npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.3 → 1.1.5 - Mend

@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2521) hide show

package/dist/esm/components/auth/Auth_Main.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Main.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Main.tsx"],"names":[],"mappings":";AACA,OAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,yBAAyB,GAI1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,iCAAiC,EAAE,MAAM,uFAAuF,CAAC;AAE1I,OAAO,EAAE,qBAAqB,EAAE,MAAM,iEAAiE,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAiC,MAAM,oEAAoE,CAAC;AAGtK,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAA;AACzH,OAAO,EAAG,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAEtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;AACjD,MAAM,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAE/C;;;GAGG;AACH,MAAM,oBAAoB,GAAa,GAAG,EAAE;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAE3F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAEzB,IAAI,CAAC,KAAK,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,EAChC,eAAe,EAAC,QAAG,EACnB,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAMF;;;GAGG;AACH,MAAM,gBAAgB,GAA+C;IACnE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,eAAe;IACpD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,iBAAiB;IACxD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc;IACnD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,cAAc;IAC7D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,sBAAsB;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,EAA4C,EAAqB,EAAE;IACrH,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,MAAM,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,EAAE;QAChD,OAAO,iCAAiC,CAAC;YACvC,eAAe,EAAE,YAAY,CAAC,UAAU,EAAE,qBAAqB;YAC/D,wBAAwB;SACzB,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,wBAAwB,EAAE,YAAY,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC/E,MAAM,6BAA6B,GAAG,OAAO,CAAC,GAAG,EAAE;QACjD,OAAO,uCAAuC,CAC5C,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAC7E,CAAC;IACJ,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACpD,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;QACzD,IAAI,EAAE,6BAA6B;KACpC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,gBAAgB,CAAC;IACtC,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtB,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,wBAAwB,CAAC,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAC7E,CAAC,kBAAkB,EAAE,YAAY,CAAC,YAAY,CAAC,CAChD,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,wBAAwB,CAAC,YAAY,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EACzE,CAAC,kBAAkB,EAAE,YAAY,CAAC,QAAQ,CAAC,CAC5C,CAAC;IAEF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,QAAQ,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACjH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC/C,QAAQ,CACN,wBAAwB,CACtB,GAAG,gBAAgB,CAAC,YAAY,cAAc,IAAI,CAAC,YAAY,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACpG,kBAAkB,CACnB,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEpI,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;IAE/C,MAAM,2BAA2B,GAAsB,OAAO,CAAC,GAAG,EAAE;QAClE,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU;YAAE,OAAO,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,IAAI,EAAE,CAAC;QAC9D,OAAO,yBAAyB,CAC9B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,IAAI,2BAA2B,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,EAAE,wBAAkD,CAAC;QACnG,IAAI,kBAAkB,IAAI,sBAAsB,CAAC,kBAAkB,CAAC;YAAE,OAAO,kBAAkB,CAAC;QAChG,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,MAAoB,CAAC;IAC7D,CAAC,EAAE,CAAC,2BAA2B,EAAE,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEjF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,MAAM,CAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CACxC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,WAAmB,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,IAAyB,EAAE,EAAE;QACzD,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE;QACjF,mEAAmE;QACnE,sDAAsD;QACtD,iEAAiE;QACjE,qDAAqD;IACvD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE;QAC5D,oDAAoD;IACtD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,iBAAiB,GAAG,YAAY,CAAC,YAAY,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;IACzG,MAAM,wBAAwB,GAAG,4BAA4B,CAAC,MAAM,GAAG,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC;IAChF,MAAM,oBAAoB,GAAG,wBAAwB,IAAI,gBAAgB,CAAC;IAC1E,MAAM,WAAW,GAAG,oBAAoB,IAAI,iBAAiB,CAAC;IAE9D,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CACN,kBAAkB,OAAO,gBAAgB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,mBAAmB,IAAI,MAAM,EAAE,CACzQ,CAAC;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE1G,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cACL,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;4BACzC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC;4BAC/B,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAClB,EACV,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;4BACzC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC;4BACnC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,GACzB,IACH,EAEL,oBAAoB,IAAI,CACvB,KAAC,qBAAqB,IACpB,SAAS,EAAE,4BAA4B,EACvC,eAAe,EAAE,iBAAiB,EAClC,SAAS,EAAE,IAAI,CAAC,SAAS,EACzB,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,EACjD,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,EACzC,WAAW,EAAE,WAAW,GACxB,CACH,EAEA,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB,IAAI,CACrC,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,mBAAmB,GAAoB,GACpD,CACT,EAGA,gBAAgB,IAAI,iBAAiB,IAAI,CACxC,KAAC,aAAa,IAEZ,MAAM,EAAE,yBAAyB,EACjC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAC5B,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,EACxB,MAAM,EAAE;oBACN,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE;iBAClD,EACD,cAAc,EAAE,oBAAoB,IAThC,UAAU,CAUd,CACH,EAGA,mBAAmB,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;gBACpE,IAAI,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,YAAY,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;gBAC/F,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,MAAM,KAAK,GAA6B;oBACtC,SAAS;oBACT,KAAK;oBACL,YAAY;oBACZ,SAAS,EAAE,wBAAwB;oBACnC,OAAO,EAAE,sBAAsB;oBAC/B,WAAW,EAAE,OAAO;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,CAAC;iBACF,CAAC;gBAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;YACxC,CAAC,CAAC,EAAE,EAGH,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CACrD,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EAEjE,cAAK,SAAS,EAAC,cAAc,YAC1B,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;4BACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAoB,CAAC,CAAC;4BAC/D,OAAO,CACL,KAAC,MAAM,IAEL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,MAAoB,CAAC,EAC3D,QAAQ,EAAE,IAAI,CAAC,SAAS,YAEvB,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IANlC,MAAM,CAAC,MAAM,CAOX,CACV,CAAC;wBACJ,CAAC,CAAC,GACE,IACL,CACJ,EAEA,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,CACzD,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,eAAK,SAAS,EAAC,0BAA0B,aACtC,iBAAiB,IAAI,IAAI,CAAC,cAAc,EAAE,UAAU,IAAI,CACvD,KAAC,IAAI,cACH,KAAC,IAAI,IAAC,IAAI,EAAE,gBAAgB,YAAG,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,GAAQ,GAClE,CACR,EAEA,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;2BACtC,YAAY,CAAC,kBAAkB,CAAC,2BAA2B,IAAI,CAClE,MAAC,IAAI,eACF,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,GAAG,EACjC,KAAC,IAAI,IAAC,IAAI,EAAE,YAAY,YAAG,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,GAAQ,IAC1D,CACR,IACG,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAmE;IACvI,MAAM,SAAS,GAAG,uBAAuB,CAA2C,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;IACzJ,QAAQ,CAAC,0BAA0B,MAAM,cAAc,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IACjH,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["\nimport React, { useMemo, useState, useCallback, useEffect } from 'react';\nimport { Navigate, useLocation, useNavigate } from 'react-router-dom';\nimport { FrontendComponentType, UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport {\n AuthMethod,\n AuthSessionPurpose,\n AuthIdentifyFormDtoSchema,\n type AuthIdentifyFormDto,\n type AvailableMethod,\n type AuthenticationResponse,\n} from '@wildo-ai/saas-models';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { collectFrontendProviderDisplayLabelKeys } from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\nimport { resolvePublicOAuthProviderEntries } from '~wildo-frontend-lib/components/auth/utils/oauth-provider-display-label.frontend.utils';\n\nimport { OAuthProvidersSection } from '~wildo-frontend-lib/components/auth/utils/OAuthProvidersSection';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AUTH_METHOD_COMPONENTS, sortMethodsByDisplayOrder, type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas'\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper'\nimport { CorePresetNames } from '@wildo-ai/presets-components-models'\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('Auth_Main');\nlogger.setDebugTypeLogging('Auth_Main', false);\n\n/*\n Self-sufficient template for the email identification form.\n * Reads auth error from `useUserOrgs()`, labels from `useI18n()`.\n /\nconst IdentifyFormTemplate: React.FC = () => {\n const { auth } = useUserOrgs();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n });\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n\n if (!isReady) return null;\n\n return (\n <FormLayout>\n <FormField name=\"email\" />\n\n {auth.error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{auth.error}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={t(UserAuthLabel.CONTINUE)}\n submittingLabel=\"…\"\n fullWidth\n />\n </FormLayout>\n );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserAuth_DefaultProps {\n}\n\n/\n Method display name mapping for selection buttons.\n * Uses i18n labels for method names shown in the \"Or sign in with\" section.\n /\nconst METHOD_LABEL_MAP: Partial<Record<AuthMethod, UserAuthLabel>> = {\n [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,\n [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,\n [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,\n [AuthMethod.SMS_OTP]: UserAuthLabel.METHOD_SMS_OTP,\n [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,\n [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,\n [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,\n};\n\nexport const PublicLayoutPreset_UserAuth_Default = ({}: PublicLayoutPreset_UserAuth_DefaultProps): React.JSX.Element => {\n const { auth, identifyByEmail, initiateOAuth2Login } = useUserOrgs();\n const { frontendProviderRegistry } = useApplication();\n const resolvedAuth = useResolvedAuthConfig();\n const navigate = useNavigate();\n const location = useLocation();\n const enabledSocialOAuth2Providers = useMemo(() => {\n return resolvePublicOAuthProviderEntries({\n publicProviders: resolvedAuth.globalAuth?.socialOAuth2Providers,\n frontendProviderRegistry,\n });\n }, [frontendProviderRegistry, resolvedAuth.globalAuth?.socialOAuth2Providers]);\n const socialOAuth2ProviderLabelKeys = useMemo(() => {\n return collectFrontendProviderDisplayLabelKeys(\n enabledSocialOAuth2Providers.map((provider) => provider.displayNameLabelKey),\n );\n }, [enabledSocialOAuth2Providers]);\n const { t: translate, tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n keys: socialOAuth2ProviderLabelKeys,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n const publicRoutes = CommonRoutePaths;\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const redirectedAuthError = useMemo(() => {\n const searchParams = new URLSearchParams(location.search);\n return searchParams.get('reason') ?? searchParams.get('error');\n }, [location.search]);\n const passwordLostHref = useMemo(\n () => appendAuthRedirectToPath(publicRoutes.passwordLost, authRedirectTarget),\n [authRedirectTarget, publicRoutes.passwordLost],\n );\n const registerHref = useMemo(\n () => appendAuthRedirectToPath(publicRoutes.register, authRedirectTarget),\n [authRedirectTarget, publicRoutes.register],\n );\n\n const [activeMethod, setActiveMethod] = useState<AuthMethod \| null>(null);\n\n useEffect(() => {\n if (auth.mfaRequired && auth.mfaSessionId) {\n const hasUsableMethods = auth.usableSecondFactorMethods.length > 0;\n if (!hasUsableMethods) {\n navigate(appendAuthRedirectToPath(CommonRoutePaths.enrollmentRequired, authRedirectTarget), { replace: true });\n } else {\n const email = auth.identification?.email \|\| '';\n navigate(\n appendAuthRedirectToPath(\n `${CommonRoutePaths.mfaChallenge}?sessionId=${auth.mfaSessionId}&email=${encodeURIComponent(email)}`,\n authRedirectTarget,\n ),\n { replace: true },\n );\n }\n }\n }, [auth.mfaRequired, auth.mfaSessionId, auth.usableSecondFactorMethods, navigate, auth.identification?.email, authRedirectTarget]);\n\n const hasIdentification = !!auth.identification;\n const sessionId = auth.identification?.sessionId \|\| '';\n const email = auth.identification?.email \|\| '';\n\n const availableFirstFactorMethods: AvailableMethod[] = useMemo(() => {\n if (!hasIdentification \|\| !auth.identification?.userExists) return [];\n const methods = auth.identification?.firstFactorMethods \|\| [];\n return sortMethodsByDisplayOrder(\n methods.filter((m) => AUTH_METHOD_COMPONENTS[m.method as AuthMethod])\n );\n }, [hasIdentification, auth.identification]);\n\n const defaultMethod = useMemo(() => {\n if (availableFirstFactorMethods.length === 0) return null;\n const defaultFromBackend = auth.identification?.defaultFirstFactorMethod as AuthMethod \| undefined;\n if (defaultFromBackend && AUTH_METHOD_COMPONENTS[defaultFromBackend]) return defaultFromBackend;\n return availableFirstFactorMethods[0].method as AuthMethod;\n }, [availableFirstFactorMethods, auth.identification?.defaultFirstFactorMethod]);\n\n const currentActiveMethod = activeMethod \|\| defaultMethod;\n const alternativeMethods = availableFirstFactorMethods.filter(\n (m) => m.method !== currentActiveMethod\n );\n\n const handleOAuth2Click = async (providerRef: string) => {\n try {\n await initiateOAuth2Login(providerRef, authRedirectTarget);\n } catch {\n // Error is already handled in AuthSessionContext\n }\n };\n\n const handleIdentify = async (data: AuthIdentifyFormDto) => {\n await identifyByEmail(data.email);\n };\n\n const handleFirstFactorSuccess = useCallback((_response: AuthenticationResponse) => {\n // Token storage and MFA redirect are handled by AuthSessionContext\n // and the authenticateWithPassword flow respectively.\n // Nothing to do here — the auth state update triggers re-renders\n // and the MFA redirect is handled at the page level.\n }, []);\n\n const handleFirstFactorError = useCallback((_error: string) => {\n // Errors are displayed within each method component\n }, []);\n\n const isPasswordEnabled = resolvedAuth.userTypeAuth?.authMethodsEnabled?.[AuthMethod.PASSWORD] !== false;\n const hasSocialOAuth2Providers = enabledSocialOAuth2Providers.length > 0;\n const showIdentifyForm = !hasIdentification \|\| !auth.identification?.userExists;\n const showPreIdentifyOAuth = hasSocialOAuth2Providers && showIdentifyForm;\n const showDivider = showPreIdentifyOAuth && isPasswordEnabled;\n\n useEffect(() => {\n logDebug(\n `Render isReady=${isReady} accessToken=${auth.accessToken ? 'yes' : 'no'} authLoading=${auth.isLoading ? 'yes' : 'no'} identification=${hasIdentification ? 'yes' : 'no'} showIdentify=${showIdentifyForm ? 'yes' : 'no'} activeMethod=${currentActiveMethod ?? 