@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/components/auth/utils/AuthMethodIcon.d.ts

@@ -0,0 +1,15 @@
+import React from 'react';
+import type { AuthMethod } from '@wildo-ai/saas-models';
+export interface AuthMethodIconProps {
+    method: AuthMethod;
+}
+/**
+ * The icon of one authentication method, resolved through the application's icon registry so a theme
+ * or an application that re-registers `StandardIconReference.KEY` restyles it here too.
+ *
+ * Sized for a button: the button preset owns the glyph's box (`[&_svg]:size-4`) and its gap to the
+ * label, so this renders the registry's small size and adds no spacing of its own. Decorative — the
+ * button's text names the method.
+ */
+export declare const AuthMethodIcon: ({ method }: AuthMethodIconProps) => React.JSX.Element;
+//# sourceMappingURL=AuthMethodIcon.d.ts.map

package/dist/esm/components/auth/utils/AuthMethodIcon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodIcon.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthMethodIcon.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAKxD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAAI,YAAY,mBAAmB,KAAG,KAAK,CAAC,GAAG,CAAC,OAG1E,CAAC"}

package/dist/esm/components/auth/utils/AuthMethodIcon.js

@@ -0,0 +1,16 @@
+import { useIconRegistry } from '../../../core/icons/useIconRegistry.js';
+import { IconSize } from '../../../core/icons/icon-registry.frontend.schemas.js';
+import { AUTH_METHOD_ICON_REFERENCES } from '../../../components/auth/methods/auth-method-presentation.js';
+/**
+ * The icon of one authentication method, resolved through the application's icon registry so a theme
+ * or an application that re-registers `StandardIconReference.KEY` restyles it here too.
+ *
+ * Sized for a button: the button preset owns the glyph's box (`[&_svg]:size-4`) and its gap to the
+ * label, so this renders the registry's small size and adds no spacing of its own. Decorative — the
+ * button's text names the method.
+ */
+export const AuthMethodIcon = ({ method }) => {
+    const { renderIcon } = useIconRegistry();
+    return renderIcon(AUTH_METHOD_ICON_REFERENCES[method], { size: IconSize.SM });
+};
+//# sourceMappingURL=AuthMethodIcon.js.map

package/dist/esm/components/auth/utils/AuthMethodIcon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodIcon.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthMethodIcon.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,+DAA+D,CAAC;AACzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sEAAsE,CAAC;AAMnH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAE,MAAM,EAAuB,EAAqB,EAAE;IACnF,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC;IACzC,OAAO,UAAU,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport type { AuthMethod } from '@wildo-ai/saas-models';\nimport { useIconRegistry } from '~wildo-frontend-lib/core/icons/useIconRegistry';\nimport { IconSize } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\nimport { AUTH_METHOD_ICON_REFERENCES } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\n\nexport interface AuthMethodIconProps {\n  method: AuthMethod;\n}\n\n/**\n * The icon of one authentication method, resolved through the application's icon registry so a theme\n * or an application that re-registers `StandardIconReference.KEY` restyles it here too.\n *\n * Sized for a button: the button preset owns the glyph's box (`[&_svg]:size-4`) and its gap to the\n * label, so this renders the registry's small size and adds no spacing of its own. Decorative — the\n * button's text names the method.\n */\nexport const AuthMethodIcon = ({ method }: AuthMethodIconProps): React.JSX.Element => {\n  const { renderIcon } = useIconRegistry();\n  return renderIcon(AUTH_METHOD_ICON_REFERENCES[method], { size: IconSize.SM });\n};\n"]}

package/dist/esm/components/auth/utils/AuthSecondaryLink.d.ts

@@ -0,0 +1,24 @@
+import React from 'react';
+export interface AuthSecondaryLinkProps {
+    /** Where the link goes. Omit it for an in-place action and pass `onClick`. */
+    href?: string;
+    onClick?: (event: React.MouseEvent) => void;
+    children: React.ReactNode;
+}
+/**
+ * The navigation a public auth screen offers BESIDE its action — "Back to login", "Sign in",
+ * "Continue", "Try another method".
+ *
+ * It exists because those links were authored as a bare `<Link>` inside a `text-center` div on 21 of
+ * 26 sites, and only 5 wrapped theirs in `<Text>`. A bare link inherits the CARD's font size (16px)
+ * while every piece of body copy beside it is the design system's body size (14px), so the link read
+ * larger than the sentence it belongs to — the defect reported on the sign-in screen, present on
+ * seven more screens.
+ *
+ * Rendering the link inside `Text` is what fixes it: `Text` carries the BODY recipe, and `Link` has no
+ * size of its own (it inherits deliberately — see the link preset), so one component keeps every auth
+ * screen's secondary navigation at body size. A screen that needs a prompt beside the link writes its
+ * own `<Text>` with the link inside, which is the same result by the same rule.
+ */
+export declare const AuthSecondaryLink: ({ href, onClick, children }: AuthSecondaryLinkProps) => React.JSX.Element;
+//# sourceMappingURL=AuthSecondaryLink.d.ts.map

package/dist/esm/components/auth/utils/AuthSecondaryLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthSecondaryLink.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthSecondaryLink.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,WAAW,sBAAsB;IACrC,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;IAC5C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,GAAI,6BAA6B,sBAAsB,KAAG,KAAK,CAAC,GAAG,CAAC,OAIjG,CAAC"}

package/dist/esm/components/auth/utils/AuthSecondaryLink.js

@@ -0,0 +1,20 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Text } from '../../../components/typography/text.js';
+import { Link } from '../../../components/typography/link.js';
+/**
+ * The navigation a public auth screen offers BESIDE its action — "Back to login", "Sign in",
+ * "Continue", "Try another method".
+ *
+ * It exists because those links were authored as a bare `<Link>` inside a `text-center` div on 21 of
+ * 26 sites, and only 5 wrapped theirs in `<Text>`. A bare link inherits the CARD's font size (16px)
+ * while every piece of body copy beside it is the design system's body size (14px), so the link read
+ * larger than the sentence it belongs to — the defect reported on the sign-in screen, present on
+ * seven more screens.
+ *
+ * Rendering the link inside `Text` is what fixes it: `Text` carries the BODY recipe, and `Link` has no
+ * size of its own (it inherits deliberately — see the link preset), so one component keeps every auth
+ * screen's secondary navigation at body size. A screen that needs a prompt beside the link writes its
+ * own `<Text>` with the link inside, which is the same result by the same rule.
+ */
+export const AuthSecondaryLink = ({ href, onClick, children }) => (_jsx(Text, { children: _jsx(Link, { href: href, onClick: onClick, children: children }) }));
+//# sourceMappingURL=AuthSecondaryLink.js.map

package/dist/esm/components/auth/utils/AuthSecondaryLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthSecondaryLink.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthSecondaryLink.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AAStE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAA0B,EAAqB,EAAE,CAAC,CAC3G,KAAC,IAAI,cACH,KAAC,IAAI,IAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,YAAG,QAAQ,GAAQ,GAChD,CACR,CAAC","sourcesContent":["import React from 'react';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\n\nexport interface AuthSecondaryLinkProps {\n  /** Where the link goes. Omit it for an in-place action and pass `onClick`. */\n  href?: string;\n  onClick?: (event: React.MouseEvent) => void;\n  children: React.ReactNode;\n}\n\n/**\n * The navigation a public auth screen offers BESIDE its action — \"Back to login\", \"Sign in\",\n * \"Continue\", \"Try another method\".\n *\n * It exists because those links were authored as a bare `<Link>` inside a `text-center` div on 21 of\n * 26 sites, and only 5 wrapped theirs in `<Text>`. A bare link inherits the CARD's font size (16px)\n * while every piece of body copy beside it is the design system's body size (14px), so the link read\n * larger than the sentence it belongs to — the defect reported on the sign-in screen, present on\n * seven more screens.\n *\n * Rendering the link inside `Text` is what fixes it: `Text` carries the BODY recipe, and `Link` has no\n * size of its own (it inherits deliberately — see the link preset), so one component keeps every auth\n * screen's secondary navigation at body size. A screen that needs a prompt beside the link writes its\n * own `<Text>` with the link inside, which is the same result by the same rule.\n */\nexport const AuthSecondaryLink = ({ href, onClick, children }: AuthSecondaryLinkProps): React.JSX.Element => (\n  <Text>\n    <Link href={href} onClick={onClick}>{children}</Link>\n  </Text>\n);\n"]}

package/dist/esm/components/auth/utils/AuthSingleFieldFormLayout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthSingleFieldFormLayout.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/AuthSingleFieldFormLayout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAIzG,KAAK,mBAAmB,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC;AAE7F,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,SAAS,EACT,WAAW,EACX,eAAe,EACf,UAAU,GACX,EAAE,8BAA8B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoBpD"}
+{"version":3,"file":"AuthSingleFieldFormLayout.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthSingleFieldFormLayout.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAIzG,KAAK,mBAAmB,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC;AAE7F,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,SAAS,EACT,WAAW,EACX,eAAe,EACf,UAAU,GACX,EAAE,8BAA8B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoBpD"}

