@owlmeans/web-client 0.1.18-rc.2 → 0.1.18-rc.21

package/README.md

@@ -1,14 +1,16 @@
 # @owlmeans/web-client
 
-React web application bootstrap — context factory, module/routing utilities, and app renderer for OwlMeans web apps.
+React web application bootstrap — context factory, entrypoint/routing utilities, and app renderer for OwlMeans web apps.
 
 ## Overview
 
 - `makeContext(cfg)` — creates the web application context (includes auth, router, and DB services)
 - `renderApp(context)` — mounts the React app to the DOM
-- Re-exports module/routing helpers: `module`, `route`, `frontend`, `handler`, `elevate`
+- Re-exports entrypoint/routing helpers: `entrypoint`, `route`, `frontend`, `handler`, `elevate`
 - Re-exports route constants: `BASE`, `HOME`, `ROOT`, `GUEST`
-- `Module<T>` — typed client module interface for `.call()` API requests
+- `entrypoints` — the base client entrypoints (dispatcher, login surrogate) every web app spreads
+- `ClientEntrypoint<T>` (also exported as `Module<T>`) — the typed entrypoint interface behind
+  `call()` / `invoke()` / `url()`
 
 ## Installation
 
@@ -24,27 +26,28 @@ Bootstrap the app:
 import { makeContext, renderApp } from '@owlmeans/web-client'
 
 const context = makeContext(config)
-context.registerModules(appModules)
+context.registerEntrypoints(appEntrypoints)
 context.serviceRoute(MANAGER, true)
 renderApp<Config, Context>(context)
 ```
 
-Define modules:
+Define entrypoints:
 
 ```typescript
-import { BASE, HOME, elevate, frontend, handler, module, route } from '@owlmeans/web-client'
+import { BASE, HOME, elevate, entrypoint, frontend, handler, route } from '@owlmeans/web-client'
 
-modules.push(module(route(BASE, '/', frontend()), handler(PublicLayout)))
-modules.push(module(route(HOME, '/', frontend({ default: true, parent: BASE })), handler(HomeScreen)))
-elevate(modules, manager.back.account.base)
+appEntrypoints.push(entrypoint(route(BASE, '/', frontend()), handler(PublicLayout)))
+appEntrypoints.push(entrypoint(route(HOME, '/', frontend({ default: true, parent: BASE })), handler(HomeScreen)))
+elevate(appEntrypoints, manager.back.account.base)
 ```
 
-Call an API module from a component:
+A screen entrypoint carries a renderer, so it is addressed by `url()` and never called over the
+wire. Call an API entrypoint from a component:
 
 ```typescript
-import type { Module } from '@owlmeans/web-client'
+import type { ClientEntrypoint } from '@owlmeans/web-client'
 