'none'}`,\n );\n }, [isReady, auth.accessToken, auth.isLoading, hasIdentification, showIdentifyForm, currentActiveMethod]);\n\n if (auth.accessToken) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!isReady) return null;\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>\n {auth.purpose === AuthSessionPurpose.REAUTH\n ? t(UserAuthLabel.REAUTH_TITLE)\n : t(UserAuthLabel.TITLE)}\n </Heading>\n <Text className=\"max-w-sm mx-auto\">\n {auth.purpose === AuthSessionPurpose.REAUTH\n ? t(UserAuthLabel.REAUTH_SUB_TITLE)\n : t(UserAuthLabel.SUB_TITLE)}\n </Text>\n </div>\n\n {showPreIdentifyOAuth && (\n <OAuthProvidersSection\n providers={enabledSocialOAuth2Providers}\n onProviderClick={handleOAuth2Click}\n isLoading={auth.isLoading}\n continueWithLabel={t(UserAuthLabel.CONTINUE_WITH)}\n translate={translate}\n dividerLabel={t(UserAuthLabel.DIVIDER_OR)}\n showDivider={showDivider}\n />\n )}\n\n {!auth.error && redirectedAuthError && (\n <Alert variant=\"destructive\">\n <AlertDescription>{redirectedAuthError}</AlertDescription>\n </Alert>\n )}\n\n {/ Phase 1: Identification — email input before any method is shown /}\n {showIdentifyForm && isPasswordEnabled && (\n <AutomatedForm\n key=\"identify\"\n schema={AuthIdentifyFormDtoSchema}\n defaultValues={{ email: '' }}\n onSubmit={handleIdentify}\n validationMode={ValidationMode.ON_BLUR}\n disabled={auth.isLoading}\n labels={{\n fields: { email: t(UserAuthLabel.EMAIL_ADDRESS) },\n }}\n layoutTemplate={IdentifyFormTemplate}\n />\n )}\n\n {/ Phase 2: After identification — render active first-factor method /}\n {currentActiveMethod && !showIdentifyForm && (() => {\n const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];\n if (!MethodComponent) return null;\n const methodConfig = availableFirstFactorMethods.find((m) => m.method === currentActiveMethod);\n if (!methodConfig) return null;\n\n const props: AuthMethodComponentProps = {\n sessionId,\n email,\n methodConfig,\n onSuccess: handleFirstFactorSuccess,\n onError: handleFirstFactorError,\n factorLevel: 'first',\n isLoading: auth.isLoading,\n t,\n };\n\n return <MethodComponent {...props} />;\n })()}\n\n {/ Phase 3: Alternative methods — shown as buttons below the active method */}\n {alternativeMethods.length > 0 && !showIdentifyForm && (\n <>\n <LabeledDivider label={t(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n\n <div className=\"space-y-item\">\n {alternativeMethods.map((method) => {\n const labelKey = METHOD_LABEL_MAP[method.method as AuthMethod];\n return (\n <Button\n key={method.method}\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"w-full\"\n onClick={() => setActiveMethod(method.method as AuthMethod)}\n disabled={auth.isLoading}\n >\n {labelKey ? t(labelKey) : method.method}\n </Button>\n );\n })}\n </div>\n </>\n )}\n\n {!isPasswordEnabled && !hasIdentification && auth.error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{auth.error}</AlertDescription>\n </Alert>\n )}\n\n <div className=\"text-center space-y-item\">\n {hasIdentification && auth.identification?.userExists && (\n <Text>\n <Link href={passwordLostHref}>{t(UserAuthLabel.FORGOT_PASSWORD)}</Link>\n </Text>\n )}\n\n {auth.purpose !== AuthSessionPurpose.REAUTH\n && resolvedAuth.registrationConfig.publicRegistrationAvailable && (\n <Text>\n {t(UserAuthLabel.NO_ACCOUNT)}{' '}\n <Link href={registerHref}>{t(UserAuthLabel.SIGNUP_LINK)}</Link>\n </Text>\n )}\n </div>\n </>\n );\n};\n\nexport function Auth_Main({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserAuth_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_UserAuth_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, 'Auth_Main')(preset);\n logDebug(`Resolve wrapper preset=${preset} component=${Component.displayName ?? Component.name ?? 'anonymous'}`);\n return <Component {...props} />;\n}\n"]}
1	+ {"version":3,"file":"Auth_Main.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Main.tsx"],"names":[],"mappings":";AACA,OAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,yBAAyB,GAI1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,6DAA6D,CAAC;AAClI,OAAO,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACpH,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,uFAAuF,CAAC;AAE5K,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iEAAiE,CAAC;AACjI,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,sBAAsB,EAAiC,MAAM,oEAAoE,CAAC;AAC3I,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAG1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAA;AACzH,OAAO,EAAG,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAEtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;AACjD,MAAM,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAE/C;;;GAGG;AACH,MAAM,oBAAoB,GAAa,GAAG,EAAE;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAE3F,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAEzB,IAAI,CAAC,KAAK,IAAI,CACb,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,EAChC,eAAe,EAAC,QAAG,EACnB,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,2BAA2B,CAAC,SAAiB;IACpD,MAAM,QAAQ,GAAG,iCAAiC,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YACD,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,KAAK,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAM5C,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,EAA4C,EAAqB,EAAE;IACrH,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,WAAW,EAAE,CAAC;IACrE,MAAM,EAAE,iBAAiB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/C,MAAM,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,EAAE;QAChD,OAAO,iCAAiC,CAAC;YACvC,eAAe,EAAE,YAAY,CAAC,UAAU,EAAE,qBAAqB;YAC/D,wBAAwB;SACzB,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,wBAAwB,EAAE,YAAY,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC/E,MAAM,6BAA6B,GAAG,OAAO,CAAC,GAAG,EAAE;QACjD,OAAO,uCAAuC,CAC5C,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAC7E,CAAC;IACJ,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACpD,SAAS,EAAE,qBAAqB,CAAC,wBAAwB;QACzD,IAAI,EAAE,6BAA6B;KACpC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,gBAAgB,CAAC;IACtC,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE;QACvC,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtB,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,wBAAwB,CAAC,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAC7E,CAAC,kBAAkB,EAAE,YAAY,CAAC,YAAY,CAAC,CAChD,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,wBAAwB,CAAC,YAAY,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EACzE,CAAC,kBAAkB,EAAE,YAAY,CAAC,QAAQ,CAAC,CAC5C,CAAC;IAEF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,oGAAoG;IACpG,4BAA4B,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK;QACjC,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;IAE/C,MAAM,2BAA2B,GAAsB,OAAO,CAAC,GAAG,EAAE;QAClE,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU;YAAE,OAAO,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,IAAI,EAAE,CAAC;QAC9D,6GAA6G;QAC7G,kHAAkH;QAClH,+GAA+G;QAC/G,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;IAC/E,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;QACjC,IAAI,2BAA2B,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,EAAE,wBAAkD,CAAC;QACnG,IAAI,kBAAkB,IAAI,sBAAsB,CAAC,kBAAkB,CAAC;YAAE,OAAO,kBAAkB,CAAC;QAChG,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,MAAoB,CAAC;IAC7D,CAAC,EAAE,CAAC,2BAA2B,EAAE,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEjF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,MAAM,CAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CACxC,CAAC;IAEF;;;;;;;;;;;;;;OAcG;IACH,MAAM,kCAAkC,GAAG,2BAA2B,CAAC,IAAI,CACzE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,IAAI,CAAC,CAAC,mBAAmB,CACjE,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,WAAmB,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,IAAyB,EAAE,EAAE;QACzD,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE;QACjF,mEAAmE;QACnE,sDAAsD;QACtD,iEAAiE;QACjE,qDAAqD;IACvD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE;QAC5D,oDAAoD;IACtD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,wBAAwB,GAAG,4BAA4B,CAAC,MAAM,GAAG,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC;IAChF,MAAM,oBAAoB,GAAG,wBAAwB,IAAI,gBAAgB,CAAC;IAE1E;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAG,4BAA4B,CAAC,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAC5F,IAAI,CAAC,wBAAwB;YAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC;IACjB,CAAC,EAAE,CAAC,wBAAwB,EAAE,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9E,MAAM,uBAAuB,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,kBAAkB,IAAI,wBAAwB,CAAC,IAAI,GAAG,CAAC,CAAC;IAEpH,MAAM,WAAW,GAAG,oBAAoB,IAAI,uBAAuB,CAAC;IAEpE;;;;OAIG;IACH,4GAA4G;IAC5G,iGAAiG;IACjG,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,YAAY,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;WAClH,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;WAC1C,OAAO,MAAM,KAAK,WAAW;WAC7B,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAClC;;;;;;;;OAQG;IACH,MAAM,kBAAkB,GAAG,gBAAgB,IAAI,CAAC,uBAAuB,IAAI,CAAC,sBAAsB,IAAI,CAAC,oBAAoB,CAAC;IAC5H;;;;;OAKG;IACH,MAAM,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEtD,MAAM,wBAAwB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACtD,qBAAqB,CAAC,OAAO,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,8FAA8F;YAC9F,sFAAsF;QACxF,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,OAAO,GAAG,KAAK,CAAC;YACtC,gBAAgB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAExB;;;;;OAKG;IACH;;;;;OAKG;IACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACvD,oBAAoB,CAAC,OAAO,GAAG,iBAAiB,CAAC;IAEjD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB,IAAI,CAAC,sBAAsB;YAAE,OAAO,SAAS,CAAC;QAC/E,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,CAAC,MAAM,+BAA+B,EAAE,CAAC;gBAAE,OAAO;YACvD,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,8BAA8B,CAAC,CAAC;YAChF,mGAAmG;YACnG,kGAAkG;YAClG,qGAAqG;YACrG,sGAAsG;YACtG,iBAAiB;YACjB,OAAO,CAAC,SAAS,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,oBAAoB,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;oBACvE,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC,IAAI,qBAAqB,CAAC,OAAO;wBAAE,OAAO;gBAC/F,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,oBAAoB,CAAC,cAAc,EAAE,CAAC;QACxC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAC,CAAC;IAEvE,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CACN,kBAAkB,OAAO,gBAAgB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,mBAAmB,IAAI,MAAM,EAAE,CACzQ,CAAC;IACJ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE1G,qHAAqH;IACrH,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B;;;;;;;;;;OAUG;IACH,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cACL,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;4BACzC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC;4BAC/B,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAClB,EACV,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;4BACzC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC;4BACnC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,GACzB,IACH,EAEL,oBAAoB,IAAI,CACvB,KAAC,qBAAqB,IACpB,SAAS,EAAE,4BAA4B,EACvC,eAAe,EAAE,iBAAiB,EAClC,SAAS,EAAE,IAAI,CAAC,SAAS,EACzB,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,EACjD,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,EACzC,WAAW,EAAE,WAAW,GACxB,CACH,EAEA,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB,IAAI,CACrC,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,mBAAmB,GAAoB,GACpD,CACT,EAGA,gBAAgB,IAAI,uBAAuB,IAAI,CAC9C,KAAC,aAAa,IAEZ,MAAM,EAAE,yBAAyB,EACjC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAC5B,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,EACxB,MAAM,EAAE;oBACN,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE;iBAClD,EACD,cAAc,EAAE,oBAAoB,IAThC,UAAU,CAUd,CACH,EAGA,gBAAgB,IAAI,sBAAsB,IAAI,CAC7C,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,GAAI,EACtD,MAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,aAAa,EAAE,mBAAmB,CAAC,IAAI,EACvC,OAAO,EAAE,wBAAwB,EACjC,QAAQ,EAAE,IAAI,CAAC,SAAS,0BACH,EAAE,aAEvB,KAAC,cAAc,IAAC,MAAM,EAAE,UAAU,CAAC,OAAO,GAAI,EAC7C,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,IAC1B,IACR,CACJ,EAGA,mBAAmB,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;gBACpE,IAAI,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,YAAY,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;gBAC/F,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,MAAM,KAAK,GAA6B;oBACtC,SAAS;oBACT,KAAK;oBACL,YAAY;oBACZ,SAAS,EAAE,wBAAwB;oBACnC,OAAO,EAAE,sBAAsB;oBAC/B,WAAW,EAAE,OAAO;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,CAAC;oBACD,kBAAkB;iBACnB,CAAC;gBAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;YACxC,CAAC,CAAC,EAAE,EAOH,kCAAkC,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAC3F,KAAC,IAAI,cAAE,CAAC,CAAC,aAAa,CAAC,4BAA4B,CAAC,GAAQ,CAC7D,EAGA,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CACrD,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EAEjE,KAAC,oBAAoB,IACnB,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAoB,CAAC;wBACxE;;;;;;;;;;2BAUG;wBACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,EAAE;4BACzD,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;4BAClF,eAAe,EAAE,4BAA4B;4BAC7C,oBAAoB,EAAE,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC;4BACpD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;4BACnC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,gCAAgC,CAAC;gCACzE,WAAW,EAAE,QAAQ,CAAC,WAAW;gCACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;gCACjC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gCACjD,UAAU,EAAE,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK;gCAChE,SAAS;6BACV,CAAC;yBACH,CAAC,EACF,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,IAAI,CAAC,SAAS,GACxB,IACD,CACJ,EAEA,kBAAkB,IAAI,CACrB,KAAC,KAAK,gCAA0B,EAAE,YAChC,KAAC,gBAAgB,cAAE,CAAC,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAoB,GAC7E,CACT,EAGA,CAAC,uBAAuB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,CAC/D,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,IAAI,CAAC,KAAK,GAAoB,GAC3C,CACT,EAMD,eAAK,SAAS,EAAC,mCAAmC,aAe/C,mBAAmB,KAAK,UAAU,CAAC,QAAQ,IAAI,CAAC,gBAAgB,IAAI,CACnE,KAAC,IAAI,cACH,KAAC,IAAI,IAAC,IAAI,EAAE,gBAAgB,YAAG,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,GAAQ,GAClE,CACR,EAEA,IAAI,CAAC,OAAO,KAAK,kBAAkB,CAAC,MAAM;2BACtC,YAAY,CAAC,kBAAkB,CAAC,2BAA2B,IAAI,CAClE,MAAC,IAAI,eACF,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,GAAG,EACjC,KAAC,IAAI,IAAC,IAAI,EAAE,YAAY,YAAG,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,GAAQ,IAC1D,CACR,IACG,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAmE;IACvI,MAAM,SAAS,GAAG,uBAAuB,CAA2C,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;IACzJ,QAAQ,CAAC,0BAA0B,MAAM,cAAc,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IACjH,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["\nimport React, { useMemo, useState, useCallback, useEffect, useRef } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { FrontendComponentType, UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport {\n AuthMethod,\n AuthSessionPurpose,\n getEnabledFirstFactorMethods,\n getEnabledMethods,\n AuthIdentifyFormDtoSchema,\n type AuthIdentifyFormDto,\n type AvailableMethod,\n type AuthenticationResponse,\n} from '@wildo-ai/saas-models';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { PasskeyAutofillExpiredError, PasskeySignInMediation } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\nimport { browserSupportsWebAuthnAutofill, WebAuthnAbortService } from '@simplewebauthn/browser';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { Button, ButtonLabelOverflow, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { collectFrontendProviderDisplayLabelKeys } from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\nimport { resolveOAuthProviderDisplayLabel, resolvePublicOAuthProviderEntries } from '~wildo-frontend-lib/components/auth/utils/oauth-provider-display-label.frontend.utils';\n\nimport { OAuthProvidersSection, SSO_PROVIDER_BRAND_META } from '~wildo-frontend-lib/components/auth/utils/OAuthProvidersSection';\nimport { useMfaContinuationNavigation } from '~wildo-frontend-lib/components/auth/utils/useMfaContinuationNavigation';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AUTH_METHOD_COMPONENTS, type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\nimport { resolveAuthMethodChoiceLabel } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { AuthMethodIcon } from '~wildo-frontend-lib/components/auth/utils/AuthMethodIcon';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas'\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper'\nimport { CorePresetNames } from '@wildo-ai/presets-components-models'\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('Auth_Main');\nlogger.setDebugTypeLogging('Auth_Main', false);\n\n/*\n Self-sufficient template for the email identification form.\n * Reads auth error from `useUserOrgs()`, labels from `useI18n()`.