren."
+            "billing": "Abrechnungsbedingungen",
+            "product": "{{product}}-Produktbedingungen",
+            "notice": "Wie wir Ihre personenbezogenen Daten verarbeiten: {{notices}}.",
+            "revised": "Zuletzt aktualisiert: {{date}}",
+            "required": "Bitte bestätigen Sie {{documents}}, um fortzufahren."
         },
         "consent": {
             "required": "Bei der Anmeldung wird ein Sitzungs-Cookie gespeichert. Akzeptieren Sie die notwendigen Cookies, um fortzufahren."

package/build/login/i18n/en.json

@@ -16,11 +16,15 @@
             "fallback": "Continue with {{method}}"
         },
         "terms": {
-            "agreement": "I have read and agree to the {{terms}} and the {{privacy}}.",
+            "accept": "I have read and agree to the {{documents}}.",
             "terms": "Terms & Conditions",
             "privacy": "Privacy Policy",
             "cookies": "Cookie Policy",
-            "required": "Please confirm the Terms & Conditions and the Privacy Policy to continue."
+            "billing": "Billing Terms",
+            "product": "{{product}} Product Terms",
+            "notice": "How we handle your personal data: {{notices}}.",
+            "revised": "Last updated: {{date}}",
+            "required": "Please confirm the {{documents}} to continue."
         },
         "consent": {
             "required": "Signing in stores a session cookie. Accept essential cookies to continue."

package/build/login/i18n/es.json

@@ -16,11 +16,15 @@
             "fallback": "Continuar con {{method}}"
         },
         "terms": {
-            "agreement": "He leído y acepto los {{terms}} y la {{privacy}}.",
+            "accept": "He leído y acepto {{documents}}.",
             "terms": "Términos y Condiciones",
             "privacy": "Política de Privacidad",
             "cookies": "Política de Cookies",
-            "required": "Confirma los Términos y Condiciones y la Política de Privacidad para continuar."
+            "billing": "Condiciones de Facturación",
+            "product": "Condiciones del Producto {{product}}",
+            "notice": "Cómo tratamos tus datos personales: {{notices}}.",
+            "revised": "Última actualización: {{date}}",
+            "required": "Confirma {{documents}} para continuar."
         },
         "consent": {
             "required": "Iniciar sesión guarda una cookie de sesión. Acepta las cookies esenciales para continuar."

package/build/login/i18n/fr.json

@@ -16,11 +16,15 @@
             "fallback": "Continuer avec {{method}}"
         },
         "terms": {
-            "agreement": "J’ai lu et j’accepte les {{terms}} et la {{privacy}}.",
+            "accept": "J’ai lu et j’accepte {{documents}}.",
             "terms": "conditions générales",
             "privacy": "politique de confidentialité",
             "cookies": "Politique relative aux cookies",
-            "required": "Confirmez les conditions générales et la politique de confidentialité pour continuer."
+            "billing": "Conditions de facturation",
+            "product": "Conditions du produit {{product}}",
+            "notice": "Comment nous traitons vos données personnelles : {{notices}}.",
+            "revised": "Dernière mise à jour : {{date}}",
+            "required": "Confirmez {{documents}} pour continuer."
         },
         "consent": {
             "required": "La connexion enregistre un cookie de session. Acceptez les cookies essentiels pour continuer."

package/build/login/i18n/pl.json

@@ -16,11 +16,15 @@
             "fallback": "Kontynuuj z {{method}}"
         },
         "terms": {
-            "agreement": "Przeczytałem(-am) i akceptuję {{terms}} oraz {{privacy}}.",
+            "accept": "Przeczytałem(-am) i akceptuję {{documents}}.",
             "terms": "Regulamin",
             "privacy": "Politykę prywatności",
             "cookies": "Politykę plików cookie",
-            "required": "Aby kontynuować, potwierdź Regulamin i Politykę prywatności."
+            "billing": "Warunki rozliczeń",
+            "product": "Warunki produktu {{product}}",
+            "notice": "Jak przetwarzamy Twoje dane osobowe: {{notices}}.",
+            "revised": "Ostatnia aktualizacja: {{date}}",
+            "required": "Aby kontynuować, potwierdź {{documents}}."
         },
         "consent": {
             "required": "Logowanie zapisuje plik cookie sesji. Zaakceptuj niezbędne pliki cookie, aby kontynuować."

