@owlmeans/client-auth 0.1.19-rc.0 → 0.1.19

package/README.md

@@ -12,7 +12,7 @@ legacy). The server-side counterpart is `@owlmeans/server-auth`.
 ## Installation
 
 ```bash
-bun add @owlmeans/client-auth@^0.1.19-rc.0
+bun add @owlmeans/client-auth@^0.1.19
 ```
 
 ## Concepts
@@ -322,7 +322,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.19-rc.0
+npx @owlmeans/agent-skills@^0.1.19
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 3,
   "package": "@owlmeans/client-auth",
-  "version": "0.1.19-rc.0",
-  "generatedAt": "2026-10-31T12:13:02.354Z",
+  "version": "0.1.19",
+  "generatedAt": "2026-11-01T22:22:22.274Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {
@@ -24,6 +24,8 @@
             "useLogin",
             "@owlmeans/client-auth/login",
             "useLogout",
+            "loginFailureHelper",
+            "LoginFailureView",
             "appendLogin",
             "loginTermsHelper",
             "loginLandingOf",

package/agent-meta/skills/client-auth/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: client-auth
-description: How to use @owlmeans/client-auth — the browser side of OwlMeans authentication. Root exports the auth service, the shared client entrypoints and the dispatcher HOC; ./manager holds the authentication screen, its control and the plugin registry; ./manager/plugins holds the authentication-plugin contract a plugin package writes against; ./login holds the login-plugin host, the sign-in method registry, the terms confirmation and the useLogin/useLogout hooks. Auto-invoked when importing client-auth helpers, registering an authentication plugin, or wiring a sign-in control.
+description: How to use @owlmeans/client-auth — the browser side of OwlMeans authentication. Root exports the auth service, the shared client entrypoints and the dispatcher HOC; ./manager holds the authentication screen, its control and the plugin registry; ./manager/plugins holds the authentication-plugin contract a plugin package writes against; ./login holds the login-plugin host, the sign-in method registry, the terms confirmation, the useLogin/useLogout hooks and the failed-sign-in reading (loginFailureHelper, LoginFailureView — a refusal vs a failure). Auto-invoked when importing client-auth helpers, registering an authentication plugin, wiring a sign-in control, or phrasing a failed sign-in.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/client-auth
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-auth": "^0.1.19-rc.0"` in `dependencies`
+**Install:** `"@owlmeans/client-auth": "^0.1.19"` in `dependencies`
 
 Five subpaths, five jobs:
 
@@ -63,6 +63,37 @@ setupExternalAuthentication(MY_WEB_SERVICE)   // the service alias the provider
 `@owlmeans/web-client`'s own `makeContext` already appends the auth service and the login host, so
 a web application only calls these when it builds its context by hand.
 
+## A failed sign-in (`./login`: `loginFailureHelper`, `LoginFailureView`)
+
+Every sign-in surface — the dispatcher's token exchange, `FallbackLoginScreen`, the Google callback,
+the supervisor form, `client-panel`'s login model — reads a caught error through ONE helper and
+phrases it the same way:
+
+| `loginFailureHelper.failureOf(error).kind` | When | Action offered |
+|---|---|---|
+| `account-disabled` | a visible code `authen:account:disabled` / `forbidden:account:disabled` | "Back to sign-in" |
+| `profile-disabled` | a visible code `authen:profile:disabled` / `forbidden:profile:disabled` | "Back to sign-in" |
+| `refused` | an `AuthRefused` of any module copy (by `type`), or a production 403 carrying `X-OwlMeans-Denial: access-denied` (`apiStatusHelper.isAccessDenied`, `@owlmeans/api/status`) | "Back to sign-in" |
+| `failed` | anything else — a fault, a timeout, a 403 WITHOUT the marker (plan refusals use 403 too) | "Try again" + `Reference: <incident id>` when the server sent one |
+
+- `refused` is `true` for every kind but `failed`; `isRefusal(error)` reads it. A refusal is the
+  person's condition: it carries no incident line, and a surface logs it at `warn`
+  (`auth.refused`), a failure at `error`.
+- `phrase(failure, translate?)` → `{ message, incident, action }` over the `auth` library keys
+  `login.error.{refused,account-disabled,profile-disabled,failed,back,retry,incident}` (eight
+  languages, `src/login/i18n/*.json`), English without a translate. The incident id is filled into
+  `Reference: {{incident}}` AFTER translation, never as an i18next parameter. An app rewords a key
+  with an App-tier override of the `auth` resource.
+- `makeAuthTranslate(cfg)` is that translate without React context (it drains the `auth` bundle
+  into the app's i18next instance), for a surface rendered outside any screen binding.
+- `LoginFailureView({ failure, translate?, onAction?, page?, style? })` renders the end state with
+  raw elements and inline styles (any UI family); hooks `[data-login-failure="<kind>"]`,
+  `[data-login-refused]`, `[data-login-failure-message]`, `[data-login-failure-incident]`,
+  `[data-login-failure-action]`. The dispatcher renders it in place of its renderer when a supplied
+  token's exchange signs nobody in; its action is a restart (the token is single-use).
+- A server refusing a sign-in for who the person is throws `AuthRefused` (`@owlmeans/auth`); this
+  helper is what turns it into a sentence instead of a retry loop.
+
 ## Rules
 
 - An application's translated legal destinations are opt-in `login.terms.localizedHrefs`, keyed by
@@ -95,7 +126,9 @@ a web application only calls these when it builds its context by hand.
 