\n /\nconst IdentifyFormTemplate: React.FC = () => {\n const { auth } = useUserOrgs();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n });\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n\n if (!isReady) return null;\n\n return (\n <FormLayout>\n <FormField name=\"email\" />\n\n {auth.error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{auth.error}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={t(UserAuthLabel.CONTINUE)}\n submittingLabel=\"…\"\n fullWidth\n />\n </FormLayout>\n );\n};\n\n/\n Resolve once the sign-in email field carrying the `webauthn` autocomplete token is in the document.\n \n Passkey autofill must start AFTER that input exists: the browser attaches its passkey list to it, and\n * the WebAuthn helper refuses to start a conditional request without one. The form renders\n * asynchronously (it waits for its labels), so this polls one frame at a time, bounded, and answers\n * `null` if the field never appears — autofill is then simply not offered.\n /\nfunction waitForPasskeyAutofillField(timeoutMs: number): Promise<Element \| null> {\n const selector = 'input[autocomplete~=\"webauthn\"]';\n return new Promise((resolve) => {\n const deadline = Date.now() + timeoutMs;\n const probe = () => {\n const field = document.querySelector(selector);\n if (field \|\| Date.now() >= deadline) {\n resolve(field);\n return;\n }\n requestAnimationFrame(probe);\n };\n probe();\n });\n}\n\n/* How long the page waits for the email field before giving up on offering passkey autofill. /\nconst PASSKEY_AUTOFILL_FIELD_WAIT_MS = 3000;\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserAuth_DefaultProps {\n}\n\nexport const PublicLayoutPreset_UserAuth_Default = ({}: PublicLayoutPreset_UserAuth_DefaultProps): React.JSX.Element => {\n const { auth, identifyByEmail, initiateOAuth2Login } = useUserOrgs();\n const { signInWithPasskey } = useAuthSession();\n const { frontendProviderRegistry } = useApplication();\n const resolvedAuth = useResolvedAuthConfig();\n const location = useLocation();\n const enabledSocialOAuth2Providers = useMemo(() => {\n return resolvePublicOAuthProviderEntries({\n publicProviders: resolvedAuth.globalAuth?.socialOAuth2Providers,\n frontendProviderRegistry,\n });\n }, [frontendProviderRegistry, resolvedAuth.globalAuth?.socialOAuth2Providers]);\n const socialOAuth2ProviderLabelKeys = useMemo(() => {\n return collectFrontendProviderDisplayLabelKeys(\n enabledSocialOAuth2Providers.map((provider) => provider.displayNameLabelKey),\n );\n }, [enabledSocialOAuth2Providers]);\n const { t: translate, tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n keys: socialOAuth2ProviderLabelKeys,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n const publicRoutes = CommonRoutePaths;\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const redirectedAuthError = useMemo(() => {\n const searchParams = new URLSearchParams(location.search);\n return searchParams.get('reason') ?? searchParams.get('error');\n }, [location.search]);\n const passwordLostHref = useMemo(\n () => appendAuthRedirectToPath(publicRoutes.passwordLost, authRedirectTarget),\n [authRedirectTarget, publicRoutes.passwordLost],\n );\n const registerHref = useMemo(\n () => appendAuthRedirectToPath(publicRoutes.register, authRedirectTarget),\n [authRedirectTarget, publicRoutes.register],\n );\n\n const [activeMethod, setActiveMethod] = useState<AuthMethod \| null>(null);\n\n // Shared with the registration screen (#972), so a session owing a second factor is routed one way.\n useMfaContinuationNavigation({\n mfaRequired: auth.mfaRequired,\n mfaSessionId: auth.mfaSessionId,\n usableSecondFactorMethods: auth.usableSecondFactorMethods,\n email: auth.identification?.email,\n authRedirectTarget,\n });\n\n const hasIdentification = !!auth.identification;\n const sessionId = auth.identification?.sessionId \|\| '';\n const email = auth.identification?.email \|\| '';\n\n const availableFirstFactorMethods: AvailableMethod[] = useMemo(() => {\n if (!hasIdentification \|\| !auth.identification?.userExists) return [];\n const methods = auth.identification?.firstFactorMethods \|\| [];\n // Rendered in the order the server sent (#1218). The backend orders by `AUTH_METHOD_PRECEDENCE` and computes\n // `defaultFirstFactorMethod` as the head of that same list, so re-sorting here would put a different method first\n // from the one the server named as the default — which is exactly what it used to do for an SSO-routed domain.\n return methods.filter((m) => AUTH_METHOD_COMPONENTS[m.method as AuthMethod]);\n }, [hasIdentification, auth.identification]);\n\n const defaultMethod = useMemo(() => {\n if (availableFirstFactorMethods.length === 0) return null;\n const defaultFromBackend = auth.identification?.defaultFirstFactorMethod as AuthMethod \| undefined;\n if (defaultFromBackend && AUTH_METHOD_COMPONENTS[defaultFromBackend]) return defaultFromBackend;\n return availableFirstFactorMethods[0].method as AuthMethod;\n }, [availableFirstFactorMethods, auth.identification?.defaultFirstFactorMethod]);\n\n const currentActiveMethod = activeMethod \|\| defaultMethod;\n const alternativeMethods = availableFirstFactorMethods.filter(\n (m) => m.method !== currentActiveMethod\n );\n\n /\n * Does the person's organization REQUIRE the method currently shown? (#1220)\n \n `enforcedFirstFactor` is set by the backend only where an enterprise connection declares\n * `enforcement.requireSSO`. Until #1220 this arrived as a `required` boolean that NOTHING here read\n * — a claim on the wire that no surface checked — and it could not safely be read, because the same\n * field was also set on any method that can serve as a second factor whenever the user type demands\n * MFA. Consuming that would have announced a passkey as a mandatory first factor.\n \n Read on the ACTIVE method rather than on the list, because the notice explains the thing the\n * person is looking at. The interesting case is the one where alternatives exist beside it: a tenant\n * that allows a password fallback, or that names break-glass accounts and therefore keeps the\n * password field for EVERY address at the domain so the list cannot be read as an oracle for who\n * those accounts are. There the two methods look like peers and are not.\n /\n const activeMethodIsOrganizationEnforced = availableFirstFactorMethods.some(\n (m) => m.method === currentActiveMethod && m.enforcedFirstFactor,\n );\n\n const handleOAuth2Click = async (providerRef: string) => {\n try {\n await initiateOAuth2Login(providerRef, authRedirectTarget);\n } catch {\n // Error is already handled in AuthSessionContext\n }\n };\n\n const handleIdentify = async (data: AuthIdentifyFormDto) => {\n await identifyByEmail(data.email);\n };\n\n const handleFirstFactorSuccess = useCallback((_response: AuthenticationResponse) => {\n // Token storage and MFA redirect are handled by AuthSessionContext\n // and the authenticateWithPassword flow respectively.\n // Nothing to do here — the auth state update triggers re-renders\n // and the MFA redirect is handled at the page level.\n }, []);\n\n const handleFirstFactorError = useCallback((_error: string) => {\n // Errors are displayed within each method component\n }, []);\n\n const hasSocialOAuth2Providers = enabledSocialOAuth2Providers.length > 0;\n const showIdentifyForm = !hasIdentification \|\| !auth.identification?.userExists;\n const showPreIdentifyOAuth = hasSocialOAuth2Providers && showIdentifyForm;\n\n /\n * The identifier step is the door to EVERY method reached by saying who you are, so it is offered\n * when ANY identify-reachable method is enabled — not when PASSWORD is (#1219). Gating it on the\n * password made a user type that signs in by magic link unable to sign in at all: the email address\n * is the one thing that sign-in needs, and the page hid the field that collects it.\n \n The password INPUT stays gated on the password, and by a stronger authority than this map: it is a\n * Phase-2 method component, rendered only for a method the identify RESPONSE returned for this\n * person. So nothing below has to re-decide it.\n \n `EXTERNAL_OAUTH2` counts only when a social provider actually resolves, mirroring\n * `_buildAvailableMethodObject`, which returns null for it when the application configures none.\n \n An UNRESOLVED policy offers the step. The identifier form is not an access control — the backend\n * decides what a person may use, and refuses on its own — so treating \"I do not know yet\" as\n * \"closed\" would lock the whole sign-in page over a config the page had not loaded, while\n * protecting nothing.\n /\n const identifyReachableMethods = useMemo(() => {\n const methods = getEnabledFirstFactorMethods(resolvedAuth.userTypeAuth?.authMethodsEnabled);\n if (!hasSocialOAuth2Providers) methods.delete(AuthMethod.EXTERNAL_OAUTH2);\n return methods;\n }, [hasSocialOAuth2Providers, resolvedAuth.userTypeAuth?.authMethodsEnabled]);\n const isIdentifierStepOffered = !resolvedAuth.userTypeAuth?.authMethodsEnabled \|\| identifyReachableMethods.size > 0;\n\n const showDivider = showPreIdentifyOAuth && isIdentifierStepOffered;\n\n /\n * Username-less passkey sign-in is offered before any email is typed, when the application enables\n * passkeys for this frontend's user type and the browser speaks WebAuthn. Not during re-authentication:\n * a re-proof must be the SAME person, and a discoverable ceremony lets the device pick any account.\n /\n // Read through the shared helper: `authMethodsEnabled` accepts both `true` and `{ enabled: true }`, and the\n // backend decides with the same helper, so the page must not offer less than the server accepts.\n const isPasskeySignInOffered = getEnabledMethods(resolvedAuth.userTypeAuth?.authMethodsEnabled).has(AuthMethod.PASSKEY)\n && auth.purpose !== AuthSessionPurpose.REAUTH\n && typeof window !== 'undefined'\n && !!window.PublicKeyCredential;\n /\n * The page offers NO way in: no identifier step, no passkey button, no social provider (#1255).\n \n Without this it rendered the heading and subtitle and then nothing — the one alert below that\n * could speak is gated on `auth.error`, and with no form nothing can produce an error. The three\n * terms are exactly the three entry points rendered in the identify phase, so a passkey-only or\n * social-only type is not a dead end and gets no notice. An UNRESOLVED policy offers the identifier\n * step (see `isIdentifierStepOffered`), so this never flashes while the config is loading.\n /\n const offersNoEntryPoint = showIdentifyForm && !isIdentifierStepOffered && !isPasskeySignInOffered && !showPreIdentifyOAuth;\n /\n * While a ceremony the person started with the button is open, autofill must not restart: starting a\n * WebAuthn request aborts the pending one, so a restart timed after the button would close the picker\n * the person is looking at. When the button ceremony ends — refused or cancelled; a success leaves the\n * page — `autofillEpoch` moves and the autofill effect starts a fresh wait.\n /\n const buttonCeremonyLiveRef = useRef(false);\n const [autofillEpoch, setAutofillEpoch] = useState(0);\n\n const handlePasskeySignInClick = useCallback(async () => {\n buttonCeremonyLiveRef.current = true;\n try {\n await signInWithPasskey(PasskeySignInMediation.MODAL);\n } catch {\n // Already reported: the context puts the user-facing message on `auth.error`, which the email\n // form renders. Caught here only so a refused ceremony is not an unhandled rejection.\n } finally {\n buttonCeremonyLiveRef.current = false;\n setAutofillEpoch((epoch) => epoch + 1);\n }\n }, [signInWithPasskey]);\n\n /\n * Passkey AUTOFILL: while the email form is on screen, a conditional passkey request waits for the\n * person to pick a passkey from the email field's autofill list. It is cancelled when the form goes\n * away (an email was submitted, or sign-in completed), and a modal request started by the button\n * replaces it — the WebAuthn helper aborts the pending one itself.\n /\n /\n * The latest `signInWithPasskey`, read through a ref so the autofill effect does NOT re-run when the\n * callback's identity changes. The effect's cleanup cancels the one global WebAuthn ceremony, so a\n * re-run triggered by an unrelated context re-render would cancel a ceremony the person started with\n * the button, and open a second session for nothing.\n /\n const signInWithPasskeyRef = useRef(signInWithPasskey);\n signInWithPasskeyRef.current = signInWithPasskey;\n\n useEffect(() => {\n if (!isReady \|\| !showIdentifyForm \|\| !isPasskeySignInOffered) return undefined;\n let cancelled = false;\n void (async () => {\n if (!(await browserSupportsWebAuthnAutofill())) return;\n const field = await waitForPasskeyAutofillField(PASSKEY_AUTOFILL_FIELD_WAIT_MS);\n // One waiting request at a time, restarted only when its challenge ran out. Anything else ends the\n // loop: the page moved on, the button began its own ceremony, or a picked passkey failed (already\n // reported on `auth.error`). An idle sign-in tab therefore costs one options call per sign-in window\n // (the `expiresInSeconds` the server answered), which is what the per-IP limit on the options door is\n // sized against.\n while (!cancelled) {\n try {\n await signInWithPasskeyRef.current(PasskeySignInMediation.CONDITIONAL);\n return;\n } catch (error) {\n if (!(error instanceof PasskeyAutofillExpiredError) \|\| buttonCeremonyLiveRef.current) return;\n }\n }\n })();\n return () => {\n cancelled = true;\n WebAuthnAbortService.cancelCeremony();\n };\n }, [isReady, showIdentifyForm, isPasskeySignInOffered, autofillEpoch]);\n\n useEffect(() => {\n logDebug(\n `Render isReady=${isReady} accessToken=${auth.accessToken ? 'yes' : 'no'} authLoading=${auth.isLoading ? 'yes' : 'no'} identification=${hasIdentification ? 'yes' : 'no'} showIdentify=${showIdentifyForm ? 'yes' : 'no'} activeMethod=${currentActiveMethod ?? 'none'}`,\n );\n }, [isReady, auth.accessToken, auth.isLoading, hasIdentification, showIdentifyForm, currentActiveMethod]);\n\n // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.\n const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, authRedirectTarget);\n if (organizationOnboardingTarget) {\n return <Navigate to={organizationOnboardingTarget} replace />;\n }\n\n if (auth.accessToken) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!isReady) return null;\n\n /\n * ONE element owns the vertical rhythm of the screen. Every block used to bring its own margin, so\n * whichever pair nobody had thought about got none — the \"Forgot password?\" link sat flush against the\n * last alternative-method button (measured: 0px). The container spaces every adjacent pair, including\n * ones a future phase adds.\n \n `space-y-group` (block flow) and NOT `flex flex-col gap-group`, because of `LabeledDivider`'s own\n * `my-group`. In block flow the sibling margin and the divider's margin COLLAPSE, so an \"or\" divider\n * gets one group-step each side — the spacing it has on the registration and invitation screens, which\n * are block flow too. A flex gap does not collapse with margins and gave this screen twice that.