package/build/login/i18n/ru.json

@@ -16,11 +16,15 @@
             "fallback": "Продолжить с {{method}}"
         },
         "terms": {
-            "agreement": "Я прочитал(а) и принимаю {{terms}} и {{privacy}}.",
+            "accept": "Я прочитал(а) и принимаю {{documents}}.",
             "terms": "Условия использования",
             "privacy": "Политику конфиденциальности",
             "cookies": "Политику файлов cookie",
-            "required": "Чтобы продолжить, подтвердите Условия использования и Политику конфиденциальности."
+            "billing": "Условия оплаты",
+            "product": "Условия использования продукта {{product}}",
+            "notice": "Как мы обрабатываем ваши персональные данные: {{notices}}.",
+            "revised": "Последнее обновление: {{date}}",
+            "required": "Чтобы продолжить, подтвердите {{documents}}."
         },
         "consent": {
             "required": "Вход сохраняет сессионный файл cookie. Примите необходимые файлы cookie, чтобы продолжить."

package/build/login/i18n/uk.json

@@ -16,11 +16,15 @@
             "fallback": "Продовжити з {{method}}"
         },
         "terms": {
-            "agreement": "Я прочитав(-ла) і приймаю {{terms}} та {{privacy}}.",
+            "accept": "Я прочитав(-ла) і приймаю {{documents}}.",
             "terms": "Умови користування",
             "privacy": "Політику конфіденційності",
             "cookies": "Політику файлів cookie",
-            "required": "Щоб продовжити, підтвердьте Умови користування та Політику конфіденційності."
+            "billing": "Умови оплати",
+            "product": "Умови продукту {{product}}",
+            "notice": "Як ми обробляємо ваші персональні дані: {{notices}}.",
+            "revised": "Востаннє оновлено: {{date}}",
+            "required": "Щоб продовжити, підтвердьте {{documents}}."
         },
         "consent": {
             "required": "Вхід зберігає сеансовий файл cookie. Прийміть необхідні файли cookie, щоб продовжити."

package/build/login/index.d.ts

@@ -6,10 +6,12 @@ export * from './adopt.js';
 export * from './methods.js';
 export * from './flow.js';
 export * from './resume.js';
+export * from './terms-config.js';
 export * from './terms.js';
 export * from './credit.js';
 export * from './surrogate.js';
 export * from './screen.js';
 export * from './service.js';
 export * from './hook.js';
+export * from './land.js';
 //# sourceMappingURL=index.d.ts.map

package/build/login/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,CAAA;AAElB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,CAAA;AAElB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA"}

package/build/login/index.js

@@ -6,10 +6,12 @@ export * from './adopt.js';
 export * from './methods.js';
 export * from './flow.js';
 export * from './resume.js';
+export * from './terms-config.js';
 export * from './terms.js';
 export * from './credit.js';
 export * from './surrogate.js';
 export * from './screen.js';
 export * from './service.js';
 export * from './hook.js';
+export * from './land.js';
 //# sourceMappingURL=index.js.map

package/build/login/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,CAAA;AAElB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,CAAA;AAElB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA"}

