@owlmeans/client-flow 0.1.18-rc.4 → 0.1.18-rc.40

package/README.md

@@ -12,7 +12,7 @@ Client-side flow orchestration service for managing multi-step workflows in brow
 ## Installation
 
 ```bash
-bun add @owlmeans/client-flow
+bun add @owlmeans/client-flow@^0.1.18-rc.40
 ```
 
 ## Usage
@@ -75,7 +75,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills
+npx @owlmeans/agent-skills@^0.1.18-rc.34
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/client-flow",
-  "version": "0.1.18-rc.0",
-  "generatedAt": "2026-08-16T22:20:50.497Z",
+  "version": "0.1.18-rc.40",
+  "generatedAt": "2026-09-22T20:45:24.035Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/client-flow/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: client-flow
-description: How to use @owlmeans/client-flow — client-side flow execution service that drives @owlmeans/flow definitions through state transitions. Auto-invoked when importing client flow primitives.
+description: How to use @owlmeans/client-flow — the platform-agnostic flow service (makeBasicFlowService) that loads @owlmeans/flow definitions from config records, createFlowClient(context, nav), the runner a screen drives to advance a flow and navigate to each step, and suspendFlow/resumeSuspendedFlow, the side-band landing that returns a person to where they started after sign-in. Auto-invoked when importing client flow primitives, registering a flow service, or moving a screen to the next flow step.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,23 +8,153 @@ user-invocable: false
 # @owlmeans/client-flow
 
 **Layer:** Client
-**Install:** `"@owlmeans/client-flow": "^0.1.18-rc.0"` in `dependencies`
+**Install:** `"@owlmeans/client-flow": "^0.1.18-rc.40"` in `dependencies`
+
+Two objects, with different lifetimes. The **service** lives on the context and owns the flow
+definitions and the one live `FlowModel`. The **client** is built per screen, wraps that model with
+a `Navigator`, and is what a component actually calls.
 
 ## Key Exports
 
 | Export | Description |
 |--------|-------------|
-| `makeFlowService()` | Client flow execution service factory |
-| `client` helpers | Client-side flow client/runner |
-| Constants | Flow service aliases |
+| `makeBasicFlowService(alias?)` | The service factory — the platform-agnostic half. `alias` defaults to `DEFAULT_ALIAS`, which is the only value the runner can find |
+| `FlowService` | `ready()` `state()` `begin(slug?, from?)` `load(token)` `provideFlow` `config()` `proceed(req?, dryRun?)` `resolvePair()` `supplied` `flow` |
+| `createFlowClient(context, nav)` | The runner a screen drives. `nav` is the `Navigator` from `useNavigate()` in `@owlmeans/client` |
+| `FlowClient` | `boot(target: string \| null, from?)` `setup(model)` `flow()` `service()` `proceed(transition, req?)` `persist()` |
+| `StateRecord` / `StateResource` | The `FlowState` stored as a record, and the client resource holding it |
+| `ResolvePair` | The `{ resolve, reject }` behind `service.supplied` |
+| `DEFAULT_ALIAS` (`flow`) | The service alias |
+| `FLOW_STATE` (`state:flow`) | Alias of the client resource the state is persisted in, and the record id inside it |
+| `suspendFlow(context, model, { expiresAt })` · `resumeSuspendedFlow(context)` · `RESUME_FLOW` (`resume-flow`) | The suspended landing: park where a flow was headed before sign-in, read it back once after |
+| `SuspendedLanding` `{ entrypoint, query }` · `SuspendedLandingRecord` | What resumes / what is stored |
+| `EXTRA_FLOW` (`extra-flow`) · `REHACK_MOD` (`__redirect`) | Id of the second, side-band state record kept in the same resource, and the alias of the entrypoint synthesized to address a target service |
+
+## Wiring
+
+```typescript
+import { makeBasicFlowService } from '@owlmeans/client-flow'
+context.registerService(makeBasicFlowService())
+```
+
+**Register it under `DEFAULT_ALIAS`, which is what the no-argument call does.** `createFlowClient`
+resolves its service with a hardcoded `context.service(DEFAULT_ALIAS)`, and `useFlow` in
+`@owlmeans/web-flow` looks the same alias up, so a service registered under any other name is never
+reached and the lookup throws `SyntaxError('Service <alias> not found')`. The `alias` argument
+builds a second instance for a caller that addresses it itself — nothing on the runner path can.
+
+A browser app registers the web service instead — `appendFlowService` from `@owlmeans/web-flow`,
+which builds on this one and also creates the `FLOW_STATE` resource.
 
