@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/components/app/PublicLayout_StaticContentContainer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicLayout_StaticContentContainer.d.ts","sourceRoot":"","sources":["../../../../src/components/app/PublicLayout_StaticContentContainer.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAA;AAKvH,MAAM,WAAW,sDAAsD;IACrE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B;AAED,eAAO,MAAM,iDAAiD,GAAI,cAAqB,sDAAsD,KAAG,KAAK,CAAC,GAAG,CAAC,OAMzJ,CAAC;AAEF,wBAAgB,mCAAmC,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,sDAAsD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGpM"}
+{"version":3,"file":"PublicLayout_StaticContentContainer.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_StaticContentContainer.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAA;AAKvH,MAAM,WAAW,sDAAsD;IACrE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B;AAED,eAAO,MAAM,iDAAiD,GAAI,cAAqB,sDAAsD,KAAG,KAAK,CAAC,GAAG,CAAC,OAMzJ,CAAC;AAEF,wBAAgB,mCAAmC,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,sDAAsD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGpM"}

package/dist/esm/components/app/PublicLayout_StaticContentContainer.js.map

@@ -1 +1 @@
-{"version":3,"file":"PublicLayout_StaticContentContainer.js","sourceRoot":"","sources":["../../../../src/components/app/PublicLayout_StaticContentContainer.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAE3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAA;AACzH,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAO5F,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,EAA0D,EAAqB,EAAE;IAClK,OAAO,CACL,KAAC,0BAA0B,oEAEE,CAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,mCAAmC,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAiF;IAC/K,MAAM,SAAS,GAAG,uBAAuB,CAAyD,qBAAqB,CAAC,uCAAuC,EAAE,qCAAqC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChN,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas'\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper'\nimport { CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models'\n\n// --- Contract ---\nexport interface PublicLayoutPreset_StaticContentContainer_DefaultProps {\n  children?: React.ReactNode;\n}\n\nexport const PublicLayoutPreset_StaticContentContainer_Default = ({ children = null }: PublicLayoutPreset_StaticContentContainer_DefaultProps): React.JSX.Element => {\n  return (\n    <PublicLayout_MainContainer>\n      PublicLayoutPreset_StaticContentContainer_Default\n    </PublicLayout_MainContainer>\n  );\n};\n\nexport function PublicLayout_StaticContentContainer({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_StaticContentContainer_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_StaticContentContainer_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_STATIC_CONTENT_CONTAINER, 'PublicLayout_StaticContentContainer')(preset);\n  return <Component {...props} />;\n}\n"]}
+{"version":3,"file":"PublicLayout_StaticContentContainer.js","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_StaticContentContainer.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAE3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAA;AACzH,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAO5F,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,EAA0D,EAAqB,EAAE;IAClK,OAAO,CACL,KAAC,0BAA0B,oEAEE,CAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,mCAAmC,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAiF;IAC/K,MAAM,SAAS,GAAG,uBAAuB,CAAyD,qBAAqB,CAAC,uCAAuC,EAAE,qCAAqC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChN,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas'\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper'\nimport { CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models'\n\n// --- Contract ---\nexport interface PublicLayoutPreset_StaticContentContainer_DefaultProps {\n  children?: React.ReactNode;\n}\n\nexport const PublicLayoutPreset_StaticContentContainer_Default = ({ children = null }: PublicLayoutPreset_StaticContentContainer_DefaultProps): React.JSX.Element => {\n  return (\n    <PublicLayout_MainContainer>\n      PublicLayoutPreset_StaticContentContainer_Default\n    </PublicLayout_MainContainer>\n  );\n};\n\nexport function PublicLayout_StaticContentContainer({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_StaticContentContainer_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_StaticContentContainer_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_STATIC_CONTENT_CONTAINER, 'PublicLayout_StaticContentContainer')(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/app/PublicLayout_StaticContentContainer.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicLayout_StaticContentContainer.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/app/PublicLayout_StaticContentContainer.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM/H,eAAO,MAAM,yCAAyC,EAAE,mBAAmB,EAAO,CAAC"}
+{"version":3,"file":"PublicLayout_StaticContentContainer.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_StaticContentContainer.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM/H,eAAO,MAAM,yCAAyC,EAAE,mBAAmB,EAAO,CAAC"}

package/dist/esm/components/app/PublicLayout_StaticContentContainer.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"PublicLayout_StaticContentContainer.labels.js","sourceRoot":"","sources":["../../../../src/components/app/PublicLayout_StaticContentContainer.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE/H,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,yCAAyC,GAA0B,EAAE,CAAC;AACnF,uBAAuB,CAAC,qBAAqB,CAAC,uCAAuC,EAAE,yCAAyC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + (where\n// authored) per-key purpose / kind / variable meaning. Statically scanned by\n// the dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsStaticContentContainerLabels: LabellingUnitaryDef[] = [];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_STATIC_CONTENT_CONTAINER, PublicLayoutsStaticContentContainerLabels);\n"]}
+{"version":3,"file":"PublicLayout_StaticContentContainer.labels.js","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_StaticContentContainer.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE/H,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,yCAAyC,GAA0B,EAAE,CAAC;AACnF,uBAAuB,CAAC,qBAAqB,CAAC,uCAAuC,EAAE,yCAAyC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + (where\n// authored) per-key purpose / kind / variable meaning. Statically scanned by\n// the dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsStaticContentContainerLabels: LabellingUnitaryDef[] = [];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_STATIC_CONTENT_CONTAINER, PublicLayoutsStaticContentContainerLabels);\n"]}