 ## Depends On
 
-- `@owlmeans/auth`, `@owlmeans/auth-common` — types, aliases, `authMiddleware`
+- `@owlmeans/auth`, `@owlmeans/auth-common` — types, aliases, `authMiddleware`, `AuthRefused`
+- `@owlmeans/api` — `apiStatusHelper` (`./status`): the denial marker and the incident id of a failure
+- `@owlmeans/client-i18n`, `@owlmeans/i18n` — the `auth` library resource `makeAuthTranslate` reads
 - `@owlmeans/client`, `@owlmeans/client-context`, `@owlmeans/client-entrypoint`, `@owlmeans/client-socket`
 - `@owlmeans/config` — the login screen, terms and credit configuration
 - `@owlmeans/basic-envelope` — decoding the bearer envelope

package/agent-meta/skills/client-auth/parts/login.md

@@ -3,7 +3,7 @@ name: login
 description: The ./login host — method registry, post-login landing, the terms confirmation, surrogate windows, token adoption, and the useLogin/useLogout hooks.
 metadata:
   purposes: auth, consent
-  mentions: useLogin, @owlmeans/client-auth/login, useLogout, appendLogin, loginTermsHelper, loginLandingOf, loginTokenOf, loginStartOf, loginMethodsHelper, LoginStep, LoginPlugin, FallbackLoginScreen
+  mentions: useLogin, @owlmeans/client-auth/login, useLogout, loginFailureHelper, LoginFailureView, appendLogin, loginTermsHelper, loginLandingOf, loginTokenOf, loginStartOf, loginMethodsHelper, LoginStep, LoginPlugin, FallbackLoginScreen
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
 
@@ -31,6 +31,7 @@ browsing context the round trip can complete at all.
 | `FallbackLoginScreen`, `LoginScreenProps` (now also carries `locale?: string`, for `Intl.ListFormat` and a custom document's locale-keyed label), `LoginScreenComponent` | The plain sign-in screen a relying party renders when no UI family registered one |
 | `surrogatePath(ctx, target)`, `SurrogateTarget` | Where a surrogate login window opens; `null` on an older entrypoint list |
 | `loginResumeHelper.resumeAction(outcome)`, `ResumeAction`, `loginResumeHelper.loginAttemptError(outcome)` | The one reading of a `resume` outcome, and the one reading of a finished attempt |
+| `loginFailureHelper` → `.failureOf(error)`, `.isRefusal(error)`, `.phrase(failure, translate?)`; `LoginFailureView`; `LoginFailureKind`; `makeAuthTranslate(cfg)` | The one reading and phrasing of a failed sign-in — refusal vs failure (SKILL.md § A failed sign-in) |
 | `registerNotifier(notifier)` (on `LoginService`), `LoginNotifier` | Surfaces a `begin`/`logout` outcome that has no inline screen to render it on — e.g. a toast on `LoginOutcome.Blocked` for a header "Log in"/"Log out" control. `web-panel`'s `appendLoginScreen` registers a default; unregistered, it is silence |
 | `enterOidcAuthorization(model)` | Move a flow to the step that can authorize — idempotent, call it before every `authenticate` |
 | `loginTokenOf(ctx).adoptToken(token)`, `.revokeToken()` | The single adoption and de-adoption paths |

package/build/components/dispatcher/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,YAAY,CAAA;AAgBzE,eAAO,MAAM,aAAa,EAAE,cAqG3B,CAAA"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,YAAY,CAAA;AAqBzE,eAAO,MAAM,aAAa,EAAE,cA2I3B,CAAA"}

package/build/components/dispatcher/component.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { useCallback, useEffect, useState } from 'react';
+import { useCallback, useEffect, useMemo, useState } from 'react';
 import { AUTH_QUERY, DISPATCHER } from '@owlmeans/auth';
 import { HOME } from '@owlmeans/context';
 import { DEFAULT_ALIAS, DEFAULT_ENTITY } from '../../consts.js';
@@ -8,11 +8,46 @@ import { DEFAULT_ALIAS as FLOW_SERVICE } from '@owlmeans/client-flow';
 import { FLOW_PLACEHOLDER, OidcAuthStep, STD_OIDC_FLOW } from '@owlmeans/flow';
 import { SERVICE_PARAM } from '@owlmeans/web-flow';
 import { loginLandingOf } from '../../login/land.js';
+import { loginFailureHelper } from '../../login/failure.js';
+import { LoginFailureView } from '../../login/failure-view.js';
+import { makeAuthTranslate } from '../../login/translate.js';
+import { ensureLoginService } from '../../login/service.js';
 import { logger } from '@owlmeans/log';
 const log = logger('client-auth:dispatcher');
 export const DispatcherHOC = Renderer => ({ context, params, alias, query, payload }) => {
     const [forwarding, setForwarding] = useState();
+    // How the exchange of a supplied token ended, when it did not sign anyone in. Rendered here, in
+    // place of the renderer, so no renderer is left on its "loading" line forever.
+    const [failure, setFailure] = useState(null);
     const navigator = useNavigate();
+    const fail = useCallback((error) => {
+        const failed = loginFailureHelper.failureOf(error);
+        if (failed.refused) {
+            // The person's condition, not a fault: the server said so on purpose.
+            log.warn('Sign-in refused', { kind: failed.kind, incidentId: failed.incidentId }, { event: 'auth.refused' });
+        }
+        else {
+            log.error('Authentication failed', error, { event: 'auth.refused' });
+        }
+        setFailure(failed);
+    }, []);
+    // Back to the start of signing in — the dispatcher with nothing to exchange. A supplied token is
+    // single-use, so sending it again could only fail again. A full load where there is a document,
+    // so the renderer starts from scratch; an in-app hop elsewhere.
+    const restart = useCallback(() => {
+        void (async () => {
+            if (ensureLoginService(context).env().hasWindow) {
+                window.location.replace(await loginLandingOf(context).landingUrl({ alias: DISPATCHER }));
+                return;
+            }
+            setFailure(null);
+            setForwarding(undefined);
+            await navigator.navigate(context.entrypoint(DISPATCHER), { params: {}, query: {} });
+        })().catch((error) => {
+            log.warn('The sign-in screen could not be reopened', error);
+        });
+    }, []);
+    const translate = useMemo(() => failure != null ? makeAuthTranslate(context.cfg) : undefined, [failure]);
     const navigate = useCallback(async () => {
         if (alias == null || alias === DISPATCHER) {
             // A sign-in that started elsewhere — a device or authorization-code consent screen, most
@@ -83,15 +118,16 @@ export const DispatcherHOC = Renderer => ({ context, params, alias, query, paylo
                         }
                     }
                     await flow.proceed();
-                });
+                }).catch(fail);
             }
             else {
                 const auth = context.service(DEFAULT_ALIAS);
+                // A refused or failed exchange ends in the failure view; a navigation that fails after a
+                // successful one is only logged — the person IS signed in by then.
                 auth.authenticate(forwarding.token).then(async () => {
                     return await navigate();
-                }).catch((e) => {
-                    // @TODO Show error on the component
-                    log.error('Authentication failed', e, { event: 'auth.refused' });
+                }, fail).catch((e) => {
+                    log.error('Navigation after sign-in failed', e);
                 });
             }
         }
@@ -99,6 +135,9 @@ export const DispatcherHOC = Renderer => ({ context, params, alias, query, paylo
     const provideToken = useCallback((token, query) => {
         setForwarding({ token, query });
     }, []);
+    if (failure != null) {
+        return _jsx(LoginFailureView, { failure: failure, translate: translate, onAction: restart, page: true });
+    }
     return _jsx(Renderer, { provideToken: provideToken, navigate: navigate });
 };
 //# sourceMappingURL=component.js.map