-const [result] = await context.module<Module<MyType>>(moduleAlias)
+const result = await context.entrypoint<ClientEntrypoint<MyType>>(alias)
   .call({ params: { id }, body: data })
 ```
 
@@ -75,7 +78,7 @@ Component that handles authentication routing (redirect to login, etc.).
 - [`@owlmeans/client-context`](../client-context) — `ClientContext` base extended by `makeContext`
 - [`@owlmeans/web-router`](../web-router) — default OwlMeans browser routing plugin registered by `makeContext`
 - [`@owlmeans/web-db`](../web-db) — IndexedDB service registered by `makeContext`
-- [`@owlmeans/client-module`](../client-module) — `ClientModule<T>` / `Module<T>` implementation
+- [`@owlmeans/client-entrypoint`](../client-entrypoint) — the `ClientEntrypoint<T>` implementation
 
 <!-- owlmeans:agent-guidance:start -->
 ## Agent guidance

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/web-client",
-  "version": "0.1.18-rc.0",
-  "generatedAt": "2026-08-16T22:20:50.508Z",
+  "version": "0.1.18-rc.21",
+  "generatedAt": "2026-09-01T16:28:56.990Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/web-client/SKILL.md

@@ -8,19 +8,22 @@ user-invocable: false
 # @owlmeans/web-client
 
 **Layer:** Web (React)
-**Install:** `"@owlmeans/web-client": "^0.1.18-rc.0"` in `dependencies`
+**Install:** `"@owlmeans/web-client": "^0.1.18-rc.21"` in `dependencies`
 
 ## Key Exports
 
 | Export | Description |
 |--------|-------------|
 | `renderApp<C, T>(context)` | Mount the React app (routing via the active router plugin — OwlMeans by default) |
-| `elevate(modules, alias, handler)` | Attach a React component (or `handler(Component)`) to an entrypoint |
+| `elevate(entrypoints, alias, handler?)` | Attach a React component (`handler(Component)`) to an entrypoint, or opt a backend alias into client-side calling |
+| `entrypoint(route, handler?)` | Build a client entrypoint from a route declaration |
 | `handler(Component)` | Wrap a React component as an entrypoint handler |
-| `context.registerEntrypoints(modules)` | Register the full entrypoint list on the context |
+| `context.registerEntrypoints(entrypoints)` | Register the full entrypoint list on the context |
 | `context.serviceRoute(alias, isDefault?)` | Mark a service's routing root |
+| `makeContext(cfg)` | Build the browser context — auth, web db, client resource, router and login are all appended here |
+| `appendWebLogin(context)` | Register the login host plus the redirect and surrogate-window plugins |
 | `router`, `components`, `service`, `i18n`, `helpers`, `errors` | Web-specific helpers |
-| Constants | Default aliases (BASE, HOME) |
+| Constants | Default aliases (BASE, HOME), `REDIRECT_LOGIN`, `SURROGATE_LOGIN` |
 
 ## Usage
 
@@ -29,31 +32,87 @@ user-invocable: false
 // index.tsx
 import { renderApp } from '@owlmeans/web-client'
 import { makeContext } from './context.js'
-import { appModules } from './modules.js'
+import { appEntrypoints } from './entrypoints.js'
 import { MANAGER, MANAGER_API } from 'my-common'
 import config from './config.js'
 
 const context = makeContext(config)
-context.registerEntrypoints(appModules)
+context.registerEntrypoints(appEntrypoints)
 context.serviceRoute(MANAGER, true)
 context.serviceRoute(MANAGER_API, true)
 renderApp<Config, Context>(context)
 ```
 
-### Module elevation with React components
+### Entrypoint elevation with React components
 ```typescript
-import { elevate, route, frontend, handler, entrypoint, guard } from '@owlmeans/web-client'
+import { elevate, route, frontend, handler, entrypoint } from '@owlmeans/web-client'
 import { HomeScreen, ProjectDashboardScreen } from './screens/index.js'
 
-elevate(modules, manager.front.project.dashboard, handler(ProjectDashboardScreen))
+elevate(entrypoints, manager.front.project.dashboard, handler(ProjectDashboardScreen))
 
-modules.push(
+entrypoints.push(
   entrypoint(route(HOME, '/', frontend({ default: true, parent: BASE })), handler(HomeScreen))
 )
 ```
 
+`elevate` is idempotent — it replaces the declaration in the list, so re-elevating an alias (a
+screen swapped for a variant build, a guard added to an already-elevated one) is allowed, and
+guards named at elevation are unioned with the declared ones rather than replacing them. A backend
+alias takes no handler at all: giving one is a wiring error and throws.
+
+A **backend** alias the client calls needs a bare `elevate(entrypoints, alias)` — no handler. That
+opts the alias into client-side callability, so:
+
+```typescript
+const project = await context.entrypoint<ClientEntrypoint<Project>>(alias)
+  .call({ params, body, query })                       // the value; the reply's error is thrown
+const { value, outcome } = await context.entrypoint<ClientEntrypoint<Project>>(alias)
+  .invoke({ params })                                  // when the outcome decides what happens next
+const href = await context.entrypoint<ClientEntrypoint<Project>>(alias)
+  .url({ params }, { absolute: true })                 // the address, not the round trip
+```
+
+The auth header is attached automatically for guarded entrypoints. An entrypoint that renders a
+screen answers `url()` and throws from `call()`/`invoke()` — a screen is navigated to, not called.
+
+### Login comes with the context
+
+`makeContext` calls `appendWebLogin`, which registers the login host (`@owlmeans/client-auth/login`)
+and both browser plugins on it — redirect (`REDIRECT_LOGIN`, priority 0, applies always) and
+surrogate window (`SURROGATE_LOGIN`, priority 100, applies in a frame or in the surrogate itself).
+So every web app — and everything built on `web-panel` or `mui-panel` — has working sign-in,
+including from an embedded app, with nothing registered by hand:
+
+```typescript
+import { useLogin, useLogout } from '@owlmeans/client-auth/login'
+
+const [, onLogIn] = useLogin()   // one control, one handler, no environment checks
+```
+
+An app that needs a different mechanic registers its own plugin at a higher priority after building
+the base context (`context.login().registerPlugin(...)`); it never replaces these. The contract, the
+cascade and the invariants are the `login-plugins` skill.
+
+### Navigation
+```typescript
+import { useNavigate } from '@owlmeans/client'   // not re-exported by web-client
+import { useStoreList, useStoreModel } from '@owlmeans/client'   // client state — also not re-exported
+
+const nav = useNavigate()
+<Button onClick={nav.press(manager.front.project.dashboard, { params: { projectId } })}>Open</Button>
+await nav.go(alias, { params })   // programmatic; nav.back() to go back
+```
+
+The navigator resolves its target through the entrypoint's own `url(request)`, so a screen names an
+alias and never assembles a path. Render a plain `<a href>` the same way — `await
+context.entrypoint(alias).url({ params })`, or the `Link` component from `@owlmeans/web-panel`,
+which does it for you.
+
 ## Depends On
 