package/dist/esm/components/app/PublicLayout_Terms.d.ts

@@ -0,0 +1,59 @@
+import React from 'react';
+import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas';
+/**
+ * The public governed-document page — `/privacy`, `/terms`. Issue #168.
+ *
+ * ## What this slot was before today
+ *
+ * `FrontendComponentType.PUBLIC_LAYOUTS_TERMS` existed, with a label bundle, a frontend-component
+ * specification, two route PATHS declared in `CommonRoutePaths`, and a labelling step that ran in
+ * both example applications on every generation — and **no component, no preset and no registered
+ * route**. Every application's Tier-1 registry-completeness check reported the same single missing
+ * entry, forever, so the next genuinely missing preset would have been the second line of a warning
+ * people had learned to skim.
+ *
+ * The reason it stayed that way is recorded in `governed-documents.shared.schemas.ts`: the sealed
+ * delivery machine this page would have read from was removed on 2026-08-28, and what replaced it
+ * was "nothing yet, deliberately — when an application actually has a document to serve, the serving
+ * is rebuilt from those files: a read, not a custody protocol." This is that read.
+ *
+ * ## Where the document comes from
+ *
+ * The application's own configuration, at `compliance.publicDocuments` — each entry a RELEASED
+ * document (a recorded release with the text it was recorded with) or, where a public document was
+ * never released, its latest UNRELEASED_DRAFT. Both are deliberately-narrow PUBLIC projections that
+ * withhold `governanceScope` and `approvalDecisions`. `wildo config document-releases` writes them
+ * from the compliance lane's recorded releases and landed drafts, so the page is a rendering of the
+ * specification rather than a second description of it: nothing here is authored by hand in a template.
+ *
+ * That payload already reaches an unauthenticated browser (the registration form's consent control
+ * reads its sibling `governedDocumentReleases` the same way), so the page needs no endpoint of its
+ * own and cannot show a release whose bytes an application did not commit.
+ *
+ * ## Fail closed, and what that means precisely
+ *
+ * A page that renders NOTHING when it cannot find an in-force document is the whole contract, and it
+ * is why the label bundle has an unavailable title and description rather than only a body. There is
+ * no partial rendering: a legal statement half-shown is worse than one not shown, because a reader
+ * cannot tell which half is missing.
+ *
+ * What it does NOT do is refuse an UNAPPROVED release by default. The application's approval gate,
+ * `compliance.governedDocumentApprovalGate`, is the gate point. It is one configuration member read by
+ * this page AND by every surface that asks a person to accept a document, so the two cannot be armed
+ * separately (#1565), and arming it is part of Gate 3's membership test — see
+ * `.claude/rules/one-source-of-truth.md` D5 and `application-creation-directive.md`. Serving is where
+ * the consequence is; composing is not.
+ */
+export interface PublicLayoutPreset_Terms_DefaultProps {
+    /**
+     * WHICH governed document this page shows — `document:public.privacy-notice`,
+     * `document:public.service-terms`.
+     *
+     * A prop rather than a route-derived constant because the slot is generic: one component serves
+     * every public document an application declares, and the ROUTE decides which. An application that
+     * adds a third public document adds a route, not a component.
+     */
+    documentRef: string;
+}
+export declare function PublicLayout_Terms({ preset, ...props }: PublicLayoutPreset_Terms_DefaultProps & ComponentPresetProps): React.JSX.Element;
+//# sourceMappingURL=PublicLayout_Terms.d.ts.map

package/dist/esm/components/app/PublicLayout_Terms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicLayout_Terms.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_Terms.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAIxH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,WAAW,qCAAqC;IACpD;;;;;;;OAOG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,qCAAqC,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGlK"}

package/dist/esm/components/app/PublicLayout_Terms.js

@@ -0,0 +1,8 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
+import { CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';
+export function PublicLayout_Terms({ preset = CorePresetNames.DEFAULT, ...props }) {
+    const Component = createComponentResolver(FrontendComponentType.PUBLIC_LAYOUTS_TERMS, 'PublicLayout_Terms')(preset);
+    return _jsx(Component, { ...props });
+}
+//# sourceMappingURL=PublicLayout_Terms.js.map

package/dist/esm/components/app/PublicLayout_Terms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicLayout_Terms.js","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_Terms.tsx"],"names":[],"mappings":";AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AA0D7F,MAAM,UAAU,kBAAkB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAgE;IAC7I,MAAM,SAAS,GAAG,uBAAuB,CAAwC,qBAAqB,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3J,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React from 'react';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';\n\n/**\n * The public governed-document page — `/privacy`, `/terms`. Issue #168.\n *\n * ## What this slot was before today\n *\n * `FrontendComponentType.PUBLIC_LAYOUTS_TERMS` existed, with a label bundle, a frontend-component\n * specification, two route PATHS declared in `CommonRoutePaths`, and a labelling step that ran in\n * both example applications on every generation — and **no component, no preset and no registered\n * route**. Every application's Tier-1 registry-completeness check reported the same single missing\n * entry, forever, so the next genuinely missing preset would have been the second line of a warning\n * people had learned to skim.\n *\n * The reason it stayed that way is recorded in `governed-documents.shared.schemas.ts`: the sealed\n * delivery machine this page would have read from was removed on 2026-08-28, and what replaced it\n * was \"nothing yet, deliberately — when an application actually has a document to serve, the serving\n * is rebuilt from those files: a read, not a custody protocol.\" This is that read.\n *\n * ## Where the document comes from\n *\n * The application's own configuration, at `compliance.publicDocuments` — each entry a RELEASED\n * document (a recorded release with the text it was recorded with) or, where a public document was\n * never released, its latest UNRELEASED_DRAFT. Both are deliberately-narrow PUBLIC projections that\n * withhold `governanceScope` and `approvalDecisions`. `wildo config document-releases` writes them\n * from the compliance lane's recorded releases and landed drafts, so the page is a rendering of the\n * specification rather than a second description of it: nothing here is authored by hand in a template.\n *\n * That payload already reaches an unauthenticated browser (the registration form's consent control\n * reads its sibling `governedDocumentReleases` the same way), so the page needs no endpoint of its\n * own and cannot show a release whose bytes an application did not commit.\n *\n * ## Fail closed, and what that means precisely\n *\n * A page that renders NOTHING when it cannot find an in-force document is the whole contract, and it\n * is why the label bundle has an unavailable title and description rather than only a body. There is\n * no partial rendering: a legal statement half-shown is worse than one not shown, because a reader\n * cannot tell which half is missing.\n *\n * What it does NOT do is refuse an UNAPPROVED release by default. The application's approval gate,\n * `compliance.governedDocumentApprovalGate`, is the gate point. It is one configuration member read by\n * this page AND by every surface that asks a person to accept a document, so the two cannot be armed\n * separately (#1565), and arming it is part of Gate 3's membership test — see\n * `.claude/rules/one-source-of-truth.md` D5 and `application-creation-directive.md`. Serving is where\n * the consequence is; composing is not.\n */\nexport interface PublicLayoutPreset_Terms_DefaultProps {\n  /**\n   * WHICH governed document this page shows — `document:public.privacy-notice`,\n   * `document:public.service-terms`.\n   *\n   * A prop rather than a route-derived constant because the slot is generic: one component serves\n   * every public document an application declares, and the ROUTE decides which. An application that\n   * adds a third public document adds a route, not a component.\n   */\n  documentRef: string;\n}\n\nexport function PublicLayout_Terms({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_Terms_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_Terms_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_TERMS, 'PublicLayout_Terms')(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/app/PublicLayout_Terms.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicLayout_Terms.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/app/PublicLayout_Terms.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAM7C,eAAO,MAAM,wBAAwB,EAAE,mBAAmB,EAuBzD,CAAC"}
+{"version":3,"file":"PublicLayout_Terms.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_Terms.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAM7C,eAAO,MAAM,wBAAwB,EAAE,mBAAmB,EAiCzD,CAAC"}