package/build/components/dispatcher/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAExD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAoB,aAAa,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACvF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAGtC,MAAM,GAAG,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAA;AAE5C,MAAM,CAAC,MAAM,aAAa,GAAmB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;IACtG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,EAA0B,CAAA;IAEtE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACtC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,yFAAyF;YACzF,kFAAkF;YAClF,wFAAwF;YACxF,0FAA0F;YAC1F,yFAAyF;YACzF,0EAA0E;YAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,CAAA;YAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,EAC3D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACjD,CAAA;gBACD,OAAM;YACR,CAAC;YACD,KAAK,GAAG,IAAI,CAAA;QACd,CAAC;aAAM,CAAC;YACN,4FAA4F;YAC5F,sFAAsF;YACtF,sCAAsC;YACtC,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAA;YAC1C,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,CAC1D,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CACtD,CAAA;YACD,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,EAC3D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACjD,CAAA;YACD,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAA2B,KAAK,CAAC,CAAA;QAClE,MAAM,GAAG,EAAE,CAAA;QACX,KAAK,GAAG,EAAE,CAAA;QACV,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gBACvD,mGAAmG;gBACnG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC3B,kDAAkD;oBAClD,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;wBAChC,0EAA0E;wBAC1E,2EAA2E;wBAC3E,qEAAqE;wBACrE,mFAAmF;wBACnF,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;4BAClC,OAAM;wBACR,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAA;oBACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;oBACtE,MAAM,MAAM,GAAG,CACb,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CACnD,CAAA;oBACvB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;wBACnB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;4BACpB,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;wBAC9B,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAA;wBACnC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAA;wBACrC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;4BACnB,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;wBAC9B,CAAC;wBACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;4BAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;wBAC7C,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;gBACtB,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,aAAa,CAAC,CAAA;gBACxD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAClD,OAAO,MAAM,QAAQ,EAAE,CAAA;gBACzB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE;oBACpB,oCAAoC;oBACpC,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;gBAClE,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;IAEvB,MAAM,YAAY,GAAG,WAAW,CAA0C,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACzF,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACjC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,KAAC,QAAQ,IAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,GAAI,CAAA;AACrE,CAAC,CAAA"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEjE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAoB,aAAa,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACvF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAGtC,MAAM,GAAG,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAA;AAE5C,MAAM,CAAC,MAAM,aAAa,GAAmB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;IACtG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,EAA0B,CAAA;IACtE,gGAAgG;IAChG,+EAA+E;IAC/E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IAEjE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAE/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,sEAAsE;YACtE,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAC9G,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,CAAA;IACpB,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,iGAAiG;IACjG,gGAAgG;IAChG,gEAAgE;IAChE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;gBAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;gBACxF,OAAM;YACR,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,CAAA;YAChB,aAAa,CAAC,SAAS,CAAC,CAAA;YACxB,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAA2B,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;QAC/G,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACxG,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACtC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,yFAAyF;YACzF,kFAAkF;YAClF,wFAAwF;YACxF,0FAA0F;YAC1F,yFAAyF;YACzF,0EAA0E;YAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,CAAA;YAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,EAC3D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACjD,CAAA;gBACD,OAAM;YACR,CAAC;YACD,KAAK,GAAG,IAAI,CAAA;QACd,CAAC;aAAM,CAAC;YACN,4FAA4F;YAC5F,sFAAsF;YACtF,sCAAsC;YACtC,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAA;YAC1C,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,CAC1D,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CACtD,CAAA;YACD,MAAM,SAAS,CAAC,QAAQ,CACtB,OAAO,CAAC,UAAU,CAA2B,OAAO,CAAC,KAAK,CAAC,EAC3D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACjD,CAAA;YACD,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAA2B,KAAK,CAAC,CAAA;QAClE,MAAM,GAAG,EAAE,CAAA;QACX,KAAK,GAAG,EAAE,CAAA;QACV,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gBACvD,mGAAmG;gBACnG,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAC3B,kDAAkD;oBAClD,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;wBAChC,0EAA0E;wBAC1E,2EAA2E;wBAC3E,qEAAqE;wBACrE,mFAAmF;wBACnF,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;4BAClC,OAAM;wBACR,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAA;oBACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;oBACtE,MAAM,MAAM,GAAG,CACb,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CACnD,CAAA;oBACvB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;wBACnB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;4BACpB,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;wBAC9B,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAA;wBACnC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAA;wBACrC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;4BACnB,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;wBAC9B,CAAC;wBACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;4BAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;wBAC7C,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;gBACtB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,aAAa,CAAC,CAAA;gBACxD,yFAAyF;gBACzF,mEAAmE;gBACnE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAClD,OAAO,MAAM,QAAQ,EAAE,CAAA;gBACzB,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;oBAC5B,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE,CAAC,CAAC,CAAA;gBACjD,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;IAEvB,MAAM,YAAY,GAAG,WAAW,CAA0C,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACzF,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACjC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,OAAO,KAAC,gBAAgB,IAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,SAAG,CAAA;IAC7F,CAAC;IAED,OAAO,KAAC,QAAQ,IAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,GAAI,CAAA;AACrE,CAAC,CAAA"}