 - `@owlmeans/client`, `@owlmeans/web-router` (default OwlMeans browser routing), `@owlmeans/web-panel` (typically), `@owlmeans/client-i18n`
+- `@owlmeans/client-auth` — `AUTH_RESOURCE` and the `./login` host the browser plugins register on
 - `@owlmeans/entrypoint`, `@owlmeans/route`
-- `react`, `react-dom` (peer). No longer depends on `react-router` — opt into it with `@owlmeans/web-router-react-router` (`appendReactRouter`). The former `provide` export is a deprecated `undefined`.
+- `react`, `react-dom` (peer). It does not depend on `react-router` — opt into it with
+  `@owlmeans/web-router-react-router` (`appendReactRouter`). Routing needs no explicit provider:
+  `PanelApp`/`App` compile through `context.router()`, so nothing passes a `provide` prop.

package/build/components/dispatcher/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AAMA,eAAO,MAAM,UAAU,6FAmCrB,CAAA"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":"AAUA,eAAO,MAAM,UAAU,6FA+FrB,CAAA"}

package/build/components/dispatcher/component.js

@@ -1,14 +1,27 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { DispatcherHOC } from '@owlmeans/client-auth';
-import { useEffect } from 'react';
+import { useEffect, useState } from 'react';
 import { useI18nLib } from '@owlmeans/client-i18n';
 import { AUTH_QUERY } from '@owlmeans/auth';
+import { FallbackLoginScreen, LoginIntent, LoginOutcome, ResumeAction, resumeAction, } from '@owlmeans/client-auth/login';
+import { LoginSurrogateView, SurrogateStage } from '../../login/view.js';
 import { useContext } from '../../context.js';
-export const Dispatcher = DispatcherHOC(({ provideToken }) => {
+export const Dispatcher = DispatcherHOC(({ provideToken, navigate }) => {
     const context = useContext();
     const [query] = context.router().useSearchParams();
     const t = useI18nLib('auth', 'dispatcher');
+    const tAuth = useI18nLib('auth');
+    // Read in the component body, not in the effect: `window.name` is set by `window.open` before
+    // this document loads and `sessionStorage` carries the marker across the provider round trip, so
+    // the answer is already correct at first paint — and a first paint that showed the application
+    // before an effect corrected it is the defect this exists to prevent.
+    const [env] = useState(() => context.login().env());
+    const [outcome, setOutcome] = useState(null);
+    // Nothing to return from and nobody signed in: offer the choice rather than starting a flow.
+    const [choose, setChoose] = useState(false);
     useEffect(() => {
+        // First statement of the effect on purpose: everything below can navigate this window away.
+        context.login().enter();
         const token = query.get(AUTH_QUERY);
         if (token != null) {
             const params = {};
@@ -18,15 +31,47 @@ export const Dispatcher = DispatcherHOC(({ provideToken }) => {
                 }
             });
             provideToken({ token }, params);
+            return;
         }
-        else {
-            context.auth().authenticated().then(authzToken => {
-                if (authzToken == null) {
-                    provideToken({ token: '' }, undefined);
-                }
-            });
-        }
+        void context.auth().authenticated().then(async (authzToken) => {
+            if (authzToken == null || authzToken === '') {
+                setChoose(true);
+                return;
+            }
+            // A session already exists in THIS document. Whether it is useful here, or belongs to the
+            // window that opened this one, is the plugin's call — the dispatcher reads no environment.
+            const settled = await context.login().resume(authzToken);
+            switch (resumeAction(settled)) {
+                case ResumeAction.Stop:
+                    return;
+                case ResumeAction.Render:
+                    setOutcome(settled);
+                    return;
+                default:
+                    await navigate();
+            }
+        });
     }, []);
+    // A surrogate window never renders the application, whatever else is true. Checked ahead of
+    // every other return for exactly that reason.
+    //
+    // `choose` is the one state this must NOT mask, and it is not an exception to the rule: the
+    // login chooser is not the application. A login window with nothing to return from and nobody
+    // signed in has exactly one thing left that can move it forward, and that is asking which
