@vertesia/ui 1.5.0-dev.20260910.052912Z → 1.5.1

package/src/i18n/locales/tr.json

@@ -245,6 +245,17 @@
     "auth.email.placeholder": "siz@sirket.com",
     "auth.email.title": "Vertesia'ya hoş geldiniz",
     "auth.error": "Hata: {{message}}",
+    "auth.password.body": "Bu hesabın parolasını girin.",
+    "auth.password.continue": "Parolayla devam et",
+    "auth.password.eyebrow": "Parolayla oturum açma",
+    "auth.password.failed": "Oturumunuz açılamadı. Lütfen tekrar deneyin.",
+    "auth.password.invalidCredentials": "E-posta veya parola hatalı.",
+    "auth.password.label": "Parola",
+    "auth.password.notAvailable": "Bu e-posta için parolayla oturum açma kullanılamıyor.",
+    "auth.password.required": "Parolanızı girin.",
+    "auth.password.submit": "Oturum aç",
+    "auth.password.title": "Parolanızı girin",
+    "auth.password.tooManyAttempts": "Çok fazla deneme yapıldı. Birkaç dakika bekleyip tekrar deneyin.",
     "auth.pending.authenticating": "Kimlik doğrulanıyor",
     "auth.pending.body": "Bir saniye — sizi güvenli bir şekilde aktarıyoruz. Yalnızca birkaç saniye sürer.",
     "auth.pending.cancel": "İptal",
@@ -365,6 +376,7 @@
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "MCP bağlantılarını yönet",
     "mcpConnections.managedByApp": "Uygulama tarafından yönetiliyor",
+    "mcpConnections.noAuthentication": "Kimlik doğrulama yok",
     "mcpConnections.settings": "Ayarlar",
     "mcpConnections.subtitle": "Bu konuşma için kullanılabilen MCP sunucularını yönetin.",
     "mcpConnections.title": "MCP",
@@ -474,10 +486,10 @@
     "store.actions.changeContentTypeDesc": "Seçili belgelerin İçerik Türünü değiştirin",
     "store.actions.changeType": "Türü Değiştir",
     "store.actions.chooseExistingCollections": "Mevcut koleksiyonlardan seçin",
-    "store.actions.chooseWorkflowRule": "Başlatılacak bir iş akışı kuralı seçin:",
     "store.actions.confirmDeleteAll": "Seçili tüm nesneleri silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
     "store.actions.confirmDeleteSelected": "Seçili nesneleri silmek istediğinizden emin misiniz?\nBu, koleksiyonlardan kaldırma işlemi değildir.",
     "store.actions.confirmRemoveFromCollection": "Seçili nesneleri bu koleksiyondan kaldırmak istediğinizden emin misiniz?",
+    "store.actions.confirmRunIntake": "Alımı yeniden çalıştırmak seçili nesneleri yeniden işler ve içerik türlerinin ve özelliklerinin üzerine yazabilir. Devam edilsin mi?",
     "store.actions.createNew": "Yeni oluştur",
     "store.actions.delete": "Sil",
     "store.actions.deleteObjects": "Nesneleri Sil",
@@ -486,20 +498,22 @@
     "store.actions.errorDeletingObjects": "Nesneler silinirken hata oluştu",
     "store.actions.errorExportProperties": "Özellikleri Dışa Aktarma Hatası",
     "store.actions.errorRemovingObjects": "Nesneler koleksiyondan kaldırılırken hata oluştu",
-    "store.actions.errorStartingWorkflow": "İş akışı başlatılırken hata oluştu",
+    "store.actions.errorStartingIntake": "Alım başlatılamadı",
     "store.actions.exportAllObjectProperties": "Tüm Nesne Özelliklerini Dışa Aktar",
     "store.actions.exportProperties": "Özellikleri Dışa Aktar",