-## Usage
+## What the service does
+
+Initialization reads every `FLOW_RECORD` config record through the config resource and turns each
+into a `Flow`: `$`-prefixed `service`, `module` and `path` values are resolved against
+`FlowConfig.services` / `modules` / `pathes`, and one serialized entry state is precomputed per
+initial step. `provideFlow` then answers by name out of that table and throws `UnknownFlow` for a
+name it does not hold — which is exactly what `makeFlowModel` needs in order to fall back to
+reading the string as a serialized token.
+
+`begin(slug?, from?)` starts a flow — `slug` defaults to `FlowConfig.defaultFlow`, then to
+`STD_AUTH_FLOW`, and `from` names which **initial** step to enter — while `load(token)` restores one.
+Both set `service.flow` and replace `supplied` with an already-resolved promise. `state()` awaits
+`supplied` before answering, so a screen can ask for the state before the URL has been read; the
+platform half is what resolves the original `supplied` (through `resolvePair()`) when there was
+nothing to restore.
+
+`proceed` on the basic service throws `FlowUnsupported('service.proceed')`. Leaving the flow for
+another service is platform work, and `@owlmeans/web-flow` is what supplies it.
+
+## What the client does
+
+`createFlowClient` needs a `Navigator` — the one `useNavigate()` from `@owlmeans/client` returns.
+In a browser `useFlow()` from `@owlmeans/web-flow` builds the whole thing for the rendering screen;
+build it by hand only outside that.
 
 ```typescript
-import { makeFlowService } from '@owlmeans/client-flow'
-context.registerService(makeFlowService())
+import { useContext, useNavigate } from '@owlmeans/client'
+import { createFlowClient } from '@owlmeans/client-flow'
+
+const context = useContext()
+const nav = useNavigate()
+
+const client = await createFlowClient(context, nav).boot(targetServiceAlias)  // `null` for none
+// ...or createFlowClient(context, nav).setup(model) when a model is already loaded
+
+await client.proceed(client.flow().next())     // advance and go to the next step
+await client.persist()                         // survive a reload
 ```
 
+`boot(target, from?)` takes `string | null`, and `null` is a meaningful argument — it says "no
+target named", which is what the browser hook passes when no `service` query parameter is present.
+
+It waits for the service and asks for the state it already holds. **A live model is adopted as it
+is and nothing else runs** — no target is recorded on that path, and `FlowTargetError` cannot be
+raised from it. Everything below happens only when the service holds no model:
+
+1. When `FLOW_STATE` is registered and holds a record, its flow is begun and the record set as the
+   model's state; a `null` `target` argument then falls back to `record.service`.
+2. With no such record, a fresh flow is begun (`begin(undefined, from)`).
+3. If a target alias resolved by then, `cfg.shortAlias` is translated to `cfg.service`, the alias is
+   looked up with `context.serviceRoute`, and a lookup that throws is re-raised as
+   `FlowTargetError`. The resolved service is recorded on the model with `target()`.
+
+With no alias and no restored record, step 3 is skipped and the state's `service` stays the empty
+string it starts as — `client.service()` then asks `context.serviceRoute('')`, which throws. That
+is the shape of "this flow was booted without a target".
+
+`proceed(transition, req?)` looks the transition's **destination** step up first and raises
+`FlowStepMissconfigured(<that step>)` when it carries no `module` — the check is on the step being
+entered, not the one being left. It then transits the model, merging the previous payload with
+`req.params` and `req.query`, and addresses the destination's entrypoint. When that step's `service`
+is `TARGET_SERVICE`, an entrypoint is synthesized under `REHACK_MOD` pointing at the dispatcher path
+of the state's own target service, so "go back to whoever started this" needs no declaration.
+
+A **relative** URL is an in-app `nav.navigate`: the document stays and nothing serializes the flow
+onto the URL — the live model on the service is what carries it, which is why `persist()` exists.
+Only a URL starting with `http` is handed on to `service.proceed`, the browser redirect that puts
+the serialized flow in the query string. There is no `dryRun` on this method; that argument belongs
+to the service's own `proceed`.
+
+`persist()` saves the state under `FLOW_STATE` and answers `false` when no such resource is
+registered, so persistence is opt-in rather than a hard requirement.
+
+## The suspended landing returns a person to where they started
+
+The single live `FlowService.flow`, the `?flow=` query parameter on `/dispatcher` and the `FLOW_STATE`
+record all belong to the OIDC sign-in machinery, so a flow that must leave for sign-in and come back
+(an OAuth consent screen reached by a signed-out person) cannot use them. It parks a **landing** in a
+side-band record under `RESUME_FLOW` in the same `FLOW_STATE` resource — the `EXTRA_FLOW` precedent —
+which is IndexedDB in a browser and so survives a full-page Google round trip.
+
+- `suspendFlow(context, model, { expiresAt })` asks the model's own `next()` where the current step
+  leads and stores that destination step's **`module`** (an entrypoint alias), the model's `payload()`
+  as `query`, and `expiresAt` (epoch ms). It answers `false` — and stores nothing — when `FLOW_STATE`
+  is not registered, the step has no forward transition, or the destination has no `module`; the
+  caller then lands on `HOME` as before. The record is not a serialized flow token: the destination
+  is a screen the app can enter fresh, reading its own parameters from the query.
+- `resumeSuspendedFlow(context)` returns `{ entrypoint, query }` or `null`, and is **delete-on-read** —
+  a landing answers exactly one sign-in, so a stale tab's record never resurrects on someone else's
+  later sign-in. `null` covers no resource, no record, a failed read and an expired record.
+- **Destinations are entrypoint aliases from a registered flow definition, never stored URLs**, so a
+  landing cannot become an open redirect. Consumers navigate to the alias with the query.
+
+Every sign-in completion asks `resumeSuspendedFlow` before it navigates home: `DispatcherHOC`'s HOME
+branch (`@owlmeans/client-auth`, so the `/dispatcher?token=` and resume paths are covered) and the
+supervisor and Google login plugins (`web-auth`, `web-oidc-rp`) — see [[login-plugins]].
+`bun test ./tests` covers suspend, resume, expiry and the empty cases.
+
 ## Depends On
 
