@wildo-ai/saas-frontend-lib 1.1.10 → 1.1.11

package/dist/esm/components/auth/Auth_OAuthConsent.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OAuthConsent.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthConsent.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AAEH,sGAAsG;AACtG,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,uBAAuB;IACvB,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AAeX,oGAAoG;AACpG,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,MAAoD,EACjC,EAAE;IACrB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsC,IAAI,CAAC,CAAC;IAClF,gGAAgG;IAChG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IACjF,oGAAoG;IACpG,oDAAoD;IACpD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IAEtC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,MAA+B,EAAU,EAAE,CACjE,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE9E,kGAAkG;IAClG,4FAA4F;IAC5F,oGAAoG;IACpG,mGAAmG;IACnG,uFAAuF;IACvF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpC,kGAAkG;IAClG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,2DAA2D;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,yDAAyD;QACnF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,wBAAwB,EAAE;aACvB,qBAAqB,CAAC,eAAe,CAAC;aACtC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,IAAI,QAAQ,IAAI,kBAAkB,IAAI,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACtG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,QAAQ,IAAI,aAAa,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzE,6FAA6F;gBAC7F,gGAAgG;gBAChG,sFAAsF;gBACtF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,aAAa,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,QAA4B,EAAE,EAAE;QACrC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO;YAAE,OAAO;QAC9C,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,oBAAoB,CAC3E,OAAO,CAAC,aAAa,EACrB,QAAQ;YACR,6EAA6E;YAC7E,QAAQ,KAAK,SAAS,IAAI,QAAQ,CACnC,CAAC;YACF,4FAA4F;YAC5F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,sFAAsF;YACtF,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAC;IAEF,yFAAyF;IACzF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,gBAAgB,CAAC,YAAY;YACvC,MAAM,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,SAAG,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,CACL,cAAK,SAAS,EAAC,+BAA+B,YAC5C,KAAC,cAAc,KAAG,GACd,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,CACL,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,IAAI,qBAAqB,CAAC,aAAa,CAAC,GAAoB,GACrF,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAW,EACxF,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,GAAQ,IAC1E,EAEL,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAC5B,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,YAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAQ,EAC5E,aAAI,SAAS,EAAC,iBAAiB,YAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC7B,uBACE,KAAC,IAAI,cAAE,KAAK,GAAQ,IADb,KAAK,CAET,CACN,CAAC,GACC,IACD,CACP,EAEA,OAAO,CAAC,QAAQ,IAAI,CACnB,KAAC,IAAI,IAAC,SAAS,EAAC,mBAAmB,YAAE,CAAC,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAQ,CACrH,EAED,iBAAO,SAAS,EAAC,8CAA8C,aAC7D,KAAC,YAAY,IAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,GAAI,EACpF,KAAC,IAAI,cAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAQ,IAC1C,EAER,eAAK,SAAS,EAAC,kBAAkB,aAC/B,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAE5B,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GACvB,EACT,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,YAE/B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAC1B,IACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,MAAM,GAAG,eAAe,CAAC,OAAO,EAChC,GAAG,KAAK,EAC4D;IACpE,MAAM,SAAS,GAAG,uBAAuB,CACvC,qBAAqB,CAAC,4BAA4B,EAClD,mBAAmB,CACpB,CAAC,MAAM,CAAC,CAAC;IACV,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useSearchParams } from 'react-router-dom';\nimport { CorePresetNames, FrontendComponentType, UserOAuthConsentLabel } from '@wildo-ai/presets-components-models';\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { CheckboxRoot } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n  getManualCallsHttpClient,\n  type OAuthConsentRequiredResponse,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n  appendAuthRedirectToPath,\n  buildAuthRedirectTarget,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\n/**\n * OIDC interactive-consent screen (S1) — the body rendered by {@link AuthPage_OAuthConsent}.\n *\n * FLOW (Bearer-authed SPA, NOT a server-rendered page — see the backend `handleConsentDecision`\n * JSDoc): a third-party client redirects the browser here with the OAuth authorize query. This\n * component forwards that query to `GET /oauth/authorize` (Bearer auto-attached) → the backend\n * returns `consent_required` + a single-use consent token + the requesting client / scopes / agent\n * resource. On Approve/Deny it POSTs `{consent_token, decision}` to `/oauth/authorize/decision`,\n * which returns `{ redirect_to }`; the app then `window.location.assign(redirect_to)` to complete the\n * OAuth redirect back to the client (carrying the `code` on approve, `error=access_denied` on deny).\n *\n * Copy is resolved through {@link UserOAuthConsentLabel} (component\n * `PUBLIC_LAYOUTS_OAUTH_CONSENT`) via {@link useI18n}; the label metadata lives in the\n * companion-scanned `Auth_OAuthConsent.labels.ts`.\n */\n\n// The authorize params this screen forwards verbatim to `GET /oauth/authorize`; the backend validates\n// them (client/redirect allowlist, PKCE). Anything else in the URL is ignored.