package/build/login/land.d.ts

@@ -0,0 +1,44 @@
+import type { LandOptions, LoginContext, LoginLanding } from './types.js';
+/**
+ * Bound on a single step's `pending` check, or a landing hook's `landed` call.
+ *
+ * A step/hook that hangs must never hang sign-in itself — both `continueLogin` and
+ * `landAfterLogin` treat a timeout exactly like a rejection: fail OPEN, never block.
+ */
+export declare const LOGIN_STEP_TIMEOUT = 5000;
+/** Where a browser records the last token a landing hook has already run for. */
+export declare const LOGIN_LANDED_STORAGE = "_owlmeans-login-landed";
+/**
+ * Where a finished sign-in should go: the first pending step, else a suspended flow, else the
+ * fallback (ordinarily `HOME`).
+ *
+ * Re-checks `env().surrogate` even though {@link landAfterLogin} already did — this function is
+ * also called directly (e.g. from {@link useContinueLogin}, after the surrogate window has
+ * already closed), and the check is cheap insurance either way: **no step and no landing hook
+ * ever runs inside the surrogate popup.** It has nothing of its own to collect and nowhere to
+ * navigate — the popup's own `DispatcherHOC` has no `navigate() → HOME` at all.
+ */
+export declare const continueLogin: (ctx: LoginContext, opts?: LandOptions) => Promise<LoginLanding>;
+/**
+ * The whole post-sign-in landing decision: run any due landing hooks for a freshly seen token,
+ * then delegate to {@link continueLogin} for where the flow actually goes.
+ *
+ * This is what a plugin that just adopted a token calls in place of the old inline
+ * "`resumeSuspendedFlow` else `HOME`" — `DispatcherHOC`, the supervisor plugin and both Google
+ * plugins all replace their own copy of that logic with this one.
+ */
+export declare const landAfterLogin: (ctx: LoginContext, opts?: LandOptions) => Promise<LoginLanding>;
+/**
+ * The absolute URL a landing resolves to — the same shape the supervisor and Google plugins
+ * already build their own `window.location.href` from.
+ */
+export declare const landingUrl: (ctx: LoginContext, landing: LoginLanding) => Promise<string>;
+/**
+ * For a component that runs its own post-login step (the marketing-consent screen, for one) to
+ * call once it is satisfied — moves the flow on to the next step, or the ordinary landing.
+ *
+ * Not async at the call site by accident of its own — it is a callback a component holds and
+ * fires later, so nothing here needs the synchronous-gesture discipline `useLogin`/`useLogout` do.
+ */
+export declare const useContinueLogin: () => ((opts?: LandOptions) => Promise<void>);
+//# sourceMappingURL=land.d.ts.map

package/build/login/land.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"land.d.ts","sourceRoot":"","sources":["../../src/login/land.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAgB,MAAM,YAAY,CAAA;AAEvF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,OAAQ,CAAA;AAEvC,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,2BAA2B,CAAA;AA4D5D;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,QAAe,YAAY,SAAS,WAAW,KAAG,OAAO,CAAC,YAAY,CA+C/F,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,QAAe,YAAY,SAAS,WAAW,KAAG,OAAO,CAAC,YAAY,CAWhG,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,QAAe,YAAY,WAAW,YAAY,KAAG,OAAO,CAAC,MAAM,CAGvF,CAAA;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAQzE,CAAA"}