+    // provider. The surrogate URL normally carries `?method=` so the question is already settled,
+    // but a window opened from a bare "Log in" — the framed application's own header button — has no
+    // method to send. Returning the "working" panel there left the popup on "Signing you in…"
+    // permanently, because nothing was ever going to start.
+    if (env.surrogate && !choose) {
+        return _jsx(LoginSurrogateView, { intent: LoginIntent.Login, stage: outcome === LoginOutcome.Orphaned ? SurrogateStage.Orphaned
+                : outcome === LoginOutcome.Failed ? SurrogateStage.Failed
+                    : outcome === LoginOutcome.Gesture ? SurrogateStage.Gesture
+                        : SurrogateStage.Working, onAction: () => window.close(), translate: (key, defaultValue) => tAuth(key, { defaultValue }) });
+    }
+    if (choose) {
+        const Screen = context.login().screen() ?? FallbackLoginScreen;
+        return _jsx(Screen, { translate: (key, defaultValue) => tAuth(key, { defaultValue }) });
+    }
     return query.has(AUTH_QUERY) ? _jsx("div", { style: {
             width: '100%', // Makes the div occupy the full width
             display: 'flex', // Enables flexbox layout

package/build/components/dispatcher/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE;IAC3D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAA;IAElD,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAE1C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC3B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACrB,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;gBAC/C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;gBACxC,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAK,KAAK,EAAE;YACzC,KAAK,EAAE,MAAM,EAAE,sCAAsC;YACrD,OAAO,EAAE,MAAM,EAAE,yBAAyB;YAC1C,cAAc,EAAE,QAAQ,EAAE,+BAA+B;YACzD,UAAU,EAAE,QAAQ,EAAE,yCAAyC;YAC/D,SAAS,EAAE,QAAQ,EAAE,8BAA8B;YACnD,UAAU,EAAE,MAAM,EAAE,6BAA6B;YACjD,aAAa,EAAE,MAAM,EAAE,6BAA6B;SACrD,YAAG,CAAC,CAAC,SAAS,CAAC,GAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACrC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/components/dispatcher/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EACL,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,GAC3E,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE;IACrE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAA;IAElD,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhC,8FAA8F;IAC9F,iGAAiG;IACjG,+FAA+F;IAC/F,sEAAsE;IACtE,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IACjE,6FAA6F;IAC7F,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE3C,SAAS,CAAC,GAAG,EAAE;QACb,4FAA4F;QAC5F,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAA;QAEvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC3B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACrB,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;YAE/B,OAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;YAC1D,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;gBAC5C,SAAS,CAAC,IAAI,CAAC,CAAA;gBAEf,OAAM;YACR,CAAC;YACD,0FAA0F;YAC1F,2FAA2F;YAC3F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YACxD,QAAQ,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,KAAK,YAAY,CAAC,IAAI;oBACpB,OAAM;gBACR,KAAK,YAAY,CAAC,MAAM;oBACtB,UAAU,CAAC,OAAO,CAAC,CAAA;oBAEnB,OAAM;gBACR;oBACE,MAAM,QAAQ,EAAE,CAAA;YACpB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,4FAA4F;IAC5F,8CAA8C;IAC9C,EAAE;IACF,4FAA4F;IAC5F,8FAA8F;IAC9F,0FAA0F;IAC1F,8FAA8F;IAC9F,iGAAiG;IACjG,0FAA0F;IAC1F,wDAAwD;IACxD,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,KAAC,kBAAkB,IACxB,MAAM,EAAE,WAAW,CAAC,KAAK,EACzB,KAAK,EACH,OAAO,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ;gBACzD,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM;oBACvD,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO;wBACzD,CAAC,CAAC,cAAc,CAAC,OAAO,EAEhC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,GAC9D,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,mBAAmB,CAAA;QAE9D,OAAO,KAAC,MAAM,IAAC,SAAS,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,GAAI,CAAA;IACnF,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAK,KAAK,EAAE;YACzC,KAAK,EAAE,MAAM,EAAE,sCAAsC;YACrD,OAAO,EAAE,MAAM,EAAE,yBAAyB;YAC1C,cAAc,EAAE,QAAQ,EAAE,+BAA+B;YACzD,UAAU,EAAE,QAAQ,EAAE,yCAAyC;YAC/D,SAAS,EAAE,QAAQ,EAAE,8BAA8B;YACnD,UAAU,EAAE,MAAM,EAAE,6BAA6B;YACjD,aAAa,EAAE,MAAM,EAAE,6BAA6B;SACrD,YAAG,CAAC,CAAC,SAAS,CAAC,GAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACrC,CAAC,CAAC,CAAA"}