package/dist/esm/components/auth/utils/AuthSingleFieldFormLayout.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthSingleFieldFormLayout.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/AuthSingleFieldFormLayout.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAuB,MAAM,yDAAyD,CAAC;AACzG,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAWnG;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,SAAS,EACT,WAAW,EACX,eAAe,EACf,UAAU,GACqB;IAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IAEvC,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAE,SAAS,KAAM,UAAU,GAAI,EAE7C,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,WAAW,EAClB,eAAe,EAAE,eAAe,EAChC,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC","sourcesContent":["import React from 'react';\nimport { useFormContext } from 'react-hook-form';\n\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField, type FormFieldProps } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\n\ntype SupportedFieldProps = Pick<FormFieldProps, 'type' | 'placeholder' | 'as' | 'autoFocus'>;\n\nexport interface AuthSingleFieldFormLayoutProps {\n  fieldName: string;\n  submitLabel: string;\n  submittingLabel: string;\n  fieldProps?: SupportedFieldProps;\n}\n\n/**\n * Shared auth layout for the common \"single interactive field + submit action\"\n * pattern used by MFA and enrollment steps. The host flow still owns all\n * side-effects (send code, verify, navigate), while the field rendering itself\n * stays on the standard schema-driven `AutomatedForm` / `FormField` seam.\n */\nexport function AuthSingleFieldFormLayout({\n  fieldName,\n  submitLabel,\n  submittingLabel,\n  fieldProps,\n}: AuthSingleFieldFormLayoutProps): React.JSX.Element {\n  const { formState } = useFormContext();\n\n  return (\n    <FormLayout>\n      <FormField name={fieldName} {...fieldProps} />\n\n      {formState.errors.root && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{formState.errors.root.message}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={submitLabel}\n        submittingLabel={submittingLabel}\n        fullWidth\n      />\n    </FormLayout>\n  );\n}\n"]}
+{"version":3,"file":"AuthSingleFieldFormLayout.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/AuthSingleFieldFormLayout.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAuB,MAAM,yDAAyD,CAAC;AACzG,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAWnG;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,SAAS,EACT,WAAW,EACX,eAAe,EACf,UAAU,GACqB;IAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IAEvC,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAE,SAAS,KAAM,UAAU,GAAI,EAE7C,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,WAAW,EAClB,eAAe,EAAE,eAAe,EAChC,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC","sourcesContent":["import React from 'react';\nimport { useFormContext } from 'react-hook-form';\n\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField, type FormFieldProps } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\n\ntype SupportedFieldProps = Pick<FormFieldProps, 'type' | 'placeholder' | 'as' | 'autoFocus'>;\n\nexport interface AuthSingleFieldFormLayoutProps {\n  fieldName: string;\n  submitLabel: string;\n  submittingLabel: string;\n  fieldProps?: SupportedFieldProps;\n}\n\n/**\n * Shared auth layout for the common \"single interactive field + submit action\"\n * pattern used by MFA and enrollment steps. The host flow still owns all\n * side-effects (send code, verify, navigate), while the field rendering itself\n * stays on the standard schema-driven `AutomatedForm` / `FormField` seam.\n */\nexport function AuthSingleFieldFormLayout({\n  fieldName,\n  submitLabel,\n  submittingLabel,\n  fieldProps,\n}: AuthSingleFieldFormLayoutProps): React.JSX.Element {\n  const { formState } = useFormContext();\n\n  return (\n    <FormLayout>\n      <FormField name={fieldName} {...fieldProps} />\n\n      {formState.errors.root && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{formState.errors.root.message}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={submitLabel}\n        submittingLabel={submittingLabel}\n        fullWidth\n      />\n    </FormLayout>\n  );\n}\n"]}

package/dist/esm/components/auth/utils/CredentialUsernameAutofillField.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CredentialUsernameAutofillField.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/CredentialUsernameAutofillField.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,WAAW,oCAAoC;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,+BAA+B,CAAC,EAC9C,KAAK,GACN,EAAE,oCAAoC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAiBjE"}
+{"version":3,"file":"CredentialUsernameAutofillField.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/CredentialUsernameAutofillField.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,WAAW,oCAAoC;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,+BAA+B,CAAC,EAC9C,KAAK,GACN,EAAE,oCAAoC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAiBjE"}

package/dist/esm/components/auth/utils/CredentialUsernameAutofillField.js.map

@@ -1 +1 @@
-{"version":3,"file":"CredentialUsernameAutofillField.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/CredentialUsernameAutofillField.tsx"],"names":[],"mappings":";AAMA,MAAM,UAAU,+BAA+B,CAAC,EAC9C,KAAK,GACgC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,+BACc,8BAA8B,EAC1C,IAAI,EAAC,OAAO,EACZ,IAAI,EAAC,OAAO,EACZ,YAAY,EAAC,UAAU,EACvB,KAAK,EAAE,KAAK,EACZ,QAAQ,QACR,QAAQ,EAAE,CAAC,CAAC,EACZ,SAAS,EAAC,SAAS,GACnB,CACH,CAAC;AACJ,CAAC","sourcesContent":["import React from 'react';\n\nexport interface CredentialUsernameAutofillFieldProps {\n  email?: string;\n}\n\nexport function CredentialUsernameAutofillField({\n  email,\n}: CredentialUsernameAutofillFieldProps): React.JSX.Element | null {\n  if (!email) {\n    return null;\n  }\n\n  return (\n    <input\n      data-testid=\"credential-username-autofill\"\n      type=\"email\"\n      name=\"email\"\n      autoComplete=\"username\"\n      value={email}\n      readOnly\n      tabIndex={-1}\n      className=\"sr-only\"\n    />\n  );\n}\n"]}
+{"version":3,"file":"CredentialUsernameAutofillField.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/CredentialUsernameAutofillField.tsx"],"names":[],"mappings":";AAMA,MAAM,UAAU,+BAA+B,CAAC,EAC9C,KAAK,GACgC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,+BACc,8BAA8B,EAC1C,IAAI,EAAC,OAAO,EACZ,IAAI,EAAC,OAAO,EACZ,YAAY,EAAC,UAAU,EACvB,KAAK,EAAE,KAAK,EACZ,QAAQ,QACR,QAAQ,EAAE,CAAC,CAAC,EACZ,SAAS,EAAC,SAAS,GACnB,CACH,CAAC;AACJ,CAAC","sourcesContent":["import React from 'react';\n\nexport interface CredentialUsernameAutofillFieldProps {\n  email?: string;\n}\n\nexport function CredentialUsernameAutofillField({\n  email,\n}: CredentialUsernameAutofillFieldProps): React.JSX.Element | null {\n  if (!email) {\n    return null;\n  }\n\n  return (\n    <input\n      data-testid=\"credential-username-autofill\"\n      type=\"email\"\n      name=\"email\"\n      autoComplete=\"username\"\n      value={email}\n      readOnly\n      tabIndex={-1}\n      className=\"sr-only\"\n    />\n  );\n}\n"]}

package/dist/esm/components/auth/utils/LabeledDivider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LabeledDivider.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/LabeledDivider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,GAAI,sBAAsB,mBAAmB,KAAG,KAAK,CAAC,GAAG,CAAC,OAUpF,CAAC"}
+{"version":3,"file":"LabeledDivider.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/LabeledDivider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,GAAI,sBAAsB,mBAAmB,KAAG,KAAK,CAAC,GAAG,CAAC,OAUpF,CAAC"}

package/dist/esm/components/auth/utils/LabeledDivider.js.map

@@ -1 +1 @@
-{"version":3,"file":"LabeledDivider.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/LabeledDivider.tsx"],"names":[],"mappings":";AASA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAuB,EAAqB,EAAE,CAAC,CAC9F,eACE,SAAS,EAAE,iFACT,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAChC,EAAE,aAEF,eAAM,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,EAC7D,yBAAO,KAAK,GAAQ,EACpB,eAAM,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,IACzD,CACP,CAAC","sourcesContent":["import React from 'react';\n\nexport interface LabeledDividerProps {\n  /** Text shown centered between the two rule segments. */\n  label: string;\n  /** Optional extra classes appended to the outer wrapper (e.g. spacing overrides). */\n  className?: string;\n}\n\n/**\n * Horizontal divider with a centered label, where the rule line flanks the\n * text on both sides and is never painted *behind* it.\n *\n * Why not the \"absolute full-width line + background-colored span\" trick:\n * that approach paints one continuous rule across the full width, then relies\n * on an opaque `<span>` whose background exactly matches the container to mask\n * the segment sitting behind the text. The moment the container background\n * differs from the masking color — theme surfaces, cards, translucent panels,\n * any non-`bg-card` host — the rule bleeds through the glyphs. This flex\n * layout instead draws two independent `flex-1` segments with a real gap for\n * the label, so correctness never depends on a background-color match.\n */\nexport const LabeledDivider = ({ label, className }: LabeledDividerProps): React.JSX.Element => (\n  <div\n    className={`my-group flex items-center gap-element text-xs uppercase text-muted-foreground${\n      className ? ` ${className}` : ''\n    }`}\n  >\n    <span className=\"h-px flex-1 bg-border\" aria-hidden=\"true\" />\n    <span>{label}</span>\n    <span className=\"h-px flex-1 bg-border\" aria-hidden=\"true\" />\n  </div>\n);\n"]}
+{"version":3,"file":"LabeledDivider.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/LabeledDivider.tsx"],"names":[],"mappings":";AASA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAuB,EAAqB,EAAE,CAAC,CAC9F,eACE,SAAS,EAAE,iFACT,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAChC,EAAE,aAEF,eAAM,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,EAC7D,yBAAO,KAAK,GAAQ,EACpB,eAAM,SAAS,EAAC,uBAAuB,iBAAa,MAAM,GAAG,IACzD,CACP,CAAC","sourcesContent":["import React from 'react';\n\nexport interface LabeledDividerProps {\n  /** Text shown centered between the two rule segments. */\n  label: string;\n  /** Optional extra classes appended to the outer wrapper (e.g. spacing overrides). */\n  className?: string;\n}\n\n/**\n * Horizontal divider with a centered label, where the rule line flanks the\n * text on both sides and is never painted *behind* it.\n *\n * Why not the \"absolute full-width line + background-colored span\" trick:\n * that approach paints one continuous rule across the full width, then relies\n * on an opaque `<span>` whose background exactly matches the container to mask\n * the segment sitting behind the text. The moment the container background\n * differs from the masking color — theme surfaces, cards, translucent panels,\n * any non-`bg-card` host — the rule bleeds through the glyphs. This flex\n * layout instead draws two independent `flex-1` segments with a real gap for\n * the label, so correctness never depends on a background-color match.\n */\nexport const LabeledDivider = ({ label, className }: LabeledDividerProps): React.JSX.Element => (\n  <div\n    className={`my-group flex items-center gap-element text-xs uppercase text-muted-foreground${\n      className ? ` ${className}` : ''\n    }`}\n  >\n    <span className=\"h-px flex-1 bg-border\" aria-hidden=\"true\" />\n    <span>{label}</span>\n    <span className=\"h-px flex-1 bg-border\" aria-hidden=\"true\" />\n  </div>\n);\n"]}

package/dist/esm/components/auth/utils/OAuthProvidersSection.d.ts

@@ -32,6 +32,16 @@ export interface OAuthProvidersSectionProps {
     dividerLabel?: string;
     /** Whether to show the "or" divider below the buttons */
     showDivider?: boolean;
+    /**
+     * Withhold the buttons although nothing is loading.
+     *
+     * Distinct from `isLoading` on purpose: they disable the same control for opposite reasons, and a
+     * caller that conflated them would tell a person a request is in flight when what is true is that
+     * they have not yet done something. Registration passes it when the application requires an
+     * affirmative act of document acceptance the person has not made (#1258) — the buttons start an
+     * account, so they are one of the acts the mode governs.
+     */
+    disabled?: boolean;
 }
 /**
  * Shared OAuth2 SSO provider buttons + optional "or" divider.
@@ -42,5 +52,5 @@ export interface OAuthProvidersSectionProps {
  * design system's focus ring, disabled state, motion transitions, touch
  * targets, and gesture physics — while satisfying OAuth brand guidelines.
  */
-export declare const OAuthProvidersSection: ({ providers, onProviderClick, isLoading, continueWithLabel, translate, dividerLabel, showDivider, }: OAuthProvidersSectionProps) => React.JSX.Element | null;
+export declare const OAuthProvidersSection: ({ providers, onProviderClick, isLoading, disabled, continueWithLabel, translate, dividerLabel, showDivider, }: OAuthProvidersSectionProps) => React.JSX.Element | null;
 //# sourceMappingURL=OAuthProvidersSection.d.ts.map

