@owlmeans/web-client 0.1.18-rc.13 → 0.1.18-rc.15

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/web-client",
-  "version": "0.1.18-rc.12",
-  "generatedAt": "2026-08-27T21:16:47.137Z",
+  "version": "0.1.18-rc.13",
+  "generatedAt": "2026-08-27T21:18:31.380Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/web-client/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/web-client
 
 **Layer:** Web (React)
-**Install:** `"@owlmeans/web-client": "^0.1.18-rc.12"` in `dependencies`
+**Install:** `"@owlmeans/web-client": "^0.1.18-rc.13"` in `dependencies`
 
 ## Key Exports
 

package/build/components/dispatcher/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AAMA,eAAO,MAAM,UAAU,6FAmCrB,CAAA"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AAUA,eAAO,MAAM,UAAU,6FAuFrB,CAAA"}

package/build/components/dispatcher/component.js

@@ -1,14 +1,27 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { DispatcherHOC } from '@owlmeans/client-auth';
-import { useEffect } from 'react';
+import { useEffect, useState } from 'react';
 import { useI18nLib } from '@owlmeans/client-i18n';
 import { AUTH_QUERY } from '@owlmeans/auth';
+import { FallbackLoginScreen, LoginIntent, LoginOutcome, ResumeAction, resumeAction, } from '@owlmeans/client-auth/login';
+import { LoginSurrogateView, SurrogateStage } from '../../login/view.js';
 import { useContext } from '../../context.js';
-export const Dispatcher = DispatcherHOC(({ provideToken }) => {
+export const Dispatcher = DispatcherHOC(({ provideToken, navigate }) => {
     const context = useContext();
     const [query] = context.router().useSearchParams();
     const t = useI18nLib('auth', 'dispatcher');
+    const tAuth = useI18nLib('auth');
+    // Read in the component body, not in the effect: `window.name` is set by `window.open` before
+    // this document loads and `sessionStorage` carries the marker across the provider round trip, so
+    // the answer is already correct at first paint — and a first paint that showed the application
+    // before an effect corrected it is the defect this exists to prevent.
+    const [env] = useState(() => context.login().env());
+    const [outcome, setOutcome] = useState(null);
+    // Nothing to return from and nobody signed in: offer the choice rather than starting a flow.
+    const [choose, setChoose] = useState(false);
     useEffect(() => {
+        // First statement of the effect on purpose: everything below can navigate this window away.
+        context.login().enter();
         const token = query.get(AUTH_QUERY);
         if (token != null) {
             const params = {};
@@ -18,15 +31,39 @@ export const Dispatcher = DispatcherHOC(({ provideToken }) => {
                 }
             });
             provideToken({ token }, params);
+            return;
         }
-        else {
-            context.auth().authenticated().then(authzToken => {
-                if (authzToken == null) {
-                    provideToken({ token: '' }, undefined);
-                }
-            });
-        }
+        void context.auth().authenticated().then(async (authzToken) => {
+            if (authzToken == null || authzToken === '') {
+                setChoose(true);
+                return;
+            }
+            // A session already exists in THIS document. Whether it is useful here, or belongs to the
+            // window that opened this one, is the plugin's call — the dispatcher reads no environment.
+            const settled = await context.login().resume(authzToken);
+            switch (resumeAction(settled)) {
+                case ResumeAction.Stop:
+                    return;
+                case ResumeAction.Render:
+                    setOutcome(settled);
+                    return;
+                default:
+                    await navigate();
+            }
+        });
     }, []);
+    // A surrogate window never renders the application, whatever else is true. Checked ahead of
+    // every other return for exactly that reason.
+    if (env.surrogate) {
+        return _jsx(LoginSurrogateView, { intent: LoginIntent.Login, stage: outcome === LoginOutcome.Orphaned ? SurrogateStage.Orphaned
+                : outcome === LoginOutcome.Failed ? SurrogateStage.Failed
+                    : outcome === LoginOutcome.Gesture ? SurrogateStage.Gesture
+                        : SurrogateStage.Working, onAction: () => window.close(), translate: (key, defaultValue) => tAuth(key, { defaultValue }) });
+    }
+    if (choose) {
+        const Screen = context.login().screen() ?? FallbackLoginScreen;
+        return _jsx(Screen, { translate: (key, defaultValue) => tAuth(key, { defaultValue }) });
+    }
     return query.has(AUTH_QUERY) ? _jsx("div", { style: {
             width: '100%', // Makes the div occupy the full width
             display: 'flex', // Enables flexbox layout