-- `@owlmeans/flow`, `@owlmeans/client-context`, `@owlmeans/client-entrypoint`
+- `@owlmeans/flow` — the definitions, the model and the error family
+- `@owlmeans/client`, `@owlmeans/client-context`, `@owlmeans/client-entrypoint`,
+  `@owlmeans/client-resource`
+- `@owlmeans/config` (the config resource the definitions are read from), `@owlmeans/auth-common`
+  (the dispatcher path), `@owlmeans/context`, `@owlmeans/entrypoint`, `@owlmeans/error`,
+  `@owlmeans/resource`, `@owlmeans/route`
+- `react` (peer)
+
+## Related
+
+- [[flow]] — the definition, state and serialization contract
+- [[web-flow]] — the browser service that supplies `proceed` and `goHome`

package/build/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAQ5D,OAAO,KAAK,EAAE,UAAU,EAA8B,MAAM,YAAY,CAAA;AAIxE,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,SAAS,KAAG,UAgHjH,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAS5D,OAAO,KAAK,EAAE,UAAU,EAA8B,MAAM,YAAY,CAAA;AAIxE,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,SAAS,KAAG,UAiHjH,CAAA"}

package/build/client.js

@@ -1,4 +1,5 @@
-import { entrypoint, stab } from '@owlmeans/client-entrypoint';
+import { bindScreen, stab } from '@owlmeans/client-entrypoint';
+import { openProtocol } from '@owlmeans/entrypoint';
 import { route, frontend } from '@owlmeans/route';
 import { FlowStepMissconfigured, FlowTargetError, TARGET_SERVICE } from '@owlmeans/flow';
 import { ResilientError } from '@owlmeans/error';
@@ -67,15 +68,16 @@ export const createFlowClient = (context, nav) => {
             let redirectTo;
             // @TODO Properly use target service - as a way to build the redirect URL
             if (step.service === TARGET_SERVICE) {
-                context.registerEntrypoint(entrypoint(route(REHACK_MOD, DISPATCHER_PATH, frontend({ service: model.state().service })), stab));
-                redirectTo = context.entrypoint(REHACK_MOD);
-                await redirectTo.resolve();
+                const redirectProtocol = openProtocol(route(REHACK_MOD, DISPATCHER_PATH, frontend({ service: model.state().service })));
+                const bound = bindScreen(redirectProtocol, stab);
+                context.registerEntrypoint(bound);
+                redirectTo = bound;
                 step.module = REHACK_MOD;
             }
             else {
                 redirectTo = context.entrypoint(step.module);
             }
-            const [url] = await redirectTo.call(req);
+            const url = await redirectTo.url(req);
             if (url.startsWith('http')) {
                 await service.proceed(req);
             }