package/dist/esm/components/auth/utils/OAuthProvidersSection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OAuthProvidersSection.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/OAuthProvidersSection.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,CA2ChH,CAAC;AAEF,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,CAS1F,CAAC;AAEF,MAAM,WAAW,6BAA6B;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,6BAA6B,EAAE,CAAC;IAC3C,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAAI,qGAQnC,0BAA0B,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAqCnD,CAAC"}
+{"version":3,"file":"OAuthProvidersSection.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/OAuthProvidersSection.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAA;CAAE,CA6ChH,CAAC;AAEF,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,CAS1F,CAAC;AAEF,MAAM,WAAW,6BAA6B;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,6BAA6B,EAAE,CAAC;IAC3C,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAAI,+GASnC,0BAA0B,KAAG,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,IAqCnD,CAAC"}

package/dist/esm/components/auth/utils/OAuthProvidersSection.js

@@ -13,7 +13,9 @@ import { resolveOAuthProviderDisplayLabel } from './oauth-provider-display-label
 export const SSO_PROVIDER_BRAND_META = {
     google: {
         label: 'Google',
-        brandClass: 'bg-white hover:bg-gray-50 border border-gray-300 text-gray-700',
+        // No palette override: the button is the theme's outline button, like the other sign-in methods, and
+        // only the logo carries the brand. A light-only palette here fought the theme in dark mode.
+        brandClass: '',
         icon: (_jsxs("svg", { className: "size-5", viewBox: "0 0 24 24", "aria-hidden": "true", children: [_jsx("path", { d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z", fill: "#4285F4" }), _jsx("path", { d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z", fill: "#34A853" }), _jsx("path", { d: "M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z", fill: "#FBBC05" }), _jsx("path", { d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z", fill: "#EA4335" })] })),
     },
     microsoft: {
@@ -46,7 +48,7 @@ export const DEFAULT_PROVIDER_BRAND = {
  * design system's focus ring, disabled state, motion transitions, touch
  * targets, and gesture physics — while satisfying OAuth brand guidelines.
  */
-export const OAuthProvidersSection = ({ providers, onProviderClick, isLoading, continueWithLabel, translate, dividerLabel, showDivider, }) => {
+export const OAuthProvidersSection = ({ providers, onProviderClick, isLoading, disabled = false, continueWithLabel, translate, dividerLabel, showDivider, }) => {
     if (providers.length === 0)
         return null;
     return (_jsxs(_Fragment, { children: [_jsx("div", { className: "space-y-item", children: providers.map(({ key, providerRef, displayName, displayNameLabelKey }) => {
@@ -60,7 +62,7 @@ export const OAuthProvidersSection = ({ providers, onProviderClick, isLoading, c
                     });
                     const brandClass = brand?.brandClass ?? DEFAULT_PROVIDER_BRAND.brandClass;
                     const icon = brand?.icon ?? DEFAULT_PROVIDER_BRAND.icon;
-                    return (_jsxs(Button, { type: "button", variant: ButtonVariants_Variant.OUTLINE, disabled: isLoading, onClick: () => onProviderClick(providerRef), className: `w-full ${brandClass}`, children: [icon, _jsx("span", { children: continueWithLabel.replace('{provider}', label) })] }, key));
+                    return (_jsxs(Button, { type: "button", variant: ButtonVariants_Variant.OUTLINE, disabled: isLoading || disabled, onClick: () => onProviderClick(providerRef), className: `w-full ${brandClass}`, children: [icon, _jsx("span", { children: continueWithLabel.replace('{provider}', label) })] }, key));
                 }) }), showDivider && dividerLabel && _jsx(LabeledDivider, { label: dividerLabel })] }));
 };
 //# sourceMappingURL=OAuthProvidersSection.js.map