package/build/components/dispatcher/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE;IAC3D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAA;IAElD,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAE1C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC3B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACrB,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;gBAC/C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;gBACxC,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAK,KAAK,EAAE;YACzC,KAAK,EAAE,MAAM,EAAE,sCAAsC;YACrD,OAAO,EAAE,MAAM,EAAE,yBAAyB;YAC1C,cAAc,EAAE,QAAQ,EAAE,+BAA+B;YACzD,UAAU,EAAE,QAAQ,EAAE,yCAAyC;YAC/D,SAAS,EAAE,QAAQ,EAAE,8BAA8B;YACnD,UAAU,EAAE,MAAM,EAAE,6BAA6B;YACjD,aAAa,EAAE,MAAM,EAAE,6BAA6B;SACrD,YAAG,CAAC,CAAC,SAAS,CAAC,GAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACrC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EACL,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,GAC3E,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE;IACrE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAA;IAElD,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhC,8FAA8F;IAC9F,iGAAiG;IACjG,+FAA+F;IAC/F,sEAAsE;IACtE,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IACjE,6FAA6F;IAC7F,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE3C,SAAS,CAAC,GAAG,EAAE;QACb,4FAA4F;QAC5F,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAA;QAEvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC3B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACrB,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;YAE/B,OAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;YAC1D,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;gBAC5C,SAAS,CAAC,IAAI,CAAC,CAAA;gBAEf,OAAM;YACR,CAAC;YACD,0FAA0F;YAC1F,2FAA2F;YAC3F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YACxD,QAAQ,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,KAAK,YAAY,CAAC,IAAI;oBACpB,OAAM;gBACR,KAAK,YAAY,CAAC,MAAM;oBACtB,UAAU,CAAC,OAAO,CAAC,CAAA;oBAEnB,OAAM;gBACR;oBACE,MAAM,QAAQ,EAAE,CAAA;YACpB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,4FAA4F;IAC5F,8CAA8C;IAC9C,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,OAAO,KAAC,kBAAkB,IACxB,MAAM,EAAE,WAAW,CAAC,KAAK,EACzB,KAAK,EACH,OAAO,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ;gBACzD,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM;oBACvD,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO;wBACzD,CAAC,CAAC,cAAc,CAAC,OAAO,EAEhC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,GAC9D,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,mBAAmB,CAAA;QAE9D,OAAO,KAAC,MAAM,IAAC,SAAS,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,GAAI,CAAA;IACnF,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAK,KAAK,EAAE;YACzC,KAAK,EAAE,MAAM,EAAE,sCAAsC;YACrD,OAAO,EAAE,MAAM,EAAE,yBAAyB;YAC1C,cAAc,EAAE,QAAQ,EAAE,+BAA+B;YACzD,UAAU,EAAE,QAAQ,EAAE,yCAAyC;YAC/D,SAAS,EAAE,QAAQ,EAAE,8BAA8B;YACnD,UAAU,EAAE,MAAM,EAAE,6BAA6B;YACjD,aAAa,EAAE,MAAM,EAAE,6BAA6B;SACrD,YAAG,CAAC,CAAC,SAAS,CAAC,GAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACrC,CAAC,CAAC,CAAA"}

package/build/i18n/auth-be.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Загрузка...",
         "error": "Не ўдалося прайсці аўтэнтыфікацыю: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Выконваем уваход…",
+            "gesture": {
+                "title": "Працягніце, каб увайсці.",
+                "action": "Увайсці"
+            },
+            "handing": "Гатова. Вяртаемся ў праграму…",
+            "orphaned": "Уваход выкананы. Можаце закрыць гэтае акно і вярнуцца ў праграму.",
+            "failed": "Не ўдалося завяршыць. Закрыйце гэтае акно і паспрабуйце зноў.",
+            "standalone": {
+                "title": "Гэтая старонка выкарыстоўваецца для ўваходу з іншага акна.",
+                "action": "Адкрыць праграму"
+            },
+            "close": "Закрыць"
+        },
+        "logout": {
+            "working": "Выконваем выхад…",
+            "gesture": {
+                "title": "Працягніце, каб выйсці.",
+                "action": "Выйсці"
+            },
+            "handing": "Выхад выкананы. Вяртаемся ў праграму…",
+            "orphaned": "Выхад выкананы. Можаце закрыць гэтае акно.",
+            "failed": "Выхад тут не завершаны. Можаце закрыць гэтае акно.",
+            "standalone": {
+                "title": "Гэтая старонка выкарыстоўваецца для выхаду з іншага акна.",
+                "action": "Адкрыць праграму"
+            },
+            "close": "Закрыць"
+        }
     }
 }

