@plumile/backoffice-react 0.1.76 → 0.1.77

package/lib/esm/{synchronizeAuthStatusQuery-lLR0XFew.js → synchronizeAuthStatusQuery-Ba776lwa.js}

@@ -1,6 +1,6 @@
-import { a as e, c as t, d as n, f as r, o as i, r as a, s as o, t as s } from "./loginPage.css-BDQJNcSr.js";
-import { o as c } from "./useAuth-AczFS-oL.js";
-import { t as l } from "./AuthPanel-ttoH9YxE.js";
+import { a as e, c as t, d as n, f as r, o as i, r as a, s as o, t as s } from "./loginPage.css-4M4PrzUn.js";
+import { o as c } from "./useAuth-DzWJXJ_9.js";
+import { t as l } from "./AuthPanel-Co626p7A.js";
 import { useCallback as u, useEffect as d, useMemo as f, useRef as p, useState as m } from "react";
 import { Trans as h } from "react-i18next";
 import { AuthLayout as g, Button as _, FormError as v, FormField as y, LoginForm as b, cx as x } from "@plumile/ui";
@@ -320,4 +320,4 @@ async function N(e, t) {
 //#endregion
 export { j as n, N as t };
 
-//# sourceMappingURL=synchronizeAuthStatusQuery-lLR0XFew.js.map
+//# sourceMappingURL=synchronizeAuthStatusQuery-Ba776lwa.js.map

package/lib/esm/{synchronizeAuthStatusQuery-lLR0XFew.js.map → synchronizeAuthStatusQuery-Ba776lwa.js.map}

