@thunderid/react 1.13.0 → 1.14.0

package/dist/cjs/components/auth/flow/AuthOptionFactory.cjs

@@ -196,6 +196,17 @@ const createAuthComponentFromFlow = (component, formValues, touchedFields, formE
 		logger.warn(`${typeName} component type is not supported. Skipping render.`);
 		return null;
 	};
+	if (component.type === __thunderid_browser.EmbeddedFlowComponentType.Resend && options.renderResend) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+		fullWidth: true,
+		id: component.id,
+		onClick: () => options.onSubmit?.(component, {}, true),
+		disabled: isLoading || options.isTimeoutDisabled,
+		className: require_emotion.cx(options.buttonClassName, component.classes),
+		variant: "text",
+		color: "primary",
+		type: "button",
+		children: resolve(component.label)
+	}, key);
 	switch (component.type) {
 		case __thunderid_browser.EmbeddedFlowComponentType.TextInput:
 		case __thunderid_browser.EmbeddedFlowComponentType.PasswordInput:
@@ -643,6 +654,14 @@ const renderRecoveryComponents = (components, formValues, touchedFields, formErr
 	key: component.id || index
 })).filter((x) => x !== null);
 /**
+* Processes an array of components and renders them as React elements for attribute verification.
+*/
+const renderVerificationComponents = (components, formValues, touchedFields, formErrors, isLoading, isFormValid, resetForm, onInputChange, options) => components.map((component, index) => createAuthComponentFromFlow(component, formValues, touchedFields, formErrors, isLoading, isFormValid, resetForm, onInputChange, "verification", {
+	...options,
+	key: component.id ?? index,
+	renderResend: true
+})).filter((x) => x !== null);
+/**
 * Processes an array of components and renders them as React elements for invite user.
 * This is used by both InviteUser and AcceptInvite components.
 */
@@ -656,4 +675,5 @@ exports.renderInviteUserComponents = renderInviteUserComponents;
 exports.renderRecoveryComponents = renderRecoveryComponents;
 exports.renderSignInComponents = renderSignInComponents;
 exports.renderSignUpComponents = renderSignUpComponents;
+exports.renderVerificationComponents = renderVerificationComponents;
 //# sourceMappingURL=AuthOptionFactory.cjs.map

package/dist/cjs/components/auth/flow/AuthOptionFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AuthOptionFactory.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","richTextClassCache: string | undefined","authOptionIconClassCache: string | undefined","css","EmbeddedFlowComponentType","FieldType","providerId: any","providerMatches: any","theme: any","customRenderers: ComponentRendererMap","key: string | number","customRenderer: ComponentRenderer | undefined","rendered: ReactElement | null","identifier: string","isTouched: boolean","cx","value: string","error: string","fieldType: string","hasPrefixes: boolean","hasPostfix: boolean","prefixStateKey: string","affixPrefixKey","postfixStateKey: string","affixPostfixKey","defaultPrefixValue: string","selectedPrefix: string","AffixedField","createField","isDeviceUserCode: boolean","currentValue: string","reportedLength: number","otpLength: number | undefined","numericOnly: boolean","actionId: string","eventType: string","buttonText: string","componentVariant: string","shouldSkipValidation: boolean","EmbeddedFlowEventType","buttonType: HTMLButtonElement['type']","hasInvalidConsentApproval: boolean","isConsentApprovalBlocked","formData: Record<string, any>","consentPrompt: ConsentPromptData | undefined","isDeny: boolean","decisions: ConsentDecisions","ConsentConstants","getConsentOptionalKey","socialButtonClassName: string","GoogleButton","GitHubButton","FacebookButton","MicrosoftButton","LinkedInButton","SignInWithEthereumButton","SmsOtpButton","startIconEl: ReactElement | null","endIconEl: ReactElement | null","Button","variant: any","color: TypographyColor | undefined","textAlignClass: string","Typography","Divider","selectOptions: any","Select","DatePicker","BaseUserSelect","BaseAuthFlowSelect","BaseUserTypeSelect","formClass: string","blockComponents: any","richTextAction: EmbeddedFlowComponentAction | undefined","syntheticAction: EmbeddedFlowComponent","formData: Record<string, string>","handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined","anchor: HTMLAnchorElement | null","handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined","DOMPurify","explicitHeight: string","explicitWidth: string","ImageComponent","iconName: string","IconComponent: any","flowIconRegistry","direction: string","gap: number","align: string","justify: string","rawItems: string | number | undefined","parsedItems: number","items: number | null","isColumn: boolean","gridJustify: string","track: string","stackClass: string","stackChildren: (ReactElement | null)[]","consentPromptRawData: ConsentPromptData | string | undefined","Consent","textTemplate: string","timeoutMs: number","FlowTimer","sourceKey: string | undefined","CopyableText","pairs: KeyValuePair[]","KeyValueList"],"sources":["../../../../../src/components/auth/flow/AuthOptionFactory.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {CSSInterpolation} from '@emotion/css/create-instance';\nimport {\n  ConsentConstants,\n  FieldType,\n  FlowMetadataResponse,\n  EmbeddedFlowComponent,\n  EmbeddedFlowComponentAction,\n  EmbeddedFlowComponentType,\n  EmbeddedFlowTextVariant,\n  EmbeddedFlowEventType,\n  createPackageComponentLogger,\n  resolveFlowTemplateLiterals,\n  resolveEmojiUrisInHtml,\n  ConsentPurposeData,\n  ConsentPromptData,\n  ConsentDecisions,\n  ConsentPurposeDecision,\n  ConsentAttributeElement,\n  OrganizationUnitListResponse,\n  PrefixOption,\n  KeyValuePair,\n  parseKeyValuePairs,\n  FetchAuthFlows,\n  FetchUserTypes,\n  FetchUsers,\n  getConsentElementDecision,\n} from '@thunderid/browser';\nimport DOMPurify from 'dompurify';\nimport {ChangeEvent, cloneElement, CSSProperties, FormEvent, MouseEvent, ReactElement} from 'react';\nimport Consent from './Consent';\nimport {getConsentOptionalKey} from './ConsentCheckboxList';\nimport {createField} from './FieldFactory';\nimport FlowTimer from './FlowTimer';\nimport ImageComponent from './ImageComponent';\nimport {\n  ComponentRenderer,\n  ComponentRenderContext,\n  ComponentRendererMap,\n} from '../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport {UseTranslation} from '../../../hooks/useTranslation';\nimport {css, cx} from '../../../styles/emotion';\nimport {affixPostfixKey, affixPrefixKey} from '../../../utils/composeAffixedInputs';\nimport isConsentApprovalBlocked from '../../../utils/isConsentApprovalBlocked';\nimport AffixedField from '../../primitives/AffixedField/AffixedField';\nimport BaseAuthFlowSelect from '../../primitives/AuthFlowSelect/BaseAuthFlowSelect';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport DatePicker from '../../primitives/DatePicker/DatePicker';\nimport Divider from '../../primitives/Divider/Divider';\nimport flowIconRegistry from '../../primitives/Icons/flowIconRegistry';\nimport KeyValueList from '../../primitives/KeyValueList/KeyValueList';\nimport Select from '../../primitives/Select/Select';\nimport Typography from '../../primitives/Typography/Typography';\nimport {TypographyColor, TypographyVariant} from '../../primitives/Typography/Typography.styles';\nimport BaseUserSelect, {BaseUserSelectProps} from '../../primitives/UserSelect/BaseUserSelect';\nimport BaseUserTypeSelect from '../../primitives/UserTypeSelect/BaseUserTypeSelect';\nimport FacebookButton from '../buttons/FacebookButton';\nimport GitHubButton from '../buttons/GitHubButton';\nimport GoogleButton from '../buttons/GoogleButton';\nimport LinkedInButton from '../buttons/LinkedInButton';\nimport MicrosoftButton from '../buttons/MicrosoftButton';\nimport SignInWithEthereumButton from '../buttons/SignInWithEthereumButton';\nimport SmsOtpButton from '../buttons/SmsOtpButton';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'AuthOptionFactory',\n);\n\n/**\n * Replaces `emoji:` URIs embedded in HTML before DOMPurify sanitization.\n *\n * DOMPurify strips unknown URI schemes from attributes (e.g. `src=\"emoji:🦊\"` → `src=\"\"`).\n * This function converts:\n *   - `<img src=\"emoji:X\" alt=\"Y\">` → `<span role=\"img\" aria-label=\"Y\">X</span>`\n *   - Any remaining `emoji:X` text occurrences → `X`\n */\n\n// This module's functions (renderSignInComponents, etc.) are called imperatively from a\n// component's render, not React components/hooks themselves — so these classes can't be computed\n// at module scope: that runs at import time, before <ThunderIDProvider> has had a chance to\n// configure Emotion's CSP nonce, which would insert them into an un-nonced <style> tag. Instead\n// they're computed lazily, on first actual use (still just once — Emotion's own cache dedupes any\n// further calls to a no-op after that).\nlet richTextClassCache: string | undefined;\n\n/** Ensures rich-text content (including all inner elements from the server) always word-wraps. */\nfunction getRichTextClass(): string {\n  richTextClassCache ??= css`\n    overflow-wrap: anywhere;\n    & * {\n      overflow-wrap: anywhere;\n      word-break: break-word;\n    }\n    & .rich-text-align-left {\n      text-align: left;\n    }\n    & .rich-text-align-center {\n      text-align: center;\n    }\n    & .rich-text-align-right {\n      text-align: right;\n    }\n    & .rich-text-align-justify {\n      text-align: justify;\n    }\n    & a,\n    & .rich-text-link {\n      text-decoration: underline;\n    }\n    & span[role='img'] {\n      display: inline-block;\n    }\n  `;\n  return richTextClassCache;\n}\n\nlet authOptionIconClassCache: string | undefined;\n\nfunction getAuthOptionIconClass(): string {\n  authOptionIconClassCache ??= css({height: '1.25em', objectFit: 'contain', width: '1.25em'});\n  return authOptionIconClassCache;\n}\n\nexport type AuthType = 'signin' | 'signup' | 'recovery';\n\n/**\n * Get the appropriate FieldType for an input component.\n */\n/** Upper bound on STACK grid slots, so a mistyped `items` cannot render thousands of cells. */\nconst MAX_STACK_ITEMS = 12;\n\nconst getFieldType = (variant: EmbeddedFlowComponentType): FieldType => {\n  switch (variant) {\n    case EmbeddedFlowComponentType.EmailInput:\n      return FieldType.Email;\n    case EmbeddedFlowComponentType.PhoneInput:\n      return FieldType.Tel;\n    case EmbeddedFlowComponentType.PasswordInput:\n      return FieldType.Password;\n    case EmbeddedFlowComponentType.TextInput:\n    default:\n      return FieldType.Text;\n  }\n};\n\n/**\n * Get typography variant from component variant.\n */\nconst getTypographyVariant = (variant: string): any => {\n  const variantMap: Record<EmbeddedFlowTextVariant, TypographyVariant> = {\n    BODY_1: 'body1',\n    BODY_2: 'body2',\n    BUTTON_TEXT: 'button',\n    CAPTION: 'caption',\n    HEADING_1: 'h1',\n    HEADING_2: 'h2',\n    HEADING_3: 'h3',\n    HEADING_4: 'h4',\n    HEADING_5: 'h5',\n    HEADING_6: 'h6',\n    OVERLINE: 'overline',\n    SUBTITLE_1: 'subtitle1',\n    SUBTITLE_2: 'subtitle2',\n  };\n\n  return variantMap[variant] || 'h3';\n};\n\n/** Maps flow text color values to SDK typography color variants. */\nconst getTypographyColor = (color?: string): TypographyColor | undefined => {\n  switch (color?.toUpperCase()) {\n    case 'ERROR':\n      return 'error';\n    case 'WARNING':\n      return 'warning';\n    case 'SUCCESS':\n      return 'success';\n    case 'INFO':\n      return 'info';\n    case 'PRIMARY':\n      return 'primary';\n    case 'SECONDARY':\n      return 'secondary';\n    default:\n      return undefined;\n  }\n};\n\n/**\n * Check if a button text or action matches a social provider.\n */\nconst matchesSocialProvider = (\n  actionId: string,\n  eventType: string,\n  buttonText: string,\n  provider: string,\n  authType: AuthType,\n  /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\n  _componentVariant?: string,\n): boolean => {\n  const providerId: any = `${provider}_auth`;\n  const providerMatches: any = actionId === providerId || eventType === providerId;\n\n  // Social buttons usually have \"Sign in with X\" or \"Continue with X\" text,\n  // so also check button text for the provider name to increase chances of correct detection (especially for signup flows where action IDs are less standardized)\n  if (buttonText.toLowerCase().includes(provider)) {\n    return true;\n  }\n\n  // For signup, also check button text\n  if (authType === 'signup') {\n    return providerMatches || buttonText.toLowerCase().includes(provider);\n  }\n\n  return providerMatches;\n};\n\n/**\n * Create an auth component from flow component configuration.\n */\nconst createAuthComponentFromFlow = (\n  component: EmbeddedFlowComponent,\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  authType: AuthType,\n  options: {\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _theme?: any;\n    /** Additional data from the flow response, used for different dynamic data */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Current consent purpose being rendered. Set by CONSENT_PURPOSE block iteration. */\n    currentConsentPurpose?: ConsentPurposeData;\n    inStack?: boolean;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    key?: string | number;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  } = {},\n): ReactElement | null => {\n  const theme: any = options._theme;\n  const customRenderers: ComponentRendererMap = options._customRenderers ?? {};\n\n  const key: string | number = options.key || component.id;\n\n  const customRenderer: ComponentRenderer | undefined =\n    customRenderers[component.id] ?? customRenderers[component.type];\n  if (customRenderer) {\n    const renderCtx: ComponentRenderContext = {\n      additionalData: options.additionalData,\n      authType,\n      formErrors,\n      formValues,\n      isFormValid,\n      isLoading,\n      meta: options.meta,\n      resetForm,\n      onInputBlur: options.onInputBlur,\n      onInputChange,\n      onSubmit: options.onSubmit,\n      touchedFields,\n    };\n    // Key the element here so a renderer does not have to, as the built-in cases below do.\n    const rendered: ReactElement | null = customRenderer(component, renderCtx);\n\n    return rendered ? cloneElement(rendered, {key}) : null;\n  }\n\n  /** Resolve any remaining {{t()}} or {{meta()}} template expressions in a string at render time. */\n  const resolve = (text: string | undefined): string => {\n    if (!text || (!options.t && !options.meta)) {\n      return text || '';\n    }\n    return resolveFlowTemplateLiterals(text, {meta: options.meta, t: options.t || ((k: string): string => k)});\n  };\n\n  // The props a flow gives each of the resource pickers (USER_SELECT, AUTH_FLOW_SELECT, USER_TYPE_SELECT).