package/dist/esm/components/auth/utils/OAuthProvidersSection.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuthProvidersSection.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/OAuthProvidersSection.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AAEjG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAiF;IACnH,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,gEAAgE;QAC5E,IAAI,EAAE,CACJ,eAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,iBAAa,MAAM,aAC5D,eAAM,CAAC,EAAC,mHAAmH,EAAC,IAAI,EAAC,SAAS,GAAE,EAC5I,eAAM,CAAC,EAAC,uIAAuI,EAAC,IAAI,EAAC,SAAS,GAAE,EAChK,eAAM,CAAC,EAAC,+HAA+H,EAAC,IAAI,EAAC,SAAS,GAAE,EACxJ,eAAM,CAAC,EAAC,qIAAqI,EAAC,IAAI,EAAC,SAAS,GAAE,IAC1J,CACP;KACF;IACD,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,4CAA4C;QACxD,IAAI,EAAE,CACJ,eAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,iBAAa,MAAM,aAC5D,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,EACvD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,EACxD,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,EACxD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,IACrD,CACP;KACF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,4CAA4C;QACxD,IAAI,EAAE,CACJ,cAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAChF,eAAM,CAAC,EAAC,otBAAotB,GAAE,GAC1tB,CACP;KACF;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,uCAAuC;QACnD,IAAI,EAAE,CACJ,cAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAChF,eAAM,CAAC,EAAC,2TAA2T,GAAE,GACjU,CACP;KACF;CACF,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAA4D;IAC7F,UAAU,EAAE,iEAAiE;IAC7E,IAAI,EAAE,CACJ,eAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAC3J,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,GAAE,EAChC,eAAM,CAAC,EAAC,UAAU,GAAE,EACpB,eAAM,CAAC,EAAC,4FAA4F,GAAE,IAClG,CACP;CACF,CAAC;AAuBF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EACpC,SAAS,EACT,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,SAAS,EACT,YAAY,EACZ,WAAW,GACgB,EAA4B,EAAE;IACzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,cAAc,YAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,EAAE;oBACxE,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;oBAC3D,MAAM,KAAK,GAAG,gCAAgC,CAAC;wBAC7C,WAAW;wBACX,WAAW;wBACX,mBAAmB;wBACnB,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,SAAS;qBACV,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,KAAK,EAAE,UAAU,IAAI,sBAAsB,CAAC,UAAU,CAAC;oBAC1E,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC;oBAExD,OAAO,CACL,MAAC,MAAM,IAEL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,QAAQ,EAAE,SAAS,EACnB,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAC3C,SAAS,EAAE,UAAU,UAAU,EAAE,aAEhC,IAAI,EACL,yBAAO,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,GAAQ,KARxD,GAAG,CASD,CACV,CAAC;gBACJ,CAAC,CAAC,GACE,EAEL,WAAW,IAAI,YAAY,IAAI,KAAC,cAAc,IAAC,KAAK,EAAE,YAAY,GAAI,IACtE,CACJ,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { resolveOAuthProviderDisplayLabel } from './oauth-provider-display-label.frontend.utils';\n\n/**\n * Well-known SSO provider metadata for rendering branded buttons.\n * Keys match the providerRef values from the external-connectors catalog.\n *\n * DESIGN_SYSTEM_GRANDFATHER: Raw Tailwind colors (bg-white, bg-gray-50, text-gray-700, etc.)\n * are intentional — OAuth providers require brand-mandated colors. DO NOT replace with\n * semantic tokens. See design-system-theme-integration-tasks.md §4.VERIFY.\n */\nexport const SSO_PROVIDER_BRAND_META: Record<string, { label: string; brandClass: string; icon: React.ReactNode }> = {\n  google: {\n    label: 'Google',\n    brandClass: 'bg-white hover:bg-gray-50 border border-gray-300 text-gray-700',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n        <path d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z\" fill=\"#4285F4\"/>\n        <path d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\" fill=\"#34A853\"/>\n        <path d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z\" fill=\"#FBBC05\"/>\n        <path d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z\" fill=\"#EA4335\"/>\n      </svg>\n    ),\n  },\n  microsoft: {\n    label: 'Microsoft',\n    brandClass: 'bg-[#2F2F2F] hover:bg-[#404040] text-white',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 21 21\" aria-hidden=\"true\">\n        <rect x=\"1\" y=\"1\" width=\"9\" height=\"9\" fill=\"#F25022\"/>\n        <rect x=\"11\" y=\"1\" width=\"9\" height=\"9\" fill=\"#7FBA00\"/>\n        <rect x=\"1\" y=\"11\" width=\"9\" height=\"9\" fill=\"#00A4EF\"/>\n        <rect x=\"11\" y=\"11\" width=\"9\" height=\"9\" fill=\"#FFB900\"/>\n      </svg>\n    ),\n  },\n  github: {\n    label: 'GitHub',\n    brandClass: 'bg-[#24292e] hover:bg-[#2f363d] text-white',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\">\n        <path d=\"M12 2C6.477 2 2 6.484 2 12.017c0 4.425 2.865 8.18 6.839 9.504.5.092.682-.217.682-.483 0-.237-.008-.868-.013-1.703-2.782.605-3.369-1.343-3.369-1.343-.454-1.158-1.11-1.466-1.11-1.466-.908-.62.069-.608.069-.608 1.003.07 1.531 1.032 1.531 1.032.892 1.53 2.341 1.088 2.91.832.092-.647.35-1.088.636-1.338-2.22-.253-4.555-1.113-4.555-4.951 0-1.093.39-1.988 1.029-2.688-.103-.253-.446-1.272.098-2.65 0 0 .84-.27 2.75 1.026A9.564 9.564 0 0 1 12 6.844a9.59 9.59 0 0 1 2.504.337c1.909-1.296 2.747-1.027 2.747-1.027.546 1.379.202 2.398.1 2.651.64.7 1.028 1.595 1.028 2.688 0 3.848-2.339 4.695-4.566 4.943.359.309.678.92.678 1.855 0 1.338-.012 2.419-.012 2.747 0 .268.18.58.688.482A10.019 10.019 0 0 0 22 12.017C22 6.484 17.522 2 12 2z\"/>\n      </svg>\n    ),\n  },\n  apple: {\n    label: 'Apple',\n    brandClass: 'bg-black hover:bg-gray-900 text-white',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\">\n        <path d=\"M17.05 20.28c-.98.95-2.05.88-3.08.4-1.09-.5-2.08-.48-3.24 0-1.44.62-2.2.44-3.06-.4C2.79 15.25 3.51 7.59 9.05 7.31c1.35.07 2.29.74 3.08.8 1.18-.24 2.31-.93 3.57-.84 1.51.12 2.65.72 3.4 1.8-3.12 1.87-2.38 5.98.48 7.13-.57 1.5-1.31 2.99-2.54 4.09zM12.03 7.25c-.15-2.23 1.66-4.07 3.74-4.25.29 2.58-2.34 4.5-3.74 4.25z\"/>\n      </svg>\n    ),\n  },\n};\n\n/** Fallback brand metadata for unknown providers — uses semantic design tokens */\nexport const DEFAULT_PROVIDER_BRAND: Omit<(typeof SSO_PROVIDER_BRAND_META)[string], 'label'> = {\n  brandClass: 'bg-muted hover:bg-muted/80 border border-border text-foreground',\n  icon: (\n    <svg className=\"size-5\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden=\"true\">\n      <circle cx=\"12\" cy=\"12\" r=\"10\"/>\n      <path d=\"M2 12h20\"/>\n      <path d=\"M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"/>\n    </svg>\n  ),\n};\n\nexport interface OAuthProviderButtonDefinition {\n  key: string;\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n}\n\nexport interface OAuthProvidersSectionProps {\n  providers: OAuthProviderButtonDefinition[];\n  onProviderClick: (providerRef: string) => void;\n  isLoading: boolean;\n  /** Label template for provider buttons, e.g. \"Continue with {provider}\" */\n  continueWithLabel: string;\n  /** Generic i18n translator used for provider label keys. */\n  translate?: (key: string) => string;\n  /** Label for the \"or\" divider between SSO and password form */\n  dividerLabel?: string;\n  /** Whether to show the \"or\" divider below the buttons */\n  showDivider?: boolean;\n}\n\n/**\n * Shared OAuth2 SSO provider buttons + optional \"or\" divider.\n * Used by both login and registration pages.\n *\n * Uses the design system <Button> component (variant={ButtonVariants_Variant.OUTLINE}) as the base,\n * with brand-specific color overrides via className. This preserves the\n * design system's focus ring, disabled state, motion transitions, touch\n * targets, and gesture physics — while satisfying OAuth brand guidelines.\n */\nexport const OAuthProvidersSection = ({\n  providers,\n  onProviderClick,\n  isLoading,\n  continueWithLabel,\n  translate,\n  dividerLabel,\n  showDivider,\n}: OAuthProvidersSectionProps): React.JSX.Element | null => {\n  if (providers.length === 0) return null;\n\n  return (\n    <>\n      <div className=\"space-y-item\">\n        {providers.map(({ key, providerRef, displayName, displayNameLabelKey }) => {\n          const brand = SSO_PROVIDER_BRAND_META[providerRef] ?? null;\n          const label = resolveOAuthProviderDisplayLabel({\n            providerRef,\n            displayName,\n            displayNameLabelKey,\n            brandLabel: brand?.label,\n            translate,\n          });\n          const brandClass = brand?.brandClass ?? DEFAULT_PROVIDER_BRAND.brandClass;\n          const icon = brand?.icon ?? DEFAULT_PROVIDER_BRAND.icon;\n\n          return (\n            <Button\n              key={key}\n              type=\"button\"\n              variant={ButtonVariants_Variant.OUTLINE}\n              disabled={isLoading}\n              onClick={() => onProviderClick(providerRef)}\n              className={`w-full ${brandClass}`}\n            >\n              {icon}\n              <span>{continueWithLabel.replace('{provider}', label)}</span>\n            </Button>\n          );\n        })}\n      </div>\n\n      {showDivider && dividerLabel && <LabeledDivider label={dividerLabel} />}\n    </>\n  );\n};\n"]}
+{"version":3,"file":"OAuthProvidersSection.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/OAuthProvidersSection.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AAEjG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAiF;IACnH,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,qGAAqG;QACrG,4FAA4F;QAC5F,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CACJ,eAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,iBAAa,MAAM,aAC5D,eAAM,CAAC,EAAC,mHAAmH,EAAC,IAAI,EAAC,SAAS,GAAE,EAC5I,eAAM,CAAC,EAAC,uIAAuI,EAAC,IAAI,EAAC,SAAS,GAAE,EAChK,eAAM,CAAC,EAAC,+HAA+H,EAAC,IAAI,EAAC,SAAS,GAAE,EACxJ,eAAM,CAAC,EAAC,qIAAqI,EAAC,IAAI,EAAC,SAAS,GAAE,IAC1J,CACP;KACF;IACD,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,4CAA4C;QACxD,IAAI,EAAE,CACJ,eAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,iBAAa,MAAM,aAC5D,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,EACvD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,EACxD,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,EACxD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAE,IACrD,CACP;KACF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,4CAA4C;QACxD,IAAI,EAAE,CACJ,cAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAChF,eAAM,CAAC,EAAC,otBAAotB,GAAE,GAC1tB,CACP;KACF;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,uCAAuC;QACnD,IAAI,EAAE,CACJ,cAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAChF,eAAM,CAAC,EAAC,2TAA2T,GAAE,GACjU,CACP;KACF;CACF,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAA4D;IAC7F,UAAU,EAAE,iEAAiE;IAC7E,IAAI,EAAE,CACJ,eAAK,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,EAAC,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,iBAAa,MAAM,aAC3J,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,GAAE,EAChC,eAAM,CAAC,EAAC,UAAU,GAAE,EACpB,eAAM,CAAC,EAAC,4FAA4F,GAAE,IAClG,CACP;CACF,CAAC;AAiCF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EACpC,SAAS,EACT,eAAe,EACf,SAAS,EACT,QAAQ,GAAG,KAAK,EAChB,iBAAiB,EACjB,SAAS,EACT,YAAY,EACZ,WAAW,GACgB,EAA4B,EAAE;IACzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,cAAc,YAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,EAAE;oBACxE,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;oBAC3D,MAAM,KAAK,GAAG,gCAAgC,CAAC;wBAC7C,WAAW;wBACX,WAAW;wBACX,mBAAmB;wBACnB,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,SAAS;qBACV,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,KAAK,EAAE,UAAU,IAAI,sBAAsB,CAAC,UAAU,CAAC;oBAC1E,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC;oBAExD,OAAO,CACL,MAAC,MAAM,IAEL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,QAAQ,EAAE,SAAS,IAAI,QAAQ,EAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAC3C,SAAS,EAAE,UAAU,UAAU,EAAE,aAEhC,IAAI,EACL,yBAAO,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,GAAQ,KARxD,GAAG,CASD,CACV,CAAC;gBACJ,CAAC,CAAC,GACE,EAEL,WAAW,IAAI,YAAY,IAAI,KAAC,cAAc,IAAC,KAAK,EAAE,YAAY,GAAI,IACtE,CACJ,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { resolveOAuthProviderDisplayLabel } from './oauth-provider-display-label.frontend.utils';\n\n/**\n * Well-known SSO provider metadata for rendering branded buttons.\n * Keys match the providerRef values from the external-connectors catalog.\n *\n * DESIGN_SYSTEM_GRANDFATHER: Raw Tailwind colors (bg-white, bg-gray-50, text-gray-700, etc.)\n * are intentional — OAuth providers require brand-mandated colors. DO NOT replace with\n * semantic tokens. See design-system-theme-integration-tasks.md §4.VERIFY.\n */\nexport const SSO_PROVIDER_BRAND_META: Record<string, { label: string; brandClass: string; icon: React.ReactNode }> = {\n  google: {\n    label: 'Google',\n    // No palette override: the button is the theme's outline button, like the other sign-in methods, and\n    // only the logo carries the brand. A light-only palette here fought the theme in dark mode.\n    brandClass: '',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n        <path d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z\" fill=\"#4285F4\"/>\n        <path d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\" fill=\"#34A853\"/>\n        <path d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z\" fill=\"#FBBC05\"/>\n        <path d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z\" fill=\"#EA4335\"/>\n      </svg>\n    ),\n  },\n  microsoft: {\n    label: 'Microsoft',\n    brandClass: 'bg-[#2F2F2F] hover:bg-[#404040] text-white',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 21 21\" aria-hidden=\"true\">\n        <rect x=\"1\" y=\"1\" width=\"9\" height=\"9\" fill=\"#F25022\"/>\n        <rect x=\"11\" y=\"1\" width=\"9\" height=\"9\" fill=\"#7FBA00\"/>\n        <rect x=\"1\" y=\"11\" width=\"9\" height=\"9\" fill=\"#00A4EF\"/>\n        <rect x=\"11\" y=\"11\" width=\"9\" height=\"9\" fill=\"#FFB900\"/>\n      </svg>\n    ),\n  },\n  github: {\n    label: 'GitHub',\n    brandClass: 'bg-[#24292e] hover:bg-[#2f363d] text-white',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\">\n        <path d=\"M12 2C6.477 2 2 6.484 2 12.017c0 4.425 2.865 8.18 6.839 9.504.5.092.682-.217.682-.483 0-.237-.008-.868-.013-1.703-2.782.605-3.369-1.343-3.369-1.343-.454-1.158-1.11-1.466-1.11-1.466-.908-.62.069-.608.069-.608 1.003.07 1.531 1.032 1.531 1.032.892 1.53 2.341 1.088 2.91.832.092-.647.35-1.088.636-1.338-2.22-.253-4.555-1.113-4.555-4.951 0-1.093.39-1.988 1.029-2.688-.103-.253-.446-1.272.098-2.65 0 0 .84-.27 2.75 1.026A9.564 9.564 0 0 1 12 6.844a9.59 9.59 0 0 1 2.504.337c1.909-1.296 2.747-1.027 2.747-1.027.546 1.379.202 2.398.1 2.651.64.7 1.028 1.595 1.028 2.688 0 3.848-2.339 4.695-4.566 4.943.359.309.678.92.678 1.855 0 1.338-.012 2.419-.012 2.747 0 .268.18.58.688.482A10.019 10.019 0 0 0 22 12.017C22 6.484 17.522 2 12 2z\"/>\n      </svg>\n    ),\n  },\n  apple: {\n    label: 'Apple',\n    brandClass: 'bg-black hover:bg-gray-900 text-white',\n    icon: (\n      <svg className=\"size-5\" viewBox=\"0 0 24 24\" fill=\"currentColor\" aria-hidden=\"true\">\n        <path d=\"M17.05 20.28c-.98.95-2.05.88-3.08.4-1.09-.5-2.08-.48-3.24 0-1.44.62-2.2.44-3.06-.4C2.79 15.25 3.51 7.59 9.05 7.31c1.35.07 2.29.74 3.08.8 1.18-.24 2.31-.93 3.57-.84 1.51.12 2.65.72 3.4 1.8-3.12 1.87-2.38 5.98.48 7.13-.57 1.5-1.31 2.99-2.54 4.09zM12.03 7.25c-.15-2.23 1.66-4.07 3.74-4.25.29 2.58-2.34 4.5-3.74 4.25z\"/>\n      </svg>\n    ),\n  },\n};\n\n/** Fallback brand metadata for unknown providers — uses semantic design tokens */\nexport const DEFAULT_PROVIDER_BRAND: Omit<(typeof SSO_PROVIDER_BRAND_META)[string], 'label'> = {\n  brandClass: 'bg-muted hover:bg-muted/80 border border-border text-foreground',\n  icon: (\n    <svg className=\"size-5\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden=\"true\">\n      <circle cx=\"12\" cy=\"12\" r=\"10\"/>\n      <path d=\"M2 12h20\"/>\n      <path d=\"M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"/>\n    </svg>\n  ),\n};\n\nexport interface OAuthProviderButtonDefinition {\n  key: string;\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n}\n\nexport interface OAuthProvidersSectionProps {\n  providers: OAuthProviderButtonDefinition[];\n  onProviderClick: (providerRef: string) => void;\n  isLoading: boolean;\n  /** Label template for provider buttons, e.g. \"Continue with {provider}\" */\n  continueWithLabel: string;\n  /** Generic i18n translator used for provider label keys. */\n  translate?: (key: string) => string;\n  /** Label for the \"or\" divider between SSO and password form */\n  dividerLabel?: string;\n  /** Whether to show the \"or\" divider below the buttons */\n  showDivider?: boolean;\n  /**\n   * Withhold the buttons although nothing is loading.\n   *\n   * Distinct from `isLoading` on purpose: they disable the same control for opposite reasons, and a\n   * caller that conflated them would tell a person a request is in flight when what is true is that\n   * they have not yet done something. Registration passes it when the application requires an\n   * affirmative act of document acceptance the person has not made (#1258) — the buttons start an\n   * account, so they are one of the acts the mode governs.\n   */\n  disabled?: boolean;\n}\n\n/**\n * Shared OAuth2 SSO provider buttons + optional \"or\" divider.\n * Used by both login and registration pages.\n *\n * Uses the design system <Button> component (variant={ButtonVariants_Variant.OUTLINE}) as the base,\n * with brand-specific color overrides via className. This preserves the\n * design system's focus ring, disabled state, motion transitions, touch\n * targets, and gesture physics — while satisfying OAuth brand guidelines.\n */\nexport const OAuthProvidersSection = ({\n  providers,\n  onProviderClick,\n  isLoading,\n  disabled = false,\n  continueWithLabel,\n  translate,\n  dividerLabel,\n  showDivider,\n}: OAuthProvidersSectionProps): React.JSX.Element | null => {\n  if (providers.length === 0) return null;\n\n  return (\n    <>\n      <div className=\"space-y-item\">\n        {providers.map(({ key, providerRef, displayName, displayNameLabelKey }) => {\n          const brand = SSO_PROVIDER_BRAND_META[providerRef] ?? null;\n          const label = resolveOAuthProviderDisplayLabel({\n            providerRef,\n            displayName,\n            displayNameLabelKey,\n            brandLabel: brand?.label,\n            translate,\n          });\n          const brandClass = brand?.brandClass ?? DEFAULT_PROVIDER_BRAND.brandClass;\n          const icon = brand?.icon ?? DEFAULT_PROVIDER_BRAND.icon;\n\n          return (\n            <Button\n              key={key}\n              type=\"button\"\n              variant={ButtonVariants_Variant.OUTLINE}\n              disabled={isLoading || disabled}\n              onClick={() => onProviderClick(providerRef)}\n              className={`w-full ${brandClass}`}\n            >\n              {icon}\n              <span>{continueWithLabel.replace('{provider}', label)}</span>\n            </Button>\n          );\n        })}\n      </div>\n\n      {showDivider && dividerLabel && <LabeledDivider label={dividerLabel} />}\n    </>\n  );\n};\n"]}