package/build/login/land.js

@@ -0,0 +1,158 @@
+import { useCallback } from 'react';
+import { DISPATCHER } from '@owlmeans/auth';
+import { HOME } from '@owlmeans/context';
+import { useContext, useNavigate } from '@owlmeans/client';
+import { resumeSuspendedFlow } from '@owlmeans/client-flow';
+import { DEFAULT_ALIAS as AUTH_ALIAS } from '../consts.js';
+import { ensureLoginService } from './service.js';
+/**
+ * Bound on a single step's `pending` check, or a landing hook's `landed` call.
+ *
+ * A step/hook that hangs must never hang sign-in itself — both `continueLogin` and
+ * `landAfterLogin` treat a timeout exactly like a rejection: fail OPEN, never block.
+ */
+export const LOGIN_STEP_TIMEOUT = 5_000;
+/** Where a browser records the last token a landing hook has already run for. */
+export const LOGIN_LANDED_STORAGE = '_owlmeans-login-landed';
+/**
+ * Race a promise against a bound, resolving `undefined` (never rejecting) on timeout.
+ *
+ * A synchronous throw from the wrapped call is turned into a rejection by the caller before this
+ * ever sees it, so the only two outcomes here are "settled in time" and "timed out".
+ */
+const withTimeout = async (promise, ms) => {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise(resolve => { timer = setTimeout(() => resolve(undefined), ms); }),
+        ]);
+    }
+    finally {
+        if (timer != null) {
+            clearTimeout(timer);
+        }
+    }
+};
+/**
+ * Run every registered landing hook, once per distinct token.
+ *
+ * The stored token is overwritten BEFORE the hooks run, not after: a hook that throws or hangs
+ * must never make the same token re-run the whole set on the next call, since surviving exactly
+ * that is what the bound-and-swallow contract is for. The raw token string is the marker rather
+ * than a digest of it — it never leaves the browser, and this package already keeps the terms
+ * acceptance marker the same way (`LOGIN_TERMS_STORAGE`).
+ */
+const runLandingHooks = async (ctx, login, timeout) => {
+    const auth = ctx.service(AUTH_ALIAS);
+    const token = await auth.authenticated();
+    if (token == null) {
+        return;
+    }
+    let last = null;
+    try {
+        last = window.localStorage.getItem(LOGIN_LANDED_STORAGE);
+    }
+    catch {
+        // Storage can be unavailable (private modes, blocked cookies). Treated as "never landed",
+        // which just re-runs the hooks — the safe direction, same as the terms-acceptance marker.
+    }
+    if (last === token) {
+        return;
+    }
+    try {
+        window.localStorage.setItem(LOGIN_LANDED_STORAGE, token);
+    }
+    catch { /* nothing to remember if storage was never available */ }
+    for (const hook of login.landingHooks()) {
+        await withTimeout(Promise.resolve().then(() => hook.landed(ctx)), timeout).catch(() => undefined);
+    }
+};
+/**
+ * Where a finished sign-in should go: the first pending step, else a suspended flow, else the
+ * fallback (ordinarily `HOME`).
+ *
+ * Re-checks `env().surrogate` even though {@link landAfterLogin} already did — this function is
+ * also called directly (e.g. from {@link useContinueLogin}, after the surrogate window has
+ * already closed), and the check is cheap insurance either way: **no step and no landing hook
+ * ever runs inside the surrogate popup.** It has nothing of its own to collect and nowhere to
+ * navigate — the popup's own `DispatcherHOC` has no `navigate() → HOME` at all.
+ */
+export const continueLogin = async (ctx, opts) => {
+    const login = ensureLoginService(ctx);
+    if (login.env().surrogate) {
+        return { alias: DISPATCHER };
+    }
+    const timeout = opts?.stepTimeout ?? LOGIN_STEP_TIMEOUT;
+    const auth = ctx.service(AUTH_ALIAS);
+    const token = await auth.authenticated();
+    if (token != null) {
+        const steps = login.steps();
+        let start = 0;
+        if (opts?.after != null) {
+            const index = steps.findIndex(step => step.alias === opts.after);
+            if (index >= 0) {
+                start = index + 1;
+            }
+        }
+        for (let i = start; i < steps.length; i++) {
+            const step = steps[i];
+            // Registration proves only that some module reached the bundle — the step's own screen may
+            // not be bound in this tree (an older target, a partial import). Skipped, never thrown.
+            if (!ctx.hasEntrypoint(step.entrypoint)) {
+                continue;
+            }
+            // A step that throws or hangs must never block sign-in: fail OPEN, i.e. "not pending".
+            const pending = await withTimeout(Promise.resolve().then(() => step.pending(ctx)), timeout).catch(() => false);
+            if (pending === true) {
+                return { alias: step.entrypoint, query: await step.query?.(ctx), step: step.alias };
+            }
+        }
+    }
+    if (opts?.resume !== false) {
+        const landing = await resumeSuspendedFlow(ctx);
+        if (landing != null) {
+            return { alias: landing.entrypoint, query: landing.query };
+        }
+    }
+    return opts?.fallback ?? { alias: HOME };
+};
+/**
+ * The whole post-sign-in landing decision: run any due landing hooks for a freshly seen token,
+ * then delegate to {@link continueLogin} for where the flow actually goes.
+ *
+ * This is what a plugin that just adopted a token calls in place of the old inline
+ * "`resumeSuspendedFlow` else `HOME`" — `DispatcherHOC`, the supervisor plugin and both Google
+ * plugins all replace their own copy of that logic with this one.
+ */
+export const landAfterLogin = async (ctx, opts) => {
+    const login = ensureLoginService(ctx);
+    // Never run a step or a landing hook while THIS document is the surrogate popup — see the note
+    // on `continueLogin`.
+    if (login.env().surrogate) {
+        return { alias: DISPATCHER };
+    }
+    await runLandingHooks(ctx, login, opts?.stepTimeout ?? LOGIN_STEP_TIMEOUT);
+    return continueLogin(ctx, opts);
+};
+/**
+ * The absolute URL a landing resolves to — the same shape the supervisor and Google plugins
+ * already build their own `window.location.href` from.
+ */
+export const landingUrl = async (ctx, landing) => await ctx.entrypoint(landing.alias).url({ params: landing.params, query: landing.query }, { absolute: true });
+/**
+ * For a component that runs its own post-login step (the marketing-consent screen, for one) to
+ * call once it is satisfied — moves the flow on to the next step, or the ordinary landing.
+ *
+ * Not async at the call site by accident of its own — it is a callback a component holds and
+ * fires later, so nothing here needs the synchronous-gesture discipline `useLogin`/`useLogout` do.
+ */
+export const useContinueLogin = () => {
+    const context = useContext();
+    const nav = useNavigate();
+    return useCallback(async (opts) => {
+        const landing = await continueLogin(context, opts);
+        await nav.go(landing.alias, { params: landing.params, query: landing.query });
+    }, [context, nav]);
+};
+//# sourceMappingURL=land.js.map