\n /\n return (\n <div className=\"space-y-group\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>\n {auth.purpose === AuthSessionPurpose.REAUTH\n ? t(UserAuthLabel.REAUTH_TITLE)\n : t(UserAuthLabel.TITLE)}\n </Heading>\n <Text className=\"max-w-sm mx-auto\">\n {auth.purpose === AuthSessionPurpose.REAUTH\n ? t(UserAuthLabel.REAUTH_SUB_TITLE)\n : t(UserAuthLabel.SUB_TITLE)}\n </Text>\n </div>\n\n {showPreIdentifyOAuth && (\n <OAuthProvidersSection\n providers={enabledSocialOAuth2Providers}\n onProviderClick={handleOAuth2Click}\n isLoading={auth.isLoading}\n continueWithLabel={t(UserAuthLabel.CONTINUE_WITH)}\n translate={translate}\n dividerLabel={t(UserAuthLabel.DIVIDER_OR)}\n showDivider={showDivider}\n />\n )}\n\n {!auth.error && redirectedAuthError && (\n <Alert variant=\"destructive\">\n <AlertDescription>{redirectedAuthError}</AlertDescription>\n </Alert>\n )}\n\n {/ Phase 1: Identification — email input before any method is shown /}\n {showIdentifyForm && isIdentifierStepOffered && (\n <AutomatedForm\n key=\"identify\"\n schema={AuthIdentifyFormDtoSchema}\n defaultValues={{ email: '' }}\n onSubmit={handleIdentify}\n validationMode={ValidationMode.ON_BLUR}\n disabled={auth.isLoading}\n labels={{\n fields: { email: t(UserAuthLabel.EMAIL_ADDRESS) },\n }}\n layoutTemplate={IdentifyFormTemplate}\n />\n )}\n\n {/ Phase 1b: Username-less passkey sign-in — the device offers the person's accounts /}\n {showIdentifyForm && isPasskeySignInOffered && (\n <>\n <LabeledDivider label={t(UserAuthLabel.DIVIDER_OR)} />\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"w-full\"\n labelOverflow={ButtonLabelOverflow.WRAP}\n onClick={handlePasskeySignInClick}\n disabled={auth.isLoading}\n data-passkey-sign-in=\"\"\n >\n <AuthMethodIcon method={AuthMethod.PASSKEY} />\n {t(UserAuthLabel.PASSKEY_SIGN_IN)}\n </Button>\n </>\n )}\n\n {/ Phase 2: After identification — render active first-factor method /}\n {currentActiveMethod && !showIdentifyForm && (() => {\n const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];\n if (!MethodComponent) return null;\n const methodConfig = availableFirstFactorMethods.find((m) => m.method === currentActiveMethod);\n if (!methodConfig) return null;\n\n const props: AuthMethodComponentProps = {\n sessionId,\n email,\n methodConfig,\n onSuccess: handleFirstFactorSuccess,\n onError: handleFirstFactorError,\n factorLevel: 'first',\n isLoading: auth.isLoading,\n t,\n authRedirectTarget,\n };\n\n return <MethodComponent {...props} />;\n })()}\n\n {/\n The enforcement notice belongs with the alternatives, not with the method above: on its own an\n enforced method needs no explanation — it is simply how you sign in. What needs explaining is\n why a password field is sitting underneath one.\n /}\n {activeMethodIsOrganizationEnforced && alternativeMethods.length > 0 && !showIdentifyForm && (\n <Text>{t(UserAuthLabel.ORGANIZATION_ENFORCED_METHOD)}</Text>\n )}\n\n {/ Phase 3: Alternative methods — shown as buttons below the active method /}\n {alternativeMethods.length > 0 && !showIdentifyForm && (\n <>\n <LabeledDivider label={t(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n\n <AuthMethodChoiceList\n methods={alternativeMethods.map((method) => method.method as AuthMethod)}\n /\n * Named by the PROVIDER where the descriptor names one — \"Continue with Google\", the same\n * words the pre-identify buttons and the active enterprise method already use. The\n * descriptor is looked up rather than passed through the list's props because the list is\n * shared with the second-factor and enrollment choosers, which have no descriptors; the\n * naming data belongs to this surface, not to the list.\n \n `find` by method is sound because `identify` emits at most ONE entry per method — a\n * method standing for several providers carries them in its own `oauth2ProviderRefs`,\n * which is exactly the case the resolver declines to name.\n /\n labelFor={(method) => resolveAuthMethodChoiceLabel(method, {\n offeredMethod: alternativeMethods.find((candidate) => candidate.method === method),\n socialProviders: enabledSocialOAuth2Providers,\n continueWithTemplate: t(UserAuthLabel.CONTINUE_WITH),\n translateLabel: (label) => t(label),\n resolveSocialProviderLabel: (provider) => resolveOAuthProviderDisplayLabel({\n providerRef: provider.providerRef,\n displayName: provider.displayName,\n displayNameLabelKey: provider.displayNameLabelKey,\n brandLabel: SSO_PROVIDER_BRAND_META[provider.providerRef]?.label,\n translate,\n }),\n })}\n onSelect={setActiveMethod}\n disabled={auth.isLoading}\n />\n </>\n )}\n\n {offersNoEntryPoint && (\n <Alert data-auth-no-entry-point=\"\">\n <AlertDescription>{t(UserAuthLabel.NO_SIGN_IN_METHOD_AVAILABLE)}</AlertDescription>\n </Alert>\n )}\n\n {/ No identifier form to carry it: the error has nowhere else to be read. /}\n {!isIdentifierStepOffered && !hasIdentification && auth.error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{auth.error}</AlertDescription>\n </Alert>\n )}\n\n {/\n Navigation AWAY from this form (recover a password, create an account) is a different group\n from the actions above it, so it sits one extra group-step apart rather than at the plain gap.\n /}\n <div className=\"text-center space-y-item pt-group\">\n {/\n Password recovery belongs to the PASSWORD step, and to no other (#1220).\n \n This used to render on `hasIdentification && userExists`, and `userExists` is hard-wired\n `true` on every identify response for enumeration safety — so it reduced to \"any address that\n has been typed\". It offered recovery to an account with no password at all, and to a domain\n routed to its own identity provider, where the link leads somewhere the person's credential\n does not live. It also sat in a sibling element outside the method-render block, so no branch\n could have conditioned it on the active method.\n \n Gated on the ACTIVE method rather than on `PASSWORD` merely being offered: someone who has\n switched to a passkey is not looking at a password field, and recovery beside it is an answer\n to a question they did not ask.\n */}\n {currentActiveMethod === AuthMethod.PASSWORD && !showIdentifyForm && (\n <Text>\n <Link href={passwordLostHref}>{t(UserAuthLabel.FORGOT_PASSWORD)}</Link>\n </Text>\n )}\n\n {auth.purpose !== AuthSessionPurpose.REAUTH\n && resolvedAuth.registrationConfig.publicRegistrationAvailable && (\n <Text>\n {t(UserAuthLabel.NO_ACCOUNT)}{' '}\n <Link href={registerHref}>{t(UserAuthLabel.SIGNUP_LINK)}</Link>\n </Text>\n )}\n </div>\n </div>\n );\n};\n\nexport function Auth_Main({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserAuth_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_UserAuth_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, 'Auth_Main')(preset);\n logDebug(`Resolve wrapper preset=${preset} component=${Component.displayName ?? Component.name ?? 'anonymous'}`);\n return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_Main.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Main.labels.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_Main.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA0C,MAAM,qCAAqC,CAAC;AAMzJ,eAAO,MAAM,2BAA2B,EAAE,mBAAmB,~~EAyC5D~~,CAAC"}
1	+ {"version":3,"file":"Auth_Main.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Main.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA0C,MAAM,qCAAqC,CAAC;AAMzJ,eAAO,MAAM,2BAA2B,EAAE,mBAAmB,EA6C5D,CAAC"}

package/dist/esm/components/auth/Auth_Main.labels.js CHANGED Viewed

@@ -29,6 +29,8 @@ export const PublicLayoutsUserAuthLabels = [
     { ref: UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the magic link' },
     { ref: UserAuthLabel.MAGIC_LINK_TRY_ANOTHER_METHOD, kind: LabelKind.BUTTON, purpose: 'Link to fall back to another sign-in method after sending a magic link' },
     { ref: UserAuthLabel.OTHER_METHODS_DIVIDER, kind: LabelKind.LABEL, purpose: 'Divider introducing alternative sign-in methods below the active one' },
+    { ref: UserAuthLabel.NO_SIGN_IN_METHOD_AVAILABLE, kind: LabelKind.MESSAGE, purpose: 'Notice that this sign-in page offers no way to sign in for this kind of account, and that the person should contact whoever runs the application; shown instead of an empty page' },
+    { ref: UserAuthLabel.ORGANIZATION_ENFORCED_METHOD, kind: LabelKind.MESSAGE, purpose: "Notice that the person's organization requires the method shown above, so the other methods on the page are fallbacks rather than equal choices" },
     { ref: UserAuthLabel.METHOD_PASSWORD, kind: LabelKind.BUTTON, purpose: 'Selector button for the password sign-in method' },
     { ref: UserAuthLabel.METHOD_MAGIC_LINK, kind: LabelKind.BUTTON, purpose: 'Selector button for the magic-link sign-in method' },
     { ref: UserAuthLabel.METHOD_PASSKEY, kind: LabelKind.BUTTON, purpose: 'Selector button for the passkey sign-in method' },
@@ -41,8 +43,10 @@ export const PublicLayoutsUserAuthLabels = [
     { ref: UserAuthLabel.PASSKEY_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when passkey authentication fails' },
     { ref: UserAuthLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },
     { ref: UserAuthLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey prompt' },
+    { ref: UserAuthLabel.PASSKEY_SIGN_IN, kind: LabelKind.BUTTON, purpose: 'Button shown before any email is typed that opens the device passkey picker, so a person signs in by choosing one of their accounts' },
     { ref: UserAuthLabel.REAUTH_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when re-authenticating an already-known user (step-up)' },
     { ref: UserAuthLabel.REAUTH_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the re-authentication screen' },
+    { ref: UserAuthLabel.SSO_CONFIGURATION_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error under an enterprise SSO sign-in button that cannot start because its connection is not fully configured; the person should contact their administrator' },
 ];
 registerComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, PublicLayoutsUserAuthLabels);
 //# sourceMappingURL=Auth_Main.labels.js.map

package/dist/esm/components/auth/Auth_Main.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Main.labels.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Main.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzJ,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAA0B;IAChE,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACpG,EAAE,GAAG,EAAE,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACnH,EAAE,GAAG,EAAE,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACtH,EAAE,GAAG,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnI,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACrG,EAAE,GAAG,EAAE,aAAa,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAC1H,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACpI,EAAE,GAAG,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACnI,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACzH,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,yEAAyE,EAAE;IAC7I,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACpH,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnH,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC1I,EAAE,GAAG,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACxH;QACE,GAAG,EAAE,aAAa,CAAC,aAAa;QAChC,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,yEAAyE;QAClF,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;KACnG;IACD,EAAE,GAAG,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAChI,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC3H,EAAE,GAAG,EAAE,aAAa,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5H,EAAE,GAAG,EAAE,aAAa,CAAC,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC1J,EAAE,GAAG,EAAE,aAAa,CAAC,6BAA6B,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC/J,EAAE,GAAG,EAAE,aAAa,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACpJ,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAC1H,EAAE,GAAG,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,mDAAmD,EAAE;IAC9H,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACxH,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAClI,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACpI,EAAE,GAAG,EAAE,aAAa,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvI,EAAE,GAAG,EAAE,aAAa,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACrI,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAChI,EAAE,GAAG,EAAE,aAAa,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IACnJ,EAAE,GAAG,EAAE,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACvH,EAAE,GAAG,EAAE,aAAa,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACjJ,EAAE,GAAG,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACnI,EAAE,GAAG,EAAE,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC7I,EAAE,GAAG,EAAE,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,kDAAkD,EAAE;CAClI,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserAuthLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserAuthLabels: LabellingUnitaryDef[] = [\n { ref: UserAuthLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Main heading of the sign-in screen' },\n { ref: UserAuthLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line under the sign-in heading' },\n { ref: UserAuthLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email-identification input' },\n { ref: UserAuthLabel.EMAIL_PLACEHOLDER, kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the email-identification input' },\n { ref: UserAuthLabel.PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the password input' },\n { ref: UserAuthLabel.PASSWORD_PLACEHOLDER, kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the password input' },\n { ref: UserAuthLabel.FORGOT_PASSWORD, kind: LabelKind.LABEL, purpose: 'Link to the password-recovery flow shown to existing users' },\n { ref: UserAuthLabel.NO_ACCOUNT, kind: LabelKind.LABEL, purpose: 'Prompt preceding the sign-up link for users without an account' },\n { ref: UserAuthLabel.SIGNUP_LINK, kind: LabelKind.LABEL, purpose: 'Link text that navigates to the registration screen' },\n { ref: UserAuthLabel.HAS_ACCOUNT, kind: LabelKind.LABEL, purpose: 'Prompt preceding the sign-in link for users who already have an account' },\n { ref: UserAuthLabel.SIGNIN_LINK, kind: LabelKind.LABEL, purpose: 'Link text that navigates to the sign-in screen' },\n { ref: UserAuthLabel.SUBMIT, kind: LabelKind.BUTTON, purpose: 'Primary submit button for the authentication form' },\n { ref: UserAuthLabel.CONTINUE, kind: LabelKind.BUTTON, purpose: 'Button that submits the email to continue past the identification step' },\n { ref: UserAuthLabel.SUCCESS, kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after a successful authentication' },\n {\n ref: UserAuthLabel.CONTINUE_WITH,\n kind: LabelKind.BUTTON,\n purpose: 'OAuth button label inviting the user to continue with a social provider',\n params: [{ key: 'provider', meaning: 'display name of the OAuth provider (e.g. Google, GitHub)' }],\n },\n { ref: UserAuthLabel.DIVIDER_OR, kind: LabelKind.LABEL, purpose: 'Divider word separating OAuth providers from the email form' },\n { ref: UserAuthLabel.MAGIC_LINK_SEND, kind: LabelKind.BUTTON, purpose: 'Button that emails a one-time magic sign-in link' },\n { ref: UserAuthLabel.MAGIC_LINK_SENT_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the magic link was sent' },\n { ref: UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the magic link' },\n { ref: UserAuthLabel.MAGIC_LINK_TRY_ANOTHER_METHOD, kind: LabelKind.BUTTON, purpose: 'Link to fall back to another sign-in method after sending a magic link' },\n { ref: UserAuthLabel.OTHER_METHODS_DIVIDER, kind: LabelKind.LABEL, purpose: 'Divider introducing alternative sign-in methods below the active one' },\n { ref: UserAuthLabel.METHOD_PASSWORD, kind: LabelKind.BUTTON, purpose: 'Selector button for the password sign-in method' },\n { ref: UserAuthLabel.METHOD_MAGIC_LINK, kind: LabelKind.BUTTON, purpose: 'Selector button for the magic-link sign-in method' },\n { ref: UserAuthLabel.METHOD_PASSKEY, kind: LabelKind.BUTTON, purpose: 'Selector button for the passkey sign-in method' },\n { ref: UserAuthLabel.METHOD_SMS_OTP, kind: LabelKind.BUTTON, purpose: 'Selector button for the SMS one-time-code sign-in method' },\n { ref: UserAuthLabel.METHOD_ORG_SSO, kind: LabelKind.BUTTON, purpose: 'Selector button for the organization single sign-on method' },\n { ref: UserAuthLabel.METHOD_EXTERNAL_OAUTH2, kind: LabelKind.BUTTON, purpose: 'Selector button for an external OAuth2 sign-in method' },\n { ref: UserAuthLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the passkey sign-in option' },\n { ref: UserAuthLabel.PASSKEY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that triggers the passkey authentication prompt' },\n { ref: UserAuthLabel.PASSKEY_AUTHENTICATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the passkey challenge is being verified' },\n { ref: UserAuthLabel.PASSKEY_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when passkey authentication fails' },\n { ref: UserAuthLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: UserAuthLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey prompt' },\n { ref: UserAuthLabel.REAUTH_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when re-authenticating an already-known user (step-up)' },\n { ref: UserAuthLabel.REAUTH_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the re-authentication screen' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, PublicLayoutsUserAuthLabels);\n"]}