\n  const resourceSelectProps = (): Omit<BaseUserSelectProps, 'fetchUsers' | 'mapping'> => {\n    const identifier: string = component.ref!;\n    const isTouched: boolean = touchedFields[identifier] || false;\n\n    return {\n      className: cx(options.inputClassName, component.classes),\n      component,\n      error: isTouched ? formErrors[identifier] : undefined,\n      id: component.id,\n      label: resolve(component.label) || '',\n      name: identifier,\n      onBlur: (): void => options.onInputBlur?.(identifier),\n      onChange: (event: ChangeEvent<HTMLSelectElement>): void => onInputChange(identifier, event.target.value),\n      onError: options.onPickerError,\n      placeholder: resolve(component.placeholder),\n      required: component.required,\n      value: formValues[identifier] || '',\n    };\n  };\n\n  // A component type this render cannot draw is logged and left out.\n  const skipUnsupported = (typeName: string): null => {\n    logger.warn(`${typeName} component type is not supported. Skipping render.`);\n\n    return null;\n  };\n\n  switch (component.type) {\n    case EmbeddedFlowComponentType.TextInput:\n    case EmbeddedFlowComponentType.PasswordInput:\n    case EmbeddedFlowComponentType.EmailInput:\n    case EmbeddedFlowComponentType.PhoneInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n      const fieldType: string = getFieldType(component.type);\n\n      // Prefix/postfix are accepted on any text-family input. When either is present,\n      // route to AffixedField so the leading affix renders and submit-time composition\n      // is picked up by composeAffixedInputs via the sentinel keys.\n      // Both string.length and Array.length are defined, so a single truthy+length\n      // check covers `prefixes?: string | PrefixOption[]`.\n      const hasPrefixes: boolean = !!component.prefixes && component.prefixes.length > 0;\n      const hasPostfix: boolean = typeof component.postfix === 'string' && component.postfix.length > 0;\n\n      if (hasPrefixes || hasPostfix) {\n        const prefixStateKey: string = affixPrefixKey(identifier, options.vendor);\n        const postfixStateKey: string = affixPostfixKey(identifier, options.vendor);\n        const defaultPrefixValue: string = hasPrefixes\n          ? typeof component.prefixes === 'string'\n            ? component.prefixes\n            : (component.prefixes as PrefixOption[])[0].value\n          : '';\n        const selectedPrefix: string = formValues[prefixStateKey] ?? defaultPrefixValue;\n\n        return (\n          <AffixedField\n            key={key}\n            className={cx(options.inputClassName, component.classes)}\n            id={component.id}\n            label={resolve(component.label) || ''}\n            name={identifier}\n            placeholder={resolve(component.placeholder) || ''}\n            required={component.required || false}\n            error={error}\n            value={value}\n            type={fieldType}\n            prefixes={component.prefixes}\n            prefixValue={selectedPrefix}\n            onChange={(e: ChangeEvent<HTMLInputElement>): void => onInputChange(identifier, e.target.value)}\n            onBlur={(): void => options.onInputBlur?.(identifier)}\n            onPrefixChange={(newPrefix: string): void => onInputChange(prefixStateKey, newPrefix)}\n            onFocus={(): void => {\n              if (hasPrefixes && formValues[prefixStateKey] === undefined) {\n                onInputChange(prefixStateKey, defaultPrefixValue);\n              }\n              if (hasPostfix && formValues[postfixStateKey] === undefined) {\n                onInputChange(postfixStateKey, component.postfix!);\n              }\n            }}\n          />\n        );\n      }\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        name: identifier,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: fieldType as FieldType,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.OtpInput: {\n      const identifier: string = component.ref!;\n      const isDeviceUserCode: boolean = identifier === 'user_code';\n      const currentValue: string = formValues[identifier] || '';\n      const value: string = isDeviceUserCode ? currentValue.replace(/[-\\s]/g, '').toUpperCase() : currentValue;\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Device Grant user codes are eight uppercase characters today. Keep this fallback in the SDK\n      // until the flow UI metadata can supply the configured code length.\n      const reportedLength: number = Number(options.additionalData?.['otpLength']);\n      const otpLength: number | undefined = isDeviceUserCode\n        ? 8\n        : Number.isInteger(reportedLength) && reportedLength > 0\n          ? reportedLength\n          : undefined;\n      const numericOnly: boolean = !isDeviceUserCode && options.additionalData?.['otpNumericOnly'] !== 'false';\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        length: otpLength,\n        name: identifier,\n        numericOnly,\n        separatorAfter: isDeviceUserCode ? 4 : undefined,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: FieldType.Otp,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.Action: {\n      const actionId: string = component.id;\n      const eventType: string = component.eventType || '';\n      const buttonText: string = resolve(component.label);\n      const componentVariant: string = component.variant || '';\n\n      // Only validate on submit type events.\n      const shouldSkipValidation: boolean = eventType.toUpperCase() !== EmbeddedFlowEventType.Submit;\n\n      // Determine the button type based on the event type. Default to 'submit' if not recognized.\n      const buttonTypeEnum = {\n        [EmbeddedFlowEventType.Submit]: 'submit',\n        [EmbeddedFlowEventType.Reset]: 'reset',\n        [EmbeddedFlowEventType.Cancel]: 'button',\n        [EmbeddedFlowEventType.Trigger]: 'button',\n        [EmbeddedFlowEventType.Back]: 'button',\n      };\n      const buttonType: HTMLButtonElement['type'] = buttonTypeEnum[eventType.toUpperCase()] ?? 'submit';\n\n      // Approval waits while an approved authorization detail shows a modified value that cannot be submitted.\n      const hasInvalidConsentApproval: boolean =\n        !shouldSkipValidation &&\n        componentVariant.toLowerCase() === 'primary' &&\n        isConsentApprovalBlocked(\n          (options.additionalData?.['consentPrompt'] as ConsentPromptData | undefined)?.purposes ?? [],\n          formValues,\n        );\n\n      const handleClick = (event: MouseEvent<HTMLButtonElement>): void => {\n        // Flow actions are handled by the SDK. Cancel the native button action before\n        // onSubmit can switch steps or replace the form; otherwise the browser tries to\n        // submit a form that React has already disconnected from the document.\n        event.preventDefault();\n\n        if (options.onSubmit) {\n          const formData: Record<string, any> = {};\n          Object.keys(formValues).forEach((field: any) => {\n            // Include all values, even empty strings, to ensure proper submission\n            formData[field] = formValues[field];\n          });\n\n          // For consent actions, build the consent_decisions JSON from the form values.\n          // The allow action captures per-attribute choices; the deny action sends\n          // all purposes as rejected so the backend ConsentExecutor can fail the flow.\n          const consentPrompt: ConsentPromptData | undefined = options.additionalData?.['consentPrompt'] as\n            | ConsentPromptData\n            | undefined;\n          if (consentPrompt && eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            const isDeny: boolean = componentVariant.toLowerCase() !== 'primary';\n            const decisions: ConsentDecisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: consentPrompt.purposes.map(\n                (p: ConsentPurposeData): ConsentPurposeDecision => ({\n                  approved: !isDeny,\n                  elements: [\n                    // Permission purposes carry no essential elements, so the server sends null here\n                    ...(p.essential ?? []).map((e): ConsentAttributeElement => ({approved: !isDeny, name: e.name})),\n                    ...(p.optional ?? []).map(\n                      (e): ConsentAttributeElement =>\n                        getConsentElementDecision(\n                          p.purposeId,\n                          e,\n                          !isDeny && formValues[getConsentOptionalKey(p.purposeId, e.name)] === 'true',\n                          formValues,\n                        ),\n                    ),\n                  ],\n                  purposeName: p.purposeName!,\n                }),\n              ),\n            };\n            formData['consent_decisions'] = JSON.stringify(decisions);\n          }\n\n          // For submit events, pass the form data to the onSubmit callback. For other event types, reset the form and call onSubmit with an empty data object.\n          if (eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            options.onSubmit(component, formData, shouldSkipValidation);\n          } else {\n            resetForm();\n            options.onSubmit(component, {}, shouldSkipValidation);\n          }\n        }\n      };\n\n      // Render branded social login buttons for known action IDs\n\n      const socialButtonClassName: string = cx(options.buttonClassName, component.classes);\n\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'google', authType, componentVariant)) {\n        return <GoogleButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'github', authType, componentVariant)) {\n        return <GitHubButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'facebook', authType, componentVariant)) {\n        return <FacebookButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'microsoft', authType, componentVariant)) {\n        return <MicrosoftButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'linkedin', authType, componentVariant)) {\n        return <LinkedInButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'ethereum', authType, componentVariant)) {\n        return (\n          <SignInWithEthereumButton\n            key={key}\n            id={component.id}\n            onClick={handleClick}\n            className={socialButtonClassName}\n          />\n        );\n      }\n      if (actionId === 'prompt_mobile' || eventType === 'prompt_mobile') {\n        return <SmsOtpButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n\n      const startIconEl: ReactElement | null = component.startIcon ? (\n        <img src={component.startIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      const endIconEl: ReactElement | null = component.endIcon ? (\n        <img src={component.endIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      return (\n        <Button\n          fullWidth\n          key={key}\n          id={component.id}\n          onClick={handleClick}\n          disabled={\n            isLoading ||\n            (!isFormValid && !shouldSkipValidation) ||\n            hasInvalidConsentApproval ||\n            options.isTimeoutDisabled ||\n            (component as any).config?.disabled\n          }\n          className={cx(options.buttonClassName, component.classes)}\n          data-testid=\"thunderid-signin-submit\"\n          variant={component.variant?.toLowerCase() === 'primary' ? 'solid' : 'outline'}\n          color={component.variant?.toLowerCase() === 'primary' ? 'primary' : 'secondary'}\n          startIcon={startIconEl}\n          endIcon={endIconEl}\n          type={buttonType}\n        >\n          {buttonText || 'Submit'}\n        </Button>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Text: {\n      const variant: any = getTypographyVariant(component.variant!);\n      const color: TypographyColor | undefined = getTypographyColor(component.color);\n      const textAlignClass: string = css({\n        marginBottom: 2,\n        textAlign:\n          typeof component?.align === 'string' ? (component.align as React.CSSProperties['textAlign']) : 'left',\n      });\n      return (\n        <Typography\n          key={key}\n          id={component.id}\n          className={cx(component.classes, textAlignClass)}\n          variant={variant}\n          color={color}\n        >\n          {resolve(component.label)}\n        </Typography>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Divider: {\n      return <Divider key={key}>{resolve(component.label) || ''}</Divider>;\n    }\n\n    case EmbeddedFlowComponentType.Select: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Options are pre-sanitized by flowTransformer to {value: string, label: string} format\n      const selectOptions: any = (component.options || []).map((opt: any) => ({\n        label: typeof opt === 'string' ? opt : String(opt.label ?? opt.value ?? ''),\n        value: typeof opt === 'string' ? opt : String(opt.value ?? ''),\n      }));\n\n      return (\n        <Select\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          options={selectOptions}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.DateInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      return (\n        <DatePicker\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          dateFormat={component.dateFormat}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.OuSelect:\n      return skipUnsupported('OU_SELECT');\n\n    // The resource pickers load with a signed-in user's access token, so without a data source, which is every flow\n    // except InviteUser, they are not drawn.\n    case EmbeddedFlowComponentType.UserSelect:\n      return options.fetchUsers ? (\n        <BaseUserSelect key={key} {...resourceSelectProps()} fetchUsers={options.fetchUsers} />\n      ) : (\n        skipUnsupported('USER_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.AuthFlowSelect:\n      return options.fetchAuthFlows ? (\n        <BaseAuthFlowSelect key={key} {...resourceSelectProps()} fetchAuthFlows={options.fetchAuthFlows} />\n      ) : (\n        skipUnsupported('AUTH_FLOW_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.UserTypeSelect:\n      return options.fetchUserTypes ? (\n        <BaseUserTypeSelect key={key} {...resourceSelectProps()} fetchUserTypes={options.fetchUserTypes} />\n      ) : (\n        skipUnsupported('USER_TYPE_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.Block: {\n      if (component.components && component.components.length > 0) {\n        const formClass: string = css({\n          display: 'flex',\n          flexDirection: 'column',\n          gap: `calc(${theme?.vars?.spacing?.unit ?? '4px'} * 2)`,\n        });\n\n        const blockComponents: any = component.components\n          .map((childComponent: any, index: any) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n          .filter(Boolean);\n\n        // The submit button's `type=\"submit\"` (and pressing Enter in a field) would\n        // otherwise trigger the browser's native form submission — a GET request to\n        // the current URL with all field values (including passwords) as query params.