package/build/login/land.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"land.js","sourceRoot":"","sources":["../../src/login/land.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,aAAa,IAAI,UAAU,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEvC,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAA;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,GAAG,KAAK,EAAK,OAAmB,EAAE,EAAU,EAA0B,EAAE;IACvF,IAAI,KAAgD,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAgB;YACvC,OAAO;YACP,IAAI,OAAO,CAAY,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;SACxF,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,KAAK,EAC3B,GAAiB,EAAE,KAAmB,EAAE,OAAe,EACxC,EAAE;IACjB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAc,UAAU,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;IACxC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAM;IACR,CAAC;IAED,IAAI,IAAI,GAAkB,IAAI,CAAA;IAC9B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;QAC1F,0FAA0F;IAC5F,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAM;IACR,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;IAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;QACxC,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACnG,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,GAAiB,EAAE,IAAkB,EAAyB,EAAE;IAClG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,EAAE,WAAW,IAAI,kBAAkB,CAAA;IACvD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAc,UAAU,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;IAExC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAA;YAChE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,KAAK,GAAG,KAAK,GAAG,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,2FAA2F;YAC3F,wFAAwF;YACxF,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,SAAQ;YACV,CAAC;YAED,uFAAuF;YACvF,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CACzD,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;YAEpB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAA+B,CAAC,CAAA;QAC1E,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,IAAI,EAAE,QAAQ,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAC1C,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,GAAiB,EAAE,IAAkB,EAAyB,EAAE;IACnG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACrC,+FAA+F;IAC/F,sBAAsB;IACtB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IAC9B,CAAC;IAED,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,IAAI,kBAAkB,CAAC,CAAA;IAE1E,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AACjC,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAiB,EAAE,OAAqB,EAAmB,EAAE,CAC5F,MAAM,GAAG,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAC/D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CACrE,CAAA;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAA4C,EAAE;IAC5E,MAAM,OAAO,GAAG,UAAU,EAA8B,CAAA;IACxD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IAEzB,OAAO,WAAW,CAAC,KAAK,EAAE,IAAkB,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/E,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;AACpB,CAAC,CAAA"}

package/build/login/screen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../src/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,EAAE,EAAE,MAAM,OAAO,CAAA;AAG9C,OAAO,KAAK,EAA6B,gBAAgB,EAAgB,MAAM,YAAY,CAAA;AA+B3F;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,EAAE,EAAE,CAAC,gBAAgB,CAuFpD,CAAA"}
+{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../src/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,EAAE,EAAa,MAAM,OAAO,CAAA;AAGzD,OAAO,KAAK,EAA6B,gBAAgB,EAAgB,MAAM,YAAY,CAAA;AAgE3F;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,EAAE,EAAE,CAAC,gBAAgB,CAkGpD,CAAA"}