package/build/entrypoints.d.ts

@@ -1,7 +1,5 @@
 /** Browser entrypoints for the authentication protocols every client may call. */
-export declare const entrypoints: import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
-    body: import("@owlmeans/auth").AuthToken;
-}, import("@owlmeans/auth").AuthToken>>[];
+export declare const entrypoints: import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<any>[];
 /** Bind the external-authentication screen to one explicitly selected service. */
-export declare const bindExternalAuthentication: (service: string) => import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<import("@owlmeans/entrypoint").OpenRequest, import("@owlmeans/entrypoint").OpenValue>>;
+export declare const bindExternalAuthentication: (service: string) => import("@owlmeans/client-entrypoint").ClientProtocolEntrypoint<any>;
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,kFAAkF;AAClF,eAAO,MAAM,WAAW;;yCAA+C,CAAA;AAEvE,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,YAAa,MAAM,4MAC+B,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,kFAAkF;AAClF,eAAO,MAAM,WAAW,uEAA+C,CAAA;AAEvE,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,YAAa,MAAM,wEAC+B,CAAA"}

package/build/login/consts.local.d.ts

@@ -9,6 +9,10 @@ import type { CSSProperties } from 'react';
  */
 export declare const page: CSSProperties;
 export declare const box: CSSProperties;
+/** The one action of a failed sign-in — the way back, or the retry. */
+export declare const failureAction: CSSProperties;
+/** The library resource the sign-in copy is registered in (`i18n.ts`), in the `lib` namespace. */
+export declare const LOGIN_I18N_RESOURCE = "auth";
 /** The same English fallback a document's `i18nKey` translates to when nothing else names it. */
 export declare const DEFAULT_LABEL: Record<string, string>;
 /** Outcomes after which nobody was signed in, so a screen parked for the landing must not wait. */

package/build/login/consts.local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consts.local.d.ts","sourceRoot":"","sources":["../../src/login/consts.local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,EAAE,aAIlB,CAAA;AAGD,eAAO,MAAM,GAAG,EAAE,aAEjB,CAAA;AAED,iGAAiG;AACjG,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMhD,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,YAAY,CAEtD,CAAA"}
+{"version":3,"file":"consts.local.d.ts","sourceRoot":"","sources":["../../src/login/consts.local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,EAAE,aAIlB,CAAA;AAGD,eAAO,MAAM,GAAG,EAAE,aAEjB,CAAA;AAED,uEAAuE;AACvE,eAAO,MAAM,aAAa,EAAE,aAI3B,CAAA;AAED,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,SAAS,CAAA;AAEzC,iGAAiG;AACjG,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMhD,CAAA;AAED,mGAAmG;AACnG,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,YAAY,CAEtD,CAAA"}

package/build/login/consts.local.js

@@ -15,6 +15,14 @@ export const page = {
 export const box = {
     width: '100%', maxWidth: '24rem', padding: '1.5rem', textAlign: 'center',
 };
+/** The one action of a failed sign-in — the way back, or the retry. */
+export const failureAction = {
+    display: 'inline-block', marginTop: '1rem', padding: '.625rem 1rem', fontSize: '1rem',
+    cursor: 'pointer', borderRadius: '.375rem', border: '1px solid currentColor', background: 'transparent',
+    color: 'inherit',
+};
+/** The library resource the sign-in copy is registered in (`i18n.ts`), in the `lib` namespace. */
+export const LOGIN_I18N_RESOURCE = 'auth';
 /** The same English fallback a document's `i18nKey` translates to when nothing else names it. */
 export const DEFAULT_LABEL = {
     terms: 'Terms & Conditions',