package/dist/esm/components/auth/utils/PasswordStrengthIndicator.d.ts

@@ -1,5 +1,5 @@
 import React from 'react';
-import type { PasswordPolicyRules } from '@wildo-ai/saas-models';
+import type { PasswordPolicyRules, PasswordBlocklistContext } from '@wildo-ai/saas-models';
 export declare const DEFAULT_PASSWORD_POLICY: PasswordPolicyRules;
 interface PasswordStrengthIndicatorProps {
     /** The password field name to watch from the surrounding form context */
@@ -8,6 +8,13 @@ interface PasswordStrengthIndicatorProps {
     policy: PasswordPolicyRules;
     /** Translation function for policy check labels */
     t: (key: string) => string;
+    /**
+     * What an attacker would guess about THIS application and THIS person — the service's own name and
+     * the user's own email address. Optional, because the bundled common-password list is the floor and
+     * runs either way; a surface that KNOWS the address (registration, invitation, reset) should pass it,
+     * since those two guesses come before anything in the list.
+     */
+    blocklistContext?: PasswordBlocklistContext;
 }
 export declare const PasswordStrengthIndicator: React.FC<PasswordStrengthIndicatorProps>;
 export {};

package/dist/esm/components/auth/utils/PasswordStrengthIndicator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PasswordStrengthIndicator.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/PasswordStrengthIndicator.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAkB,MAAM,OAAO,CAAC;AAEvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGjE,eAAO,MAAM,uBAAuB,EAAE,mBAQrC,CAAC;AAEF,UAAU,8BAA8B;IACtC,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,mDAAmD;IACnD,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAiD9E,CAAC"}
+{"version":3,"file":"PasswordStrengthIndicator.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/PasswordStrengthIndicator.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAkB,MAAM,OAAO,CAAC;AAEvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAI3F,eAAO,MAAM,uBAAuB,EAAE,mBAQrC,CAAC;AAEF,UAAU,8BAA8B;IACtC,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,mDAAmD;IACnD,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;CAC7C;AAED,eAAO,MAAM,yBAAyB,EAAE,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAyD9E,CAAC"}

package/dist/esm/components/auth/utils/PasswordStrengthIndicator.js

@@ -1,17 +1,18 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useMemo } from 'react';
 import { useFormContext } from 'react-hook-form';
+import { isPasswordBlocklisted } from '@wildo-ai/saas-models';
 import { PasswordPolicyLabel } from '@wildo-ai/presets-components-models';
 export const DEFAULT_PASSWORD_POLICY = {
-    minLength: 8,
+    minLength: 15,
     maxLength: 128,
-    requireUppercase: true,
-    requireLowercase: true,
-    requireNumbers: true,
+    requireUppercase: false,
+    requireLowercase: false,
+    requireNumbers: false,
     requireSpecialChars: false,
     expiryDays: 0,
 };
-export const PasswordStrengthIndicator = ({ fieldName, policy, t }) => {
+export const PasswordStrengthIndicator = ({ fieldName, policy, t, blocklistContext }) => {
     const { watch } = useFormContext();
     const password = watch(fieldName) || '';
     const checks = useMemo(() => {
@@ -38,8 +39,16 @@ export const PasswordStrengthIndicator = ({ fieldName, policy, t }) => {
         if (policy.requireSpecialChars) {
             items.push({ label: t(PasswordPolicyLabel.SPECIAL_CHAR), passed: /[^A-Za-z0-9]/.test(password) });
         }
+        // Unconditional, matching AuthUtils.validatePasswordAgainstPolicy: the blocklist is the one rule
+        // NIST SP 800-63B-4 §3.1.1.2 states with no configurable half, so an application cannot switch it
+        // off and this item is never absent. It is also the only item here that a longer password does not
+        // fix, which is why it is worth showing BEFORE the form is submitted rather than as a refusal after.
+        items.push({
+            label: t(PasswordPolicyLabel.BLOCKLISTED),
+            passed: !isPasswordBlocklisted(password, blocklistContext),
+        });
         return items;
-    }, [password, policy, t]);
+    }, [password, policy, t, blocklistContext]);
     if (!password || checks.length === 0)
         return null;
     return (_jsx("ul", { className: "space-y-1 text-xs mt-item-xs", children: checks.map((check, i) => (_jsxs("li", { className: `flex items-center gap-1.5 ${check.passed ? 'text-success' : 'text-muted-foreground'}`, children: [check.passed ? (_jsx("svg", { className: "w-3.5 h-3.5 shrink-0", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true", children: _jsx("path", { fillRule: "evenodd", d: "M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z", clipRule: "evenodd" }) })) : (_jsx("svg", { className: "w-3.5 h-3.5 shrink-0", viewBox: "0 0 20 20", fill: "currentColor", "aria-hidden": "true", children: _jsx("circle", { cx: "10", cy: "10", r: "3" }) })), _jsx("span", { children: check.label })] }, i))) }));