package/build/i18n/auth-de.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Wird geladen...",
         "error": "Authentifizierung fehlgeschlagen: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Anmeldung läuft…",
+            "gesture": {
+                "title": "Fortfahren, um sich anzumelden.",
+                "action": "Anmelden"
+            },
+            "handing": "Fertig. Zurück zur Anwendung…",
+            "orphaned": "Angemeldet. Sie können dieses Fenster schließen und in der Anwendung fortfahren.",
+            "failed": "Das wurde nicht abgeschlossen. Schließen Sie dieses Fenster und versuchen Sie es erneut.",
+            "standalone": {
+                "title": "Diese Seite dient der Anmeldung aus einem anderen Fenster.",
+                "action": "Anwendung öffnen"
+            },
+            "close": "Schließen"
+        },
+        "logout": {
+            "working": "Abmeldung läuft…",
+            "gesture": {
+                "title": "Fortfahren, um sich abzumelden.",
+                "action": "Abmelden"
+            },
+            "handing": "Abgemeldet. Zurück zur Anwendung…",
+            "orphaned": "Abgemeldet. Sie können dieses Fenster schließen.",
+            "failed": "Die Abmeldung wurde hier nicht abgeschlossen. Sie können dieses Fenster schließen.",
+            "standalone": {
+                "title": "Diese Seite dient der Abmeldung aus einem anderen Fenster.",
+                "action": "Anwendung öffnen"
+            },
+            "close": "Schließen"
+        }
     }
 }

package/build/i18n/auth-en.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Loading...",
         "error": "Authentication failed: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Signing you in…",
+            "gesture": {
+                "title": "Continue to sign in.",
+                "action": "Sign in"
+            },
+            "handing": "Done. Returning to the application…",
+            "orphaned": "Signed in. You can close this window and continue in the application.",
+            "failed": "That did not complete. You can close this window and try again.",
+            "standalone": {
+                "title": "This page is used to sign in from another window.",
+                "action": "Open the application"
+            },
+            "close": "Close"
+        },
+        "logout": {
+            "working": "Signing you out…",
+            "gesture": {
+                "title": "Continue to sign out.",
+                "action": "Sign out"
+            },
+            "handing": "Signed out. Returning to the application…",
+            "orphaned": "Signed out. You can close this window.",
+            "failed": "Sign-out did not complete here. You can close this window.",
+            "standalone": {
+                "title": "This page is used to sign out from another window.",
+                "action": "Open the application"
+            },
+            "close": "Close"
+        }
     }
 }

package/build/i18n/auth-es.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Cargando...",
         "error": "Error de autenticación: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Iniciando sesión…",
+            "gesture": {
+                "title": "Continúa para iniciar sesión.",
+                "action": "Iniciar sesión"
+            },
+            "handing": "Listo. Volviendo a la aplicación…",
+            "orphaned": "Sesión iniciada. Puedes cerrar esta ventana y continuar en la aplicación.",
+            "failed": "No se completó. Cierra esta ventana e inténtalo de nuevo.",
+            "standalone": {
+                "title": "Esta página se usa para iniciar sesión desde otra ventana.",
+                "action": "Abrir la aplicación"
+            },
+            "close": "Cerrar"
+        },
+        "logout": {
+            "working": "Cerrando sesión…",
+            "gesture": {
+                "title": "Continúa para cerrar sesión.",
+                "action": "Cerrar sesión"
+            },
+            "handing": "Sesión cerrada. Volviendo a la aplicación…",
+            "orphaned": "Sesión cerrada. Puedes cerrar esta ventana.",
+            "failed": "El cierre de sesión no se completó aquí. Puedes cerrar esta ventana.",
+            "standalone": {
+                "title": "Esta página se usa para cerrar sesión desde otra ventana.",
+                "action": "Abrir la aplicación"
+            },
+            "close": "Cerrar"
+        }
     }
 }