package/build/components/dispatcher/parametrise.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parametrise.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/parametrise.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAI5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,eAAO,MAAM,qBAAqB,QAAS,OAAO,CAAC,iBAAiB,CAAC,QAAQ,eAAe,CAAC,eAAe,CAAC,aAE5F,iBAAiB,gCAiBjC,CAAA"}
+{"version":3,"file":"parametrise.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/parametrise.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAI5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,eAAO,MAAM,qBAAqB,GAAI,KAAK,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,eAAe,CAAC,eAAe,CAAC,MAEnG,OAAO,iBAAiB,gCAiBjC,CAAA"}

package/build/components/dispatcher/types.d.ts

@@ -1,6 +1,6 @@
-import type { ModuleContextParams } from "@owlmeans/client";
+import type { EntrypointContextParams } from "@owlmeans/client";
 import type { DispatcherProps } from "@owlmeans/client-auth";
 import type { PropsWithChildren } from "react";
-export interface ParametrisedProps extends PropsWithChildren<ModuleContextParams & DispatcherProps> {
+export interface ParametrisedProps extends PropsWithChildren<EntrypointContextParams & DispatcherProps> {
 }
 //# sourceMappingURL=types.d.ts.map

package/build/components/dispatcher/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAA;AAE9C,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB,CAAC,mBAAmB,GAAG,eAAe,CAAC;CAClG"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/dispatcher/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAA;AAE9C,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB,CAAC,uBAAuB,GAAG,eAAe,CAAC;CACtG"}

package/build/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AASlD,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,OAC7F,CAAC,KACL,CAYF,CAAA;AAED,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS,EAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,QACnF,CAAA"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAUlD,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAClG,KAAK,CAAC,KACL,CAWF,CAAA;AAED,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS,EAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,QACnF,CAAA"}

package/build/context.js

@@ -6,6 +6,7 @@ import { useContext as useCtx } from '@owlmeans/client';
 import { extractPrimaryHost } from './helper.js';
 import { appendWebAuthService } from './service.js';
 import { appendWebRouter } from '@owlmeans/web-router';
+import { appendWebLogin } from './login/service.js';
 export const makeContext = (cfg) => {
     const context = makeClientContext(cfg);
     extractPrimaryHost(context);
@@ -13,7 +14,7 @@ export const makeContext = (cfg) => {
     appendWebDbService(context);
     appendClientResource(context, AUTH_RESOURCE);
     appendWebRouter(context);
-    context.makeContext = makeContext;
+    appendWebLogin(context);
     return context;
 };
 export const useContext = () => useCtx();