1	+ {"version":3,"file":"Auth_Main.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Main.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzJ,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAA0B;IAChE,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACpG,EAAE,GAAG,EAAE,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACnH,EAAE,GAAG,EAAE,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACtH,EAAE,GAAG,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnI,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACrG,EAAE,GAAG,EAAE,aAAa,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAC1H,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACpI,EAAE,GAAG,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACnI,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACzH,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,yEAAyE,EAAE;IAC7I,EAAE,GAAG,EAAE,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACpH,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnH,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC1I,EAAE,GAAG,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACxH;QACE,GAAG,EAAE,aAAa,CAAC,aAAa;QAChC,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,yEAAyE;QAClF,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;KACnG;IACD,EAAE,GAAG,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAChI,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC3H,EAAE,GAAG,EAAE,aAAa,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5H,EAAE,GAAG,EAAE,aAAa,CAAC,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC1J,EAAE,GAAG,EAAE,aAAa,CAAC,6BAA6B,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC/J,EAAE,GAAG,EAAE,aAAa,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACpJ,EAAE,GAAG,EAAE,aAAa,CAAC,2BAA2B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kLAAkL,EAAE;IACxQ,EAAE,GAAG,EAAE,aAAa,CAAC,4BAA4B,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iJAAiJ,EAAE;IACxO,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAC1H,EAAE,GAAG,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,mDAAmD,EAAE;IAC9H,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACxH,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAClI,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACpI,EAAE,GAAG,EAAE,aAAa,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvI,EAAE,GAAG,EAAE,aAAa,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACrI,EAAE,GAAG,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAChI,EAAE,GAAG,EAAE,aAAa,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IACnJ,EAAE,GAAG,EAAE,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACvH,EAAE,GAAG,EAAE,aAAa,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACjJ,EAAE,GAAG,EAAE,aAAa,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACnI,EAAE,GAAG,EAAE,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qIAAqI,EAAE;IAC9M,EAAE,GAAG,EAAE,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC7I,EAAE,GAAG,EAAE,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,kDAAkD,EAAE;IACjI,EAAE,GAAG,EAAE,aAAa,CAAC,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8JAA8J,EAAE;CACjP,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserAuthLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserAuthLabels: LabellingUnitaryDef[] = [\n { ref: UserAuthLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Main heading of the sign-in screen' },\n { ref: UserAuthLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line under the sign-in heading' },\n { ref: UserAuthLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email-identification input' },\n { ref: UserAuthLabel.EMAIL_PLACEHOLDER, kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the email-identification input' },\n { ref: UserAuthLabel.PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the password input' },\n { ref: UserAuthLabel.PASSWORD_PLACEHOLDER, kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the password input' },\n { ref: UserAuthLabel.FORGOT_PASSWORD, kind: LabelKind.LABEL, purpose: 'Link to the password-recovery flow shown to existing users' },\n { ref: UserAuthLabel.NO_ACCOUNT, kind: LabelKind.LABEL, purpose: 'Prompt preceding the sign-up link for users without an account' },\n { ref: UserAuthLabel.SIGNUP_LINK, kind: LabelKind.LABEL, purpose: 'Link text that navigates to the registration screen' },\n { ref: UserAuthLabel.HAS_ACCOUNT, kind: LabelKind.LABEL, purpose: 'Prompt preceding the sign-in link for users who already have an account' },\n { ref: UserAuthLabel.SIGNIN_LINK, kind: LabelKind.LABEL, purpose: 'Link text that navigates to the sign-in screen' },\n { ref: UserAuthLabel.SUBMIT, kind: LabelKind.BUTTON, purpose: 'Primary submit button for the authentication form' },\n { ref: UserAuthLabel.CONTINUE, kind: LabelKind.BUTTON, purpose: 'Button that submits the email to continue past the identification step' },\n { ref: UserAuthLabel.SUCCESS, kind: LabelKind.MESSAGE, purpose: 'Confirmation shown after a successful authentication' },\n {\n ref: UserAuthLabel.CONTINUE_WITH,\n kind: LabelKind.BUTTON,\n purpose: 'OAuth button label inviting the user to continue with a social provider',\n params: [{ key: 'provider', meaning: 'display name of the OAuth provider (e.g. Google, GitHub)' }],\n },\n { ref: UserAuthLabel.DIVIDER_OR, kind: LabelKind.LABEL, purpose: 'Divider word separating OAuth providers from the email form' },\n { ref: UserAuthLabel.MAGIC_LINK_SEND, kind: LabelKind.BUTTON, purpose: 'Button that emails a one-time magic sign-in link' },\n { ref: UserAuthLabel.MAGIC_LINK_SENT_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the magic link was sent' },\n { ref: UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the magic link' },\n { ref: UserAuthLabel.MAGIC_LINK_TRY_ANOTHER_METHOD, kind: LabelKind.BUTTON, purpose: 'Link to fall back to another sign-in method after sending a magic link' },\n { ref: UserAuthLabel.OTHER_METHODS_DIVIDER, kind: LabelKind.LABEL, purpose: 'Divider introducing alternative sign-in methods below the active one' },\n { ref: UserAuthLabel.NO_SIGN_IN_METHOD_AVAILABLE, kind: LabelKind.MESSAGE, purpose: 'Notice that this sign-in page offers no way to sign in for this kind of account, and that the person should contact whoever runs the application; shown instead of an empty page' },\n { ref: UserAuthLabel.ORGANIZATION_ENFORCED_METHOD, kind: LabelKind.MESSAGE, purpose: \"Notice that the person's organization requires the method shown above, so the other methods on the page are fallbacks rather than equal choices\" },\n { ref: UserAuthLabel.METHOD_PASSWORD, kind: LabelKind.BUTTON, purpose: 'Selector button for the password sign-in method' },\n { ref: UserAuthLabel.METHOD_MAGIC_LINK, kind: LabelKind.BUTTON, purpose: 'Selector button for the magic-link sign-in method' },\n { ref: UserAuthLabel.METHOD_PASSKEY, kind: LabelKind.BUTTON, purpose: 'Selector button for the passkey sign-in method' },\n { ref: UserAuthLabel.METHOD_SMS_OTP, kind: LabelKind.BUTTON, purpose: 'Selector button for the SMS one-time-code sign-in method' },\n { ref: UserAuthLabel.METHOD_ORG_SSO, kind: LabelKind.BUTTON, purpose: 'Selector button for the organization single sign-on method' },\n { ref: UserAuthLabel.METHOD_EXTERNAL_OAUTH2, kind: LabelKind.BUTTON, purpose: 'Selector button for an external OAuth2 sign-in method' },\n { ref: UserAuthLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the passkey sign-in option' },\n { ref: UserAuthLabel.PASSKEY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that triggers the passkey authentication prompt' },\n { ref: UserAuthLabel.PASSKEY_AUTHENTICATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the passkey challenge is being verified' },\n { ref: UserAuthLabel.PASSKEY_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when passkey authentication fails' },\n { ref: UserAuthLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: UserAuthLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey prompt' },\n { ref: UserAuthLabel.PASSKEY_SIGN_IN, kind: LabelKind.BUTTON, purpose: 'Button shown before any email is typed that opens the device passkey picker, so a person signs in by choosing one of their accounts' },\n { ref: UserAuthLabel.REAUTH_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when re-authenticating an already-known user (step-up)' },\n { ref: UserAuthLabel.REAUTH_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the re-authentication screen' },\n { ref: UserAuthLabel.SSO_CONFIGURATION_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error under an enterprise SSO sign-in button that cannot start because its connection is not fully configured; the person should contact their administrator' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, PublicLayoutsUserAuthLabels);\n"]}

package/dist/esm/components/auth/Auth_MfaChallenge.d.ts CHANGED Viewed

@@ -1,4 +1,7 @@
 import React from 'react';
+import '../../components/auth/enrollment/TotpEnrollmentMethod';
+import '../../components/auth/enrollment/PasskeyEnrollmentMethod';
+import '../../components/auth/enrollment/PhoneEnrollmentMethod';
 import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas';
 export interface PublicLayoutPreset_MfaChallenge_DefaultProps {
     sessionId?: string | null;

package/dist/esm/components/auth/Auth_MfaChallenge.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_MfaChallenge.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_MfaChallenge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;~~AAqBjF~~,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAKxH,MAAM,WAAW,4CAA4C;IAC3D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD;;;;;;;;GAQG;AACH,eAAO,MAAM,uCAAuC,GAAI,6BAAkC,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,~~OAqMlJ~~,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}
1	+ {"version":3,"file":"Auth_MfaChallenge.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_MfaChallenge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAyBjF,OAAO,qEAAqE,CAAC;AAC7E,OAAO,wEAAwE,CAAC;AAChF,OAAO,sEAAsE,CAAC;AAQ9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAKxH,MAAM,WAAW,4CAA4C;IAC3D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD;;;;;;;;GAQG;AACH,eAAO,MAAM,uCAAuC,GAAI,6BAAkC,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OAqPlJ,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}

package/dist/esm/components/auth/Auth_MfaChallenge.js CHANGED Viewed

@@ -4,15 +4,28 @@ import { Navigate, useLocation } from 'react-router-dom';
 import { ButtonSize, CorePresetNames, FrontendComponentType, MfaChallengeLabel } from '@wildo-ai/presets-components-models';
 import { AuthMethod } from '@wildo-ai/saas-models';
 import { useAuthSession } from '../../core/security/useAuthSession.js';
+import { organizationOnboardingNavigationTarget } from '../../core/security/organization-onboarding.frontend.utils.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
 import { makeComponentLabelResolver } from '../../core/i18n/component-label-resolution.utils.js';
 import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
 import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
 import { Heading } from '../../components/typography/heading.js';
 import { Text } from '../../components/typography/text.js';
-import { Link } from '../../components/typography/link.js';
+import { AuthSecondaryLink } from '../../components/auth/utils/AuthSecondaryLink.js';
 import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
-import { AUTH_METHOD_COMPONENTS, sortMethodsByDisplayOrder } from '../../components/auth/methods/auth-method-components.js';
+import { AUTH_METHOD_COMPONENTS } from '../../components/auth/methods/auth-method-components.js';
+import { ENROLLMENT_METHOD_COMPONENTS } from '../../components/auth/enrollment/enrollment-method-components.js';
+import { AuthMethodChoiceLayout, AuthMethodChoiceList } from '../../components/auth/utils/AuthMethodChoiceList.js';
+/*
+ * Side-effect imports, exactly as `Auth_EnrollmentRequired` does them: the enrollment components
+ * self-register into `ENROLLMENT_METHOD_COMPONENTS` when their module is evaluated, so a screen that
+ * READS the registry without importing them sees it empty. This screen reads it to decide whether
+ * sending the user to enrollment would show them anything — and an empty registry would answer "no"
+ * for every application, turning a recoverable state into a terminal one.
+ */
+import '../../components/auth/enrollment/TotpEnrollmentMethod.js';
+import '../../components/auth/enrollment/PasskeyEnrollmentMethod.js';
+import '../../components/auth/enrollment/PhoneEnrollmentMethod.js';
 import { appendAuthRedirectToPath, extractAuthRedirectFromSearch, resolvePostAuthRedirect, } from '../../core/security/auth-redirect.frontend.utils.js';
 import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
 import { LoadingSpinner } from '../../components/feedback/loading-spinner.js';
@@ -45,9 +58,8 @@ export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmai
     const { tComponent, isReady } = useI18n({ component: i18nComponents });
     const location = useLocation();
     const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, key);
-    // Miss-normalized AND bound to `USER_AUTH`, matching the prop contract and the
-    // namespace the method components actually label themselves from. `t` above keeps
-    // the key path for this component's own direct rendering.
+    // Bound to `USER_AUTH`, matching the prop contract: that is the namespace the method
+    // components label themselves from, while `t` above is this component's own.
     const tForMethodComponent = useMemo(() => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH), [tComponent]);
     const redirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);
     const loginPath = useMemo(() => appendAuthRedirectToPath(CommonRoutePaths.login, redirectTarget), [redirectTarget]);
@@ -56,6 +68,11 @@ export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmai
     const [selectedMethod, setSelectedMethod] = useState(null);
     const [error, setError] = useState(null);
     const [pageError, setPageError] = useState(null);
+    /**
+     * Set when the session offers no second factor this user can present. The remedy is enrollment, so
+     * the screen redirects rather than rendering a dead end — see the reasoning at the resolution site.
+     */
+    const [enrollmentRequired, setEnrollmentRequired] = useState(false);
     const fetchedRef = useRef(false);
     useEffect(() => {
         if (fetchedRef.current || !sessionId)
@@ -63,19 +80,47 @@ export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmai
         fetchedRef.current = true;
         getSessionState(sessionId)
             .then((session) => {
+            /*
+             * `usableSecondFactorMethods` is what the policy ACCEPTS intersected with what this user can
+             * PRESENT, and it is the only honest source for this screen.
+             *
+             * There used to be a fallback here: when the usable set came back empty, the screen rendered
+             * `availableSecondFactorMethods` instead — the policy's accepted list, unfiltered by what the
+             * user actually has. That offered a TOTP challenge to someone who had never enrolled TOTP, so
+             * the one case the fallback existed to rescue was also the one case it could not rescue: the
+             * user was shown a form, entered nothing that could work, and was told their code was wrong.
+             *
+             * An empty usable set means enrollment, not a different challenge. Routing there is also what
+             * `Auth_Main` already does with the same field, so the two screens now answer the question the
+             * same way rather than one of them guessing.