package/dist/esm/components/app/PublicLayout_Terms.labels.js

@@ -3,27 +3,37 @@ import { FrontendComponentType, LabelKind, PublicLayoutsTermsLabel, registerComp
 // authored) per-key purpose / kind / variable meaning. Statically scanned by
 // the dev companion; NOT imported at runtime, so it never ships in the bundle.
 export const PublicLayoutsTermsLabels = [
-    { ref: PublicLayoutsTermsLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Status shown while the exact published document release is being verified' },
+    { ref: PublicLayoutsTermsLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Status shown while the page prepares the governed document to display' },
     {
         ref: PublicLayoutsTermsLabel.UNAVAILABLE_TITLE,
         kind: LabelKind.HEADING,
-        purpose: 'Heading shown when no exact current approved publication can be safely rendered',
+        purpose: 'Heading shown when the application has no release in force and no draft of this document to display',
     },
     {
         ref: PublicLayoutsTermsLabel.UNAVAILABLE_DESCRIPTION,
         kind: LabelKind.DESCRIPTION,
-        purpose: 'Fail-closed explanation that the current published document is temporarily unavailable',
+        purpose: 'Explanation that this document is not available to read at the moment, shown instead of any partial content',
     },
     {
         ref: PublicLayoutsTermsLabel.EFFECTIVE_AT,
         kind: LabelKind.LABEL,
-        purpose: 'Label preceding the immutable release effective date',
+        purpose: 'Label preceding the date the displayed release takes effect',
     },
     {
         ref: PublicLayoutsTermsLabel.RELEASE_VERSION,
         kind: LabelKind.LABEL,
-        purpose: 'Label identifying the displayed immutable release version',
-        params: [{ key: 'releaseVersion', meaning: 'positive version number of the displayed immutable release' }],
+        purpose: 'Label identifying the version of the displayed release',
+        params: [{ key: 'releaseVersion', meaning: 'positive version number of the displayed release' }],
+    },
+    {
+        ref: PublicLayoutsTermsLabel.UNRELEASED_DRAFT_NOTICE,
+        kind: LabelKind.MESSAGE,
+        purpose: 'Warning above a document that has been drafted but never released: the reader is looking at a draft, which may change and has not taken effect',
+    },
+    {
+        ref: PublicLayoutsTermsLabel.CLAUSE_NOT_YET_ESTABLISHED,
+        kind: LabelKind.LABEL,
+        purpose: 'Short marker beneath a clause the document states is not yet established, immediately followed by a description of what is missing',
     },
 ];
 registerComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_TERMS, PublicLayoutsTermsLabels);

package/dist/esm/components/app/PublicLayout_Terms.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"PublicLayout_Terms.labels.js","sourceRoot":"","sources":["../../../../src/components/app/PublicLayout_Terms.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAA0B;IAC7D,EAAE,GAAG,EAAE,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2EAA2E,EAAE;IACvJ;QACE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB;QAC9C,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,iFAAiF;KAC3F;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,uBAAuB;QACpD,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,wFAAwF;KAClG;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,YAAY;QACzC,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,sDAAsD;KAChE;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,eAAe;QAC5C,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,2DAA2D;QACpE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;KAC3G;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC","sourcesContent":["import {\n  FrontendComponentType,\n  LabelKind,\n  PublicLayoutsTermsLabel,\n  type LabellingUnitaryDef,\n  registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + (where\n// authored) per-key purpose / kind / variable meaning. Statically scanned by\n// the dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsTermsLabels: LabellingUnitaryDef[] = [\n  { ref: PublicLayoutsTermsLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Status shown while the exact published document release is being verified' },\n  {\n    ref: PublicLayoutsTermsLabel.UNAVAILABLE_TITLE,\n    kind: LabelKind.HEADING,\n    purpose: 'Heading shown when no exact current approved publication can be safely rendered',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.UNAVAILABLE_DESCRIPTION,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Fail-closed explanation that the current published document is temporarily unavailable',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.EFFECTIVE_AT,\n    kind: LabelKind.LABEL,\n    purpose: 'Label preceding the immutable release effective date',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.RELEASE_VERSION,\n    kind: LabelKind.LABEL,\n    purpose: 'Label identifying the displayed immutable release version',\n    params: [{ key: 'releaseVersion', meaning: 'positive version number of the displayed immutable release' }],\n  },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_TERMS, PublicLayoutsTermsLabels);\n"]}
+{"version":3,"file":"PublicLayout_Terms.labels.js","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_Terms.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAA0B;IAC7D,EAAE,GAAG,EAAE,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACnJ;QACE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB;QAC9C,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,qGAAqG;KAC/G;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,uBAAuB;QACpD,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,6GAA6G;KACvH;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,YAAY;QACzC,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,6DAA6D;KACvE;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,eAAe;QAC5C,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;KACjG;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,uBAAuB;QACpD,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,gJAAgJ;KAC1J;IACD;QACE,GAAG,EAAE,uBAAuB,CAAC,0BAA0B;QACvD,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,oIAAoI;KAC9I;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC","sourcesContent":["import {\n  FrontendComponentType,\n  LabelKind,\n  PublicLayoutsTermsLabel,\n  type LabellingUnitaryDef,\n  registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + (where\n// authored) per-key purpose / kind / variable meaning. Statically scanned by\n// the dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsTermsLabels: LabellingUnitaryDef[] = [\n  { ref: PublicLayoutsTermsLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Status shown while the page prepares the governed document to display' },\n  {\n    ref: PublicLayoutsTermsLabel.UNAVAILABLE_TITLE,\n    kind: LabelKind.HEADING,\n    purpose: 'Heading shown when the application has no release in force and no draft of this document to display',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.UNAVAILABLE_DESCRIPTION,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Explanation that this document is not available to read at the moment, shown instead of any partial content',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.EFFECTIVE_AT,\n    kind: LabelKind.LABEL,\n    purpose: 'Label preceding the date the displayed release takes effect',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.RELEASE_VERSION,\n    kind: LabelKind.LABEL,\n    purpose: 'Label identifying the version of the displayed release',\n    params: [{ key: 'releaseVersion', meaning: 'positive version number of the displayed release' }],\n  },\n  {\n    ref: PublicLayoutsTermsLabel.UNRELEASED_DRAFT_NOTICE,\n    kind: LabelKind.MESSAGE,\n    purpose: 'Warning above a document that has been drafted but never released: the reader is looking at a draft, which may change and has not taken effect',\n  },\n  {\n    ref: PublicLayoutsTermsLabel.CLAUSE_NOT_YET_ESTABLISHED,\n    kind: LabelKind.LABEL,\n    purpose: 'Short marker beneath a clause the document states is not yet established, immediately followed by a description of what is missing',\n  },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_TERMS, PublicLayoutsTermsLabels);\n"]}