@@ -1 +1 @@
-{"version":3,"file":"synchronizeAuthStatusQuery-lLR0XFew.js","names":[],"sources":["../../src/auth/login/PasskeyLoginForm.tsx","../../src/auth/login/MethodChooser.tsx","../../src/auth/login/EmailCapturePanel.tsx","../../src/auth/login/OidcButtons.tsx","../../src/auth/login/PasswordLoginPanel.tsx","../../src/auth/login/LoginFlow.tsx","../../src/auth/login/synchronizeAuthStatusQuery.ts"],"sourcesContent":["/* eslint-disable no-ternary */\nimport {\n  useCallback,\n  useEffect,\n  useState,\n  type FormEvent,\n  type JSX,\n} from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport type { UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: Pick<\n    UseAuthReturn,\n    | 'loginWithPasskey'\n    | 'isLoading'\n    | 'error'\n    | 'emailHint'\n    | 'nextStep'\n    | 'beginAuthentication'\n    | 'lockedUntil'\n    | 'availableMethods'\n  >;\n  onSuccess: () => void;\n  defaultEmail?: string;\n  isAttemptingPasskey?: boolean;\n  onShowMethods?: () => void;\n};\n\nexport const PasskeyLoginForm = ({\n  auth,\n  onSuccess,\n  defaultEmail,\n  isAttemptingPasskey = false,\n  onShowMethods,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const [email, setEmail] = useState(auth.emailHint ?? '');\n  const [localError, setLocalError] = useState<string | null>(null);\n\n  useEffect(() => {\n    if (auth.emailHint != null && auth.emailHint !== '') {\n      setEmail(auth.emailHint);\n    } else if (defaultEmail != null && defaultEmail !== '') {\n      setEmail(defaultEmail);\n    }\n  }, [auth.emailHint, defaultEmail]);\n\n  const handleSubmit = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      setLocalError(null);\n\n      if (email.trim() === '') {\n        setLocalError(t('auth.passkey.errors.emailRequired'));\n        return;\n      }\n\n      try {\n        const result = await auth.beginAuthentication(email.trim());\n        if (Array.isArray(result.methods) && result.methods.length === 0) {\n          const lockedUntilMessage =\n            result.lockedUntil != null\n              ? t('auth.passkey.errors.lockedWithTime', {\n                  time: new Date(result.lockedUntil).toLocaleString(),\n                })\n              : t('auth.passkey.errors.locked');\n          setLocalError(lockedUntilMessage);\n          return;\n        }\n        if (\n          Array.isArray(result.methods) &&\n          !result.methods.includes('PASSKEY')\n        ) {\n          setLocalError(t('auth.passkey.errors.notAvailable'));\n          return;\n        }\n\n        const status = await auth.loginWithPasskey({ email: email.trim() });\n        if (status === 'success') {\n          onSuccess();\n        }\n      } catch {\n        const authMessage = auth.error?.message;\n        setLocalError(authMessage ?? t('auth.passkey.errors.failed'));\n      }\n    },\n    [auth, email, onSuccess, t],\n  );\n\n  const formError = localError ?? auth.error?.message ?? null;\n\n  return (\n    // eslint-disable-next-line @typescript-eslint/no-misused-promises\n    <form className={styles.formSurface} onSubmit={handleSubmit} noValidate>\n      <div className={styles.stack}>\n        <p className={styles.helper}>{t('auth.passkey.helper')}</p>\n        {formError != null ? <FormError>{formError}</FormError> : null}\n        <FormField\n          label={t('auth.passkey.form.emailLabel')}\n          name=\"passkey-email\"\n          type=\"email\"\n          value={email}\n          onChange={(event) => {\n            setEmail(event.target.value);\n            setLocalError(null);\n          }}\n          placeholder={t('auth.passkey.form.emailPlaceholder')}\n          autoComplete=\"email\"\n          required\n        />\n      </div>\n      <div className={styles.actionsRow}>\n        <Button type=\"submit\" variant=\"primary\" isLoading={auth.isLoading}>\n          {isAttemptingPasskey\n            ? t('auth.passkey.actions.submitting')\n            : t('auth.passkey.actions.submit')}\n        </Button>\n        {onShowMethods != null ? (\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onShowMethods}\n          >\n            {t('auth.passkey.actions.showMethods')}\n          </button>\n        ) : null}\n      </div>\n    </form>\n  );\n};\n","/* eslint-disable no-ternary */\nimport { type JSX } from 'react';\nimport { Trans } from 'react-i18next';\nimport { Button, FormError, cx } from '@plumile/ui';\n\nimport type { AuthMethod } from '../../modules/sharedSchemaTypes.js';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  email: string;\n  methods: readonly AuthMethod[];\n  lockedUntil: string | null;\n  onSelect: (method: AuthMethod) => void;\n  onBack: () => void;\n};\n\nexport const MethodChooser = ({\n  email,\n  methods,\n  lockedUntil,\n  onSelect,\n  onBack,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const isLocked = methods.length === 0;\n  const lockedMessage =\n    lockedUntil != null\n      ? t('auth.methodChooser.lockedWithTime', {\n          time: new Date(lockedUntil).toLocaleString(),\n        })\n      : t('auth.methodChooser.locked');\n\n  const methodButtons = methods.map((method) => {\n    const label =\n      method === 'PASSKEY'\n        ? t('auth.methodChooser.methods.passkey')\n        : method === 'PASSWORD'\n          ? t('auth.methodChooser.methods.password')\n          : t('auth.methodChooser.methods.other', {\n              method: method.toLowerCase(),\n            });\n    return (\n      <Button\n        key={method}\n        type=\"button\"\n        variant=\"secondary\"\n        onClick={() => {\n          onSelect(method);\n        }}\n        className={cx(styles.fullWidth, styles.brandGhostButton)}\n      >\n        {label}\n      </Button>\n    );\n  });\n\n  return (\n    <div className={styles.formSurface}>\n      <div className={styles.stack}>\n        <p className={styles.helper}>\n          <Trans\n            i18nKey=\"auth.methodChooser.prompt\"\n            values={{ email }}\n            components={{ strong: <strong /> }}\n          />\n        </p>\n        {isLocked ? <FormError>{lockedMessage}</FormError> : null}\n        {!isLocked ? methodButtons : null}\n        <Button\n          type=\"button\"\n          variant=\"text\"\n          onClick={onBack}\n          className={styles.inlineLink}\n        >\n          {t('auth.methodChooser.actions.back')}\n        </Button>\n      </div>\n    </div>\n  );\n};\n","import { type JSX } from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport { AuthPanel } from './AuthPanel.js';\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  email: string;\n  errorMessage: string | null;\n  isLoading: boolean;\n  onEmailChange: (value: string) => void;\n  onContinue: () => void;\n  onForgotPassword: () => void;\n};\n\nexport const EmailCapturePanel = ({\n  email,\n  errorMessage,\n  isLoading,\n  onEmailChange,\n  onContinue,\n  onForgotPassword,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  return (\n    <AuthPanel>\n      <div className={styles.formSurface}>\n        <p className={styles.helper}>{t('auth.emailCapture.description')}</p>\n        {errorMessage != null && <FormError>{errorMessage}</FormError>}\n        <FormField\n          label={t('auth.emailCapture.emailLabel')}\n          name=\"email\"\n          type=\"email\"\n          value={email}\n          onChange={(event) => {\n            onEmailChange(event.target.value);\n          }}\n          placeholder={t('auth.emailCapture.emailPlaceholder')}\n          autoComplete=\"email\"\n          required\n        />\n        <div className={styles.actionsRow}>\n          <Button\n            type=\"button\"\n            variant=\"primary\"\n            onClick={onContinue}\n            isLoading={isLoading}\n          >\n            {t('auth.emailCapture.continue')}\n          </Button>\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onForgotPassword}\n          >\n            {t('auth.emailCapture.forgotPassword')}\n          </button>\n        </div>\n      </div>\n    </AuthPanel>\n  );\n};\n","import { type JSX } from 'react';\n\nimport { Button } from '@plumile/ui';\n\nimport type { OidcProviderKind } from '../../modules/sharedSchemaTypes.js';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport * as styles from './loginPage.css.js';\n\nconst OIDC_START_PATH = '/auth/oidc/start';\n\ntype Props = {\n  providers: readonly OidcProviderKind[];\n};\n\nexport const OidcButtons = ({ providers }: Props): JSX.Element | null => {\n  const { t } = useSharedTranslation();\n\n  if (providers.length === 0) {\n    return null;\n  }\n\n  return (\n    <div className={styles.stack}>\n      {providers.map((provider) => {\n        let label = t('auth.oidc.buttons.generic');\n        if (provider === 'GOOGLE') {\n          label = t('auth.oidc.buttons.google');\n        } else if (provider === 'APPLE') {\n          label = t('auth.oidc.buttons.apple');\n        }\n        const providerName = provider.toLowerCase();\n        return (\n          <Button\n            key={provider}\n            type=\"button\"\n            variant=\"secondary\"\n            className={styles.brandGhostButton}\n            onClick={() => {\n              window.location.assign(\n                `${OIDC_START_PATH}?provider=${providerName}`,\n              );\n            }}\n          >\n            {label}\n          </Button>\n        );\n      })}\n    </div>\n  );\n};\n","import { type JSX } from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { LoginForm, type LoginFormAuthAdapter } from '@plumile/ui';\n\nimport type { OidcProviderKind } from '../../modules/sharedSchemaTypes.js';\n\nimport { AuthPanel } from './AuthPanel.js';\nimport { OidcButtons } from './OidcButtons.js';\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: LoginFormAuthAdapter;\n  defaultEmail: string;\n  onForgotPassword: () => void;\n  onSuccess: () => void;\n  providers: readonly OidcProviderKind[];\n};\n\nexport const PasswordLoginPanel = ({\n  auth,\n  defaultEmail,\n  onForgotPassword,\n  onSuccess,\n  providers,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  return (\n    <AuthPanel title={t('auth.passwordLogin.title')}>\n      <div className={styles.formSurface}>\n        <LoginForm\n          auth={auth}\n          onSuccess={onSuccess}\n          defaultEmail={defaultEmail}\n        />\n        <div className={styles.actionsRow}>\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onForgotPassword}\n          >\n            {t('auth.passwordLogin.forgotPassword')}\n          </button>\n        </div>\n        <OidcButtons providers={providers} />\n      </div>\n    </AuthPanel>\n  );\n};\n","/* eslint-disable no-ternary */\nimport {\n  type JSX,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { AuthLayout } from '@plumile/ui';\n\nimport type {\n  AuthMethod,\n  OidcProviderKind,\n} from '../../modules/sharedSchemaTypes.js';\nimport type { UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport { MfaChallengeForm } from './MfaChallengeForm.js';\nimport { PasskeyLoginForm } from './PasskeyLoginForm.js';\nimport { MethodChooser } from './MethodChooser.js';\nimport AuthPanel from './AuthPanel.js';\nimport { EmailCapturePanel } from './EmailCapturePanel.js';\nimport { PasswordLoginPanel } from './PasswordLoginPanel.js';\n\nexport type LoginFlowProps = {\n  auth: UseAuthReturn;\n  oidcProviders: readonly OidcProviderKind[];\n  onLoginSuccess: () => void;\n  onForgotPassword: () => void;\n};\n\ntype View = 'email' | 'passkey' | 'methods' | 'password' | 'mfa';\n\nexport const LoginFlow = ({\n  auth,\n  oidcProviders,\n  onLoginSuccess,\n  onForgotPassword,\n}: LoginFlowProps): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const [email, setEmail] = useState('');\n  const [methods, setMethods] = useState<readonly AuthMethod[]>([]);\n  const [lockedUntil, setLockedUntil] = useState<string | null>(null);\n  const [view, setView] = useState<View>('email');\n  const [hasTriedPasskey, setHasTriedPasskey] = useState(false);\n  const [localError, setLocalError] = useState<string | null>(null);\n  const passkeyAttemptActive = useRef(true);\n\n  const loginAdapter = useMemo(() => {\n    return {\n      ...auth,\n      beginAuthentication: async (inputEmail: string) => {\n        const result = await auth.beginAuthentication(inputEmail);\n        setEmail(inputEmail);\n        setMethods(result.methods);\n        setLockedUntil(result.lockedUntil);\n        return result;\n      },\n    };\n  }, [auth]);\n\n  const handleLoginSuccess = useCallback(\n    ({ force } = { force: false }) => {\n      if (!force && auth.nextStep === 'TOTP') {\n        return;\n      }\n      onLoginSuccess();\n    },\n    [auth.nextStep, onLoginSuccess],\n  );\n\n  const isMfaStep = auth.nextStep === 'TOTP' || view === 'mfa';\n  const title = isMfaStep\n    ? t('auth.loginFlow.title.mfa')\n    : t('auth.loginFlow.title.default');\n  const subtitle = isMfaStep\n    ? t('auth.loginFlow.subtitle.mfa')\n    : t('auth.loginFlow.subtitle.default');\n\n  const startFlowForEmail = useCallback(\n    async (inputEmail: string) => {\n      setLocalError(null);\n      try {\n        const trimmed = inputEmail.trim();\n        const result = await auth.beginAuthentication(trimmed);\n        setEmail(trimmed);\n        setMethods(result.methods);\n        setLockedUntil(result.lockedUntil);\n        const hasPasskey = result.methods.some((method) => {\n          return method === 'PASSKEY';\n        });\n\n        if (hasPasskey) {\n          setView('passkey');\n        } else if (result.methods.includes('PASSWORD')) {\n          setView('password');\n        } else {\n          setView('methods');\n        }\n      } catch (beginError) {\n        const message =\n          beginError instanceof Error\n            ? beginError.message\n            : t('auth.loginFlow.errors.tryAgain');\n        setLocalError(message);\n      }\n    },\n    [auth, t],\n  );\n\n  useEffect(() => {\n    passkeyAttemptActive.current = true;\n    const trimmedEmail = email.trim();\n    const shouldAttempt =\n      view === 'passkey' && !hasTriedPasskey && trimmedEmail !== '';\n\n    if (shouldAttempt) {\n      setHasTriedPasskey(true);\n      const runPasskeyLogin = async () => {\n        try {\n          const status = await loginAdapter.loginWithPasskey({\n            email: trimmedEmail,\n          });\n\n          if (!passkeyAttemptActive.current) {\n            return;\n          }\n\n          if (status === 'success') {\n            handleLoginSuccess();\n            return;\n          }\n\n          if (status === 'mfa-required') {\n            setView('mfa');\n            return;\n          }\n\n          setView('methods');\n          setLocalError(t('auth.loginFlow.errors.passkeyUnavailable'));\n        } catch (passkeyError) {\n          if (!passkeyAttemptActive.current) {\n            return;\n          }\n\n          const message =\n            passkeyError instanceof Error\n              ? passkeyError.message\n              : t('auth.loginFlow.errors.passkeyUnavailable');\n          setLocalError(message);\n          setView('methods');\n        }\n      };\n      runPasskeyLogin().catch(() => {\n        // Errors are handled inside runPasskeyLogin; ignore any unexpected rethrow.\n      });\n    }\n\n    return () => {\n      passkeyAttemptActive.current = false;\n    };\n  }, [email, handleLoginSuccess, hasTriedPasskey, loginAdapter, t, view]);\n\n  let content: JSX.Element;\n\n  if (isMfaStep) {\n    content = (\n      <AuthPanel>\n        <MfaChallengeForm\n          auth={auth}\n          onSuccess={() => {\n            handleLoginSuccess({ force: true });\n          }}\n          onBack={() => {\n            auth.reset();\n            setView('email');\n          }}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'passkey') {\n    content = (\n      <AuthPanel\n        title={t('auth.loginFlow.passkey.title')}\n        description={t('auth.loginFlow.passkey.description', { email })}\n      >\n        <PasskeyLoginForm\n          auth={loginAdapter}\n          onSuccess={handleLoginSuccess}\n          onShowMethods={() => {\n            setView('methods');\n          }}\n          defaultEmail={email}\n          isAttemptingPasskey={auth.isLoading}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'methods') {\n    content = (\n      <AuthPanel title={t('auth.loginFlow.methods.title')}>\n        <MethodChooser\n          email={email}\n          methods={methods}\n          lockedUntil={lockedUntil}\n          onSelect={(method) => {\n            if (method === 'PASSKEY') {\n              setView('passkey');\n              return;\n            }\n            if (method === 'PASSWORD') {\n              setView('password');\n            }\n          }}\n          onBack={() => {\n            setView('email');\n          }}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'password') {\n    content = (\n      <PasswordLoginPanel\n        auth={loginAdapter}\n        defaultEmail={email}\n        onForgotPassword={onForgotPassword}\n        onSuccess={handleLoginSuccess}\n        providers={oidcProviders}\n      />\n    );\n  } else {\n    // email capture only\n    content = (\n      <EmailCapturePanel\n        email={email}\n        errorMessage={localError}\n        isLoading={auth.isLoading}\n        onEmailChange={(value) => {\n          setEmail(value);\n          setLocalError(null);\n        }}\n        onContinue={() => {\n          const trimmed = email.trim();\n          if (trimmed === '') {\n            setLocalError(t('auth.loginFlow.errors.emailRequired'));\n            return;\n          }\n          startFlowForEmail(trimmed).catch(() => {\n            // startFlowForEmail handles its own errors.\n          });\n        }}\n        onForgotPassword={onForgotPassword}\n      />\n    );\n  }\n\n  return (\n    <AuthLayout title={title} subtitle={subtitle}>\n      {content}\n    </AuthLayout>\n  );\n};\n","import RelayRuntime, {\n  type GraphQLTaggedNode,\n  type IEnvironment,\n  type OperationType,\n} from 'relay-runtime';\n\nconst { fetchQuery } = RelayRuntime;\n\ntype AuthStatusQueryResponse = {\n  readonly isLoggedIn?: boolean | null;\n};\n\n/**\n * Forces a fresh auth-status read from network to avoid stale cache guards\n * right after login mutations complete.\n */\nexport async function synchronizeAuthStatusQuery<TQuery extends OperationType>(\n  environment: IEnvironment,\n  query: GraphQLTaggedNode,\n): Promise<boolean> {\n  const response = await fetchQuery<TQuery>(\n    environment,\n    query,\n    {},\n    { fetchPolicy: 'network-only' },\n  ).toPromise();\n\n  const isLoggedIn = (response as AuthStatusQueryResponse | null | undefined)\n    ?.isLoggedIn;\n  return isLoggedIn === true;\n}\n"],"mappings":";;;;;;;;;AAkCA,IAAa,KAAoB,EAC/B,SACA,cACA,iBACA,yBAAsB,IACtB,uBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAO,KAAY,EAAS,EAAK,aAAa,GAAG,EAClD,CAAC,GAAY,KAAiB,EAAwB,KAAK;AAEjE,SAAgB;AACd,EAAI,EAAK,aAAa,QAAQ,EAAK,cAAc,KAC/C,EAAS,EAAK,UAAU,GACf,KAAgB,QAAQ,MAAiB,MAClD,EAAS,EAAa;IAEvB,CAAC,EAAK,WAAW,EAAa,CAAC;CAElC,IAAM,IAAe,EACnB,OAAO,MAAsC;AAI3C,MAHA,EAAM,gBAAgB,EACtB,EAAc,KAAK,EAEf,EAAM,MAAM,KAAK,IAAI;AACvB,KAAc,EAAE,oCAAoC,CAAC;AACrD;;AAGF,MAAI;GACF,IAAM,IAAS,MAAM,EAAK,oBAAoB,EAAM,MAAM,CAAC;AAC3D,OAAI,MAAM,QAAQ,EAAO,QAAQ,IAAI,EAAO,QAAQ,WAAW,GAAG;AAOhE,MALE,EAAO,eAAe,OAIlB,EAAE,6BAA6B,GAH/B,EAAE,sCAAsC,EACtC,MAAM,IAAI,KAAK,EAAO,YAAY,CAAC,gBAAgB,EACpD,CAAC,CAEyB;AACjC;;AAEF,OACE,MAAM,QAAQ,EAAO,QAAQ,IAC7B,CAAC,EAAO,QAAQ,SAAS,UAAU,EACnC;AACA,MAAc,EAAE,mCAAmC,CAAC;AACpD;;AAIF,GADe,MAAM,EAAK,iBAAiB,EAAE,OAAO,EAAM,MAAM,EAAE,CAAC,KACpD,aACb,GAAW;UAEP;GACN,IAAM,IAAc,EAAK,OAAO;AAChC,KAAc,KAAe,EAAE,6BAA6B,CAAC;;IAGjE;EAAC;EAAM;EAAO;EAAW;EAAE,CAC5B,EAEK,IAAY,KAAc,EAAK,OAAO,WAAW;AAEvD,QAEE,kBAAC,QAAD;EAAM,WAAW;EAAoB,UAAU;EAAc,YAAA;YAA7D,CACE,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eAAgB,EAAE,sBAAsB;KAAK,CAAA;IAC1D,KAAa,OAA4C,OAArC,kBAAC,GAAD,EAAA,UAAY,GAAsB,CAAA;IACvD,kBAAC,GAAD;KACE,OAAO,EAAE,+BAA+B;KACxC,MAAK;KACL,MAAK;KACL,OAAO;KACP,WAAW,MAAU;AAEnB,MADA,EAAS,EAAM,OAAO,MAAM,EAC5B,EAAc,KAAK;;KAErB,aAAa,EAAE,qCAAqC;KACpD,cAAa;KACb,UAAA;KACA,CAAA;IACE;MACN,kBAAC,OAAD;GAAK,WAAW;aAAhB,CACE,kBAAC,GAAD;IAAQ,MAAK;IAAS,SAAQ;IAAU,WAAW,EAAK;cAElD,EADH,IACK,oCACA,8BAA8B;IAC7B,CAAA,EACR,KAAiB,OAQd,OAPF,kBAAC,UAAD;IACE,MAAK;IACL,WAAW;IACX,SAAS;cAER,EAAE,mCAAmC;IAC/B,CAAA,CAEP;KACD;;GCnHE,KAAiB,EAC5B,UACA,YACA,gBACA,aACA,gBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB,EAC9B,IAAW,EAAQ,WAAW,GAC9B,IACJ,KAAe,OAIX,EAAE,4BAA4B,GAH9B,EAAE,qCAAqC,EACrC,MAAM,IAAI,KAAK,EAAY,CAAC,gBAAgB,EAC7C,CAAC,EAGF,IAAgB,EAAQ,KAAK,MAAW;EAC5C,IAAM,IACJ,MAAW,YACP,EAAE,qCAAqC,GACvC,MAAW,aACT,EAAE,sCAAsC,GACxC,EAAE,oCAAoC,EACpC,QAAQ,EAAO,aAAa,EAC7B,CAAC;AACV,SACE,kBAAC,GAAD;GAEE,MAAK;GACL,SAAQ;GACR,eAAe;AACb,MAAS,EAAO;;GAElB,WAAW,EAAG,GAAkB,EAAwB;aAEvD;GACM,EATF,EASE;GAEX;AAEF,QACE,kBAAC,OAAD;EAAK,WAAW;YACd,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eACZ,kBAAC,GAAD;MACE,SAAQ;MACR,QAAQ,EAAE,UAAO;MACjB,YAAY,EAAE,QAAQ,kBAAC,UAAD,EAAU,CAAA,EAAE;MAClC,CAAA;KACA,CAAA;IACH,IAAW,kBAAC,GAAD,EAAA,UAAY,GAA0B,CAAA,GAAG;IACnD,IAA2B,OAAhB;IACb,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,SAAS;KACT,WAAW;eAEV,EAAE,kCAAkC;KAC9B,CAAA;IACL;;EACF,CAAA;GC9DG,KAAqB,EAChC,UACA,iBACA,cACA,kBACA,eACA,0BACwB;CACxB,IAAM,EAAE,SAAM,GAAsB;AACpC,QACE,kBAAC,GAAD,EAAA,UACE,kBAAC,OAAD;EAAK,WAAW;YAAhB;GACE,kBAAC,KAAD;IAAG,WAAW;cAAgB,EAAE,gCAAgC;IAAK,CAAA;GACpE,KAAgB,QAAQ,kBAAC,GAAD,EAAA,UAAY,GAAyB,CAAA;GAC9D,kBAAC,GAAD;IACE,OAAO,EAAE,+BAA+B;IACxC,MAAK;IACL,MAAK;IACL,OAAO;IACP,WAAW,MAAU;AACnB,OAAc,EAAM,OAAO,MAAM;;IAEnC,aAAa,EAAE,qCAAqC;IACpD,cAAa;IACb,UAAA;IACA,CAAA;GACF,kBAAC,OAAD;IAAK,WAAW;cAAhB,CACE,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,SAAS;KACE;eAEV,EAAE,6BAA6B;KACzB,CAAA,EACT,kBAAC,UAAD;KACE,MAAK;KACL,WAAW;KACX,SAAS;eAER,EAAE,mCAAmC;KAC/B,CAAA,CACL;;GACF;KACI,CAAA;GCpDV,IAAkB,oBAMX,KAAe,EAAE,mBAA2C;CACvE,IAAM,EAAE,MAAM,GAAsB;AAMpC,QAJI,EAAU,WAAW,IAChB,OAIP,kBAAC,OAAD;EAAK,WAAW;YACb,EAAU,KAAK,MAAa;GAC3B,IAAI,IAAQ,EAAE,4BAA4B;AAC1C,GAAI,MAAa,WACf,IAAQ,EAAE,2BAA2B,GAC5B,MAAa,YACtB,IAAQ,EAAE,0BAA0B;GAEtC,IAAM,IAAe,EAAS,aAAa;AAC3C,UACE,kBAAC,GAAD;IAEE,MAAK;IACL,SAAQ;IACR,WAAW;IACX,eAAe;AACb,YAAO,SAAS,OACd,GAAG,EAAgB,YAAY,IAChC;;cAGF;IACM,EAXF,EAWE;IAEX;EACE,CAAA;GC7BG,KAAsB,EACjC,SACA,iBACA,qBACA,cACA,mBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB;AACpC,QACE,kBAAC,GAAD;EAAW,OAAO,EAAE,2BAA2B;YAC7C,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,GAAD;KACQ;KACK;KACG;KACd,CAAA;IACF,kBAAC,OAAD;KAAK,WAAW;eACd,kBAAC,UAAD;MACE,MAAK;MACL,WAAW;MACX,SAAS;gBAER,EAAE,oCAAoC;MAChC,CAAA;KACL,CAAA;IACN,kBAAC,GAAD,EAAwB,cAAa,CAAA;IACjC;;EACI,CAAA;GCXH,KAAa,EACxB,SACA,kBACA,mBACA,0BACiC;CACjC,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAO,KAAY,EAAS,GAAG,EAChC,CAAC,GAAS,KAAc,EAAgC,EAAE,CAAC,EAC3D,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAM,KAAW,EAAe,QAAQ,EACzC,CAAC,GAAiB,KAAsB,EAAS,GAAM,EACvD,CAAC,GAAY,KAAiB,EAAwB,KAAK,EAC3D,IAAuB,EAAO,GAAK,EAEnC,IAAe,SACZ;EACL,GAAG;EACH,qBAAqB,OAAO,MAAuB;GACjD,IAAM,IAAS,MAAM,EAAK,oBAAoB,EAAW;AAIzD,UAHA,EAAS,EAAW,EACpB,EAAW,EAAO,QAAQ,EAC1B,EAAe,EAAO,YAAY,EAC3B;;EAEV,GACA,CAAC,EAAK,CAAC,EAEJ,IAAqB,GACxB,EAAE,aAAU,EAAE,OAAO,IAAO,KAAK;AAC5B,GAAC,KAAS,EAAK,aAAa,UAGhC,GAAgB;IAElB,CAAC,EAAK,UAAU,EAAe,CAChC,EAEK,IAAY,EAAK,aAAa,UAAU,MAAS,OACjD,IACF,EADU,IACR,6BACA,+BAA+B,EAC/B,IACF,EADa,IACX,gCACA,kCAAkC,EAElC,IAAoB,EACxB,OAAO,MAAuB;AAC5B,IAAc,KAAK;AACnB,MAAI;GACF,IAAM,IAAU,EAAW,MAAM,EAC3B,IAAS,MAAM,EAAK,oBAAoB,EAAQ;AAQtD,GAPA,EAAS,EAAQ,EACjB,EAAW,EAAO,QAAQ,EAC1B,EAAe,EAAO,YAAY,EACf,EAAO,QAAQ,MAAM,MAC/B,MAAW,UAClB,GAGA,EAAQ,UAAU,GACT,EAAO,QAAQ,SAAS,WAAW,GAC5C,EAAQ,WAAW,GAEnB,EAAQ,UAAU;WAEb,GAAY;AAKnB,KAHE,aAAsB,QAClB,EAAW,UACX,EAAE,iCAAiC,CACnB;;IAG1B,CAAC,GAAM,EAAE,CACV;AAED,SAAgB;AACd,IAAqB,UAAU;EAC/B,IAAM,IAAe,EAAM,MAAM;AA8CjC,SA5CE,MAAS,aAAa,CAAC,KAAmB,MAAiB,OAG3D,EAAmB,GAAK,GACA,YAAY;AAClC,OAAI;IACF,IAAM,IAAS,MAAM,EAAa,iBAAiB,EACjD,OAAO,GACR,CAAC;AAEF,QAAI,CAAC,EAAqB,QACxB;AAGF,QAAI,MAAW,WAAW;AACxB,QAAoB;AACpB;;AAGF,QAAI,MAAW,gBAAgB;AAC7B,OAAQ,MAAM;AACd;;AAIF,IADA,EAAQ,UAAU,EAClB,EAAc,EAAE,2CAA2C,CAAC;YACrD,GAAc;AACrB,QAAI,CAAC,EAAqB,QACxB;AAQF,IADA,EAHE,aAAwB,QACpB,EAAa,UACb,EAAE,2CAA2C,CAC7B,EACtB,EAAQ,UAAU;;MAGL,CAAC,YAAY,GAE5B,SAGS;AACX,KAAqB,UAAU;;IAEhC;EAAC;EAAO;EAAoB;EAAiB;EAAc;EAAG;EAAK,CAAC;CAEvE,IAAI;AA4FJ,QA1FA,AAkEE,IAlEE,IAEA,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;EACQ;EACN,iBAAiB;AACf,KAAmB,EAAE,OAAO,IAAM,CAAC;;EAErC,cAAc;AAEZ,GADA,EAAK,OAAO,EACZ,EAAQ,QAAQ;;EAElB,CAAA,EACQ,CAAA,GAEL,MAAS,YAEhB,kBAAC,GAAD;EACE,OAAO,EAAE,+BAA+B;EACxC,aAAa,EAAE,sCAAsC,EAAE,UAAO,CAAC;YAE/D,kBAAC,GAAD;GACE,MAAM;GACN,WAAW;GACX,qBAAqB;AACnB,MAAQ,UAAU;;GAEpB,cAAc;GACd,qBAAqB,EAAK;GAC1B,CAAA;EACQ,CAAA,GAEL,MAAS,YAEhB,kBAAC,GAAD;EAAW,OAAO,EAAE,+BAA+B;YACjD,kBAAC,GAAD;GACS;GACE;GACI;GACb,WAAW,MAAW;AACpB,QAAI,MAAW,WAAW;AACxB,OAAQ,UAAU;AAClB;;AAEF,IAAI,MAAW,cACb,EAAQ,WAAW;;GAGvB,cAAc;AACZ,MAAQ,QAAQ;;GAElB,CAAA;EACQ,CAAA,GAEL,MAAS,aAEhB,kBAAC,GAAD;EACE,MAAM;EACN,cAAc;EACI;EAClB,WAAW;EACX,WAAW;EACX,CAAA,GAKF,kBAAC,GAAD;EACS;EACP,cAAc;EACd,WAAW,EAAK;EAChB,gBAAgB,MAAU;AAExB,GADA,EAAS,EAAM,EACf,EAAc,KAAK;;EAErB,kBAAkB;GAChB,IAAM,IAAU,EAAM,MAAM;AAC5B,OAAI,MAAY,IAAI;AAClB,MAAc,EAAE,sCAAsC,CAAC;AACvD;;AAEF,KAAkB,EAAQ,CAAC,YAAY,GAErC;;EAEc;EAClB,CAAA,EAKJ,kBAAC,GAAD;EAAmB;EAAiB;YACjC;EACU,CAAA;GC9PX,EAAE,YAAA,MAAe;AAUvB,eAAsB,EACpB,GACA,GACkB;AAUlB,SATiB,MAAM,EACrB,GACA,GACA,EAAE,EACF,EAAE,aAAa,gBAAgB,CAChC,CAAC,WAAW,GAGT,eACkB"}