+             */
             const usableSet = new Set(session.usableSecondFactorMethods || []);
             const allMethods = session.availableSecondFactorMethods || [];
-            const secondFactorMethods = (usableSet.size > 0
-                ? allMethods.filter((m) => usableSet.has(m.method))
-                : allMethods).filter((m) => AUTH_METHOD_COMPONENTS[m.method]);
+            const secondFactorMethods = allMethods
+                .filter((m) => usableSet.has(m.method))
+                .filter((m) => AUTH_METHOD_COMPONENTS[m.method]);
             if (secondFactorMethods.length === 0) {
-                setPageError('no_methods');
+                /*
+                 * Nothing this user can present. Two different situations, two different destinations:
+                 * if the policy offers something enrollable, send them to set it up; if it offers nothing
+                 * at all, this is terminal and must say so, because the enrollment gate would have nothing
+                 * to render and bounces anyone it cannot help straight back here.
+                 */
+                const enrollable = (session.availableEnrollmentMethods || [])
+                    .filter((m) => ENROLLMENT_METHOD_COMPONENTS[m]);
+                if (enrollable.length > 0) {
+                    setEnrollmentRequired(true);
+                }
+                else {
+                    setPageError('no_methods');
+                }
                 return;
             }
-            const sorted = sortMethodsByDisplayOrder(secondFactorMethods);
-            setAvailableMethods(sorted);
-            if (sorted.length === 1) {
-                setSelectedMethod(sorted[0].method);
+            // The server's order (#1218): the second-factor list is ordered by `AUTH_METHOD_PRECEDENCE`'s strongest-first
+            // trailer where it is built, so this page renders what it was sent rather than ordering a second time.
+            setAvailableMethods(secondFactorMethods);
+            if (secondFactorMethods.length === 1) {
+                setSelectedMethod(secondFactorMethods[0].method);
             }
         })
             .catch((e) => {
@@ -98,9 +143,20 @@ export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmai
         setSelectedMethod(null);
         setError(null);
     }, []);
+    // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.
+    const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, redirectTarget);
+    if (organizationOnboardingTarget) {
+        return _jsx(Navigate, { to: organizationOnboardingTarget, replace: true });
+    }
     if (auth.accessToken && !auth.isLoading) {
         return _jsx(Navigate, { to: postAuthRedirect, replace: true });
     }
+    if (enrollmentRequired && sessionId) {
+        // Carries the session, because the gate may be all that is left of this page: this screen found the
+        // session from its URL, and the gate recovers it the same way (#1033). Handing off without it made a
+        // reload of this page discard a valid session.
+        return (_jsx(Navigate, { to: appendAuthRedirectToPath(`${CommonRoutePaths.enrollmentRequired}?sessionId=${encodeURIComponent(sessionId)}&email=${encodeURIComponent(sessionEmail)}`, redirectTarget), replace: true }));
+    }
     if (!isReady)
         return null;
     if (!sessionId || pageError) {
@@ -110,15 +166,15 @@ export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmai
             generic: MfaChallengeLabel.ERROR_GENERIC,
         };
         const errorLabel = pageError ? errorLabelMap[pageError] : MfaChallengeLabel.ERROR_GENERIC;
-        return (_jsxs(_Fragment, { children: [_jsx("div", { className: "text-center space-y-item-xs mb-group", children: _jsx(Heading, { children: t(MfaChallengeLabel.TITLE) }) }), _jsx(Alert, { variant: pageError === 'no_methods' ? 'default' : 'destructive', children: _jsx(AlertDescription, { children: t(errorLabel) }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(Link, { href: loginPath, children: t(MfaChallengeLabel.BACK_TO_LOGIN) }) })] }));
+        return (_jsxs(_Fragment, { children: [_jsx("div", { className: "text-center space-y-item-xs mb-group", children: _jsx(Heading, { children: t(MfaChallengeLabel.TITLE) }) }), _jsx(Alert, { variant: pageError === 'no_methods' ? 'default' : 'destructive', children: _jsx(AlertDescription, { children: t(errorLabel) }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(AuthSecondaryLink, { href: loginPath, children: t(MfaChallengeLabel.BACK_TO_LOGIN) }) })] }));
     }
     if (availableMethods.length === 0) {
         return (_jsxs("div", { role: "status", "aria-live": "polite", className: "text-center space-y-item-xs py-section", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element", "aria-hidden": "true", children: _jsx(LoadingSpinner, { size: 24, className: "text-primary" }) }), _jsx(Text, { className: "text-muted-foreground", children: t(MfaChallengeLabel.VERIFYING) })] }));
     }
-    return (_jsxs("div", { className: "space-y-group", children: [_jsxs("div", { className: "text-center space-y-item-xs", children: [_jsx(Heading, { children: t(MfaChallengeLabel.TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto text-muted-foreground", children: t(MfaChallengeLabel.SUB_TITLE) })] }), !selectedMethod && availableMethods.length > 1 && (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm font-medium", children: t(MfaChallengeLabel.SELECT_METHOD) }), availableMethods.map((method) => {
-                        const labelKey = MFA_METHOD_LABEL_MAP[method.method];
-                        return (_jsx(Button, { variant: ButtonVariants_Variant.OUTLINE, className: "w-full justify-start", onClick: () => setSelectedMethod(method.method), children: labelKey ? t(labelKey) : method.method }, method.method));
-                    })] })), selectedMethod && (() => {
+    return (_jsxs("div", { className: "space-y-group", children: [_jsxs("div", { className: "text-center space-y-item-xs", children: [_jsx(Heading, { children: t(MfaChallengeLabel.TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto text-muted-foreground", children: t(MfaChallengeLabel.SUB_TITLE) })] }), !selectedMethod && availableMethods.length > 1 && (_jsxs("div", { className: "space-y-item", children: [_jsx(Text, { className: "text-sm font-medium", children: t(MfaChallengeLabel.SELECT_METHOD) }), _jsx(AuthMethodChoiceList, { layout: AuthMethodChoiceLayout.LIST, methods: availableMethods.map((method) => method.method), labelFor: (method) => {
+                            const labelKey = MFA_METHOD_LABEL_MAP[method];
+                            return labelKey ? t(labelKey) : method;
+                        }, onSelect: setSelectedMethod })] })), selectedMethod && (() => {
                 const MethodComponent = AUTH_METHOD_COMPONENTS[selectedMethod];
                 if (!MethodComponent)
                     return null;
@@ -134,9 +190,10 @@ export const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmai
                     factorLevel: 'second',
                     isLoading: auth.isLoading,
                     t: tForMethodComponent,
+                    authRedirectTarget: redirectTarget,
                 };
                 return _jsx(MethodComponent, { ...props });
-            })(), error && !selectedMethod && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) })), selectedMethod && availableMethods.length > 1 && (_jsx("div", { className: "text-center", children: _jsx(Button, { variant: ButtonVariants_Variant.GHOST, size: ButtonSize.SM, onClick: handleChangeMethod, children: t(MfaChallengeLabel.CHANGE_METHOD) }) })), _jsx("div", { className: "text-center", children: _jsx(Link, { href: loginPath, children: t(MfaChallengeLabel.BACK_TO_LOGIN) }) })] }));
+            })(), error && !selectedMethod && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) })), selectedMethod && availableMethods.length > 1 && (_jsx("div", { className: "text-center", children: _jsx(Button, { variant: ButtonVariants_Variant.GHOST, size: ButtonSize.SM, onClick: handleChangeMethod, children: t(MfaChallengeLabel.CHANGE_METHOD) }) })), _jsx("div", { className: "text-center", children: _jsx(AuthSecondaryLink, { href: loginPath, children: t(MfaChallengeLabel.BACK_TO_LOGIN) }) })] }));
 };
 export function Auth_MfaChallenge({ preset = CorePresetNames.DEFAULT, ...props }) {
     const Component = createComponentResolver(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, 'Auth_MfaChallenge')(preset);

package/dist/esm/components/auth/Auth_MfaChallenge.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_MfaChallenge.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_MfaChallenge.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC5H,OAAO,EAAE,UAAU,EAAqD,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAiC,MAAM,oEAAoE,CAAC;AAEtK,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAQzF,MAAM,oBAAoB,GAAmD;IAC3E,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,aAAa;IACrD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,eAAe;IACzD,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,UAAU;IAC/C,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,aAAa;CACtD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,GAAG,EAAE,EAAgD,EAAqB,EAAE;IAC3J,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IACnD,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,+EAA+E;IAC/E,wBAAwB;IACxB,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC;QACJ,qBAAqB,CAAC,4BAA4B;QAClD,qBAAqB,CAAC,wBAAwB;KAC/C,EACD,EAAE,CACH,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,+EAA+E;IAC/E,kFAAkF;IAClF,0DAA0D;IAC1D,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC5F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,EACtE,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,SAAS;YAAE,OAAO;QAC7C,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAE1B,eAAe,CAAC,SAAS,CAAC;aACvB,IAAI,CAAC,CAAC,OAAY,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAsB,OAAO,CAAC,4BAA4B,IAAI,EAAE,CAAC;YACjF,MAAM,mBAAmB,GAAsB,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;gBAChE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACpE,CAAC,CAAC,UAAU,CACb,CAAC,MAAM,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;YAEjF,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,mBAAmB,CAAC,CAAC;YAC9D,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAE5B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjC,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE;QACtE,oFAAoF;IACtF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,QAAgB,EAAE,EAAE;QACnD,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAsC;YACvD,OAAO,EAAE,iBAAiB,CAAC,aAAa;YACxC,UAAU,EAAE,iBAAiB,CAAC,gBAAgB;YAC9C,OAAO,EAAE,iBAAiB,CAAC,aAAa;SACzC,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;QAE1F,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,sCAAsC,YACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,GAC3C,EACN,KAAC,KAAK,IAAC,OAAO,EAAE,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,YACpE,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,CAAC,GAAoB,GAC9C,EACR,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,GAC9D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,SAAS,EAAC,wCAAwC,aACtF,cAAK,SAAS,EAAC,0FAA0F,iBAAa,MAAM,YAC1H,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,cAAc,GAAG,GACjD,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IAC3E,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IAC5F,EAEL,CAAC,cAAc,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CACjD,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,EAChF,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAoB,CAAC,CAAC;wBACnE,OAAO,CACL,KAAC,MAAM,IAEL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,sBAAsB,EAChC,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAoB,CAAC,YAE5D,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IALlC,MAAM,CAAC,MAAM,CAMX,CACV,CAAC;oBACJ,CAAC,CAAC,IACE,CACP,EAEA,cAAc,IAAI,CAAC,GAAG,EAAE;gBACvB,MAAM,eAAe,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;gBAC/D,IAAI,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,MAAM,KAAK,GAA6B;oBACtC,SAAS,EAAE,SAAU;oBACrB,KAAK,EAAE,YAAY;oBACnB,YAAY;oBACZ,SAAS,EAAE,aAAa;oBACxB,OAAO,EAAE,WAAW;oBACpB,WAAW,EAAE,QAAQ;oBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,CAAC,EAAE,mBAAmB;iBACvB,CAAC;gBAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;YACxC,CAAC,CAAC,EAAE,EAEH,KAAK,IAAI,CAAC,cAAc,IAAI,CAC3B,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAEA,cAAc,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChD,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,YAC5F,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAC5B,GACL,CACP,EAED,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,GAC9D,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACzK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { ButtonSize, CorePresetNames, FrontendComponentType, MfaChallengeLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod, type AvailableMethod, type AuthenticationResponse } from '@wildo-ai/saas-models';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { makeComponentLabelResolver } from '~wildo-frontend-lib/core/i18n/component-label-resolution.utils';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { AUTH_METHOD_COMPONENTS, sortMethodsByDisplayOrder, type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\nimport type { MfaPageErrorType } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\n\n// --- Contract ---\nexport interface PublicLayoutPreset_MfaChallenge_DefaultProps {\n sessionId?: string \| null;\n sessionEmail?: string;\n}\n\nconst MFA_METHOD_LABEL_MAP: Partial<Record<AuthMethod, MfaChallengeLabel>> = {\n [AuthMethod.SMS_OTP]: MfaChallengeLabel.SMS_OTP_TITLE,\n [AuthMethod.EMAIL_OTP]: MfaChallengeLabel.EMAIL_OTP_TITLE,\n [AuthMethod.TOTP]: MfaChallengeLabel.TOTP_TITLE,\n [AuthMethod.PASSKEY]: MfaChallengeLabel.PASSKEY_TITLE,\n};\n\n/*\n MFA challenge default preset.\n \n Generic MFA challenge component. Accepts `sessionId` prop.\n * Fetches available second-factor methods, renders the appropriate\n * method component for each via AUTH_METHOD_COMPONENTS.\n \n All user-facing strings are i18n-driven via MfaChallengeLabel.\n /\nexport const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmail = '' }: PublicLayoutPreset_MfaChallenge_DefaultProps): React.JSX.Element => {\n const { getSessionState, auth } = useAuthSession();\n // BOTH namespaces, following the `Auth_Invitation` precedent. The reused\n // auth-method components label themselves from `UserAuthLabel.`, which is\n // declared on `PUBLIC_LAYOUTS_USER_AUTH` — asking `MFA_CHALLENGE` for\n // `continueWith` can only ever miss. Memoized so `useI18n` does not re-request\n // keys on every render.\n const i18nComponents = useMemo(\n () => [\n FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE,\n FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n ],\n [],\n );\n const { tComponent, isReady } = useI18n({ component: i18nComponents });\n const location = useLocation();\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, key);\n // Miss-normalized AND bound to `USER_AUTH`, matching the prop contract and the\n // namespace the method components actually label themselves from. `t` above keeps\n // the key path for this component's own direct rendering.\n const tForMethodComponent = useMemo(\n () => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH),\n [tComponent],\n );\n const redirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, redirectTarget),\n [redirectTarget],\n );\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n const [availableMethods, setAvailableMethods] = useState<AvailableMethod[]>([]);\n const [selectedMethod, setSelectedMethod] = useState<AuthMethod \| null>(null);\n const [error, setError] = useState<string \| null>(null);\n const [pageError, setPageError] = useState<MfaPageErrorType \| null>(null);\n const fetchedRef = useRef(false);\n\n useEffect(() => {\n if (fetchedRef.current \|\| !sessionId) return;\n fetchedRef.current = true;\n\n getSessionState(sessionId)\n .then((session: any) => {\n const usableSet = new Set<string>(session.usableSecondFactorMethods \|\| []);\n const allMethods: AvailableMethod[] = session.availableSecondFactorMethods \|\| [];\n const secondFactorMethods: AvailableMethod[] = (usableSet.size > 0\n ? allMethods.filter((m: AvailableMethod) => usableSet.has(m.method))\n : allMethods\n ).filter((m: AvailableMethod) => AUTH_METHOD_COMPONENTS[m.method as AuthMethod]);\n\n if (secondFactorMethods.length === 0) {\n setPageError('no_methods');\n return;\n }\n\n const sorted = sortMethodsByDisplayOrder(secondFactorMethods);\n setAvailableMethods(sorted);\n\n if (sorted.length === 1) {\n setSelectedMethod(sorted[0].method as AuthMethod);\n }\n })\n .catch((e: any) => {\n const status = e?.response?.status;\n if (status === 404 \|\| status === 410) {\n setPageError('expired');\n } else {\n setPageError('generic');\n }\n });\n }, [sessionId, getSessionState]);\n\n const handleSuccess = useCallback((_response: AuthenticationResponse) => {\n // Token storage handled by AuthSessionContext — auth state change triggers redirect\n }, []);\n\n const handleError = useCallback((errorMsg: string) => {\n setError(errorMsg);\n }, []);\n\n const handleChangeMethod = useCallback(() => {\n setSelectedMethod(null);\n setError(null);\n }, []);\n\n if (auth.accessToken && !auth.isLoading) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!isReady) return null;\n\n if (!sessionId \|\| pageError) {\n const errorLabelMap: Record<string, MfaChallengeLabel> = {\n expired: MfaChallengeLabel.ERROR_EXPIRED,\n no_methods: MfaChallengeLabel.ERROR_NO_METHODS,\n generic: MfaChallengeLabel.ERROR_GENERIC,\n };\n const errorLabel = pageError ? errorLabelMap[pageError] : MfaChallengeLabel.ERROR_GENERIC;\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(MfaChallengeLabel.TITLE)}</Heading>\n </div>\n <Alert variant={pageError === 'no_methods' ? 