\n        // Actual submission is handled entirely via `onClick`/`onSubmit` above.\n        return (\n          <form\n            id={component.id}\n            key={key}\n            className={cx(component.classes, formClass)}\n            onSubmit={(event: FormEvent<HTMLFormElement>): void => event.preventDefault()}\n          >\n            {blockComponents}\n          </form>\n        );\n      }\n      return null;\n    }\n\n    case EmbeddedFlowComponentType.RichText: {\n      const richTextAction: EmbeddedFlowComponentAction | undefined = component.action;\n\n      const dispatchRichTextAction = (): void => {\n        if (!richTextAction || !options.onSubmit) {\n          return;\n        }\n        const eventTypeValue = String(richTextAction.eventType ?? EmbeddedFlowEventType.Submit);\n        const shouldSkipValidation: boolean = eventTypeValue.toUpperCase() === String(EmbeddedFlowEventType.Trigger);\n        const syntheticAction: EmbeddedFlowComponent = {\n          eventType: eventTypeValue,\n          id: `${component.id}_action`,\n          ref: richTextAction.ref,\n          type: EmbeddedFlowComponentType.Action,\n        };\n        const formData: Record<string, string> = {};\n        Object.keys(formValues).forEach((field: string) => {\n          formData[field] = formValues[field];\n        });\n        options.onSubmit(syntheticAction, formData, shouldSkipValidation);\n      };\n\n      // Sentinel-anchor contract: only anchors carrying `data-action-ref` equal to\n      // richTextAction.ref dispatch the action. Anchors without the sentinel (or with\n      // a non-matching one) are treated as ordinary links and are ignored here.\n      const isMatchingSentinelAnchor = (anchor: HTMLAnchorElement): boolean =>\n        anchor.getAttribute('data-action-ref') === richTextAction?.ref;\n\n      const handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.MouseEvent<HTMLDivElement>): void => {\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      const handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.KeyboardEvent<HTMLDivElement>): void => {\n            if (event.key !== 'Enter' && event.key !== ' ') {\n              return;\n            }\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      return (\n        // Sentinel anchors are made keyboard-operable via the container's onKeyDown\n        // (Enter/Space activate the matching anchor). Authors should ensure the anchor\n        // is focusable (`href` or `tabIndex`); the click+keydown delegation covers both\n        // pointer and keyboard activation once focus lands on the anchor.\n        // eslint-disable-next-line jsx-a11y/no-static-element-interactions\n        <div\n          key={key}\n          className={getRichTextClass()}\n          onClick={handleRichTextClick}\n          onKeyDown={handleRichTextKeyDown}\n          // Manually sanitizes with `DOMPurify`.\n          // IMPORTANT: DO NOT REMOVE OR MODIFY THIS SANITIZATION STEP.\n          dangerouslySetInnerHTML={{__html: DOMPurify.sanitize(resolveEmojiUrisInHtml(resolve(component.label)))}}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Image: {\n      const explicitHeight: string = resolve(component.height?.toString());\n      const explicitWidth: string = resolve(component.width?.toString());\n      return (\n        <ImageComponent\n          key={key}\n          component={\n            {\n              config: {\n                alt: resolve(component.alt) || resolve(component.label) || 'Image',\n                height: explicitHeight || (options.inStack ? '50' : 'auto'),\n                src: resolve(component.src),\n                width: explicitWidth || (options.inStack ? '50' : '100%'),\n              },\n            } as any\n          }\n          formErrors={undefined!}\n          formValues={undefined!}\n          isFormValid={false}\n          isLoading={false}\n          onInputChange={(): void => {\n            throw new Error('Function not implemented.');\n          }}\n          touchedFields={undefined!}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Icon: {\n      const iconName: string = component.name || '';\n      const IconComponent: any = flowIconRegistry[iconName];\n      if (!IconComponent) {\n        logger.warn(`Unknown icon name: \"${iconName}\". Skipping render.`);\n        return null;\n      }\n      return <IconComponent key={key} size={component.size || 24} color={component.color || 'currentColor'} />;\n    }\n\n    case EmbeddedFlowComponentType.Stack: {\n      const direction: string = (component as any).direction || 'row';\n      const gap: number = (component as any).gap ?? 2;\n      const align: string = (component as any).align || 'center';\n      const justify: string = (component as any).justify || 'flex-start';\n\n      // `items` is the number of slots across the main axis and `direction` picks\n      // that axis: with `row` it is the column count (items: 2 with four buttons\n      // renders a 2 x 2 grid), and with `column` it is the row count and children\n      // flow into further columns. Fewer than two slots keeps the flex layout, so\n      // stacks authored before grid support are unaffected.\n      const rawItems: string | number | undefined = component.items;\n      const parsedItems: number =\n        typeof rawItems === 'string' ? Number(rawItems) : typeof rawItems === 'number' ? rawItems : NaN;\n      const items: number | null =\n        Number.isFinite(parsedItems) && Math.floor(parsedItems) >= 2\n          ? Math.min(Math.floor(parsedItems), MAX_STACK_ITEMS)\n          : null;\n      // CSS Grid has no reverse auto-flow, so the reverse variants fall back to\n      // their base axis rather than silently becoming a row.\n      const isColumn: boolean = direction.startsWith('column');\n      const gridJustify: string = component.justify ?? 'stretch';\n      // Equal `1fr` tracks fill the container, leaving `justify-content` no free\n      // space to distribute. Content-sized tracks restore it, so every justify\n      // value has a visible effect while the default stays an even split.\n      const track: string = gridJustify === 'stretch' ? '1fr' : 'auto';\n\n      const stackStyle: CSSProperties =\n        items !== null\n          ? {\n              alignItems: component.align ?? 'stretch',\n              display: 'grid',\n              gap: `${gap * 0.5}rem`,\n              gridAutoFlow: isColumn ? 'column' : 'row',\n              justifyContent: gridJustify,\n              width: '100%',\n              ...(isColumn\n                ? {gridTemplateRows: `repeat(${items}, ${track})`}\n                : {gridTemplateColumns: `repeat(${items}, ${track})`}),\n            }\n          : {\n              alignItems: align,\n              display: 'flex',\n              flexDirection: direction as CSSProperties['flexDirection'],\n              flexWrap: 'wrap',\n              gap: `${gap * 0.5}rem`,\n              justifyContent: justify,\n            };\n\n      const stackClass: string = css(stackStyle as CSSInterpolation);\n\n      const stackChildren: (ReactElement | null)[] = component.components\n        ? component.components.map((childComponent: any, index: number) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                inStack: true,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n        : [];\n\n      return (\n        <div key={key} id={component.id} className={cx(component.classes, stackClass)}>\n          {stackChildren}\n        </div>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Consent: {\n      const consentPromptRawData: ConsentPromptData | string | undefined = options.additionalData?.['consentPrompt'];\n\n      return (\n        <Consent\n          key={key}\n          consentData={consentPromptRawData as any}\n          formValues={formValues}\n          onInputChange={onInputChange}\n          t={options.t}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Timer: {\n      const textTemplate: string = resolve((component as any).label) || 'Time remaining: {time}';\n      const timeoutMs: number = Number(options.additionalData?.['stepTimeout']) || 0;\n      const expiresIn: number = timeoutMs > 0 ? Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000)) : 0;\n\n      return <FlowTimer key={key} expiresIn={expiresIn} textTemplate={textTemplate} />;\n    }\n\n    case EmbeddedFlowComponentType.CopyableText: {\n      const sourceKey: string | undefined = (component as any).source;\n      const value: string = sourceKey && options.additionalData ? String(options.additionalData[sourceKey] ?? '') : '';\n      const labelText: string | undefined = resolve((component as any).label) || undefined;\n\n      return <CopyableText key={key} label={labelText} masked={Boolean(component.masked)} value={value} />;\n    }\n\n    case EmbeddedFlowComponentType.KeyValueList: {\n      const sourceKey: string | undefined = component.source;\n      const pairs: KeyValuePair[] = parseKeyValuePairs(\n        sourceKey && options.additionalData ? options.additionalData[sourceKey] : undefined,\n      ).map((pair: KeyValuePair) => ({...pair, label: resolve(pair.label)}));\n\n      // An empty panel tells the user nothing, so a list with no pairs renders nothing at all.\n      if (pairs.length === 0) {\n        return null;\n      }\n\n      return <KeyValueList key={key} label={resolve(component.label) || undefined} pairs={pairs} />;\n    }\n\n    default:\n      // Gracefully handle unsupported component types by returning null\n      logger.warn(`Unsupported component type: ${component.type}. Skipping render.`);\n      return null;\n  }\n};\n\n/**\n * Processes an array of components and renders them as React elements for sign-in.\n */\nexport const renderSignInComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signin',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for sign-up.\n */\nexport const renderSignUpComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for recovery flow.\n */\nexport const renderRecoveryComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'recovery',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for invite user.\n * This is used by both InviteUser and AcceptInvite components.\n */\nexport const renderInviteUserComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Function to fetch child organization units for OU_SELECT components. */\n    fetchOrganizationUnitChildren?: (\n      parentId: string,\n      limit: number,\n      offset: number,\n    ) => Promise<OrganizationUnitListResponse>;\n    inputClassName?: string;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,MAAMA,+DACJ,oBACA,oBACD;;;;;;;;;AAiBD,IAAIC;;AAGJ,SAAS,mBAA2B;AAClC,wBAAuB,mBAAG;;;;;;;;;;;;;;;;;;;;;;;;;;AA0B1B,QAAO;;AAGT,IAAIC;AAEJ,SAAS,yBAAiC;AACxC,8BAA6BC,oBAAI;EAAC,QAAQ;EAAU,WAAW;EAAW,OAAO;EAAS,CAAC;AAC3F,QAAO;;;;;;AAST,MAAM,kBAAkB;AAExB,MAAM,gBAAgB,YAAkD;AACtE,SAAQ,SAAR;EACE,KAAKC,8CAA0B,WAC7B,QAAOC,8BAAU;EACnB,KAAKD,8CAA0B,WAC7B,QAAOC,8BAAU;EACnB,KAAKD,8CAA0B,cAC7B,QAAOC,8BAAU;EACnB,KAAKD,8CAA0B;EAC/B,QACE,QAAOC,8BAAU;;;;;;AAOvB,MAAM,wBAAwB,YAAyB;AAiBrD,QAhBuE;EACrE,QAAQ;EACR,QAAQ;EACR,aAAa;EACb,SAAS;EACT,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,UAAU;EACV,YAAY;EACZ,YAAY;EACb,CAEiB,YAAY;;;AAIhC,MAAM,sBAAsB,UAAgD;AAC1E,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,QACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,YACH,QAAO;EACT,QACE;;;;;;AAON,MAAM,yBACJ,UACA,WACA,YACA,UACA,UAEA,sBACY;CACZ,MAAMC,aAAkB,GAAG,SAAS;CACpC,MAAMC,kBAAuB,aAAa,cAAc,cAAc;AAItE,KAAI,WAAW,aAAa,CAAC,SAAS,SAAS,CAC7C,QAAO;AAIT,KAAI,aAAa,SACf,QAAO,mBAAmB,WAAW,aAAa,CAAC,SAAS,SAAS;AAGvE,QAAO;;;;;AAMT,MAAM,+BACJ,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA,UAiCI,EAAE,KACkB;CACxB,MAAMC,QAAa,QAAQ;CAC3B,MAAMC,kBAAwC,QAAQ,oBAAoB,EAAE;CAE5E,MAAMC,MAAuB,QAAQ,OAAO,UAAU;CAEtD,MAAMC,iBACJ,gBAAgB,UAAU,OAAO,gBAAgB,UAAU;AAC7D,KAAI,gBAAgB;EAgBlB,MAAMC,WAAgC,eAAe,WAfX;GACxC,gBAAgB,QAAQ;GACxB;GACA;GACA;GACA;GACA;GACA,MAAM,QAAQ;GACd;GACA,aAAa,QAAQ;GACrB;GACA,UAAU,QAAQ;GAClB;GACD,CAEyE;AAE1E,SAAO,mCAAwB,UAAU,EAAC,KAAI,CAAC,GAAG;;;CAIpD,MAAM,WAAW,SAAqC;AACpD,MAAI,CAAC,QAAS,CAAC,QAAQ,KAAK,CAAC,QAAQ,KACnC,QAAO,QAAQ;AAEjB,8DAAmC,MAAM;GAAC,MAAM,QAAQ;GAAM,GAAG,QAAQ,OAAO,MAAsB;GAAG,CAAC;;CAI5G,MAAM,4BAAiF;EACrF,MAAMC,aAAqB,UAAU;EACrC,MAAMC,YAAqB,cAAc,eAAe;AAExD,SAAO;GACL,WAAWC,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;GACxD;GACA,OAAO,YAAY,WAAW,cAAc;GAC5C,IAAI,UAAU;GACd,OAAO,QAAQ,UAAU,MAAM,IAAI;GACnC,MAAM;GACN,cAAoB,QAAQ,cAAc,WAAW;GACrD,WAAW,UAAgD,cAAc,YAAY,MAAM,OAAO,MAAM;GACxG,SAAS,QAAQ;GACjB,aAAa,QAAQ,UAAU,YAAY;GAC3C,UAAU,UAAU;GACpB,OAAO,WAAW,eAAe;GAClC;;CAIH,MAAM,mBAAmB,aAA2B;AAClD,SAAO,KAAK,GAAG,SAAS,oDAAoD;AAE5E,SAAO;;AAGT,SAAQ,UAAU,MAAlB;EACE,KAAKX,8CAA0B;EAC/B,KAAKA,8CAA0B;EAC/B,KAAKA,8CAA0B;EAC/B,KAAKA,8CAA0B,YAAY;GACzC,MAAMS,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAC3D,MAAMC,YAAoB,aAAa,UAAU,KAAK;GAOtD,MAAMC,cAAuB,CAAC,CAAC,UAAU,YAAY,UAAU,SAAS,SAAS;GACjF,MAAMC,aAAsB,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,SAAS;AAEhG,OAAI,eAAe,YAAY;IAC7B,MAAMC,iBAAyBC,4CAAe,YAAY,QAAQ,OAAO;IACzE,MAAMC,kBAA0BC,6CAAgB,YAAY,QAAQ,OAAO;IAC3E,MAAMC,qBAA6B,cAC/B,OAAO,UAAU,aAAa,WAC5B,UAAU,WACT,UAAU,SAA4B,GAAG,QAC5C;IACJ,MAAMC,iBAAyB,WAAW,mBAAmB;AAE7D,WACE,2CAACC;KAEC,WAAWZ,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;KACxD,IAAI,UAAU;KACd,OAAO,QAAQ,UAAU,MAAM,IAAI;KACnC,MAAM;KACN,aAAa,QAAQ,UAAU,YAAY,IAAI;KAC/C,UAAU,UAAU,YAAY;KACzB;KACA;KACP,MAAM;KACN,UAAU,UAAU;KACpB,aAAa;KACb,WAAW,MAA2C,cAAc,YAAY,EAAE,OAAO,MAAM;KAC/F,cAAoB,QAAQ,cAAc,WAAW;KACrD,iBAAiB,cAA4B,cAAc,gBAAgB,UAAU;KACrF,eAAqB;AACnB,UAAI,eAAe,WAAW,oBAAoB,OAChD,eAAc,gBAAgB,mBAAmB;AAEnD,UAAI,cAAc,WAAW,qBAAqB,OAChD,eAAc,iBAAiB,UAAU,QAAS;;OApBjD,IAuBL;;AAkBN,kCAdmBa,iCAAY;IAC7B,WAAWb,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,MAAM;IACN,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAM;IACN;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAKX,8CAA0B,UAAU;GACvC,MAAMS,aAAqB,UAAU;GACrC,MAAMgB,mBAA4B,eAAe;GACjD,MAAMC,eAAuB,WAAW,eAAe;GACvD,MAAMd,QAAgB,mBAAmB,aAAa,QAAQ,UAAU,GAAG,CAAC,aAAa,GAAG;GAE5F,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAI3D,MAAMc,iBAAyB,OAAO,QAAQ,iBAAiB,aAAa;GAC5E,MAAMC,YAAgC,mBAClC,IACA,OAAO,UAAU,eAAe,IAAI,iBAAiB,IACnD,iBACA;GACN,MAAMC,cAAuB,CAAC,oBAAoB,QAAQ,iBAAiB,sBAAsB;AAmBjG,kCAjBmBL,iCAAY;IAC7B,WAAWb,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,QAAQ;IACR,MAAM;IACN;IACA,gBAAgB,mBAAmB,IAAI;IACvC,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAMV,8BAAU;IAChB;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAKD,8CAA0B,QAAQ;GACrC,MAAM8B,WAAmB,UAAU;GACnC,MAAMC,YAAoB,UAAU,aAAa;GACjD,MAAMC,aAAqB,QAAQ,UAAU,MAAM;GACnD,MAAMC,mBAA2B,UAAU,WAAW;GAGtD,MAAMC,uBAAgC,UAAU,aAAa,KAAKC,0CAAsB;GAUxF,MAAMC,aAPiB;KACpBD,0CAAsB,SAAS;KAC/BA,0CAAsB,QAAQ;KAC9BA,0CAAsB,SAAS;KAC/BA,0CAAsB,UAAU;KAChCA,0CAAsB,OAAO;IAC/B,CAC4D,UAAU,aAAa,KAAK;GAGzF,MAAME,4BACJ,CAAC,wBACD,iBAAiB,aAAa,KAAK,aACnCC,0CACG,QAAQ,iBAAiB,mBAAoD,YAAY,EAAE,EAC5F,WACD;GAEH,MAAM,eAAe,UAA+C;AAIlE,UAAM,gBAAgB;AAEtB,QAAI,QAAQ,UAAU;KACpB,MAAMC,WAAgC,EAAE;AACxC,YAAO,KAAK,WAAW,CAAC,SAAS,UAAe;AAE9C,eAAS,SAAS,WAAW;OAC7B;KAKF,MAAMC,gBAA+C,QAAQ,iBAAiB;AAG9E,SAAI,iBAAiB,UAAU,aAAa,KAAKL,0CAAsB,QAAQ;MAC7E,MAAMM,SAAkB,iBAAiB,aAAa,KAAK;MAC3D,MAAMC,YAA8B;OAClC,UAAU,CAAC;OACX,GAAI,SAAS,EAAC,QAAQC,qCAAiB,oBAAmB,GAAG,EAAE;OAC/D,UAAU,cAAc,SAAS,KAC9B,OAAmD;QAClD,UAAU,CAAC;QACX,UAAU,CAER,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAgC;SAAC,UAAU,CAAC;SAAQ,MAAM,EAAE;SAAK,EAAE,EAC/F,IAAI,EAAE,YAAY,EAAE,EAAE,KACnB,yDAEG,EAAE,WACF,GACA,CAAC,UAAU,WAAWC,kDAAsB,EAAE,WAAW,EAAE,KAAK,MAAM,QACtE,WACD,CACJ,CACF;QACD,aAAa,EAAE;QAChB,EACF;OACF;AACD,eAAS,uBAAuB,KAAK,UAAU,UAAU;;AAI3D,SAAI,UAAU,aAAa,KAAKT,0CAAsB,OACpD,SAAQ,SAAS,WAAW,UAAU,qBAAqB;UACtD;AACL,iBAAW;AACX,cAAQ,SAAS,WAAW,EAAE,EAAE,qBAAqB;;;;GAO3D,MAAMU,wBAAgClC,mBAAG,QAAQ,iBAAiB,UAAU,QAAQ;AAEpF,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,2CAACmC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,2CAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,2CAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,aAAa,UAAU,iBAAiB,CACjG,QAAO,2CAACC;IAA0B,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAEhH,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,2CAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QACE,2CAACC;IAEC,IAAI,UAAU;IACd,SAAS;IACT,WAAW;MAHN,IAIL;AAGN,OAAI,aAAa,mBAAmB,cAAc,gBAChD,QAAO,2CAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;GAG7G,MAAMC,cAAmC,UAAU,YACjD,2CAAC;IAAI,KAAK,UAAU;IAAW,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC9F;GAEJ,MAAMC,YAAiC,UAAU,UAC/C,2CAAC;IAAI,KAAK,UAAU;IAAS,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC5F;AAEJ,UACE,2CAACC;IACC;IAEA,IAAI,UAAU;IACd,SAAS;IACT,UACE,aACC,CAAC,eAAe,CAAC,wBAClB,6BACA,QAAQ,qBACP,UAAkB,QAAQ;IAE7B,WAAW5C,mBAAG,QAAQ,iBAAiB,UAAU,QAAQ;IACzD,eAAY;IACZ,SAAS,UAAU,SAAS,aAAa,KAAK,YAAY,UAAU;IACpE,OAAO,UAAU,SAAS,aAAa,KAAK,YAAY,YAAY;IACpE,WAAW;IACX,SAAS;IACT,MAAM;cAEL,cAAc;MAlBV,IAmBE;;EAIb,KAAKX,8CAA0B,MAAM;GACnC,MAAMwD,UAAe,qBAAqB,UAAU,QAAS;GAC7D,MAAMC,QAAqC,mBAAmB,UAAU,MAAM;GAC9E,MAAMC,iBAAyB3D,oBAAI;IACjC,cAAc;IACd,WACE,OAAO,WAAW,UAAU,WAAY,UAAU,QAA6C;IAClG,CAAC;AACF,UACE,2CAAC4D;IAEC,IAAI,UAAU;IACd,WAAWhD,mBAAG,UAAU,SAAS,eAAe;IACvC;IACF;cAEN,QAAQ,UAAU,MAAM;MANpB,IAOM;;EAIjB,KAAKX,8CAA0B,QAC7B,QAAO,2CAAC4D,qCAAmB,QAAQ,UAAU,MAAM,IAAI,MAAlC,IAA+C;EAGtE,KAAK5D,8CAA0B,QAAQ;GACrC,MAAMS,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAG3D,MAAMgD,iBAAsB,UAAU,WAAW,EAAE,EAAE,KAAK,SAAc;IACtE,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,IAAI,SAAS,GAAG;IAC3E,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,GAAG;IAC/D,EAAE;AAEH,UACE,2CAACC;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,SAAS;IACF;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAWnD,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAKX,8CAA0B,WAAW;GACxC,MAAMS,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;AAE3D,UACE,2CAACkD;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,YAAY,UAAU;IACf;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAWpD,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAKX,8CAA0B,SAC7B,QAAO,gBAAgB,YAAY;EAIrC,KAAKA,8CAA0B,WAC7B,QAAO,QAAQ,aACb,2CAACgE;GAAyB,GAAI,qBAAqB;GAAE,YAAY,QAAQ;KAApD,IAAkE,GAEvF,gBAAgB,cAAc;EAGlC,KAAKhE,8CAA0B,eAC7B,QAAO,QAAQ,iBACb,2CAACiE;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAKjE,8CAA0B,eAC7B,QAAO,QAAQ,iBACb,2CAACkE;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAKlE,8CAA0B;AAC7B,OAAI,UAAU,cAAc,UAAU,WAAW,SAAS,GAAG;IAC3D,MAAMmE,YAAoBpE,oBAAI;KAC5B,SAAS;KACT,eAAe;KACf,KAAK,QAAQ,OAAO,MAAM,SAAS,QAAQ,MAAM;KAClD,CAAC;IAEF,MAAMqE,kBAAuB,UAAU,WACpC,KAAK,gBAAqB,UACzB,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;KACE,GAAG;KACH,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;KAC9C,CACF,CACF,CACA,OAAO,QAAQ;AAMlB,WACE,2CAAC;KACC,IAAI,UAAU;KAEd,WAAWzD,mBAAG,UAAU,SAAS,UAAU;KAC3C,WAAW,UAA4C,MAAM,gBAAgB;eAE5E;OAJI,IAKA;;AAGX,UAAO;EAGT,KAAKX,8CAA0B,UAAU;GACvC,MAAMqE,iBAA0D,UAAU;GAE1E,MAAM,+BAAqC;AACzC,QAAI,CAAC,kBAAkB,CAAC,QAAQ,SAC9B;IAEF,MAAM,iBAAiB,OAAO,eAAe,aAAalC,0CAAsB,OAAO;IACvF,MAAMD,uBAAgC,eAAe,aAAa,KAAK,OAAOC,0CAAsB,QAAQ;IAC5G,MAAMmC,kBAAyC;KAC7C,WAAW;KACX,IAAI,GAAG,UAAU,GAAG;KACpB,KAAK,eAAe;KACpB,MAAMtE,8CAA0B;KACjC;IACD,MAAMuE,WAAmC,EAAE;AAC3C,WAAO,KAAK,WAAW,CAAC,SAAS,UAAkB;AACjD,cAAS,SAAS,WAAW;MAC7B;AACF,YAAQ,SAAS,iBAAiB,UAAU,qBAAqB;;GAMnE,MAAM,4BAA4B,WAChC,OAAO,aAAa,kBAAkB,KAAK,gBAAgB;GAE7D,MAAMC,sBAA2E,kBAC5E,UAAkD;IACjD,MAAMC,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;GAEJ,MAAMC,wBAAgF,kBACjF,UAAqD;AACpD,QAAI,MAAM,QAAQ,WAAW,MAAM,QAAQ,IACzC;IAEF,MAAMD,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;AAEJ,UAME,2CAAC;IAEC,WAAW,kBAAkB;IAC7B,SAAS;IACT,WAAW;IAGX,yBAAyB,EAAC,QAAQE,kBAAU,yDAAgC,QAAQ,UAAU,MAAM,CAAC,CAAC,EAAC;MANlG,IAOL;;EAIN,KAAK3E,8CAA0B,OAAO;GACpC,MAAM4E,iBAAyB,QAAQ,UAAU,QAAQ,UAAU,CAAC;GACpE,MAAMC,gBAAwB,QAAQ,UAAU,OAAO,UAAU,CAAC;AAClE,UACE,2CAACC;IAEC,WACE,EACE,QAAQ;KACN,KAAK,QAAQ,UAAU,IAAI,IAAI,QAAQ,UAAU,MAAM,IAAI;KAC3D,QAAQ,mBAAmB,QAAQ,UAAU,OAAO;KACpD,KAAK,QAAQ,UAAU,IAAI;KAC3B,OAAO,kBAAkB,QAAQ,UAAU,OAAO;KACnD,EACF;IAEH,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,WAAW;IACX,qBAA2B;AACzB,WAAM,IAAI,MAAM,4BAA4B;;IAE9C,eAAe;MAlBV,IAmBL;;EAIN,KAAK9E,8CAA0B,MAAM;GACnC,MAAM+E,WAAmB,UAAU,QAAQ;GAC3C,MAAMC,gBAAqBC,iCAAiB;AAC5C,OAAI,CAAC,eAAe;AAClB,WAAO,KAAK,uBAAuB,SAAS,qBAAqB;AACjE,WAAO;;AAET,UAAO,2CAAC;IAAwB,MAAM,UAAU,QAAQ;IAAI,OAAO,UAAU,SAAS;MAA3D,IAA6E;;EAG1G,KAAKjF,8CAA0B,OAAO;GACpC,MAAMkF,YAAqB,UAAkB,aAAa;GAC1D,MAAMC,MAAe,UAAkB,OAAO;GAC9C,MAAMC,QAAiB,UAAkB,SAAS;GAClD,MAAMC,UAAmB,UAAkB,WAAW;GAOtD,MAAMC,WAAwC,UAAU;GACxD,MAAMC,cACJ,OAAO,aAAa,WAAW,OAAO,SAAS,GAAG,OAAO,aAAa,WAAW,WAAW;GAC9F,MAAMC,QACJ,OAAO,SAAS,YAAY,IAAI,KAAK,MAAM,YAAY,IAAI,IACvD,KAAK,IAAI,KAAK,MAAM,YAAY,EAAE,gBAAgB,GAClD;GAGN,MAAMC,WAAoB,UAAU,WAAW,SAAS;GACxD,MAAMC,cAAsB,UAAU,WAAW;GAIjD,MAAMC,QAAgB,gBAAgB,YAAY,QAAQ;GAwB1D,MAAMC,aAAqB7F,oBArBzB,UAAU,OACN;IACE,YAAY,UAAU,SAAS;IAC/B,SAAS;IACT,KAAK,GAAG,MAAM,GAAI;IAClB,cAAc,WAAW,WAAW;IACpC,gBAAgB;IAChB,OAAO;IACP,GAAI,WACA,EAAC,kBAAkB,UAAU,MAAM,IAAI,MAAM,IAAG,GAChD,EAAC,qBAAqB,UAAU,MAAM,IAAI,MAAM,IAAG;IACxD,GACD;IACE,YAAY;IACZ,SAAS;IACT,eAAe;IACf,UAAU;IACV,KAAK,GAAG,MAAM,GAAI;IAClB,gBAAgB;IACjB,CAEuD;GAE9D,MAAM8F,gBAAyC,UAAU,aACrD,UAAU,WAAW,KAAK,gBAAqB,UAC7C,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;IACE,GAAG;IACH,SAAS;IACT,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;IAC9C,CACF,CACF,GACD,EAAE;AAEN,UACE,2CAAC;IAAc,IAAI,UAAU;IAAI,WAAWlF,mBAAG,UAAU,SAAS,WAAW;cAC1E;MADO,IAEJ;;EAIV,KAAKX,8CAA0B,SAAS;GACtC,MAAM8F,uBAA+D,QAAQ,iBAAiB;AAE9F,UACE,2CAACC;IAEC,aAAa;IACD;IACG;IACf,GAAG,QAAQ;MAJN,IAKL;;EAIN,KAAK/F,8CAA0B,OAAO;GACpC,MAAMgG,eAAuB,QAAS,UAAkB,MAAM,IAAI;GAClE,MAAMC,YAAoB,OAAO,QAAQ,iBAAiB,eAAe,IAAI;AAG7E,UAAO,2CAACC;IAAoB,WAFF,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC,GAAG;IAErC;MAAzC,IAAyD;;EAGlF,KAAKlG,8CAA0B,cAAc;GAC3C,MAAMmG,YAAiC,UAAkB;GACzD,MAAMvF,QAAgB,aAAa,QAAQ,iBAAiB,OAAO,QAAQ,eAAe,cAAc,GAAG,GAAG;AAG9G,UAAO,2CAACwF;IAAuB,OAFO,QAAS,UAAkB,MAAM,IAAI;IAE1B,QAAQ,QAAQ,UAAU,OAAO;IAAS;MAAjE,IAA0E;;EAGtG,KAAKpG,8CAA0B,cAAc;GAC3C,MAAMmG,YAAgC,UAAU;GAChD,MAAME,oDACJ,aAAa,QAAQ,iBAAiB,QAAQ,eAAe,aAAa,OAC3E,CAAC,KAAK,UAAwB;IAAC,GAAG;IAAM,OAAO,QAAQ,KAAK,MAAM;IAAC,EAAE;AAGtE,OAAI,MAAM,WAAW,EACnB,QAAO;AAGT,UAAO,2CAACC;IAAuB,OAAO,QAAQ,UAAU,MAAM,IAAI;IAAkB;MAA1D,IAAmE;;EAG/F;AAEE,UAAO,KAAK,+BAA+B,UAAU,KAAK,oBAAoB;AAC9E,UAAO;;;;;;AAOb,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAqBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,4BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;;AAMjD,MAAa,8BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAmCA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK"}
+{"version":3,"file":"AuthOptionFactory.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","richTextClassCache: string | undefined","authOptionIconClassCache: string | undefined","css","EmbeddedFlowComponentType","FieldType","providerId: any","providerMatches: any","theme: any","customRenderers: ComponentRendererMap","key: string | number","customRenderer: ComponentRenderer | undefined","rendered: ReactElement | null","identifier: string","isTouched: boolean","cx","Button","value: string","error: string","fieldType: string","hasPrefixes: boolean","hasPostfix: boolean","prefixStateKey: string","affixPrefixKey","postfixStateKey: string","affixPostfixKey","defaultPrefixValue: string","selectedPrefix: string","AffixedField","createField","isDeviceUserCode: boolean","currentValue: string","reportedLength: number","otpLength: number | undefined","numericOnly: boolean","actionId: string","eventType: string","buttonText: string","componentVariant: string","shouldSkipValidation: boolean","EmbeddedFlowEventType","buttonType: HTMLButtonElement['type']","hasInvalidConsentApproval: boolean","isConsentApprovalBlocked","formData: Record<string, any>","consentPrompt: ConsentPromptData | undefined","isDeny: boolean","decisions: ConsentDecisions","ConsentConstants","getConsentOptionalKey","socialButtonClassName: string","GoogleButton","GitHubButton","FacebookButton","MicrosoftButton","LinkedInButton","SignInWithEthereumButton","SmsOtpButton","startIconEl: ReactElement | null","endIconEl: ReactElement | null","variant: any","color: TypographyColor | undefined","textAlignClass: string","Typography","Divider","selectOptions: any","Select","DatePicker","BaseUserSelect","BaseAuthFlowSelect","BaseUserTypeSelect","formClass: string","blockComponents: any","richTextAction: EmbeddedFlowComponentAction | undefined","syntheticAction: EmbeddedFlowComponent","formData: Record<string, string>","handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined","anchor: HTMLAnchorElement | null","handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined","DOMPurify","explicitHeight: string","explicitWidth: string","ImageComponent","iconName: string","IconComponent: any","flowIconRegistry","direction: string","gap: number","align: string","justify: string","rawItems: string | number | undefined","parsedItems: number","items: number | null","isColumn: boolean","gridJustify: string","track: string","stackClass: string","stackChildren: (ReactElement | null)[]","consentPromptRawData: ConsentPromptData | string | undefined","Consent","textTemplate: string","timeoutMs: number","FlowTimer","sourceKey: string | undefined","CopyableText","pairs: KeyValuePair[]","KeyValueList"],"sources":["../../../../../src/components/auth/flow/AuthOptionFactory.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {CSSInterpolation} from '@emotion/css/create-instance';\nimport {\n  ConsentConstants,\n  FieldType,\n  FlowMetadataResponse,\n  EmbeddedFlowComponent,\n  EmbeddedFlowComponentAction,\n  EmbeddedFlowComponentType,\n  EmbeddedFlowTextVariant,\n  EmbeddedFlowEventType,\n  createPackageComponentLogger,\n  resolveFlowTemplateLiterals,\n  resolveEmojiUrisInHtml,\n  ConsentPurposeData,\n  ConsentPromptData,\n  ConsentDecisions,\n  ConsentPurposeDecision,\n  ConsentAttributeElement,\n  OrganizationUnitListResponse,\n  PrefixOption,\n  KeyValuePair,\n  parseKeyValuePairs,\n  FetchAuthFlows,\n  FetchUserTypes,\n  FetchUsers,\n  getConsentElementDecision,\n} from '@thunderid/browser';\nimport DOMPurify from 'dompurify';\nimport {ChangeEvent, cloneElement, CSSProperties, FormEvent, MouseEvent, ReactElement} from 'react';\nimport Consent from './Consent';\nimport {getConsentOptionalKey} from './ConsentCheckboxList';\nimport {createField} from './FieldFactory';\nimport FlowTimer from './FlowTimer';\nimport ImageComponent from './ImageComponent';\nimport {\n  ComponentRenderer,\n  ComponentRenderContext,\n  ComponentRendererMap,\n} from '../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport {UseTranslation} from '../../../hooks/useTranslation';\nimport {css, cx} from '../../../styles/emotion';\nimport {affixPostfixKey, affixPrefixKey} from '../../../utils/composeAffixedInputs';\nimport isConsentApprovalBlocked from '../../../utils/isConsentApprovalBlocked';\nimport AffixedField from '../../primitives/AffixedField/AffixedField';\nimport BaseAuthFlowSelect from '../../primitives/AuthFlowSelect/BaseAuthFlowSelect';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport DatePicker from '../../primitives/DatePicker/DatePicker';\nimport Divider from '../../primitives/Divider/Divider';\nimport flowIconRegistry from '../../primitives/Icons/flowIconRegistry';\nimport KeyValueList from '../../primitives/KeyValueList/KeyValueList';\nimport Select from '../../primitives/Select/Select';\nimport Typography from '../../primitives/Typography/Typography';\nimport {TypographyColor, TypographyVariant} from '../../primitives/Typography/Typography.styles';\nimport BaseUserSelect, {BaseUserSelectProps} from '../../primitives/UserSelect/BaseUserSelect';\nimport BaseUserTypeSelect from '../../primitives/UserTypeSelect/BaseUserTypeSelect';\nimport FacebookButton from '../buttons/FacebookButton';\nimport GitHubButton from '../buttons/GitHubButton';\nimport GoogleButton from '../buttons/GoogleButton';\nimport LinkedInButton from '../buttons/LinkedInButton';\nimport MicrosoftButton from '../buttons/MicrosoftButton';\nimport SignInWithEthereumButton from '../buttons/SignInWithEthereumButton';\nimport SmsOtpButton from '../buttons/SmsOtpButton';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'AuthOptionFactory',\n);\n\n/**\n * Replaces `emoji:` URIs embedded in HTML before DOMPurify sanitization.\n *\n * DOMPurify strips unknown URI schemes from attributes (e.g. `src=\"emoji:🦊\"` → `src=\"\"`).