\nconst AUTHORIZE_PARAM_KEYS = [\n  'response_type',\n  'client_id',\n  'redirect_uri',\n  'code_challenge',\n  'code_challenge_method',\n  'scope',\n  'resource',\n  'state',\n  'nonce',\n] as const;\n\ntype ConsentStatus = 'loading' | 'ready' | 'submitting' | 'error';\n\n/**\n * Props for the consent screen preset. The screen is self-driven from the authorize query\n * (`useSearchParams`) and the session (`useUserOrgs`), so it takes no external props — this interface\n * exists to satisfy the preset-wrapper contract (preset resolution + the frontend-component spec)\n * shared by every `PUBLIC_LAYOUTS` auth page.\n */\nexport interface PublicLayoutPreset_OAuthConsent_DefaultProps {\n  /** Reserved: the consent screen is URL/session-driven and currently accepts no props. */\n  readonly _selfDriven?: never;\n}\n\n/** Default preset implementation for {@link FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT}. */\nexport const PublicLayoutPreset_OAuthConsent_Default = (\n  _props: PublicLayoutPreset_OAuthConsent_DefaultProps,\n): React.JSX.Element => {\n  const { auth } = useUserOrgs();\n  const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT });\n  const [searchParams] = useSearchParams();\n  const [status, setStatus] = useState<ConsentStatus>('loading');\n  const [consent, setConsent] = useState<OAuthConsentRequiredResponse | null>(null);\n  // The error is held as a label KEY (not resolved copy) so it stays i18n-clean and translatable.\n  const [errorLabel, setErrorLabel] = useState<UserOAuthConsentLabel | null>(null);\n  // Item 3 \"remember this app\" — opt-in (default off): on approve, stores a durable grant so a future\n  // authorize with covering scopes skips this screen.\n  const [remember, setRemember] = useState(false);\n\n  const accessToken = auth?.accessToken;\n\n  const t = (key: string, params?: Record<string, string>): string =>\n    tComponent(FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT, key, params);\n\n  // Stale-closure-proof single-flight guard for the decision POST. The buttons already unmount when\n  // `status` flips to 'submitting' (see the render below) and the consent token is single-use\n  // server-side, but a synchronous double-dispatch could still fire two POSTs before React re-renders\n  // — a `status === 'submitting'` check would read the captured (stale) 'ready' in that window, so a\n  // ref (set synchronously at the top of `decide`) is the only reliable in-flight latch.\n  const submittingRef = useRef(false);\n\n  // The authorize query, filtered to the known OAuth params (verbatim pass-through to the backend).\n  const authorizeParams = useMemo(() => {\n    const params = new URLSearchParams();\n    for (const key of AUTHORIZE_PARAM_KEYS) {\n      const value = searchParams.get(key);\n      if (value) params.set(key, value);\n    }\n    return params;\n  }, [searchParams]);\n\n  // Load the consent request once the user is authenticated.\n  useEffect(() => {\n    if (!accessToken) return; // the Navigate guard below sends the user to login first\n    let cancelled = false;\n    setStatus('loading');\n    setErrorLabel(null);\n    getManualCallsHttpClient()\n      .oauthAuthorizeConsent(authorizeParams)\n      .then((response) => {\n        if (cancelled) return;\n        if (response && 'consent_required' in response && response.consent_required && response.consent_token) {\n          setConsent(response);\n          setStatus('ready');\n        } else if (response && 'redirect_to' in response && response.redirect_to) {\n          // Trusted (non-`requiresConsent`) client — the backend already minted the code; complete the\n          // OAuth redirect back to the client WITHOUT a consent screen. (`window.location.assign` because\n          // the redirect target is cross-origin; the XHR could not have followed a 302 itself.)\n          window.location.assign(response.redirect_to);\n        } else {\n          setStatus('error');\n          setErrorLabel(UserOAuthConsentLabel.ERROR_INVALID);\n        }\n      })\n      .catch(() => {\n        if (cancelled) return;\n        setStatus('error');\n        setErrorLabel(UserOAuthConsentLabel.ERROR_LOAD);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [accessToken, authorizeParams]);\n\n  const decide = useCallback(\n    async (decision: 'approve' | 'deny') => {\n      if (!consent || submittingRef.current) return;\n      submittingRef.current = true;\n      setStatus('submitting');\n      setErrorLabel(null);\n      try {\n        const { redirect_to } = await getManualCallsHttpClient().oauthConsentDecision(\n          consent.consent_token,\n          decision,\n          // Only an APPROVE meaningfully \"remembers\"; a deny sends `false` harmlessly.\n          decision === 'approve' && remember,\n        );\n        // Complete the OAuth redirect back to the third-party client (carries `code` or the error).\n        window.location.assign(redirect_to);\n      } catch {\n        // Release the local latch. A lost response may follow server-side token consumption;\n        // the error view does not retry this request token. A fresh flow obtains fresh state.\n        submittingRef.current = false;\n        setStatus('error');\n        setErrorLabel(UserOAuthConsentLabel.ERROR_DECISION);\n      }\n    },\n    [consent, remember],\n  );\n\n  // Not authenticated → send to login, returning to this exact consent request afterwards.\n  if (!accessToken) {\n    const target = buildAuthRedirectTarget({\n      pathname: CommonRoutePaths.oauthConsent,\n      search: `?