+    "store.actions.intakeStarted": "Alım başlatıldı",
+    "store.actions.intakeStartedOn_one": "{{count}} nesne için alım başlatıldı",
+    "store.actions.intakeStartedOn_other": "{{count}} nesne için alım başlatıldı",
     "store.actions.noCollectionContext": "Koleksiyon bağlamı yok",
     "store.actions.noObjectsSelected": "Nesne seçilmedi",
     "store.actions.pleaseSelectObjectsToDelete": "Lütfen silinecek nesneleri seçin",
     "store.actions.pleaseSelectObjectsToRemove": "Lütfen koleksiyondan kaldırılacak nesneleri seçin",
+    "store.actions.pleaseSelectObjectsToRunIntake": "Alım çalıştırılacak nesneleri seçin",
     "store.actions.removeFromCollection": "Koleksiyondan kaldır",
     "store.actions.removeFromCollectionDesc": "Seçili nesneleri bu koleksiyondan kaldır",
+    "store.actions.runIntake": "Alımı çalıştır",
+    "store.actions.runIntakeDesc": "Seçili nesneler üzerinde standart alım hattını yeniden çalıştır",
     "store.actions.selectCollection": "Koleksiyon Seçin",
-    "store.actions.startWorkflow": "İş Akışı Başlat",
-    "store.actions.startWorkflowByRule": "Kurala Göre İş Akışı Başlat",
-    "store.actions.startWorkflowDesc": "Seçili nesneler üzerinde bir iş akışı başlat",
-    "store.actions.workflowStarted": "İş akışı başlatıldı",
     "store.allowedContentTypes": "İzin Verilen İçerik Türleri",
     "store.allowedContentTypesOptionalDescription": "İsteğe bağlı olarak koleksiyona eklenebilecek içerik türlerini seçin. Ayarlanmamışsa tüm içerik türlerine izin verilir.",
     "store.allowedContentTypesSelectDescription": "Koleksiyona eklenebilecek içerik türlerini seçin. Ayarlanmamışsa tüm içerik türlerine izin verilir.",
@@ -571,7 +585,6 @@
     "store.failedToExportDocument": "Belge dışa aktarılamadı",
     "store.failedToFetchRoleMappings": "Rol eşlemeleri getirilemedi",
     "store.failedToFetchTypes": "ObjectType'lar getirilemedi",
-    "store.failedToFetchWorkflows": "İş akışları getirilemedi",
     "store.failedToGetDownloadUrl": "İndirme URL'si alınamadı",
     "store.failedToLoadDocument": "Belge yüklenemedi",
     "store.failedToLoadType": "Tür yüklenemedi",
@@ -661,6 +674,7 @@
     "store.showingFirst128K": "Yalnızca ilk 128K karakter gösteriliyor",
     "store.size": "Boyut",
     "store.staticCollection": "Statik Koleksiyon",
+    "store.status": "Durum",
     "store.strictMode": "Katı Mod",
     "store.successfullyCopied": "{{type}} panoya başarıyla kopyalandı",
     "store.successfullyExportedTo": "{{format}} olarak başarıyla dışa aktarıldı",
@@ -675,6 +689,9 @@
     "store.typeCreated": "Tür oluşturuldu",
     "store.typeDescription": "İsteğe bağlı olarak koleksiyona özel özellikler ve veriler atamak için bir içerik türü seçin.",
     "store.typeSelectDescription": "Koleksiyona özel özellikler ve veriler atamak için bir içerik türü seçin.",
+    "store.typeStatus.active": "Etkin",
+    "store.typeStatus.draft": "Taslak",
+    "store.typeStatus.draftHint": "Alım sırasında otomatik tür seçiminde sunulmaz. Bu tür belgelere yine de doğrudan atanabilir.",
     "store.unknown": "Bilinmeyen",
     "store.unsavedChanges": "Kaydedilmemiş değişiklikler",
     "store.updated": "Güncelleme",