package/dist/esm/components/auth/Auth_AuthCallback.d.ts

@@ -10,7 +10,9 @@ export interface PublicLayoutPreset_AuthCallback_DefaultProps {
  *
  * Extracts the one-time `code` from URL query params, exchanges it for
  * access + refresh tokens via handleAuthCodeExchange, stores them,
- * then redirects to home (or shows error with link back to login).
+ * then redirects to home (or shows error with link back to login). A code the
+ * backend parked at organization onboarding (#1103) answers with the onboarding
+ * session instead, and this screen routes to the organization-onboarding step.
  *
  * All user-facing strings are i18n-driven via AuthCallbackLabel.
  */

package/dist/esm/components/auth/Auth_AuthCallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAepE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAMxH,MAAM,WAAW,4CAA4C;IAC3D,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uCAAuC,GAAI,wCAAwC,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OAoFxJ,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}
+{"version":3,"file":"Auth_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAiBpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAMxH,MAAM,WAAW,4CAA4C;IAC3D,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uCAAuC,GAAI,wCAAwC,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OA+FxJ,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}

package/dist/esm/components/auth/Auth_AuthCallback.js

@@ -2,11 +2,13 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { useEffect, useMemo, useRef, useState } from 'react';
 import { Navigate, useLocation } from 'react-router-dom';
 import { useAuthSession } from '../../core/security/useAuthSession.js';
+import { organizationOnboardingNavigationTarget } from '../../core/security/organization-onboarding.frontend.utils.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
+import { useUserFacingErrorMessage } from '../../core/errors/useUserFacingErrorMessage.js';
 import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
 import { Heading } from '../../components/typography/heading.js';
 import { Text } from '../../components/typography/text.js';
-import { Link } from '../../components/typography/link.js';
+import { AuthSecondaryLink } from '../../components/auth/utils/AuthSecondaryLink.js';
 import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
 import { appendAuthRedirectToPath, extractAuthRedirectFromSearch, resolvePostAuthRedirect, } from '../../core/security/auth-redirect.frontend.utils.js';
 import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
@@ -17,13 +19,16 @@ import { LoadingSpinner } from '../../components/feedback/loading-spinner.js';
  *
  * Extracts the one-time `code` from URL query params, exchanges it for
  * access + refresh tokens via handleAuthCodeExchange, stores them,
- * then redirects to home (or shows error with link back to login).
+ * then redirects to home (or shows error with link back to login). A code the
+ * backend parked at organization onboarding (#1103) answers with the onboarding
+ * session instead, and this screen routes to the organization-onboarding step.
  *
  * All user-facing strings are i18n-driven via AuthCallbackLabel.
  */
 export const PublicLayoutPreset_AuthCallback_Default = ({ code, errorParam, errorDescription }) => {
     const { handleAuthCodeExchange, auth } = useAuthSession();
     const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK });
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const location = useLocation();
     const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, key);
     const redirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);
@@ -36,7 +41,9 @@ export const PublicLayoutPreset_AuthCallback_Default = ({ code, errorParam, erro
             return;
         if (errorParam) {
             exchangeAttemptedRef.current = true;
-            setError(errorDescription || errorParam || t(AuthCallbackLabel.ERROR_GENERIC));
+            // The provider's `error` / `error_description` are never shown: they are the provider's untranslated
+            // developer text, and they arrive in the URL, so anyone can put words on this screen by editing a link.
+            setError(t(AuthCallbackLabel.ERROR_GENERIC));
             return;
         }
         if (!code) {
@@ -44,22 +51,29 @@ export const PublicLayoutPreset_AuthCallback_Default = ({ code, errorParam, erro
             setError(t(AuthCallbackLabel.ERROR_NO_CODE));
             return;
         }
-        if (auth.accessToken) {
+        // Already signed in, or already parked at organization onboarding (#1103): the code has nothing left to do,
+        // and redeeming it again could only fail as a spent code.
+        if (auth.accessToken || auth.onboardingSessionId) {
             exchangeAttemptedRef.current = true;
             return;
         }
         exchangeAttemptedRef.current = true;
         handleAuthCodeExchange(code).catch((e) => {
-            setError(e?.message || t(AuthCallbackLabel.ERROR_EXCHANGE_FAILED));
+            setError(toUserFacingErrorMessage(e, t(AuthCallbackLabel.ERROR_EXCHANGE_FAILED)));
         });
-    }, [code, errorParam, errorDescription, auth.accessToken, handleAuthCodeExchange]); // eslint-disable-line react-hooks/exhaustive-deps
+    }, [code, errorParam, errorDescription, auth.accessToken, auth.onboardingSessionId, handleAuthCodeExchange]); // eslint-disable-line react-hooks/exhaustive-deps
+    // Parked at organization onboarding (#1103): a federated sign-in whose account still owes its organization.
+    const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, redirectTarget);
+    if (organizationOnboardingTarget) {
+        return _jsx(Navigate, { to: organizationOnboardingTarget, replace: true });
+    }
     if (auth.accessToken && !auth.isLoading) {
         return _jsx(Navigate, { to: postAuthRedirect, replace: true });
     }
     if (!isReady)
         return null;
     if (error) {
-        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(AuthCallbackLabel.ERROR_TITLE) })] }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(Link, { href: loginPath, children: t(AuthCallbackLabel.LOGIN_LINK) }) })] }));
+        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(AuthCallbackLabel.ERROR_TITLE) })] }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(AuthSecondaryLink, { href: loginPath, children: t(AuthCallbackLabel.LOGIN_LINK) }) })] }));
     }
     return (_jsxs("div", { role: "status", "aria-live": "polite", className: "text-center space-y-item-xs", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element", "aria-hidden": "true", children: _jsx(LoadingSpinner, { size: 24, className: "text-primary" }) }), _jsx(Text, { className: "max-w-sm mx-auto", children: t(AuthCallbackLabel.VERIFYING) })] }));
 };