package/build/i18n/auth-pl.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Ładowanie...",
         "error": "Uwierzytelnianie nie powiodło się: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Trwa logowanie…",
+            "gesture": {
+                "title": "Kontynuuj, aby się zalogować.",
+                "action": "Zaloguj się"
+            },
+            "handing": "Gotowe. Wracamy do aplikacji…",
+            "orphaned": "Zalogowano. Możesz zamknąć to okno i kontynuować w aplikacji.",
+            "failed": "Nie udało się ukończyć. Zamknij to okno i spróbuj ponownie.",
+            "standalone": {
+                "title": "Ta strona służy do logowania z innego okna.",
+                "action": "Otwórz aplikację"
+            },
+            "close": "Zamknij"
+        },
+        "logout": {
+            "working": "Trwa wylogowywanie…",
+            "gesture": {
+                "title": "Kontynuuj, aby się wylogować.",
+                "action": "Wyloguj się"
+            },
+            "handing": "Wylogowano. Wracamy do aplikacji…",
+            "orphaned": "Wylogowano. Możesz zamknąć to okno.",
+            "failed": "Wylogowanie nie zostało tu ukończone. Możesz zamknąć to okno.",
+            "standalone": {
+                "title": "Ta strona służy do wylogowania z innego okna.",
+                "action": "Otwórz aplikację"
+            },
+            "close": "Zamknij"
+        }
     }
 }

package/build/i18n/auth-ru.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Загрузка...",
         "error": "Не удалось выполнить аутентификацию: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Выполняем вход…",
+            "gesture": {
+                "title": "Продолжите, чтобы войти.",
+                "action": "Войти"
+            },
+            "handing": "Готово. Возвращаемся в приложение…",
+            "orphaned": "Вход выполнен. Можете закрыть это окно и вернуться в приложение.",
+            "failed": "Не удалось завершить. Закройте это окно и попробуйте снова.",
+            "standalone": {
+                "title": "Эта страница используется для входа из другого окна.",
+                "action": "Открыть приложение"
+            },
+            "close": "Закрыть"
+        },
+        "logout": {
+            "working": "Выполняем выход…",
+            "gesture": {
+                "title": "Продолжите, чтобы выйти.",
+                "action": "Выйти"
+            },
+            "handing": "Выход выполнен. Возвращаемся в приложение…",
+            "orphaned": "Выход выполнен. Можете закрыть это окно.",
+            "failed": "Выход здесь не завершён. Можете закрыть это окно.",
+            "standalone": {
+                "title": "Эта страница используется для выхода из другого окна.",
+                "action": "Открыть приложение"
+            },
+            "close": "Закрыть"
+        }
     }
 }

package/build/i18n/auth-uk.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Завантаження...",
         "error": "Не вдалося пройти автентифікацію: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Виконуємо вхід…",
+            "gesture": {
+                "title": "Продовжте, щоб увійти.",
+                "action": "Увійти"
+            },
+            "handing": "Готово. Повертаємось до застосунку…",
+            "orphaned": "Вхід виконано. Можете закрити це вікно й повернутися до застосунку.",
+            "failed": "Не вдалося завершити. Закрийте це вікно та спробуйте ще раз.",
+            "standalone": {
+                "title": "Ця сторінка використовується для входу з іншого вікна.",
+                "action": "Відкрити застосунок"
+            },
+            "close": "Закрити"
+        },
+        "logout": {
+            "working": "Виконуємо вихід…",
+            "gesture": {
+                "title": "Продовжте, щоб вийти.",
+                "action": "Вийти"
+            },
+            "handing": "Вихід виконано. Повертаємось до застосунку…",
+            "orphaned": "Вихід виконано. Можете закрити це вікно.",
+            "failed": "Вихід тут не завершено. Можете закрити це вікно.",
+            "standalone": {
+                "title": "Ця сторінка використовується для виходу з іншого вікна.",
+                "action": "Відкрити застосунок"
+            },
+            "close": "Закрити"
+        }
     }
 }

package/build/login/index.d.ts

@@ -1,5 +1,8 @@
 export * from './consts.js';
+export * from './pump.js';
 export * from './redirect.js';
 export * from './surrogate.js';
+export * from './view.js';
+export * from './screen.js';
 export * from './service.js';
 //# sourceMappingURL=index.d.ts.map

package/build/login/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}

package/build/login/index.js

@@ -1,5 +1,8 @@
 export * from './consts.js';
+export * from './pump.js';
 export * from './redirect.js';
 export * from './surrogate.js';
+export * from './view.js';
+export * from './screen.js';
 export * from './service.js';
 //# sourceMappingURL=index.js.map