package/build/login/consts.local.js.map

@@ -1 +1 @@
-{"version":3,"file":"consts.local.js","sourceRoot":"","sources":["../../src/login/consts.local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAkB;IACjC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ;IAC/D,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM;IACpC,UAAU,EAAE,uBAAuB,EAAE,UAAU,EAAE,GAAG;CACrD,CAAA;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,GAAG,GAAkB;IAChC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;CACzE,CAAA;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,2BAA2B;CACrC,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,iBAAiB,GAA8B,IAAI,GAAG,CAAe;IAChF,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO;CAChE,CAAC,CAAA"}
+{"version":3,"file":"consts.local.js","sourceRoot":"","sources":["../../src/login/consts.local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAkB;IACjC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ;IAC/D,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM;IACpC,UAAU,EAAE,uBAAuB,EAAE,UAAU,EAAE,GAAG;CACrD,CAAA;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,GAAG,GAAkB;IAChC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;CACzE,CAAA;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM;IACrF,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,UAAU,EAAE,aAAa;IACvG,KAAK,EAAE,SAAS;CACjB,CAAA;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAEzC,iGAAiG;AACjG,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,2BAA2B;CACrC,CAAA;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,iBAAiB,GAA8B,IAAI,GAAG,CAAe;IAChF,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO;CAChE,CAAC,CAAA"}

package/build/login/failure/consts.d.ts

@@ -0,0 +1,17 @@
+/**
+ * What a failed sign-in means for the person looking at it.
+ *
+ * Every kind but {@link LoginFailureKind.Failed} is a refusal of THIS account: trying again with it
+ * changes nothing, so a screen offers the way back to the sign-in choice instead of a retry.
+ */
+export declare enum LoginFailureKind {
+    /** The server refused this account here (403 with the access-denied marker, or `AuthRefused`). */
+    Refused = "refused",
+    /** The account is banned — the refusal code `account:disabled` was visible. */
+    AccountDisabled = "account-disabled",
+    /** The account's access to this application is blocked — `profile:disabled` was visible. */
+    ProfileDisabled = "profile-disabled",
+    /** Anything else: a fault, a timeout, a network error, an expired attempt. Worth a retry. */
+    Failed = "failed"
+}
+//# sourceMappingURL=consts.d.ts.map

package/build/login/failure/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../../src/login/failure/consts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,oBAAY,gBAAgB;IAC1B,kGAAkG;IAClG,OAAO,YAAY;IACnB,+EAA+E;IAC/E,eAAe,qBAAqB;IACpC,4FAA4F;IAC5F,eAAe,qBAAqB;IACpC,6FAA6F;IAC7F,MAAM,WAAW;CAClB"}

package/build/login/failure/consts.js

@@ -0,0 +1,18 @@
+/**
+ * What a failed sign-in means for the person looking at it.
+ *
+ * Every kind but {@link LoginFailureKind.Failed} is a refusal of THIS account: trying again with it
+ * changes nothing, so a screen offers the way back to the sign-in choice instead of a retry.
+ */
+export var LoginFailureKind;
+(function (LoginFailureKind) {
+    /** The server refused this account here (403 with the access-denied marker, or `AuthRefused`). */
+    LoginFailureKind["Refused"] = "refused";
+    /** The account is banned — the refusal code `account:disabled` was visible. */
+    LoginFailureKind["AccountDisabled"] = "account-disabled";
+    /** The account's access to this application is blocked — `profile:disabled` was visible. */
+    LoginFailureKind["ProfileDisabled"] = "profile-disabled";
+    /** Anything else: a fault, a timeout, a network error, an expired attempt. Worth a retry. */
+    LoginFailureKind["Failed"] = "failed";
+})(LoginFailureKind || (LoginFailureKind = {}));
+//# sourceMappingURL=consts.js.map

package/build/login/failure/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../../src/login/failure/consts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAN,IAAY,gBASX;AATD,WAAY,gBAAgB;IAC1B,kGAAkG;IAClG,uCAAmB,CAAA;IACnB,+EAA+E;IAC/E,wDAAoC,CAAA;IACpC,4FAA4F;IAC5F,wDAAoC,CAAA;IACpC,6FAA6F;IAC7F,qCAAiB,CAAA;AACnB,CAAC,EATW,gBAAgB,KAAhB,gBAAgB,QAS3B"}

package/build/login/failure/consts.local.d.ts

@@ -0,0 +1,17 @@
+import { LoginFailureKind } from './consts.js';
+/** The `auth` library key and English fallback phrasing each kind (`login.error.<kind>`). */
+export declare const FAILURE_COPY: Readonly<Record<LoginFailureKind, readonly [string, string]>>;
+/** The action of a refusal: back to the choice of how to sign in. */
+export declare const BACK_COPY: readonly [string, string];
+/** The action of any other failure: the same attempt once more. */
+export declare const RETRY_COPY: readonly [string, string];
+/** The incident id a person can report — filled AFTER translation, never as an i18next parameter. */
+export declare const INCIDENT_COPY: readonly [string, string];
+export declare const INCIDENT_PLACEHOLDER = "{{incident}}";
+/**
+ * A refusal code, wherever a message exposes it: the identity store's sign-in refusal
+ * (`auth:manager:authen:<code>`, `AuthRefused` and the `AuthenFailed` it extends) and the integrated
+ * IAM finalizer's (`auth:authorization:forbidden:<code>`). The lookahead keeps `…:disabled-x` out.
+ */
+export declare const REFUSAL_CODES: ReadonlyArray<readonly [RegExp, LoginFailureKind]>;
+//# sourceMappingURL=consts.local.d.ts.map