package/build/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAE9D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAExF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAqD,OAAU,EAAE,GAAc,EAAc,EAAE;IAC7H,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAc,aAAa,CAAC,CAAA;IAE3D,IAAI,KAAgB,CAAA;IAEpB,MAAM,OAAO,GAAe;QAC1B,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrB,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YAClC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAgB,UAAU,CAAC,CAAA;oBAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBAC9C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;wBACnB,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;wBACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;wBACvB,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;4BACxB,WAAW,GAAG,MAAM,CAAC,OAAO,CAAA;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;gBAC/C,CAAC;gBAED,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,WAAW,GAAG,WAAW,KAAK,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;oBACxF,IAAI,MAA4B,CAAA;oBAChC,IAAI,CAAC;wBACH,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,CAAyB,CAAA;oBACpE,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;wBAC7C,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;wBAC9C,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,KAAK,CAAA;wBAEhC,MAAM,KAAK,CAAA;oBACb,CAAC;oBACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC/B,CAAC;YACH,CAAC;YAED,KAAK,GAAG,MAAM,CAAA;YAEd,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,GAAG,IAAI,CAAA;YAEZ,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK;QAEjB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,CAAyB;QAElF,+EAA+E;QAC/E,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7C,CAAC;YAGD,8DAA8D;YAC9D,sCAAsC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;YAChC,sEAAsE;YACtE,yEAAyE;YACzE,oEAAoE;YACpE,oEAAoE;YACpE,KAAK,CAAC,OAAO,CACX,UAAU,CAAC,UAAU,EAAE,IAAI,EAC3B,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,KAAK,EAA4B,CACzE,CAAA;YAED,IAAI,UAAoC,CAAA;YACxC,yEAAyE;YACzE,IAAI,IAAI,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;gBACpC,OAAO,CAAC,kBAAkB,CAAC,UAAU,CACnC,KAAK,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CACvF,CAAC,CAAA;gBACF,UAAU,GAAG,OAAO,CAAC,UAAU,CAA2B,UAAU,CAAC,CAAA;gBACrE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAA;gBAC1B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,OAAO,CAAC,UAAU,CAAmB,IAAI,CAAC,MAAM,CAAC,CAAA;YAChE,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,CAAS,GAAG,CAAC,CAAA;YAEhD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;YACrC,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAgB,UAAU,CAAC,CAAA;gBAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;gBAC5B,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;gBAElD,OAAO,IAAI,CAAA;YACb,CAAC;YAED,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAExF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAqD,OAAU,EAAE,GAAc,EAAc,EAAE;IAC7H,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAc,aAAa,CAAC,CAAA;IAE3D,IAAI,KAAgB,CAAA;IAEpB,MAAM,OAAO,GAAe;QAC1B,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrB,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YAClC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAgB,UAAU,CAAC,CAAA;oBAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBAC9C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;wBACnB,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;wBACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;wBACvB,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;4BACxB,WAAW,GAAG,MAAM,CAAC,OAAO,CAAA;wBAC9B,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;gBAC/C,CAAC;gBAED,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,WAAW,GAAG,WAAW,KAAK,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;oBACxF,IAAI,MAA4B,CAAA;oBAChC,IAAI,CAAC;wBACH,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,CAAyB,CAAA;oBACpE,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;wBAC7C,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;wBAC9C,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,KAAK,CAAA;wBAEhC,MAAM,KAAK,CAAA;oBACb,CAAC;oBACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC/B,CAAC;YACH,CAAC;YAED,KAAK,GAAG,MAAM,CAAA;YAEd,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,GAAG,IAAI,CAAA;YAEZ,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK;QAEjB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,CAAyB;QAElF,+EAA+E;QAC/E,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7C,CAAC;YAGD,8DAA8D;YAC9D,sCAAsC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;YAChC,sEAAsE;YACtE,yEAAyE;YACzE,oEAAoE;YACpE,oEAAoE;YACpE,KAAK,CAAC,OAAO,CACX,UAAU,CAAC,UAAU,EAAE,IAAI,EAC3B,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,KAAK,EAA4B,CACzE,CAAA;YAED,IAAI,UAAoC,CAAA;YACxC,yEAAyE;YACzE,IAAI,IAAI,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;gBACpC,MAAM,gBAAgB,GAAG,YAAY,CACnC,KAAK,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CACjF,CAAA;gBACD,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;gBAChD,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;gBACjC,UAAU,GAAG,KAA4C,CAAA;gBACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,OAAO,CAAC,UAAU,CAAmB,IAAI,CAAC,MAAM,CAAC,CAAA;YAChE,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAErC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;YACrC,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAgB,UAAU,CAAC,CAAA;gBAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;gBAC5B,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;gBAElD,OAAO,IAAI,CAAA;YACb,CAAC;YAED,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/index.d.ts

@@ -2,4 +2,5 @@ export type * from './types.js';
 export * from './consts.js';
 export * from './client.js';
 export * from './service.js';
+export * from './landing.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA"}

package/build/index.js

@@ -1,4 +1,5 @@
 export * from './consts.js';
 export * from './client.js';
 export * from './service.js';
+export * from './landing.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA"}

package/build/landing.d.ts

@@ -0,0 +1,48 @@
+import type { ClientContext } from '@owlmeans/client';
+import type { ClientConfig } from '@owlmeans/client-context';
+import type { ResourceRecord } from '@owlmeans/resource';
+import type { FlowModel, FlowPayload } from '@owlmeans/flow';
+/** The record id a suspended landing is stored under, in the SAME resource `EXTRA_FLOW` uses —
+ * a side-band slot, never the live `FlowService.flow` and never the `?flow=` query parameter. */
+export declare const RESUME_FLOW = "resume-flow";
+export interface SuspendedLandingRecord extends ResourceRecord {
+    /** The entrypoint alias to navigate to once sign-in completes. */
+    entrypoint: string;
+    /** The flow's payload at the moment it was suspended — carried along as the destination's query. */
+    query: FlowPayload;
+    expiresAt: number;
+}
+export interface SuspendedLanding {
+    entrypoint: string;
+    query: FlowPayload;
+}
+/**
+ * Suspend a flow that is about to leave for the platform's own sign-in dispatcher, so whichever
+ * sign-in method completes can send the person back to where they started instead of `HOME`.
+ *
+ * Driven by the flow model rather than a raw URL: `model.next()` is the flow's own answer to
+ * "where does this step lead", so a caller never re-derives a destination the flow already knows,
+ * and a flow whose current step offers no way forward (`next()` throws) suspends nothing rather
+ * than persisting a landing that can never be reached. The persisted record is deliberately NOT a
+ * serialized flow token — the destination step is always one this application can enter fresh (an
+ * `initial`-marked screen reading its own `ref`/`kind` from the query), so nothing needs to
+ * reconstruct the exact `FlowModel` instance on the other side of a sign-in redirect, and this
+ * helper stays usable by any flow, not only one particular package's.
+ *
+ * Returns `false` when there is nowhere to persist this (no `FLOW_STATE` resource registered) or
+ * nothing to suspend to (the current step has no forward transition, or its destination has no
+ * `module`) — the caller falls back to its own default landing (ordinarily `HOME`).
+ */
+export declare const suspendFlow: <C extends ClientConfig, T extends ClientContext<C>>(context: T, model: FlowModel, opts: {
+    expiresAt: number;
+}) => Promise<boolean>;
+/**
+ * Read back a suspended landing, once. Delete-on-read: the record answers exactly one sign-in,
+ * because a landing a stale browser tab left behind must never resurrect on somebody else's
+ * sign-in later in the same session.
+ *
+ * `null` covers every reason there is nothing to resume: no resource, no record, or a record
+ * whose window has closed — the caller's own default landing is exactly as safe an answer.
+ */
+export declare const resumeSuspendedFlow: <C extends ClientConfig, T extends ClientContext<C>>(context: T) => Promise<SuspendedLanding | null>;
+//# sourceMappingURL=landing.d.ts.map

