@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.6

package/dist/esm/components/auth/Auth_Invitation.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_Invitation.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Invitation.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACjI,OAAO,EACL,UAAU,EACV,SAAS,EACT,wBAAwB,EACxB,2BAA2B,GAM5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AACzI,OAAO,EAAE,+BAA+B,EAAE,MAAM,2EAA2E,CAAC;AAC5H,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,EACL,iCAAiC,GAClC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,oEAAoE,CAAC;AAG5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAE1H;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,6BAA6B,GAA4B,IAAI,GAAG,CAAC;IACrE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,OAAO;CACnB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,gBAAgB,GAA+C;IACnE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,eAAe;IACpD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,iBAAiB;IACxD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc;IACnD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,cAAc;IAC7D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,sBAAsB;CACnE,CAAC;AAaF;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAA0C,CAAC,EACrE,eAAe,EACf,cAAc,GACf,EAAE,EAAE;IACH,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,8BAA8B;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAEjG,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,+BAA+B,IAAC,KAAK,EAAE,eAAe,GAAI,EAC3D,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,iBAAiB,GAAG,EAEpC,KAAC,yBAAyB,IAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAI,EAE/E,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,EAC5D,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAI5B,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,OAAO,CACL,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EAC3C,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EACrD,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,uBAAuB,GAMxB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACzD,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAExD,4FAA4F;IAC5F,mEAAmE;IACnE,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,gGAAgG;IAChG,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA+C,EAAE,EAAE;QACzF,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAElB,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EACvE,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,2BAA2B,IAAC,eAAe,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,GAAI,CACtF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,yBAAyB,GAI1B,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CACtC,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GACtC,EACP,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAC5C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,EACxD,SAAS,SACT,IACS,CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAMtB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;IACzD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,CAAC,IAA+C,EAAE,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,EACnF,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,yBAAyB,IAAC,eAAe,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,GAAI,CACpF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,EACxD,KAAK,EACL,KAAK,GAC0C,EAAqB,EAAE;IACtE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,CAAC;IACpD,kGAAkG;IAClG,qGAAqG;IACrG,8FAA8F;IAC9F,MAAM,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAE7C,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,oFAAoF;IACpF,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC;QACJ,qBAAqB,CAAC,8BAA8B;QACpD,qBAAqB,CAAC,wBAAwB;KAC/C,EACD,EAAE,CACH,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,gGAAgG;IAChG,kGAAkG;IAClG,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,6FAA6F;IAC7F,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,iGAAiG;IACjG,+FAA+F;IAC/F,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtE,4EAA4E;IAC5E,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoC,IAAI,CAAC,CAAC;IAC9F,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAChE,kFAAkF;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,6FAA6F;IAC7F,iGAAiG;IACjG,iGAAiG;IACjG,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5H,kFAAkF;IAClF,6EAA6E;IAC7E,gFAAgF;IAChF,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,8EAA8E;IAC9E,6EAA6E;IAC7E,kFAAkF;IAClF,yCAAyC;IACzC,MAAM,uBAAuB,GAAG,OAAO,CACrC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC5F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC;IAEzC,qFAAqF;IACrF,oFAAoF;IACpF,qFAAqF;IACrF,qFAAqF;IACrF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpG,oFAAoF;IACpF,2CAA2C;IAC3C,MAAM,YAAY,GAAG,cAAc,EAAE,YAAY,IAAI,KAAK,CAAC;IAE3D,sFAAsF;IACtF,uFAAuF;IACvF,wFAAwF;IACxF,oCAAoC;IACpC,MAAM,cAAc,GAAwB,OAAO,CACjD,GAAG,EAAE,CAAC,cAAc,EAAE,cAAc,IAAI,YAAY,CAAC,cAAc,IAAI,uBAAuB,EAC9F,CAAC,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,CAC9D,CAAC;IAEF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAC3E,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAClE,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CACjF,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6EAA6E;IAC7E,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE;QACb,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,qCAAqC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,wBAAwB,EAAE;aACvB,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,SAAS;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;YAChB,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,8FAA8F;QAC9F,8FAA8F;QAC9F,oGAAoG;QACpG,gGAAgG;QAChG,sDAAsD;QACtD,uDAAuD;IACzD,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE9B,0EAA0E;IAC1E,MAAM,gBAAgB,GAAsB,OAAO,CAAC,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,cAAc,EAAE,2BAA2B,IAAI,EAAE,CAAC;QAClE,OAAO,yBAAyB,CAC9B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CACjF,CAAC;IACJ,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,6FAA6F;IAC7F,6FAA6F;IAC7F,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAExD,kGAAkG;IAClG,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,IAAI,yBAAyB,CAAC;IAEhG,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAiC,IAAI,IAAI,EACrE,CAAC,gBAAgB,CAAC,CACnB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;IAE5F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAEpD,IAAI,IAAI,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,YAAY,IAAI,EAAE,CAAC;QAC3C,QAAQ,CACN,GAAG,gBAAgB,CAAC,YAAY,cAAc,IAAI,CAAC,YAAY,UAAU,kBAAkB,CAAC,eAAe,CAAC,EAAE,EAC9G,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAEnG,MAAM,sBAAsB,GAAG,WAAW,CAAC,KAAK,EAAE,IAA2B,EAAE,EAAE;QAC/E,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,SAAS,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,KAAc,EAAsB,EAAE;YAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACvC,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC;gBACrB,eAAe,EAAE,KAAM;gBACvB,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;aACrC,CAAC,CAAC;YACH,8EAA8E;YAC9E,8FAA8F;QAChG,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAEjD,iGAAiG;IACjG,oFAAoF;IACpF,sDAAsD;IACtD,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACrG,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,OAAO;aACrC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,0BAA0B,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,uFAAuF;gBACvF,oFAAoF;gBACpF,sCAAsC;gBACtC,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAA4D,EAAE,CAAC,CAAC;oBAC1H,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC;oBACP,uFAAuF;oBACvF,yFAAyF;oBACzF,uFAAuF;oBACvF,gGAAgG;gBAClG,CAAC;YACH,CAAC;YACD,4FAA4F;YAC5F,6FAA6F;YAC7F,8FAA8F;QAChG,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,eAAe,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjC,2FAA2F;IAC3F,gGAAgG;IAChG,2EAA2E;IAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACvG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC;gBAChD,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,UAAU;aACxC,CAAC,CAAC;YACH,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gGAAgG;YAChG,kGAAkG;YAClG,8FAA8F;YAC9F,gEAAgE;YAChE,WAAW,CAAC,CAAC,EAAE,2CAA2C,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACzG,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,2FAA2F;YAC3F,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAEzB,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,eAAe,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAEf,mFAAmF;IACnF,oFAAoF;IACpF,kFAAkF;IAClF,sBAAsB;IACtB,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAElE;;;;;;OAMG;IACH,MAAM,kBAAkB,GAAG,GAAoB,EAAE;QAC/C,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,IAAI,mBAAmB,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,oBAAoB,EAC5B,aAAa,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,EAAE;oBACZ,QAAQ,EAAE,EAAE;oBACZ,eAAe,EAAE,EAAE;iBACpB,EACD,QAAQ,EAAE,sBAAsB,EAChC,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;wBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;wBAC1C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;wBACzC,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;qBACzD;iBACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,KAAC,sBAAsB,IAAC,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,GAAI,GAC/G,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAClD,kFAAkF;YAClF,iFAAiF;YACjF,uFAAuF;YACvF,wEAAwE;YACxE,OAAO,CACL,KAAC,uBAAuB,IACtB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,QAAQ,EAAE,qBAAqB,EAC/B,CAAC,EAAE,CAAC,EACJ,KAAK,EAAE,KAAK,GACZ,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/C,qFAAqF;YACrF,2EAA2E;YAC3E,sFAAsF;YACtF,kFAAkF;YAClF,OAAO,CACL,KAAC,qBAAqB,IACpB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,CAAC,EAAE,CAAC,GACJ,CACH,CAAC;QACJ,CAAC;QAED,kFAAkF;QAClF,gFAAgF;QAChF,sFAAsF;QACtF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,KAAK,GAA6B;YACtC,SAAS,EAAE,EAAE,EAAE,6CAA6C;YAC5D,KAAK,EAAE,YAAY,IAAI,EAAE;YACzB,YAAY;YACZ,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW;YACxC,CAAC,EAAE,uBAAuB;SAC3B,CAAC;QAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;IACxC,CAAC,CAAC;IAEF,oFAAoF;IACpF,uFAAuF;IACvF,gFAAgF;IAChF,kDAAkD;IAClD,8FAA8F;IAC9F,6FAA6F;IAC7F,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IAC3E,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAQ,GAC7D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,GAAW,EACjE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAQ,IACtF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,GAAQ,GAChE,IACL,CACJ,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,oCAAoC;IACpC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAW,EAC/D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAQ,EAC3F,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAQ,GAC7D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CACL,cAAK,SAAS,EAAC,2CAA2C,YACxD,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,GACxB,CACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,SAAS,IAAI,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IACxF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAQ,GAC7D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,cAAc,CAAC,cAAc,KAAK,wBAAwB,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAAW,EAC9D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,GACvC,EACN,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAQ,IAC7D,IACL,CACJ,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAW,EACjD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAQ,EAC3E,cAAc,CAAC,gBAAgB,IAAI,CAClC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,cAAc,CAAC,gBAAgB,GAAQ,CACzF,EACA,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,mBAAmB,CAAC,CAAC,CAAC,CACrB,8BACE,KAAC,IAAI,IAAC,SAAS,EAAC,sDAAsD,YACnE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GACrC,EAGN,kBAAkB,EAAE,EAGpB,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChC,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EAErE,cAAK,SAAS,EAAC,cAAc,YAC1B,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;oCACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAoB,CAAC,CAAC;oCAC/D,OAAO,CACL,KAAC,MAAM,IAEL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAoB,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACvF,QAAQ,EAAE,oBAAoB,IAAI,WAAW,YAE5C,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IANtC,MAAM,CAAC,MAAM,CAOX,CACV,CAAC;gCACJ,CAAC,CAAC,GACE,IACL,CACJ,IACA,CACJ,CAAC,CAAC,CAAC;YACF;;;;;;cAME;YACF,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,EAEA,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,oBAAoB,IAAI,WAAW,EAC7C,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAQ,IAC7D,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAyE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAAiD,qBAAqB,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation, useNavigate } from 'react-router-dom';\nimport { useFormContext } from 'react-hook-form';\nimport { CorePresetNames, FrontendComponentType, UserAuthLabel, UserInvitationLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthMethod,\n  AuthUtils,\n  InvitationManagementMode,\n  UserInvitationFormDtoSchema,\n  type AuthenticationResponse,\n  type AuthInvitationInfoResponse,\n  type AvailableMethod,\n  type PasswordPolicyRules,\n  type UserInvitationFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { PasswordStrengthIndicator, DEFAULT_PASSWORD_POLICY } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport { CredentialUsernameAutofillField } from '~wildo-frontend-lib/components/auth/utils/CredentialUsernameAutofillField';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { makeComponentLabelResolver } from '~wildo-frontend-lib/core/i18n/component-label-resolution.utils';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useError } from '~wildo-frontend-lib/core/errors/useError';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { resolvePostAuthRedirect } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport {\n  resolvePasswordViolationsToLabels,\n} from '~wildo-frontend-lib/components/auth/utils/resolvePasswordViolationsToLabels';\nimport {\n  AUTH_METHOD_COMPONENTS,\n  sortMethodsByDisplayOrder,\n  type AuthMethodComponentProps,\n} from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\n/**\n * First-factor methods the PUBLIC invitation-accept chooser knows how to render.