package/src/i18n/locales/zh-TW.json

@@ -245,6 +245,17 @@
     "auth.email.placeholder": "you@company.com",
     "auth.email.title": "歡迎使用 Vertesia",
     "auth.error": "錯誤：{{message}}",
+    "auth.password.body": "請輸入此帳戶的密碼。",
+    "auth.password.continue": "使用密碼繼續",
+    "auth.password.eyebrow": "密碼登入",
+    "auth.password.failed": "無法登入，請再試一次。",
+    "auth.password.invalidCredentials": "電子郵件或密碼不正確。",
+    "auth.password.label": "密碼",
+    "auth.password.notAvailable": "此電子郵件不支援密碼登入。",
+    "auth.password.required": "請輸入密碼。",
+    "auth.password.submit": "登入",
+    "auth.password.title": "輸入密碼",
+    "auth.password.tooManyAttempts": "嘗試次數過多。請稍候幾分鐘後再試一次。",
     "auth.pending.authenticating": "驗證中",
     "auth.pending.body": "請稍候 — 我們正在為您安全跳轉。只需稍待片刻。",
     "auth.pending.cancel": "取消",
@@ -365,6 +376,7 @@
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "管理 MCP 連線",
     "mcpConnections.managedByApp": "由應用程式管理",
+    "mcpConnections.noAuthentication": "無需驗證",
     "mcpConnections.settings": "設定",
     "mcpConnections.subtitle": "管理可用於此對話的 MCP 伺服器。",
     "mcpConnections.title": "MCP",
@@ -474,10 +486,10 @@
     "store.actions.changeContentTypeDesc": "變更選中文件的內容類型",
     "store.actions.changeType": "變更類型",
     "store.actions.chooseExistingCollections": "從現有集合中選擇",
-    "store.actions.chooseWorkflowRule": "選擇要啟動的工作流程規則：",
     "store.actions.confirmDeleteAll": "確定要刪除所有選中的物件嗎？此操作無法復原。",
     "store.actions.confirmDeleteSelected": "確定要刪除選中的物件嗎？\n這不是從集合中移除。",
     "store.actions.confirmRemoveFromCollection": "確定要從此集合中移除所選物件嗎？",
+    "store.actions.confirmRunIntake": "重新執行內容擷取會重新處理選中的物件，可能覆寫其內容類型和屬性。是否繼續？",
     "store.actions.createNew": "新建",
     "store.actions.delete": "刪除",
     "store.actions.deleteObjects": "刪除物件",
@@ -486,20 +498,22 @@
     "store.actions.errorDeletingObjects": "刪除物件時出錯",
     "store.actions.errorExportProperties": "匯出屬性時出錯",
     "store.actions.errorRemovingObjects": "從集合中移除物件時出錯",
-    "store.actions.errorStartingWorkflow": "啟動工作流程時出錯",
+    "store.actions.errorStartingIntake": "啟動內容擷取失敗",
     "store.actions.exportAllObjectProperties": "匯出所有物件屬性",
     "store.actions.exportProperties": "匯出屬性",
+    "store.actions.intakeStarted": "內容擷取已啟動",
+    "store.actions.intakeStartedOn_one": "已對 {{count}} 個物件啟動內容擷取",
+    "store.actions.intakeStartedOn_other": "已對 {{count}} 個物件啟動內容擷取",
     "store.actions.noCollectionContext": "沒有集合上下文",
     "store.actions.noObjectsSelected": "未選擇任何物件",
     "store.actions.pleaseSelectObjectsToDelete": "請選擇要刪除的物件",
     "store.actions.pleaseSelectObjectsToRemove": "請選擇要從集合中移除的物件",
+    "store.actions.pleaseSelectObjectsToRunIntake": "請選擇要執行內容擷取的物件",
     "store.actions.removeFromCollection": "從集合中移除",
     "store.actions.removeFromCollectionDesc": "從此集合中移除所選物件",
+    "store.actions.runIntake": "執行內容擷取",
+    "store.actions.runIntakeDesc": "對選中的物件重新執行標準內容擷取流程",
     "store.actions.selectCollection": "選擇集合",
-    "store.actions.startWorkflow": "啟動工作流程",
-    "store.actions.startWorkflowByRule": "按規則啟動工作流程",
-    "store.actions.startWorkflowDesc": "對選中的物件啟動工作流程",
-    "store.actions.workflowStarted": "工作流程已啟動",
     "store.allowedContentTypes": "允許的內容類型",
     "store.allowedContentTypesOptionalDescription": "可選擇限定可新增到集合中的內容類型。如果未設定，則允許所有內容類型。",
     "store.allowedContentTypesSelectDescription": "選擇可新增到集合中的內容類型。如果未設定，則允許所有內容類型。",
@@ -571,7 +585,6 @@
     "store.failedToExportDocument": "匯出文件失敗",
     "store.failedToFetchRoleMappings": "取得角色對應失敗",
     "store.failedToFetchTypes": "取得物件類型失敗",
-    "store.failedToFetchWorkflows": "取得工作流程失敗",
     "store.failedToGetDownloadUrl": "取得下載URL失敗",
     "store.failedToLoadDocument": "載入文件失敗",
     "store.failedToLoadType": "載入類型失敗",
@@ -661,6 +674,7 @@
     "store.showingFirst128K": "僅顯示前128K個字元",
     "store.size": "大小",
     "store.staticCollection": "靜態集合",
+    "store.status": "狀態",
     "store.strictMode": "嚴格模式",
     "store.successfullyCopied": "已成功複製{{type}}到剪貼簿",
     "store.successfullyExportedTo": "已成功匯出為{{format}}",
@@ -675,6 +689,9 @@
     "store.typeCreated": "類型已建立",
     "store.typeDescription": "可選擇內容類型以為集合指派自訂屬性和資料。",
     "store.typeSelectDescription": "選擇內容類型以為集合指派自訂屬性和資料。",
+    "store.typeStatus.active": "已啟用",
+    "store.typeStatus.draft": "草稿",
+    "store.typeStatus.draftHint": "匯入時不參與自動類型選擇。仍可將此類型直接指派給文件。",
     "store.unknown": "未知",
     "store.unsavedChanges": "未儲存的變更",
     "store.updated": "更新時間",