package/build/login/failure/consts.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.d.ts","sourceRoot":"","sources":["../../../src/login/failure/consts.local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,6FAA6F;AAC7F,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAUrF,CAAA;AAEF,qEAAqE;AACrE,eAAO,MAAM,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAmE,CAAA;AAEnH,mEAAmE;AACnE,eAAO,MAAM,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAA8D,CAAA;AAE/G,qGAAqG;AACrG,eAAO,MAAM,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAA+E,CAAA;AAEnI,eAAO,MAAM,oBAAoB,iBAAiB,CAAA;AAElD;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAGlE,CAAA"}

package/build/login/failure/consts.local.js

@@ -0,0 +1,30 @@
+import { LoginFailureKind } from './consts.js';
+/** The `auth` library key and English fallback phrasing each kind (`login.error.<kind>`). */
+export const FAILURE_COPY = Object.freeze({
+    [LoginFailureKind.Refused]: ['login.error.refused', 'This account cannot sign in here.'],
+    [LoginFailureKind.AccountDisabled]: [
+        'login.error.account-disabled', 'This account has been disabled and cannot sign in here.',
+    ],
+    [LoginFailureKind.ProfileDisabled]: [
+        'login.error.profile-disabled',
+        'This account’s access to this application has been blocked, so it cannot sign in here.',
+    ],
+    [LoginFailureKind.Failed]: ['login.error.failed', 'Sign-in did not complete. Please try again.'],
+});
+/** The action of a refusal: back to the choice of how to sign in. */
+export const BACK_COPY = Object.freeze(['login.error.back', 'Back to sign-in']);
+/** The action of any other failure: the same attempt once more. */
+export const RETRY_COPY = Object.freeze(['login.error.retry', 'Try again']);
+/** The incident id a person can report — filled AFTER translation, never as an i18next parameter. */
+export const INCIDENT_COPY = Object.freeze(['login.error.incident', 'Reference: {{incident}}']);
+export const INCIDENT_PLACEHOLDER = '{{incident}}';
+/**
+ * A refusal code, wherever a message exposes it: the identity store's sign-in refusal
+ * (`auth:manager:authen:<code>`, `AuthRefused` and the `AuthenFailed` it extends) and the integrated
+ * IAM finalizer's (`auth:authorization:forbidden:<code>`). The lookahead keeps `…:disabled-x` out.
+ */
+export const REFUSAL_CODES = Object.freeze([
+    [/(?:authen|forbidden):account:disabled(?![\w-])/, LoginFailureKind.AccountDisabled],
+    [/(?:authen|forbidden):profile:disabled(?![\w-])/, LoginFailureKind.ProfileDisabled],
+]);
+//# sourceMappingURL=consts.local.js.map

package/build/login/failure/consts.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.js","sourceRoot":"","sources":["../../../src/login/failure/consts.local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,YAAY,GAAkE,MAAM,CAAC,MAAM,CAAC;IACvG,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,qBAAqB,EAAE,mCAAmC,CAAC;IACxF,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE;QAClC,8BAA8B,EAAE,yDAAyD;KAC1F;IACD,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE;QAClC,8BAA8B;QAC9B,wFAAwF;KACzF;IACD,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,EAAE,6CAA6C,CAAC;CACjG,CAAC,CAAA;AAEF,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAA8B,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,iBAAiB,CAAU,CAAC,CAAA;AAEnH,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAA8B,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,WAAW,CAAU,CAAC,CAAA;AAE/G,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAA8B,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,EAAE,yBAAyB,CAAU,CAAC,CAAA;AAEnI,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAA;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAuD,MAAM,CAAC,MAAM,CAAC;IAC7F,CAAC,gDAAgD,EAAE,gBAAgB,CAAC,eAAe,CAAC;IACpF,CAAC,gDAAgD,EAAE,gBAAgB,CAAC,eAAe,CAAC;CAC5E,CAAC,CAAA"}

package/build/login/failure/types.d.ts

@@ -0,0 +1,57 @@
+import type { CSSProperties } from 'react';
+import type { LoginFailureKind } from './consts.js';
+import type { LoginTranslate } from '../types.js';
+/** A failed sign-in, read for the person who has to act on it. */
+export interface LoginFailure {
+    kind: LoginFailureKind;
+    /** A refusal of this account — retrying with it changes nothing. */
+    refused: boolean;
+    /** The `auth` library key that phrases it (`login.error.<kind>`); an app overrides it there. */
+    key: string;
+    /** The English sentence used when no translation resolves the key. */
+    fallback: string;
+    /** The server's incident id, when it sent one — what a person reports for a failure. */
+    incidentId: string | null;
+}
+/** The three lines a failure view renders, already translated. */
+export interface LoginFailurePhrase {
+    message: string;
+    /** `Reference: <id>` for a failure that is not a refusal and carries an incident id. */
+    incident: string | null;
+    /** The action's label: "Back to sign-in" for a refusal, "Try again" otherwise. */
+    action: string;
+}
+/**
+ * How every OwlMeans sign-in surface reads a failed attempt — the Google callback, the supervisor
+ * form, the dispatcher's exchange and the sign-in screens — so they phrase it the same way.
+ */
+export interface LoginFailureHelper {
+    /**
+     * What a caught sign-in error means.
+     *
+     * A visible refusal code comes first (`account:disabled`, `profile:disabled` — a development body
+     * rebuilt into its class, or a message that names it); then a refusal without one: an
+     * `AuthRefused` of any module copy, or the production answer `apiStatusHelper.isAccessDenied`
+     * recognises (403 with `X-OwlMeans-Denial: access-denied`). Anything else — a 403 without the
+     * marker included, since plan and entitlement refusals use that status too — is `Failed`.
+     */
+    failureOf: (error: unknown) => LoginFailure;
+    /** `failureOf(error).refused`. */
+    isRefusal: (error: unknown) => boolean;
+    /** The failure's sentences through `translate` (the `auth` library keys), English without one. */
+    phrase: (failure: LoginFailure, translate?: LoginTranslate) => LoginFailurePhrase;
+}
+export interface LoginFailureViewProps {
+    failure: LoginFailure;
+    /** `(key, defaultValue) => string` over the `auth` library — a prop, never an implicit i18n read. */
+    translate?: LoginTranslate;
+    /**
+     * What the action button does — the way back to the sign-in choice for a refusal, the same
+     * attempt again otherwise. Omitted, no button is rendered.
+     */
+    onAction?: () => void;
+    /** Wrap the notice in the centred full-viewport page of the plain sign-in screen. */
+    page?: boolean;
+    style?: CSSProperties;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/login/failure/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/login/failure/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAA;IACtB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAA;IAChB,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAA;IACX,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAA;IAChB,wFAAwF;IACxF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,wFAAwF;IACxF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;OAQG;IACH,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,YAAY,CAAA;IAC3C,kCAAkC;IAClC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAA;IACtC,kGAAkG;IAClG,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,cAAc,KAAK,kBAAkB,CAAA;CAClF;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,YAAY,CAAA;IACrB,qGAAqG;IACrG,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,qFAAqF;IACrF,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB"}