package/build/landing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"landing.d.ts","sourceRoot":"","sources":["../src/landing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAG5D;iGACiG;AACjG,eAAO,MAAM,WAAW,gBAAgB,CAAA;AAExC,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAClB,oGAAoG;IACpG,KAAK,EAAE,WAAW,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,WAAW,CAAA;CACnB;AAOD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,WAAW,GAAU,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,WACzE,CAAC,SAAS,SAAS,QAAQ;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,KACxD,OAAO,CAAC,OAAO,CAkBjB,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,GAAU,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,WACjF,CAAC,KACT,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAgBjC,CAAA"}

package/build/landing.js

@@ -0,0 +1,68 @@
+import { FLOW_STATE } from './consts.js';
+/** The record id a suspended landing is stored under, in the SAME resource `EXTRA_FLOW` uses —
+ * a side-band slot, never the live `FlowService.flow` and never the `?flow=` query parameter. */
+export const RESUME_FLOW = 'resume-flow';
+const landingResource = (context) => context.hasResource(FLOW_STATE) ? context.resource(FLOW_STATE) : null;
+/**
+ * Suspend a flow that is about to leave for the platform's own sign-in dispatcher, so whichever
+ * sign-in method completes can send the person back to where they started instead of `HOME`.
+ *
+ * Driven by the flow model rather than a raw URL: `model.next()` is the flow's own answer to
+ * "where does this step lead", so a caller never re-derives a destination the flow already knows,
+ * and a flow whose current step offers no way forward (`next()` throws) suspends nothing rather
+ * than persisting a landing that can never be reached. The persisted record is deliberately NOT a
+ * serialized flow token — the destination step is always one this application can enter fresh (an
+ * `initial`-marked screen reading its own `ref`/`kind` from the query), so nothing needs to
+ * reconstruct the exact `FlowModel` instance on the other side of a sign-in redirect, and this
+ * helper stays usable by any flow, not only one particular package's.
+ *
+ * Returns `false` when there is nowhere to persist this (no `FLOW_STATE` resource registered) or
+ * nothing to suspend to (the current step has no forward transition, or its destination has no
+ * `module`) — the caller falls back to its own default landing (ordinarily `HOME`).
+ */
+export const suspendFlow = async (context, model, opts) => {
+    const resource = landingResource(context);
+    if (resource == null)
+        return false;
+    let destinationModule;
+    try {
+        const transition = model.next();
+        destinationModule = model.step(transition.step).module;
+    }
+    catch {
+        return false;
+    }
+    if (destinationModule == null)
+        return false;
+    await resource.save({
+        id: RESUME_FLOW, entrypoint: destinationModule, query: model.payload(), expiresAt: opts.expiresAt,
+    });
+    return true;
+};
+/**
+ * Read back a suspended landing, once. Delete-on-read: the record answers exactly one sign-in,
+ * because a landing a stale browser tab left behind must never resurrect on somebody else's
+ * sign-in later in the same session.
+ *
+ * `null` covers every reason there is nothing to resume: no resource, no record, or a record
+ * whose window has closed — the caller's own default landing is exactly as safe an answer.
+ */
+export const resumeSuspendedFlow = async (context) => {
+    const resource = landingResource(context);
+    if (resource == null)
+        return null;
+    let record;
+    try {
+        record = await resource.load(RESUME_FLOW);
+    }
+    catch {
+        return null;
+    }
+    if (record == null)
+        return null;
+    await resource.delete(RESUME_FLOW).catch(() => undefined);
+    if (record.expiresAt < Date.now())
+        return null;
+    return { entrypoint: record.entrypoint, query: record.query };
+};
+//# sourceMappingURL=landing.js.map