\n *\n * The invitation-info endpoint returns whatever the org allows for a joining member,\n * but the chooser can only surface methods that are usable BEFORE the invitee has an\n * account/session:\n *  - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms that drive\n *    `acceptInvitation` (set a password / email a link / enroll a passkey). NOT the login\n *    method components — those authenticate an EXISTING account, which an invitee lacks. In\n *    particular the login magic-link (`magicLinkSend`) is ACTIVE-only and never accepts the\n *    invite; the passkey login component authenticates an already-enrolled credential.\n *  - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n *    components, which are account-agnostic (full-page redirect) and consume the `INVITED`\n *    membership via enterprise-SSO JIT / OAuth JIT (email match on the live membership, no token).\n *\n * Session-bound MFA methods (`SMS_OTP` / `EMAIL_OTP` / `TOTP`) are intentionally\n * excluded — they need a session the invitee does not have.\n */\nconst INVITATION_RENDERABLE_METHODS: ReadonlySet<AuthMethod> = new Set([\n  AuthMethod.PASSWORD,\n  AuthMethod.ORG_SAML,\n  AuthMethod.ORG_OPENID_CONNECT,\n  AuthMethod.EXTERNAL_OAUTH2,\n  AuthMethod.MAGIC_LINK,\n  AuthMethod.PASSKEY,\n]);\n\n/**\n * Method → display label for the alternative-method switcher buttons. Mirrors the\n * login chooser (`Auth_Main`); these labels live in the `USER_AUTH` namespace and are\n * resolved via `tAuth`. SAML and OIDC share the generic \"org SSO\" label.\n */\nconst METHOD_LABEL_MAP: Partial<Record<AuthMethod, UserAuthLabel>> = {\n  [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,\n  [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,\n  [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,\n  [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,\n  [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,\n  [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,\n};\n\ninterface InvitationFormTemplateProps {\n  invitationEmail?: string;\n  /**\n   * The effective (org-merged) password policy the parent resolved from the\n   * invitation-info response — the SAME policy the backend accept endpoint enforces —\n   * falling back to the app-level policy. Passed in (not read from `useResolvedAuthConfig`\n   * here) so the strength indicator matches what the org actually requires.\n   */\n  passwordPolicy: PasswordPolicyRules;\n}\n\n/**\n * Password-method accept form body — first/last name + optional password with the\n * strength indicator + a hidden username field for password-manager autofill.\n *\n * Rendered only when `PASSWORD` is the active chooser method. Password is OPTIONAL\n * here (a passwordless accept creates the account and the user adds a credential\n * later); the enclosing chooser owns the method-choice hint, so this template no\n * longer renders a standalone \"password is optional\" aside.\n */\nconst InvitationFormTemplate: React.FC<InvitationFormTemplateProps> = ({\n  invitationEmail,\n  passwordPolicy,\n}) => {\n  const { formState } = useFormContext();\n  const { tComponent, isReady } = useI18n({\n    component: FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n  });\n\n  const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key);\n\n  if (!isReady) return null;\n\n  return (\n    <FormLayout>\n      <CredentialUsernameAutofillField email={invitationEmail} />\n      <FormField name=\"firstName\" />\n      <FormField name=\"lastName\" />\n      <FormField name=\"password\" />\n      <FormField name=\"confirmPassword\" />\n\n      <PasswordStrengthIndicator fieldName=\"password\" policy={passwordPolicy} t={t} />\n\n      {formState.errors.root && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{formState.errors.root.message}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={t(UserInvitationLabel.ACCEPT_INVITATION)}\n        submittingLabel={t(UserInvitationLabel.ACCEPTING_INVITATION)}\n        fullWidth\n      />\n    </FormLayout>\n  );\n};\n\n/**\n * Body of the magic-link accept sub-form (first/last name + send button). Split out so it\n * can read `formState.errors.root` via `useFormContext` inside the `AutomatedForm` provider.\n */\nconst InvitationMagicLinkTemplate: React.FC<{\n  invitationEmail?: string;\n  t: (key: string) => string;\n  tAuth: (key: string) => string;\n}> = ({ invitationEmail, t, tAuth }) => {\n  const { formState } = useFormContext();\n  return (\n    <FormLayout>\n      {invitationEmail && (\n        <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n      )}\n      <FormField name=\"firstName\" />\n      <FormField name=\"lastName\" />\n\n      {formState.errors.root && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{formState.errors.root.message}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n        submittingLabel={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n        fullWidth\n      />\n    </FormLayout>\n  );\n};\n\n/**\n * Magic-link ACCEPT sub-form — the invitation-aware counterpart of the login\n * `MagicLinkAuthMethod`.