\n * This function converts:\n *   - `<img src=\"emoji:X\" alt=\"Y\">` → `<span role=\"img\" aria-label=\"Y\">X</span>`\n *   - Any remaining `emoji:X` text occurrences → `X`\n */\n\n// This module's functions (renderSignInComponents, etc.) are called imperatively from a\n// component's render, not React components/hooks themselves — so these classes can't be computed\n// at module scope: that runs at import time, before <ThunderIDProvider> has had a chance to\n// configure Emotion's CSP nonce, which would insert them into an un-nonced <style> tag. Instead\n// they're computed lazily, on first actual use (still just once — Emotion's own cache dedupes any\n// further calls to a no-op after that).\nlet richTextClassCache: string | undefined;\n\n/** Ensures rich-text content (including all inner elements from the server) always word-wraps. */\nfunction getRichTextClass(): string {\n  richTextClassCache ??= css`\n    overflow-wrap: anywhere;\n    & * {\n      overflow-wrap: anywhere;\n      word-break: break-word;\n    }\n    & .rich-text-align-left {\n      text-align: left;\n    }\n    & .rich-text-align-center {\n      text-align: center;\n    }\n    & .rich-text-align-right {\n      text-align: right;\n    }\n    & .rich-text-align-justify {\n      text-align: justify;\n    }\n    & a,\n    & .rich-text-link {\n      text-decoration: underline;\n    }\n    & span[role='img'] {\n      display: inline-block;\n    }\n  `;\n  return richTextClassCache;\n}\n\nlet authOptionIconClassCache: string | undefined;\n\nfunction getAuthOptionIconClass(): string {\n  authOptionIconClassCache ??= css({height: '1.25em', objectFit: 'contain', width: '1.25em'});\n  return authOptionIconClassCache;\n}\n\nexport type AuthType = 'signin' | 'signup' | 'recovery' | 'verification';\n\n/**\n * Get the appropriate FieldType for an input component.\n */\n/** Upper bound on STACK grid slots, so a mistyped `items` cannot render thousands of cells. */\nconst MAX_STACK_ITEMS = 12;\n\nconst getFieldType = (variant: EmbeddedFlowComponentType): FieldType => {\n  switch (variant) {\n    case EmbeddedFlowComponentType.EmailInput:\n      return FieldType.Email;\n    case EmbeddedFlowComponentType.PhoneInput:\n      return FieldType.Tel;\n    case EmbeddedFlowComponentType.PasswordInput:\n      return FieldType.Password;\n    case EmbeddedFlowComponentType.TextInput:\n    default:\n      return FieldType.Text;\n  }\n};\n\n/**\n * Get typography variant from component variant.\n */\nconst getTypographyVariant = (variant: string): any => {\n  const variantMap: Record<EmbeddedFlowTextVariant, TypographyVariant> = {\n    BODY_1: 'body1',\n    BODY_2: 'body2',\n    BUTTON_TEXT: 'button',\n    CAPTION: 'caption',\n    HEADING_1: 'h1',\n    HEADING_2: 'h2',\n    HEADING_3: 'h3',\n    HEADING_4: 'h4',\n    HEADING_5: 'h5',\n    HEADING_6: 'h6',\n    OVERLINE: 'overline',\n    SUBTITLE_1: 'subtitle1',\n    SUBTITLE_2: 'subtitle2',\n  };\n\n  return variantMap[variant] || 'h3';\n};\n\n/** Maps flow text color values to SDK typography color variants. */\nconst getTypographyColor = (color?: string): TypographyColor | undefined => {\n  switch (color?.toUpperCase()) {\n    case 'ERROR':\n      return 'error';\n    case 'WARNING':\n      return 'warning';\n    case 'SUCCESS':\n      return 'success';\n    case 'INFO':\n      return 'info';\n    case 'PRIMARY':\n      return 'primary';\n    case 'SECONDARY':\n      return 'secondary';\n    default:\n      return undefined;\n  }\n};\n\n/**\n * Check if a button text or action matches a social provider.\n */\nconst matchesSocialProvider = (\n  actionId: string,\n  eventType: string,\n  buttonText: string,\n  provider: string,\n  authType: AuthType,\n  /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\n  _componentVariant?: string,\n): boolean => {\n  const providerId: any = `${provider}_auth`;\n  const providerMatches: any = actionId === providerId || eventType === providerId;\n\n  // Social buttons usually have \"Sign in with X\" or \"Continue with X\" text,\n  // so also check button text for the provider name to increase chances of correct detection (especially for signup flows where action IDs are less standardized)\n  if (buttonText.toLowerCase().includes(provider)) {\n    return true;\n  }\n\n  // For signup, also check button text\n  if (authType === 'signup') {\n    return providerMatches || buttonText.toLowerCase().includes(provider);\n  }\n\n  return providerMatches;\n};\n\n/**\n * Create an auth component from flow component configuration.\n */\nconst createAuthComponentFromFlow = (\n  component: EmbeddedFlowComponent,\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  authType: AuthType,\n  options: {\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _theme?: any;\n    /** Additional data from the flow response, used for different dynamic data */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Current consent purpose being rendered. Set by CONSENT_PURPOSE block iteration. */\n    currentConsentPurpose?: ConsentPurposeData;\n    inStack?: boolean;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    key?: string | number;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    /** Renders RESEND actions; only attribute verification sets it, so other flows skip them as before. */\n    renderResend?: boolean;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  } = {},\n): ReactElement | null => {\n  const theme: any = options._theme;\n  const customRenderers: ComponentRendererMap = options._customRenderers ?? {};\n\n  const key: string | number = options.key || component.id;\n\n  const customRenderer: ComponentRenderer | undefined =\n    customRenderers[component.id] ?? customRenderers[component.type];\n  if (customRenderer) {\n    const renderCtx: ComponentRenderContext = {\n      additionalData: options.additionalData,\n      authType,\n      formErrors,\n      formValues,\n      isFormValid,\n      isLoading,\n      meta: options.meta,\n      resetForm,\n      onInputBlur: options.onInputBlur,\n      onInputChange,\n      onSubmit: options.onSubmit,\n      touchedFields,\n    };\n    // Key the element here so a renderer does not have to, as the built-in cases below do.\n    const rendered: ReactElement | null = customRenderer(component, renderCtx);\n\n    return rendered ? cloneElement(rendered, {key}) : null;\n  }\n\n  /** Resolve any remaining {{t()}} or {{meta()}} template expressions in a string at render time. */\n  const resolve = (text: string | undefined): string => {\n    if (!text || (!options.t && !options.meta)) {\n      return text || '';\n    }\n    return resolveFlowTemplateLiterals(text, {meta: options.meta, t: options.t || ((k: string): string => k)});\n  };\n\n  // The props a flow gives each of the resource pickers (USER_SELECT, AUTH_FLOW_SELECT, USER_TYPE_SELECT).\n  const resourceSelectProps = (): Omit<BaseUserSelectProps, 'fetchUsers' | 'mapping'> => {\n    const identifier: string = component.ref!;\n    const isTouched: boolean = touchedFields[identifier] || false;\n\n    return {\n      className: cx(options.inputClassName, component.classes),\n      component,\n      error: isTouched ? formErrors[identifier] : undefined,\n      id: component.id,\n      label: resolve(component.label) || '',\n      name: identifier,\n      onBlur: (): void => options.onInputBlur?.(identifier),\n      onChange: (event: ChangeEvent<HTMLSelectElement>): void => onInputChange(identifier, event.target.value),\n      onError: options.onPickerError,\n      placeholder: resolve(component.placeholder),\n      required: component.required,\n      value: formValues[identifier] || '',\n    };\n  };\n\n  // A component type this render cannot draw is logged and left out.\n  const skipUnsupported = (typeName: string): null => {\n    logger.warn(`${typeName} component type is not supported. Skipping render.`);\n\n    return null;\n  };\n\n  // A resend asks for a new code, so it submits its own action without the step's values or validation.\n  if (component.type === EmbeddedFlowComponentType.Resend && options.renderResend) {\n    return (\n      <Button\n        fullWidth\n        key={key}\n        id={component.id}\n        onClick={(): void => options.onSubmit?.(component, {}, true)}\n        disabled={isLoading || options.isTimeoutDisabled}\n        className={cx(options.buttonClassName, component.classes)}\n        variant=\"text\"\n        color=\"primary\"\n        type=\"button\"\n      >\n        {resolve(component.label)}\n      </Button>\n    );\n  }\n\n  switch (component.type) {\n    case EmbeddedFlowComponentType.TextInput:\n    case EmbeddedFlowComponentType.PasswordInput:\n    case EmbeddedFlowComponentType.EmailInput:\n    case EmbeddedFlowComponentType.PhoneInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n      const fieldType: string = getFieldType(component.type);\n\n      // Prefix/postfix are accepted on any text-family input. When either is present,\n      // route to AffixedField so the leading affix renders and submit-time composition\n      // is picked up by composeAffixedInputs via the sentinel keys.\n      // Both string.length and Array.length are defined, so a single truthy+length\n      // check covers `prefixes?: string | PrefixOption[]`.\n      const hasPrefixes: boolean = !!component.prefixes && component.prefixes.length > 0;\n      const hasPostfix: boolean = typeof component.postfix === 'string' && component.postfix.length > 0;\n\n      if (hasPrefixes || hasPostfix) {\n        const prefixStateKey: string = affixPrefixKey(identifier, options.vendor);\n        const postfixStateKey: string = affixPostfixKey(identifier, options.vendor);\n        const defaultPrefixValue: string = hasPrefixes\n          ? typeof component.prefixes === 'string'\n            ? component.prefixes\n            : (component.prefixes as PrefixOption[])[0].value\n          : '';\n        const selectedPrefix: string = formValues[prefixStateKey] ?? defaultPrefixValue;\n\n        return (\n          <AffixedField\n            key={key}\n            className={cx(options.inputClassName, component.classes)}\n            id={component.id}\n            label={resolve(component.label) || ''}\n            name={identifier}\n            placeholder={resolve(component.placeholder) || ''}\n            required={component.required || false}\n            error={error}\n            value={value}\n            type={fieldType}\n            prefixes={component.prefixes}\n            prefixValue={selectedPrefix}\n            onChange={(e: ChangeEvent<HTMLInputElement>): void => onInputChange(identifier, e.target.value)}\n            onBlur={(): void => options.onInputBlur?.(identifier)}\n            onPrefixChange={(newPrefix: string): void => onInputChange(prefixStateKey, newPrefix)}\n            onFocus={(): void => {\n              if (hasPrefixes && formValues[prefixStateKey] === undefined) {\n                onInputChange(prefixStateKey, defaultPrefixValue);\n              }\n              if (hasPostfix && formValues[postfixStateKey] === undefined) {\n                onInputChange(postfixStateKey, component.postfix!);\n              }\n            }}\n          />\n        );\n      }\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        name: identifier,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: fieldType as FieldType,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.OtpInput: {\n      const identifier: string = component.ref!;\n      const isDeviceUserCode: boolean = identifier === 'user_code';\n      const currentValue: string = formValues[identifier] || '';\n      const value: string = isDeviceUserCode ? currentValue.replace(/[-\\s]/g, '').toUpperCase() : currentValue;\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Device Grant user codes are eight uppercase characters today. Keep this fallback in the SDK\n      // until the flow UI metadata can supply the configured code length.\n      const reportedLength: number = Number(options.additionalData?.['otpLength']);\n      const otpLength: number | undefined = isDeviceUserCode\n        ? 8\n        : Number.isInteger(reportedLength) && reportedLength > 0\n          ? reportedLength\n          : undefined;\n      const numericOnly: boolean = !isDeviceUserCode && options.additionalData?.['otpNumericOnly'] !== 'false';\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        length: otpLength,\n        name: identifier,\n        numericOnly,\n        separatorAfter: isDeviceUserCode ? 4 : undefined,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: FieldType.Otp,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.Action: {\n      const actionId: string = component.id;\n      const eventType: string = component.eventType || '';\n      const buttonText: string = resolve(component.label);\n      const componentVariant: string = component.variant || '';\n\n      // Only validate on submit type events.\n      const shouldSkipValidation: boolean = eventType.toUpperCase() !== EmbeddedFlowEventType.Submit;\n\n      // Determine the button type based on the event type. Default to 'submit' if not recognized.\n      const buttonTypeEnum = {\n        [EmbeddedFlowEventType.Submit]: 'submit',\n        [EmbeddedFlowEventType.Reset]: 'reset',\n        [EmbeddedFlowEventType.Cancel]: 'button',\n        [EmbeddedFlowEventType.Trigger]: 'button',\n        [EmbeddedFlowEventType.Back]: 'button',\n      };\n      const buttonType: HTMLButtonElement['type'] = buttonTypeEnum[eventType.toUpperCase()] ?? 'submit';\n\n      // Approval waits while an approved authorization detail shows a modified value that cannot be submitted.\n      const hasInvalidConsentApproval: boolean =\n        !shouldSkipValidation &&\n        componentVariant.toLowerCase() === 'primary' &&\n        isConsentApprovalBlocked(\n          (options.additionalData?.['consentPrompt'] as ConsentPromptData | undefined)?.purposes ?? [],\n          formValues,\n        );\n\n      const handleClick = (event: MouseEvent<HTMLButtonElement>): void => {\n        // Flow actions are handled by the SDK. Cancel the native button action before\n        // onSubmit can switch steps or replace the form; otherwise the browser tries to\n        // submit a form that React has already disconnected from the document.\n        event.preventDefault();\n\n        if (options.onSubmit) {\n          const formData: Record<string, any> = {};\n          Object.keys(formValues).forEach((field: any) => {\n            // Include all values, even empty strings, to ensure proper submission\n            formData[field] = formValues[field];\n          });\n\n          // For consent actions, build the consent_decisions JSON from the form values.