package/build/landing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"landing.js","sourceRoot":"","sources":["../src/landing.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC;iGACiG;AACjG,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAA;AAexC,MAAM,eAAe,GAAG,CACtB,OAAU,EACqC,EAAE,CACjD,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAyC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAE/G;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,OAAU,EAAE,KAAgB,EAAE,IAA2B,EACvC,EAAE;IACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,KAAK,CAAA;IAElC,IAAI,iBAAqC,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC/B,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,iBAAiB,IAAI,IAAI;QAAE,OAAO,KAAK,CAAA;IAE3C,MAAM,QAAQ,CAAC,IAAI,CAAC;QAClB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;KAClG,CAAC,CAAA;IAEF,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,OAAU,EACwB,EAAE;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAEjC,IAAI,MAAqC,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAE/B,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACzD,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;AAC/D,CAAC,CAAA"}

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@owlmeans/client-flow",
-  "version": "0.1.18-rc.4",
+  "version": "0.1.18-rc.40",
   "license": "MIT",
   "type": "module",
   "scripts": {
     "build": "tsc -b",
     "dev": "sleep 90 && nodemon -e ts,tsx,json --watch src --exec \"tsc -p ./tsconfig.json\"",
-    "watch": "tsc -b -w --preserveWatchOutput --pretty"
+    "watch": "tsc -b -w --preserveWatchOutput --pretty",
+    "test": "bun test ./tests"
   },
   "main": "build/index.js",
   "module": "build/index.js",
@@ -21,24 +22,26 @@
     }
   },
   "dependencies": {
-    "@owlmeans/auth-common": "^0.1.18-rc.4",
-    "@owlmeans/client": "^0.1.18-rc.4",
-    "@owlmeans/client-context": "^0.1.18-rc.4",
-    "@owlmeans/client-entrypoint": "^0.1.18-rc.4",
-    "@owlmeans/client-resource": "^0.1.18-rc.4",
-    "@owlmeans/config": "^0.1.18-rc.4",
-    "@owlmeans/context": "^0.1.18-rc.4",
-    "@owlmeans/error": "^0.1.18-rc.4",
-    "@owlmeans/flow": "^0.1.18-rc.4",
-    "@owlmeans/entrypoint": "^0.1.18-rc.4",
-    "@owlmeans/resource": "^0.1.18-rc.4",
-    "@owlmeans/route": "^0.1.18-rc.4"
+    "@owlmeans/auth-common": "^0.1.18-rc.34",
+    "@owlmeans/client": "^0.1.18-rc.37",
+    "@owlmeans/client-context": "^0.1.18-rc.35",
+    "@owlmeans/client-entrypoint": "^0.1.18-rc.34",
+    "@owlmeans/client-resource": "^0.1.18-rc.34",
+    "@owlmeans/config": "^0.1.18-rc.34",
+    "@owlmeans/context": "^0.1.18-rc.30",
+    "@owlmeans/error": "^0.1.18-rc.32",
+    "@owlmeans/flow": "^0.1.18-rc.35",
+    "@owlmeans/entrypoint": "^0.1.18-rc.33",
+    "@owlmeans/resource": "^0.1.18-rc.32",
+    "@owlmeans/route": "^0.1.18-rc.31"
   },
   "peerDependencies": {
     "react": "*"
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
+    "@owlmeans/static-resource": "^0.1.18-rc.31",
+    "@types/bun": "^1.4.0",
     "nodemon": "^3.1.14",
     "typescript": "^7.0.2"
   },

package/src/client.ts

@@ -1,7 +1,8 @@
 import type { ClientContext, Navigator } from '@owlmeans/client'
 import type { ClientConfig } from '@owlmeans/client-context'
 import type { ClientEntrypoint } from '@owlmeans/client-entrypoint'
-import { entrypoint, stab } from '@owlmeans/client-entrypoint'
+import { bindScreen, stab } from '@owlmeans/client-entrypoint'
+import { openProtocol } from '@owlmeans/entrypoint'
 import type { ResolvedServiceRoute } from '@owlmeans/route'
 import { route, frontend } from '@owlmeans/route'
 import { FlowStepMissconfigured, FlowTargetError, TARGET_SERVICE } from '@owlmeans/flow'
@@ -90,17 +91,18 @@ export const createFlowClient = <C extends ClientConfig, T extends ClientContext
       let redirectTo: ClientEntrypoint<string>
       // @TODO Properly use target service - as a way to build the redirect URL
       if (step.service === TARGET_SERVICE) {
-        context.registerEntrypoint(entrypoint(
-          route(REHACK_MOD, DISPATCHER_PATH, frontend({ service: model.state().service })), stab
-        ))
-        redirectTo = context.entrypoint<ClientEntrypoint<string>>(REHACK_MOD)
-        await redirectTo.resolve()
+        const redirectProtocol = openProtocol(
+          route(REHACK_MOD, DISPATCHER_PATH, frontend({ service: model.state().service })),
+        )
+        const bound = bindScreen(redirectProtocol, stab)
+        context.registerEntrypoint(bound)
+        redirectTo = bound as unknown as ClientEntrypoint<string>
         step.module = REHACK_MOD
       } else {
         redirectTo = context.entrypoint<ClientEntrypoint>(step.module)
       }
 