${searchParams.toString()}`,\n    });\n    return <Navigate to={appendAuthRedirectToPath(CommonRoutePaths.login, target)} replace />;\n  }\n\n  if (status === 'loading' || status === 'submitting' || !isReady) {\n    return (\n      <div className=\"py-region flex justify-center\">\n        <LoadingSpinner />\n      </div>\n    );\n  }\n\n  if (status === 'error' || !consent) {\n    return (\n      <Alert variant=\"destructive\">\n        <AlertDescription>{t(errorLabel ?? UserOAuthConsentLabel.ERROR_GENERIC)}</AlertDescription>\n      </Alert>\n    );\n  }\n\n  return (\n    <div className=\"space-y-group\">\n      <div className=\"text-center space-y-item-xs\">\n        <Heading>{t(UserOAuthConsentLabel.TITLE, { clientName: consent.client.name })}</Heading>\n        <Text className=\"max-w-sm mx-auto\">{t(UserOAuthConsentLabel.SUB_TITLE)}</Text>\n      </div>\n\n      {consent.scopes.length > 0 && (\n        <div className=\"space-y-element\">\n          <Text className=\"font-medium\">{t(UserOAuthConsentLabel.SCOPES_INTRO)}</Text>\n          <ul className=\"space-y-item-xs\">\n            {consent.scopes.map((scope) => (\n              <li key={scope}>\n                <Text>{scope}</Text>\n              </li>\n            ))}\n          </ul>\n        </div>\n      )}\n\n      {consent.resource && (\n        <Text className=\"text-sm break-all\">{t(UserOAuthConsentLabel.AGENT_ENDPOINT, { resource: consent.resource })}</Text>\n      )}\n\n      <label className=\"flex items-center gap-item-xs cursor-pointer\">\n        <CheckboxRoot checked={remember} onCheckedChange={(c) => setRemember(c === true)} />\n        <Text>{t(UserOAuthConsentLabel.REMEMBER)}</Text>\n      </label>\n\n      <div className=\"flex gap-element\">\n        <Button\n          variant={ButtonVariants_Variant.OUTLINE}\n          className=\"flex-1\"\n          onClick={() => decide('deny')}\n        >\n          {t(UserOAuthConsentLabel.DENY)}\n        </Button>\n        <Button\n          variant={ButtonVariants_Variant.DEFAULT}\n          className=\"flex-1\"\n          onClick={() => decide('approve')}\n        >\n          {t(UserOAuthConsentLabel.APPROVE)}\n        </Button>\n      </div>\n    </div>\n  );\n};\n\n/**\n * Preset-resolving wrapper for the OIDC consent screen (mirrors every other `PUBLIC_LAYOUTS` auth\n * page). Resolves `PUBLIC_LAYOUTS_OAUTH_CONSENT` to its registered preset (default =\n * {@link PublicLayoutPreset_OAuthConsent_Default}) so an application can swap in a branded consent UI\n * via the component registry. {@link AuthPage_OAuthConsent} renders this wrapper.\n */\nexport function Auth_OAuthConsent({\n  preset = CorePresetNames.DEFAULT,\n  ...props\n}: PublicLayoutPreset_OAuthConsent_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_OAuthConsent_DefaultProps>(\n    FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT,\n    'Auth_OAuthConsent',\n  )(preset);\n  return <Component {...props} />;\n}\n"]}
+{"version":3,"file":"Auth_OAuthConsent.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthConsent.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AAEH,sGAAsG;AACtG,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,uBAAuB;IACvB,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AAeX,oGAAoG;AACpG,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,MAAoD,EACjC,EAAE;IACrB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsC,IAAI,CAAC,CAAC;IAClF,gGAAgG;IAChG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IACjF,oGAAoG;IACpG,oDAAoD;IACpD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IAEtC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,MAA+B,EAAU,EAAE,CACjE,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE9E,kGAAkG;IAClG,4FAA4F;IAC5F,oGAAoG;IACpG,mGAAmG;IACnG,uFAAuF;IACvF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpC,kGAAkG;IAClG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,2DAA2D;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,yDAAyD;QACnF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,wBAAwB,EAAE;aACvB,qBAAqB,CAAC,eAAe,CAAC;aACtC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,IAAI,QAAQ,IAAI,kBAAkB,IAAI,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACtG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,QAAQ,IAAI,aAAa,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzE,6FAA6F;gBAC7F,gGAAgG;gBAChG,sFAAsF;gBACtF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,aAAa,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,QAA8B,EAAE,EAAE;QACvC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO;YAAE,OAAO;QAC9C,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,oBAAoB,CAC3E,OAAO,CAAC,aAAa,EACrB,QAAQ;YACR,6EAA6E;YAC7E,QAAQ,KAAK,oBAAoB,CAAC,OAAO,IAAI,QAAQ,CACtD,CAAC;YACF,4FAA4F;YAC5F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,sFAAsF;YACtF,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAC;IAEF,yFAAyF;IACzF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,gBAAgB,CAAC,YAAY;YACvC,MAAM,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,SAAG,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,CACL,cAAK,SAAS,EAAC,+BAA+B,YAC5C,KAAC,cAAc,KAAG,GACd,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,CACL,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,IAAI,qBAAqB,CAAC,aAAa,CAAC,GAAoB,GACrF,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAW,EACxF,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,GAAQ,IAC1E,EAEL,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAC5B,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,YAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAQ,EAC5E,aAAI,SAAS,EAAC,iBAAiB,YAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC7B,uBACE,KAAC,IAAI,cAAE,KAAK,GAAQ,IADb,KAAK,CAET,CACN,CAAC,GACC,IACD,CACP,EAEA,OAAO,CAAC,QAAQ,IAAI,CACnB,KAAC,IAAI,IAAC,SAAS,EAAC,mBAAmB,YAAE,CAAC,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAQ,CACrH,EAED,iBAAO,SAAS,EAAC,8CAA8C,aAC7D,KAAC,YAAY,IAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,GAAI,EACpF,KAAC,IAAI,cAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAQ,IAC1C,EAER,eAAK,SAAS,EAAC,kBAAkB,aAC/B,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAE/C,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GACvB,EACT,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAElD,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAC1B,IACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,MAAM,GAAG,eAAe,CAAC,OAAO,EAChC,GAAG,KAAK,EAC4D;IACpE,MAAM,SAAS,GAAG,uBAAuB,CACvC,qBAAqB,CAAC,4BAA4B,EAClD,mBAAmB,CACpB,CAAC,MAAM,CAAC,CAAC;IACV,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useSearchParams } from 'react-router-dom';\nimport { OAuthConsentDecision } from '@wildo-ai/saas-models';\nimport { CorePresetNames, FrontendComponentType, UserOAuthConsentLabel } from '@wildo-ai/presets-components-models';\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { CheckboxRoot } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n  getManualCallsHttpClient,\n  type OAuthConsentRequiredResponse,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n  appendAuthRedirectToPath,\n  buildAuthRedirectTarget,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\n/**\n * OIDC interactive-consent screen (S1) — the body rendered by {@link AuthPage_OAuthConsent}.\n *\n * FLOW (Bearer-authed SPA, NOT a server-rendered page — see the backend `handleConsentDecision`\n * JSDoc): a third-party client redirects the browser here with the OAuth authorize query. This\n * component forwards that query to `GET /oauth/authorize` (Bearer auto-attached) → the backend\n * returns `consent_required` + a single-use consent token + the requesting client / scopes / agent\n * resource. On Approve/Deny it POSTs `{consent_token, decision}` to `/oauth/authorize/decision`,\n * which returns `{ redirect_to }`; the app then `window.location.assign(redirect_to)` to complete the\n * OAuth redirect back to the client (carrying the `code` on approve, `error=access_denied` on deny).\n *\n * Copy is resolved through {@link UserOAuthConsentLabel} (component\n * `PUBLIC_LAYOUTS_OAUTH_CONSENT`) via {@link useI18n}; the label metadata lives in the\n * companion-scanned `Auth_OAuthConsent.labels.ts`.\n */\n\n// The authorize params this screen forwards verbatim to `GET /oauth/authorize`; the backend validates\n// them (client/redirect allowlist, PKCE). Anything else in the URL is ignored.\nconst AUTHORIZE_PARAM_KEYS = [\n  'response_type',\n  'client_id',\n  'redirect_uri',\n  'code_challenge',\n  'code_challenge_method',\n  'scope',\n  'resource',\n  'state',\n  'nonce',\n] as const;\n\ntype ConsentStatus = 'loading' | 'ready' | 'submitting' | 'error';\n\n/**\n * Props for the consent screen preset. The screen is self-driven from the authorize query\n * (`useSearchParams`) and the session (`useUserOrgs`), so it takes no external props — this interface\n * exists to satisfy the preset-wrapper contract (preset resolution + the frontend-component spec)\n * shared by every `PUBLIC_LAYOUTS` auth page.\n */\nexport interface PublicLayoutPreset_OAuthConsent_DefaultProps {\n  /** Reserved: the consent screen is URL/session-driven and currently accepts no props. */\n  readonly _selfDriven?: never;\n}\n\n/** Default preset implementation for {@link FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT}. */\nexport const PublicLayoutPreset_OAuthConsent_Default = (\n  _props: PublicLayoutPreset_OAuthConsent_DefaultProps,\n): React.JSX.Element => {\n  const { auth } = useUserOrgs();\n  const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT });\n  const [searchParams] = useSearchParams();\n  const [status, setStatus] = useState<ConsentStatus>('loading');\n  const [consent, setConsent] = useState<OAuthConsentRequiredResponse | null>(null);\n  // The error is held as a label KEY (not resolved copy) so it stays i18n-clean and translatable.\n  const [errorLabel, setErrorLabel] = useState<UserOAuthConsentLabel | null>(null);\n  // Item 3 \"remember this app\" — opt-in (default off): on approve, stores a durable grant so a future\n  // authorize with covering scopes skips this screen.\n  const [remember, setRemember] = useState(false);\n\n  const accessToken = auth?.accessToken;\n\n  const t = (key: string, params?: Record<string, string>): string =>\n    tComponent(FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT, key, params);\n\n  // Stale-closure-proof single-flight guard for the decision POST. The buttons already unmount when\n  // `status` flips to 'submitting' (see the render below) and the consent token is single-use\n  // server-side, but a synchronous double-dispatch could still fire two POSTs before React re-renders\n  // — a `status === 'submitting'` check would read the captured (stale) 'ready' in that window, so a\n  // ref (set synchronously at the top of `decide`) is the only reliable in-flight latch.\n  const submittingRef = useRef(false);\n\n  // The authorize query, filtered to the known OAuth params (verbatim pass-through to the backend).\n  const authorizeParams = useMemo(() => {\n    const params = new URLSearchParams();\n    for (const key of AUTHORIZE_PARAM_KEYS) {\n      const value = searchParams.get(key);\n      if (value) params.set(key, value);\n    }\n    return params;\n  }, [searchParams]);\n\n  // Load the consent request once the user is authenticated.