+{"version":3,"file":"synchronizeAuthStatusQuery-Ba776lwa.js","names":[],"sources":["../../src/auth/login/PasskeyLoginForm.tsx","../../src/auth/login/MethodChooser.tsx","../../src/auth/login/EmailCapturePanel.tsx","../../src/auth/login/OidcButtons.tsx","../../src/auth/login/PasswordLoginPanel.tsx","../../src/auth/login/LoginFlow.tsx","../../src/auth/login/synchronizeAuthStatusQuery.ts"],"sourcesContent":["/* eslint-disable no-ternary */\nimport {\n  useCallback,\n  useEffect,\n  useState,\n  type FormEvent,\n  type JSX,\n} from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport type { UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: Pick<\n    UseAuthReturn,\n    | 'loginWithPasskey'\n    | 'isLoading'\n    | 'error'\n    | 'emailHint'\n    | 'nextStep'\n    | 'beginAuthentication'\n    | 'lockedUntil'\n    | 'availableMethods'\n  >;\n  onSuccess: () => void;\n  defaultEmail?: string;\n  isAttemptingPasskey?: boolean;\n  onShowMethods?: () => void;\n};\n\nexport const PasskeyLoginForm = ({\n  auth,\n  onSuccess,\n  defaultEmail,\n  isAttemptingPasskey = false,\n  onShowMethods,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const [email, setEmail] = useState(auth.emailHint ?? '');\n  const [localError, setLocalError] = useState<string | null>(null);\n\n  useEffect(() => {\n    if (auth.emailHint != null && auth.emailHint !== '') {\n      setEmail(auth.emailHint);\n    } else if (defaultEmail != null && defaultEmail !== '') {\n      setEmail(defaultEmail);\n    }\n  }, [auth.emailHint, defaultEmail]);\n\n  const handleSubmit = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      setLocalError(null);\n\n      if (email.trim() === '') {\n        setLocalError(t('auth.passkey.errors.emailRequired'));\n        return;\n      }\n\n      try {\n        const result = await auth.beginAuthentication(email.trim());\n        if (Array.isArray(result.methods) && result.methods.length === 0) {\n          const lockedUntilMessage =\n            result.lockedUntil != null\n              ? t('auth.passkey.errors.lockedWithTime', {\n                  time: new Date(result.lockedUntil).toLocaleString(),\n                })\n              : t('auth.passkey.errors.locked');\n          setLocalError(lockedUntilMessage);\n          return;\n        }\n        if (\n          Array.isArray(result.methods) &&\n          !result.methods.includes('PASSKEY')\n        ) {\n          setLocalError(t('auth.passkey.errors.notAvailable'));\n          return;\n        }\n\n        const status = await auth.loginWithPasskey({ email: email.trim() });\n        if (status === 'success') {\n          onSuccess();\n        }\n      } catch {\n        const authMessage = auth.error?.message;\n        setLocalError(authMessage ?? t('auth.passkey.errors.failed'));\n      }\n    },\n    [auth, email, onSuccess, t],\n  );\n\n  const formError = localError ?? auth.error?.message ?? null;\n\n  return (\n    // eslint-disable-next-line @typescript-eslint/no-misused-promises\n    <form className={styles.formSurface} onSubmit={handleSubmit} noValidate>\n      <div className={styles.stack}>\n        <p className={styles.helper}>{t('auth.passkey.helper')}</p>\n        {formError != null ? <FormError>{formError}</FormError> : null}\n        <FormField\n          label={t('auth.passkey.form.emailLabel')}\n          name=\"passkey-email\"\n          type=\"email\"\n          value={email}\n          onChange={(event) => {\n            setEmail(event.target.value);\n            setLocalError(null);\n          }}\n          placeholder={t('auth.passkey.form.emailPlaceholder')}\n          autoComplete=\"email\"\n          required\n        />\n      </div>\n      <div className={styles.actionsRow}>\n        <Button type=\"submit\" variant=\"primary\" isLoading={auth.isLoading}>\n          {isAttemptingPasskey\n            ? t('auth.passkey.actions.submitting')\n            : t('auth.passkey.actions.submit')}\n        </Button>\n        {onShowMethods != null ? (\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onShowMethods}\n          >\n            {t('auth.passkey.actions.showMethods')}\n          </button>\n        ) : null}\n      </div>\n    </form>\n  );\n};\n","/* eslint-disable no-ternary */\nimport { type JSX } from 'react';\nimport { Trans } from 'react-i18next';\nimport { Button, FormError, cx } from '@plumile/ui';\n\nimport type { AuthMethod } from '../../modules/sharedSchemaTypes.js';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  email: string;\n  methods: readonly AuthMethod[];\n  lockedUntil: string | null;\n  onSelect: (method: AuthMethod) => void;\n  onBack: () => void;\n};\n\nexport const MethodChooser = ({\n  email,\n  methods,\n  lockedUntil,\n  onSelect,\n  onBack,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const isLocked = methods.length === 0;\n  const lockedMessage =\n    lockedUntil != null\n      ? t('auth.methodChooser.lockedWithTime', {\n          time: new Date(lockedUntil).toLocaleString(),\n        })\n      : t('auth.methodChooser.locked');\n\n  const methodButtons = methods.map((method) => {\n    const label =\n      method === 'PASSKEY'\n        ? t('auth.methodChooser.methods.passkey')\n        : method === 'PASSWORD'\n          ? t('auth.methodChooser.methods.password')\n          : t('auth.methodChooser.methods.other', {\n              method: method.toLowerCase(),\n            });\n    return (\n      <Button\n        key={method}\n        type=\"button\"\n        variant=\"secondary\"\n        onClick={() => {\n          onSelect(method);\n        }}\n        className={cx(styles.fullWidth, styles.brandGhostButton)}\n      >\n        {label}\n      </Button>\n    );\n  });\n\n  return (\n    <div className={styles.formSurface}>\n      <div className={styles.stack}>\n        <p className={styles.helper}>\n          <Trans\n            i18nKey=\"auth.methodChooser.prompt\"\n            values={{ email }}\n            components={{ strong: <strong /> }}\n          />\n        </p>\n        {isLocked ? <FormError>{lockedMessage}</FormError> : null}\n        {!isLocked ? methodButtons : null}\n        <Button\n          type=\"button\"\n          variant=\"text\"\n          onClick={onBack}\n          className={styles.inlineLink}\n        >\n          {t('auth.methodChooser.actions.back')}\n        </Button>\n      </div>\n    </div>\n  );\n};\n","import { type JSX } from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport { AuthPanel } from './AuthPanel.js';\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  email: string;\n  errorMessage: string | null;\n  isLoading: boolean;\n  onEmailChange: (value: string) => void;\n  onContinue: () => void;\n  onForgotPassword: () => void;\n};\n\nexport const EmailCapturePanel = ({\n  email,\n  errorMessage,\n  isLoading,\n  onEmailChange,\n  onContinue,\n  onForgotPassword,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  return (\n    <AuthPanel>\n      <div className={styles.formSurface}>\n        <p className={styles.helper}>{t('auth.emailCapture.description')}</p>\n        {errorMessage != null && <FormError>{errorMessage}</FormError>}\n        <FormField\n          label={t('auth.emailCapture.emailLabel')}\n          name=\"email\"\n          type=\"email\"\n          value={email}\n          onChange={(event) => {\n            onEmailChange(event.target.value);\n          }}\n          placeholder={t('auth.emailCapture.emailPlaceholder')}\n          autoComplete=\"email\"\n          required\n        />\n        <div className={styles.actionsRow}>\n          <Button\n            type=\"button\"\n            variant=\"primary\"\n            onClick={onContinue}\n            isLoading={isLoading}\n          >\n            {t('auth.emailCapture.continue')}\n          </Button>\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onForgotPassword}\n          >\n            {t('auth.emailCapture.forgotPassword')}\n          </button>\n        </div>\n      </div>\n    </AuthPanel>\n  );\n};\n","import { type JSX } from 'react';\n\nimport { Button } from '@plumile/ui';\n\nimport type { OidcProviderKind } from '../../modules/sharedSchemaTypes.js';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport * as styles from './loginPage.css.js';\n\nconst OIDC_START_PATH = '/auth/oidc/start';\n\ntype Props = {\n  providers: readonly OidcProviderKind[];\n};\n\nexport const OidcButtons = ({ providers }: Props): JSX.Element | null => {\n  const { t } = useSharedTranslation();\n\n  if (providers.length === 0) {\n    return null;\n  }\n\n  return (\n    <div className={styles.stack}>\n      {providers.map((provider) => {\n        let label = t('auth.oidc.buttons.generic');\n        if (provider === 'GOOGLE') {\n          label = t('auth.oidc.buttons.google');\n        } else if (provider === 'APPLE') {\n          label = t('auth.oidc.buttons.apple');\n        }\n        const providerName = provider.toLowerCase();\n        return (\n          <Button\n            key={provider}\n            type=\"button\"\n            variant=\"secondary\"\n            className={styles.brandGhostButton}\n            onClick={() => {\n              window.location.assign(\n                `${OIDC_START_PATH}?provider=${providerName}`,\n              );\n            }}\n          >\n            {label}\n          </Button>\n        );\n      })}\n    </div>\n  );\n};\n","import { type JSX } from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { LoginForm, type LoginFormAuthAdapter } from '@plumile/ui';\n\nimport type { OidcProviderKind } from '../../modules/sharedSchemaTypes.js';\n\nimport { AuthPanel } from './AuthPanel.js';\nimport { OidcButtons } from './OidcButtons.js';\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: LoginFormAuthAdapter;\n  defaultEmail: string;\n  onForgotPassword: () => void;\n  onSuccess: () => void;\n  providers: readonly OidcProviderKind[];\n};\n\nexport const PasswordLoginPanel = ({\n  auth,\n  defaultEmail,\n  onForgotPassword,\n  onSuccess,\n  providers,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  return (\n    <AuthPanel title={t('auth.passwordLogin.title')}>\n      <div className={styles.formSurface}>\n        <LoginForm\n          auth={auth}\n          onSuccess={onSuccess}\n          defaultEmail={defaultEmail}\n        />\n        <div className={styles.actionsRow}>\n          <button\n            type=\"button\"\n            className={styles.inlineLink}\n            onClick={onForgotPassword}\n          >\n            {t('auth.passwordLogin.forgotPassword')}\n          </button>\n        </div>\n        <OidcButtons providers={providers} />\n      </div>\n    </AuthPanel>\n  );\n};\n","/* eslint-disable no-ternary */\nimport {\n  type JSX,\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { AuthLayout } from '@plumile/ui';\n\nimport type {\n  AuthMethod,\n  OidcProviderKind,\n} from '../../modules/sharedSchemaTypes.js';\nimport type { UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport { MfaChallengeForm } from './MfaChallengeForm.js';\nimport { PasskeyLoginForm } from './PasskeyLoginForm.js';\nimport { MethodChooser } from './MethodChooser.js';\nimport AuthPanel from './AuthPanel.js';\nimport { EmailCapturePanel } from './EmailCapturePanel.js';\nimport { PasswordLoginPanel } from './PasswordLoginPanel.js';\n\nexport type LoginFlowProps = {\n  auth: UseAuthReturn;\n  oidcProviders: readonly OidcProviderKind[];\n  onLoginSuccess: () => void;\n  onForgotPassword: () => void;\n};\n\ntype View = 'email' | 'passkey' | 'methods' | 'password' | 'mfa';\n\nexport const LoginFlow = ({\n  auth,\n  oidcProviders,\n  onLoginSuccess,\n  onForgotPassword,\n}: LoginFlowProps): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const [email, setEmail] = useState('');\n  const [methods, setMethods] = useState<readonly AuthMethod[]>([]);\n  const [lockedUntil, setLockedUntil] = useState<string | null>(null);\n  const [view, setView] = useState<View>('email');\n  const [hasTriedPasskey, setHasTriedPasskey] = useState(false);\n  const [localError, setLocalError] = useState<string | null>(null);\n  const passkeyAttemptActive = useRef(true);\n\n  const loginAdapter = useMemo(() => {\n    return {\n      ...auth,\n      beginAuthentication: async (inputEmail: string) => {\n        const result = await auth.beginAuthentication(inputEmail);\n        setEmail(inputEmail);\n        setMethods(result.methods);\n        setLockedUntil(result.lockedUntil);\n        return result;\n      },\n    };\n  }, [auth]);\n\n  const handleLoginSuccess = useCallback(\n    ({ force } = { force: false }) => {\n      if (!force && auth.nextStep === 'TOTP') {\n        return;\n      }\n      onLoginSuccess();\n    },\n    [auth.nextStep, onLoginSuccess],\n  );\n\n  const isMfaStep = auth.nextStep === 'TOTP' || view === 'mfa';\n  const title = isMfaStep\n    ? t('auth.loginFlow.title.mfa')\n    : t('auth.loginFlow.title.default');\n  const subtitle = isMfaStep\n    ? t('auth.loginFlow.subtitle.mfa')\n    : t('auth.loginFlow.subtitle.default');\n\n  const startFlowForEmail = useCallback(\n    async (inputEmail: string) => {\n      setLocalError(null);\n      try {\n        const trimmed = inputEmail.trim();\n        const result = await auth.beginAuthentication(trimmed);\n        setEmail(trimmed);\n        setMethods(result.methods);\n        setLockedUntil(result.lockedUntil);\n        const hasPasskey = result.methods.some((method) => {\n          return method === 'PASSKEY';\n        });\n\n        if (hasPasskey) {\n          setView('passkey');\n        } else if (result.methods.includes('PASSWORD')) {\n          setView('password');\n        } else {\n          setView('methods');\n        }\n      } catch (beginError) {\n        const message =\n          beginError instanceof Error\n            ? beginError.message\n            : t('auth.loginFlow.errors.tryAgain');\n        setLocalError(message);\n      }\n    },\n    [auth, t],\n  );\n\n  useEffect(() => {\n    passkeyAttemptActive.current = true;\n    const trimmedEmail = email.trim();\n    const shouldAttempt =\n      view === 'passkey' && !hasTriedPasskey && trimmedEmail !== '';\n\n    if (shouldAttempt) {\n      setHasTriedPasskey(true);\n      const runPasskeyLogin = async () => {\n        try {\n          const status = await loginAdapter.loginWithPasskey({\n            email: trimmedEmail,\n          });\n\n          if (!passkeyAttemptActive.current) {\n            return;\n          }\n\n          if (status === 'success') {\n            handleLoginSuccess();\n            return;\n          }\n\n          if (status === 'mfa-required') {\n            setView('mfa');\n            return;\n          }\n\n          setView('methods');\n          setLocalError(t('auth.loginFlow.errors.passkeyUnavailable'));\n        } catch (passkeyError) {\n          if (!passkeyAttemptActive.current) {\n            return;\n          }\n\n          const message =\n            passkeyError instanceof Error\n              ? passkeyError.message\n              : t('auth.loginFlow.errors.passkeyUnavailable');\n          setLocalError(message);\n          setView('methods');\n        }\n      };\n      runPasskeyLogin().catch(() => {\n        // Errors are handled inside runPasskeyLogin; ignore any unexpected rethrow.\n      });\n    }\n\n    return () => {\n      passkeyAttemptActive.current = false;\n    };\n  }, [email, handleLoginSuccess, hasTriedPasskey, loginAdapter, t, view]);\n\n  let content: JSX.Element;\n\n  if (isMfaStep) {\n    content = (\n      <AuthPanel>\n        <MfaChallengeForm\n          auth={auth}\n          onSuccess={() => {\n            handleLoginSuccess({ force: true });\n          }}\n          onBack={() => {\n            auth.reset();\n            setView('email');\n          }}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'passkey') {\n    content = (\n      <AuthPanel\n        title={t('auth.loginFlow.passkey.title')}\n        description={t('auth.loginFlow.passkey.description', { email })}\n      >\n        <PasskeyLoginForm\n          auth={loginAdapter}\n          onSuccess={handleLoginSuccess}\n          onShowMethods={() => {\n            setView('methods');\n          }}\n          defaultEmail={email}\n          isAttemptingPasskey={auth.isLoading}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'methods') {\n    content = (\n      <AuthPanel title={t('auth.loginFlow.methods.title')}>\n        <MethodChooser\n          email={email}\n          methods={methods}\n          lockedUntil={lockedUntil}\n          onSelect={(method) => {\n            if (method === 'PASSKEY') {\n              setView('passkey');\n              return;\n            }\n            if (method === 'PASSWORD') {\n              setView('password');\n            }\n          }}\n          onBack={() => {\n            setView('email');\n          }}\n        />\n      </AuthPanel>\n    );\n  } else if (view === 'password') {\n    content = (\n      <PasswordLoginPanel\n        auth={loginAdapter}\n        defaultEmail={email}\n        onForgotPassword={onForgotPassword}\n        onSuccess={handleLoginSuccess}\n        providers={oidcProviders}\n      />\n    );\n  } else {\n    // email capture only\n    content = (\n      <EmailCapturePanel\n        email={email}\n        errorMessage={localError}\n        isLoading={auth.isLoading}\n        onEmailChange={(value) => {\n          setEmail(value);\n          setLocalError(null);\n        }}\n        onContinue={() => {\n          const trimmed = email.trim();\n          if (trimmed === '') {\n            setLocalError(t('auth.loginFlow.errors.emailRequired'));\n            return;\n          }\n          startFlowForEmail(trimmed).catch(() => {\n            // startFlowForEmail handles its own errors.\n          });\n        }}\n        onForgotPassword={onForgotPassword}\n      />\n    );\n  }\n\n  return (\n    <AuthLayout title={title} subtitle={subtitle}>\n      {content}\n    </AuthLayout>\n  );\n};\n","import RelayRuntime, {\n  type GraphQLTaggedNode,\n  type IEnvironment,\n  type OperationType,\n} from 'relay-runtime';\n\nconst { fetchQuery } = RelayRuntime;\n\ntype AuthStatusQueryResponse = {\n  readonly isLoggedIn?: boolean | null;\n};\n\n/**\n * Forces a fresh auth-status read from network to avoid stale cache guards\n * right after login mutations complete.\n */\nexport async function synchronizeAuthStatusQuery<TQuery extends OperationType>(\n  environment: IEnvironment,\n  query: GraphQLTaggedNode,\n): Promise<boolean> {\n  const response = await fetchQuery<TQuery>(\n    environment,\n    query,\n    {},\n    { fetchPolicy: 'network-only' },\n  ).toPromise();\n\n  const isLoggedIn = (response as AuthStatusQueryResponse | null | undefined)\n    ?.isLoggedIn;\n  return isLoggedIn === true;\n}\n"],"mappings":";;;;;;;;;AAkCA,IAAa,KAAoB,EAC/B,SACA,cACA,iBACA,yBAAsB,IACtB,uBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAO,KAAY,EAAS,EAAK,aAAa,GAAG,EAClD,CAAC,GAAY,KAAiB,EAAwB,KAAK;AAEjE,SAAgB;AACd,EAAI,EAAK,aAAa,QAAQ,EAAK,cAAc,KAC/C,EAAS,EAAK,UAAU,GACf,KAAgB,QAAQ,MAAiB,MAClD,EAAS,EAAa;IAEvB,CAAC,EAAK,WAAW,EAAa,CAAC;CAElC,IAAM,IAAe,EACnB,OAAO,MAAsC;AAI3C,MAHA,EAAM,gBAAgB,EACtB,EAAc,KAAK,EAEf,EAAM,MAAM,KAAK,IAAI;AACvB,KAAc,EAAE,oCAAoC,CAAC;AACrD;;AAGF,MAAI;GACF,IAAM,IAAS,MAAM,EAAK,oBAAoB,EAAM,MAAM,CAAC;AAC3D,OAAI,MAAM,QAAQ,EAAO,QAAQ,IAAI,EAAO,QAAQ,WAAW,GAAG;AAOhE,MALE,EAAO,eAAe,OAIlB,EAAE,6BAA6B,GAH/B,EAAE,sCAAsC,EACtC,MAAM,IAAI,KAAK,EAAO,YAAY,CAAC,gBAAgB,EACpD,CAAC,CAEyB;AACjC;;AAEF,OACE,MAAM,QAAQ,EAAO,QAAQ,IAC7B,CAAC,EAAO,QAAQ,SAAS,UAAU,EACnC;AACA,MAAc,EAAE,mCAAmC,CAAC;AACpD;;AAIF,GADe,MAAM,EAAK,iBAAiB,EAAE,OAAO,EAAM,MAAM,EAAE,CAAC,KACpD,aACb,GAAW;UAEP;GACN,IAAM,IAAc,EAAK,OAAO;AAChC,KAAc,KAAe,EAAE,6BAA6B,CAAC;;IAGjE;EAAC;EAAM;EAAO;EAAW;EAAE,CAC5B,EAEK,IAAY,KAAc,EAAK,OAAO,WAAW;AAEvD,QAEE,kBAAC,QAAD;EAAM,WAAW;EAAoB,UAAU;EAAc,YAAA;YAA7D,CACE,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eAAgB,EAAE,sBAAsB;KAAK,CAAA;IAC1D,KAAa,OAA4C,OAArC,kBAAC,GAAD,EAAA,UAAY,GAAsB,CAAA;IACvD,kBAAC,GAAD;KACE,OAAO,EAAE,+BAA+B;KACxC,MAAK;KACL,MAAK;KACL,OAAO;KACP,WAAW,MAAU;AAEnB,MADA,EAAS,EAAM,OAAO,MAAM,EAC5B,EAAc,KAAK;;KAErB,aAAa,EAAE,qCAAqC;KACpD,cAAa;KACb,UAAA;KACA,CAAA;IACE;MACN,kBAAC,OAAD;GAAK,WAAW;aAAhB,CACE,kBAAC,GAAD;IAAQ,MAAK;IAAS,SAAQ;IAAU,WAAW,EAAK;cAElD,EADH,IACK,oCACA,8BAA8B;IAC7B,CAAA,EACR,KAAiB,OAQd,OAPF,kBAAC,UAAD;IACE,MAAK;IACL,WAAW;IACX,SAAS;cAER,EAAE,mCAAmC;IAC/B,CAAA,CAEP;KACD;;GCnHE,KAAiB,EAC5B,UACA,YACA,gBACA,aACA,gBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB,EAC9B,IAAW,EAAQ,WAAW,GAC9B,IACJ,KAAe,OAIX,EAAE,4BAA4B,GAH9B,EAAE,qCAAqC,EACrC,MAAM,IAAI,KAAK,EAAY,CAAC,gBAAgB,EAC7C,CAAC,EAGF,IAAgB,EAAQ,KAAK,MAAW;EAC5C,IAAM,IACJ,MAAW,YACP,EAAE,qCAAqC,GACvC,MAAW,aACT,EAAE,sCAAsC,GACxC,EAAE,oCAAoC,EACpC,QAAQ,EAAO,aAAa,EAC7B,CAAC;AACV,SACE,kBAAC,GAAD;GAEE,MAAK;GACL,SAAQ;GACR,eAAe;AACb,MAAS,EAAO;;GAElB,WAAW,EAAG,GAAkB,EAAwB;aAEvD;GACM,EATF,EASE;GAEX;AAEF,QACE,kBAAC,OAAD;EAAK,WAAW;YACd,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eACZ,kBAAC,GAAD;MACE,SAAQ;MACR,QAAQ,EAAE,UAAO;MACjB,YAAY,EAAE,QAAQ,kBAAC,UAAD,EAAU,CAAA,EAAE;MAClC,CAAA;KACA,CAAA;IACH,IAAW,kBAAC,GAAD,EAAA,UAAY,GAA0B,CAAA,GAAG;IACnD,IAA2B,OAAhB;IACb,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,SAAS;KACT,WAAW;eAEV,EAAE,kCAAkC;KAC9B,CAAA;IACL;;EACF,CAAA;GC9DG,KAAqB,EAChC,UACA,iBACA,cACA,kBACA,eACA,0BACwB;CACxB,IAAM,EAAE,SAAM,GAAsB;AACpC,QACE,kBAAC,GAAD,EAAA,UACE,kBAAC,OAAD;EAAK,WAAW;YAAhB;GACE,kBAAC,KAAD;IAAG,WAAW;cAAgB,EAAE,gCAAgC;IAAK,CAAA;GACpE,KAAgB,QAAQ,kBAAC,GAAD,EAAA,UAAY,GAAyB,CAAA;GAC9D,kBAAC,GAAD;IACE,OAAO,EAAE,+BAA+B;IACxC,MAAK;IACL,MAAK;IACL,OAAO;IACP,WAAW,MAAU;AACnB,OAAc,EAAM,OAAO,MAAM;;IAEnC,aAAa,EAAE,qCAAqC;IACpD,cAAa;IACb,UAAA;IACA,CAAA;GACF,kBAAC,OAAD;IAAK,WAAW;cAAhB,CACE,kBAAC,GAAD;KACE,MAAK;KACL,SAAQ;KACR,SAAS;KACE;eAEV,EAAE,6BAA6B;KACzB,CAAA,EACT,kBAAC,UAAD;KACE,MAAK;KACL,WAAW;KACX,SAAS;eAER,EAAE,mCAAmC;KAC/B,CAAA,CACL;;GACF;KACI,CAAA;GCpDV,IAAkB,oBAMX,KAAe,EAAE,mBAA2C;CACvE,IAAM,EAAE,MAAM,GAAsB;AAMpC,QAJI,EAAU,WAAW,IAChB,OAIP,kBAAC,OAAD;EAAK,WAAW;YACb,EAAU,KAAK,MAAa;GAC3B,IAAI,IAAQ,EAAE,4BAA4B;AAC1C,GAAI,MAAa,WACf,IAAQ,EAAE,2BAA2B,GAC5B,MAAa,YACtB,IAAQ,EAAE,0BAA0B;GAEtC,IAAM,IAAe,EAAS,aAAa;AAC3C,UACE,kBAAC,GAAD;IAEE,MAAK;IACL,SAAQ;IACR,WAAW;IACX,eAAe;AACb,YAAO,SAAS,OACd,GAAG,EAAgB,YAAY,IAChC;;cAGF;IACM,EAXF,EAWE;IAEX;EACE,CAAA;GC7BG,KAAsB,EACjC,SACA,iBACA,qBACA,cACA,mBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB;AACpC,QACE,kBAAC,GAAD;EAAW,OAAO,EAAE,2BAA2B;YAC7C,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,GAAD;KACQ;KACK;KACG;KACd,CAAA;IACF,kBAAC,OAAD;KAAK,WAAW;eACd,kBAAC,UAAD;MACE,MAAK;MACL,WAAW;MACX,SAAS;gBAER,EAAE,oCAAoC;MAChC,CAAA;KACL,CAAA;IACN,kBAAC,GAAD,EAAwB,cAAa,CAAA;IACjC;;EACI,CAAA;GCXH,KAAa,EACxB,SACA,kBACA,mBACA,0BACiC;CACjC,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAO,KAAY,EAAS,GAAG,EAChC,CAAC,GAAS,KAAc,EAAgC,EAAE,CAAC,EAC3D,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAM,KAAW,EAAe,QAAQ,EACzC,CAAC,GAAiB,KAAsB,EAAS,GAAM,EACvD,CAAC,GAAY,KAAiB,EAAwB,KAAK,EAC3D,IAAuB,EAAO,GAAK,EAEnC,IAAe,SACZ;EACL,GAAG;EACH,qBAAqB,OAAO,MAAuB;GACjD,IAAM,IAAS,MAAM,EAAK,oBAAoB,EAAW;AAIzD,UAHA,EAAS,EAAW,EACpB,EAAW,EAAO,QAAQ,EAC1B,EAAe,EAAO,YAAY,EAC3B;;EAEV,GACA,CAAC,EAAK,CAAC,EAEJ,IAAqB,GACxB,EAAE,aAAU,EAAE,OAAO,IAAO,KAAK;AAC5B,GAAC,KAAS,EAAK,aAAa,UAGhC,GAAgB;IAElB,CAAC,EAAK,UAAU,EAAe,CAChC,EAEK,IAAY,EAAK,aAAa,UAAU,MAAS,OACjD,IACF,EADU,IACR,6BACA,+BAA+B,EAC/B,IACF,EADa,IACX,gCACA,kCAAkC,EAElC,IAAoB,EACxB,OAAO,MAAuB;AAC5B,IAAc,KAAK;AACnB,MAAI;GACF,IAAM,IAAU,EAAW,MAAM,EAC3B,IAAS,MAAM,EAAK,oBAAoB,EAAQ;AAQtD,GAPA,EAAS,EAAQ,EACjB,EAAW,EAAO,QAAQ,EAC1B,EAAe,EAAO,YAAY,EACf,EAAO,QAAQ,MAAM,MAC/B,MAAW,UAClB,GAGA,EAAQ,UAAU,GACT,EAAO,QAAQ,SAAS,WAAW,GAC5C,EAAQ,WAAW,GAEnB,EAAQ,UAAU;WAEb,GAAY;AAKnB,KAHE,aAAsB,QAClB,EAAW,UACX,EAAE,iCAAiC,CACnB;;IAG1B,CAAC,GAAM,EAAE,CACV;AAED,SAAgB;AACd,IAAqB,UAAU;EAC/B,IAAM,IAAe,EAAM,MAAM;AA8CjC,SA5CE,MAAS,aAAa,CAAC,KAAmB,MAAiB,OAG3D,EAAmB,GAAK,GACA,YAAY;AAClC,OAAI;IACF,IAAM,IAAS,MAAM,EAAa,iBAAiB,EACjD,OAAO,GACR,CAAC;AAEF,QAAI,CAAC,EAAqB,QACxB;AAGF,QAAI,MAAW,WAAW;AACxB,QAAoB;AACpB;;AAGF,QAAI,MAAW,gBAAgB;AAC7B,OAAQ,MAAM;AACd;;AAIF,IADA,EAAQ,UAAU,EAClB,EAAc,EAAE,2CAA2C,CAAC;YACrD,GAAc;AACrB,QAAI,CAAC,EAAqB,QACxB;AAQF,IADA,EAHE,aAAwB,QACpB,EAAa,UACb,EAAE,2CAA2C,CAC7B,EACtB,EAAQ,UAAU;;MAGL,CAAC,YAAY,GAE5B,SAGS;AACX,KAAqB,UAAU;;IAEhC;EAAC;EAAO;EAAoB;EAAiB;EAAc;EAAG;EAAK,CAAC;CAEvE,IAAI;AA4FJ,QA1FA,AAkEE,IAlEE,IAEA,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;EACQ;EACN,iBAAiB;AACf,KAAmB,EAAE,OAAO,IAAM,CAAC;;EAErC,cAAc;AAEZ,GADA,EAAK,OAAO,EACZ,EAAQ,QAAQ;;EAElB,CAAA,EACQ,CAAA,GAEL,MAAS,YAEhB,kBAAC,GAAD;EACE,OAAO,EAAE,+BAA+B;EACxC,aAAa,EAAE,sCAAsC,EAAE,UAAO,CAAC;YAE/D,kBAAC,GAAD;GACE,MAAM;GACN,WAAW;GACX,qBAAqB;AACnB,MAAQ,UAAU;;GAEpB,cAAc;GACd,qBAAqB,EAAK;GAC1B,CAAA;EACQ,CAAA,GAEL,MAAS,YAEhB,kBAAC,GAAD;EAAW,OAAO,EAAE,+BAA+B;YACjD,kBAAC,GAAD;GACS;GACE;GACI;GACb,WAAW,MAAW;AACpB,QAAI,MAAW,WAAW;AACxB,OAAQ,UAAU;AAClB;;AAEF,IAAI,MAAW,cACb,EAAQ,WAAW;;GAGvB,cAAc;AACZ,MAAQ,QAAQ;;GAElB,CAAA;EACQ,CAAA,GAEL,MAAS,aAEhB,kBAAC,GAAD;EACE,MAAM;EACN,cAAc;EACI;EAClB,WAAW;EACX,WAAW;EACX,CAAA,GAKF,kBAAC,GAAD;EACS;EACP,cAAc;EACd,WAAW,EAAK;EAChB,gBAAgB,MAAU;AAExB,GADA,EAAS,EAAM,EACf,EAAc,KAAK;;EAErB,kBAAkB;GAChB,IAAM,IAAU,EAAM,MAAM;AAC5B,OAAI,MAAY,IAAI;AAClB,MAAc,EAAE,sCAAsC,CAAC;AACvD;;AAEF,KAAkB,EAAQ,CAAC,YAAY,GAErC;;EAEc;EAClB,CAAA,EAKJ,kBAAC,GAAD;EAAmB;EAAiB;YACjC;EACU,CAAA;GC9PX,EAAE,YAAA,MAAe;AAUvB,eAAsB,EACpB,GACA,GACkB;AAUlB,SATiB,MAAM,EACrB,GACA,GACA,EAAE,EACF,EAAE,aAAa,gBAAgB,CAChC,CAAC,WAAW,GAGT,eACkB"}