package/src/i18n/locales/zh.json

@@ -245,6 +245,17 @@
     "auth.email.placeholder": "you@company.com",
     "auth.email.title": "欢迎使用 Vertesia",
     "auth.error": "错误：{{message}}",
+    "auth.password.body": "请输入此账户的密码。",
+    "auth.password.continue": "使用密码继续",
+    "auth.password.eyebrow": "密码登录",
+    "auth.password.failed": "无法登录，请重试。",
+    "auth.password.invalidCredentials": "电子邮件或密码不正确。",
+    "auth.password.label": "密码",
+    "auth.password.notAvailable": "此电子邮件不支持密码登录。",
+    "auth.password.required": "请输入密码。",
+    "auth.password.submit": "登录",
+    "auth.password.title": "输入密码",
+    "auth.password.tooManyAttempts": "尝试次数过多。请等待几分钟后重试。",
     "auth.pending.authenticating": "正在认证",
     "auth.pending.body": "请稍候 — 我们正在为您安全跳转。只需稍候片刻。",
     "auth.pending.cancel": "取消",
@@ -365,6 +376,7 @@
     "mcpConnections.label": "MCP",
     "mcpConnections.manage": "管理 MCP 连接",
     "mcpConnections.managedByApp": "由应用管理",
+    "mcpConnections.noAuthentication": "无需身份验证",
     "mcpConnections.settings": "设置",
     "mcpConnections.subtitle": "管理可用于此对话的 MCP 服务器。",
     "mcpConnections.title": "MCP",
@@ -474,10 +486,10 @@
     "store.actions.changeContentTypeDesc": "更改选中文档的内容类型",
     "store.actions.changeType": "更改类型",
     "store.actions.chooseExistingCollections": "从现有集合中选择",
-    "store.actions.chooseWorkflowRule": "选择要启动的工作流规则：",
     "store.actions.confirmDeleteAll": "确定要删除所有选中的对象吗？此操作无法撤销。",
     "store.actions.confirmDeleteSelected": "确定要删除选中的对象吗？\n这不是从集合中移除。",
     "store.actions.confirmRemoveFromCollection": "确定要从此集合中移除所选对象吗？",
+    "store.actions.confirmRunIntake": "重新运行内容摄取会重新处理选中的对象，可能覆盖其内容类型和属性。是否继续？",
     "store.actions.createNew": "新建",
     "store.actions.delete": "删除",
     "store.actions.deleteObjects": "删除对象",
@@ -486,20 +498,22 @@
     "store.actions.errorDeletingObjects": "删除对象时出错",
     "store.actions.errorExportProperties": "导出属性时出错",
     "store.actions.errorRemovingObjects": "从集合中移除对象时出错",
-    "store.actions.errorStartingWorkflow": "启动工作流时出错",
+    "store.actions.errorStartingIntake": "启动内容摄取失败",
     "store.actions.exportAllObjectProperties": "导出所有对象属性",
     "store.actions.exportProperties": "导出属性",
+    "store.actions.intakeStarted": "内容摄取已启动",
+    "store.actions.intakeStartedOn_one": "已对 {{count}} 个对象启动内容摄取",
+    "store.actions.intakeStartedOn_other": "已对 {{count}} 个对象启动内容摄取",
     "store.actions.noCollectionContext": "没有集合上下文",
     "store.actions.noObjectsSelected": "未选择任何对象",
     "store.actions.pleaseSelectObjectsToDelete": "请选择要删除的对象",
     "store.actions.pleaseSelectObjectsToRemove": "请选择要从集合中移除的对象",
+    "store.actions.pleaseSelectObjectsToRunIntake": "请选择要运行内容摄取的对象",
     "store.actions.removeFromCollection": "从集合中移除",
     "store.actions.removeFromCollectionDesc": "从此集合中移除所选对象",
+    "store.actions.runIntake": "运行内容摄取",
+    "store.actions.runIntakeDesc": "对选中的对象重新运行标准内容摄取流程",
     "store.actions.selectCollection": "选择集合",
-    "store.actions.startWorkflow": "启动工作流",
-    "store.actions.startWorkflowByRule": "按规则启动工作流",
-    "store.actions.startWorkflowDesc": "对选中的对象启动工作流",
-    "store.actions.workflowStarted": "工作流已启动",
     "store.allowedContentTypes": "允许的内容类型",
     "store.allowedContentTypesOptionalDescription": "可选择限定可添加到集合中的内容类型。如果未设置，则允许所有内容类型。",
     "store.allowedContentTypesSelectDescription": "选择可添加到集合中的内容类型。如果未设置，则允许所有内容类型。",
@@ -571,7 +585,6 @@
     "store.failedToExportDocument": "导出文档失败",
     "store.failedToFetchRoleMappings": "获取角色映射失败",
     "store.failedToFetchTypes": "获取对象类型失败",
-    "store.failedToFetchWorkflows": "获取工作流失败",
     "store.failedToGetDownloadUrl": "获取下载URL失败",
     "store.failedToLoadDocument": "加载文档失败",
     "store.failedToLoadType": "加载类型失败",
@@ -661,6 +674,7 @@
     "store.showingFirst128K": "仅显示前128K个字符",
     "store.size": "大小",
     "store.staticCollection": "静态集合",
+    "store.status": "状态",
     "store.strictMode": "严格模式",
     "store.successfullyCopied": "已成功复制{{type}}到剪贴板",
     "store.successfullyExportedTo": "已成功导出为{{format}}",
@@ -675,6 +689,9 @@
     "store.typeCreated": "类型已创建",
     "store.typeDescription": "可选择内容类型以为集合分配自定义属性和数据。",
     "store.typeSelectDescription": "选择内容类型以为集合分配自定义属性和数据。",
+    "store.typeStatus.active": "已启用",
+    "store.typeStatus.draft": "草稿",
+    "store.typeStatus.draftHint": "摄取时不参与自动类型选择。仍可将此类型直接分配给文档。",
     "store.unknown": "未知",
     "store.unsavedChanges": "未保存的更改",
     "store.updated": "更新时间",