package/dist/esm/components/auth/Auth_AuthCallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_AuthCallback.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_AuthCallback.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAChH,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AASzF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAgD,EAAqB,EAAE;IACjK,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,EACtE,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,oBAAoB,CAAC,OAAO;YAAE,OAAO;QAEzC,IAAI,UAAU,EAAE,CAAC;YACf,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,QAAQ,CAAC,gBAAgB,IAAI,UAAU,IAAI,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,OAAO;QACT,CAAC;QAED,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpC,sBAAsB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;YAC5C,QAAQ,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,kDAAkD;IAEtI,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,cAAK,SAAS,EAAC,8FAA8F,YAC3G,cAAK,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,YAC7G,eAAM,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,EAAC,sBAAsB,GAAG,GAC1E,GACF,EACN,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAW,IACjD,EACN,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,EACR,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAQ,GAC3D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,SAAS,EAAC,6BAA6B,aAC3E,cAAK,SAAS,EAAC,0FAA0F,iBAAa,MAAM,YAC1H,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,cAAc,GAAG,GACjD,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IACtE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACzK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport {\n  appendAuthRedirectToPath,\n  extractAuthRedirectFromSearch,\n  resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { AuthCallbackLabel, CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\n\n// --- Contract ---\nexport interface PublicLayoutPreset_AuthCallback_DefaultProps {\n  code?: string | null;\n  errorParam?: string | null;\n  errorDescription?: string | null;\n}\n\n/**\n * OAuth2 / SAML callback exchange default preset.\n *\n * Extracts the one-time `code` from URL query params, exchanges it for\n * access + refresh tokens via handleAuthCodeExchange, stores them,\n * then redirects to home (or shows error with link back to login).\n *\n * All user-facing strings are i18n-driven via AuthCallbackLabel.\n */\nexport const PublicLayoutPreset_AuthCallback_Default = ({ code, errorParam, errorDescription }: PublicLayoutPreset_AuthCallback_DefaultProps): React.JSX.Element => {\n  const { handleAuthCodeExchange, auth } = useAuthSession();\n  const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK });\n  const location = useLocation();\n\n  const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, key);\n  const redirectTarget = useMemo(\n    () => extractAuthRedirectFromSearch(location.search),\n    [location.search],\n  );\n  const loginPath = useMemo(\n    () => appendAuthRedirectToPath(CommonRoutePaths.login, redirectTarget),\n    [redirectTarget],\n  );\n  const postAuthRedirect = useMemo(\n    () => resolvePostAuthRedirect(location.search),\n    [location.search],\n  );\n\n  const [error, setError] = useState<string | null>(null);\n  const exchangeAttemptedRef = useRef(false);\n\n  useEffect(() => {\n    if (exchangeAttemptedRef.current) return;\n\n    if (errorParam) {\n      exchangeAttemptedRef.current = true;\n      setError(errorDescription || errorParam || t(AuthCallbackLabel.ERROR_GENERIC));\n      return;\n    }\n\n    if (!code) {\n      exchangeAttemptedRef.current = true;\n      setError(t(AuthCallbackLabel.ERROR_NO_CODE));\n      return;\n    }\n\n    if (auth.accessToken) {\n      exchangeAttemptedRef.current = true;\n      return;\n    }\n\n    exchangeAttemptedRef.current = true;\n\n    handleAuthCodeExchange(code).catch((e: any) => {\n      setError(e?.message || t(AuthCallbackLabel.ERROR_EXCHANGE_FAILED));\n    });\n  }, [code, errorParam, errorDescription, auth.accessToken, handleAuthCodeExchange]); // eslint-disable-line react-hooks/exhaustive-deps\n\n  if (auth.accessToken && !auth.isLoading) {\n    return <Navigate to={postAuthRedirect} replace />;\n  }\n\n  if (!isReady) return null;\n\n  if (error) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element\">\n            <svg className=\"h-6 w-6 text-destructive\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" strokeWidth=\"2\">\n              <path strokeLinecap=\"round\" strokeLinejoin=\"round\" d=\"M6 18L18 6M6 6l12 12\" />\n            </svg>\n          </div>\n          <Heading>{t(AuthCallbackLabel.ERROR_TITLE)}</Heading>\n        </div>\n        <Alert variant=\"destructive\">\n          <AlertDescription>{error}</AlertDescription>\n        </Alert>\n        <div className=\"text-center mt-group\">\n          <Link href={loginPath}>{t(AuthCallbackLabel.LOGIN_LINK)}</Link>\n        </div>\n      </>\n    );\n  }\n\n  return (\n    <div role=\"status\" aria-live=\"polite\" className=\"text-center space-y-item-xs\">\n      <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element\" aria-hidden=\"true\">\n        <LoadingSpinner size={24} className=\"text-primary\" />\n      </div>\n      <Text className=\"max-w-sm mx-auto\">{t(AuthCallbackLabel.VERIFYING)}</Text>\n    </div>\n  );\n};\n\nexport function Auth_AuthCallback({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_AuthCallback_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_AuthCallback_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, 'Auth_AuthCallback')(preset);\n  return <Component {...props} />;\n}\n"]}