package/build/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,UAAU,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,GAAM,EACH,EAAE;IACL,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAM,CAAA;IAC3C,kBAAkB,CAAO,OAAO,CAAC,CAAA;IAEjC,oBAAoB,CAAO,OAAO,CAAC,CAAA;IACnC,kBAAkB,CAAO,OAAO,CAAC,CAAA;IACjC,oBAAoB,CAAO,OAAO,EAAE,aAAa,CAAC,CAAA;IAClD,eAAe,CAAO,OAAO,CAAC,CAAA;IAE9B,OAAO,CAAC,WAAW,GAAG,WAAyC,CAAA;IAE/D,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAA4E,EAAE,CACtG,MAAM,EAAO,CAAA"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,UAAU,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,GAAM,EACH,EAAE;IACL,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAM,CAAA;IAC3C,kBAAkB,CAAO,OAAO,CAAC,CAAA;IAEjC,oBAAoB,CAAO,OAAO,CAAC,CAAA;IACnC,kBAAkB,CAAO,OAAO,CAAC,CAAA;IACjC,oBAAoB,CAAO,OAAO,EAAE,aAAa,CAAC,CAAA;IAClD,eAAe,CAAO,OAAO,CAAC,CAAA;IAC9B,cAAc,CAAO,OAAO,CAAC,CAAA;IAE7B,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAA4E,EAAE,CACtG,MAAM,EAAO,CAAA"}

package/build/entrypoints.d.ts

@@ -0,0 +1,2 @@
+export declare const entrypoints: import("@owlmeans/client-entrypoint").ClientEntrypoint<{}, import("@owlmeans/client-entrypoint").ClientRequest<{}>>[];
+//# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,WAAW,uHAAO,CAAA"}

package/build/entrypoints.js

@@ -0,0 +1,18 @@
+import { DISPATCHER, DISPATCHER_SURROGATE } from '@owlmeans/auth';
+import { entrypoints as list } from '@owlmeans/client-auth';
+import { elevate } from '@owlmeans/client-entrypoint';
+import { handler } from '@owlmeans/client';
+import { Dispatcher } from './components/dispatcher/component.js';
+import { SurrogateScreen } from './login/screen.js';
+elevate(list, DISPATCHER, handler(Dispatcher));
+/**
+ * Elevated here rather than in a relying-party package on purpose.
+ *
+ * The surrogate mechanic is not OIDC-specific — it is "run the login route one window up and hand
+ * the result back" — and every web application already spreads this list. Putting the screen here
+ * means `web-panel`, `mui-panel` and every generated target gain a working login window with no
+ * edit of their own, which is the only way an application that is already deployed can get it.
+ */
+elevate(list, DISPATCHER_SURROGATE, handler(SurrogateScreen));
+export const entrypoints = list;
+//# sourceMappingURL=entrypoints.js.map

package/build/entrypoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAAE,WAAW,IAAI,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;AAE9C;;;;;;;GAOG;AACH,OAAO,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;AAE7D,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAA"}

package/build/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAA;AAE/C,qBAAa,aAAc,SAAQ,cAAc;IAC/C,OAAuB,QAAQ,EAAE,MAAM,CAAuC;IAE9E,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF;AAED,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,OAAuB,QAAQ,EAAE,MAAM,CAA2C;IAE3E,QAAQ,EAAE,KAAK,GAAG,SAAS,CAAA;IAElC,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAA;AAE/C,qBAAa,aAAc,SAAQ,cAAc;IAC/C,OAAuB,QAAQ,EAAE,MAAM,CAAuC;gBAElE,OAAO,GAAE,MAAgB;CAItC;AAED,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,OAAuB,QAAQ,EAAE,MAAM,CAA2C;IAE3E,QAAQ,EAAE,KAAK,GAAG,SAAS,CAAA;gBAEtB,OAAO,GAAE,MAAgB;CAItC"}

package/build/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAA;AAE/C,MAAM,OAAO,aAAc,SAAQ,cAAc;IACxC,MAAM,CAAU,QAAQ,GAAW,GAAG,cAAc,CAAC,QAAQ,UAAU,CAAA;IAE9E,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAA;IACpC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IAC5C,MAAM,CAAU,QAAQ,GAAW,GAAG,aAAa,CAAC,QAAQ,eAAe,CAAA;IAE3E,QAAQ,CAAmB;IAElC,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAA;IACzC,CAAC;CACF;AAED,cAAc,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;AAChD,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAA;AAE/C,MAAM,OAAO,aAAc,SAAQ,cAAc;IACxC,MAAM,CAAU,QAAQ,GAAW,GAAG,cAAc,CAAC,QAAQ,UAAU,CAAA;IAE9E,YAAY,UAAkB,OAAO;QACnC,KAAK,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAA;IACpC,CAAC;;AAGH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IAC5C,MAAM,CAAU,QAAQ,GAAW,GAAG,aAAa,CAAC,QAAQ,eAAe,CAAA;IAE3E,QAAQ,CAAmB;IAElC,YAAY,UAAkB,OAAO;QACnC,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAA;IACzC,CAAC;;AAGH,cAAc,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAA;AAChD,cAAc,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA"}