package/lib/esm/{useAuth-AczFS-oL.js → useAuth-DzWJXJ_9.js}

@@ -1,5 +1,5 @@
 import { i as e } from "./environment-BJeJTbIN.js";
-import { a as t, c as n, d as r, f as i, s as a, t as o } from "./loginPage.css-BDQJNcSr.js";
+import { a as t, c as n, d as r, f as i, s as a, t as o } from "./loginPage.css-4M4PrzUn.js";
 import { i as s, t as c } from "./mutationResult-CcQMY13J.js";
 import { useCallback as l, useEffect as u, useState as d } from "react";
 import { Button as f, FormError as p, FormField as m } from "@plumile/ui";
@@ -540,4 +540,4 @@ var S = {
 //#endregion
 export { x as a, b as i, y as n, _ as o, v as r, C as t };
 
-//# sourceMappingURL=useAuth-AczFS-oL.js.map
+//# sourceMappingURL=useAuth-DzWJXJ_9.js.map

package/lib/esm/{useAuth-AczFS-oL.js.map → useAuth-DzWJXJ_9.js.map}

@@ -1 +1 @@
-{"version":3,"file":"useAuth-AczFS-oL.js","names":[],"sources":["../../src/auth/login/MfaChallengeForm.tsx","../../src/modules/webauthn.ts","../../src/hooks/useAuth.ts"],"sourcesContent":["/* eslint-disable no-ternary */\nimport {\n  useCallback,\n  useEffect,\n  useState,\n  type FormEvent,\n  type JSX,\n} from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport type { TotpCredentials, UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: Pick<\n    UseAuthReturn,\n    'completeMfa' | 'isLoading' | 'error' | 'emailHint' | 'reset' | 'clearError'\n  >;\n  onSuccess: () => void;\n  onBack: () => void;\n};\n\nexport const MfaChallengeForm = ({\n  auth,\n  onSuccess,\n  onBack,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const [code, setCode] = useState('');\n  const [localError, setLocalError] = useState<string | null>(null);\n\n  // Clear any stale errors when the MFA form is shown\n  useEffect(() => {\n    auth.clearError();\n    setLocalError(null);\n  }, [auth]);\n\n  const handleSubmit = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      setLocalError(null);\n\n      const trimmed = code.trim();\n      if (trimmed.length < 4) {\n        setLocalError(t('auth.mfa.errors.shortCode'));\n        return;\n      }\n\n      try {\n        const credentials: TotpCredentials = {\n          code: trimmed,\n        };\n        await auth.completeMfa(credentials);\n        onSuccess();\n      } catch {\n        const authMessage = auth.error?.message;\n        setLocalError(authMessage ?? t('auth.mfa.errors.verificationFailed'));\n      }\n    },\n    [auth, code, onSuccess, t],\n  );\n\n  const helper =\n    auth.emailHint != null\n      ? t('auth.mfa.helper.withEmail', { email: auth.emailHint })\n      : t('auth.mfa.helper.default');\n\n  const formError = localError ?? auth.error?.message ?? null;\n\n  return (\n    // eslint-disable-next-line @typescript-eslint/no-misused-promises\n    <form className={styles.formSurface} onSubmit={handleSubmit} noValidate>\n      <div className={styles.stack}>\n        <p className={styles.helper}>{helper}</p>\n        {formError != null ? <FormError>{formError}</FormError> : null}\n        <FormField\n          label={t('auth.mfa.form.label')}\n          name=\"code\"\n          type=\"text\"\n          value={code}\n          onChange={(event) => {\n            setCode(event.target.value);\n            setLocalError(null);\n          }}\n          placeholder={t('auth.mfa.form.placeholder')}\n          autoComplete=\"one-time-code\"\n          autoFocus\n          required\n        />\n      </div>\n      <div className={styles.actionsRow}>\n        <Button\n          type=\"button\"\n          variant=\"text\"\n          size=\"small\"\n          className={styles.inlineLink}\n          onClick={() => {\n            auth.reset();\n            onBack();\n          }}\n        >\n          {t('auth.mfa.actions.back')}\n        </Button>\n        <Button type=\"submit\" size=\"large\" isLoading={auth.isLoading}>\n          {t('auth.mfa.actions.submit')}\n        </Button>\n      </div>\n    </form>\n  );\n};\n","/**\n * Buffer to base64 url\n */\nexport function bufferToBase64Url(input: ArrayBuffer): string {\n  const byteArray = new Uint8Array(input);\n  let binary = '';\n  for (const byte of byteArray) {\n    binary += String.fromCharCode(byte);\n  }\n  return btoa(binary)\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=+$/, '');\n}\n\n/**\n * Base64 url to buffer\n */\nexport function base64UrlToBuffer(input: string): ArrayBuffer {\n  const normalized = input.replace(/-/g, '+').replace(/_/g, '/');\n  const remainder = normalized.length % 4;\n  let padding = '';\n  if (remainder === 2) {\n    padding = '==';\n  } else if (remainder === 3) {\n    padding = '=';\n  } else if (remainder === 1) {\n    throw new Error('Invalid base64url input length.');\n  }\n  const padded = `${normalized}${padding}`;\n  const binary = atob(padded);\n  const output = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i += 1) {\n    output[i] = binary.charCodeAt(i);\n  }\n  return output.buffer;\n}\n\nexport type WebAuthnRegistrationErrorKind =\n  | 'cancelled'\n  | 'credentialInUse'\n  | 'notSupported'\n  | 'failed';\n\n/**\n * Maps a browser WebAuthn registration error to a stable UI category.\n */\nexport function mapWebAuthnRegistrationError(\n  error: unknown,\n): WebAuthnRegistrationErrorKind {\n  if (!(error instanceof DOMException)) {\n    return 'failed';\n  }\n\n  switch (error.name) {\n    case 'NotAllowedError':\n    case 'AbortError':\n      return 'cancelled';\n    case 'InvalidStateError':\n      return 'credentialInUse';\n    case 'SecurityError':\n    case 'NotSupportedError':\n      return 'notSupported';\n    default:\n      return 'failed';\n  }\n}\n\n/**\n * Parse sign count\n */\nexport function parseSignCount(authenticatorData: ArrayBuffer): number {\n  if (authenticatorData.byteLength < 37) {\n    return 0;\n  }\n  const view = new DataView(authenticatorData);\n  return view.getUint32(33, false);\n}\n","/* eslint-disable no-ternary */\nimport { useCallback, useState } from 'react';\n\nimport {\n  type MutationPayloadBase,\n  requireField,\n  resolveMutationOutcome,\n} from '../relay/mutationResult.js';\nimport { useSharedTranslation } from '../i18n/useSharedTranslation.js';\n\nimport { resetRelayStore } from '../relay/environment.js';\nimport type { PayloadError } from 'relay-runtime';\n\nimport type {\n  AuthMethod,\n  LoginNextStep,\n  MfaLevel,\n} from '../modules/sharedSchemaTypes.js';\nimport {\n  base64UrlToBuffer,\n  bufferToBase64Url,\n  parseSignCount,\n} from '../modules/webauthn.js';\n\nexport type AuthPayload = {\n  authMethod: AuthMethod | null | undefined;\n  challengeToken: string | null | undefined;\n  loggedInUser: { id: string } | null | undefined;\n  mfaLevel: MfaLevel | null | undefined;\n  nextStep: LoginNextStep | null | undefined;\n};\n\ntype LoginErrorReason =\n  | 'INVALID_CREDENTIALS'\n  | 'ACCOUNT_LOCKED'\n  | 'RATE_LIMITED'\n  | 'INTERNAL_ERROR';\n\ntype LogoutErrorReason =\n  | 'UNAUTHENTICATED'\n  | 'SESSION_NOT_FOUND'\n  | 'INTERNAL_ERROR';\n\ntype BeginAuthenticationErrorReason = 'INVALID_EMAIL' | 'INTERNAL_ERROR';\n\ntype BeginPasskeyLoginErrorReason =\n  | 'INVALID_EMAIL'\n  | 'PASSKEY_NOT_FOUND'\n  | 'PASSKEY_NOT_SUPPORTED'\n  | 'INTERNAL_ERROR';\n\ntype FinishPasskeyLoginErrorReason =\n  | 'INVALID_CHALLENGE_TOKEN'\n  | 'CHALLENGE_EXPIRED'\n  | 'INVALID_ASSERTION'\n  | 'INTERNAL_ERROR';\n\ntype CompleteMfaErrorReason =\n  | 'INVALID_CHALLENGE_TOKEN'\n  | 'CHALLENGE_EXPIRED'\n  | 'INVALID_CODE'\n  | 'TOO_MANY_ATTEMPTS'\n  | 'INTERNAL_ERROR';\n\ntype AcceptInvitationErrorReason =\n  | 'INVALID_TOKEN'\n  | 'TOKEN_EXPIRED'\n  | 'ALREADY_ACCEPTED'\n  | 'PASSWORD_MISMATCH'\n  | 'PASSWORD_POLICY_VIOLATION'\n  | 'RATE_LIMITED'\n  | 'EMAIL_MISMATCH'\n  | 'INTERNAL_ERROR';\n\nexport type BeginAuthenticationPayload =\n  MutationPayloadBase<BeginAuthenticationErrorReason> & {\n    lockedUntil: string | null | undefined;\n    methods: readonly {\n      method: AuthMethod;\n      mfaEnforced?: boolean | null | undefined;\n    }[];\n  };\n\nexport type BeginPasskeyLoginPayload =\n  MutationPayloadBase<BeginPasskeyLoginErrorReason> & {\n    allowCredentials: readonly string[];\n    challenge: string;\n    challengeToken: string;\n    rpId: string;\n  };\n\ntype LoginMutationPayload = MutationPayloadBase<LoginErrorReason> & {\n  payload?: AuthPayload | null | undefined;\n};\n\ntype LogoutPayload = {\n  loggedOut?: boolean | null | undefined;\n};\n\ntype LogoutMutationPayload = MutationPayloadBase<LogoutErrorReason> & {\n  payload?: LogoutPayload | null | undefined;\n};\n\ntype CompleteMfaMutationPayload =\n  MutationPayloadBase<CompleteMfaErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\ntype FinishPasskeyLoginMutationPayload =\n  MutationPayloadBase<FinishPasskeyLoginErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\ntype AcceptInvitationMutationPayload =\n  MutationPayloadBase<AcceptInvitationErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\nexport type LoginResponse = { login: AuthPayload | LoginMutationPayload };\nexport type LogoutResponse = { logout: LogoutPayload | LogoutMutationPayload };\nexport type CompleteMfaResponse = {\n  completeMfa: AuthPayload | CompleteMfaMutationPayload;\n};\nexport type FinishPasskeyLoginResponse = {\n  finishPasskeyLogin: AuthPayload | FinishPasskeyLoginMutationPayload;\n};\nexport type AcceptInvitationResponse = {\n  acceptInvitation: AuthPayload | AcceptInvitationMutationPayload;\n};\nexport type BeginAuthenticationResponse = {\n  beginAuthentication: BeginAuthenticationPayload;\n};\nexport type BeginPasskeyLoginResponse = {\n  beginPasskeyLogin: BeginPasskeyLoginPayload;\n};\n\nexport type LoginVariables = {\n  input: LoginCredentials;\n};\n\nexport type LogoutVariables = Record<PropertyKey, never>;\n\nexport type CompleteMfaVariables = {\n  input: {\n    challengeToken: string;\n    code: string;\n  };\n};\n\nexport type BeginPasskeyLoginVariables = {\n  email: string;\n};\n\nexport type FinishPasskeyLoginVariables = {\n  input: {\n    challenge: string;\n    challengeToken: string;\n    credentialId: string;\n    signCount: number;\n    userHandle?: string | null;\n  };\n};\n\nexport type AcceptInvitationVariables = {\n  input: {\n    token: string;\n    password: string;\n    passwordConfirmation: string;\n  };\n};\n\nexport type BeginAuthenticationVariables = {\n  email: string;\n};\n\ntype MutationCommitConfig<TVariables, TResponse> = {\n  variables: TVariables;\n  onCompleted?: (\n    response: TResponse,\n    errors: readonly PayloadError[] | null,\n  ) => void;\n  onError?: (error: Error) => void;\n};\n\ntype MutationCommit<TVariables, TResponse> = (\n  config: MutationCommitConfig<TVariables, TResponse>,\n) => void;\n\ntype MutationEntry<TVariables, TResponse> = {\n  commit: MutationCommit<TVariables, TResponse>;\n  isInFlight: boolean;\n};\n\nexport type AuthMutationHooks = {\n  login: MutationEntry<LoginVariables, LoginResponse>;\n  logout: MutationEntry<LogoutVariables, LogoutResponse>;\n  completeMfa: MutationEntry<CompleteMfaVariables, CompleteMfaResponse>;\n  beginPasskeyLogin: MutationEntry<\n    BeginPasskeyLoginVariables,\n    BeginPasskeyLoginResponse\n  >;\n  finishPasskeyLogin: MutationEntry<\n    FinishPasskeyLoginVariables,\n    FinishPasskeyLoginResponse\n  >;\n  acceptInvitation?: MutationEntry<\n    AcceptInvitationVariables,\n    AcceptInvitationResponse\n  >;\n  beginAuthentication: MutationEntry<\n    BeginAuthenticationVariables,\n    BeginAuthenticationResponse\n  >;\n};\n\ninterface User {\n  id: string;\n}\n\nexport type LoginStatus = 'success' | 'mfa-required' | 'error';\n\nexport interface LoginCredentials {\n  email: string;\n  password: string;\n}\n\nexport interface TotpCredentials {\n  code: string;\n}\n\nexport interface AcceptInvitationCredentials {\n  token: string;\n  password: string;\n  passwordConfirmation: string;\n}\n\nexport interface AuthError {\n  message: string;\n  code?: string;\n}\n\nexport interface UseAuthReturn {\n  authMethod: AuthMethod | null;\n  challengeToken: string | null;\n  nextStep: LoginNextStep | null;\n  mfaLevel: MfaLevel | null;\n  emailHint: string | null;\n  lockedUntil: string | null;\n  availableMethods: AuthMethod[];\n  login: (credentials: LoginCredentials) => Promise<LoginStatus>;\n  loginWithPasskey: (params: { email: string }) => Promise<LoginStatus>;\n  completeMfa: (credentials: TotpCredentials) => Promise<void>;\n  acceptInvitation: (\n    credentials: AcceptInvitationCredentials,\n  ) => Promise<LoginStatus>;\n  beginAuthentication: (\n    email: string,\n  ) => Promise<{ methods: AuthMethod[]; lockedUntil: string | null }>;\n  logout: () => Promise<void>;\n  reset: () => void;\n  clearError: () => void;\n  isLoading: boolean;\n  error: AuthError | null;\n  user: User | null;\n}\n\nconst initialState = {\n  authMethod: null as AuthMethod | null,\n  challengeToken: null as string | null,\n  emailHint: null as string | null,\n  mfaLevel: null as MfaLevel | null,\n  nextStep: null as LoginNextStep | null,\n};\n\nexport const createUseAuth = (mutations: AuthMutationHooks) => {\n  return (): UseAuthReturn => {\n    const { t } = useSharedTranslation();\n    const [isLoading, setIsLoading] = useState<boolean>(false);\n    const [error, setError] = useState<AuthError | null>(null);\n    const [user, setUser] = useState<User | null>(null);\n    const [lockedUntil, setLockedUntil] = useState<string | null>(null);\n    const [availableMethods, setAvailableMethods] = useState<AuthMethod[]>([]);\n    const [authState, setAuthState] = useState(initialState);\n\n    const commitLoginMutation = mutations.login.commit;\n    const commitLogoutMutation = mutations.logout.commit;\n    const commitCompleteMfaMutation = mutations.completeMfa.commit;\n    const commitBeginPasskeyLoginMutation = mutations.beginPasskeyLogin.commit;\n    const commitFinishPasskeyLoginMutation =\n      mutations.finishPasskeyLogin.commit;\n    const commitAcceptInvitationMutation = mutations.acceptInvitation?.commit;\n    const commitBeginAuthenticationMutation =\n      mutations.beginAuthentication.commit;\n\n    const defaultLoginErrorMessage = t('auth.loginFlow.errors.tryAgain');\n    const defaultBeginAuthenticationErrorMessage = t(\n      'auth.loginFlow.errors.tryAgain',\n    );\n    const defaultPasskeyErrorMessage = t('auth.passkey.errors.failed');\n    const defaultMfaErrorMessage = t('auth.mfa.errors.verificationFailed');\n    const defaultInvitationErrorMessage = t(\n      'auth.acceptInvitation.errors.default',\n    );\n    const mfaInvalidChallengeMessage = t('auth.mfa.errors.invalidChallenge');\n    const passkeyNotAvailableMessage = t('auth.passkey.errors.notAvailable');\n    const defaultLogoutErrorMessage = 'Logout failed.';\n\n    const reset = useCallback(() => {\n      setError(null);\n      setUser(null);\n      setLockedUntil(null);\n      setAvailableMethods([]);\n      setAuthState(initialState);\n    }, []);\n\n    const clearError = useCallback(() => {\n      setError(null);\n    }, []);\n\n    const updateAuthStateFromPayload = useCallback(\n      (payload: AuthPayload): LoginStatus => {\n        const authMethod = payload.authMethod ?? null;\n        const challengeToken = payload.challengeToken ?? null;\n        const mfaLevel = payload.mfaLevel ?? null;\n        const nextStep = payload.nextStep ?? null;\n\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            authMethod,\n            challengeToken,\n            mfaLevel,\n            nextStep,\n          };\n        });\n\n        if (payload.loggedInUser != null && nextStep == null) {\n          setUser({\n            id: payload.loggedInUser.id,\n          });\n          return 'success';\n        }\n\n        if (nextStep === 'TOTP' && challengeToken != null) {\n          return 'mfa-required';\n        }\n\n        return 'error';\n      },\n      [],\n    );\n\n    const isMutationPayload = useCallback(\n      (value: unknown): value is MutationPayloadBase => {\n        return (\n          value != null &&\n          typeof value === 'object' &&\n          ('status' in value || 'result' in value)\n        );\n      },\n      [],\n    );\n\n    const mapLoginReason = useCallback(\n      (reason: LoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CREDENTIALS':\n            return t('auth.loginFlow.errors.invalidCredentials');\n          case 'ACCOUNT_LOCKED':\n            return t('auth.loginFlow.errors.accountLocked');\n          case 'RATE_LIMITED':\n            return t('auth.loginFlow.errors.rateLimited');\n          case 'INTERNAL_ERROR':\n            return t('auth.loginFlow.errors.tryAgain');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapBeginAuthenticationReason = useCallback(\n      (reason: BeginAuthenticationErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_EMAIL':\n            return t('auth.loginFlow.errors.invalidEmail');\n          case 'INTERNAL_ERROR':\n            return t('auth.loginFlow.errors.tryAgain');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapBeginPasskeyLoginReason = useCallback(\n      (reason: BeginPasskeyLoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_EMAIL':\n            return t('auth.passkey.errors.invalidEmail');\n          case 'PASSKEY_NOT_FOUND':\n            return t('auth.passkey.errors.notFound');\n          case 'PASSKEY_NOT_SUPPORTED':\n            return t('auth.passkey.errors.notAvailable');\n          case 'INTERNAL_ERROR':\n            return t('auth.passkey.errors.failed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapFinishPasskeyLoginReason = useCallback(\n      (reason: FinishPasskeyLoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CHALLENGE_TOKEN':\n            return t('auth.passkey.errors.invalidChallenge');\n          case 'CHALLENGE_EXPIRED':\n            return t('auth.passkey.errors.challengeExpired');\n          case 'INVALID_ASSERTION':\n            return t('auth.passkey.errors.invalidAssertion');\n          case 'INTERNAL_ERROR':\n            return t('auth.passkey.errors.failed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapCompleteMfaReason = useCallback(\n      (reason: CompleteMfaErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CHALLENGE_TOKEN':\n            return t('auth.mfa.errors.invalidChallenge');\n          case 'CHALLENGE_EXPIRED':\n            return t('auth.mfa.errors.expired');\n          case 'INVALID_CODE':\n            return t('auth.mfa.errors.invalidCode');\n          case 'TOO_MANY_ATTEMPTS':\n            return t('auth.mfa.errors.tooManyAttempts');\n          case 'INTERNAL_ERROR':\n            return t('auth.mfa.errors.verificationFailed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapAcceptInvitationReason = useCallback(\n      (reason: AcceptInvitationErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_TOKEN':\n            return t('auth.acceptInvitation.errors.invalidToken');\n          case 'TOKEN_EXPIRED':\n            return t('auth.acceptInvitation.errors.expired');\n          case 'ALREADY_ACCEPTED':\n            return t('auth.acceptInvitation.errors.alreadyAccepted');\n          case 'PASSWORD_MISMATCH':\n            return t('auth.acceptInvitation.errors.passwordMismatch');\n          case 'PASSWORD_POLICY_VIOLATION':\n            return t('auth.acceptInvitation.errors.passwordPolicyViolation');\n          case 'RATE_LIMITED':\n            return t('auth.acceptInvitation.errors.rateLimited');\n          case 'EMAIL_MISMATCH':\n            return t('auth.acceptInvitation.errors.emailMismatch');\n          case 'INTERNAL_ERROR':\n            return t('auth.acceptInvitation.errors.default');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const beginAuthentication = useCallback(\n      async (\n        email: string,\n      ): Promise<{ methods: AuthMethod[]; lockedUntil: string | null }> => {\n        return new Promise((resolve, reject) => {\n          commitBeginAuthenticationMutation({\n            variables: { email },\n            onCompleted: (response) => {\n              const rawPayload = response.beginAuthentication;\n              let payload = rawPayload;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultBeginAuthenticationErrorMessage,\n                  mapReason: mapBeginAuthenticationReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                payload = outcome.payload;\n              }\n\n              const methods = payload.methods.map((item) => {\n                return item.method;\n              });\n              const locked = payload.lockedUntil ?? null;\n              setAvailableMethods(methods);\n              setLockedUntil(locked);\n              resolve({ methods, lockedUntil: locked });\n            },\n            onError: () => {\n              const authError: AuthError = {\n                message: defaultBeginAuthenticationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitBeginAuthenticationMutation,\n        defaultBeginAuthenticationErrorMessage,\n        isMutationPayload,\n        mapBeginAuthenticationReason,\n      ],\n    );\n\n    const login = useCallback(\n      async (credentials: LoginCredentials): Promise<LoginStatus> => {\n        setIsLoading(true);\n        setError(null);\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            emailHint: credentials.email,\n          };\n        });\n\n        return new Promise((resolve, reject) => {\n          commitLoginMutation({\n            variables: {\n              input: credentials,\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.login;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultLoginErrorMessage,\n                  mapReason: mapLoginReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultLoginErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success' || status === 'mfa-required') {\n                resolve(status);\n                return;\n              }\n\n              const authError: AuthError = {\n                message: defaultLoginErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultLoginErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitLoginMutation,\n        defaultLoginErrorMessage,\n        isMutationPayload,\n        mapLoginReason,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const completeMfa = useCallback(\n      async (credentials: TotpCredentials): Promise<void> => {\n        const { challengeToken } = authState;\n        if (challengeToken == null) {\n          const authError: AuthError = {\n            message: mfaInvalidChallengeMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n\n        return new Promise((resolve, reject) => {\n          commitCompleteMfaMutation({\n            variables: {\n              input: {\n                challengeToken,\n                code: credentials.code,\n              },\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.completeMfa;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultMfaErrorMessage,\n                  mapReason: mapCompleteMfaReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultMfaErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success') {\n                resolve();\n                return;\n              }\n\n              const authError: AuthError = {\n                message: defaultMfaErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultMfaErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        authState,\n        commitCompleteMfaMutation,\n        defaultMfaErrorMessage,\n        isMutationPayload,\n        mapCompleteMfaReason,\n        mfaInvalidChallengeMessage,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const loginWithPasskey = useCallback(\n      async ({ email }: { email: string }): Promise<LoginStatus> => {\n        if (typeof window === 'undefined') {\n          const authError: AuthError = {\n            message: passkeyNotAvailableMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            emailHint: email,\n          };\n        });\n\n        return new Promise((resolve, reject) => {\n          commitBeginPasskeyLoginMutation({\n            variables: {\n              email,\n            },\n            onCompleted: (response) => {\n              const rawOptions = response.beginPasskeyLogin;\n              let options = rawOptions;\n\n              if (isMutationPayload(rawOptions)) {\n                const outcome = resolveMutationOutcome(rawOptions, {\n                  defaultErrorMessage: defaultPasskeyErrorMessage,\n                  mapReason: mapBeginPasskeyLoginReason,\n                });\n                if (!outcome.ok) {\n                  setIsLoading(false);\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                options = outcome.payload;\n              }\n\n              // TODO:! Fix this\n              // eslint-disable-next-line no-void\n              void (async () => {\n                try {\n                  const assertion = (await navigator.credentials.get({\n                    publicKey: {\n                      allowCredentials: options.allowCredentials.map(\n                        (credentialId) => {\n                          return {\n                            id: base64UrlToBuffer(credentialId),\n                            type: 'public-key' as const,\n                          };\n                        },\n                      ),\n                      challenge: base64UrlToBuffer(options.challenge),\n                      rpId: options.rpId,\n                      userVerification: 'preferred',\n                    },\n                  })) as PublicKeyCredential | null;\n\n                  if (assertion == null) {\n                    throw new Error(\n                      'No credential returned by the authenticator.',\n                    );\n                  }\n\n                  const assertionResponse =\n                    assertion.response as AuthenticatorAssertionResponse;\n                  const signCount = parseSignCount(\n                    assertionResponse.authenticatorData,\n                  );\n\n                  commitFinishPasskeyLoginMutation({\n                    variables: {\n                      input: {\n                        challenge: options.challenge,\n                        challengeToken: options.challengeToken,\n                        credentialId: assertion.id,\n                        signCount,\n                        userHandle:\n                          assertionResponse.userHandle != null\n                            ? bufferToBase64Url(assertionResponse.userHandle)\n                            : null,\n                      },\n                    },\n                    onCompleted: (finishResponse) => {\n                      setIsLoading(false);\n                      const rawPayload = finishResponse.finishPasskeyLogin;\n                      let authPayload: AuthPayload | null = null;\n\n                      if (isMutationPayload(rawPayload)) {\n                        const outcome = resolveMutationOutcome(rawPayload, {\n                          defaultErrorMessage: defaultPasskeyErrorMessage,\n                          mapReason: mapFinishPasskeyLoginReason,\n                        });\n                        if (!outcome.ok) {\n                          const authError: AuthError = {\n                            message: outcome.message,\n                          };\n                          setError(authError);\n                          reject(authError);\n                          return;\n                        }\n                        authPayload = rawPayload.payload ?? null;\n                      } else {\n                        authPayload = rawPayload;\n                      }\n\n                      if (authPayload == null) {\n                        const authError: AuthError = {\n                          message: defaultPasskeyErrorMessage,\n                        };\n                        setError(authError);\n                        reject(authError);\n                        return;\n                      }\n\n                      const status = updateAuthStateFromPayload(authPayload);\n                      if (status === 'success') {\n                        resolve(status);\n                        return;\n                      }\n                      const authError: AuthError = {\n                        message: defaultPasskeyErrorMessage,\n                      };\n                      setError(authError);\n                      reject(authError);\n                    },\n                    onError: () => {\n                      setIsLoading(false);\n                      const authError: AuthError = {\n                        message: defaultPasskeyErrorMessage,\n                      };\n                      setError(authError);\n                      reject(authError);\n                    },\n                  });\n                } catch (credentialError) {\n                  setIsLoading(false);\n                  const authError: AuthError = {\n                    message:\n                      credentialError instanceof Error\n                        ? credentialError.message\n                        : 'Passkey login was cancelled.',\n                  };\n                  setError(authError);\n                  reject(authError);\n                }\n              })();\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultPasskeyErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitBeginPasskeyLoginMutation,\n        commitFinishPasskeyLoginMutation,\n        defaultPasskeyErrorMessage,\n        isMutationPayload,\n        mapBeginPasskeyLoginReason,\n        mapFinishPasskeyLoginReason,\n        passkeyNotAvailableMessage,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const acceptInvitation = useCallback(\n      async (\n        credentials: AcceptInvitationCredentials,\n      ): Promise<LoginStatus> => {\n        if (commitAcceptInvitationMutation == null) {\n          const authError: AuthError = {\n            message: 'Invitation acceptance is not available.',\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n\n        return new Promise((resolve, reject) => {\n          commitAcceptInvitationMutation({\n            variables: {\n              input: {\n                token: credentials.token,\n                password: credentials.password,\n                passwordConfirmation: credentials.passwordConfirmation,\n              },\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.acceptInvitation;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultInvitationErrorMessage,\n                  