\n  useEffect(() => {\n    if (!accessToken) return; // the Navigate guard below sends the user to login first\n    let cancelled = false;\n    setStatus('loading');\n    setErrorLabel(null);\n    getManualCallsHttpClient()\n      .oauthAuthorizeConsent(authorizeParams)\n      .then((response) => {\n        if (cancelled) return;\n        if (response && 'consent_required' in response && response.consent_required && response.consent_token) {\n          setConsent(response);\n          setStatus('ready');\n        } else if (response && 'redirect_to' in response && response.redirect_to) {\n          // Trusted (non-`requiresConsent`) client — the backend already minted the code; complete the\n          // OAuth redirect back to the client WITHOUT a consent screen. (`window.location.assign` because\n          // the redirect target is cross-origin; the XHR could not have followed a 302 itself.)\n          window.location.assign(response.redirect_to);\n        } else {\n          setStatus('error');\n          setErrorLabel(UserOAuthConsentLabel.ERROR_INVALID);\n        }\n      })\n      .catch(() => {\n        if (cancelled) return;\n        setStatus('error');\n        setErrorLabel(UserOAuthConsentLabel.ERROR_LOAD);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [accessToken, authorizeParams]);\n\n  const decide = useCallback(\n    async (decision: OAuthConsentDecision) => {\n      if (!consent || submittingRef.current) return;\n      submittingRef.current = true;\n      setStatus('submitting');\n      setErrorLabel(null);\n      try {\n        const { redirect_to } = await getManualCallsHttpClient().oauthConsentDecision(\n          consent.consent_token,\n          decision,\n          // Only an APPROVE meaningfully \"remembers\"; a deny sends `false` harmlessly.\n          decision === OAuthConsentDecision.APPROVE && remember,\n        );\n        // Complete the OAuth redirect back to the third-party client (carries `code` or the error).\n        window.location.assign(redirect_to);\n      } catch {\n        // Release the local latch. A lost response may follow server-side token consumption;\n        // the error view does not retry this request token. A fresh flow obtains fresh state.\n        submittingRef.current = false;\n        setStatus('error');\n        setErrorLabel(UserOAuthConsentLabel.ERROR_DECISION);\n      }\n    },\n    [consent, remember],\n  );\n\n  // Not authenticated → send to login, returning to this exact consent request afterwards.\n  if (!accessToken) {\n    const target = buildAuthRedirectTarget({\n      pathname: CommonRoutePaths.oauthConsent,\n      search: `?${searchParams.toString()}`,\n    });\n    return <Navigate to={appendAuthRedirectToPath(CommonRoutePaths.login, target)} replace />;\n  }\n\n  if (status === 'loading' || status === 'submitting' || !isReady) {\n    return (\n      <div className=\"py-region flex justify-center\">\n        <LoadingSpinner />\n      </div>\n    );\n  }\n\n  if (status === 'error' || !consent) {\n    return (\n      <Alert variant=\"destructive\">\n        <AlertDescription>{t(errorLabel ?? UserOAuthConsentLabel.ERROR_GENERIC)}</AlertDescription>\n      </Alert>\n    );\n  }\n\n  return (\n    <div className=\"space-y-group\">\n      <div className=\"text-center space-y-item-xs\">\n        <Heading>{t(UserOAuthConsentLabel.TITLE, { clientName: consent.client.name })}</Heading>\n        <Text className=\"max-w-sm mx-auto\">{t(UserOAuthConsentLabel.SUB_TITLE)}</Text>\n      </div>\n\n      {consent.scopes.length > 0 && (\n        <div className=\"space-y-element\">\n          <Text className=\"font-medium\">{t(UserOAuthConsentLabel.SCOPES_INTRO)}</Text>\n          <ul className=\"space-y-item-xs\">\n            {consent.scopes.map((scope) => (\n              <li key={scope}>\n                <Text>{scope}</Text>\n              </li>\n            ))}\n          </ul>\n        </div>\n      )}\n\n      {consent.resource && (\n        <Text className=\"text-sm break-all\">{t(UserOAuthConsentLabel.AGENT_ENDPOINT, { resource: consent.resource })}</Text>\n      )}\n\n      <label className=\"flex items-center gap-item-xs cursor-pointer\">\n        <CheckboxRoot checked={remember} onCheckedChange={(c) => setRemember(c === true)} />\n        <Text>{t(UserOAuthConsentLabel.REMEMBER)}</Text>\n      </label>\n\n      <div className=\"flex gap-element\">\n        <Button\n          variant={ButtonVariants_Variant.OUTLINE}\n          className=\"flex-1\"\n          onClick={() => decide(OAuthConsentDecision.DENY)}\n        >\n          {t(UserOAuthConsentLabel.DENY)}\n        </Button>\n        <Button\n          variant={ButtonVariants_Variant.DEFAULT}\n          className=\"flex-1\"\n          onClick={() => decide(OAuthConsentDecision.APPROVE)}\n        >\n          {t(UserOAuthConsentLabel.APPROVE)}\n        </Button>\n      </div>\n    </div>\n  );\n};\n\n/**\n * Preset-resolving wrapper for the OIDC consent screen (mirrors every other `PUBLIC_LAYOUTS` auth\n * page). Resolves `PUBLIC_LAYOUTS_OAUTH_CONSENT` to its registered preset (default =\n * {@link PublicLayoutPreset_OAuthConsent_Default}) so an application can swap in a branded consent UI\n * via the component registry. {@link AuthPage_OAuthConsent} renders this wrapper.\n */\nexport function Auth_OAuthConsent({\n  preset = CorePresetNames.DEFAULT,\n  ...props\n}: PublicLayoutPreset_OAuthConsent_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_OAuthConsent_DefaultProps>(\n    FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT,\n    'Auth_OAuthConsent',\n  )(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_OAuthConsent.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OAuthConsent.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OAuthConsent.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,qCAAqC,CAAC;AAQ7C,eAAO,MAAM,+BAA+B,EAAE,mBAAmB,EA0DhE,CAAC"}
+{"version":3,"file":"Auth_OAuthConsent.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthConsent.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,qCAAqC,CAAC;AAQ7C,eAAO,MAAM,+BAA+B,EAAE,mBAAmB,EA0DhE,CAAC"}