\n          // The allow action captures per-attribute choices; the deny action sends\n          // all purposes as rejected so the backend ConsentExecutor can fail the flow.\n          const consentPrompt: ConsentPromptData | undefined = options.additionalData?.['consentPrompt'] as\n            | ConsentPromptData\n            | undefined;\n          if (consentPrompt && eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            const isDeny: boolean = componentVariant.toLowerCase() !== 'primary';\n            const decisions: ConsentDecisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: consentPrompt.purposes.map(\n                (p: ConsentPurposeData): ConsentPurposeDecision => ({\n                  approved: !isDeny,\n                  elements: [\n                    // Permission purposes carry no essential elements, so the server sends null here\n                    ...(p.essential ?? []).map((e): ConsentAttributeElement => ({approved: !isDeny, name: e.name})),\n                    ...(p.optional ?? []).map(\n                      (e): ConsentAttributeElement =>\n                        getConsentElementDecision(\n                          p.purposeId,\n                          e,\n                          !isDeny && formValues[getConsentOptionalKey(p.purposeId, e.name)] === 'true',\n                          formValues,\n                        ),\n                    ),\n                  ],\n                  purposeName: p.purposeName!,\n                }),\n              ),\n            };\n            formData['consent_decisions'] = JSON.stringify(decisions);\n          }\n\n          // For submit events, pass the form data to the onSubmit callback. For other event types, reset the form and call onSubmit with an empty data object.\n          if (eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            options.onSubmit(component, formData, shouldSkipValidation);\n          } else {\n            resetForm();\n            options.onSubmit(component, {}, shouldSkipValidation);\n          }\n        }\n      };\n\n      // Render branded social login buttons for known action IDs\n\n      const socialButtonClassName: string = cx(options.buttonClassName, component.classes);\n\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'google', authType, componentVariant)) {\n        return <GoogleButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'github', authType, componentVariant)) {\n        return <GitHubButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'facebook', authType, componentVariant)) {\n        return <FacebookButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'microsoft', authType, componentVariant)) {\n        return <MicrosoftButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'linkedin', authType, componentVariant)) {\n        return <LinkedInButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'ethereum', authType, componentVariant)) {\n        return (\n          <SignInWithEthereumButton\n            key={key}\n            id={component.id}\n            onClick={handleClick}\n            className={socialButtonClassName}\n          />\n        );\n      }\n      if (actionId === 'prompt_mobile' || eventType === 'prompt_mobile') {\n        return <SmsOtpButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n\n      const startIconEl: ReactElement | null = component.startIcon ? (\n        <img src={component.startIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      const endIconEl: ReactElement | null = component.endIcon ? (\n        <img src={component.endIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      return (\n        <Button\n          fullWidth\n          key={key}\n          id={component.id}\n          onClick={handleClick}\n          disabled={\n            isLoading ||\n            (!isFormValid && !shouldSkipValidation) ||\n            hasInvalidConsentApproval ||\n            options.isTimeoutDisabled ||\n            (component as any).config?.disabled\n          }\n          className={cx(options.buttonClassName, component.classes)}\n          data-testid=\"thunderid-signin-submit\"\n          variant={component.variant?.toLowerCase() === 'primary' ? 'solid' : 'outline'}\n          color={component.variant?.toLowerCase() === 'primary' ? 'primary' : 'secondary'}\n          startIcon={startIconEl}\n          endIcon={endIconEl}\n          type={buttonType}\n        >\n          {buttonText || 'Submit'}\n        </Button>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Text: {\n      const variant: any = getTypographyVariant(component.variant!);\n      const color: TypographyColor | undefined = getTypographyColor(component.color);\n      const textAlignClass: string = css({\n        marginBottom: 2,\n        textAlign:\n          typeof component?.align === 'string' ? (component.align as React.CSSProperties['textAlign']) : 'left',\n      });\n      return (\n        <Typography\n          key={key}\n          id={component.id}\n          className={cx(component.classes, textAlignClass)}\n          variant={variant}\n          color={color}\n        >\n          {resolve(component.label)}\n        </Typography>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Divider: {\n      return <Divider key={key}>{resolve(component.label) || ''}</Divider>;\n    }\n\n    case EmbeddedFlowComponentType.Select: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Options are pre-sanitized by flowTransformer to {value: string, label: string} format\n      const selectOptions: any = (component.options || []).map((opt: any) => ({\n        label: typeof opt === 'string' ? opt : String(opt.label ?? opt.value ?? ''),\n        value: typeof opt === 'string' ? opt : String(opt.value ?? ''),\n      }));\n\n      return (\n        <Select\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          options={selectOptions}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.DateInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      return (\n        <DatePicker\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          dateFormat={component.dateFormat}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.OuSelect:\n      return skipUnsupported('OU_SELECT');\n\n    // The resource pickers load with a signed-in user's access token, so without a data source, which is every flow\n    // except InviteUser, they are not drawn.\n    case EmbeddedFlowComponentType.UserSelect:\n      return options.fetchUsers ? (\n        <BaseUserSelect key={key} {...resourceSelectProps()} fetchUsers={options.fetchUsers} />\n      ) : (\n        skipUnsupported('USER_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.AuthFlowSelect:\n      return options.fetchAuthFlows ? (\n        <BaseAuthFlowSelect key={key} {...resourceSelectProps()} fetchAuthFlows={options.fetchAuthFlows} />\n      ) : (\n        skipUnsupported('AUTH_FLOW_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.UserTypeSelect:\n      return options.fetchUserTypes ? (\n        <BaseUserTypeSelect key={key} {...resourceSelectProps()} fetchUserTypes={options.fetchUserTypes} />\n      ) : (\n        skipUnsupported('USER_TYPE_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.Block: {\n      if (component.components && component.components.length > 0) {\n        const formClass: string = css({\n          display: 'flex',\n          flexDirection: 'column',\n          gap: `calc(${theme?.vars?.spacing?.unit ?? '4px'} * 2)`,\n        });\n\n        const blockComponents: any = component.components\n          .map((childComponent: any, index: any) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n          .filter(Boolean);\n\n        // The submit button's `type=\"submit\"` (and pressing Enter in a field) would\n        // otherwise trigger the browser's native form submission — a GET request to\n        // the current URL with all field values (including passwords) as query params.\n        // Actual submission is handled entirely via `onClick`/`onSubmit` above.\n        return (\n          <form\n            id={component.id}\n            key={key}\n            className={cx(component.classes, formClass)}\n            onSubmit={(event: FormEvent<HTMLFormElement>): void => event.preventDefault()}\n          >\n            {blockComponents}\n          </form>\n        );\n      }\n      return null;\n    }\n\n    case EmbeddedFlowComponentType.RichText: {\n      const richTextAction: EmbeddedFlowComponentAction | undefined = component.action;\n\n      const dispatchRichTextAction = (): void => {\n        if (!richTextAction || !options.onSubmit) {\n          return;\n        }\n        const eventTypeValue = String(richTextAction.eventType ?? EmbeddedFlowEventType.Submit);\n        const shouldSkipValidation: boolean = eventTypeValue.toUpperCase() === String(EmbeddedFlowEventType.Trigger);\n        const syntheticAction: EmbeddedFlowComponent = {\n          eventType: eventTypeValue,\n          id: `${component.id}_action`,\n          ref: richTextAction.ref,\n          type: EmbeddedFlowComponentType.Action,\n        };\n        const formData: Record<string, string> = {};\n        Object.keys(formValues).forEach((field: string) => {\n          formData[field] = formValues[field];\n        });\n        options.onSubmit(syntheticAction, formData, shouldSkipValidation);\n      };\n\n      // Sentinel-anchor contract: only anchors carrying `data-action-ref` equal to\n      // richTextAction.ref dispatch the action. Anchors without the sentinel (or with\n      // a non-matching one) are treated as ordinary links and are ignored here.\n      const isMatchingSentinelAnchor = (anchor: HTMLAnchorElement): boolean =>\n        anchor.getAttribute('data-action-ref') === richTextAction?.ref;\n\n      const handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.MouseEvent<HTMLDivElement>): void => {\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      const handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.KeyboardEvent<HTMLDivElement>): void => {\n            if (event.key !== 'Enter' && event.key !== ' ') {\n              return;\n            }\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      return (\n        // Sentinel anchors are made keyboard-operable via the container's onKeyDown\n        // (Enter/Space activate the matching anchor). Authors should ensure the anchor\n        // is focusable (`href` or `tabIndex`); the click+keydown delegation covers both\n        // pointer and keyboard activation once focus lands on the anchor.\n        // eslint-disable-next-line jsx-a11y/no-static-element-interactions\n        <div\n          key={key}\n          className={getRichTextClass()}\n          onClick={handleRichTextClick}\n          onKeyDown={handleRichTextKeyDown}\n          // Manually sanitizes with `DOMPurify`.\n          // IMPORTANT: DO NOT REMOVE OR MODIFY THIS SANITIZATION STEP.\n          dangerouslySetInnerHTML={{__html: DOMPurify.sanitize(resolveEmojiUrisInHtml(resolve(component.label)))}}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Image: {\n      const explicitHeight: string = resolve(component.height?.toString());\n      const explicitWidth: string = resolve(component.width?.toString());\n      return (\n        <ImageComponent\n          key={key}\n          component={\n            {\n              config: {\n                alt: resolve(component.alt) || resolve(component.label) || 'Image',\n                height: explicitHeight || (options.inStack ? '50' : 'auto'),\n                src: resolve(component.src),\n                width: explicitWidth || (options.inStack ? '50' : '100%'),\n              },\n            } as any\n          }\n          formErrors={undefined!}\n          formValues={undefined!}\n          isFormValid={false}\n          isLoading={false}\n          onInputChange={(): void => {\n            throw new Error('Function not implemented.');\n          }}\n          touchedFields={undefined!}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Icon: {\n      const iconName: string = component.name || '';\n      const IconComponent: any = flowIconRegistry[iconName];\n      if (!IconComponent) {\n        logger.warn(`Unknown icon name: \"${iconName}\". Skipping render.`);\n        return null;\n      }\n      return <IconComponent key={key} size={component.size || 24} color={component.color || 'currentColor'} />;\n    }\n\n    case EmbeddedFlowComponentType.Stack: {\n      const direction: string = (component as any).direction || 'row';\n      const gap: number = (component as any).gap ?? 2;\n      const align: string = (component as any).align || 'center';\n      const justify: string = (component as any).justify || 'flex-start';\n\n      // `items` is the number of slots across the main axis and `direction` picks\n      // that axis: with `row` it is the column count (items: 2 with four buttons\n      // renders a 2 x 2 grid), and with `column` it is the row count and children\n      // flow into further columns. Fewer than two slots keeps the flex layout, so\n      // stacks authored before grid support are unaffected.\n      const rawItems: string | number | undefined = component.items;\n      const parsedItems: number =\n        typeof rawItems === 'string' ? Number(rawItems) : typeof rawItems === 'number' ? rawItems : NaN;\n      const items: number | null =\n        Number.isFinite(parsedItems) && Math.floor(parsedItems) >= 2\n          ? Math.min(Math.floor(parsedItems), MAX_STACK_ITEMS)\n          : null;\n      // CSS Grid has no reverse auto-flow, so the reverse variants fall back to\n      // their base axis rather than silently becoming a row.\n      const isColumn: boolean = direction.startsWith('column');\n      const gridJustify: string = component.justify ?? 'stretch';\n      // Equal `1fr` tracks fill the container, leaving `justify-content` no free\n      // space to distribute. Content-sized tracks restore it, so every justify\n      // value has a visible effect while the default stays an even split.\n      const track: string = gridJustify === 'stretch' ? '1fr' : 'auto';\n\n      const stackStyle: CSSProperties =\n        items !== null\n          ? {\n              alignItems: component.align ?? 'stretch',\n              display: 'grid',\n              gap: `${gap * 0.5}rem`,\n              gridAutoFlow: isColumn ? 'column' : 'row',\n              justifyContent: gridJustify,\n              width: '100%',\n              ...