mapReason: mapAcceptInvitationReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultInvitationErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success' || status === 'mfa-required') {\n                resolve(status);\n                return;\n              }\n              const authError: AuthError = {\n                message: defaultInvitationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultInvitationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitAcceptInvitationMutation,\n        defaultInvitationErrorMessage,\n        isMutationPayload,\n        mapAcceptInvitationReason,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const logout = useCallback(async (): Promise<void> => {\n      setIsLoading(true);\n\n      return new Promise((resolve, reject) => {\n        commitLogoutMutation({\n          variables: {},\n          onCompleted: (response) => {\n            setIsLoading(false);\n            const rawPayload = response.logout;\n            let loggedOutValue: boolean | null = null;\n\n            if (isMutationPayload(rawPayload)) {\n              const outcome = resolveMutationOutcome(rawPayload, {\n                defaultErrorMessage: defaultLogoutErrorMessage,\n              });\n              if (!outcome.ok) {\n                const authError: AuthError = { message: outcome.message };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const loggedOutResult = requireField(\n                rawPayload.payload?.loggedOut ?? null,\n                defaultLogoutErrorMessage,\n              );\n              if (!loggedOutResult.ok) {\n                const authError: AuthError = {\n                  message: loggedOutResult.message,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n              loggedOutValue = loggedOutResult.value;\n            } else {\n              const loggedOutResult = requireField(\n                rawPayload.loggedOut ?? null,\n                defaultLogoutErrorMessage,\n              );\n              if (!loggedOutResult.ok) {\n                const authError: AuthError = {\n                  message: loggedOutResult.message,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n              loggedOutValue = loggedOutResult.value;\n            }\n\n            if (!loggedOutValue) {\n              const authError: AuthError = {\n                message: defaultLogoutErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n              return;\n            }\n\n            localStorage.removeItem('auth_token');\n            localStorage.removeItem('remember_me');\n            setUser(null);\n            setAuthState(initialState);\n            resetRelayStore();\n\n            resolve();\n          },\n          onError: () => {\n            setIsLoading(false);\n            const authError: AuthError = {\n              message: defaultLogoutErrorMessage,\n            };\n            setError(authError);\n            resetRelayStore();\n\n            reject(authError);\n          },\n        });\n      });\n    }, [commitLogoutMutation, defaultLogoutErrorMessage, isMutationPayload]);\n\n    const combinedIsLoading =\n      isLoading ||\n      mutations.login.isInFlight ||\n      mutations.logout.isInFlight ||\n      mutations.completeMfa.isInFlight ||\n      mutations.beginPasskeyLogin.isInFlight ||\n      mutations.finishPasskeyLogin.isInFlight ||\n      (mutations.acceptInvitation?.isInFlight ?? false) ||\n      mutations.beginAuthentication.isInFlight;\n\n    return {\n      authMethod: authState.authMethod,\n      challengeToken: authState.challengeToken,\n      nextStep: authState.nextStep,\n      mfaLevel: authState.mfaLevel,\n      emailHint: authState.emailHint,\n      login,\n      loginWithPasskey,\n      completeMfa,\n      acceptInvitation,\n      beginAuthentication,\n      logout,\n      reset,\n      clearError,\n      isLoading: combinedIsLoading,\n      error,\n      user,\n      lockedUntil,\n      availableMethods,\n    };\n  };\n};\n"],"mappings":";;;;;;;AAyBA,IAAa,KAAoB,EAC/B,SACA,cACA,gBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAM,KAAW,EAAS,GAAG,EAC9B,CAAC,GAAY,KAAiB,EAAwB,KAAK;AAGjE,SAAgB;AAEd,EADA,EAAK,YAAY,EACjB,EAAc,KAAK;IAClB,CAAC,EAAK,CAAC;CAEV,IAAM,IAAe,EACnB,OAAO,MAAsC;AAE3C,EADA,EAAM,gBAAgB,EACtB,EAAc,KAAK;EAEnB,IAAM,IAAU,EAAK,MAAM;AAC3B,MAAI,EAAQ,SAAS,GAAG;AACtB,KAAc,EAAE,4BAA4B,CAAC;AAC7C;;AAGF,MAAI;GACF,IAAM,IAA+B,EACnC,MAAM,GACP;AAED,GADA,MAAM,EAAK,YAAY,EAAY,EACnC,GAAW;UACL;GACN,IAAM,IAAc,EAAK,OAAO;AAChC,KAAc,KAAe,EAAE,qCAAqC,CAAC;;IAGzE;EAAC;EAAM;EAAM;EAAW;EAAE,CAC3B,EAEK,IACJ,EAAK,aAAa,OAEd,EAAE,0BAA0B,GAD5B,EAAE,6BAA6B,EAAE,OAAO,EAAK,WAAW,CAAC,EAGzD,IAAY,KAAc,EAAK,OAAO,WAAW;AAEvD,QAEE,kBAAC,QAAD;EAAM,WAAW;EAAoB,UAAU;EAAc,YAAA;YAA7D,CACE,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eAAgB;KAAW,CAAA;IACxC,KAAa,OAA4C,OAArC,kBAAC,GAAD,EAAA,UAAY,GAAsB,CAAA;IACvD,kBAAC,GAAD;KACE,OAAO,EAAE,sBAAsB;KAC/B,MAAK;KACL,MAAK;KACL,OAAO;KACP,WAAW,MAAU;AAEnB,MADA,EAAQ,EAAM,OAAO,MAAM,EAC3B,EAAc,KAAK;;KAErB,aAAa,EAAE,4BAA4B;KAC3C,cAAa;KACb,WAAA;KACA,UAAA;KACA,CAAA;IACE;MACN,kBAAC,OAAD;GAAK,WAAW;aAAhB,CACE,kBAAC,GAAD;IACE,MAAK;IACL,SAAQ;IACR,MAAK;IACL,WAAW;IACX,eAAe;AAEb,KADA,EAAK,OAAO,EACZ,GAAQ;;cAGT,EAAE,wBAAwB;IACpB,CAAA,EACT,kBAAC,GAAD;IAAQ,MAAK;IAAS,MAAK;IAAQ,WAAW,EAAK;cAChD,EAAE,0BAA0B;IACtB,CAAA,CACL;KACD;;;;;AC3GX,SAAgB,EAAkB,GAA4B;CAC5D,IAAM,IAAY,IAAI,WAAW,EAAM,EACnC,IAAS;AACb,MAAK,IAAM,KAAQ,EACjB,MAAU,OAAO,aAAa,EAAK;AAErC,QAAO,KAAK,EAAO,CAChB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,GAAG;;AAMvB,SAAgB,EAAkB,GAA4B;CAC5D,IAAM,IAAa,EAAM,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,EACxD,IAAY,EAAW,SAAS,GAClC,IAAU;AACd,KAAI,MAAc,EAChB,KAAU;UACD,MAAc,EACvB,KAAU;UACD,MAAc,EACvB,OAAU,MAAM,kCAAkC;CAEpD,IAAM,IAAS,GAAG,IAAa,KACzB,IAAS,KAAK,EAAO,EACrB,IAAS,IAAI,WAAW,EAAO,OAAO;AAC5C,MAAK,IAAI,IAAI,GAAG,IAAI,EAAO,QAAQ,KAAK,EACtC,GAAO,KAAK,EAAO,WAAW,EAAE;AAElC,QAAO,EAAO;;AAYhB,SAAgB,EACd,GAC+B;AAC/B,KAAI,EAAE,aAAiB,cACrB,QAAO;AAGT,SAAQ,EAAM,MAAd;EACE,KAAK;EACL,KAAK,aACH,QAAO;EACT,KAAK,oBACH,QAAO;EACT,KAAK;EACL,KAAK,oBACH,QAAO;EACT,QACE,QAAO;;;AAOb,SAAgB,EAAe,GAAwC;AAKrE,QAJI,EAAkB,aAAa,KAC1B,IAEI,IAAI,SAAS,EAAkB,CAChC,UAAU,IAAI,GAAM;;;;AC8LlC,IAAM,IAAe;CACnB,YAAY;CACZ,gBAAgB;CAChB,WAAW;CACX,UAAU;CACV,UAAU;CACX,EAEY,KAAiB,YACA;CAC1B,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAW,KAAgB,EAAkB,GAAM,EACpD,CAAC,GAAO,KAAY,EAA2B,KAAK,EACpD,CAAC,GAAM,KAAW,EAAsB,KAAK,EAC7C,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAkB,KAAuB,EAAuB,EAAE,CAAC,EACpE,CAAC,GAAW,KAAgB,EAAS,EAAa,EAElD,IAAsB,EAAU,MAAM,QACtC,IAAuB,EAAU,OAAO,QACxC,IAA4B,EAAU,YAAY,QAClD,IAAkC,EAAU,kBAAkB,QAC9D,IACJ,EAAU,mBAAmB,QACzB,IAAiC,EAAU,kBAAkB,QAC7D,IACJ,EAAU,oBAAoB,QAE1B,IAA2B,EAAE,iCAAiC,EAC9D,IAAyC,EAC7C,iCACD,EACK,IAA6B,EAAE,6BAA6B,EAC5D,IAAyB,EAAE,qCAAqC,EAChE,IAAgC,EACpC,uCACD,EACK,IAA6B,EAAE,mCAAmC,EAClE,IAA6B,EAAE,mCAAmC,EAClE,IAA4B,kBAE5B,IAAQ,QAAkB;AAK9B,EAJA,EAAS,KAAK,EACd,EAAQ,KAAK,EACb,EAAe,KAAK,EACpB,EAAoB,EAAE,CAAC,EACvB,EAAa,EAAa;IACzB,EAAE,CAAC,EAEA,IAAa,QAAkB;AACnC,IAAS,KAAK;IACb,EAAE,CAAC,EAEA,IAA6B,GAChC,MAAsC;EACrC,IAAM,IAAa,EAAQ,cAAc,MACnC,IAAiB,EAAQ,kBAAkB,MAC3C,IAAW,EAAQ,YAAY,MAC/B,IAAW,EAAQ,YAAY;AAuBrC,SArBA,GAAc,OACL;GACL,GAAG;GACH;GACA;GACA;GACA;GACD,EACD,EAEE,EAAQ,gBAAgB,QAAQ,KAAY,QAC9C,EAAQ,EACN,IAAI,EAAQ,aAAa,IAC1B,CAAC,EACK,aAGL,MAAa,UAAU,KAAkB,OACpC,iBAGF;IAET,EAAE,CACH,EAEK,IAAoB,GACvB,MAGG,OAAO,KAAU,cADjB,MAEC,YAAY,KAAS,YAAY,IAGtC,EAAE,CACH,EAEK,IAAiB,GACpB,MAA4C;AAC3C,UAAQ,GAAR;GACE,KAAK,sBACH,QAAO,EAAE,2CAA2C;GACtD,KAAK,iBACH,QAAO,EAAE,sCAAsC;GACjD,KAAK,eACH,QAAO,EAAE,oCAAoC;GAC/C,KAAK,iBACH,QAAO,EAAE,iCAAiC;GAC5C,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA+B,GAClC,MAA0D;AACzD,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO,EAAE,qCAAqC;GAChD,KAAK,iBACH,QAAO,EAAE,iCAAiC;GAC5C,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA6B,GAChC,MAAwD;AACvD,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO,EAAE,mCAAmC;GAC9C,KAAK,oBACH,QAAO,EAAE,+BAA+B;GAC1C,KAAK,wBACH,QAAO,EAAE,mCAAmC;GAC9C,KAAK,iBACH,QAAO,EAAE,6BAA6B;GACxC,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA8B,GACjC,MAAyD;AACxD,UAAQ,GAAR;GACE,KAAK,0BACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,oBACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,oBACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,iBACH,QAAO,EAAE,6BAA6B;GACxC,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAAuB,GAC1B,MAAkD;AACjD,UAAQ,GAAR;GACE,KAAK,0BACH,QAAO,EAAE,mCAAmC;GAC9C,KAAK,oBACH,QAAO,EAAE,0BAA0B;GACrC,KAAK,eACH,QAAO,EAAE,8BAA8B;GACzC,KAAK,oBACH,QAAO,EAAE,kCAAkC;GAC7C,KAAK,iBACH,QAAO,EAAE,qCAAqC;GAChD,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA4B,GAC/B,MAAuD;AACtD,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO,EAAE,4CAA4C;GACvD,KAAK,gBACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,mBACH,QAAO,EAAE,+CAA+C;GAC1D,KAAK,oBACH,QAAO,EAAE,gDAAgD;GAC3D,KAAK,4BACH,QAAO,EAAE,uDAAuD;GAClE,KAAK,eACH,QAAO,EAAE,2CAA2C;GACtD,KAAK,iBACH,QAAO,EAAE,6CAA6C;GACxD,KAAK,iBACH,QAAO,EAAE,uCAAuC;GAClD,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAAsB,EAC1B,OACE,MAEO,IAAI,SAAS,GAAS,MAAW;AACtC,IAAkC;GAChC,WAAW,EAAE,UAAO;GACpB,cAAc,MAAa;IACzB,IAAM,IAAa,EAAS,qBACxB,IAAU;AAEd,QAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY;MACjD,qBAAqB;MACrB,WAAW;MACZ,CAAC;AACF,SAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAU,EAAQ;;IAGpB,IAAM,IAAU,EAAQ,QAAQ,KAAK,MAC5B,EAAK,OACZ,EACI,IAAS,EAAQ,eAAe;AAGtC,IAFA,EAAoB,EAAQ,EAC5B,EAAe,EAAO,EACtB,EAAQ;KAAE;KAAS,aAAa;KAAQ,CAAC;;GAE3C,eAAe;IACb,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,IADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEpB,CAAC;GACF,EAEJ;EACE;EACA;EACA;EACA;EACD,CACF,EAEK,IAAQ,EACZ,OAAO,OACL,EAAa,GAAK,EAClB,EAAS,KAAK,EACd,GAAc,OACL;EACL,GAAG;EACH,WAAW,EAAY;EACxB,EACD,EAEK,IAAI,SAAS,GAAS,MAAW;AACtC,IAAoB;GAClB,WAAW,EACT,OAAO,GACR;GACD,cAAc,MAAa;AACzB,MAAa,GAAM;IACnB,IAAM,IAAa,EAAS,OACxB,IAAkC;AAEtC,QAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY;MACjD,qBAAqB;MACrB,WAAW;MACZ,CAAC;AACF,SAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAc,EAAW,WAAW;UAEpC,KAAc;AAGhB,QAAI,KAAe,MAAM;KACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;IAGF,IAAM,IAAS,EAA2B,EAAY;AACtD,QAAI,MAAW,aAAa,MAAW,gBAAgB;AACrD,OAAQ,EAAO;AACf;;IAGF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,IADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEnB,eAAe;AACb,MAAa,GAAM;IACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,IADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEpB,CAAC;GACF,GAEJ;EACE;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,IAAc,EAClB,OAAO,MAAgD;EACrD,IAAM,EAAE,sBAAmB;AAC3B,MAAI,KAAkB,MAAM;GAC1B,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,UADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;AAMlC,SAHA,EAAa,GAAK,EAClB,EAAS,KAAK,EAEP,IAAI,SAAS,GAAS,MAAW;AACtC,KAA0B;IACxB,WAAW,EACT,OAAO;KACL;KACA,MAAM,EAAY;KACnB,EACF;IACD,cAAc,MAAa;AACzB,OAAa,GAAM;KACnB,IAAM,IAAa,EAAS,aACxB,IAAkC;AAEtC,SAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;AACF,UAAI,CAAC,EAAQ,IAAI;OACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,UAAc,EAAW,WAAW;WAEpC,KAAc;AAGhB,SAAI,KAAe,MAAM;MACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAIF,SADe,EAA2B,EAAY,KACvC,WAAW;AACxB,SAAS;AACT;;KAGF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEnB,eAAe;AACb,OAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,IAAmB,EACvB,OAAO,EAAE,eAAqD;AAC5D,MAAI,OAAO,SAAW,KAAa;GACjC,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,UADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;AAYlC,SATA,EAAa,GAAK,EAClB,EAAS,KAAK,EACd,GAAc,OACL;GACL,GAAG;GACH,WAAW;GACZ,EACD,EAEK,IAAI,SAAS,GAAS,MAAW;AACtC,KAAgC;IAC9B,WAAW,EACT,UACD;IACD,cAAc,MAAa;KACzB,IAAM,IAAa,EAAS,mBACxB,IAAU;AAEd,SAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;AACF,UAAI,CAAC,EAAQ,IAAI;AACf,SAAa,GAAM;OACnB,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,UAAU,EAAQ;;AAKpB,MAAM,YAAY;AAChB,UAAI;OACF,IAAM,IAAa,MAAM,UAAU,YAAY,IAAI,EACjD,WAAW;QACT,kBAAkB,EAAQ,iBAAiB,KACxC,OACQ;SACL,IAAI,EAAkB,EAAa;SACnC,MAAM;SACP,EAEJ;QACD,WAAW,EAAkB,EAAQ,UAAU;QAC/C,MAAM,EAAQ;QACd,kBAAkB;QACnB,EACF,CAAC;AAEF,WAAI,KAAa,KACf,OAAU,MACR,+CACD;OAGH,IAAM,IACJ,EAAU,UACN,IAAY,EAChB,EAAkB,kBACnB;AAED,SAAiC;QAC/B,WAAW,EACT,OAAO;SACL,WAAW,EAAQ;SACnB,gBAAgB,EAAQ;SACxB,cAAc,EAAU;SACxB;SACA,YACE,EAAkB,cAAc,OAE5B,OADA,EAAkB,EAAkB,WAAW;SAEtD,EACF;QACD,cAAc,MAAmB;AAC/B,WAAa,GAAM;SACnB,IAAM,IAAa,EAAe,oBAC9B,IAAkC;AAEtC,aAAI,EAAkB,EAAW,EAAE;UACjC,IAAM,IAAU,EAAuB,GAAY;WACjD,qBAAqB;WACrB,WAAW;WACZ,CAAC;AACF,cAAI,CAAC,EAAQ,IAAI;WACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,WADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,cAAc,EAAW,WAAW;eAEpC,KAAc;AAGhB,aAAI,KAAe,MAAM;UACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,UADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;SAGF,IAAM,IAAS,EAA2B,EAAY;AACtD,aAAI,MAAW,WAAW;AACxB,YAAQ,EAAO;AACf;;SAEF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,SADA,EAAS,EAAU,EACnB,EAAO,EAAU;;QAEnB,eAAe;AACb,WAAa,GAAM;SACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,SADA,EAAS,EAAU,EACnB,EAAO,EAAU;;QAEpB,CAAC;eACK,GAAiB;AACxB,SAAa,GAAM;OACnB,IAAM,IAAuB,EAC3B,SACE,aAA2B,QACvB,EAAgB,UAChB,gCACP;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;;SAEjB;;IAEN,eAAe;AACb,OAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,IAAmB,EACvB,OACE,MACyB;AACzB,MAAI,KAAkC,MAAM;GAC1C,IAAM,IAAuB,EAC3B,SAAS,2CACV;AAED,UADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;AAMlC,SAHA,EAAa,GAAK,EAClB,EAAS,KAAK,EAEP,IAAI,SAAS,GAAS,MAAW;AACtC,KAA+B;IAC7B,WAAW,EACT,OAAO;KACL,OAAO,EAAY;KACnB,UAAU,EAAY;KACtB,sBAAsB,EAAY;KACnC,EACF;IACD,cAAc,MAAa;AACzB,OAAa,GAAM;KACnB,IAAM,IAAa,EAAS,kBACxB,IAAkC;AAEtC,SAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;AACF,UAAI,CAAC,EAAQ,IAAI;OACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,UAAc,EAAW,WAAW;WAEpC,KAAc;AAGhB,SAAI,KAAe,MAAM;MACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;KAGF,IAAM,IAAS,EAA2B,EAAY;AACtD,SAAI,MAAW,aAAa,MAAW,gBAAgB;AACrD,QAAQ,EAAO;AACf;;KAEF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEnB,eAAe;AACb,OAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,KAAS,EAAY,aACzB,EAAa,GAAK,EAEX,IAAI,SAAS,GAAS,MAAW;AACtC,IAAqB;GACnB,WAAW,EAAE;GACb,cAAc,MAAa;AACzB,MAAa,GAAM;IACnB,IAAM,IAAa,EAAS,QACxB,IAAiC;AAErC,QAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY,EACjD,qBAAqB,GACtB,CAAC;AACF,SAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAAE,SAAS,EAAQ,SAAS;AAEzD,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;KAGF,IAAM,IAAkB,EACtB,EAAW,SAAS,aAAa,MACjC,EACD;AACD,SAAI,CAAC,EAAgB,IAAI;MACvB,IAAM,IAAuB,EAC3B,SAAS,EAAgB,SAC1B;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAiB,EAAgB;WAC5B;KACL,IAAM,IAAkB,EACtB,EAAW,aAAa,MACxB,EACD;AACD,SAAI,CAAC,EAAgB,IAAI;MACvB,IAAM,IAAuB,EAC3B,SAAS,EAAgB,SAC1B;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAiB,EAAgB;;AAGnC,QAAI,CAAC,GAAgB;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AASF,IANA,aAAa,WAAW,aAAa,EACrC,aAAa,WAAW,cAAc,EACtC,EAAQ,KAAK,EACb,EAAa,EAAa,EAC1B,GAAiB,EAEjB,GAAS;;GAEX,eAAe;AACb,MAAa,GAAM;IACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAID,IAHA,EAAS,EAAU,EACnB,GAAiB,EAEjB,EAAO,EAAU;;GAEpB,CAAC;GACF,GACD;EAAC;EAAsB;EAA2B;EAAkB,CAAC,EAElE,KACJ,KACA,EAAU,MAAM,cAChB,EAAU,OAAO,cACjB,EAAU,YAAY,cACtB,EAAU,kBAAkB,cAC5B,EAAU,mBAAmB,eAC5B,EAAU,kBAAkB,cAAc,OAC3C,EAAU,oBAAoB;AAEhC,QAAO;EACL,YAAY,EAAU;EACtB,gBAAgB,EAAU;EAC1B,UAAU,EAAU;EACpB,UAAU,EAAU;EACpB,WAAW,EAAU;EACrB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;EACA;EACA;EACA;EACD"}
+{"version":3,"file":"useAuth-DzWJXJ_9.js","names":[],"sources":["../../src/auth/login/MfaChallengeForm.tsx","../../src/modules/webauthn.ts","../../src/hooks/useAuth.ts"],"sourcesContent":["/* eslint-disable no-ternary */\nimport {\n  useCallback,\n  useEffect,\n  useState,\n  type FormEvent,\n  type JSX,\n} from 'react';\nimport { useSharedTranslation } from '../../i18n/useSharedTranslation.js';\n\nimport { Button, FormError, FormField } from '@plumile/ui';\n\nimport type { TotpCredentials, UseAuthReturn } from '../../hooks/useAuth.js';\n\nimport * as styles from './loginPage.css.js';\n\ntype Props = {\n  auth: Pick<\n    UseAuthReturn,\n    'completeMfa' | 'isLoading' | 'error' | 'emailHint' | 'reset' | 'clearError'\n  >;\n  onSuccess: () => void;\n  onBack: () => void;\n};\n\nexport const MfaChallengeForm = ({\n  auth,\n  onSuccess,\n  onBack,\n}: Props): JSX.Element => {\n  const { t } = useSharedTranslation();\n  const [code, setCode] = useState('');\n  const [localError, setLocalError] = useState<string | null>(null);\n\n  // Clear any stale errors when the MFA form is shown\n  useEffect(() => {\n    auth.clearError();\n    setLocalError(null);\n  }, [auth]);\n\n  const handleSubmit = useCallback(\n    async (event: FormEvent<HTMLFormElement>) => {\n      event.preventDefault();\n      setLocalError(null);\n\n      const trimmed = code.trim();\n      if (trimmed.length < 4) {\n        setLocalError(t('auth.mfa.errors.shortCode'));\n        return;\n      }\n\n      try {\n        const credentials: TotpCredentials = {\n          code: trimmed,\n        };\n        await auth.completeMfa(credentials);\n        onSuccess();\n      } catch {\n        const authMessage = auth.error?.message;\n        setLocalError(authMessage ?? t('auth.mfa.errors.verificationFailed'));\n      }\n    },\n    [auth, code, onSuccess, t],\n  );\n\n  const helper =\n    auth.emailHint != null\n      ? t('auth.mfa.helper.withEmail', { email: auth.emailHint })\n      : t('auth.mfa.helper.default');\n\n  const formError = localError ?? auth.error?.message ?? null;\n\n  return (\n    // eslint-disable-next-line @typescript-eslint/no-misused-promises\n    <form className={styles.formSurface} onSubmit={handleSubmit} noValidate>\n      <div className={styles.stack}>\n        <p className={styles.helper}>{helper}</p>\n        {formError != null ? <FormError>{formError}</FormError> : null}\n        <FormField\n          label={t('auth.mfa.form.label')}\n          name=\"code\"\n          type=\"text\"\n          value={code}\n          onChange={(event) => {\n            setCode(event.target.value);\n            setLocalError(null);\n          }}\n          placeholder={t('auth.mfa.form.placeholder')}\n          autoComplete=\"one-time-code\"\n          autoFocus\n          required\n        />\n      </div>\n      <div className={styles.actionsRow}>\n        <Button\n          type=\"button\"\n          variant=\"text\"\n          size=\"small\"\n          className={styles.inlineLink}\n          onClick={() => {\n            auth.reset();\n            onBack();\n          }}\n        >\n          {t('auth.mfa.actions.back')}\n        </Button>\n        <Button type=\"submit\" size=\"large\" isLoading={auth.isLoading}>\n          {t('auth.mfa.actions.submit')}\n        </Button>\n      </div>\n    </form>\n  );\n};\n","/**\n * Buffer to base64 url\n */\nexport function bufferToBase64Url(input: ArrayBuffer): string {\n  const byteArray = new Uint8Array(input);\n  let binary = '';\n  for (const byte of byteArray) {\n    binary += String.fromCharCode(byte);\n  }\n  return btoa(binary)\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=+$/, '');\n}\n\n/**\n * Base64 url to buffer\n */\nexport function base64UrlToBuffer(input: string): ArrayBuffer {\n  const normalized = input.replace(/-/g, '+').replace(/_/g, '/');\n  const remainder = normalized.length % 4;\n  let padding = '';\n  if (remainder === 2) {\n    padding = '==';\n  } else if (remainder === 3) {\n    padding = '=';\n  } else if (remainder === 1) {\n    throw new Error('Invalid base64url input length.');\n  }\n  const padded = `${normalized}${padding}`;\n  const binary = atob(padded);\n  const output = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i += 1) {\n    output[i] = binary.charCodeAt(i);\n  }\n  return output.buffer;\n}\n\nexport type WebAuthnRegistrationErrorKind =\n  | 'cancelled'\n  | 'credentialInUse'\n  | 'notSupported'\n  | 'failed';\n\n/**\n * Maps a browser WebAuthn registration error to a stable UI category.\n */\nexport function mapWebAuthnRegistrationError(\n  error: unknown,\n): WebAuthnRegistrationErrorKind {\n  if (!(error instanceof DOMException)) {\n    return 'failed';\n  }\n\n  switch (error.name) {\n    case 'NotAllowedError':\n    case 'AbortError':\n      return 'cancelled';\n    case 'InvalidStateError':\n      return 'credentialInUse';\n    case 'SecurityError':\n    case 'NotSupportedError':\n      return 'notSupported';\n    default:\n      return 'failed';\n  }\n}\n\n/**\n * Parse sign count\n */\nexport function parseSignCount(authenticatorData: ArrayBuffer): number {\n  if (authenticatorData.byteLength < 37) {\n    return 0;\n  }\n  const view = new DataView(authenticatorData);\n  return view.getUint32(33, false);\n}\n","/* eslint-disable no-ternary */\nimport { useCallback, useState } from 'react';\n\nimport {\n  type MutationPayloadBase,\n  requireField,\n  resolveMutationOutcome,\n} from '../relay/mutationResult.js';\nimport { useSharedTranslation } from '../i18n/useSharedTranslation.js';\n\nimport { resetRelayStore } from '../relay/environment.js';\nimport type { PayloadError } from 'relay-runtime';\n\nimport type {\n  AuthMethod,\n  LoginNextStep,\n  MfaLevel,\n} from '../modules/sharedSchemaTypes.js';\nimport {\n  base64UrlToBuffer,\n  bufferToBase64Url,\n  parseSignCount,\n} from '../modules/webauthn.js';\n\nexport type AuthPayload = {\n  authMethod: AuthMethod | null | undefined;\n  challengeToken: string | null | undefined;\n  loggedInUser: { id: string } | null | undefined;\n  mfaLevel: MfaLevel | null | undefined;\n  nextStep: LoginNextStep | null | undefined;\n};\n\ntype LoginErrorReason =\n  | 'INVALID_CREDENTIALS'\n  | 'ACCOUNT_LOCKED'\n  | 'RATE_LIMITED'\n  | 'INTERNAL_ERROR';\n\ntype LogoutErrorReason =\n  | 'UNAUTHENTICATED'\n  | 'SESSION_NOT_FOUND'\n  | 'INTERNAL_ERROR';\n\ntype BeginAuthenticationErrorReason = 'INVALID_EMAIL' | 'INTERNAL_ERROR';\n\ntype BeginPasskeyLoginErrorReason =\n  | 'INVALID_EMAIL'\n  | 'PASSKEY_NOT_FOUND'\n  | 'PASSKEY_NOT_SUPPORTED'\n  | 'INTERNAL_ERROR';\n\ntype FinishPasskeyLoginErrorReason =\n  | 'INVALID_CHALLENGE_TOKEN'\n  | 'CHALLENGE_EXPIRED'\n  | 'INVALID_ASSERTION'\n  | 'INTERNAL_ERROR';\n\ntype CompleteMfaErrorReason =\n  | 'INVALID_CHALLENGE_TOKEN'\n  | 'CHALLENGE_EXPIRED'\n  | 'INVALID_CODE'\n  | 'TOO_MANY_ATTEMPTS'\n  | 'INTERNAL_ERROR';\n\ntype AcceptInvitationErrorReason =\n  | 'INVALID_TOKEN'\n  | 'TOKEN_EXPIRED'\n  | 'ALREADY_ACCEPTED'\n  | 'PASSWORD_MISMATCH'\n  | 'PASSWORD_POLICY_VIOLATION'\n  | 'RATE_LIMITED'\n  | 'EMAIL_MISMATCH'\n  | 'INTERNAL_ERROR';\n\nexport type BeginAuthenticationPayload =\n  MutationPayloadBase<BeginAuthenticationErrorReason> & {\n    lockedUntil: string | null | undefined;\n    methods: readonly {\n      method: AuthMethod;\n      mfaEnforced?: boolean | null | undefined;\n    }[];\n  };\n\nexport type BeginPasskeyLoginPayload =\n  MutationPayloadBase<BeginPasskeyLoginErrorReason> & {\n    allowCredentials: readonly string[];\n    challenge: string;\n    challengeToken: string;\n    rpId: string;\n  };\n\ntype LoginMutationPayload = MutationPayloadBase<LoginErrorReason> & {\n  payload?: AuthPayload | null | undefined;\n};\n\ntype LogoutPayload = {\n  loggedOut?: boolean | null | undefined;\n};\n\ntype LogoutMutationPayload = MutationPayloadBase<LogoutErrorReason> & {\n  payload?: LogoutPayload | null | undefined;\n};\n\ntype CompleteMfaMutationPayload =\n  MutationPayloadBase<CompleteMfaErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\ntype FinishPasskeyLoginMutationPayload =\n  MutationPayloadBase<FinishPasskeyLoginErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\ntype AcceptInvitationMutationPayload =\n  MutationPayloadBase<AcceptInvitationErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\nexport type LoginResponse = { login: AuthPayload | LoginMutationPayload };\nexport type LogoutResponse = { logout: LogoutPayload | LogoutMutationPayload };\nexport type CompleteMfaResponse = {\n  completeMfa: AuthPayload | CompleteMfaMutationPayload;\n};\nexport type FinishPasskeyLoginResponse = {\n  finishPasskeyLogin: AuthPayload | FinishPasskeyLoginMutationPayload;\n};\nexport type AcceptInvitationResponse = {\n  acceptInvitation: AuthPayload | AcceptInvitationMutationPayload;\n};\nexport type BeginAuthenticationResponse = {\n  beginAuthentication: BeginAuthenticationPayload;\n};\nexport type BeginPasskeyLoginResponse = {\n  beginPasskeyLogin: BeginPasskeyLoginPayload;\n};\n\nexport type LoginVariables = {\n  input: LoginCredentials;\n};\n\nexport type LogoutVariables = Record<PropertyKey, never>;\n\nexport type CompleteMfaVariables = {\n  input: {\n    challengeToken: string;\n    code: string;\n  };\n};\n\nexport type BeginPasskeyLoginVariables = {\n  email: string;\n};\n\nexport type FinishPasskeyLoginVariables = {\n  input: {\n    challenge: string;\n    challengeToken: string;\n    credentialId: string;\n    signCount: number;\n    userHandle?: string | null;\n  };\n};\n\nexport type AcceptInvitationVariables = {\n  input: {\n    token: string;\n    password: string;\n    passwordConfirmation: string;\n  };\n};\n\nexport type BeginAuthenticationVariables = {\n  email: string;\n};\n\ntype MutationCommitConfig<TVariables, TResponse> = {\n  variables: TVariables;\n  onCompleted?: (\n    response: TResponse,\n    errors: readonly PayloadError[] | null,\n  ) => void;\n  onError?: (error: Error) => void;\n};\n\ntype MutationCommit<TVariables, TResponse> = (\n  config: MutationCommitConfig<TVariables, TResponse>,\n) => void;\n\ntype MutationEntry<TVariables, TResponse> = {\n  commit: MutationCommit<TVariables, TResponse>;\n  isInFlight: boolean;\n};\n\nexport type AuthMutationHooks = {\n  login: MutationEntry<LoginVariables, LoginResponse>;\n  logout: MutationEntry<LogoutVariables, LogoutResponse>;\n  completeMfa: MutationEntry<CompleteMfaVariables, CompleteMfaResponse>;\n  beginPasskeyLogin: MutationEntry<\n    BeginPasskeyLoginVariables,\n    BeginPasskeyLoginResponse\n  >;\n  finishPasskeyLogin: MutationEntry<\n    FinishPasskeyLoginVariables,\n    FinishPasskeyLoginResponse\n  >;\n  acceptInvitation?: MutationEntry<\n    AcceptInvitationVariables,\n    AcceptInvitationResponse\n  >;\n  beginAuthentication: MutationEntry<\n    BeginAuthenticationVariables,\n    BeginAuthenticationResponse\n  >;\n};\n\ninterface User {\n  id: string;\n}\n\nexport type LoginStatus = 'success' | 'mfa-required' | 'error';\n\nexport interface LoginCredentials {\n  email: string;\n  password: string;\n}\n\nexport interface TotpCredentials {\n  code: string;\n}\n\nexport interface AcceptInvitationCredentials {\n  token: string;\n  password: string;\n  passwordConfirmation: string;\n}\n\nexport interface AuthError {\n  message: string;\n  code?: string;\n}\n\nexport interface UseAuthReturn {\n  authMethod: AuthMethod | null;\n  challengeToken: string | null;\n  nextStep: LoginNextStep | null;\n  mfaLevel: MfaLevel | null;\n  emailHint: string | null;\n  lockedUntil: string | null;\n  availableMethods: AuthMethod[];\n  login: (credentials: LoginCredentials) => Promise<LoginStatus>;\n  loginWithPasskey: (params: { email: string }) => Promise<LoginStatus>;\n  completeMfa: (credentials: TotpCredentials) => Promise<void>;\n  acceptInvitation: (\n    credentials: AcceptInvitationCredentials,\n  ) => Promise<LoginStatus>;\n  beginAuthentication: (\n    email: string,\n  ) => Promise<{ methods: AuthMethod[]; lockedUntil: string | null }>;\n  logout: () => Promise<void>;\n  reset: () => void;\n  clearError: () => void;\n  isLoading: boolean;\n  error: AuthError | null;\n  user: User | null;\n}\n\nconst initialState = {\n  authMethod: null as AuthMethod | null,\n  challengeToken: null as string | null,\n  emailHint: null as string | null,\n  mfaLevel: null as MfaLevel | null,\n  nextStep: null as LoginNextStep | null,\n};\n\nexport const createUseAuth = (mutations: AuthMutationHooks) => {\n  return (): UseAuthReturn => {\n    const { t } = useSharedTranslation();\n    const [isLoading, setIsLoading] = useState<boolean>(false);\n    const [error, setError] = useState<AuthError | null>(null);\n    const [user, setUser] = useState<User | null>(null);\n    const [lockedUntil, setLockedUntil] = useState<string | null>(null);\n    const [availableMethods, setAvailableMethods] = useState<AuthMethod[]>([]);\n    const [authState, setAuthState] = useState(initialState);\n\n    const commitLoginMutation = mutations.login.commit;\n    const commitLogoutMutation = mutations.logout.commit;\n    const commitCompleteMfaMutation = mutations.completeMfa.commit;\n    const commitBeginPasskeyLoginMutation = mutations.beginPasskeyLogin.commit;\n    const commitFinishPasskeyLoginMutation =\n      mutations.finishPasskeyLogin.commit;\n    const commitAcceptInvitationMutation = mutations.acceptInvitation?.commit;\n    const commitBeginAuthenticationMutation =\n      mutations.beginAuthentication.commit;\n\n    const defaultLoginErrorMessage = t('auth.loginFlow.errors.tryAgain');\n    const defaultBeginAuthenticationErrorMessage = t(\n      'auth.loginFlow.errors.tryAgain',\n    );\n    const defaultPasskeyErrorMessage = t('auth.passkey.errors.failed');\n    const defaultMfaErrorMessage = t('auth.mfa.errors.verificationFailed');\n    const defaultInvitationErrorMessage = t(\n      'auth.acceptInvitation.errors.default',\n    );\n    const mfaInvalidChallengeMessage = t('auth.mfa.errors.invalidChallenge');\n    const passkeyNotAvailableMessage = t('auth.passkey.errors.notAvailable');\n    const defaultLogoutErrorMessage = 'Logout failed.';\n\n    const reset = useCallback(() => {\n      setError(null);\n      setUser(null);\n      setLockedUntil(null);\n      setAvailableMethods([]);\n      setAuthState(initialState);\n    }, []);\n\n    const clearError = useCallback(() => {\n      setError(null);\n    }, []);\n\n    const updateAuthStateFromPayload = useCallback(\n      (payload: AuthPayload): LoginStatus => {\n        const authMethod = payload.authMethod ?? null;\n        const challengeToken = payload.challengeToken ?? null;\n        const mfaLevel = payload.mfaLevel ?? null;\n        const nextStep = payload.nextStep ?? null;\n\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            authMethod,\n            challengeToken,\n            mfaLevel,\n            nextStep,\n          };\n        });\n\n        if (payload.loggedInUser != null && nextStep == null) {\n          setUser({\n            id: payload.loggedInUser.id,\n          });\n          return 'success';\n        }\n\n        if (nextStep === 'TOTP' && challengeToken != null) {\n          return 'mfa-required';\n        }\n\n        return 'error';\n      },\n      [],\n    );\n\n    const isMutationPayload = useCallback(\n      (value: unknown): value is MutationPayloadBase => {\n        return (\n          value != null &&\n          typeof value === 'object' &&\n          ('status' in value || 'result' in value)\n        );\n      },\n      [],\n    );\n\n    const mapLoginReason = useCallback(\n      (reason: LoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CREDENTIALS':\n            return t('auth.loginFlow.errors.invalidCredentials');\n          case 'ACCOUNT_LOCKED':\n            return t('auth.loginFlow.errors.accountLocked');\n          case 'RATE_LIMITED':\n            return t('auth.loginFlow.errors.rateLimited');\n          case 'INTERNAL_ERROR':\n            return t('auth.loginFlow.errors.tryAgain');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapBeginAuthenticationReason = useCallback(\n      (reason: BeginAuthenticationErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_EMAIL':\n            return t('auth.loginFlow.errors.invalidEmail');\n          case 'INTERNAL_ERROR':\n            return t('auth.loginFlow.errors.tryAgain');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapBeginPasskeyLoginReason = useCallback(\n      (reason: BeginPasskeyLoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_EMAIL':\n            return t('auth.passkey.errors.invalidEmail');\n          case 'PASSKEY_NOT_FOUND':\n            return t('auth.passkey.errors.notFound');\n          case 'PASSKEY_NOT_SUPPORTED':\n            return t('auth.passkey.errors.notAvailable');\n          case 'INTERNAL_ERROR':\n            return t('auth.passkey.errors.failed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapFinishPasskeyLoginReason = useCallback(\n      (reason: FinishPasskeyLoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CHALLENGE_TOKEN':\n            return t('auth.passkey.errors.invalidChallenge');\n          case 'CHALLENGE_EXPIRED':\n            return t('auth.passkey.errors.challengeExpired');\n          case 'INVALID_ASSERTION':\n            return t('auth.passkey.errors.invalidAssertion');\n          case 'INTERNAL_ERROR':\n            return t('auth.passkey.errors.failed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapCompleteMfaReason = useCallback(\n      (reason: CompleteMfaErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CHALLENGE_TOKEN':\n            return t('auth.mfa.errors.invalidChallenge');\n          case 'CHALLENGE_EXPIRED':\n            return t('auth.mfa.errors.expired');\n          case 'INVALID_CODE':\n            return t('auth.mfa.errors.invalidCode');\n          case 'TOO_MANY_ATTEMPTS':\n            return t('auth.mfa.errors.tooManyAttempts');\n          case 'INTERNAL_ERROR':\n            return t('auth.mfa.errors.verificationFailed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapAcceptInvitationReason = useCallback(\n      (reason: AcceptInvitationErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_TOKEN':\n            return t('auth.acceptInvitation.errors.invalidToken');\n          case 'TOKEN_EXPIRED':\n            return t('auth.acceptInvitation.errors.expired');\n          case 'ALREADY_ACCEPTED':\n            return t('auth.acceptInvitation.errors.alreadyAccepted');\n          case 'PASSWORD_MISMATCH':\n            return t('auth.acceptInvitation.errors.passwordMismatch');\n          case 'PASSWORD_POLICY_VIOLATION':\n            return t('auth.acceptInvitation.errors.passwordPolicyViolation');\n          case 'RATE_LIMITED':\n            return t('auth.acceptInvitation.errors.rateLimited');\n          case 'EMAIL_MISMATCH':\n            return t('auth.acceptInvitation.errors.emailMismatch');\n          case 'INTERNAL_ERROR':\n            return t('auth.acceptInvitation.errors.default');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const beginAuthentication = useCallback(\n      async (\n        email: string,\n      ): Promise<{ methods: AuthMethod[]; lockedUntil: string | null }> => {\n        return new Promise((resolve, reject) => {\n          commitBeginAuthenticationMutation({\n            variables: { email },\n            onCompleted: (response) => {\n              const rawPayload = response.beginAuthentication;\n              let payload = rawPayload;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultBeginAuthenticationErrorMessage,\n                  mapReason: mapBeginAuthenticationReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                payload = outcome.payload;\n              }\n\n              const methods = payload.methods.map((item) => {\n                return item.method;\n              });\n              const locked = payload.lockedUntil ?? null;\n              setAvailableMethods(methods);\n              setLockedUntil(locked);\n              resolve({ methods, lockedUntil: locked });\n            },\n            onError: () => {\n              const authError: AuthError = {\n                message: defaultBeginAuthenticationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitBeginAuthenticationMutation,\n        defaultBeginAuthenticationErrorMessage,\n        isMutationPayload,\n        mapBeginAuthenticationReason,\n      ],\n    );\n\n    const login = useCallback(\n      async (credentials: LoginCredentials): Promise<LoginStatus> => {\n        setIsLoading(true);\n        setError(null);\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            emailHint: credentials.email,\n          };\n        });\n\n        return new Promise((resolve, reject) => {\n          commitLoginMutation({\n            variables: {\n              input: credentials,\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.login;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultLoginErrorMessage,\n                  mapReason: mapLoginReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultLoginErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success' || status === 'mfa-required') {\n                resolve(status);\n                return;\n              }\n\n              const authError: AuthError = {\n                message: defaultLoginErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultLoginErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitLoginMutation,\n        defaultLoginErrorMessage,\n        isMutationPayload,\n        mapLoginReason,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const completeMfa = useCallback(\n      async (credentials: TotpCredentials): Promise<void> => {\n        const { challengeToken } = authState;\n        if (challengeToken == null) {\n          const authError: AuthError = {\n            message: mfaInvalidChallengeMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n\n        return new Promise((resolve, reject) => {\n          commitCompleteMfaMutation({\n            variables: {\n              input: {\n                challengeToken,\n                code: credentials.code,\n              },\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.completeMfa;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultMfaErrorMessage,\n                  mapReason: mapCompleteMfaReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultMfaErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success') {\n                resolve();\n                return;\n              }\n\n              const authError: AuthError = {\n                message: defaultMfaErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultMfaErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        authState,\n        commitCompleteMfaMutation,\n        defaultMfaErrorMessage,\n        isMutationPayload,\n        mapCompleteMfaReason,\n        mfaInvalidChallengeMessage,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const loginWithPasskey = useCallback(\n      async ({ email }: { email: string }): Promise<LoginStatus> => {\n        if (typeof window === 'undefined') {\n          const authError: AuthError = {\n            message: passkeyNotAvailableMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            emailHint: email,\n          };\n        });\n\n        return new Promise((resolve, reject) => {\n          commitBeginPasskeyLoginMutation({\n            variables: {\n              email,\n            },\n            onCompleted: (response) => {\n              const rawOptions = response.beginPasskeyLogin;\n              let options = rawOptions;\n\n              if (isMutationPayload(rawOptions)) {\n                const outcome = resolveMutationOutcome(rawOptions, {\n                  defaultErrorMessage: defaultPasskeyErrorMessage,\n                  mapReason: mapBeginPasskeyLoginReason,\n                });\n                if (!outcome.ok) {\n                  setIsLoading(false);\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                options = outcome.payload;\n              }\n\n              // TODO:! Fix this\n              // eslint-disable-next-line no-void\n              void (async () => {\n                try {\n                  const assertion = (await navigator.credentials.get({\n                    publicKey: {\n                      allowCredentials: options.allowCredentials.map(\n                        (credentialId) => {\n                          return {\n                            id: base64UrlToBuffer(credentialId),\n                            type: 'public-key' as const,\n                          };\n                        },\n                      ),\n                      challenge: base64UrlToBuffer(options.challenge),\n                      rpId: options.rpId,\n                      userVerification: 'preferred',\n                    },\n                  })) as PublicKeyCredential | null;\n\n                  if (assertion == null) {\n                    throw new Error(\n                      'No credential returned by the authenticator.',\n                    );\n                  }\n\n                  const assertionResponse =\n                    assertion.response as AuthenticatorAssertionResponse;\n                  const signCount = parseSignCount(\n                    assertionResponse.authenticatorData,\n                  );\n\n                  commitFinishPasskeyLoginMutation({\n                    variables: {\n                      input: {\n                        challenge: options.challenge,\n                        challengeToken: options.challengeToken,\n                        credentialId: assertion.id,\n                        signCount,\n                        userHandle:\n                          assertionResponse.userHandle != null\n                            ? bufferToBase64Url(assertionResponse.userHandle)\n                            : null,\n                      },\n                    },\n                    onCompleted: (finishResponse) => {\n                      setIsLoading(false);\n                      const rawPayload = finishResponse.finishPasskeyLogin;\n                      let authPayload: AuthPayload | null = null;\n\n                      if (isMutationPayload(rawPayload)) {\n                        const outcome = resolveMutationOutcome(rawPayload, {\n                          defaultErrorMessage: defaultPasskeyErrorMessage,\n                          mapReason: mapFinishPasskeyLoginReason,\n                        });\n                        if (!outcome.ok) {\n                          const authError: AuthError = {\n                            message: outcome.message,\n                          };\n                          setError(authError);\n                          reject(authError);\n                          return;\n                        }\n                        authPayload = rawPayload.payload ?? null;\n                      } else {\n                        authPayload = rawPayload;\n                      }\n\n                      if (authPayload == null) {\n                        const authError: AuthError = {\n                          message: defaultPasskeyErrorMessage,\n                        };\n                        setError(authError);\n                        reject(authError);\n                        return;\n                      }\n\n                      const status = updateAuthStateFromPayload(authPayload);\n                      if (status === 'success') {\n                        resolve(status);\n                        return;\n                      }\n                      const authError: AuthError = {\n                        message: defaultPasskeyErrorMessage,\n                      };\n                      setError(authError);\n                      reject(authError);\n                    },\n                    onError: () => {\n                      setIsLoading(false);\n                      const authError: AuthError = {\n                        message: defaultPasskeyErrorMessage,\n                      };\n                      setError(authError);\n                      reject(authError);\n                    },\n                  });\n                } catch (credentialError) {\n                  setIsLoading(false);\n                  const authError: AuthError = {\n                    message:\n                      credentialError instanceof Error\n                        ? credentialError.message\n                        : 'Passkey login was cancelled.',\n                  };\n                  setError(authError);\n                  reject(authError);\n                }\n              })();\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultPasskeyErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitBeginPasskeyLoginMutation,\n        commitFinishPasskeyLoginMutation,\n        defaultPasskeyErrorMessage,\n        isMutationPayload,\n        mapBeginPasskeyLoginReason,\n        mapFinishPasskeyLoginReason,\n        passkeyNotAvailableMessage,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const acceptInvitation = useCallback(\n      async (\n        credentials: AcceptInvitationCredentials,\n      ): Promise<LoginStatus> => {\n        if (commitAcceptInvitationMutation == null) {\n          const authError: AuthError = {\n            message: 'Invitation acceptance is not available.',\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n\n        return new Promise((resolve, reject) => {\n          commitAcceptInvitationMutation({\n            variables: {\n              input: {\n                token: credentials.token,\n                password: credentials.password,\n                passwordConfirmation: credentials.passwordConfirmation,\n              },\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.acceptInvitation;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultInvitationErrorMessage,\n                  mapReason: mapAcceptInvitationReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultInvitationErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success' || status === 'mfa-required') {\n                resolve(status);\n                return;\n              }\n              const authError: AuthError = {\n                message: defaultInvitationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultInvitationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitAcceptInvitationMutation,\n        defaultInvitationErrorMessage,\n        isMutationPayload,\n        mapAcceptInvitationReason,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const logout = useCallback(async (): Promise<void> => {\n      setIsLoading(true);\n\n      return new Promise((resolve, reject) => {\n        commitLogoutMutation({\n          variables: {},\n          onCompleted: (response) => {\n            setIsLoading(false);\n            const rawPayload = response.logout;\n            let loggedOutValue: boolean | null = null;\n\n            if (isMutationPayload(rawPayload)) {\n              const outcome = resolveMutationOutcome(rawPayload, {\n                defaultErrorMessage: defaultLogoutErrorMessage,\n              });\n              if (!outcome.ok) {\n                const authError: AuthError = { message: outcome.message };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const loggedOutResult = requireField(\n                rawPayload.payload?.loggedOut ?? null,\n                defaultLogoutErrorMessage,\n              );\n              if (!loggedOutResult.ok) {\n                const authError: AuthError = {\n                  message: loggedOutResult.message,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n              loggedOutValue = loggedOutResult.value;\n            } else {\n              const loggedOutResult = requireField(\n                rawPayload.loggedOut ?? null,\n                defaultLogoutErrorMessage,\n              );\n              if (!loggedOutResult.ok) {\n                const authError: AuthError = {\n                  message: loggedOutResult.message,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n              loggedOutValue = loggedOutResult.value;\n            }\n\n            if (!loggedOutValue) {\n              const authError: AuthError = {\n                message: defaultLogoutErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n              return;\n            }\n\n            localStorage.removeItem('auth_token');\n            localStorage.removeItem('remember_me');\n            setUser(null);\n            setAuthState(initialState);\n            resetRelayStore();\n\n            resolve();\n          },\n          onError: () => {\n            setIsLoading(false);\n            const authError: AuthError = {\n              message: defaultLogoutErrorMessage,\n            };\n            setError(authError);\n            resetRelayStore();\n\n            reject(authError);\n          },\n        });\n      });\n    }, [commitLogoutMutation, defaultLogoutErrorMessage, isMutationPayload]);\n\n    const combinedIsLoading =\n      isLoading ||\n      mutations.login.isInFlight ||\n      mutations.logout.isInFlight ||\n      mutations.completeMfa.isInFlight ||\n      mutations.beginPasskeyLogin.isInFlight ||\n      mutations.finishPasskeyLogin.isInFlight ||\n      (mutations.acceptInvitation?.isInFlight ?? false) ||\n      mutations.beginAuthentication.isInFlight;\n\n    return {\n      authMethod: authState.authMethod,\n      challengeToken: authState.challengeToken,\n      nextStep: authState.nextStep,\n      mfaLevel: authState.mfaLevel,\n      emailHint: authState.emailHint,\n      login,\n      loginWithPasskey,\n      completeMfa,\n      acceptInvitation,\n      beginAuthentication,\n      logout,\n      reset,\n      clearError,\n      isLoading: combinedIsLoading,\n      error,\n      user,\n      lockedUntil,\n      availableMethods,\n    };\n  };\n};\n"],"mappings":";;;;;;;AAyBA,IAAa,KAAoB,EAC/B,SACA,cACA,gBACwB;CACxB,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAM,KAAW,EAAS,GAAG,EAC9B,CAAC,GAAY,KAAiB,EAAwB,KAAK;AAGjE,SAAgB;AAEd,EADA,EAAK,YAAY,EACjB,EAAc,KAAK;IAClB,CAAC,EAAK,CAAC;CAEV,IAAM,IAAe,EACnB,OAAO,MAAsC;AAE3C,EADA,EAAM,gBAAgB,EACtB,EAAc,KAAK;EAEnB,IAAM,IAAU,EAAK,MAAM;AAC3B,MAAI,EAAQ,SAAS,GAAG;AACtB,KAAc,EAAE,4BAA4B,CAAC;AAC7C;;AAGF,MAAI;GACF,IAAM,IAA+B,EACnC,MAAM,GACP;AAED,GADA,MAAM,EAAK,YAAY,EAAY,EACnC,GAAW;UACL;GACN,IAAM,IAAc,EAAK,OAAO;AAChC,KAAc,KAAe,EAAE,qCAAqC,CAAC;;IAGzE;EAAC;EAAM;EAAM;EAAW;EAAE,CAC3B,EAEK,IACJ,EAAK,aAAa,OAEd,EAAE,0BAA0B,GAD5B,EAAE,6BAA6B,EAAE,OAAO,EAAK,WAAW,CAAC,EAGzD,IAAY,KAAc,EAAK,OAAO,WAAW;AAEvD,QAEE,kBAAC,QAAD;EAAM,WAAW;EAAoB,UAAU;EAAc,YAAA;YAA7D,CACE,kBAAC,OAAD;GAAK,WAAW;aAAhB;IACE,kBAAC,KAAD;KAAG,WAAW;eAAgB;KAAW,CAAA;IACxC,KAAa,OAA4C,OAArC,kBAAC,GAAD,EAAA,UAAY,GAAsB,CAAA;IACvD,kBAAC,GAAD;KACE,OAAO,EAAE,sBAAsB;KAC/B,MAAK;KACL,MAAK;KACL,OAAO;KACP,WAAW,MAAU;AAEnB,MADA,EAAQ,EAAM,OAAO,MAAM,EAC3B,EAAc,KAAK;;KAErB,aAAa,EAAE,4BAA4B;KAC3C,cAAa;KACb,WAAA;KACA,UAAA;KACA,CAAA;IACE;MACN,kBAAC,OAAD;GAAK,WAAW;aAAhB,CACE,kBAAC,GAAD;IACE,MAAK;IACL,SAAQ;IACR,MAAK;IACL,WAAW;IACX,eAAe;AAEb,KADA,EAAK,OAAO,EACZ,GAAQ;;cAGT,EAAE,wBAAwB;IACpB,CAAA,EACT,kBAAC,GAAD;IAAQ,MAAK;IAAS,MAAK;IAAQ,WAAW,EAAK;cAChD,EAAE,0BAA0B;IACtB,CAAA,CACL;KACD;;;;;AC3GX,SAAgB,EAAkB,GAA4B;CAC5D,IAAM,IAAY,IAAI,WAAW,EAAM,EACnC,IAAS;AACb,MAAK,IAAM,KAAQ,EACjB,MAAU,OAAO,aAAa,EAAK;AAErC,QAAO,KAAK,EAAO,CAChB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,IAAI,CACnB,QAAQ,OAAO,GAAG;;AAMvB,SAAgB,EAAkB,GAA4B;CAC5D,IAAM,IAAa,EAAM,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,EACxD,IAAY,EAAW,SAAS,GAClC,IAAU;AACd,KAAI,MAAc,EAChB,KAAU;UACD,MAAc,EACvB,KAAU;UACD,MAAc,EACvB,OAAU,MAAM,kCAAkC;CAEpD,IAAM,IAAS,GAAG,IAAa,KACzB,IAAS,KAAK,EAAO,EACrB,IAAS,IAAI,WAAW,EAAO,OAAO;AAC5C,MAAK,IAAI,IAAI,GAAG,IAAI,EAAO,QAAQ,KAAK,EACtC,GAAO,KAAK,EAAO,WAAW,EAAE;AAElC,QAAO,EAAO;;AAYhB,SAAgB,EACd,GAC+B;AAC/B,KAAI,EAAE,aAAiB,cACrB,QAAO;AAGT,SAAQ,EAAM,MAAd;EACE,KAAK;EACL,KAAK,aACH,QAAO;EACT,KAAK,oBACH,QAAO;EACT,KAAK;EACL,KAAK,oBACH,QAAO;EACT,QACE,QAAO;;;AAOb,SAAgB,EAAe,GAAwC;AAKrE,QAJI,EAAkB,aAAa,KAC1B,IAEI,IAAI,SAAS,EAAkB,CAChC,UAAU,IAAI,GAAM;;;;AC8LlC,IAAM,IAAe;CACnB,YAAY;CACZ,gBAAgB;CAChB,WAAW;CACX,UAAU;CACV,UAAU;CACX,EAEY,KAAiB,YACA;CAC1B,IAAM,EAAE,SAAM,GAAsB,EAC9B,CAAC,GAAW,KAAgB,EAAkB,GAAM,EACpD,CAAC,GAAO,KAAY,EAA2B,KAAK,EACpD,CAAC,GAAM,KAAW,EAAsB,KAAK,EAC7C,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAkB,KAAuB,EAAuB,EAAE,CAAC,EACpE,CAAC,GAAW,KAAgB,EAAS,EAAa,EAElD,IAAsB,EAAU,MAAM,QACtC,IAAuB,EAAU,OAAO,QACxC,IAA4B,EAAU,YAAY,QAClD,IAAkC,EAAU,kBAAkB,QAC9D,IACJ,EAAU,mBAAmB,QACzB,IAAiC,EAAU,kBAAkB,QAC7D,IACJ,EAAU,oBAAoB,QAE1B,IAA2B,EAAE,iCAAiC,EAC9D,IAAyC,EAC7C,iCACD,EACK,IAA6B,EAAE,6BAA6B,EAC5D,IAAyB,EAAE,qCAAqC,EAChE,IAAgC,EACpC,uCACD,EACK,IAA6B,EAAE,mCAAmC,EAClE,IAA6B,EAAE,mCAAmC,EAClE,IAA4B,kBAE5B,IAAQ,QAAkB;AAK9B,EAJA,EAAS,KAAK,EACd,EAAQ,KAAK,EACb,EAAe,KAAK,EACpB,EAAoB,EAAE,CAAC,EACvB,EAAa,EAAa;IACzB,EAAE,CAAC,EAEA,IAAa,QAAkB;AACnC,IAAS,KAAK;IACb,EAAE,CAAC,EAEA,IAA6B,GAChC,MAAsC;EACrC,IAAM,IAAa,EAAQ,cAAc,MACnC,IAAiB,EAAQ,kBAAkB,MAC3C,IAAW,EAAQ,YAAY,MAC/B,IAAW,EAAQ,YAAY;AAuBrC,SArBA,GAAc,OACL;GACL,GAAG;GACH;GACA;GACA;GACA;GACD,EACD,EAEE,EAAQ,gBAAgB,QAAQ,KAAY,QAC9C,EAAQ,EACN,IAAI,EAAQ,aAAa,IAC1B,CAAC,EACK,aAGL,MAAa,UAAU,KAAkB,OACpC,iBAGF;IAET,EAAE,CACH,EAEK,IAAoB,GACvB,MAGG,OAAO,KAAU,cADjB,MAEC,YAAY,KAAS,YAAY,IAGtC,EAAE,CACH,EAEK,IAAiB,GACpB,MAA4C;AAC3C,UAAQ,GAAR;GACE,KAAK,sBACH,QAAO,EAAE,2CAA2C;GACtD,KAAK,iBACH,QAAO,EAAE,sCAAsC;GACjD,KAAK,eACH,QAAO,EAAE,oCAAoC;GAC/C,KAAK,iBACH,QAAO,EAAE,iCAAiC;GAC5C,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA+B,GAClC,MAA0D;AACzD,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO,EAAE,qCAAqC;GAChD,KAAK,iBACH,QAAO,EAAE,iCAAiC;GAC5C,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA6B,GAChC,MAAwD;AACvD,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO,EAAE,mCAAmC;GAC9C,KAAK,oBACH,QAAO,EAAE,+BAA+B;GAC1C,KAAK,wBACH,QAAO,EAAE,mCAAmC;GAC9C,KAAK,iBACH,QAAO,EAAE,6BAA6B;GACxC,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA8B,GACjC,MAAyD;AACxD,UAAQ,GAAR;GACE,KAAK,0BACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,oBACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,oBACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,iBACH,QAAO,EAAE,6BAA6B;GACxC,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAAuB,GAC1B,MAAkD;AACjD,UAAQ,GAAR;GACE,KAAK,0BACH,QAAO,EAAE,mCAAmC;GAC9C,KAAK,oBACH,QAAO,EAAE,0BAA0B;GACrC,KAAK,eACH,QAAO,EAAE,8BAA8B;GACzC,KAAK,oBACH,QAAO,EAAE,kCAAkC;GAC7C,KAAK,iBACH,QAAO,EAAE,qCAAqC;GAChD,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA4B,GAC/B,MAAuD;AACtD,UAAQ,GAAR;GACE,KAAK,gBACH,QAAO,EAAE,4CAA4C;GACvD,KAAK,gBACH,QAAO,EAAE,uCAAuC;GAClD,KAAK,mBACH,QAAO,EAAE,+CAA+C;GAC1D,KAAK,oBACH,QAAO,EAAE,gDAAgD;GAC3D,KAAK,4BACH,QAAO,EAAE,uDAAuD;GAClE,KAAK,eACH,QAAO,EAAE,2CAA2C;GACtD,KAAK,iBACH,QAAO,EAAE,6CAA6C;GACxD,KAAK,iBACH,QAAO,EAAE,uCAAuC;GAClD,QACE,QAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAAsB,EAC1B,OACE,MAEO,IAAI,SAAS,GAAS,MAAW;AACtC,IAAkC;GAChC,WAAW,EAAE,UAAO;GACpB,cAAc,MAAa;IACzB,IAAM,IAAa,EAAS,qBACxB,IAAU;AAEd,QAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY;MACjD,qBAAqB;MACrB,WAAW;MACZ,CAAC;AACF,SAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAU,EAAQ;;IAGpB,IAAM,IAAU,EAAQ,QAAQ,KAAK,MAC5B,EAAK,OACZ,EACI,IAAS,EAAQ,eAAe;AAGtC,IAFA,EAAoB,EAAQ,EAC5B,EAAe,EAAO,EACtB,EAAQ;KAAE;KAAS,aAAa;KAAQ,CAAC;;GAE3C,eAAe;IACb,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,IADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEpB,CAAC;GACF,EAEJ;EACE;EACA;EACA;EACA;EACD,CACF,EAEK,IAAQ,EACZ,OAAO,OACL,EAAa,GAAK,EAClB,EAAS,KAAK,EACd,GAAc,OACL;EACL,GAAG;EACH,WAAW,EAAY;EACxB,EACD,EAEK,IAAI,SAAS,GAAS,MAAW;AACtC,IAAoB;GAClB,WAAW,EACT,OAAO,GACR;GACD,cAAc,MAAa;AACzB,MAAa,GAAM;IACnB,IAAM,IAAa,EAAS,OACxB,IAAkC;AAEtC,QAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY;MACjD,qBAAqB;MACrB,WAAW;MACZ,CAAC;AACF,SAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAc,EAAW,WAAW;UAEpC,KAAc;AAGhB,QAAI,KAAe,MAAM;KACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;IAGF,IAAM,IAAS,EAA2B,EAAY;AACtD,QAAI,MAAW,aAAa,MAAW,gBAAgB;AACrD,OAAQ,EAAO;AACf;;IAGF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,IADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEnB,eAAe;AACb,MAAa,GAAM;IACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,IADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEpB,CAAC;GACF,GAEJ;EACE;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,IAAc,EAClB,OAAO,MAAgD;EACrD,IAAM,EAAE,sBAAmB;AAC3B,MAAI,KAAkB,MAAM;GAC1B,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,UADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;AAMlC,SAHA,EAAa,GAAK,EAClB,EAAS,KAAK,EAEP,IAAI,SAAS,GAAS,MAAW;AACtC,KAA0B;IACxB,WAAW,EACT,OAAO;KACL;KACA,MAAM,EAAY;KACnB,EACF;IACD,cAAc,MAAa;AACzB,OAAa,GAAM;KACnB,IAAM,IAAa,EAAS,aACxB,IAAkC;AAEtC,SAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;AACF,UAAI,CAAC,EAAQ,IAAI;OACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,UAAc,EAAW,WAAW;WAEpC,KAAc;AAGhB,SAAI,KAAe,MAAM;MACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAIF,SADe,EAA2B,EAAY,KACvC,WAAW;AACxB,SAAS;AACT;;KAGF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEnB,eAAe;AACb,OAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,IAAmB,EACvB,OAAO,EAAE,eAAqD;AAC5D,MAAI,OAAO,SAAW,KAAa;GACjC,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,UADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;AAYlC,SATA,EAAa,GAAK,EAClB,EAAS,KAAK,EACd,GAAc,OACL;GACL,GAAG;GACH,WAAW;GACZ,EACD,EAEK,IAAI,SAAS,GAAS,MAAW;AACtC,KAAgC;IAC9B,WAAW,EACT,UACD;IACD,cAAc,MAAa;KACzB,IAAM,IAAa,EAAS,mBACxB,IAAU;AAEd,SAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;AACF,UAAI,CAAC,EAAQ,IAAI;AACf,SAAa,GAAM;OACnB,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,UAAU,EAAQ;;AAKpB,MAAM,YAAY;AAChB,UAAI;OACF,IAAM,IAAa,MAAM,UAAU,YAAY,IAAI,EACjD,WAAW;QACT,kBAAkB,EAAQ,iBAAiB,KACxC,OACQ;SACL,IAAI,EAAkB,EAAa;SACnC,MAAM;SACP,EAEJ;QACD,WAAW,EAAkB,EAAQ,UAAU;QAC/C,MAAM,EAAQ;QACd,kBAAkB;QACnB,EACF,CAAC;AAEF,WAAI,KAAa,KACf,OAAU,MACR,+CACD;OAGH,IAAM,IACJ,EAAU,UACN,IAAY,EAChB,EAAkB,kBACnB;AAED,SAAiC;QAC/B,WAAW,EACT,OAAO;SACL,WAAW,EAAQ;SACnB,gBAAgB,EAAQ;SACxB,cAAc,EAAU;SACxB;SACA,YACE,EAAkB,cAAc,OAE5B,OADA,EAAkB,EAAkB,WAAW;SAEtD,EACF;QACD,cAAc,MAAmB;AAC/B,WAAa,GAAM;SACnB,IAAM,IAAa,EAAe,oBAC9B,IAAkC;AAEtC,aAAI,EAAkB,EAAW,EAAE;UACjC,IAAM,IAAU,EAAuB,GAAY;WACjD,qBAAqB;WACrB,WAAW;WACZ,CAAC;AACF,cAAI,CAAC,EAAQ,IAAI;WACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,WADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,cAAc,EAAW,WAAW;eAEpC,KAAc;AAGhB,aAAI,KAAe,MAAM;UACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,UADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;SAGF,IAAM,IAAS,EAA2B,EAAY;AACtD,aAAI,MAAW,WAAW;AACxB,YAAQ,EAAO;AACf;;SAEF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,SADA,EAAS,EAAU,EACnB,EAAO,EAAU;;QAEnB,eAAe;AACb,WAAa,GAAM;SACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,SADA,EAAS,EAAU,EACnB,EAAO,EAAU;;QAEpB,CAAC;eACK,GAAiB;AACxB,SAAa,GAAM;OACnB,IAAM,IAAuB,EAC3B,SACE,aAA2B,QACvB,EAAgB,UAChB,gCACP;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;;SAEjB;;IAEN,eAAe;AACb,OAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,IAAmB,EACvB,OACE,MACyB;AACzB,MAAI,KAAkC,MAAM;GAC1C,IAAM,IAAuB,EAC3B,SAAS,2CACV;AAED,UADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;AAMlC,SAHA,EAAa,GAAK,EAClB,EAAS,KAAK,EAEP,IAAI,SAAS,GAAS,MAAW;AACtC,KAA+B;IAC7B,WAAW,EACT,OAAO;KACL,OAAO,EAAY;KACnB,UAAU,EAAY;KACtB,sBAAsB,EAAY;KACnC,EACF;IACD,cAAc,MAAa;AACzB,OAAa,GAAM;KACnB,IAAM,IAAa,EAAS,kBACxB,IAAkC;AAEtC,SAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;AACF,UAAI,CAAC,EAAQ,IAAI;OACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;AAED,OADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,UAAc,EAAW,WAAW;WAEpC,KAAc;AAGhB,SAAI,KAAe,MAAM;MACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;KAGF,IAAM,IAAS,EAA2B,EAAY;AACtD,SAAI,MAAW,aAAa,MAAW,gBAAgB;AACrD,QAAQ,EAAO;AACf;;KAEF,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEnB,eAAe;AACb,OAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,KAAS,EAAY,aACzB,EAAa,GAAK,EAEX,IAAI,SAAS,GAAS,MAAW;AACtC,IAAqB;GACnB,WAAW,EAAE;GACb,cAAc,MAAa;AACzB,MAAa,GAAM;IACnB,IAAM,IAAa,EAAS,QACxB,IAAiC;AAErC,QAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY,EACjD,qBAAqB,GACtB,CAAC;AACF,SAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAAE,SAAS,EAAQ,SAAS;AAEzD,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;KAGF,IAAM,IAAkB,EACtB,EAAW,SAAS,aAAa,MACjC,EACD;AACD,SAAI,CAAC,EAAgB,IAAI;MACvB,IAAM,IAAuB,EAC3B,SAAS,EAAgB,SAC1B;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAiB,EAAgB;WAC5B;KACL,IAAM,IAAkB,EACtB,EAAW,aAAa,MACxB,EACD;AACD,SAAI,CAAC,EAAgB,IAAI;MACvB,IAAM,IAAuB,EAC3B,SAAS,EAAgB,SAC1B;AAED,MADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AAEF,SAAiB,EAAgB;;AAGnC,QAAI,CAAC,GAAgB;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAED,KADA,EAAS,EAAU,EACnB,EAAO,EAAU;AACjB;;AASF,IANA,aAAa,WAAW,aAAa,EACrC,aAAa,WAAW,cAAc,EACtC,EAAQ,KAAK,EACb,EAAa,EAAa,EAC1B,GAAiB,EAEjB,GAAS;;GAEX,eAAe;AACb,MAAa,GAAM;IACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;AAID,IAHA,EAAS,EAAU,EACnB,GAAiB,EAEjB,EAAO,EAAU;;GAEpB,CAAC;GACF,GACD;EAAC;EAAsB;EAA2B;EAAkB,CAAC,EAElE,KACJ,KACA,EAAU,MAAM,cAChB,EAAU,OAAO,cACjB,EAAU,YAAY,cACtB,EAAU,kBAAkB,cAC5B,EAAU,mBAAmB,eAC5B,EAAU,kBAAkB,cAAc,OAC3C,EAAU,oBAAoB;AAEhC,QAAO;EACL,YAAY,EAAU;EACtB,gBAAgB,EAAU;EAC1B,UAAU,EAAU;EACpB,UAAU,EAAU;EACpB,WAAW,EAAU;EACrB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;EACA;EACA;EACA;EACD"}