package/dist/esm/components/auth/Auth_OAuthLoggedOut.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OAuthLoggedOut.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OAuthLoggedOut.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAS1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAGxH;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,8CAA8C;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAED,eAAO,MAAM,yCAAyC,GAAI,QAAQ,8CAA8C,KAAG,KAAK,CAAC,GAAG,CAAC,OAyB5H,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,8CAA8C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAM5K"}
+{"version":3,"file":"Auth_OAuthLoggedOut.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthLoggedOut.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAS1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAGxH;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,8CAA8C;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAED,eAAO,MAAM,yCAAyC,GAAI,QAAQ,8CAA8C,KAAG,KAAK,CAAC,GAAG,CAAC,OAyB5H,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,8CAA8C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAM5K"}

package/dist/esm/components/auth/Auth_OAuthLoggedOut.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OAuthLoggedOut.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OAuthLoggedOut.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,iCAAiC,EAAE,mBAAmB,EAgBlE,CAAC"}
+{"version":3,"file":"Auth_OAuthLoggedOut.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthLoggedOut.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,iCAAiC,EAAE,mBAAmB,EAgBlE,CAAC"}

package/dist/esm/components/auth/Auth_OAuthLogoutConfirm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OAuthLogoutConfirm.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OAuthLogoutConfirm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAWtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAGxH;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,kDAAkD;IACjE,8FAA8F;IAC9F,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAgBD,eAAO,MAAM,6CAA6C,GACxD,QAAQ,kDAAkD,KACzD,KAAK,CAAC,GAAG,CAAC,OAuEZ,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,EACtC,MAAgC,EAChC,GAAG,KAAK,EACT,EAAE,kDAAkD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAM/F"}
+{"version":3,"file":"Auth_OAuthLogoutConfirm.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthLogoutConfirm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAiD,MAAM,OAAO,CAAC;AAWtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAGxH;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,kDAAkD;IACjE,8FAA8F;IAC9F,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAgBD,eAAO,MAAM,6CAA6C,GACxD,QAAQ,kDAAkD,KACzD,KAAK,CAAC,GAAG,CAAC,OAuEZ,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,EACtC,MAAgC,EAChC,GAAG,KAAK,EACT,EAAE,kDAAkD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAM/F"}

package/dist/esm/components/auth/Auth_OAuthLogoutConfirm.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OAuthLogoutConfirm.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OAuthLogoutConfirm.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,qCAAqC,EAAE,mBAAmB,EA0BtE,CAAC"}
+{"version":3,"file":"Auth_OAuthLogoutConfirm.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthLogoutConfirm.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EAGzB,MAAM,qCAAqC,CAAC;AAO7C,eAAO,MAAM,qCAAqC,EAAE,mBAAmB,EA0BtE,CAAC"}

package/dist/esm/components/auth/Auth_OneOffSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OneOffSession.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OneOffSession.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAgBpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAQxH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,wBAAwB,CAAC;AAEjF,MAAM,WAAW,6CAA6C;IAC5D;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAmGD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wCAAwC,GAAI,qCAItD,6CAA6C,KAAG,KAAK,CAAC,GAAG,CAAC,OAiO5D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,6CAA6C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG1K"}
+{"version":3,"file":"Auth_OneOffSession.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OneOffSession.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAgBpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAQxH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,wBAAwB,CAAC;AAEjF,MAAM,WAAW,6CAA6C;IAC5D;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAmGD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,wCAAwC,GAAI,qCAItD,6CAA6C,KAAG,KAAK,CAAC,GAAG,CAAC,OAiO5D,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,6CAA6C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG1K"}

package/dist/esm/components/auth/Auth_OneOffSession.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OneOffSession.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OneOffSession.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA+C,MAAM,qCAAqC,CAAC;AAM9J,eAAO,MAAM,gCAAgC,EAAE,mBAAmB,EAOjE,CAAC"}
+{"version":3,"file":"Auth_OneOffSession.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OneOffSession.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA+C,MAAM,qCAAqC,CAAC;AAM9J,eAAO,MAAM,gCAAgC,EAAE,mBAAmB,EAOjE,CAAC"}

package/dist/esm/components/auth/Auth_OrganizationOnboarding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OrganizationOnboarding.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OrganizationOnboarding.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AAGzE,OAAO,EACL,oBAAoB,EAKrB,MAAM,uBAAuB,CAAC;AAoB/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAIxH,MAAM,WAAW,sDAAsD;CAAG;AAgE1E;;;GAGG;AACH,wBAAgB,qCAAqC,CAAC,YAAY,EAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAAG,oBAAoB,EAAE,CAK/I;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iDAAiD,GAAI,QAAQ,sDAAsD,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IA4ItJ,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,sDAAsD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5L"}
+{"version":3,"file":"Auth_OrganizationOnboarding.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OrganizationOnboarding.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AAGzE,OAAO,EACL,oBAAoB,EAKrB,MAAM,uBAAuB,CAAC;AAoB/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAIxH,MAAM,WAAW,sDAAsD;CAAG;AAgE1E;;;GAGG;AACH,wBAAgB,qCAAqC,CAAC,YAAY,EAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAAG,oBAAoB,EAAE,CAK/I;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iDAAiD,GAAI,QAAQ,sDAAsD,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IA4ItJ,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,sDAAsD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5L"}

package/dist/esm/components/auth/Auth_OrganizationOnboarding.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_OrganizationOnboarding.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_OrganizationOnboarding.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAwD,MAAM,qCAAqC,CAAC;AAMvK,eAAO,MAAM,yCAAyC,EAAE,mBAAmB,EAe1E,CAAC"}
+{"version":3,"file":"Auth_OrganizationOnboarding.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OrganizationOnboarding.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAwD,MAAM,qCAAqC,CAAC;AAMvK,eAAO,MAAM,yCAAyC,EAAE,mBAAmB,EAe1E,CAAC"}

package/dist/esm/components/auth/Auth_PasswordLost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_PasswordLost.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_PasswordLost.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAiD,MAAM,OAAO,CAAC;AA6BtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAqFxH,MAAM,WAAW,gDAAgD;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,2CAA2C,GAAI,wBAGzD,gDAAgD,KAAG,KAAK,CAAC,GAAG,CAAC,OAgN/D,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,gDAAgD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5K"}
+{"version":3,"file":"Auth_PasswordLost.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_PasswordLost.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAiD,MAAM,OAAO,CAAC;AA6BtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAqFxH,MAAM,WAAW,gDAAgD;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,2CAA2C,GAAI,wBAGzD,gDAAgD,KAAG,KAAK,CAAC,GAAG,CAAC,OAgN/D,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,gDAAgD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5K"}