(isColumn\n                ? {gridTemplateRows: `repeat(${items}, ${track})`}\n                : {gridTemplateColumns: `repeat(${items}, ${track})`}),\n            }\n          : {\n              alignItems: align,\n              display: 'flex',\n              flexDirection: direction as CSSProperties['flexDirection'],\n              flexWrap: 'wrap',\n              gap: `${gap * 0.5}rem`,\n              justifyContent: justify,\n            };\n\n      const stackClass: string = css(stackStyle as CSSInterpolation);\n\n      const stackChildren: (ReactElement | null)[] = component.components\n        ? component.components.map((childComponent: any, index: number) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                inStack: true,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n        : [];\n\n      return (\n        <div key={key} id={component.id} className={cx(component.classes, stackClass)}>\n          {stackChildren}\n        </div>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Consent: {\n      const consentPromptRawData: ConsentPromptData | string | undefined = options.additionalData?.['consentPrompt'];\n\n      return (\n        <Consent\n          key={key}\n          consentData={consentPromptRawData as any}\n          formValues={formValues}\n          onInputChange={onInputChange}\n          t={options.t}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Timer: {\n      const textTemplate: string = resolve((component as any).label) || 'Time remaining: {time}';\n      const timeoutMs: number = Number(options.additionalData?.['stepTimeout']) || 0;\n      const expiresIn: number = timeoutMs > 0 ? Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000)) : 0;\n\n      return <FlowTimer key={key} expiresIn={expiresIn} textTemplate={textTemplate} />;\n    }\n\n    case EmbeddedFlowComponentType.CopyableText: {\n      const sourceKey: string | undefined = (component as any).source;\n      const value: string = sourceKey && options.additionalData ? String(options.additionalData[sourceKey] ?? '') : '';\n      const labelText: string | undefined = resolve((component as any).label) || undefined;\n\n      return <CopyableText key={key} label={labelText} masked={Boolean(component.masked)} value={value} />;\n    }\n\n    case EmbeddedFlowComponentType.KeyValueList: {\n      const sourceKey: string | undefined = component.source;\n      const pairs: KeyValuePair[] = parseKeyValuePairs(\n        sourceKey && options.additionalData ? options.additionalData[sourceKey] : undefined,\n      ).map((pair: KeyValuePair) => ({...pair, label: resolve(pair.label)}));\n\n      // An empty panel tells the user nothing, so a list with no pairs renders nothing at all.\n      if (pairs.length === 0) {\n        return null;\n      }\n\n      return <KeyValueList key={key} label={resolve(component.label) || undefined} pairs={pairs} />;\n    }\n\n    default:\n      // Gracefully handle unsupported component types by returning null\n      logger.warn(`Unsupported component type: ${component.type}. Skipping render.`);\n      return null;\n  }\n};\n\n/**\n * Processes an array of components and renders them as React elements for sign-in.\n */\nexport const renderSignInComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signin',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for sign-up.\n */\nexport const renderSignUpComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for recovery flow.\n */\nexport const renderRecoveryComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'recovery',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for attribute verification.\n */\nexport const renderVerificationComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: Parameters<typeof renderRecoveryComponents>[8],\n): ReactElement[] =>\n  components\n    .map((component: EmbeddedFlowComponent, index: number) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'verification',\n        {\n          ...options,\n          key: component.id ?? index,\n          renderResend: true,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for invite user.\n * This is used by both InviteUser and AcceptInvite components.\n */\nexport const renderInviteUserComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Function to fetch child organization units for OU_SELECT components. */\n    fetchOrganizationUnitChildren?: (\n      parentId: string,\n      limit: number,\n      offset: number,\n    ) => Promise<OrganizationUnitListResponse>;\n    inputClassName?: string;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,MAAMA,+DACJ,oBACA,oBACD;;;;;;;;;AAiBD,IAAIC;;AAGJ,SAAS,mBAA2B;AAClC,wBAAuB,mBAAG;;;;;;;;;;;;;;;;;;;;;;;;;;AA0B1B,QAAO;;AAGT,IAAIC;AAEJ,SAAS,yBAAiC;AACxC,8BAA6BC,oBAAI;EAAC,QAAQ;EAAU,WAAW;EAAW,OAAO;EAAS,CAAC;AAC3F,QAAO;;;;;;AAST,MAAM,kBAAkB;AAExB,MAAM,gBAAgB,YAAkD;AACtE,SAAQ,SAAR;EACE,KAAKC,8CAA0B,WAC7B,QAAOC,8BAAU;EACnB,KAAKD,8CAA0B,WAC7B,QAAOC,8BAAU;EACnB,KAAKD,8CAA0B,cAC7B,QAAOC,8BAAU;EACnB,KAAKD,8CAA0B;EAC/B,QACE,QAAOC,8BAAU;;;;;;AAOvB,MAAM,wBAAwB,YAAyB;AAiBrD,QAhBuE;EACrE,QAAQ;EACR,QAAQ;EACR,aAAa;EACb,SAAS;EACT,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,UAAU;EACV,YAAY;EACZ,YAAY;EACb,CAEiB,YAAY;;;AAIhC,MAAM,sBAAsB,UAAgD;AAC1E,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,QACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,YACH,QAAO;EACT,QACE;;;;;;AAON,MAAM,yBACJ,UACA,WACA,YACA,UACA,UAEA,sBACY;CACZ,MAAMC,aAAkB,GAAG,SAAS;CACpC,MAAMC,kBAAuB,aAAa,cAAc,cAAc;AAItE,KAAI,WAAW,aAAa,CAAC,SAAS,SAAS,CAC7C,QAAO;AAIT,KAAI,aAAa,SACf,QAAO,mBAAmB,WAAW,aAAa,CAAC,SAAS,SAAS;AAGvE,QAAO;;;;;AAMT,MAAM,+BACJ,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA,UAmCI,EAAE,KACkB;CACxB,MAAMC,QAAa,QAAQ;CAC3B,MAAMC,kBAAwC,QAAQ,oBAAoB,EAAE;CAE5E,MAAMC,MAAuB,QAAQ,OAAO,UAAU;CAEtD,MAAMC,iBACJ,gBAAgB,UAAU,OAAO,gBAAgB,UAAU;AAC7D,KAAI,gBAAgB;EAgBlB,MAAMC,WAAgC,eAAe,WAfX;GACxC,gBAAgB,QAAQ;GACxB;GACA;GACA;GACA;GACA;GACA,MAAM,QAAQ;GACd;GACA,aAAa,QAAQ;GACrB;GACA,UAAU,QAAQ;GAClB;GACD,CAEyE;AAE1E,SAAO,mCAAwB,UAAU,EAAC,KAAI,CAAC,GAAG;;;CAIpD,MAAM,WAAW,SAAqC;AACpD,MAAI,CAAC,QAAS,CAAC,QAAQ,KAAK,CAAC,QAAQ,KACnC,QAAO,QAAQ;AAEjB,8DAAmC,MAAM;GAAC,MAAM,QAAQ;GAAM,GAAG,QAAQ,OAAO,MAAsB;GAAG,CAAC;;CAI5G,MAAM,4BAAiF;EACrF,MAAMC,aAAqB,UAAU;EACrC,MAAMC,YAAqB,cAAc,eAAe;AAExD,SAAO;GACL,WAAWC,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;GACxD;GACA,OAAO,YAAY,WAAW,cAAc;GAC5C,IAAI,UAAU;GACd,OAAO,QAAQ,UAAU,MAAM,IAAI;GACnC,MAAM;GACN,cAAoB,QAAQ,cAAc,WAAW;GACrD,WAAW,UAAgD,cAAc,YAAY,MAAM,OAAO,MAAM;GACxG,SAAS,QAAQ;GACjB,aAAa,QAAQ,UAAU,YAAY;GAC3C,UAAU,UAAU;GACpB,OAAO,WAAW,eAAe;GAClC;;CAIH,MAAM,mBAAmB,aAA2B;AAClD,SAAO,KAAK,GAAG,SAAS,oDAAoD;AAE5E,SAAO;;AAIT,KAAI,UAAU,SAASX,8CAA0B,UAAU,QAAQ,aACjE,QACE,2CAACY;EACC;EAEA,IAAI,UAAU;EACd,eAAqB,QAAQ,WAAW,WAAW,EAAE,EAAE,KAAK;EAC5D,UAAU,aAAa,QAAQ;EAC/B,WAAWD,mBAAG,QAAQ,iBAAiB,UAAU,QAAQ;EACzD,SAAQ;EACR,OAAM;EACN,MAAK;YAEJ,QAAQ,UAAU,MAAM;IATpB,IAUE;AAIb,SAAQ,UAAU,MAAlB;EACE,KAAKX,8CAA0B;EAC/B,KAAKA,8CAA0B;EAC/B,KAAKA,8CAA0B;EAC/B,KAAKA,8CAA0B,YAAY;GACzC,MAAMS,aAAqB,UAAU;GACrC,MAAMI,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAC3D,MAAMC,YAAoB,aAAa,UAAU,KAAK;GAOtD,MAAMC,cAAuB,CAAC,CAAC,UAAU,YAAY,UAAU,SAAS,SAAS;GACjF,MAAMC,aAAsB,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,SAAS;AAEhG,OAAI,eAAe,YAAY;IAC7B,MAAMC,iBAAyBC,4CAAe,YAAY,QAAQ,OAAO;IACzE,MAAMC,kBAA0BC,6CAAgB,YAAY,QAAQ,OAAO;IAC3E,MAAMC,qBAA6B,cAC/B,OAAO,UAAU,aAAa,WAC5B,UAAU,WACT,UAAU,SAA4B,GAAG,QAC5C;IACJ,MAAMC,iBAAyB,WAAW,mBAAmB;AAE7D,WACE,2CAACC;KAEC,WAAWb,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;KACxD,IAAI,UAAU;KACd,OAAO,QAAQ,UAAU,MAAM,IAAI;KACnC,MAAM;KACN,aAAa,QAAQ,UAAU,YAAY,IAAI;KAC/C,UAAU,UAAU,YAAY;KACzB;KACA;KACP,MAAM;KACN,UAAU,UAAU;KACpB,aAAa;KACb,WAAW,MAA2C,cAAc,YAAY,EAAE,OAAO,MAAM;KAC/F,cAAoB,QAAQ,cAAc,WAAW;KACrD,iBAAiB,cAA4B,cAAc,gBAAgB,UAAU;KACrF,eAAqB;AACnB,UAAI,eAAe,WAAW,oBAAoB,OAChD,eAAc,gBAAgB,mBAAmB;AAEnD,UAAI,cAAc,WAAW,qBAAqB,OAChD,eAAc,iBAAiB,UAAU,QAAS;;OApBjD,IAuBL;;AAkBN,kCAdmBc,iCAAY;IAC7B,WAAWd,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,MAAM;IACN,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAM;IACN;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAKX,8CAA0B,UAAU;GACvC,MAAMS,aAAqB,UAAU;GACrC,MAAMiB,mBAA4B,eAAe;GACjD,MAAMC,eAAuB,WAAW,eAAe;GACvD,MAAMd,QAAgB,mBAAmB,aAAa,QAAQ,UAAU,GAAG,CAAC,aAAa,GAAG;GAE5F,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAI3D,MAAMc,iBAAyB,OAAO,QAAQ,iBAAiB,aAAa;GAC5E,MAAMC,YAAgC,mBAClC,IACA,OAAO,UAAU,eAAe,IAAI,iBAAiB,IACnD,iBACA;GACN,MAAMC,cAAuB,CAAC,oBAAoB,QAAQ,iBAAiB,sBAAsB;AAmBjG,kCAjBmBL,iCAAY;IAC7B,WAAWd,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,QAAQ;IACR,MAAM;IACN;IACA,gBAAgB,mBAAmB,IAAI;IACvC,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAMV,8BAAU;IAChB;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAKD,8CAA0B,QAAQ;GACrC,MAAM+B,WAAmB,UAAU;GACnC,MAAMC,YAAoB,UAAU,aAAa;GACjD,MAAMC,aAAqB,QAAQ,UAAU,MAAM;GACnD,MAAMC,mBAA2B,UAAU,WAAW;GAGtD,MAAMC,uBAAgC,UAAU,aAAa,KAAKC,0CAAsB;GAUxF,MAAMC,aAPiB;KACpBD,0CAAsB,SAAS;KAC/BA,0CAAsB,QAAQ;KAC9BA,0CAAsB,SAAS;KAC/BA,0CAAsB,UAAU;KAChCA,0CAAsB,OAAO;IAC/B,CAC4D,UAAU,aAAa,KAAK;GAGzF,MAAME,4BACJ,CAAC,wBACD,iBAAiB,aAAa,KAAK,aACnCC,0CACG,QAAQ,iBAAiB,mBAAoD,YAAY,EAAE,EAC5F,WACD;GAEH,MAAM,eAAe,UAA+C;AAIlE,UAAM,gBAAgB;AAEtB,QAAI,QAAQ,UAAU;KACpB,MAAMC,WAAgC,EAAE;AACxC,YAAO,KAAK,WAAW,CAAC,SAAS,UAAe;AAE9C,eAAS,SAAS,WAAW;OAC7B;KAKF,MAAMC,gBAA+C,QAAQ,iBAAiB;AAG9E,SAAI,iBAAiB,UAAU,aAAa,KAAKL,0CAAsB,QAAQ;MAC7E,MAAMM,SAAkB,iBAAiB,aAAa,KAAK;MAC3D,MAAMC,YAA8B;OAClC,UAAU,CAAC;OACX,GAAI,SAAS,EAAC,QAAQC,qCAAiB,oBAAmB,GAAG,EAAE;OAC/D,UAAU,cAAc,SAAS,KAC9B,OAAmD;QAClD,UAAU,CAAC;QACX,UAAU,CAER,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAgC;SAAC,UAAU,CAAC;SAAQ,MAAM,EAAE;SAAK,EAAE,EAC/F,IAAI,EAAE,YAAY,EAAE,EAAE,KACnB,yDAEG,EAAE,WACF,GACA,CAAC,UAAU,WAAWC,kDAAsB,EAAE,WAAW,EAAE,KAAK,MAAM,QACtE,WACD,CACJ,CACF;QACD,aAAa,EAAE;QAChB,EACF;OACF;AACD,eAAS,uBAAuB,KAAK,UAAU,UAAU;;AAI3D,SAAI,UAAU,aAAa,KAAKT,0CAAsB,OACpD,SAAQ,SAAS,WAAW,UAAU,qBAAqB;UACtD;AACL,iBAAW;AACX,cAAQ,SAAS,WAAW,EAAE,EAAE,qBAAqB;;;;GAO3D,MAAMU,wBAAgCnC,mBAAG,QAAQ,iBAAiB,UAAU,QAAQ;AAEpF,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,2CAACoC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,2CAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,2CAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,aAAa,UAAU,iBAAiB,CACjG,QAAO,2CAACC;IAA0B,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAEhH,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,2CAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QACE,2CAACC;IAEC,IAAI,UAAU;IACd,SAAS;IACT,WAAW;MAHN,IAIL;AAGN,OAAI,aAAa,mBAAmB,cAAc,gBAChD,QAAO,2CAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;GAG7G,MAAMC,cAAmC,UAAU,YACjD,2CAAC;IAAI,KAAK,UAAU;IAAW,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC9F;GAEJ,MAAMC,YAAiC,UAAU,UAC/C,2CAAC;IAAI,KAAK,UAAU;IAAS,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC5F;AAEJ,UACE,2CAAC3C;IACC;IAEA,IAAI,UAAU;IACd,SAAS;IACT,UACE,aACC,CAAC,eAAe,CAAC,wBAClB,6BACA,QAAQ,qBACP,UAAkB,QAAQ;IAE7B,WAAWD,mBAAG,QAAQ,iBAAiB,UAAU,QAAQ;IACzD,eAAY;IACZ,SAAS,UAAU,SAAS,aAAa,KAAK,YAAY,UAAU;IACpE,OAAO,UAAU,SAAS,aAAa,KAAK,YAAY,YAAY;IACpE,WAAW;IACX,SAAS;IACT,MAAM;cAEL,cAAc;MAlBV,IAmBE;;EAIb,KAAKX,8CAA0B,MAAM;GACnC,MAAMwD,UAAe,qBAAqB,UAAU,QAAS;GAC7D,MAAMC,QAAqC,mBAAmB,UAAU,MAAM;GAC9E,MAAMC,iBAAyB3D,oBAAI;IACjC,cAAc;IACd,WACE,OAAO,WAAW,UAAU,WAAY,UAAU,QAA6C;IAClG,CAAC;AACF,UACE,2CAAC4D;IAEC,IAAI,UAAU;IACd,WAAWhD,mBAAG,UAAU,SAAS,eAAe;IACvC;IACF;cAEN,QAAQ,UAAU,MAAM;MANpB,IAOM;;EAIjB,KAAKX,8CAA0B,QAC7B,QAAO,2CAAC4D,qCAAmB,QAAQ,UAAU,MAAM,IAAI,MAAlC,IAA+C;EAGtE,KAAK5D,8CAA0B,QAAQ;GACrC,MAAMS,aAAqB,UAAU;GACrC,MAAMI,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAG3D,MAAM+C,iBAAsB,UAAU,WAAW,EAAE,EAAE,KAAK,SAAc;IACtE,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,IAAI,SAAS,GAAG;IAC3E,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,GAAG;IAC/D,EAAE;AAEH,UACE,2CAACC;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,SAAS;IACF;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAWnD,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAKX,8CAA0B,WAAW;GACxC,MAAMS,aAAqB,UAAU;GACrC,MAAMI,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;AAE3D,UACE,2CAACiD;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,YAAY,UAAU;IACf;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAWpD,mBAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAKX,8CAA0B,SAC7B,QAAO,gBAAgB,YAAY;EAIrC,KAAKA,8CAA0B,WAC7B,QAAO,QAAQ,aACb,2CAACgE;GAAyB,GAAI,qBAAqB;GAAE,YAAY,QAAQ;KAApD,IAAkE,GAEvF,gBAAgB,cAAc;EAGlC,KAAKhE,8CAA0B,eAC7B,QAAO,QAAQ,iBACb,2CAACiE;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAKjE,8CAA0B,eAC7B,QAAO,QAAQ,iBACb,2CAACkE;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAKlE,8CAA0B;AAC7B,OAAI,UAAU,cAAc,UAAU,WAAW,SAAS,GAAG;IAC3D,MAAMmE,YAAoBpE,oBAAI;KAC5B,SAAS;KACT,eAAe;KACf,KAAK,QAAQ,OAAO,MAAM,SAAS,QAAQ,MAAM;KAClD,CAAC;IAEF,MAAMqE,kBAAuB,UAAU,WACpC,KAAK,gBAAqB,UACzB,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;KACE,GAAG;KACH,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;KAC9C,CACF,CACF,CACA,OAAO,QAAQ;AAMlB,WACE,2CAAC;KACC,IAAI,UAAU;KAEd,WAAWzD,mBAAG,UAAU,SAAS,UAAU;KAC3C,WAAW,UAA4C,MAAM,gBAAgB;eAE5E;OAJI,IAKA;;AAGX,UAAO;EAGT,KAAKX,8CAA0B,UAAU;GACvC,MAAMqE,iBAA0D,UAAU;GAE1E,MAAM,+BAAqC;AACzC,QAAI,CAAC,kBAAkB,CAAC,QAAQ,SAC9B;IAEF,MAAM,iBAAiB,OAAO,eAAe,aAAajC,0CAAsB,OAAO;IACvF,MAAMD,uBAAgC,eAAe,aAAa,KAAK,OAAOC,0CAAsB,QAAQ;IAC5G,MAAMkC,kBAAyC;KAC7C,WAAW;KACX,IAAI,GAAG,UAAU,GAAG;KACpB,KAAK,eAAe;KACpB,MAAMtE,8CAA0B;KACjC;IACD,MAAMuE,WAAmC,EAAE;AAC3C,WAAO,KAAK,WAAW,CAAC,SAAS,UAAkB;AACjD,cAAS,SAAS,WAAW;MAC7B;AACF,YAAQ,SAAS,iBAAiB,UAAU,qBAAqB;;GAMnE,MAAM,4BAA4B,WAChC,OAAO,aAAa,kBAAkB,KAAK,gBAAgB;GAE7D,MAAMC,sBAA2E,kBAC5E,UAAkD;IACjD,MAAMC,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;GAEJ,MAAMC,wBAAgF,kBACjF,UAAqD;AACpD,QAAI,MAAM,QAAQ,WAAW,MAAM,QAAQ,IACzC;IAEF,MAAMD,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;AAEJ,UAME,2CAAC;IAEC,WAAW,kBAAkB;IAC7B,SAAS;IACT,WAAW;IAGX,yBAAyB,EAAC,QAAQE,kBAAU,yDAAgC,QAAQ,UAAU,MAAM,CAAC,CAAC,EAAC;MANlG,IAOL;;EAIN,KAAK3E,8CAA0B,OAAO;GACpC,MAAM4E,iBAAyB,QAAQ,UAAU,QAAQ,UAAU,CAAC;GACpE,MAAMC,gBAAwB,QAAQ,UAAU,OAAO,UAAU,CAAC;AAClE,UACE,2CAACC;IAEC,WACE,EACE,QAAQ;KACN,KAAK,QAAQ,UAAU,IAAI,IAAI,QAAQ,UAAU,MAAM,IAAI;KAC3D,QAAQ,mBAAmB,QAAQ,UAAU,OAAO;KACpD,KAAK,QAAQ,UAAU,IAAI;KAC3B,OAAO,kBAAkB,QAAQ,UAAU,OAAO;KACnD,EACF;IAEH,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,WAAW;IACX,qBAA2B;AACzB,WAAM,IAAI,MAAM,4BAA4B;;IAE9C,eAAe;MAlBV,IAmBL;;EAIN,KAAK9E,8CAA0B,MAAM;GACnC,MAAM+E,WAAmB,UAAU,QAAQ;GAC3C,MAAMC,gBAAqBC,iCAAiB;AAC5C,OAAI,CAAC,eAAe;AAClB,WAAO,KAAK,uBAAuB,SAAS,qBAAqB;AACjE,WAAO;;AAET,UAAO,2CAAC;IAAwB,MAAM,UAAU,QAAQ;IAAI,