'default' : 'destructive'}>\n <AlertDescription>{t(errorLabel)}</AlertDescription>\n </Alert>\n <div className=\"text-center mt-group\">\n <Link href={loginPath}>{t(MfaChallengeLabel.BACK_TO_LOGIN)}</Link>\n </div>\n </>\n );\n }\n\n if (availableMethods.length === 0) {\n return (\n <div role=\"status\" aria-live=\"polite\" className=\"text-center space-y-item-xs py-section\">\n <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element\" aria-hidden=\"true\">\n <LoadingSpinner size={24} className=\"text-primary\" />\n </div>\n <Text className=\"text-muted-foreground\">{t(MfaChallengeLabel.VERIFYING)}</Text>\n </div>\n );\n }\n\n return (\n <div className=\"space-y-group\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(MfaChallengeLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto text-muted-foreground\">{t(MfaChallengeLabel.SUB_TITLE)}</Text>\n </div>\n\n {!selectedMethod && availableMethods.length > 1 && (\n <div className=\"space-y-item\">\n <Text className=\"text-sm font-medium\">{t(MfaChallengeLabel.SELECT_METHOD)}</Text>\n {availableMethods.map((method) => {\n const labelKey = MFA_METHOD_LABEL_MAP[method.method as AuthMethod];\n return (\n <Button\n key={method.method}\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"w-full justify-start\"\n onClick={() => setSelectedMethod(method.method as AuthMethod)}\n >\n {labelKey ? t(labelKey) : method.method}\n </Button>\n );\n })}\n </div>\n )}\n\n {selectedMethod && (() => {\n const MethodComponent = AUTH_METHOD_COMPONENTS[selectedMethod];\n if (!MethodComponent) return null;\n const methodConfig = availableMethods.find((m) => m.method === selectedMethod);\n if (!methodConfig) return null;\n\n const props: AuthMethodComponentProps = {\n sessionId: sessionId!,\n email: sessionEmail,\n methodConfig,\n onSuccess: handleSuccess,\n onError: handleError,\n factorLevel: 'second',\n isLoading: auth.isLoading,\n t: tForMethodComponent,\n };\n\n return <MethodComponent {...props} />;\n })()}\n\n {error && !selectedMethod && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n {selectedMethod && availableMethods.length > 1 && (\n <div className=\"text-center\">\n <Button variant={ButtonVariants_Variant.GHOST} size={ButtonSize.SM} onClick={handleChangeMethod}>\n {t(MfaChallengeLabel.CHANGE_METHOD)}\n </Button>\n </div>\n )}\n\n <div className=\"text-center\">\n <Link href={loginPath}>{t(MfaChallengeLabel.BACK_TO_LOGIN)}</Link>\n </div>\n </div>\n );\n};\n\nexport function Auth_MfaChallenge({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_MfaChallenge_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_MfaChallenge_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, 'Auth_MfaChallenge')(preset);\n return <Component {...props} />;\n}\n"]}
1	+ {"version":3,"file":"Auth_MfaChallenge.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_MfaChallenge.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC5H,OAAO,EAAE,UAAU,EAAqD,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAiC,MAAM,oEAAoE,CAAC;AAC3I,OAAO,EAAE,4BAA4B,EAAE,MAAM,6EAA6E,CAAC;AAC3H,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAE9H;;;;;;GAMG;AACH,OAAO,qEAAqE,CAAC;AAC7E,OAAO,wEAAwE,CAAC;AAChF,OAAO,sEAAsE,CAAC;AAE9E,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAQzF,MAAM,oBAAoB,GAAmD;IAC3E,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,aAAa;IACrD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,eAAe;IACzD,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,UAAU;IAC/C,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,aAAa;CACtD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,GAAG,EAAE,EAAgD,EAAqB,EAAE;IAC3J,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IACnD,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,+EAA+E;IAC/E,wBAAwB;IACxB,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC;QACJ,qBAAqB,CAAC,4BAA4B;QAClD,qBAAqB,CAAC,wBAAwB;KAC/C,EACD,EAAE,CACH,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,qFAAqF;IACrF,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,OAAO,CACjC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC5F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,EACtE,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAC1E;;;OAGG;IACH,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,SAAS;YAAE,OAAO;QAC7C,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAE1B,eAAe,CAAC,SAAS,CAAC;aACvB,IAAI,CAAC,CAAC,OAAY,EAAE,EAAE;YACrB;;;;;;;;;;;;;eAaG;YACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAsB,OAAO,CAAC,4BAA4B,IAAI,EAAE,CAAC;YACjF,MAAM,mBAAmB,GAAsB,UAAU;iBACtD,MAAM,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;iBACvD,MAAM,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;YAElF,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC;;;;;mBAKG;gBACH,MAAM,UAAU,GAAa,CAAC,OAAO,CAAC,0BAA0B,IAAI,EAAE,CAAC;qBACpE,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,4BAA4B,CAAC,CAAe,CAAC,CAAC,CAAC;gBACxE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC7B,CAAC;gBACD,OAAO;YACT,CAAC;YAED,8GAA8G;YAC9G,uGAAuG;YACvG,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;YAEzC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjC,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE;QACtE,oFAAoF;IACtF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,QAAgB,EAAE,EAAE;QACnD,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1C,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,qHAAqH;IACrH,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,kBAAkB,IAAI,SAAS,EAAE,CAAC;QACpC,oGAAoG;QACpG,qGAAqG;QACrG,+CAA+C;QAC/C,OAAO,CACL,KAAC,QAAQ,IACP,EAAE,EAAE,wBAAwB,CAC1B,GAAG,gBAAgB,CAAC,kBAAkB,cAAc,kBAAkB,CAAC,SAAS,CAAC,UAAU,kBAAkB,CAAC,YAAY,CAAC,EAAE,EAC7H,cAAc,CACf,EACD,OAAO,SACP,CACH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAsC;YACvD,OAAO,EAAE,iBAAiB,CAAC,aAAa;YACxC,UAAU,EAAE,iBAAiB,CAAC,gBAAgB;YAC9C,OAAO,EAAE,iBAAiB,CAAC,aAAa;SACzC,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;QAE1F,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,sCAAsC,YACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,GAC3C,EACN,KAAC,KAAK,IAAC,OAAO,EAAE,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,YACpE,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,CAAC,GAAoB,GAC9C,EACR,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAqB,GACxF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,SAAS,EAAC,wCAAwC,aACtF,cAAK,SAAS,EAAC,0FAA0F,iBAAa,MAAM,YAC1H,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,cAAc,GAAG,GACjD,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,uBAAuB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IAC3E,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IAC5F,EAEL,CAAC,cAAc,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CACjD,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAQ,EACjF,KAAC,oBAAoB,IACnB,MAAM,EAAE,sBAAsB,CAAC,IAAI,EACnC,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAoB,CAAC,EACtE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;4BACnB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;4BAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;wBACzC,CAAC,EACD,QAAQ,EAAE,iBAAiB,GAC3B,IACE,CACP,EAEA,cAAc,IAAI,CAAC,GAAG,EAAE;gBACvB,MAAM,eAAe,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAC;gBAC/D,IAAI,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;gBAClC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;gBAC/E,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,MAAM,KAAK,GAA6B;oBACtC,SAAS,EAAE,SAAU;oBACrB,KAAK,EAAE,YAAY;oBACnB,YAAY;oBACZ,SAAS,EAAE,aAAa;oBACxB,OAAO,EAAE,WAAW;oBACpB,WAAW,EAAE,QAAQ;oBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,CAAC,EAAE,mBAAmB;oBACtB,kBAAkB,EAAE,cAAc;iBACnC,CAAC;gBAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;YACxC,CAAC,CAAC,EAAE,EAEH,KAAK,IAAI,CAAC,cAAc,IAAI,CAC3B,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAEA,cAAc,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChD,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,YAC5F,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAC5B,GACL,CACP,EAED,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAqB,GACxF,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACzK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { ButtonSize, CorePresetNames, FrontendComponentType, MfaChallengeLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod, type AvailableMethod, type AuthenticationResponse } from '@wildo-ai/saas-models';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { makeComponentLabelResolver } from '~wildo-frontend-lib/core/i18n/component-label-resolution.utils';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { AUTH_METHOD_COMPONENTS, type AuthMethodComponentProps } from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\nimport { ENROLLMENT_METHOD_COMPONENTS } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\nimport { AuthMethodChoiceLayout, AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\n\n/\n Side-effect imports, exactly as `Auth_EnrollmentRequired` does them: the enrollment components\n * self-register into `ENROLLMENT_METHOD_COMPONENTS` when their module is evaluated, so a screen that\n * READS the registry without importing them sees it empty. This screen reads it to decide whether\n * sending the user to enrollment would show them anything — and an empty registry would answer \"no\"\n * for every application, turning a recoverable state into a terminal one.\n /\nimport '~wildo-frontend-lib/components/auth/enrollment/TotpEnrollmentMethod';\nimport '~wildo-frontend-lib/components/auth/enrollment/PasskeyEnrollmentMethod';\nimport '~wildo-frontend-lib/components/auth/enrollment/PhoneEnrollmentMethod';\nimport type { MfaPageErrorType } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\n\n// --- Contract ---\nexport interface PublicLayoutPreset_MfaChallenge_DefaultProps {\n sessionId?: string \| null;\n sessionEmail?: string;\n}\n\nconst MFA_METHOD_LABEL_MAP: Partial<Record<AuthMethod, MfaChallengeLabel>> = {\n [AuthMethod.SMS_OTP]: MfaChallengeLabel.SMS_OTP_TITLE,\n [AuthMethod.EMAIL_OTP]: MfaChallengeLabel.EMAIL_OTP_TITLE,\n [AuthMethod.TOTP]: MfaChallengeLabel.TOTP_TITLE,\n [AuthMethod.PASSKEY]: MfaChallengeLabel.PASSKEY_TITLE,\n};\n\n/\n MFA challenge default preset.\n \n Generic MFA challenge component. Accepts `sessionId` prop.\n * Fetches available second-factor methods, renders the appropriate\n * method component for each via AUTH_METHOD_COMPONENTS.\n \n All user-facing strings are i18n-driven via MfaChallengeLabel.\n /\nexport const PublicLayoutPreset_MfaChallenge_Default = ({ sessionId, sessionEmail = '' }: PublicLayoutPreset_MfaChallenge_DefaultProps): React.JSX.Element => {\n const { getSessionState, auth } = useAuthSession();\n // BOTH namespaces, following the `Auth_Invitation` precedent. The reused\n // auth-method components label themselves from `UserAuthLabel.`, which is\n // declared on `PUBLIC_LAYOUTS_USER_AUTH` — asking `MFA_CHALLENGE` for\n // `continueWith` can only ever miss. Memoized so `useI18n` does not re-request\n // keys on every render.\n const i18nComponents = useMemo(\n () => [\n FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE,\n FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n ],\n [],\n );\n const { tComponent, isReady } = useI18n({ component: i18nComponents });\n const location = useLocation();\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, key);\n // Bound to `USER_AUTH`, matching the prop contract: that is the namespace the method\n // components label themselves from, while `t` above is this component's own.\n const tForMethodComponent = useMemo(\n () => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH),\n [tComponent],\n );\n const redirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, redirectTarget),\n [redirectTarget],\n );\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n const [availableMethods, setAvailableMethods] = useState<AvailableMethod[]>([]);\n const [selectedMethod, setSelectedMethod] = useState<AuthMethod \| null>(null);\n const [error, setError] = useState<string \| null>(null);\n const [pageError, setPageError] = useState<MfaPageErrorType \| null>(null);\n /*\n Set when the session offers no second factor this user can present. The remedy is enrollment, so\n * the screen redirects rather than rendering a dead end — see the reasoning at the resolution site.\n /\n const [enrollmentRequired, setEnrollmentRequired] = useState(false);\n const fetchedRef = useRef(false);\n\n useEffect(() => {\n if (fetchedRef.current \|\| !sessionId) return;\n fetchedRef.current = true;\n\n getSessionState(sessionId)\n .then((session: any) => {\n /\n * `usableSecondFactorMethods` is what the policy ACCEPTS intersected with what this user can\n * PRESENT, and it is the only honest source for this screen.\n \n There used to be a fallback here: when the usable set came back empty, the screen rendered\n * `availableSecondFactorMethods` instead — the policy's accepted list, unfiltered by what the\n * user actually has. That offered a TOTP challenge to someone who had never enrolled TOTP, so\n * the one case the fallback existed to rescue was also the one case it could not rescue: the\n * user was shown a form, entered nothing that could work, and was told their code was wrong.\n \n An empty usable set means enrollment, not a different challenge. Routing there is also what\n * `Auth_Main` already does with the same field, so the two screens now answer the question the\n * same way rather than one of them guessing.\n /\n const usableSet = new Set<string>(session.usableSecondFactorMethods \|\| []);\n const allMethods: AvailableMethod[] = session.availableSecondFactorMethods \|\| [];\n const secondFactorMethods: AvailableMethod[] = allMethods\n .filter((m: AvailableMethod) => usableSet.has(m.method))\n .filter((m: AvailableMethod) => AUTH_METHOD_COMPONENTS[m.method as AuthMethod]);\n\n if (secondFactorMethods.length === 0) {\n /\n * Nothing this user can present. Two different situations, two different destinations:\n * if the policy offers something enrollable, send them to set it up; if it offers nothing\n * at all, this is terminal and must say so, because the enrollment gate would have nothing\n * to render and bounces anyone it cannot help straight back here.\n */\n const enrollable: string[] = (session.availableEnrollmentMethods \|\| [])\n .filter((m: string) => ENROLLMENT_METHOD_COMPONENTS[m as AuthMethod]);\n if (enrollable.length > 0) {\n setEnrollmentRequired(true);\n } else {\n setPageError('no_methods');\n }\n return;\n }\n\n // The server's order (#1218): the second-factor list is ordered by `AUTH_METHOD_PRECEDENCE`'s strongest-first\n // trailer where it is built, so this page renders what it was sent rather than ordering a second time.\n setAvailableMethods(secondFactorMethods);\n\n if (secondFactorMethods.length === 1) {\n setSelectedMethod(secondFactorMethods[0].method as AuthMethod);\n }\n })\n .catch((e: any) => {\n const status = e?.response?.status;\n if (status === 404 \|\| status === 410) {\n setPageError('expired');\n } else {\n setPageError('generic');\n }\n });\n }, [sessionId, getSessionState]);\n\n const handleSuccess = useCallback((_response: AuthenticationResponse) => {\n // Token storage handled by AuthSessionContext — auth state change triggers redirect\n }, []);\n\n const handleError = useCallback((errorMsg: string) => {\n setError(errorMsg);\n }, []);\n\n const handleChangeMethod = useCallback(() => {\n setSelectedMethod(null);\n setError(null);\n }, []);\n\n // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.\n const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, redirectTarget);\n if (organizationOnboardingTarget) {\n return <Navigate to={organizationOnboardingTarget} replace />;\n }\n\n if (auth.accessToken && !auth.isLoading) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (enrollmentRequired && sessionId) {\n // Carries the session, because the gate may be all that is left of this page: this screen found the\n // session from its URL, and the gate recovers it the same way (#1033). Handing off without it made a\n // reload of this page discard a valid session.