package/src/router/RouteComponent.test.tsx

@@ -1,5 +1,6 @@
 import { act, cleanup, render, screen, waitFor } from '@testing-library/react';
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { ErrorBoundary } from 'react-error-boundary';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import { prefetchLazyRoutes, RouteComponent } from './RouteComponent';
 import { type LazyRouteModule, useNavigate } from './Router';
 import { RouterProvider } from './RouterProvider';
@@ -38,6 +39,44 @@ describe('RouteComponent lazy routes', () => {
         window.history.pushState({}, '', '/');
     });
 
+    it.each(['missing module', 'rejected import', 'synchronous failure'] as const)(
+        'reports a %s through the error boundary instead of remaining on the spinner',
+        async (failure) => {
+            const error = new Error('Module could not be loaded');
+            const onError = vi.fn();
+            const consoleError = vi.spyOn(console, 'error').mockImplementation(() => undefined);
+            const routes = [
+                {
+                    path: '/a',
+                    LazyComponent: () => {
+                        if (failure === 'synchronous failure') throw error;
+                        return failure === 'missing module'
+                            ? Promise.resolve(undefined as unknown as LazyRouteModule)
+                            : Promise.reject(error);
+                    },
+                },
+            ];
+            try {
+                render(
+                    <ErrorBoundary fallback={<div>Route unavailable</div>} onError={onError}>
+                        <RouterProvider routes={routes}>
+                            <RouteComponent spinner={<div>loading</div>} />
+                        </RouterProvider>
+                    </ErrorBoundary>,
+                );
+                await screen.findByText('Route unavailable');
+                expect(screen.queryByText('loading')).toBeNull();
+                expect(onError.mock.calls[0][0]).toEqual(
+                    failure === 'missing module'
+                        ? new Error('Lazy module for /a does not have a default export')
+                        : error,
+                );
+            } finally {
+                consoleError.mockRestore();
+            }
+        },
+    );
+
     it('stops showing the previous lazy route while the next one loads', async () => {
         const pageA = deferredModule('Page A');
         const pageB = deferredModule('Page B');
@@ -87,6 +126,31 @@ describe('RouteComponent lazy routes', () => {
         expect(screen.getByText('Page B')).toBeDefined();
     });
 