+{"version":3,"file":"Auth_AuthCallback.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_AuthCallback.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAChH,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AASzF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAgD,EAAqB,EAAE;IACjK,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,EACtE,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,oBAAoB,CAAC,OAAO;YAAE,OAAO;QAEzC,IAAI,UAAU,EAAE,CAAC;YACf,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,qGAAqG;YACrG,wGAAwG;YACxG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,4GAA4G;QAC5G,0DAA0D;QAC1D,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACjD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;YACpC,OAAO;QACT,CAAC;QAED,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpC,sBAAsB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YAChD,QAAQ,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,kDAAkD;IAEhK,4GAA4G;IAC5G,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,cAAK,SAAS,EAAC,8FAA8F,YAC3G,cAAK,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,YAC7G,eAAM,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,EAAC,sBAAsB,GAAG,GAC1E,GACF,EACN,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAW,IACjD,EACN,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,EACR,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAqB,GACrF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,IAAI,EAAC,QAAQ,eAAW,QAAQ,EAAC,SAAS,EAAC,6BAA6B,aAC3E,cAAK,SAAS,EAAC,0FAA0F,iBAAa,MAAM,YAC1H,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,cAAc,GAAG,GACjD,EACN,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IACtE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACzK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport {\n  appendAuthRedirectToPath,\n  extractAuthRedirectFromSearch,\n  resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { AuthCallbackLabel, CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\n\n// --- Contract ---\nexport interface PublicLayoutPreset_AuthCallback_DefaultProps {\n  code?: string | null;\n  errorParam?: string | null;\n  errorDescription?: string | null;\n}\n\n/**\n * OAuth2 / SAML callback exchange default preset.\n *\n * Extracts the one-time `code` from URL query params, exchanges it for\n * access + refresh tokens via handleAuthCodeExchange, stores them,\n * then redirects to home (or shows error with link back to login). A code the\n * backend parked at organization onboarding (#1103) answers with the onboarding\n * session instead, and this screen routes to the organization-onboarding step.\n *\n * All user-facing strings are i18n-driven via AuthCallbackLabel.\n */\nexport const PublicLayoutPreset_AuthCallback_Default = ({ code, errorParam, errorDescription }: PublicLayoutPreset_AuthCallback_DefaultProps): React.JSX.Element => {\n  const { handleAuthCodeExchange, auth } = useAuthSession();\n  const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK });\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n  const location = useLocation();\n\n  const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, key);\n  const redirectTarget = useMemo(\n    () => extractAuthRedirectFromSearch(location.search),\n    [location.search],\n  );\n  const loginPath = useMemo(\n    () => appendAuthRedirectToPath(CommonRoutePaths.login, redirectTarget),\n    [redirectTarget],\n  );\n  const postAuthRedirect = useMemo(\n    () => resolvePostAuthRedirect(location.search),\n    [location.search],\n  );\n\n  const [error, setError] = useState<string | null>(null);\n  const exchangeAttemptedRef = useRef(false);\n\n  useEffect(() => {\n    if (exchangeAttemptedRef.current) return;\n\n    if (errorParam) {\n      exchangeAttemptedRef.current = true;\n      // The provider's `error` / `error_description` are never shown: they are the provider's untranslated\n      // developer text, and they arrive in the URL, so anyone can put words on this screen by editing a link.\n      setError(t(AuthCallbackLabel.ERROR_GENERIC));\n      return;\n    }\n\n    if (!code) {\n      exchangeAttemptedRef.current = true;\n      setError(t(AuthCallbackLabel.ERROR_NO_CODE));\n      return;\n    }\n\n    // Already signed in, or already parked at organization onboarding (#1103): the code has nothing left to do,\n    // and redeeming it again could only fail as a spent code.\n    if (auth.accessToken || auth.onboardingSessionId) {\n      exchangeAttemptedRef.current = true;\n      return;\n    }\n\n    exchangeAttemptedRef.current = true;\n\n    handleAuthCodeExchange(code).catch((e: unknown) => {\n      setError(toUserFacingErrorMessage(e, t(AuthCallbackLabel.ERROR_EXCHANGE_FAILED)));\n    });\n  }, [code, errorParam, errorDescription, auth.accessToken, auth.onboardingSessionId, handleAuthCodeExchange]); // eslint-disable-line react-hooks/exhaustive-deps\n\n  // Parked at organization onboarding (#1103): a federated sign-in whose account still owes its organization.\n  const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, redirectTarget);\n  if (organizationOnboardingTarget) {\n    return <Navigate to={organizationOnboardingTarget} replace />;\n  }\n\n  if (auth.accessToken && !auth.isLoading) {\n    return <Navigate to={postAuthRedirect} replace />;\n  }\n\n  if (!isReady) return null;\n\n  if (error) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element\">\n            <svg className=\"h-6 w-6 text-destructive\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" strokeWidth=\"2\">\n              <path strokeLinecap=\"round\" strokeLinejoin=\"round\" d=\"M6 18L18 6M6 6l12 12\" />\n            </svg>\n          </div>\n          <Heading>{t(AuthCallbackLabel.ERROR_TITLE)}</Heading>\n        </div>\n        <Alert variant=\"destructive\">\n          <AlertDescription>{error}</AlertDescription>\n        </Alert>\n        <div className=\"text-center mt-group\">\n          <AuthSecondaryLink href={loginPath}>{t(AuthCallbackLabel.LOGIN_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  return (\n    <div role=\"status\" aria-live=\"polite\" className=\"text-center space-y-item-xs\">\n      <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element\" aria-hidden=\"true\">\n        <LoadingSpinner size={24} className=\"text-primary\" />\n      </div>\n      <Text className=\"max-w-sm mx-auto\">{t(AuthCallbackLabel.VERIFYING)}</Text>\n    </div>\n  );\n};\n\nexport function Auth_AuthCallback({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_AuthCallback_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_AuthCallback_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, 'Auth_AuthCallback')(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_AuthCallback.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_AuthCallback.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_AuthCallback.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuD,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM7J,eAAO,MAAM,+BAA+B,EAAE,mBAAmB,EAOhE,CAAC"}
+{"version":3,"file":"Auth_AuthCallback.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_AuthCallback.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuD,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAM7J,eAAO,MAAM,+BAA+B,EAAE,mBAAmB,EAShE,CAAC"}

package/dist/esm/components/auth/Auth_AuthCallback.labels.js

@@ -9,6 +9,8 @@ export const PublicLayoutsAuthCallbackLabels = [
     { ref: AuthCallbackLabel.ERROR_NO_CODE, kind: LabelKind.MESSAGE, purpose: 'Error shown when the provider redirect is missing the authorization code' },
     { ref: AuthCallbackLabel.ERROR_EXCHANGE_FAILED, kind: LabelKind.MESSAGE, purpose: 'Error shown when exchanging the authorization code for a session fails' },
     { ref: AuthCallbackLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen' },
+    { ref: AuthCallbackLabel.REAUTH_RETURNING, kind: LabelKind.MESSAGE, purpose: 'Shown in the pop-up window after the person signed in again at their identity provider to confirm it is them: the result has been handed back to the application, and the window closes itself or the person can close it' },
+    { ref: AuthCallbackLabel.REAUTH_NO_RESULT, kind: LabelKind.MESSAGE, purpose: 'Shown in the pop-up window when it was reached without the result it expects (no confirmation code and no error), so there is nothing to hand back; tells the person to close this window and try again from the application' },
 ];
 registerComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, PublicLayoutsAuthCallbackLabels);
 //# sourceMappingURL=Auth_AuthCallback.labels.js.map

package/dist/esm/components/auth/Auth_AuthCallback.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_AuthCallback.labels.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_AuthCallback.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE7J,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAClJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IACvH,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6EAA6E,EAAE;IACzJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IACtJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC5J,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE;CACzG,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,+BAA+B,CAAC,CAAC","sourcesContent":["import { AuthCallbackLabel, FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsAuthCallbackLabels: LabellingUnitaryDef[] = [\n  { ref: AuthCallbackLabel.VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the OAuth authorization code is being exchanged' },\n  { ref: AuthCallbackLabel.ERROR_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when the OAuth callback fails' },\n  { ref: AuthCallbackLabel.ERROR_GENERIC, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the OAuth callback fails for an unspecified reason' },\n  { ref: AuthCallbackLabel.ERROR_NO_CODE, kind: LabelKind.MESSAGE, purpose: 'Error shown when the provider redirect is missing the authorization code' },\n  { ref: AuthCallbackLabel.ERROR_EXCHANGE_FAILED, kind: LabelKind.MESSAGE, purpose: 'Error shown when exchanging the authorization code for a session fails' },\n  { ref: AuthCallbackLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, PublicLayoutsAuthCallbackLabels);\n"]}
+{"version":3,"file":"Auth_AuthCallback.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_AuthCallback.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE7J,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAClJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IACvH,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6EAA6E,EAAE;IACzJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IACtJ,EAAE,GAAG,EAAE,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC5J,EAAE,GAAG,EAAE,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE;IACxG,EAAE,GAAG,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2NAA2N,EAAE;IAC1S,EAAE,GAAG,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8NAA8N,EAAE;CAC9S,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,+BAA+B,CAAC,CAAC","sourcesContent":["import { AuthCallbackLabel, FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsAuthCallbackLabels: LabellingUnitaryDef[] = [\n  { ref: AuthCallbackLabel.VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the OAuth authorization code is being exchanged' },\n  { ref: AuthCallbackLabel.ERROR_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when the OAuth callback fails' },\n  { ref: AuthCallbackLabel.ERROR_GENERIC, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the OAuth callback fails for an unspecified reason' },\n  { ref: AuthCallbackLabel.ERROR_NO_CODE, kind: LabelKind.MESSAGE, purpose: 'Error shown when the provider redirect is missing the authorization code' },\n  { ref: AuthCallbackLabel.ERROR_EXCHANGE_FAILED, kind: LabelKind.MESSAGE, purpose: 'Error shown when exchanging the authorization code for a session fails' },\n  { ref: AuthCallbackLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen' },\n  { ref: AuthCallbackLabel.REAUTH_RETURNING, kind: LabelKind.MESSAGE, purpose: 'Shown in the pop-up window after the person signed in again at their identity provider to confirm it is them: the result has been handed back to the application, and the window closes itself or the person can close it' },\n  { ref: AuthCallbackLabel.REAUTH_NO_RESULT, kind: LabelKind.MESSAGE, purpose: 'Shown in the pop-up window when it was reached without the result it expects (no confirmation code and no error), so there is nothing to hand back; tells the person to close this window and try again from the application' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_AUTH_CALLBACK, PublicLayoutsAuthCallbackLabels);\n"]}

package/dist/esm/components/auth/Auth_ConfirmEmail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_ConfirmEmail.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_ConfirmEmail.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAcjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAA;AAOvH,MAAM,WAAW,gDAAgD;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,2CAA2C,GAAI,kBAAkB,gDAAgD,KAAG,KAAK,CAAC,GAAG,CAAC,OAoP1I,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,gDAAgD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5K"}
+{"version":3,"file":"Auth_ConfirmEmail.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_ConfirmEmail.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAiBjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAA;AAOvH,MAAM,WAAW,gDAAgD;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,2CAA2C,GAAI,kBAAkB,gDAAgD,KAAG,KAAK,CAAC,GAAG,CAAC,OAoQ1I,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,gDAAgD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5K"}