package/build/login/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/login/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}

package/build/login/pump.d.ts

@@ -0,0 +1,20 @@
+import { LoginOutcome } from '@owlmeans/client-auth/login';
+/**
+ * Wait on a surrogate window until it says something, or goes away.
+ *
+ * Extracted so login and logout share one implementation rather than two that agree until one of
+ * them is changed. Every guard here was a real failure at some point:
+ *
+ * - the **origin pin** is not decoration — the message carries a bearer token, and a listener that
+ *   accepted any origin would take one from any page that could reach this window;
+ * - the **`settled` latch** stops a second message, or a close racing a message, resolving twice;
+ * - the **`closed` poll** is the only exit when the user simply closes the window, because a window
+ *   the user closes announces nothing at all;
+ * - the listener and the interval are removed on every path, including the ones that resolve.
+ */
+export declare const awaitSurrogate: (surrogate: Window, messageType: string, onMessage: (data: {
+    type?: string;
+    token?: string;
+    ok?: boolean;
+}) => Promise<LoginOutcome>) => Promise<LoginOutcome>;
+//# sourceMappingURL=pump.d.ts.map

package/build/login/pump.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pump.d.ts","sourceRoot":"","sources":["../../src/login/pump.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,cACd,MAAM,eACJ,MAAM,aACR,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,OAAO,CAAC,YAAY,CAAC,KAC1F,OAAO,CAAC,YAAY,CAiCrB,CAAA"}

package/build/login/pump.js

@@ -0,0 +1,46 @@
+import { LOGIN_WATCH_INTERVAL, LoginOutcome } from '@owlmeans/client-auth/login';
+/**
+ * Wait on a surrogate window until it says something, or goes away.
+ *
+ * Extracted so login and logout share one implementation rather than two that agree until one of
+ * them is changed. Every guard here was a real failure at some point:
+ *
+ * - the **origin pin** is not decoration — the message carries a bearer token, and a listener that
+ *   accepted any origin would take one from any page that could reach this window;
+ * - the **`settled` latch** stops a second message, or a close racing a message, resolving twice;
+ * - the **`closed` poll** is the only exit when the user simply closes the window, because a window
+ *   the user closes announces nothing at all;
+ * - the listener and the interval are removed on every path, including the ones that resolve.
+ */
+export const awaitSurrogate = async (surrogate, messageType, onMessage) => await new Promise(resolve => {
+    let settled = false;
+    let watch;
+    const finish = (result) => {
+        if (settled) {
+            return;
+        }
+        settled = true;
+        window.removeEventListener('message', handler);
+        if (watch != null) {
+            clearInterval(watch);
+        }
+        resolve(result);
+    };
+    function handler(event) {
+        if (event.origin !== window.location.origin) {
+            return;
+        }
+        const data = event.data;
+        if (data?.type !== messageType) {
+            return;
+        }
+        void onMessage(data).then(finish).catch(() => finish(LoginOutcome.Failed));
+    }
+    window.addEventListener('message', handler);
+    watch = setInterval(() => {
+        if (surrogate.closed) {
+            finish(LoginOutcome.Failed);
+        }
+    }, LOGIN_WATCH_INTERVAL);
+});
+//# sourceMappingURL=pump.js.map

package/build/login/pump.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pump.js","sourceRoot":"","sources":["../../src/login/pump.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,SAAiB,EACjB,WAAmB,EACnB,SAA2F,EACpE,EAAE,CAAC,MAAM,IAAI,OAAO,CAAe,OAAO,CAAC,EAAE;IACpE,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,KAAiD,CAAA;IAErD,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAQ,EAAE;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAM;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC9C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,aAAa,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,CAAA;IACjB,CAAC,CAAA;IAED,SAAS,OAAO,CAAC,KAAmB;QAClC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAA8D,CAAA;QACjF,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC3C,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QACvB,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC,EAAE,oBAAoB,CAAC,CAAA;AAC1B,CAAC,CAAC,CAAA"}

package/build/login/redirect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.d.ts","sourceRoot":"","sources":["../../src/login/redirect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAG9D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAO,WA2BzC,CAAA"}
+{"version":3,"file":"redirect.d.ts","sourceRoot":"","sources":["../../src/login/redirect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgB,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAG5E;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAO,WAgDzC,CAAA"}