package/dist/esm/components/auth/utils/PasswordStrengthIndicator.js.map

@@ -1 +1 @@
-{"version":3,"file":"PasswordStrengthIndicator.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/PasswordStrengthIndicator.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,MAAM,CAAC,MAAM,uBAAuB,GAAwB;IAC1D,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC;CACd,CAAC;AAWF,MAAM,CAAC,MAAM,yBAAyB,GAA6C,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;IAC9G,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAW,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAyC,EAAE,CAAC;QAEvD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,OAAO,CACL,aAAI,SAAS,EAAC,8BAA8B,YACzC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CACxB,cAAY,SAAS,EAAE,6BAA6B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,uBAAuB,EAAE,aAC1G,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CACd,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,eAAM,QAAQ,EAAC,SAAS,EAAC,CAAC,EAAC,oHAAoH,EAAC,QAAQ,EAAC,SAAS,GAAG,GAAM,CAC7Q,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,GAAG,GAAM,CACxI,EACD,yBAAO,KAAK,CAAC,KAAK,GAAQ,KANnB,CAAC,CAOL,CACN,CAAC,GACC,CACN,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React, { useMemo } from 'react';\nimport { useFormContext } from 'react-hook-form';\nimport type { PasswordPolicyRules } from '@wildo-ai/saas-models';\nimport { PasswordPolicyLabel } from '@wildo-ai/presets-components-models';\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyRules = {\n  minLength: 8,\n  maxLength: 128,\n  requireUppercase: true,\n  requireLowercase: true,\n  requireNumbers: true,\n  requireSpecialChars: false,\n  expiryDays: 0,\n};\n\ninterface PasswordStrengthIndicatorProps {\n  /** The password field name to watch from the surrounding form context */\n  fieldName: string;\n  /** Password policy rules to check against */\n  policy: PasswordPolicyRules;\n  /** Translation function for policy check labels */\n  t: (key: string) => string;\n}\n\nexport const PasswordStrengthIndicator: React.FC<PasswordStrengthIndicatorProps> = ({ fieldName, policy, t }) => {\n  const { watch } = useFormContext();\n  const password: string = watch(fieldName) || '';\n\n  const checks = useMemo(() => {\n    if (!password) return [];\n\n    const items: { label: string; passed: boolean }[] = [];\n\n    items.push({\n      label: t(PasswordPolicyLabel.MIN_LENGTH).replace('{minLength}', String(policy.minLength)),\n      passed: password.length >= policy.minLength,\n    });\n    items.push({\n      label: t(PasswordPolicyLabel.MAX_LENGTH).replace('{maxLength}', String(policy.maxLength)),\n      passed: password.length <= policy.maxLength,\n    });\n    if (policy.requireUppercase) {\n      items.push({ label: t(PasswordPolicyLabel.UPPERCASE), passed: /[A-Z]/.test(password) });\n    }\n    if (policy.requireLowercase) {\n      items.push({ label: t(PasswordPolicyLabel.LOWERCASE), passed: /[a-z]/.test(password) });\n    }\n    if (policy.requireNumbers) {\n      items.push({ label: t(PasswordPolicyLabel.NUMBER), passed: /\\d/.test(password) });\n    }\n    if (policy.requireSpecialChars) {\n      items.push({ label: t(PasswordPolicyLabel.SPECIAL_CHAR), passed: /[^A-Za-z0-9]/.test(password) });\n    }\n\n    return items;\n  }, [password, policy, t]);\n\n  if (!password || checks.length === 0) return null;\n\n  return (\n    <ul className=\"space-y-1 text-xs mt-item-xs\">\n      {checks.map((check, i) => (\n        <li key={i} className={`flex items-center gap-1.5 ${check.passed ? 'text-success' : 'text-muted-foreground'}`}>\n          {check.passed ? (\n            <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><path fillRule=\"evenodd\" d=\"M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z\" clipRule=\"evenodd\" /></svg>\n          ) : (\n            <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><circle cx=\"10\" cy=\"10\" r=\"3\" /></svg>\n          )}\n          <span>{check.label}</span>\n        </li>\n      ))}\n    </ul>\n  );\n};\n"]}
+{"version":3,"file":"PasswordStrengthIndicator.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/PasswordStrengthIndicator.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,MAAM,CAAC,MAAM,uBAAuB,GAAwB;IAC1D,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,UAAU,EAAE,CAAC;CACd,CAAC;AAkBF,MAAM,CAAC,MAAM,yBAAyB,GAA6C,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE;IAChI,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAW,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAyC,EAAE,CAAC;QAEvD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,iGAAiG;QACjG,kGAAkG;QAClG,mGAAmG;QACnG,qGAAqG;QACrG,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACzC,MAAM,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAC3D,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,OAAO,CACL,aAAI,SAAS,EAAC,8BAA8B,YACzC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CACxB,cAAY,SAAS,EAAE,6BAA6B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,uBAAuB,EAAE,aAC1G,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CACd,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,eAAM,QAAQ,EAAC,SAAS,EAAC,CAAC,EAAC,oHAAoH,EAAC,QAAQ,EAAC,SAAS,GAAG,GAAM,CAC7Q,CAAC,CAAC,CAAC,CACF,cAAK,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,iBAAa,MAAM,YAAC,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,GAAG,GAAM,CACxI,EACD,yBAAO,KAAK,CAAC,KAAK,GAAQ,KANnB,CAAC,CAOL,CACN,CAAC,GACC,CACN,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React, { useMemo } from 'react';\nimport { useFormContext } from 'react-hook-form';\nimport type { PasswordPolicyRules, PasswordBlocklistContext } from '@wildo-ai/saas-models';\nimport { isPasswordBlocklisted } from '@wildo-ai/saas-models';\nimport { PasswordPolicyLabel } from '@wildo-ai/presets-components-models';\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyRules = {\n  minLength: 15,\n  maxLength: 128,\n  requireUppercase: false,\n  requireLowercase: false,\n  requireNumbers: false,\n  requireSpecialChars: false,\n  expiryDays: 0,\n};\n\ninterface PasswordStrengthIndicatorProps {\n  /** The password field name to watch from the surrounding form context */\n  fieldName: string;\n  /** Password policy rules to check against */\n  policy: PasswordPolicyRules;\n  /** Translation function for policy check labels */\n  t: (key: string) => string;\n  /**\n   * What an attacker would guess about THIS application and THIS person — the service's own name and\n   * the user's own email address. Optional, because the bundled common-password list is the floor and\n   * runs either way; a surface that KNOWS the address (registration, invitation, reset) should pass it,\n   * since those two guesses come before anything in the list.\n   */\n  blocklistContext?: PasswordBlocklistContext;\n}\n\nexport const PasswordStrengthIndicator: React.FC<PasswordStrengthIndicatorProps> = ({ fieldName, policy, t, blocklistContext }) => {\n  const { watch } = useFormContext();\n  const password: string = watch(fieldName) || '';\n\n  const checks = useMemo(() => {\n    if (!password) return [];\n\n    const items: { label: string; passed: boolean }[] = [];\n\n    items.push({\n      label: t(PasswordPolicyLabel.MIN_LENGTH).replace('{minLength}', String(policy.minLength)),\n      passed: password.length >= policy.minLength,\n    });\n    items.push({\n      label: t(PasswordPolicyLabel.MAX_LENGTH).replace('{maxLength}', String(policy.maxLength)),\n      passed: password.length <= policy.maxLength,\n    });\n    if (policy.requireUppercase) {\n      items.push({ label: t(PasswordPolicyLabel.UPPERCASE), passed: /[A-Z]/.test(password) });\n    }\n    if (policy.requireLowercase) {\n      items.push({ label: t(PasswordPolicyLabel.LOWERCASE), passed: /[a-z]/.test(password) });\n    }\n    if (policy.requireNumbers) {\n      items.push({ label: t(PasswordPolicyLabel.NUMBER), passed: /\\d/.test(password) });\n    }\n    if (policy.requireSpecialChars) {\n      items.push({ label: t(PasswordPolicyLabel.SPECIAL_CHAR), passed: /[^A-Za-z0-9]/.test(password) });\n    }\n    // Unconditional, matching AuthUtils.validatePasswordAgainstPolicy: the blocklist is the one rule\n    // NIST SP 800-63B-4 §3.1.1.2 states with no configurable half, so an application cannot switch it\n    // off and this item is never absent. It is also the only item here that a longer password does not\n    // fix, which is why it is worth showing BEFORE the form is submitted rather than as a refusal after.\n    items.push({\n      label: t(PasswordPolicyLabel.BLOCKLISTED),\n      passed: !isPasswordBlocklisted(password, blocklistContext),\n    });\n\n    return items;\n  }, [password, policy, t, blocklistContext]);\n\n  if (!password || checks.length === 0) return null;\n\n  return (\n    <ul className=\"space-y-1 text-xs mt-item-xs\">\n      {checks.map((check, i) => (\n        <li key={i} className={`flex items-center gap-1.5 ${check.passed ? 'text-success' : 'text-muted-foreground'}`}>\n          {check.passed ? (\n            <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><path fillRule=\"evenodd\" d=\"M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z\" clipRule=\"evenodd\" /></svg>\n          ) : (\n            <svg className=\"w-3.5 h-3.5 shrink-0\" viewBox=\"0 0 20 20\" fill=\"currentColor\" aria-hidden=\"true\"><circle cx=\"10\" cy=\"10\" r=\"3\" /></svg>\n          )}\n          <span>{check.label}</span>\n        </li>\n      ))}\n    </ul>\n  );\n};\n"]}

package/dist/esm/components/auth/utils/oauth-provider-display-label.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-provider-display-label.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/oauth-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAEA,UAAU,4BAA4B;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,4BAA4B;IACpC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,EAAE,4BAA4B,CAAA;KAAE,GAAG,SAAS,CAAC;CACxF;AAED,MAAM,WAAW,qCAAqC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,yBAAyB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,MAAM,CAQR;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC5D,wBAAwB,CAAC,EAAE,4BAA4B,CAAC;CACzD,GAAG,wBAAwB,EAAE,CAmB7B"}
+{"version":3,"file":"oauth-provider-display-label.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/oauth-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAEA,UAAU,4BAA4B;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,4BAA4B;IACpC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,EAAE,4BAA4B,CAAA;KAAE,GAAG,SAAS,CAAC;CACxF;AAED,MAAM,WAAW,qCAAqC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,yBAAyB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,MAAM,CAQR;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC5D,wBAAwB,CAAC,EAAE,4BAA4B,CAAC;CACzD,GAAG,wBAAwB,EAAE,CAmB7B"}