package/build/login/failure/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/login/failure/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/login/failure/types.ts"],"names":[],"mappings":""}

package/build/login/failure-view.d.ts

@@ -0,0 +1,14 @@
+import type { FC } from 'react';
+import type { LoginFailureViewProps } from './failure/types.js';
+/**
+ * The end state of a sign-in that did not complete: one phrased sentence, the incident reference of
+ * a failure, and the way on — back to the sign-in choice for a refusal, the same attempt again
+ * otherwise.
+ *
+ * Plain like `FallbackLoginScreen` — raw elements, inline styles, no class a consumer's stylesheet
+ * must scan for — so any OwlMeans surface can end on it, whatever UI family it belongs to. Hooks for
+ * tests and styling: `[data-login-failure="<kind>"]`, `[data-login-failure-message]`,
+ * `[data-login-failure-incident]`, `[data-login-failure-action]`.
+ */
+export declare const LoginFailureView: FC<LoginFailureViewProps>;
+//# sourceMappingURL=failure-view.d.ts.map

package/build/login/failure-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-view.d.ts","sourceRoot":"","sources":["../../src/login/failure-view.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAG/B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAE/D;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAmBtD,CAAA"}

package/build/login/failure-view.js

@@ -0,0 +1,19 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { loginFailureHelper } from './failure.js';
+import { box, failureAction, page } from './consts.local.js';
+/**
+ * The end state of a sign-in that did not complete: one phrased sentence, the incident reference of
+ * a failure, and the way on — back to the sign-in choice for a refusal, the same attempt again
+ * otherwise.
+ *
+ * Plain like `FallbackLoginScreen` — raw elements, inline styles, no class a consumer's stylesheet
+ * must scan for — so any OwlMeans surface can end on it, whatever UI family it belongs to. Hooks for
+ * tests and styling: `[data-login-failure="<kind>"]`, `[data-login-failure-message]`,
+ * `[data-login-failure-incident]`, `[data-login-failure-action]`.
+ */
+export const LoginFailureView = ({ failure, translate, onAction, page: full, style }) => {
+    const phrase = loginFailureHelper.phrase(failure, translate);
+    const notice = _jsxs("div", { role: "alert", "data-login-failure": failure.kind, "data-login-refused": failure.refused ? 'true' : undefined, style: { ...box, ...style }, children: [_jsx("p", { "data-login-failure-message": true, style: { margin: 0 }, children: phrase.message }), phrase.incident != null && _jsx("p", { "data-login-failure-incident": true, style: { marginTop: '.5rem', fontSize: '.75rem', opacity: .7 }, children: phrase.incident }), onAction != null && _jsx("button", { type: "button", "data-login-failure-action": true, style: failureAction, onClick: onAction, children: phrase.action })] });
+    return full === true ? _jsx("div", { "data-login-failure-page": true, style: page, children: notice }) : notice;
+};
+//# sourceMappingURL=failure-view.js.map

package/build/login/failure-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-view.js","sourceRoot":"","sources":["../../src/login/failure-view.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAG5D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8B,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;IACjH,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAE5D,MAAM,MAAM,GAAG,eACb,IAAI,EAAC,OAAO,wBACQ,OAAO,CAAC,IAAI,wBACZ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACxD,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,aAE3B,gDAA8B,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,YAAG,MAAM,CAAC,OAAO,GAAK,EACvE,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,iDAA+B,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,YACtH,MAAM,CAAC,QAAQ,GACd,EACH,QAAQ,IAAI,IAAI,IAAI,iBAAQ,IAAI,EAAC,QAAQ,qCAA2B,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,YACzG,MAAM,CAAC,MAAM,GACP,IACL,CAAA;IAEN,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,+CAA6B,KAAK,EAAE,IAAI,YAAG,MAAM,GAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AAC1F,CAAC,CAAA"}

package/build/login/failure.d.ts

@@ -0,0 +1,4 @@
+import type { LoginFailureHelper } from './failure/types.js';
+export declare const createLoginFailureHelper: () => LoginFailureHelper;
+export declare const loginFailureHelper: LoginFailureHelper;
+//# sourceMappingURL=failure.d.ts.map