package/lib/esm/{useBackofficeAuth-BHteJQzA.js → useBackofficeAuth-L9k9i9BI.js}

@@ -1,6 +1,6 @@
 import { t as e } from "./useRelayEnvironment-vQ86aW-n.js";
-import { n as t } from "./sprinkles.css.ts.vanilla-n-NK_DwW.js";
-import { t as n } from "./useAuth-AczFS-oL.js";
+import { n as t } from "./BackofficeConfigContext-R0t1owTI.js";
+import { t as n } from "./useAuth-DzWJXJ_9.js";
 import { useCallback as r, useMemo as i, useState as a } from "react";
 import * as o from "react-relay";
 //#region src/hooks/useBackofficeAuth.ts
@@ -86,4 +86,4 @@ function d() {
 //#endregion
 export { d as t };
 
-//# sourceMappingURL=useBackofficeAuth-BHteJQzA.js.map
+//# sourceMappingURL=useBackofficeAuth-L9k9i9BI.js.map

package/lib/esm/{useBackofficeAuth-BHteJQzA.js.map → useBackofficeAuth-L9k9i9BI.js.map}

@@ -1 +1 @@
-{"version":3,"file":"useBackofficeAuth-BHteJQzA.js","names":[],"sources":["../../src/hooks/useBackofficeAuth.ts"],"sourcesContent":["import { useCallback, useMemo, useState } from 'react';\nimport * as ReactRelay from 'react-relay';\nimport type { GraphQLTaggedNode, PayloadError } from 'relay-runtime';\n\nimport {\n  createUseAuth,\n  type UseAuthReturn,\n  type AcceptInvitationResponse,\n  type AcceptInvitationVariables,\n  type BeginAuthenticationResponse,\n  type BeginAuthenticationVariables,\n  type BeginPasskeyLoginResponse,\n  type BeginPasskeyLoginVariables,\n  type CompleteMfaResponse,\n  type CompleteMfaVariables,\n  type FinishPasskeyLoginResponse,\n  type FinishPasskeyLoginVariables,\n  type LoginResponse,\n  type LoginVariables,\n  type LogoutResponse,\n  type LogoutVariables,\n} from './useAuth.js';\nimport { useBackofficeConfig } from '../provider/BackofficeConfigContext.js';\nimport type { BackofficeLazyValue } from '../provider/lazyValue.js';\nimport { useRelayEnvironment } from '../relay/useRelayEnvironment.js';\n\nconst { commitMutation } = ReactRelay;\n\ntype MutationCommitConfig<TVariables, TResponse> = {\n  variables: TVariables;\n  onCompleted?: (\n    response: TResponse,\n    errors: readonly PayloadError[] | null,\n  ) => void;\n  onError?: (error: Error) => void;\n};\n\nconst toMutationLoadError = (error: unknown): Error => {\n  if (error instanceof Error) {\n    return error;\n  }\n  return new Error('Unable to load auth mutation.');\n};\n\nconst useDeferredMutation = <TVariables extends object, TResponse>(\n  loadMutation: () => Promise<GraphQLTaggedNode | null>,\n) => {\n  const relayEnvironment = useRelayEnvironment();\n  const [inFlightCount, setInFlightCount] = useState(0);\n\n  const commit = useCallback(\n    (config: MutationCommitConfig<TVariables, TResponse>) => {\n      setInFlightCount((count) => {\n        return count + 1;\n      });\n\n      const finish = () => {\n        setInFlightCount((count) => {\n          return Math.max(0, count - 1);\n        });\n      };\n\n      loadMutation()\n        .then((mutation) => {\n          if (mutation == null) {\n            throw new Error('Missing auth mutation config.');\n          }\n\n          commitMutation(relayEnvironment, {\n            mutation,\n            variables: config.variables,\n            onCompleted: (response, errors) => {\n              finish();\n              config.onCompleted?.(response as TResponse, errors ?? null);\n            },\n            onError: (error) => {\n              finish();\n              config.onError?.(error);\n            },\n          });\n        })\n        .catch((error: unknown) => {\n          finish();\n          config.onError?.(toMutationLoadError(error));\n        });\n    },\n    [loadMutation, relayEnvironment],\n  );\n\n  return {\n    commit,\n    isInFlight: inFlightCount > 0,\n  };\n};\n\nconst loadOptionalMutation = async <TConfig>(\n  eagerMutation: GraphQLTaggedNode | null | undefined,\n  lazyConfig: BackofficeLazyValue<TConfig> | null | undefined,\n  selectMutation: (config: TConfig) => GraphQLTaggedNode,\n): Promise<GraphQLTaggedNode | null> => {\n  if (eagerMutation != null) {\n    return eagerMutation;\n  }\n  if (lazyConfig == null) {\n    return null;\n  }\n  const loadedConfig = await lazyConfig.load();\n  return selectMutation(loadedConfig);\n};\n\n/**\n * Provides auth actions/state backed by Relay mutations from BackofficeProvider.\n */\nexport function useBackofficeAuth(): UseAuthReturn {\n  const { auth: authConfig } = useBackofficeConfig();\n  const { commit: commitLogin, isInFlight: isLoginInFlight } =\n    useDeferredMutation<LoginVariables, LoginResponse>(\n      useCallback(async () => {\n        const loginConfig = authConfig.login.get();\n        return loadOptionalMutation(\n          loginConfig?.loginMutation,\n          authConfig.login,\n          (config) => {\n            return config.loginMutation;\n          },\n        );\n      }, [authConfig.login]),\n    );\n  const { commit: commitLogout, isInFlight: isLogoutInFlight } =\n    useDeferredMutation<LogoutVariables, LogoutResponse>(\n      useCallback(async () => {\n        const logoutConfig = await authConfig.logout.load();\n        return logoutConfig.logoutMutation;\n      }, [authConfig.logout]),\n    );\n  const { commit: commitCompleteMfa, isInFlight: isCompleteMfaInFlight } =\n    useDeferredMutation<CompleteMfaVariables, CompleteMfaResponse>(\n      useCallback(async () => {\n        return loadOptionalMutation(\n          authConfig.login.get()?.completeMfaMutation,\n          authConfig.completeMfa,\n          (config) => {\n            return config.completeMfaMutation;\n          },\n        );\n      }, [authConfig.completeMfa, authConfig.login]),\n    );\n  const {\n    commit: commitBeginPasskeyLogin,\n    isInFlight: isBeginPasskeyLoginInFlight,\n  } = useDeferredMutation<\n    BeginPasskeyLoginVariables,\n    BeginPasskeyLoginResponse\n  >(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.beginPasskeyLoginMutation,\n        authConfig.passkeyLogin,\n        (config) => {\n          return config.beginPasskeyLoginMutation;\n        },\n      );\n    }, [authConfig.login, authConfig.passkeyLogin]),\n  );\n  const {\n    commit: commitFinishPasskeyLogin,\n    isInFlight: isFinishPasskeyLoginInFlight,\n  } = useDeferredMutation<\n    FinishPasskeyLoginVariables,\n    FinishPasskeyLoginResponse\n  >(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.finishPasskeyLoginMutation,\n        authConfig.passkeyLogin,\n        (config) => {\n          return config.finishPasskeyLoginMutation;\n        },\n      );\n    }, [authConfig.login, authConfig.passkeyLogin]),\n  );\n  const {\n    commit: commitBeginAuthentication,\n    isInFlight: isBeginAuthenticationInFlight,\n  } = useDeferredMutation<\n    BeginAuthenticationVariables,\n    BeginAuthenticationResponse\n  >(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.beginAuthenticationMutation,\n        authConfig.authentication,\n        (config) => {\n          return config.beginAuthenticationMutation;\n        },\n      );\n    }, [authConfig.authentication, authConfig.login]),\n  );\n  const {\n    commit: commitAcceptInvitation,\n    isInFlight: isAcceptInvitationInFlight,\n  } = useDeferredMutation<AcceptInvitationVariables, AcceptInvitationResponse>(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.acceptInvitationMutation,\n        authConfig.acceptInvitation,\n        (config) => {\n          return config.acceptInvitationMutation;\n        },\n      );\n    }, [authConfig.acceptInvitation, authConfig.login]),\n  );\n  const hasAcceptInvitationMutation =\n    authConfig.login.get()?.acceptInvitationMutation != null ||\n    authConfig.acceptInvitation != null;\n\n  const useAuthWithMutations = useMemo(() => {\n    let acceptInvitation:\n      | {\n          commit: typeof commitAcceptInvitation;\n          isInFlight: boolean;\n        }\n      | undefined;\n    if (hasAcceptInvitationMutation) {\n      acceptInvitation = {\n        commit: commitAcceptInvitation,\n        isInFlight: isAcceptInvitationInFlight,\n      };\n    }\n    return createUseAuth({\n      login: { commit: commitLogin, isInFlight: isLoginInFlight },\n      logout: { commit: commitLogout, isInFlight: isLogoutInFlight },\n      completeMfa: {\n        commit: commitCompleteMfa,\n        isInFlight: isCompleteMfaInFlight,\n      },\n      beginPasskeyLogin: {\n        commit: commitBeginPasskeyLogin,\n        isInFlight: isBeginPasskeyLoginInFlight,\n      },\n      finishPasskeyLogin: {\n        commit: commitFinishPasskeyLogin,\n        isInFlight: isFinishPasskeyLoginInFlight,\n      },\n      beginAuthentication: {\n        commit: commitBeginAuthentication,\n        isInFlight: isBeginAuthenticationInFlight,\n      },\n      acceptInvitation,\n    });\n  }, [\n    commitAcceptInvitation,\n    commitBeginAuthentication,\n    commitBeginPasskeyLogin,\n    commitCompleteMfa,\n    commitFinishPasskeyLogin,\n    commitLogin,\n    commitLogout,\n    hasAcceptInvitationMutation,\n    isAcceptInvitationInFlight,\n    isBeginAuthenticationInFlight,\n    isBeginPasskeyLoginInFlight,\n    isCompleteMfaInFlight,\n    isFinishPasskeyLoginInFlight,\n    isLoginInFlight,\n    isLogoutInFlight,\n  ]);\n\n  return useAuthWithMutations();\n}\n"],"mappings":";;;;;;AA0BA,IAAM,EAAE,gBAAA,MAAmB,GAWrB,KAAuB,MACvB,aAAiB,QACZ,IAEF,gBAAI,MAAM,gCAAgC,EAG7C,KACJ,MACG;CACH,IAAM,IAAmB,GAAqB,EACxC,CAAC,GAAe,KAAoB,EAAS,EAAE;AAyCrD,QAAO;EACL,QAxCa,GACZ,MAAwD;AACvD,MAAkB,MACT,IAAQ,EACf;GAEF,IAAM,UAAe;AACnB,OAAkB,MACT,KAAK,IAAI,GAAG,IAAQ,EAAE,CAC7B;;AAGJ,MAAc,CACX,MAAM,MAAa;AAClB,QAAI,KAAY,KACd,OAAU,MAAM,gCAAgC;AAGlD,MAAe,GAAkB;KAC/B;KACA,WAAW,EAAO;KAClB,cAAc,GAAU,MAAW;AAEjC,MADA,GAAQ,EACR,EAAO,cAAc,GAAuB,KAAU,KAAK;;KAE7D,UAAU,MAAU;AAElB,MADA,GAAQ,EACR,EAAO,UAAU,EAAM;;KAE1B,CAAC;KACF,CACD,OAAO,MAAmB;AAEzB,IADA,GAAQ,EACR,EAAO,UAAU,EAAoB,EAAM,CAAC;KAC5C;KAEN,CAAC,GAAc,EAAiB,CACjC;EAIC,YAAY,IAAgB;EAC7B;GAGG,IAAuB,OAC3B,GACA,GACA,MAEI,MAGA,KAAc,OACT,OAGF,EADc,MAAM,EAAW,MAAM,CACT;AAMrC,SAAgB,IAAmC;CACjD,IAAM,EAAE,MAAM,MAAe,GAAqB,EAC5C,EAAE,QAAQ,GAAa,YAAY,MACvC,EACE,EAAY,YAEH,EADa,EAAW,MAAM,KAAK,EAE3B,eACb,EAAW,QACV,MACQ,EAAO,cAEjB,EACA,CAAC,EAAW,MAAM,CAAC,CACvB,EACG,EAAE,QAAQ,GAAc,YAAY,MACxC,EACE,EAAY,aACW,MAAM,EAAW,OAAO,MAAM,EAC/B,gBACnB,CAAC,EAAW,OAAO,CAAC,CACxB,EACG,EAAE,QAAQ,GAAmB,YAAY,MAC7C,EACE,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,qBACxB,EAAW,cACV,MACQ,EAAO,oBAEjB,EACA,CAAC,EAAW,aAAa,EAAW,MAAM,CAAC,CAC/C,EACG,EACJ,QAAQ,GACR,YAAY,MACV,EAIF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,2BACxB,EAAW,eACV,MACQ,EAAO,0BAEjB,EACA,CAAC,EAAW,OAAO,EAAW,aAAa,CAAC,CAChD,EACK,EACJ,QAAQ,GACR,YAAY,MACV,EAIF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,4BACxB,EAAW,eACV,MACQ,EAAO,2BAEjB,EACA,CAAC,EAAW,OAAO,EAAW,aAAa,CAAC,CAChD,EACK,EACJ,QAAQ,GACR,YAAY,MACV,EAIF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,6BACxB,EAAW,iBACV,MACQ,EAAO,4BAEjB,EACA,CAAC,EAAW,gBAAgB,EAAW,MAAM,CAAC,CAClD,EACK,EACJ,QAAQ,GACR,YAAY,MACV,EACF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,0BACxB,EAAW,mBACV,MACQ,EAAO,yBAEjB,EACA,CAAC,EAAW,kBAAkB,EAAW,MAAM,CAAC,CACpD,EACK,IACJ,EAAW,MAAM,KAAK,EAAE,4BAA4B,QACpD,EAAW,oBAAoB;AAsDjC,QApD6B,QAAc;EACzC,IAAI;AAYJ,SANI,MACF,IAAmB;GACjB,QAAQ;GACR,YAAY;GACb,GAEI,EAAc;GACnB,OAAO;IAAE,QAAQ;IAAa,YAAY;IAAiB;GAC3D,QAAQ;IAAE,QAAQ;IAAc,YAAY;IAAkB;GAC9D,aAAa;IACX,QAAQ;IACR,YAAY;IACb;GACD,mBAAmB;IACjB,QAAQ;IACR,YAAY;IACb;GACD,oBAAoB;IAClB,QAAQ;IACR,YAAY;IACb;GACD,qBAAqB;IACnB,QAAQ;IACR,YAAY;IACb;GACD;GACD,CAAC;IACD;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,EAE2B"}
+{"version":3,"file":"useBackofficeAuth-L9k9i9BI.js","names":[],"sources":["../../src/hooks/useBackofficeAuth.ts"],"sourcesContent":["import { useCallback, useMemo, useState } from 'react';\nimport * as ReactRelay from 'react-relay';\nimport type { GraphQLTaggedNode, PayloadError } from 'relay-runtime';\n\nimport {\n  createUseAuth,\n  type UseAuthReturn,\n  type AcceptInvitationResponse,\n  type AcceptInvitationVariables,\n  type BeginAuthenticationResponse,\n  type BeginAuthenticationVariables,\n  type BeginPasskeyLoginResponse,\n  type BeginPasskeyLoginVariables,\n  type CompleteMfaResponse,\n  type CompleteMfaVariables,\n  type FinishPasskeyLoginResponse,\n  type FinishPasskeyLoginVariables,\n  type LoginResponse,\n  type LoginVariables,\n  type LogoutResponse,\n  type LogoutVariables,\n} from './useAuth.js';\nimport { useBackofficeConfig } from '../provider/BackofficeConfigContext.js';\nimport type { BackofficeLazyValue } from '../provider/lazyValue.js';\nimport { useRelayEnvironment } from '../relay/useRelayEnvironment.js';\n\nconst { commitMutation } = ReactRelay;\n\ntype MutationCommitConfig<TVariables, TResponse> = {\n  variables: TVariables;\n  onCompleted?: (\n    response: TResponse,\n    errors: readonly PayloadError[] | null,\n  ) => void;\n  onError?: (error: Error) => void;\n};\n\nconst toMutationLoadError = (error: unknown): Error => {\n  if (error instanceof Error) {\n    return error;\n  }\n  return new Error('Unable to load auth mutation.');\n};\n\nconst useDeferredMutation = <TVariables extends object, TResponse>(\n  loadMutation: () => Promise<GraphQLTaggedNode | null>,\n) => {\n  const relayEnvironment = useRelayEnvironment();\n  const [inFlightCount, setInFlightCount] = useState(0);\n\n  const commit = useCallback(\n    (config: MutationCommitConfig<TVariables, TResponse>) => {\n      setInFlightCount((count) => {\n        return count + 1;\n      });\n\n      const finish = () => {\n        setInFlightCount((count) => {\n          return Math.max(0, count - 1);\n        });\n      };\n\n      loadMutation()\n        .then((mutation) => {\n          if (mutation == null) {\n            throw new Error('Missing auth mutation config.');\n          }\n\n          commitMutation(relayEnvironment, {\n            mutation,\n            variables: config.variables,\n            onCompleted: (response, errors) => {\n              finish();\n              config.onCompleted?.(response as TResponse, errors ?? null);\n            },\n            onError: (error) => {\n              finish();\n              config.onError?.(error);\n            },\n          });\n        })\n        .catch((error: unknown) => {\n          finish();\n          config.onError?.(toMutationLoadError(error));\n        });\n    },\n    [loadMutation, relayEnvironment],\n  );\n\n  return {\n    commit,\n    isInFlight: inFlightCount > 0,\n  };\n};\n\nconst loadOptionalMutation = async <TConfig>(\n  eagerMutation: GraphQLTaggedNode | null | undefined,\n  lazyConfig: BackofficeLazyValue<TConfig> | null | undefined,\n  selectMutation: (config: TConfig) => GraphQLTaggedNode,\n): Promise<GraphQLTaggedNode | null> => {\n  if (eagerMutation != null) {\n    return eagerMutation;\n  }\n  if (lazyConfig == null) {\n    return null;\n  }\n  const loadedConfig = await lazyConfig.load();\n  return selectMutation(loadedConfig);\n};\n\n/**\n * Provides auth actions/state backed by Relay mutations from BackofficeProvider.\n */\nexport function useBackofficeAuth(): UseAuthReturn {\n  const { auth: authConfig } = useBackofficeConfig();\n  const { commit: commitLogin, isInFlight: isLoginInFlight } =\n    useDeferredMutation<LoginVariables, LoginResponse>(\n      useCallback(async () => {\n        const loginConfig = authConfig.login.get();\n        return loadOptionalMutation(\n          loginConfig?.loginMutation,\n          authConfig.login,\n          (config) => {\n            return config.loginMutation;\n          },\n        );\n      }, [authConfig.login]),\n    );\n  const { commit: commitLogout, isInFlight: isLogoutInFlight } =\n    useDeferredMutation<LogoutVariables, LogoutResponse>(\n      useCallback(async () => {\n        const logoutConfig = await authConfig.logout.load();\n        return logoutConfig.logoutMutation;\n      }, [authConfig.logout]),\n    );\n  const { commit: commitCompleteMfa, isInFlight: isCompleteMfaInFlight } =\n    useDeferredMutation<CompleteMfaVariables, CompleteMfaResponse>(\n      useCallback(async () => {\n        return loadOptionalMutation(\n          authConfig.login.get()?.completeMfaMutation,\n          authConfig.completeMfa,\n          (config) => {\n            return config.completeMfaMutation;\n          },\n        );\n      }, [authConfig.completeMfa, authConfig.login]),\n    );\n  const {\n    commit: commitBeginPasskeyLogin,\n    isInFlight: isBeginPasskeyLoginInFlight,\n  } = useDeferredMutation<\n    BeginPasskeyLoginVariables,\n    BeginPasskeyLoginResponse\n  >(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.beginPasskeyLoginMutation,\n        authConfig.passkeyLogin,\n        (config) => {\n          return config.beginPasskeyLoginMutation;\n        },\n      );\n    }, [authConfig.login, authConfig.passkeyLogin]),\n  );\n  const {\n    commit: commitFinishPasskeyLogin,\n    isInFlight: isFinishPasskeyLoginInFlight,\n  } = useDeferredMutation<\n    FinishPasskeyLoginVariables,\n    FinishPasskeyLoginResponse\n  >(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.finishPasskeyLoginMutation,\n        authConfig.passkeyLogin,\n        (config) => {\n          return config.finishPasskeyLoginMutation;\n        },\n      );\n    }, [authConfig.login, authConfig.passkeyLogin]),\n  );\n  const {\n    commit: commitBeginAuthentication,\n    isInFlight: isBeginAuthenticationInFlight,\n  } = useDeferredMutation<\n    BeginAuthenticationVariables,\n    BeginAuthenticationResponse\n  >(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.beginAuthenticationMutation,\n        authConfig.authentication,\n        (config) => {\n          return config.beginAuthenticationMutation;\n        },\n      );\n    }, [authConfig.authentication, authConfig.login]),\n  );\n  const {\n    commit: commitAcceptInvitation,\n    isInFlight: isAcceptInvitationInFlight,\n  } = useDeferredMutation<AcceptInvitationVariables, AcceptInvitationResponse>(\n    useCallback(async () => {\n      return loadOptionalMutation(\n        authConfig.login.get()?.acceptInvitationMutation,\n        authConfig.acceptInvitation,\n        (config) => {\n          return config.acceptInvitationMutation;\n        },\n      );\n    }, [authConfig.acceptInvitation, authConfig.login]),\n  );\n  const hasAcceptInvitationMutation =\n    authConfig.login.get()?.acceptInvitationMutation != null ||\n    authConfig.acceptInvitation != null;\n\n  const useAuthWithMutations = useMemo(() => {\n    let acceptInvitation:\n      | {\n          commit: typeof commitAcceptInvitation;\n          isInFlight: boolean;\n        }\n      | undefined;\n    if (hasAcceptInvitationMutation) {\n      acceptInvitation = {\n        commit: commitAcceptInvitation,\n        isInFlight: isAcceptInvitationInFlight,\n      };\n    }\n    return createUseAuth({\n      login: { commit: commitLogin, isInFlight: isLoginInFlight },\n      logout: { commit: commitLogout, isInFlight: isLogoutInFlight },\n      completeMfa: {\n        commit: commitCompleteMfa,\n        isInFlight: isCompleteMfaInFlight,\n      },\n      beginPasskeyLogin: {\n        commit: commitBeginPasskeyLogin,\n        isInFlight: isBeginPasskeyLoginInFlight,\n      },\n      finishPasskeyLogin: {\n        commit: commitFinishPasskeyLogin,\n        isInFlight: isFinishPasskeyLoginInFlight,\n      },\n      beginAuthentication: {\n        commit: commitBeginAuthentication,\n        isInFlight: isBeginAuthenticationInFlight,\n      },\n      acceptInvitation,\n    });\n  }, [\n    commitAcceptInvitation,\n    commitBeginAuthentication,\n    commitBeginPasskeyLogin,\n    commitCompleteMfa,\n    commitFinishPasskeyLogin,\n    commitLogin,\n    commitLogout,\n    hasAcceptInvitationMutation,\n    isAcceptInvitationInFlight,\n    isBeginAuthenticationInFlight,\n    isBeginPasskeyLoginInFlight,\n    isCompleteMfaInFlight,\n    isFinishPasskeyLoginInFlight,\n    isLoginInFlight,\n    isLogoutInFlight,\n  ]);\n\n  return useAuthWithMutations();\n}\n"],"mappings":";;;;;;AA0BA,IAAM,EAAE,gBAAA,MAAmB,GAWrB,KAAuB,MACvB,aAAiB,QACZ,IAEF,gBAAI,MAAM,gCAAgC,EAG7C,KACJ,MACG;CACH,IAAM,IAAmB,GAAqB,EACxC,CAAC,GAAe,KAAoB,EAAS,EAAE;AAyCrD,QAAO;EACL,QAxCa,GACZ,MAAwD;AACvD,MAAkB,MACT,IAAQ,EACf;GAEF,IAAM,UAAe;AACnB,OAAkB,MACT,KAAK,IAAI,GAAG,IAAQ,EAAE,CAC7B;;AAGJ,MAAc,CACX,MAAM,MAAa;AAClB,QAAI,KAAY,KACd,OAAU,MAAM,gCAAgC;AAGlD,MAAe,GAAkB;KAC/B;KACA,WAAW,EAAO;KAClB,cAAc,GAAU,MAAW;AAEjC,MADA,GAAQ,EACR,EAAO,cAAc,GAAuB,KAAU,KAAK;;KAE7D,UAAU,MAAU;AAElB,MADA,GAAQ,EACR,EAAO,UAAU,EAAM;;KAE1B,CAAC;KACF,CACD,OAAO,MAAmB;AAEzB,IADA,GAAQ,EACR,EAAO,UAAU,EAAoB,EAAM,CAAC;KAC5C;KAEN,CAAC,GAAc,EAAiB,CACjC;EAIC,YAAY,IAAgB;EAC7B;GAGG,IAAuB,OAC3B,GACA,GACA,MAEI,MAGA,KAAc,OACT,OAGF,EADc,MAAM,EAAW,MAAM,CACT;AAMrC,SAAgB,IAAmC;CACjD,IAAM,EAAE,MAAM,MAAe,GAAqB,EAC5C,EAAE,QAAQ,GAAa,YAAY,MACvC,EACE,EAAY,YAEH,EADa,EAAW,MAAM,KAAK,EAE3B,eACb,EAAW,QACV,MACQ,EAAO,cAEjB,EACA,CAAC,EAAW,MAAM,CAAC,CACvB,EACG,EAAE,QAAQ,GAAc,YAAY,MACxC,EACE,EAAY,aACW,MAAM,EAAW,OAAO,MAAM,EAC/B,gBACnB,CAAC,EAAW,OAAO,CAAC,CACxB,EACG,EAAE,QAAQ,GAAmB,YAAY,MAC7C,EACE,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,qBACxB,EAAW,cACV,MACQ,EAAO,oBAEjB,EACA,CAAC,EAAW,aAAa,EAAW,MAAM,CAAC,CAC/C,EACG,EACJ,QAAQ,GACR,YAAY,MACV,EAIF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,2BACxB,EAAW,eACV,MACQ,EAAO,0BAEjB,EACA,CAAC,EAAW,OAAO,EAAW,aAAa,CAAC,CAChD,EACK,EACJ,QAAQ,GACR,YAAY,MACV,EAIF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,4BACxB,EAAW,eACV,MACQ,EAAO,2BAEjB,EACA,CAAC,EAAW,OAAO,EAAW,aAAa,CAAC,CAChD,EACK,EACJ,QAAQ,GACR,YAAY,MACV,EAIF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,6BACxB,EAAW,iBACV,MACQ,EAAO,4BAEjB,EACA,CAAC,EAAW,gBAAgB,EAAW,MAAM,CAAC,CAClD,EACK,EACJ,QAAQ,GACR,YAAY,MACV,EACF,EAAY,YACH,EACL,EAAW,MAAM,KAAK,EAAE,0BACxB,EAAW,mBACV,MACQ,EAAO,yBAEjB,EACA,CAAC,EAAW,kBAAkB,EAAW,MAAM,CAAC,CACpD,EACK,IACJ,EAAW,MAAM,KAAK,EAAE,4BAA4B,QACpD,EAAW,oBAAoB;AAsDjC,QApD6B,QAAc;EACzC,IAAI;AAYJ,SANI,MACF,IAAmB;GACjB,QAAQ;GACR,YAAY;GACb,GAEI,EAAc;GACnB,OAAO;IAAE,QAAQ;IAAa,YAAY;IAAiB;GAC3D,QAAQ;IAAE,QAAQ;IAAc,YAAY;IAAkB;GAC9D,aAAa;IACX,QAAQ;IACR,YAAY;IACb;GACD,mBAAmB;IACjB,QAAQ;IACR,YAAY;IACb;GACD,oBAAoB;IAClB,QAAQ;IACR,YAAY;IACb;GACD,qBAAqB;IACnB,QAAQ;IACR,YAAY;IACb;GACD;GACD,CAAC;IACD;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,EAE2B"}