+    it('ignores a rejected import after navigating away', async () => {
+        let reject!: (error: Error) => void;
+        const promise = new Promise<LazyRouteModule>((_resolve, rejectPromise) => {
+            reject = rejectPromise;
+        });
+        const onError = vi.fn();
+        render(
+            <ErrorBoundary fallback={<div>Route unavailable</div>} onError={onError}>
+                <RouterProvider
+                    routes={[
+                        { path: '/a', LazyComponent: () => promise },
+                        { path: '/b', Component: () => <div>Page B</div> },
+                    ]}
+                >
+                    <CaptureNavigate />
+                    <RouteComponent />
+                </RouterProvider>
+            </ErrorBoundary>,
+        );
+        await act(async () => navigateFn('/b'));
+        await act(async () => reject(new Error('Previous route failed')));
+        expect(screen.getByText('Page B')).toBeDefined();
+        expect(onError).not.toHaveBeenCalled();
+    });
+
     it('renders a previously resolved lazy route synchronously on revisit', async () => {
         const pageA = deferredModule('Page A');
         const pageB = deferredModule('Page B');

package/src/router/RouteComponent.tsx

@@ -13,14 +13,13 @@ import {
 // between two lazy routes blanks the page for at least a frame, even when the module is loaded.
 const resolvedComponents = new Map<LazyComponentRoute['LazyComponent'], LazyRouteModule['default']>();
 
-function resolveLazyRoute(route: LazyComponentRoute): Promise<LazyRouteModule['default']> {
-    return route.LazyComponent().then((module) => {
-        if (!module.default) {
-            throw new Error(`Lazy module for ${route.path} does not have a default export`);
-        }
-        resolvedComponents.set(route.LazyComponent, module.default);
-        return module.default;
-    });
+async function resolveLazyRoute(route: LazyComponentRoute): Promise<LazyRouteModule['default']> {
+    const module = await route.LazyComponent();
+    if (!module?.default) {
+        throw new Error(`Lazy module for ${route.path} does not have a default export`);
+    }
+    resolvedComponents.set(route.LazyComponent, module.default);
+    return module.default;
 }
 
 /**
@@ -64,21 +63,25 @@ function LazyRouteComponent({ route, spinner }: LazyRouteComponentProps) {
     const [Component, setComponent] = useState<LazyRouteModule['default'] | null>(
         () => resolvedComponents.get(route.LazyComponent) ?? null,
     );
+    const [error, setError] = useState<unknown>();
     useEffect(() => {
         // A slow import must not land after this instance moved on (unmount, or a route object
         // swap without a path change): the stale module would overwrite the current one.
         let stale = false;
-        void resolveLazyRoute(route).then((component) => {
-            if (!stale) {
-                // we need to wrap the component type in an arrow function
-                // otherwise the setState function will execute the function as a state update function
-                setComponent(() => component);
-            }
-        });
+        void resolveLazyRoute(route).then(
+            (component) => {
+                if (!stale) setComponent(() => component);
+            },
+            (error: unknown) => {
+                // Render failures through the surrounding error boundary, including import failures.
+                if (!stale) setError(() => error);
+            },
+        );
         return () => {
             stale = true;
         };
     }, [route]);
 
+    if (error !== undefined) throw error;
     return Component ? <Component /> : spinner || null;
 }

package/src/session/UserSession.test.ts

@@ -1,17 +1,64 @@
 import type { VertesiaClient } from '@vertesia/client';
+import { type AuthTokenPayload, PrincipalType } from '@vertesia/common';
 import { describe, expect, it, vi } from 'vitest';
 import { UserSession } from './UserSession';
 