package/build/login/failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure.d.ts","sourceRoot":"","sources":["../../src/login/failure.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAgB,kBAAkB,EAAsB,MAAM,oBAAoB,CAAA;AAG9F,eAAO,MAAM,wBAAwB,QAAO,kBAuD3C,CAAA;AAED,eAAO,MAAM,kBAAkB,oBAA6B,CAAA"}

package/build/login/failure.js

@@ -0,0 +1,50 @@
+import { AuthRefused } from '@owlmeans/auth';
+import { apiStatusHelper } from '@owlmeans/api/status';
+import { LoginFailureKind } from './failure/consts.js';
+import { BACK_COPY, FAILURE_COPY, INCIDENT_COPY, INCIDENT_PLACEHOLDER, REFUSAL_CODES, RETRY_COPY, } from './failure/consts.local.js';
+export const createLoginFailureHelper = () => {
+    const english = (_key, defaultValue) => defaultValue;
+    /** The message and type a caught value carries — a non-object carries none. */
+    const textOf = (error) => {
+        if (error == null || typeof error !== 'object') {
+            return typeof error === 'string' ? error : '';
+        }
+        const { message, type } = error;
+        return [message, type].filter((part) => typeof part === 'string').join(' ');
+    };
+    const codeOf = (error) => {
+        const text = textOf(error);
+        return REFUSAL_CODES.find(([marker]) => marker.test(text))?.[1] ?? null;
+    };
+    /** `AuthRefused` of this or another module copy: `instanceof` answers across copies by type name. */
+    const isRefusedClass = (error) => error instanceof AuthRefused
+        || (error != null && typeof error === 'object' && error.type === AuthRefused.typeName);
+    const failureOf = (error) => {
+        const kind = codeOf(error)
+            ?? (isRefusedClass(error) || apiStatusHelper.isAccessDenied(error) ? LoginFailureKind.Refused : LoginFailureKind.Failed);
+        const [key, fallback] = FAILURE_COPY[kind];
+        return {
+            kind,
+            refused: kind !== LoginFailureKind.Failed,
+            key,
+            fallback,
+            incidentId: apiStatusHelper.incidentIdOf(error),
+        };
+    };
+    const isRefusal = (error) => failureOf(error).refused;
+    const phrase = (failure, translate = english) => {
+        const [actionKey, actionFallback] = failure.refused ? BACK_COPY : RETRY_COPY;
+        // A refusal is the person's condition, not an incident to report: no reference line.
+        const incident = !failure.refused && failure.incidentId != null
+            ? translate(INCIDENT_COPY[0], INCIDENT_COPY[1]).split(INCIDENT_PLACEHOLDER).join(failure.incidentId)
+            : null;
+        return {
+            message: translate(failure.key, failure.fallback),
+            incident,
+            action: translate(actionKey, actionFallback),
+        };
+    };
+    return { failureOf, isRefusal, phrase };
+};
+export const loginFailureHelper = createLoginFailureHelper();
+//# sourceMappingURL=failure.js.map

package/build/login/failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure.js","sourceRoot":"","sources":["../../src/login/failure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EACL,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,UAAU,GACxF,MAAM,2BAA2B,CAAA;AAIlC,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAuB,EAAE;IAC/D,MAAM,OAAO,GAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,CAAA;IAEpE,+EAA+E;IAC/E,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE;QACxC,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/C,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAA8C,CAAA;QAExE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC7F,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAE1B,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IACzE,CAAC,CAAA;IAED,qGAAqG;IACrG,MAAM,cAAc,GAAG,CAAC,KAAc,EAAW,EAAE,CACjD,KAAK,YAAY,WAAW;WACzB,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA4B,CAAC,IAAI,KAAK,WAAW,CAAC,QAAQ,CAAC,CAAA;IAEhH,MAAM,SAAS,GAAG,CAAC,KAAc,EAAgB,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;eACrB,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC1H,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAE1C,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,KAAK,gBAAgB,CAAC,MAAM;YACzC,GAAG;YACH,QAAQ;YACR,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC;SAChD,CAAA;IACH,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAA;IAEvE,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAE,SAAS,GAAmB,OAAO,EAAsB,EAAE;QAChG,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;QAC5E,qFAAqF;QACrF,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI;YAC7D,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACpG,CAAC,CAAC,IAAI,CAAA;QAER,OAAO;YACL,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC;YACjD,QAAQ;YACR,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC;SAC7C,CAAA;IACH,CAAC,CAAA;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;AACzC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,EAAE,CAAA"}

package/build/login/i18n/be.json

@@ -34,7 +34,13 @@
         },
         "error": {
             "failed": "Уваход не завершаны. Паспрабуйце яшчэ раз.",
-            "blocked": "Акно ўваходу заблакавана. Націсніце значок заблакаванага ўсплывальнага акна ў адрасным радку браўзера, каб адкрыць яго."
+            "blocked": "Акно ўваходу заблакавана. Націсніце значок заблакаванага ўсплывальнага акна ў адрасным радку браўзера, каб адкрыць яго.",
+            "refused": "З гэтым акаўнтам тут увайсці нельга.",
+            "account-disabled": "Гэты акаўнт адключаны, таму ўвайсці з ім тут нельга.",
+            "profile-disabled": "Доступ гэтага акаўнта да праграмы заблакаваны, таму ўвайсці з ім тут нельга.",
+            "retry": "Паспрабаваць зноў",
+            "back": "Вярнуцца да ўваходу",
+            "incident": "Код звароту: {{incident}}"
         },
         "orphaned": "Уваход выкананы. Можаце закрыць гэтае акно і вярнуцца ў праграму."
     }