package/lib/esm/{useBackofficeLazyValue-B0-ckL6e.js → useBackofficeLazyValue-Dnii1_dE.js}

@@ -1,4 +1,4 @@
-import { n as e } from "./sprinkles.css.ts.vanilla-n-NK_DwW.js";
+import { n as e } from "./BackofficeConfigContext-R0t1owTI.js";
 //#region src/provider/useBackofficeLazyValue.ts
 var t = (e) => {
 	if (e == null) return null;
@@ -28,4 +28,4 @@ var t = (e) => {
 //#endregion
 export { o as a, a as i, i as n, r, n as t };
 
-//# sourceMappingURL=useBackofficeLazyValue-B0-ckL6e.js.map
+//# sourceMappingURL=useBackofficeLazyValue-Dnii1_dE.js.map

package/lib/esm/{useBackofficeLazyValue-B0-ckL6e.js.map → useBackofficeLazyValue-Dnii1_dE.js.map}

@@ -1 +1 @@
-{"version":3,"file":"useBackofficeLazyValue-B0-ckL6e.js","names":[],"sources":["../../src/provider/useBackofficeLazyValue.ts"],"sourcesContent":["import type { BackofficeDashboardConfig } from '@plumile/backoffice-core/types.js';\n\nimport { useBackofficeConfig } from './BackofficeConfigContext.js';\nimport type {\n  BackofficeResolvedAuthLoginConfig,\n  BackofficeResolvedAuthLogoutConfig,\n  BackofficeResolvedAuthPasswordResetCompleteConfig,\n  BackofficeResolvedAuthPasswordResetRequestConfig,\n  BackofficeResolvedAuthSessionConfig,\n  BackofficeResolvedAuthVerifyEmailConfig,\n} from './types.js';\nimport type { BackofficeLazyValue } from './lazyValue.js';\n\nconst useResolvedLazyValue = <TValue>(\n  resource: BackofficeLazyValue<TValue> | null | undefined,\n): TValue | null => {\n  if (resource == null) {\n    return null;\n  }\n  const loadedValue = resource.get();\n  if (loadedValue != null) {\n    return loadedValue;\n  }\n  // React Suspense expects a pending promise to be thrown while the lazy value loads.\n  // eslint-disable-next-line @typescript-eslint/only-throw-error\n  throw resource.load();\n};\n\nexport const useBackofficeAuthSessionConfig =\n  (): BackofficeResolvedAuthSessionConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.session);\n    if (resolved == null) {\n      throw new Error('Missing backoffice auth session config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthLoginConfig =\n  (): BackofficeResolvedAuthLoginConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.login);\n    if (resolved == null) {\n      throw new Error('Missing backoffice auth login config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthLogoutConfig =\n  (): BackofficeResolvedAuthLogoutConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.logout);\n    if (resolved == null) {\n      throw new Error('Missing backoffice logout auth config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthPasswordResetRequestConfig =\n  (): BackofficeResolvedAuthPasswordResetRequestConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.passwordResetRequest);\n    if (resolved == null) {\n      throw new Error('Missing backoffice password reset request auth config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthPasswordResetCompleteConfig =\n  (): BackofficeResolvedAuthPasswordResetCompleteConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.passwordResetComplete);\n    if (resolved == null) {\n      throw new Error(\n        'Missing backoffice password reset completion auth config.',\n      );\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthVerifyEmailConfig =\n  (): BackofficeResolvedAuthVerifyEmailConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.verifyEmail);\n    if (resolved == null) {\n      throw new Error('Missing backoffice verify email auth config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeDashboardConfig =\n  (): BackofficeDashboardConfig | null => {\n    const { dashboard } = useBackofficeConfig();\n    return useResolvedLazyValue(dashboard);\n  };\n\nexport default useResolvedLazyValue;\n"],"mappings":";;AAaA,IAAM,KACJ,MACkB;AAClB,KAAI,KAAY,KACd,QAAO;CAET,IAAM,IAAc,EAAS,KAAK;AAClC,KAAI,KAAe,KACjB,QAAO;AAIT,OAAM,EAAS,MAAM;GAaV,UAC8B;CACvC,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,MAAM;AACjD,KAAI,KAAY,KACd,OAAU,MAAM,wCAAwC;AAE1D,QAAO;GAaE,UAC6C;CACtD,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,qBAAqB;AAChE,KAAI,KAAY,KACd,OAAU,MAAM,yDAAyD;AAE3E,QAAO;GAGE,UAC8C;CACvD,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,sBAAsB;AACjE,KAAI,KAAY,KACd,OAAU,MACR,4DACD;AAEH,QAAO;GAGE,UACoC;CAC7C,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,YAAY;AACvD,KAAI,KAAY,KACd,OAAU,MAAM,+CAA+C;AAEjE,QAAO;GAGE,UAC6B;CACtC,IAAM,EAAE,iBAAc,GAAqB;AAC3C,QAAO,EAAqB,EAAU"}
+{"version":3,"file":"useBackofficeLazyValue-Dnii1_dE.js","names":[],"sources":["../../src/provider/useBackofficeLazyValue.ts"],"sourcesContent":["import type { BackofficeDashboardConfig } from '@plumile/backoffice-core/types.js';\n\nimport { useBackofficeConfig } from './BackofficeConfigContext.js';\nimport type {\n  BackofficeResolvedAuthLoginConfig,\n  BackofficeResolvedAuthLogoutConfig,\n  BackofficeResolvedAuthPasswordResetCompleteConfig,\n  BackofficeResolvedAuthPasswordResetRequestConfig,\n  BackofficeResolvedAuthSessionConfig,\n  BackofficeResolvedAuthVerifyEmailConfig,\n} from './types.js';\nimport type { BackofficeLazyValue } from './lazyValue.js';\n\nconst useResolvedLazyValue = <TValue>(\n  resource: BackofficeLazyValue<TValue> | null | undefined,\n): TValue | null => {\n  if (resource == null) {\n    return null;\n  }\n  const loadedValue = resource.get();\n  if (loadedValue != null) {\n    return loadedValue;\n  }\n  // React Suspense expects a pending promise to be thrown while the lazy value loads.\n  // eslint-disable-next-line @typescript-eslint/only-throw-error\n  throw resource.load();\n};\n\nexport const useBackofficeAuthSessionConfig =\n  (): BackofficeResolvedAuthSessionConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.session);\n    if (resolved == null) {\n      throw new Error('Missing backoffice auth session config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthLoginConfig =\n  (): BackofficeResolvedAuthLoginConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.login);\n    if (resolved == null) {\n      throw new Error('Missing backoffice auth login config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthLogoutConfig =\n  (): BackofficeResolvedAuthLogoutConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.logout);\n    if (resolved == null) {\n      throw new Error('Missing backoffice logout auth config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthPasswordResetRequestConfig =\n  (): BackofficeResolvedAuthPasswordResetRequestConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.passwordResetRequest);\n    if (resolved == null) {\n      throw new Error('Missing backoffice password reset request auth config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthPasswordResetCompleteConfig =\n  (): BackofficeResolvedAuthPasswordResetCompleteConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.passwordResetComplete);\n    if (resolved == null) {\n      throw new Error(\n        'Missing backoffice password reset completion auth config.',\n      );\n    }\n    return resolved;\n  };\n\nexport const useBackofficeAuthVerifyEmailConfig =\n  (): BackofficeResolvedAuthVerifyEmailConfig => {\n    const { auth } = useBackofficeConfig();\n    const resolved = useResolvedLazyValue(auth.verifyEmail);\n    if (resolved == null) {\n      throw new Error('Missing backoffice verify email auth config.');\n    }\n    return resolved;\n  };\n\nexport const useBackofficeDashboardConfig =\n  (): BackofficeDashboardConfig | null => {\n    const { dashboard } = useBackofficeConfig();\n    return useResolvedLazyValue(dashboard);\n  };\n\nexport default useResolvedLazyValue;\n"],"mappings":";;AAaA,IAAM,KACJ,MACkB;AAClB,KAAI,KAAY,KACd,QAAO;CAET,IAAM,IAAc,EAAS,KAAK;AAClC,KAAI,KAAe,KACjB,QAAO;AAIT,OAAM,EAAS,MAAM;GAaV,UAC8B;CACvC,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,MAAM;AACjD,KAAI,KAAY,KACd,OAAU,MAAM,wCAAwC;AAE1D,QAAO;GAaE,UAC6C;CACtD,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,qBAAqB;AAChE,KAAI,KAAY,KACd,OAAU,MAAM,yDAAyD;AAE3E,QAAO;GAGE,UAC8C;CACvD,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,sBAAsB;AACjE,KAAI,KAAY,KACd,OAAU,MACR,4DACD;AAEH,QAAO;GAGE,UACoC;CAC7C,IAAM,EAAE,YAAS,GAAqB,EAChC,IAAW,EAAqB,EAAK,YAAY;AACvD,KAAI,KAAY,KACd,OAAU,MAAM,+CAA+C;AAEjE,QAAO;GAGE,UAC6B;CACtC,IAAM,EAAE,iBAAc,GAAqB;AAC3C,QAAO,EAAqB,EAAU"}

package/lib/types/auth/login/loginPage.css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loginPage.css.d.ts","sourceRoot":"","sources":["../../../../src/auth/login/loginPage.css.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,KAAK,QAIhB,CAAC;AAEH,eAAO,MAAM,WAAW,QAItB,CAAC;AAEH,eAAO,MAAM,MAAM,QAKjB,CAAC;AAEH,eAAO,MAAM,OAAO,QAOlB,CAAC;AAEH,eAAO,MAAM,WAAW,QAMtB,CAAC;AAEH,eAAO,MAAM,UAAU,QAOrB,CAAC;AAEH,eAAO,MAAM,UAAU,QAoBrB,CAAC;AAEH,eAAO,MAAM,KAAK,QAOhB,CAAC;AAEH,eAAO,MAAM,KAAK,QAIhB,CAAC;AAEH,eAAO,MAAM,SAAS,QAEpB,CAAC;AAEH,eAAO,MAAM,UAAU,QAMrB,CAAC;AAEH,eAAO,MAAM,MAAM,QAEjB,CAAC;AAEH,eAAO,MAAM,gBAAgB,QAoB3B,CAAC"}
+{"version":3,"file":"loginPage.css.d.ts","sourceRoot":"","sources":["../../../../src/auth/login/loginPage.css.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,KAAK,QAIhB,CAAC;AAEH,eAAO,MAAM,WAAW,QAItB,CAAC;AAEH,eAAO,MAAM,MAAM,QAKjB,CAAC;AAEH,eAAO,MAAM,OAAO,QAOlB,CAAC;AAEH,eAAO,MAAM,WAAW,QAMtB,CAAC;AAEH,eAAO,MAAM,UAAU,QAOrB,CAAC;AAEH,eAAO,MAAM,UAAU,QAoBrB,CAAC;AAEH,eAAO,MAAM,KAAK,QAOhB,CAAC;AAEH,eAAO,MAAM,KAAK,QAIhB,CAAC;AAEH,eAAO,MAAM,SAAS,QAEpB,CAAC;AAEH,eAAO,MAAM,UAAU,QAMrB,CAAC;AAEH,eAAO,MAAM,MAAM,QAEjB,CAAC;AAEH,eAAO,MAAM,gBAAgB,QAoB3B,CAAC"}

package/lib/types/components/backoffice/detail/backofficeDetailRelationLink.css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backofficeDetailRelationLink.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/detail/backofficeDetailRelationLink.css.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,IAAI,QA2Bf,CAAC;AAEH,eAAO,MAAM,KAAK,QAGhB,CAAC;AAEH,eAAO,MAAM,IAAI,QAGf,CAAC"}
+{"version":3,"file":"backofficeDetailRelationLink.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/detail/backofficeDetailRelationLink.css.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,IAAI,QA2Bf,CAAC;AAEH,eAAO,MAAM,KAAK,QAGhB,CAAC;AAEH,eAAO,MAAM,IAAI,QAGf,CAAC"}

package/lib/types/components/backoffice/filters/backofficeFilterAction.css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backofficeFilterAction.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/filters/backofficeFilterAction.css.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,MAAM,QAiCjB,CAAC;AAEH,eAAO,MAAM,IAAI,QAGf,CAAC"}
+{"version":3,"file":"backofficeFilterAction.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/filters/backofficeFilterAction.css.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,MAAM,QAiCjB,CAAC;AAEH,eAAO,MAAM,IAAI,QAGf,CAAC"}

package/lib/types/components/backoffice/layout/backofficeSidebarActions.css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backofficeSidebarActions.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/layout/backofficeSidebarActions.css.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY,QA8BvB,CAAC"}
+{"version":3,"file":"backofficeSidebarActions.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/layout/backofficeSidebarActions.css.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY,QA8BvB,CAAC"}

package/lib/types/components/backoffice/routing/backofficeRoutePendingBar.css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backofficeRoutePendingBar.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/routing/backofficeRoutePendingBar.css.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,IAAI,QAcf,CAAC;AAEH,eAAO,MAAM,GAAG,QASd,CAAC"}
+{"version":3,"file":"backofficeRoutePendingBar.css.d.ts","sourceRoot":"","sources":["../../../../../src/components/backoffice/routing/backofficeRoutePendingBar.css.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,IAAI,QAcf,CAAC;AAEH,eAAO,MAAM,GAAG,QASd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plumile/backoffice-react",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "description": "React provider and pages for Plumile backoffice",
   "type": "module",
   "license": "MIT",
@@ -158,10 +158,10 @@
     "npm": ">=8.0.0"
   },
   "dependencies": {
-    "@plumile/backoffice-core": "^0.1.76",
-    "@plumile/filter-query": "^0.1.76",
-    "@plumile/router": "^0.1.76",
-    "@plumile/ui": "^0.1.76",
+    "@plumile/backoffice-core": "^0.1.77",
+    "@plumile/filter-query": "^0.1.77",
+    "@plumile/router": "^0.1.77",
+    "@plumile/ui": "^0.1.77",
     "graphql-ws": "6.0.7",
     "i18next": "^25.8.18",
     "i18next-browser-languagedetector": "8.2.1",