package/dist/esm/components/auth/Auth_PasswordLost.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_PasswordLost.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_PasswordLost.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAkD,MAAM,qCAAqC,CAAC;AAMjK,eAAO,MAAM,mCAAmC,EAAE,mBAAmB,EA2CpE,CAAC"}
+{"version":3,"file":"Auth_PasswordLost.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_PasswordLost.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAkD,MAAM,qCAAqC,CAAC;AAMjK,eAAO,MAAM,mCAAmC,EAAE,mBAAmB,EA2CpE,CAAC"}

package/dist/esm/components/auth/Auth_PasswordLost.labels.js

@@ -27,13 +27,13 @@ export const PublicLayoutsUserPasswordLostLabels = [
         ref: UserPasswordLostLabel.POLICY_MIN_LENGTH,
         kind: LabelKind.DESCRIPTION,
         purpose: 'Password-policy hint for the minimum required length',
-        params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],
+        params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain', isCount: true }],
     },
     {
         ref: UserPasswordLostLabel.POLICY_MAX_LENGTH,
         kind: LabelKind.DESCRIPTION,
         purpose: 'Password-policy hint for the maximum allowed length',
-        params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],
+        params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain', isCount: true }],
     },
     { ref: UserPasswordLostLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },
     { ref: UserPasswordLostLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },

package/dist/esm/components/auth/Auth_PasswordLost.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_PasswordLost.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_PasswordLost.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEjK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACtH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5H,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACtJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC3I,EAAE,GAAG,EAAE,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACjJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACrH,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACpH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAChI,EAAE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC1J,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IAClJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IAClJ;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;KAClG;IACD;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;KACjG;IACD,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzJ;QACE,GAAG,EAAE,qBAAqB,CAAC,kBAAkB;QAC7C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EACL,0VAA0V;KAC7V;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserPasswordLostLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserPasswordLostLabels: LabellingUnitaryDef[] = [\n  { ref: UserPasswordLostLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the request-password-reset screen' },\n  { ref: UserPasswordLostLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the reset-link request' },\n  { ref: UserPasswordLostLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email input that receives the reset link' },\n  { ref: UserPasswordLostLabel.SEND_RESET_PASSWORD_LINK, kind: LabelKind.BUTTON, purpose: 'Button that emails the password-reset link' },\n  { ref: UserPasswordLostLabel.SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the reset link is being sent' },\n  { ref: UserPasswordLostLabel.SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the reset link was sent' },\n  { ref: UserPasswordLostLabel.SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the reset link' },\n  { ref: UserPasswordLostLabel.BACK_TO_LOGIN, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen from the request-reset view' },\n  { ref: UserPasswordLostLabel.RESET_TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the set-new-password screen reached via the reset link' },\n  { ref: UserPasswordLostLabel.RESET_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the set-new-password screen' },\n  { ref: UserPasswordLostLabel.NEW_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n  { ref: UserPasswordLostLabel.CONFIRM_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n  { ref: UserPasswordLostLabel.RESET_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that submits the new password' },\n  { ref: UserPasswordLostLabel.RESETTING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the new password is being saved' },\n  { ref: UserPasswordLostLabel.RESET_SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the password was reset' },\n  { ref: UserPasswordLostLabel.RESET_SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming the password was changed and inviting sign-in' },\n  { ref: UserPasswordLostLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen after a successful reset' },\n  { ref: UserPasswordLostLabel.PASSWORD_MISMATCH, kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n  { ref: UserPasswordLostLabel.INVALID_TOKEN, kind: LabelKind.MESSAGE, purpose: 'Error shown when the reset token is missing, invalid, or expired' },\n  { ref: UserPasswordLostLabel.UNEXPECTED_ERROR, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the reset request fails unexpectedly' },\n  {\n    ref: UserPasswordLostLabel.POLICY_MIN_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the minimum required length',\n    params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],\n  },\n  {\n    ref: UserPasswordLostLabel.POLICY_MAX_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the maximum allowed length',\n    params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],\n  },\n  { ref: UserPasswordLostLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },\n  { ref: UserPasswordLostLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },\n  { ref: UserPasswordLostLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },\n  { ref: UserPasswordLostLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },\n  {\n    ref: UserPasswordLostLabel.POLICY_BLOCKLISTED,\n    kind: LabelKind.DESCRIPTION,\n    purpose:\n      'Refusal shown when the chosen password is a known common guess, the application\\'s own name, or the local part of the user\\'s own email address. It reports a property of THIS password rather than an unmet rule, so it must not read like the other hints — there is no character the user can add to satisfy it, only a different password to choose.',\n  },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_PASSWORD_LOST, PublicLayoutsUserPasswordLostLabels);\n"]}
+{"version":3,"file":"Auth_PasswordLost.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_PasswordLost.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEjK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACtH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5H,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACtJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC3I,EAAE,GAAG,EAAE,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACjJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACrH,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACpH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAChI,EAAE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC1J,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IAClJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IAClJ;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KACjH;IACD;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KAChH;IACD,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzJ;QACE,GAAG,EAAE,qBAAqB,CAAC,kBAAkB;QAC7C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EACL,0VAA0V;KAC7V;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserPasswordLostLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserPasswordLostLabels: LabellingUnitaryDef[] = [\n  { ref: UserPasswordLostLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the request-password-reset screen' },\n  { ref: UserPasswordLostLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the reset-link request' },\n  { ref: UserPasswordLostLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email input that receives the reset link' },\n  { ref: UserPasswordLostLabel.SEND_RESET_PASSWORD_LINK, kind: LabelKind.BUTTON, purpose: 'Button that emails the password-reset link' },\n  { ref: UserPasswordLostLabel.SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the reset link is being sent' },\n  { ref: UserPasswordLostLabel.SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the reset link was sent' },\n  { ref: UserPasswordLostLabel.SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the reset link' },\n  { ref: UserPasswordLostLabel.BACK_TO_LOGIN, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen from the request-reset view' },\n  { ref: UserPasswordLostLabel.RESET_TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the set-new-password screen reached via the reset link' },\n  { ref: UserPasswordLostLabel.RESET_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the set-new-password screen' },\n  { ref: UserPasswordLostLabel.NEW_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n  { ref: UserPasswordLostLabel.CONFIRM_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n  { ref: UserPasswordLostLabel.RESET_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that submits the new password' },\n  { ref: UserPasswordLostLabel.RESETTING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the new password is being saved' },\n  { ref: UserPasswordLostLabel.RESET_SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the password was reset' },\n  { ref: UserPasswordLostLabel.RESET_SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming the password was changed and inviting sign-in' },\n  { ref: UserPasswordLostLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen after a successful reset' },\n  { ref: UserPasswordLostLabel.PASSWORD_MISMATCH, kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n  { ref: UserPasswordLostLabel.INVALID_TOKEN, kind: LabelKind.MESSAGE, purpose: 'Error shown when the reset token is missing, invalid, or expired' },\n  { ref: UserPasswordLostLabel.UNEXPECTED_ERROR, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the reset request fails unexpectedly' },\n  {\n    ref: UserPasswordLostLabel.POLICY_MIN_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the minimum required length',\n    params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain', isCount: true }],\n  },\n  {\n    ref: UserPasswordLostLabel.POLICY_MAX_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the maximum allowed length',\n    params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain', isCount: true }],\n  },\n  { ref: UserPasswordLostLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },\n  { ref: UserPasswordLostLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },\n  { ref: UserPasswordLostLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },\n  { ref: UserPasswordLostLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },\n  {\n    ref: UserPasswordLostLabel.POLICY_BLOCKLISTED,\n    kind: LabelKind.DESCRIPTION,\n    purpose:\n      'Refusal shown when the chosen password is a known common guess, the application\\'s own name, or the local part of the user\\'s own email address. It reports a property of THIS password rather than an unmet rule, so it must not read like the other hints — there is no character the user can add to satisfy it, only a different password to choose.',\n  },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_PASSWORD_LOST, PublicLayoutsUserPasswordLostLabels);\n"]}