package/build/exports.d.ts

@@ -4,6 +4,7 @@ export { service } from '@owlmeans/config';
 export { AppType, HOME, ROOT, BASE, GUEST } from '@owlmeans/context';
 export { entrypoint, elevate, provideRequest, stab } from '@owlmeans/client-entrypoint';
 export { route, frontend } from '@owlmeans/route';
+export type { ClientEntrypoint } from '@owlmeans/client-entrypoint';
 export type { ClientEntrypoint as Module } from '@owlmeans/client-entrypoint';
 export type { ClientRoute as Route } from '@owlmeans/client-route';
 //# sourceMappingURL=exports.d.ts.map

package/build/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AACvF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAC7E,YAAY,EAAE,WAAW,IAAI,KAAK,EAAE,MAAM,wBAAwB,CAAA"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AACvF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AACnE,YAAY,EAAE,gBAAgB,IAAI,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAC7E,YAAY,EAAE,WAAW,IAAI,KAAK,EAAE,MAAM,wBAAwB,CAAA"}

package/build/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvD,eAAO,MAAM,kBAAkB,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,SAKtH,CAAA"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvD,eAAO,MAAM,kBAAkB,GAAI,CAAC,SAAS,SAAS,GAAG,SAAS,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,SAKtH,CAAA"}

package/build/i18n/auth-be.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Загрузка...",
         "error": "Не ўдалося прайсці аўтэнтыфікацыю: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Выконваем уваход…",
+            "gesture": {
+                "title": "Працягніце, каб увайсці.",
+                "action": "Увайсці"
+            },
+            "handing": "Гатова. Вяртаемся ў праграму…",
+            "orphaned": "Уваход выкананы. Можаце закрыць гэтае акно і вярнуцца ў праграму.",
+            "failed": "Не ўдалося завяршыць. Закрыйце гэтае акно і паспрабуйце зноў.",
+            "standalone": {
+                "title": "Гэтая старонка выкарыстоўваецца для ўваходу з іншага акна.",
+                "action": "Адкрыць праграму"
+            },
+            "close": "Закрыць"
+        },
+        "logout": {
+            "working": "Выконваем выхад…",
+            "gesture": {
+                "title": "Працягніце, каб выйсці.",
+                "action": "Выйсці"
+            },
+            "handing": "Выхад выкананы. Вяртаемся ў праграму…",
+            "orphaned": "Выхад выкананы. Можаце закрыць гэтае акно.",
+            "failed": "Выхад тут не завершаны. Можаце закрыць гэтае акно.",
+            "standalone": {
+                "title": "Гэтая старонка выкарыстоўваецца для выхаду з іншага акна.",
+                "action": "Адкрыць праграму"
+            },
+            "close": "Закрыць"
+        }
     }
 }

package/build/i18n/auth-de.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Wird geladen...",
         "error": "Authentifizierung fehlgeschlagen: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Anmeldung läuft…",
+            "gesture": {
+                "title": "Fortfahren, um sich anzumelden.",
+                "action": "Anmelden"
+            },
+            "handing": "Fertig. Zurück zur Anwendung…",
+            "orphaned": "Angemeldet. Sie können dieses Fenster schließen und in der Anwendung fortfahren.",
+            "failed": "Das wurde nicht abgeschlossen. Schließen Sie dieses Fenster und versuchen Sie es erneut.",
+            "standalone": {
+                "title": "Diese Seite dient der Anmeldung aus einem anderen Fenster.",
+                "action": "Anwendung öffnen"
+            },
+            "close": "Schließen"
+        },
+        "logout": {
+            "working": "Abmeldung läuft…",
+            "gesture": {
+                "title": "Fortfahren, um sich abzumelden.",
+                "action": "Abmelden"
+            },
+            "handing": "Abgemeldet. Zurück zur Anwendung…",
+            "orphaned": "Abgemeldet. Sie können dieses Fenster schließen.",
+            "failed": "Die Abmeldung wurde hier nicht abgeschlossen. Sie können dieses Fenster schließen.",
+            "standalone": {
+                "title": "Diese Seite dient der Abmeldung aus einem anderen Fenster.",
+                "action": "Anwendung öffnen"
+            },
+            "close": "Schließen"
+        }
     }
 }