+const projectToken: AuthTokenPayload = {
+    sub: 'test-user',
+    name: 'Test User',
+    type: PrincipalType.User,
+    account: { id: 'test-account', name: 'Test Account' },
+    account_roles: [],
+    accounts: [],
+    project: { id: 'test-project', name: 'Test Project', account: 'test-account' },
+    apps: [],
+    iss: 'https://auth.example.com',
+    aud: 'test-client',
+    exp: 4102444800,
+};
+
+function encodeToken(payload: AuthTokenPayload): string {
+    return `${btoa(JSON.stringify({ alg: 'none' }))}.${btoa(JSON.stringify(payload))}.`;
+}
+
 function createSession(onboardingProgress: () => Promise<Record<string, boolean>>) {
     const client = {
         account: { onboardingProgress },
+        withAuthCallback: vi.fn(),
     } as unknown as VertesiaClient;
     const setSession = vi.fn<(session: UserSession) => void>();
     const session = new UserSession(client, setSession);
+    session.authToken = { ...projectToken };
     return { session, setSession };
 }
 
 describe('UserSession.fetchOnboardingStatus', () => {
+    it('skips onboarding before authentication without publishing a status', async () => {
+        const onboardingProgress = vi.fn(async () => ({ project_created: true }));
+        const { session, setSession } = createSession(onboardingProgress);
+        session.authToken = undefined;
+
+        await expect(session.fetchOnboardingStatus()).resolves.toBe(false);
+        expect(onboardingProgress).not.toHaveBeenCalled();
+        expect(session.onboardingComplete).toBeUndefined();
+        expect(setSession).not.toHaveBeenCalled();
+    });
+
+    it('defers onboarding during account-only login and loads it after project selection', async () => {
+        const onboardingProgress = vi.fn(async () => ({ project_created: true }));
+        const { session, setSession } = createSession(onboardingProgress);
+
+        await session.login(encodeToken({ ...projectToken, project: undefined }));
+        expect(onboardingProgress).not.toHaveBeenCalled();
+        expect(session.onboardingComplete).toBeUndefined();
+        expect(setSession).not.toHaveBeenCalled();
+
+        await session.login(encodeToken(projectToken));
+        expect(onboardingProgress).toHaveBeenCalledOnce();
+        expect(session.onboardingComplete).toBe(true);
+        expect(setSession).toHaveBeenCalledOnce();
+    });
+
     it('does not replace the session when an incomplete status is unchanged', async () => {
         const { session, setSession } = createSession(async () => ({ project_created: false }));
         session.onboardingComplete = false;
@@ -37,3 +84,21 @@ describe('UserSession.fetchOnboardingStatus', () => {
         expect(setSession.mock.calls[0]?.[0]?.onboardingComplete).toBe(false);
     });
 });
+
+describe('UserSession.signOut', () => {
+    it('keeps the receiver when used as a callback, including cloned sessions', () => {
+        const { session } = createSession(async () => ({}));
+        const clone = session.clone();
+        const logout = vi.spyOn(session, 'logout').mockImplementation(() => undefined);
+        const cloneLogout = vi.spyOn(clone, 'logout').mockImplementation(() => undefined);
+        const { signOut } = session;
+        const { signOut: signOutClone } = clone;
+
+        signOut();
+        expect(logout).toHaveBeenCalledOnce();
+        expect(cloneLogout).not.toHaveBeenCalled();
+        signOutClone();
+        expect(cloneLogout).toHaveBeenCalledOnce();
+        expect(logout).toHaveBeenCalledOnce();
+    });
+});

package/src/session/UserSession.ts

@@ -44,6 +44,7 @@ class UserSession {
         }
 
         this.logout = this.logout.bind(this);
+        this.signOut = this.signOut.bind(this);
     }
 
     get store() {
@@ -251,6 +252,9 @@ class UserSession {
     }
 
     async fetchOnboardingStatus(): Promise<boolean> {
+        if (!this.project?.id) {
+            return false;
+        }
         if (this.onboardingComplete) {
             console.log('Onboarding already completed');
             return false;

package/src/shell/SplashScreen.tsx

@@ -58,7 +58,7 @@ function LoadingIcon() {
         <svg
             width="32"
             height="32"
-            className="w-8 h-8 text-primary"
+            className="w-8 h-8 text-info"
             viewBox="0 0 50 50"
             xmlns="http://www.w3.org/2000/svg"
             role="img"

package/src/shell/login/SignInIcons.tsx

@@ -1,4 +1,4 @@
-import { LockKeyhole } from 'lucide-react';
+import { KeyRound, LockKeyhole } from 'lucide-react';
 import type { ComponentType, SVGProps } from 'react';
 import type { ProviderId } from './signInUtils';
 