package/dist/esm/components/auth/utils/oauth-provider-display-label.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-provider-display-label.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/oauth-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,4FAA4F,CAAC;AA8BjJ;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAA4C;IAE5C,OAAO,mCAAmC,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,aAAa,EAAE,KAAK,CAAC,UAAU;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAGjD;IACC,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE;QAC7B,MAAM,cAAc,GAAG,KAAK,CAAC,wBAAwB,EAAE,gBAAgB,CACrE,WAAW,CACZ,CAAC;QAEF,OAAO;YACL,GAAG,EAAE,WAAW;YAChB,WAAW;YACX,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,cAAc,EAAE,QAAQ,EAAE,WAAW;YACxE,mBAAmB,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB;SACnE,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["import { resolveFrontendProviderDisplayLabel } from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\n\ninterface FrontendProviderMetadataLike {\n  displayName?: string;\n  displayNameLabelKey?: string;\n}\n\ninterface FrontendProviderRegistryLike {\n  getProviderByRef(ref: string): { metadata?: FrontendProviderMetadataLike } | undefined;\n}\n\nexport interface ResolveOAuthProviderDisplayLabelInput {\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n  brandLabel?: string;\n  translate?: (key: string) => string;\n}\n\nexport interface PublicOAuthProviderEntry {\n  key: string;\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n}\n\ninterface PublicOAuthProviderConfig {\n  displayName?: string;\n}\n\n/**\n * Resolve the user-facing OAuth provider label without freezing raw copy into\n * the provider contract.\n *\n * Order of preference:\n * 1. Translation resolved from the provider label key.\n * 2. App-authored public auth `displayName` when present.\n * 3. Registry fallback `metadata.displayName` for legacy/well-known providers.\n * 4. Brand metadata fallback for well-known providers.\n * 5. Raw provider ref as the last-resort technical fallback.\n */\nexport function resolveOAuthProviderDisplayLabel(\n  input: ResolveOAuthProviderDisplayLabelInput,\n): string {\n  return resolveFrontendProviderDisplayLabel({\n    providerRef: input.providerRef,\n    displayName: input.displayName,\n    displayNameLabelKey: input.displayNameLabelKey,\n    fallbackLabel: input.brandLabel,\n    translate: input.translate,\n  });\n}\n\n/**\n * Merge the frontend-safe auth OAuth2 projection with the hydrated provider\n * registry so auth UIs can consume one normalized list.\n */\nexport function resolvePublicOAuthProviderEntries(input: {\n  publicProviders?: Record<string, PublicOAuthProviderConfig>;\n  frontendProviderRegistry?: FrontendProviderRegistryLike;\n}): PublicOAuthProviderEntry[] {\n  const publicProviders = input.publicProviders;\n  if (!publicProviders) {\n    return [];\n  }\n\n  return Object.entries(publicProviders)\n    .map(([providerRef, config]) => {\n      const providerModule = input.frontendProviderRegistry?.getProviderByRef(\n        providerRef,\n      );\n\n      return {\n        key: providerRef,\n        providerRef,\n        displayName: config.displayName ?? providerModule?.metadata?.displayName,\n        displayNameLabelKey: providerModule?.metadata?.displayNameLabelKey,\n      };\n    });\n}\n"]}
+{"version":3,"file":"oauth-provider-display-label.frontend.utils.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/oauth-provider-display-label.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,4FAA4F,CAAC;AA8BjJ;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAA4C;IAE5C,OAAO,mCAAmC,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,aAAa,EAAE,KAAK,CAAC,UAAU;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAGjD;IACC,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE;QAC7B,MAAM,cAAc,GAAG,KAAK,CAAC,wBAAwB,EAAE,gBAAgB,CACrE,WAAW,CACZ,CAAC;QAEF,OAAO;YACL,GAAG,EAAE,WAAW;YAChB,WAAW;YACX,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,cAAc,EAAE,QAAQ,EAAE,WAAW;YACxE,mBAAmB,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB;SACnE,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["import { resolveFrontendProviderDisplayLabel } from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\n\ninterface FrontendProviderMetadataLike {\n  displayName?: string;\n  displayNameLabelKey?: string;\n}\n\ninterface FrontendProviderRegistryLike {\n  getProviderByRef(ref: string): { metadata?: FrontendProviderMetadataLike } | undefined;\n}\n\nexport interface ResolveOAuthProviderDisplayLabelInput {\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n  brandLabel?: string;\n  translate?: (key: string) => string;\n}\n\nexport interface PublicOAuthProviderEntry {\n  key: string;\n  providerRef: string;\n  displayName?: string;\n  displayNameLabelKey?: string;\n}\n\ninterface PublicOAuthProviderConfig {\n  displayName?: string;\n}\n\n/**\n * Resolve the user-facing OAuth provider label without freezing raw copy into\n * the provider contract.\n *\n * Order of preference:\n * 1. Translation resolved from the provider label key.\n * 2. App-authored public auth `displayName` when present.\n * 3. Registry fallback `metadata.displayName` for legacy/well-known providers.\n * 4. Brand metadata fallback for well-known providers.\n * 5. Raw provider ref as the last-resort technical fallback.\n */\nexport function resolveOAuthProviderDisplayLabel(\n  input: ResolveOAuthProviderDisplayLabelInput,\n): string {\n  return resolveFrontendProviderDisplayLabel({\n    providerRef: input.providerRef,\n    displayName: input.displayName,\n    displayNameLabelKey: input.displayNameLabelKey,\n    fallbackLabel: input.brandLabel,\n    translate: input.translate,\n  });\n}\n\n/**\n * Merge the frontend-safe auth OAuth2 projection with the hydrated provider\n * registry so auth UIs can consume one normalized list.\n */\nexport function resolvePublicOAuthProviderEntries(input: {\n  publicProviders?: Record<string, PublicOAuthProviderConfig>;\n  frontendProviderRegistry?: FrontendProviderRegistryLike;\n}): PublicOAuthProviderEntry[] {\n  const publicProviders = input.publicProviders;\n  if (!publicProviders) {\n    return [];\n  }\n\n  return Object.entries(publicProviders)\n    .map(([providerRef, config]) => {\n      const providerModule = input.frontendProviderRegistry?.getProviderByRef(\n        providerRef,\n      );\n\n      return {\n        key: providerRef,\n        providerRef,\n        displayName: config.displayName ?? providerModule?.metadata?.displayName,\n        displayNameLabelKey: providerModule?.metadata?.displayNameLabelKey,\n      };\n    });\n}\n"]}

package/dist/esm/components/auth/utils/resolvePasswordViolationsToLabels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolvePasswordViolationsToLabels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/utils/resolvePasswordViolationsToLabels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGjE;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAAE,EACpB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAC1B,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,WAAW,CAAC,GAC3D,MAAM,EAAE,CAWV;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAC1B,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,WAAW,CAAC,GAC3D,MAAM,GAAG,IAAI,CAaf"}
+{"version":3,"file":"resolvePasswordViolationsToLabels.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/resolvePasswordViolationsToLabels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGjE;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAAE,EACpB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAC1B,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,WAAW,CAAC,GAC3D,MAAM,EAAE,CAWV;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAC1B,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,WAAW,CAAC,GAC3D,MAAM,GAAG,IAAI,CAaf"}

package/dist/esm/components/auth/utils/resolvePasswordViolationsToLabels.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolvePasswordViolationsToLabels.js","sourceRoot":"","sources":["../../../../../src/components/auth/utils/resolvePasswordViolationsToLabels.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEjG;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,UAAoB,EACpB,CAA0B,EAC1B,MAA4D;IAE5D,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,CAA0B,EAC1B,MAA4D;IAE5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,OAA6B,CAAC;IAC9C,IAAI,GAAG,KAAK,2BAA2B,CAAC,oCAAoC;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,GAAG,GAAG,GAAG,CAAC,OAAwF,CAAC;IACzG,MAAM,UAAU,GAAG,GAAG,EAAE,UAAU,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,iBAAiB,GAAG;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC;QACjD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;KACpD,CAAC;IACF,OAAO,iCAAiC,CAAC,UAAU,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC","sourcesContent":["import type { PasswordPolicyRules } from '@wildo-ai/saas-models';\nimport { ErrorCustomMessageReference, PasswordPolicyViolationCode } from '@wildo-ai/saas-models';\n\n/**\n * Resolve password policy violation codes (i18n label keys) to display strings.\n * Used for both client-side and server-side validation errors.\n *\n * @param violations - Array of violation codes from AuthUtils.validatePasswordAgainstPolicy or backend error context\n * @param t - Translation function (e.g. tComponent(componentType, key))\n * @param policy - Password policy for {minLength}/{maxLength} placeholder replacement\n */\nexport function resolvePasswordViolationsToLabels(\n  violations: string[],\n  t: (key: string) => string,\n  policy: Pick<PasswordPolicyRules, 'minLength' | 'maxLength'>,\n): string[] {\n  return violations.map((code) => {\n    const translated = t(code);\n    if (code === PasswordPolicyViolationCode.MIN_LENGTH) {\n      return translated.replace('{minLength}', String(policy.minLength ?? 8));\n    }\n    if (code === PasswordPolicyViolationCode.MAX_LENGTH) {\n      return translated.replace('{maxLength}', String(policy.maxLength ?? 128));\n    }\n    return translated;\n  });\n}\n\n/**\n * Extract i18n-resolved password policy error message from an API error.\n * Returns the display string when the error is VALIDATION_PASSWORD_POLICY_VIOLATION with context.violations.\n *\n * @param error - Caught error from HTTP client (has message, context from backend)\n * @param t - Translation function\n * @param policy - Password policy for placeholder replacement (fallback if context lacks minLength/maxLength)\n */\nexport function extractPasswordPolicyErrorMessage(\n  error: unknown,\n  t: (key: string) => string,\n  policy: Pick<PasswordPolicyRules, 'minLength' | 'maxLength'>,\n): string | null {\n  if (!error || typeof error !== 'object') return null;\n  const err = error as Record<string, unknown>;\n  const msg = err.message as string | undefined;\n  if (msg !== ErrorCustomMessageReference.VALIDATION_PASSWORD_POLICY_VIOLATION) return null;\n  const ctx = err.context as { violations?: string[]; minLength?: number; maxLength?: number } | undefined;\n  const violations = ctx?.violations;\n  if (!Array.isArray(violations) || violations.length === 0) return null;\n  const policyFromContext = {\n    minLength: ctx.minLength ?? policy.minLength ?? 8,\n    maxLength: ctx.maxLength ?? policy.maxLength ?? 128,\n  };\n  return resolvePasswordViolationsToLabels(violations, t, policyFromContext).join('. ');\n}\n"]}
+{"version":3,"file":"resolvePasswordViolationsToLabels.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/resolvePasswordViolationsToLabels.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEjG;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,UAAoB,EACpB,CAA0B,EAC1B,MAA4D;IAE5D,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,CAA0B,EAC1B,MAA4D;IAE5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,OAA6B,CAAC;IAC9C,IAAI,GAAG,KAAK,2BAA2B,CAAC,oCAAoC;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,GAAG,GAAG,GAAG,CAAC,OAAwF,CAAC;IACzG,MAAM,UAAU,GAAG,GAAG,EAAE,UAAU,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,iBAAiB,GAAG;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC;QACjD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;KACpD,CAAC;IACF,OAAO,iCAAiC,CAAC,UAAU,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC","sourcesContent":["import type { PasswordPolicyRules } from '@wildo-ai/saas-models';\nimport { ErrorCustomMessageReference, PasswordPolicyViolationCode } from '@wildo-ai/saas-models';\n\n/**\n * Resolve password policy violation codes (i18n label keys) to display strings.\n * Used for both client-side and server-side validation errors.\n *\n * @param violations - Array of violation codes from AuthUtils.validatePasswordAgainstPolicy or backend error context\n * @param t - Translation function (e.g. tComponent(componentType, key))\n * @param policy - Password policy for {minLength}/{maxLength} placeholder replacement\n */\nexport function resolvePasswordViolationsToLabels(\n  violations: string[],\n  t: (key: string) => string,\n  policy: Pick<PasswordPolicyRules, 'minLength' | 'maxLength'>,\n): string[] {\n  return violations.map((code) => {\n    const translated = t(code);\n    if (code === PasswordPolicyViolationCode.MIN_LENGTH) {\n      return translated.replace('{minLength}', String(policy.minLength ?? 8));\n    }\n    if (code === PasswordPolicyViolationCode.MAX_LENGTH) {\n      return translated.replace('{maxLength}', String(policy.maxLength ?? 128));\n    }\n    return translated;\n  });\n}\n\n/**\n * Extract i18n-resolved password policy error message from an API error.\n * Returns the display string when the error is VALIDATION_PASSWORD_POLICY_VIOLATION with context.violations.\n *\n * @param error - Caught error from HTTP client (has message, context from backend)\n * @param t - Translation function\n * @param policy - Password policy for placeholder replacement (fallback if context lacks minLength/maxLength)\n */\nexport function extractPasswordPolicyErrorMessage(\n  error: unknown,\n  t: (key: string) => string,\n  policy: Pick<PasswordPolicyRules, 'minLength' | 'maxLength'>,\n): string | null {\n  if (!error || typeof error !== 'object') return null;\n  const err = error as Record<string, unknown>;\n  const msg = err.message as string | undefined;\n  if (msg !== ErrorCustomMessageReference.VALIDATION_PASSWORD_POLICY_VIOLATION) return null;\n  const ctx = err.context as { violations?: string[]; minLength?: number; maxLength?: number } | undefined;\n  const violations = ctx?.violations;\n  if (!Array.isArray(violations) || violations.length === 0) return null;\n  const policyFromContext = {\n    minLength: ctx.minLength ?? policy.minLength ?? 8,\n    maxLength: ctx.maxLength ?? policy.maxLength ?? 128,\n  };\n  return resolvePasswordViolationsToLabels(violations, t, policyFromContext).join('. ');\n}\n"]}