package/build/i18n/auth-en.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Loading...",
         "error": "Authentication failed: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Signing you in…",
+            "gesture": {
+                "title": "Continue to sign in.",
+                "action": "Sign in"
+            },
+            "handing": "Done. Returning to the application…",
+            "orphaned": "Signed in. You can close this window and continue in the application.",
+            "failed": "That did not complete. You can close this window and try again.",
+            "standalone": {
+                "title": "This page is used to sign in from another window.",
+                "action": "Open the application"
+            },
+            "close": "Close"
+        },
+        "logout": {
+            "working": "Signing you out…",
+            "gesture": {
+                "title": "Continue to sign out.",
+                "action": "Sign out"
+            },
+            "handing": "Signed out. Returning to the application…",
+            "orphaned": "Signed out. You can close this window.",
+            "failed": "Sign-out did not complete here. You can close this window.",
+            "standalone": {
+                "title": "This page is used to sign out from another window.",
+                "action": "Open the application"
+            },
+            "close": "Close"
+        }
     }
 }

package/build/i18n/auth-es.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Cargando...",
         "error": "Error de autenticación: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Iniciando sesión…",
+            "gesture": {
+                "title": "Continúa para iniciar sesión.",
+                "action": "Iniciar sesión"
+            },
+            "handing": "Listo. Volviendo a la aplicación…",
+            "orphaned": "Sesión iniciada. Puedes cerrar esta ventana y continuar en la aplicación.",
+            "failed": "No se completó. Cierra esta ventana e inténtalo de nuevo.",
+            "standalone": {
+                "title": "Esta página se usa para iniciar sesión desde otra ventana.",
+                "action": "Abrir la aplicación"
+            },
+            "close": "Cerrar"
+        },
+        "logout": {
+            "working": "Cerrando sesión…",
+            "gesture": {
+                "title": "Continúa para cerrar sesión.",
+                "action": "Cerrar sesión"
+            },
+            "handing": "Sesión cerrada. Volviendo a la aplicación…",
+            "orphaned": "Sesión cerrada. Puedes cerrar esta ventana.",
+            "failed": "El cierre de sesión no se completó aquí. Puedes cerrar esta ventana.",
+            "standalone": {
+                "title": "Esta página se usa para cerrar sesión desde otra ventana.",
+                "action": "Abrir la aplicación"
+            },
+            "close": "Cerrar"
+        }
     }
 }

package/build/i18n/auth-pl.json

@@ -2,5 +2,37 @@
     "dispatcher": {
         "loading": "Ładowanie...",
         "error": "Uwierzytelnianie nie powiodło się: {{error}}"
+    },
+    "surrogate": {
+        "login": {
+            "working": "Trwa logowanie…",
+            "gesture": {
+                "title": "Kontynuuj, aby się zalogować.",
+                "action": "Zaloguj się"
+            },
+            "handing": "Gotowe. Wracamy do aplikacji…",
+            "orphaned": "Zalogowano. Możesz zamknąć to okno i kontynuować w aplikacji.",
+            "failed": "Nie udało się ukończyć. Zamknij to okno i spróbuj ponownie.",
+            "standalone": {
+                "title": "Ta strona służy do logowania z innego okna.",
+                "action": "Otwórz aplikację"
+            },
+            "close": "Zamknij"
+        },
+        "logout": {
+            "working": "Trwa wylogowywanie…",
+            "gesture": {
+                "title": "Kontynuuj, aby się wylogować.",
+                "action": "Wyloguj się"
+            },
+            "handing": "Wylogowano. Wracamy do aplikacji…",
+            "orphaned": "Wylogowano. Możesz zamknąć to okno.",
+            "failed": "Wylogowanie nie zostało tu ukończone. Możesz zamknąć to okno.",
+            "standalone": {
+                "title": "Ta strona służy do wylogowania z innego okna.",
+                "action": "Otwórz aplikację"
+            },
+            "close": "Zamknij"
+        }
     }
 }