OAAO,UAAU,SAAS;MAA3D,IAA6E;;EAG1G,KAAKjF,8CAA0B,OAAO;GACpC,MAAMkF,YAAqB,UAAkB,aAAa;GAC1D,MAAMC,MAAe,UAAkB,OAAO;GAC9C,MAAMC,QAAiB,UAAkB,SAAS;GAClD,MAAMC,UAAmB,UAAkB,WAAW;GAOtD,MAAMC,WAAwC,UAAU;GACxD,MAAMC,cACJ,OAAO,aAAa,WAAW,OAAO,SAAS,GAAG,OAAO,aAAa,WAAW,WAAW;GAC9F,MAAMC,QACJ,OAAO,SAAS,YAAY,IAAI,KAAK,MAAM,YAAY,IAAI,IACvD,KAAK,IAAI,KAAK,MAAM,YAAY,EAAE,gBAAgB,GAClD;GAGN,MAAMC,WAAoB,UAAU,WAAW,SAAS;GACxD,MAAMC,cAAsB,UAAU,WAAW;GAIjD,MAAMC,QAAgB,gBAAgB,YAAY,QAAQ;GAwB1D,MAAMC,aAAqB7F,oBArBzB,UAAU,OACN;IACE,YAAY,UAAU,SAAS;IAC/B,SAAS;IACT,KAAK,GAAG,MAAM,GAAI;IAClB,cAAc,WAAW,WAAW;IACpC,gBAAgB;IAChB,OAAO;IACP,GAAI,WACA,EAAC,kBAAkB,UAAU,MAAM,IAAI,MAAM,IAAG,GAChD,EAAC,qBAAqB,UAAU,MAAM,IAAI,MAAM,IAAG;IACxD,GACD;IACE,YAAY;IACZ,SAAS;IACT,eAAe;IACf,UAAU;IACV,KAAK,GAAG,MAAM,GAAI;IAClB,gBAAgB;IACjB,CAEuD;GAE9D,MAAM8F,gBAAyC,UAAU,aACrD,UAAU,WAAW,KAAK,gBAAqB,UAC7C,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;IACE,GAAG;IACH,SAAS;IACT,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;IAC9C,CACF,CACF,GACD,EAAE;AAEN,UACE,2CAAC;IAAc,IAAI,UAAU;IAAI,WAAWlF,mBAAG,UAAU,SAAS,WAAW;cAC1E;MADO,IAEJ;;EAIV,KAAKX,8CAA0B,SAAS;GACtC,MAAM8F,uBAA+D,QAAQ,iBAAiB;AAE9F,UACE,2CAACC;IAEC,aAAa;IACD;IACG;IACf,GAAG,QAAQ;MAJN,IAKL;;EAIN,KAAK/F,8CAA0B,OAAO;GACpC,MAAMgG,eAAuB,QAAS,UAAkB,MAAM,IAAI;GAClE,MAAMC,YAAoB,OAAO,QAAQ,iBAAiB,eAAe,IAAI;AAG7E,UAAO,2CAACC;IAAoB,WAFF,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC,GAAG;IAErC;MAAzC,IAAyD;;EAGlF,KAAKlG,8CAA0B,cAAc;GAC3C,MAAMmG,YAAiC,UAAkB;GACzD,MAAMtF,QAAgB,aAAa,QAAQ,iBAAiB,OAAO,QAAQ,eAAe,cAAc,GAAG,GAAG;AAG9G,UAAO,2CAACuF;IAAuB,OAFO,QAAS,UAAkB,MAAM,IAAI;IAE1B,QAAQ,QAAQ,UAAU,OAAO;IAAS;MAAjE,IAA0E;;EAGtG,KAAKpG,8CAA0B,cAAc;GAC3C,MAAMmG,YAAgC,UAAU;GAChD,MAAME,oDACJ,aAAa,QAAQ,iBAAiB,QAAQ,eAAe,aAAa,OAC3E,CAAC,KAAK,UAAwB;IAAC,GAAG;IAAM,OAAO,QAAQ,KAAK,MAAM;IAAC,EAAE;AAGtE,OAAI,MAAM,WAAW,EACnB,QAAO;AAGT,UAAO,2CAACC;IAAuB,OAAO,QAAQ,UAAU,MAAM,IAAI;IAAkB;MAA1D,IAAmE;;EAG/F;AAEE,UAAO,KAAK,+BAA+B,UAAU,KAAK,oBAAoB;AAC9E,UAAO;;;;;;AAOb,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAqBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,4BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,gCACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAEA,WACG,KAAK,WAAkC,UACtC,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,gBACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACrB,cAAc;CACf,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;;AAMjD,MAAa,8BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAmCA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK"}

package/dist/cjs/contexts/ComponentRenderer/ComponentRendererContext.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ComponentRendererContext.cjs","names":["ComponentRendererContext: Context<ComponentRendererMap>"],"sources":["../../../../src/contexts/ComponentRenderer/ComponentRendererContext.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {EmbeddedFlowComponent, FlowMetadataResponse} from '@thunderid/browser';\nimport {Context, createContext, ReactElement} from 'react';\n\nexport interface ComponentRenderContext {\n  additionalData?: Record<string, any>;\n  authType: 'signin' | 'signup' | 'recovery';\n  formErrors: Record<string, string>;\n  formValues: Record<string, string>;\n  isFormValid: boolean;\n  isLoading: boolean;\n  meta?: FlowMetadataResponse | null;\n  resetForm?: () => void;\n  onInputBlur?: (name: string) => void;\n  onInputChange: (name: string, value: string) => void;\n  onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n  touchedFields: Record<string, boolean>;\n}\n\nexport type ComponentRenderer = (\n  component: EmbeddedFlowComponent,\n  context: ComponentRenderContext,\n) => ReactElement | null;\n\nexport type ComponentRendererMap = Record<string, ComponentRenderer>;\n\nconst ComponentRendererContext: Context<ComponentRendererMap> = createContext<ComponentRendererMap>({});\n\nexport default ComponentRendererContext;\n"],"mappings":";;;;;AA4BA,MAAMA,oDAA8F,EAAE,CAAC;AAEvG,uCAAe"}
+{"version":3,"file":"ComponentRendererContext.cjs","names":["ComponentRendererContext: Context<ComponentRendererMap>"],"sources":["../../../../src/contexts/ComponentRenderer/ComponentRendererContext.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {EmbeddedFlowComponent, FlowMetadataResponse} from '@thunderid/browser';\nimport {Context, createContext, ReactElement} from 'react';\n\nexport interface ComponentRenderContext {\n  additionalData?: Record<string, any>;\n  authType: 'signin' | 'signup' | 'recovery' | 'verification';\n  formErrors: Record<string, string>;\n  formValues: Record<string, string>;\n  isFormValid: boolean;\n  isLoading: boolean;\n  meta?: FlowMetadataResponse | null;\n  resetForm?: () => void;\n  onInputBlur?: (name: string) => void;\n  onInputChange: (name: string, value: string) => void;\n  onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n  touchedFields: Record<string, boolean>;\n}\n\nexport type ComponentRenderer = (\n  component: EmbeddedFlowComponent,\n  context: ComponentRenderContext,\n) => ReactElement | null;\n\nexport type ComponentRendererMap = Record<string, ComponentRenderer>;\n\nconst ComponentRendererContext: Context<ComponentRendererMap> = createContext<ComponentRendererMap>({});\n\nexport default ComponentRendererContext;\n"],"mappings":";;;;;AA4BA,MAAMA,oDAA8F,EAAE,CAAC;AAEvG,uCAAe"}

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs

@@ -261,6 +261,19 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 			profile: payload
 		}));
 	};
+	/**
+	* Re-reads `/users/me` into the session profile, so a change made outside the profile API, such as a
+	* recorded verification, shows. Like a profile update, the result replaces the profile; ID token
+	* claims are not merged back in, since they may hold a value the user has since changed.
+	*/
+	const revalidateProfile = async () => {
+		if (preferences?.user?.fetchUserProfile === false) return;
+		handleProfileUpdate(await require_getUsersMe.default({
+			baseUrl,
+			instanceId,
+			url: (0, __thunderid_browser.resolveResourceEndpoint)("usersMe", config)
+		}));
+	};
 	const getDecodedIdToken = (0, react.useCallback)(async () => client.getDecodedIdToken(), [client]);
 	const getIdToken = (0, react.useCallback)(async () => client.getIdToken(), [client]);
 	const getAccessToken = (0, react.useCallback)(async () => client.getAccessToken(), [client]);
@@ -383,6 +396,7 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 						profile: userProfile,
 						userSchema,
 						onUpdateProfile: handleProfileUpdate,
+						revalidateProfile,
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ComponentRendererProvider.default, {
 							renderers: extensions?.components?.renderers ?? {},
 							children

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","storageManagerRef: any","useBrowserUrl","requestBaseUrl: string","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","SPAUtils","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getGrantedPermissions: () => Promise<string[]>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  createResourceInvalidator,\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveRequestBaseUrl,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport getUsersMe from '../../api/account/getUsersMe';\nimport getUsersMeMeta from '../../api/account/getUsersMeMeta';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  // The base the SDK's API requests are built on. In backend mode it's the backend's proxy.\n  const requestBaseUrl: string = resolveRequestBaseUrl({baseUrl: initialBaseUrl, endpoints: rest.endpoints}) ?? '';\n  const [baseUrl, setBaseUrl] = useState<string>(requestBaseUrl);\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl: initialBaseUrl ?? '',\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(requestBaseUrl);\n  }, [requestBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${resolveRequestBaseUrl(await client.getConfiguration()) ?? ''}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getGrantedPermissions: () => Promise<string[]> = useCallback(\n    async (): Promise<string[]> => client.getGrantedPermissions(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(resolveRequestBaseUrl(reinitializedConfig) ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getGrantedPermissions,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getGrantedPermissions,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider profile={userProfile!} userSchema={userSchema} onUpdateProfile={handleProfileUpdate}>\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuCA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uCAAsB,UAAU,OAAO;CAEvC,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,2FAA4E,EAAE,EAAE,CAAC;CACvF,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAiC,KAAK;CACnD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,YAAY,qCAAkE,KAAK;CAE1F,MAAMC,gEAA+C;EAAC,SAAS;EAAgB,WAAW,KAAK;EAAU,CAAC,IAAI;CAC9G,MAAM,CAAC,SAAS,kCAA+B,eAAe;CAC9D,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA,SAAS,kBAAkB;EAC3B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;CAIjF,MAAMC,4CAAwF,KAAK;AAEnG,4BAAgB;AACd,aAAW,eAAe;IACzB,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,kDAAyB,MAAM,OAAO,kBAAkB,CAAC,IAAI,GAAG;AAClF,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,+DAA4C,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,2BAAW;MACtC,SAAS;MACT,sDAA6B,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,YAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,+BAAe;MACnC,SAAS;MACT,sDAA6B,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,YAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,wEAA+C,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,WAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQC,6BAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMP,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMM,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,wEAA+C,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,+CACJ,YAA+B,OAAO,uBAAuB,EAC7D,CAAC,OAAO,CACT;CAED,MAAMC,2CAA4E,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,4DAAiC,oBAAoB,IAAI,GAAG;AAC5D,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MAAa,SAAS;MAA0B;MAAY,iBAAiB;gBAC5E,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","storageManagerRef: any","useBrowserUrl","requestBaseUrl: string","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","SPAUtils","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getGrantedPermissions: () => Promise<string[]>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  createResourceInvalidator,\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveRequestBaseUrl,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport getUsersMe from '../../api/account/getUsersMe';\nimport getUsersMeMeta from '../../api/account/getUsersMeMeta';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  // The base the SDK's API requests are built on. In backend mode it's the backend's proxy.\n  const requestBaseUrl: string = resolveRequestBaseUrl({baseUrl: initialBaseUrl, endpoints: rest.endpoints}) ?? '';\n  const [baseUrl, setBaseUrl] = useState<string>(requestBaseUrl);\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl: initialBaseUrl ?? '',\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(requestBaseUrl);\n  }, [requestBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${resolveRequestBaseUrl(await client.getConfiguration()) ?? ''}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  /**\n   * Re-reads `/users/me` into the session profile, so a change made outside the profile API, such as a\n   * recorded verification, shows. Like a profile update, the result replaces the profile; ID token\n   * claims are not merged back in, since they may hold a value the user has since changed.\n   */\n  const revalidateProfile = async (): Promise<void> => {\n    if (preferences?.user?.fetchUserProfile === false) return;\n\n    handleProfileUpdate(\n      await getUsersMe({\n        baseUrl,\n        instanceId,\n        url: resolveResourceEndpoint('usersMe', config),\n      }),\n    );\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getGrantedPermissions: () => Promise<string[]> = useCallback(\n    async (): Promise<string[]> => client.getGrantedPermissions(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(resolveRequestBaseUrl(reinitializedConfig) ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getGrantedPermissions,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getGrantedPermissions,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile!}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n                revalidateProfile={revalidateProfile}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuCA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uCAAsB,UAAU,OAAO;CAEvC,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,2FAA4E,EAAE,EAAE,CAAC;CACvF,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAiC,KAAK;CACnD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,YAAY,qCAAkE,KAAK;CAE1F,MAAMC,gEAA+C;EAAC,SAAS;EAAgB,WAAW,KAAK;EAAU,CAAC,IAAI;CAC9G,MAAM,CAAC,SAAS,kCAA+B,eAAe;CAC9D,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA,SAAS,kBAAkB;EAC3B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;CAIjF,MAAMC,4CAAwF,KAAK;AAEnG,4BAAgB;AACd,aAAW,eAAe;IACzB,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,kDAAyB,MAAM,OAAO,kBAAkB,CAAC,IAAI,GAAG;AAClF,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,+DAA4C,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,2BAAW;MACtC,SAAS;MACT,sDAA6B,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,YAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,+BAAe;MACnC,SAAS;MACT,sDAA6B,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,YAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,wEAA+C,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,WAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQC,6BAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMP,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMM,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,wEAA+C,QAAQ;GACvD,SAAS;GACV,EAAE;;;;;;;CAQL,MAAM,oBAAoB,YAA2B;AACnD,MAAI,aAAa,MAAM,qBAAqB,MAAO;AAEnD,sBACE,MAAMJ,2BAAW;GACf;GACA;GACA,sDAA6B,WAAW,OAAO;GAChD,CAAC,CACH;;CAGH,MAAMa,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,+CACJ,YAA+B,OAAO,uBAAuB,EAC7D,CAAC,OAAO,CACT;CAED,MAAMC,2CAA4E,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,4DAAiC,oBAAoB,IAAI,GAAG;AAC5D,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MACC,SAAS;MACG;MACZ,iBAAiB;MACE;gBAEnB,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}