\n return (\n <Navigate\n to={appendAuthRedirectToPath(\n `${CommonRoutePaths.enrollmentRequired}?sessionId=${encodeURIComponent(sessionId)}&email=${encodeURIComponent(sessionEmail)}`,\n redirectTarget,\n )}\n replace\n />\n );\n }\n\n if (!isReady) return null;\n\n if (!sessionId \|\| pageError) {\n const errorLabelMap: Record<string, MfaChallengeLabel> = {\n expired: MfaChallengeLabel.ERROR_EXPIRED,\n no_methods: MfaChallengeLabel.ERROR_NO_METHODS,\n generic: MfaChallengeLabel.ERROR_GENERIC,\n };\n const errorLabel = pageError ? errorLabelMap[pageError] : MfaChallengeLabel.ERROR_GENERIC;\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(MfaChallengeLabel.TITLE)}</Heading>\n </div>\n <Alert variant={pageError === 'no_methods' ? 'default' : 'destructive'}>\n <AlertDescription>{t(errorLabel)}</AlertDescription>\n </Alert>\n <div className=\"text-center mt-group\">\n <AuthSecondaryLink href={loginPath}>{t(MfaChallengeLabel.BACK_TO_LOGIN)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n if (availableMethods.length === 0) {\n return (\n <div role=\"status\" aria-live=\"polite\" className=\"text-center space-y-item-xs py-section\">\n <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element\" aria-hidden=\"true\">\n <LoadingSpinner size={24} className=\"text-primary\" />\n </div>\n <Text className=\"text-muted-foreground\">{t(MfaChallengeLabel.VERIFYING)}</Text>\n </div>\n );\n }\n\n return (\n <div className=\"space-y-group\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(MfaChallengeLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto text-muted-foreground\">{t(MfaChallengeLabel.SUB_TITLE)}</Text>\n </div>\n\n {!selectedMethod && availableMethods.length > 1 && (\n <div className=\"space-y-item\">\n <Text className=\"text-sm font-medium\">{t(MfaChallengeLabel.SELECT_METHOD)}</Text>\n <AuthMethodChoiceList\n layout={AuthMethodChoiceLayout.LIST}\n methods={availableMethods.map((method) => method.method as AuthMethod)}\n labelFor={(method) => {\n const labelKey = MFA_METHOD_LABEL_MAP[method];\n return labelKey ? t(labelKey) : method;\n }}\n onSelect={setSelectedMethod}\n />\n </div>\n )}\n\n {selectedMethod && (() => {\n const MethodComponent = AUTH_METHOD_COMPONENTS[selectedMethod];\n if (!MethodComponent) return null;\n const methodConfig = availableMethods.find((m) => m.method === selectedMethod);\n if (!methodConfig) return null;\n\n const props: AuthMethodComponentProps = {\n sessionId: sessionId!,\n email: sessionEmail,\n methodConfig,\n onSuccess: handleSuccess,\n onError: handleError,\n factorLevel: 'second',\n isLoading: auth.isLoading,\n t: tForMethodComponent,\n authRedirectTarget: redirectTarget,\n };\n\n return <MethodComponent {...props} />;\n })()}\n\n {error && !selectedMethod && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n {selectedMethod && availableMethods.length > 1 && (\n <div className=\"text-center\">\n <Button variant={ButtonVariants_Variant.GHOST} size={ButtonSize.SM} onClick={handleChangeMethod}>\n {t(MfaChallengeLabel.CHANGE_METHOD)}\n </Button>\n </div>\n )}\n\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(MfaChallengeLabel.BACK_TO_LOGIN)}</AuthSecondaryLink>\n </div>\n </div>\n );\n};\n\nexport function Auth_MfaChallenge({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_MfaChallenge_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_MfaChallenge_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, 'Auth_MfaChallenge')(preset);\n return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_MfaChallenge.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_MfaChallenge.labels.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_MfaChallenge.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA8C,MAAM,qCAAqC,CAAC;AAM7J,eAAO,MAAM,+BAA+B,EAAE,mBAAmB,EAmChE,CAAC"}
1	+ {"version":3,"file":"Auth_MfaChallenge.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_MfaChallenge.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAA8C,MAAM,qCAAqC,CAAC;AAM7J,eAAO,MAAM,+BAA+B,EAAE,mBAAmB,EAmChE,CAAC"}

package/dist/esm/components/auth/Auth_MfaChallenge.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_MfaChallenge.labels.js","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_MfaChallenge.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE7J,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,EAAE,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACjI,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC5I,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACjI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IACzH,EAAE,GAAG,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC3I,EAAE,GAAG,EAAE,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACtH,EAAE,GAAG,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACnI,EAAE,GAAG,EAAE,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yCAAyC,EAAE;IACpH,EAAE,GAAG,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE;IAC5H,EAAE,GAAG,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/I,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvI,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACxH,EAAE,GAAG,EAAE,iBAAiB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAChI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC/H,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8FAA8F,EAAE;IACtK,EAAE,GAAG,EAAE,iBAAiB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAC3G,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACxI,EAAE,GAAG,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC9H,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC/I,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAClI,EAAE,GAAG,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IACvJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IACzH,EAAE,GAAG,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACrJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACxI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC9I,EAAE,GAAG,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iFAAiF,EAAE;IAChK,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;CAC5I,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,+BAA+B,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, MfaChallengeLabel, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsMfaChallengeLabels: LabellingUnitaryDef[] = [\n { ref: MfaChallengeLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the multi-factor authentication challenge screen' },\n { ref: MfaChallengeLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the second-factor verification step' },\n { ref: MfaChallengeLabel.SELECT_METHOD, kind: LabelKind.LABEL, purpose: 'Prompt asking the user to pick a second-factor method' },\n { ref: MfaChallengeLabel.SMS_OTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the SMS one-time-code method block' },\n { ref: MfaChallengeLabel.SMS_OTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the SMS one-time-code method' },\n { ref: MfaChallengeLabel.SMS_OTP_SEND, kind: LabelKind.BUTTON, purpose: 'Button that sends the one-time code by SMS' },\n { ref: MfaChallengeLabel.SMS_OTP_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the SMS code is being sent' },\n { ref: MfaChallengeLabel.SMS_OTP_SENT, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the SMS code was sent' },\n { ref: MfaChallengeLabel.SMS_OTP_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the SMS one-time-code input' },\n { ref: MfaChallengeLabel.EMAIL_OTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the email one-time-code method block' },\n { ref: MfaChallengeLabel.EMAIL_OTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the email one-time-code method' },\n { ref: MfaChallengeLabel.EMAIL_OTP_SEND, kind: LabelKind.BUTTON, purpose: 'Button that sends the one-time code by email' },\n { ref: MfaChallengeLabel.EMAIL_OTP_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the email code is being sent' },\n { ref: MfaChallengeLabel.EMAIL_OTP_SENT, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the email code was sent' },\n { ref: MfaChallengeLabel.EMAIL_OTP_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the email one-time-code input' },\n { ref: MfaChallengeLabel.VERIFY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that submits the entered second-factor code' },\n { ref: MfaChallengeLabel.VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while available second-factor methods are loading or the code is verified' },\n { ref: MfaChallengeLabel.RESEND_CODE, kind: LabelKind.BUTTON, purpose: 'Button that resends the one-time verification code' },\n { ref: MfaChallengeLabel.BACK_TO_LOGIN, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen' },\n { ref: MfaChallengeLabel.TOTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the authenticator-app (TOTP) method block' },\n { ref: MfaChallengeLabel.TOTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the authenticator-app method' },\n { ref: MfaChallengeLabel.TOTP_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input' },\n { ref: MfaChallengeLabel.PASSKEY_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the passkey second-factor method block' },\n { ref: MfaChallengeLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the passkey second-factor method' },\n { ref: MfaChallengeLabel.PASSKEY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that triggers the passkey verification prompt' },\n { ref: MfaChallengeLabel.PASSKEY_AUTHENTICATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the passkey challenge is being verified' },\n { ref: MfaChallengeLabel.PASSKEY_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when passkey verification fails' },\n { ref: MfaChallengeLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: MfaChallengeLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey prompt' },\n { ref: MfaChallengeLabel.CHANGE_METHOD, kind: LabelKind.BUTTON, purpose: 'Button to go back and pick a different second-factor method' },\n { ref: MfaChallengeLabel.ERROR_EXPIRED, kind: LabelKind.MESSAGE, purpose: 'Error shown when the MFA session has expired' },\n { ref: MfaChallengeLabel.ERROR_INVALID_CODE, kind: LabelKind.MESSAGE, purpose: 'Error shown when the entered verification code is incorrect' },\n { ref: MfaChallengeLabel.ERROR_NO_METHODS, kind: LabelKind.MESSAGE, purpose: 'Notice shown when no usable second-factor methods are available for the session' },\n { ref: MfaChallengeLabel.ERROR_GENERIC, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the MFA challenge fails unexpectedly' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, PublicLayoutsMfaChallengeLabels);\n"]}
1	+ {"version":3,"file":"Auth_MfaChallenge.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_MfaChallenge.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE7J,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,EAAE,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACjI,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC5I,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACjI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IACzH,EAAE,GAAG,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC3I,EAAE,GAAG,EAAE,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACtH,EAAE,GAAG,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACnI,EAAE,GAAG,EAAE,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yCAAyC,EAAE;IACpH,EAAE,GAAG,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE;IAC5H,EAAE,GAAG,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/I,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvI,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACxH,EAAE,GAAG,EAAE,iBAAiB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAChI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC/H,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8FAA8F,EAAE;IACtK,EAAE,GAAG,EAAE,iBAAiB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAC3G,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACxI,EAAE,GAAG,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC9H,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAC7H,EAAE,GAAG,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC/I,EAAE,GAAG,EAAE,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAClI,EAAE,GAAG,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IACvJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IACzH,EAAE,GAAG,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACrJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACvI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACxI,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAC1H,EAAE,GAAG,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC9I,EAAE,GAAG,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iFAAiF,EAAE;IAChK,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;CAC5I,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,+BAA+B,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, MfaChallengeLabel, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsMfaChallengeLabels: LabellingUnitaryDef[] = [\n { ref: MfaChallengeLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the multi-factor authentication challenge screen' },\n { ref: MfaChallengeLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the second-factor verification step' },\n { ref: MfaChallengeLabel.SELECT_METHOD, kind: LabelKind.LABEL, purpose: 'Prompt asking the user to pick a second-factor method' },\n { ref: MfaChallengeLabel.SMS_OTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the SMS one-time-code method block' },\n { ref: MfaChallengeLabel.SMS_OTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the SMS one-time-code method' },\n { ref: MfaChallengeLabel.SMS_OTP_SEND, kind: LabelKind.BUTTON, purpose: 'Button that sends the one-time code by SMS' },\n { ref: MfaChallengeLabel.SMS_OTP_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the SMS code is being sent' },\n { ref: MfaChallengeLabel.SMS_OTP_SENT, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the SMS code was sent' },\n { ref: MfaChallengeLabel.SMS_OTP_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the SMS one-time-code input' },\n { ref: MfaChallengeLabel.EMAIL_OTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the email one-time-code method block' },\n { ref: MfaChallengeLabel.EMAIL_OTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the email one-time-code method' },\n { ref: MfaChallengeLabel.EMAIL_OTP_SEND, kind: LabelKind.BUTTON, purpose: 'Button that sends the one-time code by email' },\n { ref: MfaChallengeLabel.EMAIL_OTP_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the email code is being sent' },\n { ref: MfaChallengeLabel.EMAIL_OTP_SENT, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the email code was sent' },\n { ref: MfaChallengeLabel.EMAIL_OTP_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the email one-time-code input' },\n { ref: MfaChallengeLabel.VERIFY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that submits the entered second-factor code' },\n { ref: MfaChallengeLabel.VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while available second-factor methods are loading or the code is verified' },\n { ref: MfaChallengeLabel.RESEND_CODE, kind: LabelKind.BUTTON, purpose: 'Button that resends the one-time verification code' },\n { ref: MfaChallengeLabel.BACK_TO_LOGIN, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen' },\n { ref: MfaChallengeLabel.TOTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the authenticator-app (TOTP) method block' },\n { ref: MfaChallengeLabel.TOTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the authenticator-app method' },\n { ref: MfaChallengeLabel.TOTP_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app code input' },\n { ref: MfaChallengeLabel.PASSKEY_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the passkey second-factor method block' },\n { ref: MfaChallengeLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining the passkey second-factor method' },\n { ref: MfaChallengeLabel.PASSKEY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that triggers the passkey verification prompt' },\n { ref: MfaChallengeLabel.PASSKEY_AUTHENTICATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the passkey challenge is being verified' },\n { ref: MfaChallengeLabel.PASSKEY_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when passkey verification fails' },\n { ref: MfaChallengeLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: MfaChallengeLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey prompt' },\n { ref: MfaChallengeLabel.CHANGE_METHOD, kind: LabelKind.BUTTON, purpose: 'Button to go back and pick a different second-factor method' },\n { ref: MfaChallengeLabel.ERROR_EXPIRED, kind: LabelKind.MESSAGE, purpose: 'Error shown when the MFA session has expired' },\n { ref: MfaChallengeLabel.ERROR_INVALID_CODE, kind: LabelKind.MESSAGE, purpose: 'Error shown when the entered verification code is incorrect' },\n { ref: MfaChallengeLabel.ERROR_NO_METHODS, kind: LabelKind.MESSAGE, purpose: 'Notice shown when no usable second-factor methods are available for the session' },\n { ref: MfaChallengeLabel.ERROR_GENERIC, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the MFA challenge fails unexpectedly' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_MFA_CHALLENGE, PublicLayoutsMfaChallengeLabels);\n"]}