package/build/login/redirect.js

@@ -1,4 +1,4 @@
-import { LoginOutcome } from '@owlmeans/client-auth/login';
+import { revokeToken, LoginOutcome } from '@owlmeans/client-auth/login';
 import { REDIRECT_LOGIN } from './consts.js';
 /**
  * The ordinary login flow: this document leaves for the identity provider and comes back.
@@ -27,5 +27,21 @@ export const makeRedirectLoginPlugin = () => ({
     },
     // Nothing to hand anywhere — the token was issued in the document that will use it.
     complete: async () => LoginOutcome.Passed,
+    // `resume` is deliberately NOT implemented. The host defaults to `Passed`, which is "keep the
+    // session you already have and carry on" — byte for byte what an ordinary tab has always done.
+    // Implementing it here would be the one way to regress every unframed application.
+    logout: (ctx, request) => revokeToken(ctx).then(async () => {
+        if (request.navigate != null) {
+            await request.navigate();
+            return LoginOutcome.Handled;
+        }
+        // A reload rather than a client-side navigation: `useOwlAuth` and its kin read through
+        // cached values, so the honest way to make a whole application forget a session is to
+        // rebuild it. This is what `useLogout` did inline before the mechanic became a plugin.
+        window.location.reload();
+        return LoginOutcome.Handled;
+    }),
+    // Nothing to tell anyone — the session was cleared in the document that owned it.
+    logoutComplete: async () => LoginOutcome.Passed,
 });
 //# sourceMappingURL=redirect.js.map

package/build/login/redirect.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../../src/login/redirect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAgB,EAAE,CAAC,CAAC;IACzD,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI;IAEjB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC7B,yFAAyF;QACzF,8FAA8F;QAC9F,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;YAExB,OAAO,YAAY,CAAC,OAAO,CAAA;QAC7B,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAA;QAElC,OAAO,YAAY,CAAC,UAAU,CAAA;IAChC,CAAC;IAED,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC7B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAA;QAE1B,OAAO,YAAY,CAAC,UAAU,CAAA;IAChC,CAAC;IAED,oFAAoF;IACpF,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM;CAC1C,CAAC,CAAA"}
+{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../../src/login/redirect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAgB,EAAE,CAAC,CAAC;IACzD,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI;IAEjB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC7B,yFAAyF;QACzF,8FAA8F;QAC9F,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;YAExB,OAAO,YAAY,CAAC,OAAO,CAAA;QAC7B,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAA;QAElC,OAAO,YAAY,CAAC,UAAU,CAAA;IAChC,CAAC;IAED,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC7B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAA;QAE1B,OAAO,YAAY,CAAC,UAAU,CAAA;IAChC,CAAC;IAED,oFAAoF;IACpF,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM;IAEzC,8FAA8F;IAC9F,+FAA+F;IAC/F,mFAAmF;IAEnF,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,GAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACzE,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;YAExB,OAAO,YAAY,CAAC,OAAO,CAAA;QAC7B,CAAC;QACD,uFAAuF;QACvF,sFAAsF;QACtF,uFAAuF;QACvF,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAA;QAExB,OAAO,YAAY,CAAC,OAAO,CAAA;IAC7B,CAAC,CAAC;IAEF,kFAAkF;IAClF,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM;CAChD,CAAC,CAAA"}

package/build/login/screen.d.ts

@@ -0,0 +1,15 @@
+import type { FC } from 'react';
+/**
+ * The login window an embedded application opens one level up.
+ *
+ * It is NOT wrapped in `DispatcherHOC`, and that is the point: the HOC's continuation navigates to
+ * `HOME` when it has nothing else to do, which is how a popup ended up rendering the whole
+ * application, with its navigation, inside itself. This screen has no continuation at all — it
+ * either hands something back and closes, or it says what it is waiting for.
+ *
+ * It also never runs the authorization machine. When there is already a session here, that is the
+ * answer, and it goes back to the opener immediately — no provider round trip, no PKCE exchange.
+ * When there is not, it forwards to the dispatcher (`next`), which owns that flow.
+ */
+export declare const SurrogateScreen: FC;
+//# sourceMappingURL=screen.d.ts.map

package/build/login/screen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screen.d.ts","sourceRoot":"","sources":["../../src/login/screen.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAU/B;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,EAAE,EA+F7B,CAAA"}