package/dist/esm/components/auth/Auth_Register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_Register.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Register.tsx"],"names":[],"mappings":"AAwBA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmDjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AA4JxH,MAAM,WAAW,4CAA4C;CAC5D;AAED,eAAO,MAAM,uCAAuC,GAAI,IAAI,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OAqqBpH,CAAC;AAyCF,wBAAgB,aAAa,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoBpK"}
+{"version":3,"file":"Auth_Register.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Register.tsx"],"names":[],"mappings":"AAwBA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmDjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AA4JxH,MAAM,WAAW,4CAA4C;CAC5D;AAED,eAAO,MAAM,uCAAuC,GAAI,IAAI,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OA4qBpH,CAAC;AAyCF,wBAAgB,aAAa,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoBpK"}

package/dist/esm/components/auth/Auth_Register.js

@@ -243,6 +243,13 @@ export const PublicLayoutPreset_UserRegister_Default = ({}) => {
     const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);
     const tAuth = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);
     const authRedirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);
+    /**
+     * The address a link into sign-up names (`?email=`), filled in for the person to confirm (#2618). A representing
+     * organization's invitation sends its invitee here with the invited address, because its proposal reaches only an
+     * organization whose owner proved THAT address. A suggestion only: the field stays editable, and the address is
+     * proven by the verification email like any other.
+     */
+    const prefilledEmail = useMemo(() => new URLSearchParams(location.search).get('email')?.trim() ?? '', [location.search]);
     const loginPath = useMemo(() => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget), [authRedirectTarget]);
     const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);
     // ─── Social OAuth2 providers from resolved config ───
@@ -556,7 +563,7 @@ export const PublicLayoutPreset_UserRegister_Default = ({}) => {
                     method: activeMethod,
                 }, children: _jsx(AutomatedForm
                 // One form per method: switching remounts it with that method's schema and defaults.
-                , { schema: registerFormSchema, defaultValues: { email: '', ...(collectsNamesAtSignUp && { firstName: '', lastName: '' }), ...(showOrgNameField && { organizationName: '' }), ...(showPasswordFields && { password: '', confirmPassword: '' }) }, onSubmit: handleRegisterSubmit, onFormReady: handleFormReady, validationMode: ValidationMode.ON_BLUR, disabled: isLoading, layoutTemplate: RegisterFormTemplate, labels: {
+                , { schema: registerFormSchema, defaultValues: { email: prefilledEmail, ...(collectsNamesAtSignUp && { firstName: '', lastName: '' }), ...(showOrgNameField && { organizationName: '' }), ...(showPasswordFields && { password: '', confirmPassword: '' }) }, onSubmit: handleRegisterSubmit, onFormReady: handleFormReady, validationMode: ValidationMode.ON_BLUR, disabled: isLoading, layoutTemplate: RegisterFormTemplate, labels: {
                         fields: {
                             email: t(UserRegisterLabel.EMAIL_ADDRESS),
                             ...(collectsNamesAtSignUp && { firstName: t(UserRegisterLabel.FIRST_NAME), lastName: t(UserRegisterLabel.LAST_NAME) }),