@@ -58,6 +58,7 @@ export const PROVIDER_ICONS: Record<ProviderId, ComponentType<{ className?: stri
     github: GithubIcon,
     microsoft: MicrosoftIcon,
     oidc: OidcIcon,
+    password: KeyRound,
 };
 
 export function providerIcon(provider: ProviderId | string | undefined): ComponentType<{ className?: string }> {

package/src/shell/login/SignInPasswordRequired.test.tsx

@@ -0,0 +1,82 @@
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+const mocks = vi.hoisted(() => ({ startSignIn: vi.fn() }));
+
+vi.mock('@vertesia/ui/i18n', () => ({
+    useUITranslation: () => ({ t: (key: string) => key }),
+}));
+
+vi.mock('./signInUtils', async (importOriginal) => ({
+    ...(await importOriginal<typeof import('./signInUtils')>()),
+    startSignIn: mocks.startSignIn,
+}));
+
+const { default: SignInProvidersStep } = await import('./SignInProvidersStep');
+const { default: SignInReturningStep } = await import('./SignInReturningStep');
+
+const EMAIL = 'claude@reviewers.vertesia.io';
+
+// A provider click enters the pending screen before the redirect starts. When the address turns
+// out to belong to a password tenant there is no redirect, so the step must hand over to the
+// password step instead of leaving the user on the pending spinner.
+describe('password-required after a provider click', () => {
+    afterEach(() => {
+        mocks.startSignIn.mockReset();
+        document.body.innerHTML = '';
+    });
+
+    it('routes the provider list to the password step', async () => {
+        mocks.startSignIn.mockResolvedValue({ ok: false, reason: 'password-required' });
+        const onPasswordRequired = vi.fn();
+        render(
+            <SignInProvidersStep
+                email={EMAIL}
+                onBack={vi.fn()}
+                onProviderClicked={vi.fn()}
+                onPasswordRequired={onPasswordRequired}
+            />,
+        );
+
+        fireEvent.click(screen.getAllByRole('button', { name: /auth.continueWithProvider/ })[0]);
+
+        await waitFor(() => expect(onPasswordRequired).toHaveBeenCalledWith(EMAIL));
+    });
+
+    it('routes a returning user with a stale provider to the password step', async () => {
+        mocks.startSignIn.mockResolvedValue({ ok: false, reason: 'password-required' });
+        const onProviderClicked = vi.fn();
+        const onPasswordRequired = vi.fn();
+        render(
+            <SignInReturningStep
+                session={{ email: EMAIL, lastProvider: 'google' }}
+                onNotYou={vi.fn()}
+                onProviderClicked={onProviderClicked}
+                onPasswordRequired={onPasswordRequired}
+            />,
+        );
+
+        fireEvent.click(screen.getByRole('button', { name: /auth.continueWithProvider/ }));
+
+        await waitFor(() => expect(onPasswordRequired).toHaveBeenCalledWith(EMAIL));
+        expect(onProviderClicked).toHaveBeenCalledWith('google');
+    });
+
+    it('does not leave the redirect path when the sign-in started', async () => {
+        mocks.startSignIn.mockResolvedValue({ ok: true });
+        const onPasswordRequired = vi.fn();
+        render(
+            <SignInReturningStep
+                session={{ email: EMAIL, lastProvider: 'google' }}
+                onNotYou={vi.fn()}
+                onProviderClicked={vi.fn()}
+                onPasswordRequired={onPasswordRequired}
+            />,
+        );
+
+        fireEvent.click(screen.getByRole('button', { name: /auth.continueWithProvider/ }));
+
+        await waitFor(() => expect(mocks.startSignIn).toHaveBeenCalledOnce());
+        expect(onPasswordRequired).not.toHaveBeenCalled();
+    });
+});