-      const [url] = await redirectTo.call<string>(req)
+      const url = await redirectTo.url(req)
 
       if (url.startsWith('http')) {
         await service.proceed(req)

package/src/index.ts

@@ -2,3 +2,4 @@ export type * from './types.js'
 export * from './consts.js'
 export * from './client.js'
 export * from './service.js'
+export * from './landing.js'

package/src/landing.ts

@@ -0,0 +1,95 @@
+import type { ClientContext } from '@owlmeans/client'
+import type { ClientConfig } from '@owlmeans/client-context'
+import type { ClientResource } from '@owlmeans/client-resource'
+import type { ResourceRecord } from '@owlmeans/resource'
+import type { FlowModel, FlowPayload } from '@owlmeans/flow'
+import { FLOW_STATE } from './consts.js'
+
+/** The record id a suspended landing is stored under, in the SAME resource `EXTRA_FLOW` uses —
+ * a side-band slot, never the live `FlowService.flow` and never the `?flow=` query parameter. */
+export const RESUME_FLOW = 'resume-flow'
+
+export interface SuspendedLandingRecord extends ResourceRecord {
+  /** The entrypoint alias to navigate to once sign-in completes. */
+  entrypoint: string
+  /** The flow's payload at the moment it was suspended — carried along as the destination's query. */
+  query: FlowPayload
+  expiresAt: number
+}
+
+export interface SuspendedLanding {
+  entrypoint: string
+  query: FlowPayload
+}
+
+const landingResource = <C extends ClientConfig, T extends ClientContext<C>>(
+  context: T
+): ClientResource<SuspendedLandingRecord> | null =>
+  context.hasResource(FLOW_STATE) ? context.resource<ClientResource<SuspendedLandingRecord>>(FLOW_STATE) : null
+
+/**
+ * Suspend a flow that is about to leave for the platform's own sign-in dispatcher, so whichever
+ * sign-in method completes can send the person back to where they started instead of `HOME`.
+ *
+ * Driven by the flow model rather than a raw URL: `model.next()` is the flow's own answer to
+ * "where does this step lead", so a caller never re-derives a destination the flow already knows,
+ * and a flow whose current step offers no way forward (`next()` throws) suspends nothing rather
+ * than persisting a landing that can never be reached. The persisted record is deliberately NOT a
+ * serialized flow token — the destination step is always one this application can enter fresh (an
+ * `initial`-marked screen reading its own `ref`/`kind` from the query), so nothing needs to
+ * reconstruct the exact `FlowModel` instance on the other side of a sign-in redirect, and this
+ * helper stays usable by any flow, not only one particular package's.
+ *
+ * Returns `false` when there is nowhere to persist this (no `FLOW_STATE` resource registered) or
+ * nothing to suspend to (the current step has no forward transition, or its destination has no
+ * `module`) — the caller falls back to its own default landing (ordinarily `HOME`).
+ */
+export const suspendFlow = async <C extends ClientConfig, T extends ClientContext<C>>(
+  context: T, model: FlowModel, opts: { expiresAt: number }
+): Promise<boolean> => {
+  const resource = landingResource(context)
+  if (resource == null) return false
+
+  let destinationModule: string | undefined
+  try {
+    const transition = model.next()
+    destinationModule = model.step(transition.step).module
+  } catch {
+    return false
+  }
+  if (destinationModule == null) return false
+
+  await resource.save({
+    id: RESUME_FLOW, entrypoint: destinationModule, query: model.payload(), expiresAt: opts.expiresAt,
+  })
+
+  return true
+}
+
+/**
+ * Read back a suspended landing, once. Delete-on-read: the record answers exactly one sign-in,
+ * because a landing a stale browser tab left behind must never resurrect on somebody else's
+ * sign-in later in the same session.
+ *
+ * `null` covers every reason there is nothing to resume: no resource, no record, or a record
+ * whose window has closed — the caller's own default landing is exactly as safe an answer.
+ */
+export const resumeSuspendedFlow = async <C extends ClientConfig, T extends ClientContext<C>>(
+  context: T
+): Promise<SuspendedLanding | null> => {
+  const resource = landingResource(context)
+  if (resource == null) return null
+
+  let record: SuspendedLandingRecord | null
+  try {
+    record = await resource.load(RESUME_FLOW)
+  } catch {
+    return null
+  }
+  if (record == null) return null
+
+  await resource.delete(RESUME_FLOW).catch(() => undefined)
+  if (record.expiresAt < Date.now()) return null
+
+  return { entrypoint: record.entrypoint, query: record.query }
+}