package/dist/esm/components/auth/Auth_ConfirmEmail.js

@@ -1,12 +1,15 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useState, useEffect, useRef, useCallback } from 'react';
-import { Navigate, useNavigate } from 'react-router-dom';
+import { Navigate } from 'react-router-dom';
 import { useAuthSession } from '../../core/security/useAuthSession.js';
+import { organizationOnboardingNavigationTarget } from '../../core/security/organization-onboarding.frontend.utils.js';
+import { useMfaContinuationNavigation } from '../../components/auth/utils/useMfaContinuationNavigation.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
+import { useUserFacingErrorMessage } from '../../core/errors/useUserFacingErrorMessage.js';
 import { getManualCallsHttpClient } from '../../core/requests/wildo-http-client-manual-calls.frontend.service.js';
 import { Heading } from '../../components/typography/heading.js';
 import { Text } from '../../components/typography/text.js';
-import { Link } from '../../components/typography/link.js';
+import { AuthSecondaryLink } from '../../components/auth/utils/AuthSecondaryLink.js';
 import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
 import { Input } from '../../components/form/controls/input.js';
 import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
@@ -28,7 +31,7 @@ const RESEND_COOLDOWN_SECONDS = 60;
 export const PublicLayoutPreset_UserConfirmEmail_Default = ({ token, email }) => {
     const { auth, handleEmailVerification } = useAuthSession();
     const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_USER_CONFIRM_EMAIL });
-    const navigate = useNavigate();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_CONFIRM_EMAIL, key);
     const loginPath = CommonRoutePaths.login;
     // ─── State ───
@@ -44,7 +47,7 @@ export const PublicLayoutPreset_UserConfirmEmail_Default = ({ token, email }) =>
         if (!token || !email)
             return;
         handleEmailVerification(token, email).catch((e) => {
-            setError(e?.message || t(UserConfirmEmailLabel.ERROR_MESSAGE));
+            setError(toUserFacingErrorMessage(e, t(UserConfirmEmailLabel.ERROR_MESSAGE)));
         });
     }, [token, email]); // eslint-disable-line react-hooks/exhaustive-deps
     // Auto-verify on mount when token + email are present
@@ -76,16 +79,26 @@ export const PublicLayoutPreset_UserConfirmEmail_Default = ({ token, email }) =>
         }, 1000);
         return () => clearInterval(timer);
     }, [resendCooldown]);
-    useEffect(() => {
-        if (!auth.mfaRequired || !auth.mfaSessionId)
-            return;
-        if (auth.availableEnrollmentMethods.length > 0) {
-            navigate(CommonRoutePaths.enrollmentRequired, { replace: true });
-            return;
-        }
-        const mfaEmail = email || '';
-        navigate(`${CommonRoutePaths.mfaChallenge}?sessionId=${auth.mfaSessionId}&email=${encodeURIComponent(mfaEmail)}`, { replace: true });
-    }, [auth.mfaRequired, auth.mfaSessionId, auth.availableEnrollmentMethods, navigate, email]);
+    useMfaContinuationNavigation({
+        mfaRequired: auth.mfaRequired,
+        mfaSessionId: auth.mfaSessionId,
+        usableSecondFactorMethods: auth.usableSecondFactorMethods,
+        email,
+        /*
+         * No redirect target reaches this screen: the verification link is built by the backend with
+         * `token` and `email` only (`email-verification-initiator.backend.service.ts`, `verifyUrl`), and it
+         * is opened from an inbox, not from a guarded deep link.
+         */
+        authRedirectTarget: undefined,
+    });
+    /*
+     * The routing above is shared by every auth screen (#972) and asks about `usableSecondFactorMethods`.
+     * An earlier copy here asked `availableEnrollmentMethods.length > 0` and routed to enrollment FIRST —
+     * the inverse precedence, equivalent only while that field was populated solely on the enrollment
+     * branch. It is now populated on every MFA-required session, so the old question no longer means what
+     * it did. On this flow the two still agree (the registration pipeline never emits `MFA_REQUIRED`), so
+     * sharing the routing is a consistency change here, not a bug fix.
+     */
     const handleResend = useCallback(async () => {
         if (!resendEmail || resendCooldown > 0)
             return;
@@ -98,16 +111,21 @@ export const PublicLayoutPreset_UserConfirmEmail_Default = ({ token, email }) =>
         }
         catch (e) {
             setResendStatus('error');
-            setResendError(e?.message || t(UserConfirmEmailLabel.ERROR_MESSAGE));
+            setResendError(toUserFacingErrorMessage(e, t(UserConfirmEmailLabel.ERROR_MESSAGE)));
         }
     }, [resendEmail, resendCooldown]); // eslint-disable-line react-hooks/exhaustive-deps
+    // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.
+    const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, undefined);
+    if (organizationOnboardingTarget) {
+        return _jsx(Navigate, { to: organizationOnboardingTarget, replace: true });
+    }
     if (!isReady)
         return null;
     // ═══════════════════════════════════════════════════════════════
     // Invalid verification link (missing token or email)
     // ═══════════════════════════════════════════════════════════════
     if (!token || !email) {
-        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(UserConfirmEmailLabel.ERROR_TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto", children: t(UserConfirmEmailLabel.INVALID_LINK) })] }), _jsx("div", { className: "text-center", children: _jsx(Link, { href: loginPath, children: t(UserConfirmEmailLabel.LOGIN_LINK) }) })] }));
+        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(UserConfirmEmailLabel.ERROR_TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto", children: t(UserConfirmEmailLabel.INVALID_LINK) })] }), _jsx("div", { className: "text-center", children: _jsx(AuthSecondaryLink, { href: loginPath, children: t(UserConfirmEmailLabel.LOGIN_LINK) }) })] }));
     }
     // ═══════════════════════════════════════════════════════════════
     // Session conflict — user already logged in
@@ -134,7 +152,7 @@ export const PublicLayoutPreset_UserConfirmEmail_Default = ({ token, email }) =>
                                         ? t(UserConfirmEmailLabel.RESEND_SENDING)
                                         : resendCooldown > 0
                                             ? `${t(UserConfirmEmailLabel.RESEND_COOLDOWN)} (${resendCooldown}s)`
-                                            : t(UserConfirmEmailLabel.RESEND_BUTTON) })] }), resendStatus === 'sent' && (_jsx(Alert, { children: _jsx(AlertDescription, { children: t(UserConfirmEmailLabel.RESEND_SUCCESS) }) })), resendStatus === 'error' && resendError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: resendError }) }))] }), _jsx("div", { className: "text-center mt-group", children: _jsx(Link, { href: loginPath, children: t(UserConfirmEmailLabel.LOGIN_LINK) }) })] }));
+                                            : t(UserConfirmEmailLabel.RESEND_BUTTON) })] }), resendStatus === 'sent' && (_jsx(Alert, { children: _jsx(AlertDescription, { children: t(UserConfirmEmailLabel.RESEND_SUCCESS) }) })), resendStatus === 'error' && resendError && (_jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: resendError }) }))] }), _jsx("div", { className: "text-center mt-group", children: _jsx(AuthSecondaryLink, { href: loginPath, children: t(UserConfirmEmailLabel.LOGIN_LINK) }) })] }));
     }
     // ═══════════════════════════════════════════════════════════════
     // Verifying... (loading state)