package/dist/esm/components/auth/utils/useMfaContinuationNavigation.d.ts

@@ -0,0 +1,32 @@
+export interface MfaContinuationNavigationInput {
+    /** `auth.mfaRequired` — the auth context holds a session that still owes a second factor. */
+    readonly mfaRequired: boolean;
+    /** `auth.mfaSessionId` — the session the challenge or the enrollment is performed on. */
+    readonly mfaSessionId: string | null;
+    /** `auth.usableSecondFactorMethods` — whether a challenge can actually run. */
+    readonly usableSecondFactorMethods: readonly string[];
+    /** The address the challenge screen pre-fills; unused when routing to enrollment. */
+    readonly email: string | undefined;
+    /** The post-auth deep link to carry through the detour, from `extractAuthRedirectFromSearch`. */
+    readonly authRedirectTarget: string | undefined;
+}
+/**
+ * Where a screen sends a person whose auth context now holds a session that owes a second factor.
+ *
+ * Extracted from the LOGIN screen (`Auth_Main`) so registration routes the same state the same way
+ * (#972) instead of re-deriving it. The inline copies this replaced drifted on PRECEDENCE: some asked
+ * `availableEnrollmentMethods.length > 0` and routed to enrollment first, others asked whether anything
+ * was usable. Those agreed only while the backend populated `availableEnrollmentMethods` solely on its
+ * enrollment branch; once it was populated on every MFA-required session, the first question sent a user
+ * with a working factor to enrollment. Once every copy asked the usable-factor question, they still
+ * differed on the redirect target: only the login screen carried it through the detour. The question
+ * here is the settled one:
+ *
+ * - nothing USABLE (`usableSecondFactorMethods` empty) → the enrollment gate, which enrolls on the
+ *   session and, for a registration or invitation session, completes it and signs the person in;
+ * - otherwise → the challenge for that session.
+ *
+ * The redirect target rides both detours, so a deep link survives sign-up exactly as it survives sign-in.
+ */
+export declare function useMfaContinuationNavigation({ mfaRequired, mfaSessionId, usableSecondFactorMethods, email, authRedirectTarget, }: MfaContinuationNavigationInput): void;
+//# sourceMappingURL=useMfaContinuationNavigation.d.ts.map

package/dist/esm/components/auth/utils/useMfaContinuationNavigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMfaContinuationNavigation.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/useMfaContinuationNavigation.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,8BAA8B;IAC7C,6FAA6F;IAC7F,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,yBAAyB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtD,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,iGAAiG;IACjG,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,KAAK,EACL,kBAAkB,GACnB,EAAE,8BAA8B,GAAG,IAAI,CA4BvC"}

package/dist/esm/components/auth/utils/useMfaContinuationNavigation.js

@@ -0,0 +1,44 @@
+import { useEffect } from 'react';
+import { useNavigate } from 'react-router-dom';
+import { CommonRoutePaths } from '../../../core/runtime/routes.frontend.definitions.js';
+import { appendAuthRedirectToPath } from '../../../core/security/auth-redirect.frontend.utils.js';
+/**
+ * Where a screen sends a person whose auth context now holds a session that owes a second factor.
+ *
+ * Extracted from the LOGIN screen (`Auth_Main`) so registration routes the same state the same way
+ * (#972) instead of re-deriving it. The inline copies this replaced drifted on PRECEDENCE: some asked
+ * `availableEnrollmentMethods.length > 0` and routed to enrollment first, others asked whether anything
+ * was usable. Those agreed only while the backend populated `availableEnrollmentMethods` solely on its
+ * enrollment branch; once it was populated on every MFA-required session, the first question sent a user
+ * with a working factor to enrollment. Once every copy asked the usable-factor question, they still
+ * differed on the redirect target: only the login screen carried it through the detour. The question
+ * here is the settled one:
+ *
+ * - nothing USABLE (`usableSecondFactorMethods` empty) → the enrollment gate, which enrolls on the
+ *   session and, for a registration or invitation session, completes it and signs the person in;
+ * - otherwise → the challenge for that session.
+ *
+ * The redirect target rides both detours, so a deep link survives sign-up exactly as it survives sign-in.
+ */
+export function useMfaContinuationNavigation({ mfaRequired, mfaSessionId, usableSecondFactorMethods, email, authRedirectTarget, }) {
+    const navigate = useNavigate();
+    useEffect(() => {
+        if (!mfaRequired || !mfaSessionId)
+            return;
+        if (usableSecondFactorMethods.length === 0) {
+            /*
+             * No session in this URL, deliberately. A session reaching the gate from here was produced by a
+             * call in this tab and lives in the auth context; a registration or invitation session among them
+             * issues tokens when a factor is enrolled and lives 24h, so writing its id into the address bar
+             * would put it in history and request logs on the ordinary path. The challenge's hand-off carries
+             * the session only because the challenge was itself loaded from a URL that already did (#1033).
+             * A reload of the gate after THIS arrival recovers the session from the tab-scoped copy the auth
+             * provider keeps instead (`pending-mfa-session-storage.frontend.utils.ts`, #1068).
+             */
+            navigate(appendAuthRedirectToPath(CommonRoutePaths.enrollmentRequired, authRedirectTarget), { replace: true });
+            return;
+        }
+        navigate(appendAuthRedirectToPath(`${CommonRoutePaths.mfaChallenge}?sessionId=${mfaSessionId}&email=${encodeURIComponent(email || '')}`, authRedirectTarget), { replace: true });
+    }, [mfaRequired, mfaSessionId, usableSecondFactorMethods, navigate, email, authRedirectTarget]);
+}
+//# sourceMappingURL=useMfaContinuationNavigation.js.map

package/dist/esm/components/auth/utils/useMfaContinuationNavigation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMfaContinuationNavigation.js","sourceRoot":"","sources":["../../../../../../src/components/auth/utils/useMfaContinuationNavigation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAe1G;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAAC,EAC3C,WAAW,EACX,YAAY,EACZ,yBAAyB,EACzB,KAAK,EACL,kBAAkB,GACa;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;YAAE,OAAO;QAE1C,IAAI,yBAAyB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C;;;;;;;;eAQG;YACH,QAAQ,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,QAAQ,CACN,wBAAwB,CACtB,GAAG,gBAAgB,CAAC,YAAY,cAAc,YAAY,UAAU,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EACrG,kBAAkB,CACnB,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,yBAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAClG,CAAC","sourcesContent":["import { useEffect } from 'react';\nimport { useNavigate } from 'react-router-dom';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { appendAuthRedirectToPath } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\nexport interface MfaContinuationNavigationInput {\n  /** `auth.mfaRequired` — the auth context holds a session that still owes a second factor. */\n  readonly mfaRequired: boolean;\n  /** `auth.mfaSessionId` — the session the challenge or the enrollment is performed on. */\n  readonly mfaSessionId: string | null;\n  /** `auth.usableSecondFactorMethods` — whether a challenge can actually run. */\n  readonly usableSecondFactorMethods: readonly string[];\n  /** The address the challenge screen pre-fills; unused when routing to enrollment. */\n  readonly email: string | undefined;\n  /** The post-auth deep link to carry through the detour, from `extractAuthRedirectFromSearch`. */\n  readonly authRedirectTarget: string | undefined;\n}\n\n/**\n * Where a screen sends a person whose auth context now holds a session that owes a second factor.\n *\n * Extracted from the LOGIN screen (`Auth_Main`) so registration routes the same state the same way\n * (#972) instead of re-deriving it. The inline copies this replaced drifted on PRECEDENCE: some asked\n * `availableEnrollmentMethods.length > 0` and routed to enrollment first, others asked whether anything\n * was usable. Those agreed only while the backend populated `availableEnrollmentMethods` solely on its\n * enrollment branch; once it was populated on every MFA-required session, the first question sent a user\n * with a working factor to enrollment. Once every copy asked the usable-factor question, they still\n * differed on the redirect target: only the login screen carried it through the detour. The question\n * here is the settled one:\n *\n * - nothing USABLE (`usableSecondFactorMethods` empty) → the enrollment gate, which enrolls on the\n *   session and, for a registration or invitation session, completes it and signs the person in;\n * - otherwise → the challenge for that session.\n *\n * The redirect target rides both detours, so a deep link survives sign-up exactly as it survives sign-in.\n */\nexport function useMfaContinuationNavigation({\n  mfaRequired,\n  mfaSessionId,\n  usableSecondFactorMethods,\n  email,\n  authRedirectTarget,\n}: MfaContinuationNavigationInput): void {\n  const navigate = useNavigate();\n\n  useEffect(() => {\n    if (!mfaRequired || !mfaSessionId) return;\n\n    if (usableSecondFactorMethods.length === 0) {\n      /*\n       * No session in this URL, deliberately. A session reaching the gate from here was produced by a\n       * call in this tab and lives in the auth context; a registration or invitation session among them\n       * issues tokens when a factor is enrolled and lives 24h, so writing its id into the address bar\n       * would put it in history and request logs on the ordinary path. The challenge's hand-off carries\n       * the session only because the challenge was itself loaded from a URL that already did (#1033).\n       * A reload of the gate after THIS arrival recovers the session from the tab-scoped copy the auth\n       * provider keeps instead (`pending-mfa-session-storage.frontend.utils.ts`, #1068).\n       */\n      navigate(appendAuthRedirectToPath(CommonRoutePaths.enrollmentRequired, authRedirectTarget), { replace: true });\n      return;\n    }\n\n    navigate(\n      appendAuthRedirectToPath(\n        `${CommonRoutePaths.mfaChallenge}?sessionId=${mfaSessionId}&email=${encodeURIComponent(email || '')}`,\n        authRedirectTarget,\n      ),\n      { replace: true },\n    );\n  }, [mfaRequired, mfaSessionId, usableSecondFactorMethods, navigate, email, authRedirectTarget]);\n}\n"]}

package/dist/esm/components/billing/billing-invoice-history.d.ts

@@ -14,6 +14,7 @@ export interface InvoiceHistoryProps {
     invoices: InvoiceHistoryItem[];
     providerName?: string;
     isLoading?: boolean;
+    unavailable?: boolean;
     error?: string | null;
     onViewAll?: () => void;
     limit?: number;

package/dist/esm/components/billing/billing-invoice-history.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-invoice-history.d.ts","sourceRoot":"","sources":["../../../../src/components/billing/billing-invoice-history.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AAGzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAA;AAW5H,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7D,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;CAMzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAID;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAC5E,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,GAC9C,oBAAoB,CAAA;AAEtB,wBAAgB,cAAc,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,0BAA0B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA+B5H"}
+{"version":3,"file":"billing-invoice-history.d.ts","sourceRoot":"","sources":["../../../../../src/components/billing/billing-invoice-history.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAA;AAGzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAA;AAY5H,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7D,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;CAMzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAID;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAC5E,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,GAC9C,oBAAoB,CAAA;AAEtB,wBAAgB,cAAc,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,0BAA0B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAkC5H"}