package/tests/context.ts

@@ -0,0 +1,26 @@
+import { AppType, makeBasicContext } from '@owlmeans/context'
+import type { BasicConfig, BasicContext } from '@owlmeans/context'
+import { createStaticResource } from '@owlmeans/static-resource'
+import type { ClientContext } from '@owlmeans/client'
+import type { ClientConfig } from '@owlmeans/client-context'
+import { FLOW_STATE } from '../src/consts.js'
+import type { SuspendedLandingRecord } from '../src/landing.js'
+
+/**
+ * The smallest context `suspendFlow`/`resumeSuspendedFlow` need: a `FLOW_STATE` resource and
+ * nothing else. A static resource is a real `Resource` implementation, so this exercises the
+ * actual save/load/delete contract rather than a stand-in for it — the same pattern
+ * `@owlmeans/client-auth`'s own tests use for a client-side resource.
+ */
+export const makeTestContext = (withResource: boolean = true): ClientContext<ClientConfig> => {
+  const cfg: BasicConfig = {
+    ready: false, service: 'client-flow-tests', type: AppType.Frontend, services: {},
+  }
+  const context = makeBasicContext(cfg) as BasicContext<BasicConfig>
+
+  if (withResource) {
+    context.registerResource(createStaticResource<SuspendedLandingRecord>(FLOW_STATE, 'client-flow-landing-tests'))
+  }
+
+  return context as unknown as ClientContext<ClientConfig>
+}

package/tests/landing.spec.ts

@@ -0,0 +1,73 @@
+import { describe, expect, test } from 'bun:test'
+import { makeFlowModel } from '@owlmeans/flow'
+import type { ShallowFlow } from '@owlmeans/flow'
+import { resumeSuspendedFlow, suspendFlow } from '../src/landing.js'
+import { makeTestContext } from './context.js'
+
+const testFlow: ShallowFlow = {
+  flow: 'test-landing',
+  initialStep: 'a',
+  steps: {
+    a: {
+      index: 0, step: 'a', service: '', initial: true,
+      transitions: { next: { transition: 'next', step: 'b' } },
+    },
+    b: {
+      index: 1, step: 'b', service: '', module: 'target-entrypoint',
+      transitions: {},
+    },
+    dead: {
+      // No transitions and no `module` — used to exercise the two ways suspending can fail.
+      index: 2, step: 'dead', service: '', transitions: {},
+    },
+  },
+}
+
+describe('suspendFlow / resumeSuspendedFlow', () => {
+  test('suspends the flow model\'s NEXT destination and resumes it once, with its payload', async () => {
+    const context = makeTestContext()
+    const model = await makeFlowModel(testFlow)
+    model.updatePayload({ ref: 'abc-123' })
+
+    expect(await suspendFlow(context, model, { expiresAt: Date.now() + 60_000 })).toBe(true)
+
+    const landing = await resumeSuspendedFlow(context)
+    expect(landing).toEqual({ entrypoint: 'target-entrypoint', query: { ref: 'abc-123' } })
+  })
+
+  test('resuming is single-use — a second call finds nothing', async () => {
+    const context = makeTestContext()
+    const model = await makeFlowModel(testFlow)
+    await suspendFlow(context, model, { expiresAt: Date.now() + 60_000 })
+
+    await resumeSuspendedFlow(context)
+    expect(await resumeSuspendedFlow(context)).toBeNull()
+  })
+
+  test('an expired landing resumes to nothing', async () => {
+    const context = makeTestContext()
+    const model = await makeFlowModel(testFlow)
+    await suspendFlow(context, model, { expiresAt: Date.now() - 1 })
+
+    expect(await resumeSuspendedFlow(context)).toBeNull()
+  })
+
+  test('a step with no forward transition suspends nothing', async () => {
+    const context = makeTestContext()
+    const deadModel = await makeFlowModel(testFlow)
+    // Stand the model on the dead-end step directly — it declares no transitions, so `next()`
+    // has nothing to offer and suspending must decline rather than persist a landing to nowhere.
+    deadModel.setState({ ...deadModel.state(), step: 'dead' })
+
+    expect(await suspendFlow(context, deadModel, { expiresAt: Date.now() + 60_000 })).toBe(false)
+    expect(await resumeSuspendedFlow(context)).toBeNull()
+  })
+
+  test('with no FLOW_STATE resource registered, both are safe no-ops', async () => {
+    const context = makeTestContext(false)
+    const model = await makeFlowModel(testFlow)
+
+    expect(await suspendFlow(context, model, { expiresAt: Date.now() + 60_000 })).toBe(false)
+    expect(await resumeSuspendedFlow(context)).toBeNull()
+  })
+})

package/tests/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "extends": [
+    "@owlmeans/dep-config/tsconfig.base.json",
+    "@owlmeans/dep-config/tsconfig.node.json"
+  ],
+  "compilerOptions": {
+    "types": ["bun"],
+    "rootDir": "../",
+    "noEmit": true
+  },
+  "include": ["./**/*", "../src/**/*"]
+}

package/tsconfig.json

@@ -6,5 +6,5 @@
     "rootDir": "./src/",
     "outDir": "./build/"
   },
-  "exclude": ["./dist/**/*", "./build/**/*", "./*.ts"]
+  "exclude": ["./dist/**/*", "./build/**/*", "./tests/**/*", "./*.ts"]
 }