\n *\n * The login component sends a *login* magic link via `magicLinkSend`, which never accepts\n * the invitation: `sendMagicLink` resolves users ACTIVE-only, so a not-yet-activated\n * (`PENDING_INVITATION`) invitee gets no email, and `verifyMagicLink` rejects any non-ACTIVE\n * user and never flips the INVITED membership. So it is NOT reused here.\n *\n * Instead this drives the purpose-built `acceptInvitation({ credentialMethod: MAGIC_LINK })`\n * endpoint, which ACTIVATES the invitee + flips the membership FIRST and only THEN mints +\n * emails the link — so the eventual `verifyMagicLink` click (now ACTIVE) establishes the\n * session. First/last name are collected because the accept DTO requires them (the invitee's\n * profile is seeded at acceptance). No session is issued (the parent switches to a terminal\n * \"check your email\" state); the session lands when the invitee clicks the emailed link.\n */\nconst InvitationMagicLinkForm: React.FC<{\n  invitationEmail?: string;\n  disabled?: boolean;\n  onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n  t: (key: string) => string;\n  tAuth: (key: string) => string;\n}> = ({ invitationEmail, disabled, onSubmit, t, tAuth }) => {\n  const formMethodsRef = useRef<FormMethods | null>(null);\n\n  // Only the name fields — reuse the accept form schema's first/last (with their autocomplete\n  // decorators); the credential is the emailed link, not a password.\n  const schema = useMemo(\n    () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n    [],\n  );\n\n  // On success the PARENT switches to the terminal \"check your email\" state — the accept consumed\n  // the token + accepted the invite, so there is NO in-place \"sent\" / \"try another method\" state\n  // (that would dead-end on the now-consumed token). Only errors are surfaced here.\n  const handleSubmit = useCallback(async (data: { firstName?: string; lastName?: string }) => {\n    formMethodsRef.current?.clearErrors('root');\n    try {\n      await onSubmit(data.firstName?.trim() || undefined, data.lastName?.trim() || undefined);\n    } catch (e: any) {\n      formMethodsRef.current?.setError('root', {\n        type: 'server',\n        message: e?.message || t(UserInvitationLabel.UNEXPECTED_ERROR),\n      });\n    }\n  }, [onSubmit, t]);\n\n  return (\n    <AutomatedForm\n      schema={schema}\n      defaultValues={{ firstName: '', lastName: '' }}\n      onSubmit={handleSubmit}\n      validationMode={ValidationMode.ON_BLUR}\n      disabled={disabled}\n      onFormReady={(formMethods) => { formMethodsRef.current = formMethods; }}\n      labels={{\n        fields: {\n          firstName: t(UserInvitationLabel.FIRST_NAME),\n          lastName: t(UserInvitationLabel.LAST_NAME),\n        },\n      }}\n      layoutTemplate={() => (\n        <InvitationMagicLinkTemplate invitationEmail={invitationEmail} t={t} tAuth={tAuth} />\n      )}\n    />\n  );\n};\n\n/**\n * Body of the passkey accept sub-form. The ceremony error is owned by the parent (the WebAuthn\n * flow runs outside the form), so it is passed in rather than read from `formState`.\n */\nconst InvitationPasskeyTemplate: React.FC<{\n  invitationEmail?: string;\n  error?: string | null;\n  t: (key: string) => string;\n}> = ({ invitationEmail, error, t }) => (\n  <FormLayout>\n    {invitationEmail && (\n      <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n    )}\n    <Text className=\"text-sm text-muted-foreground text-center\">\n      {t(UserInvitationLabel.PASSKEY_DESCRIPTION)}\n    </Text>\n    <FormField name=\"firstName\" />\n    <FormField name=\"lastName\" />\n\n    {error && (\n      <Alert variant=\"destructive\">\n        <AlertDescription>{error}</AlertDescription>\n      </Alert>\n    )}\n\n    <SubmitButton\n      label={t(UserInvitationLabel.PASSKEY_CREATE)}\n      submittingLabel={t(UserInvitationLabel.PASSKEY_CREATING)}\n      fullWidth\n    />\n  </FormLayout>\n);\n\n/**\n * Passkey ENROLL-at-accept sub-form (Phase 3). Collects the invitee's name (the accept DTO\n * requires it; the profile is seeded at acceptance), then hands off to the parent's `onSubmit`,\n * which drives `acceptInvitation({credentialMethod: PASSKEY})` — the invitation token bootstraps\n * the session and the response carries a WebAuthn registration challenge — runs the browser\n * ceremony (`startRegistration`), and completes it against the authenticated\n * `/auth/passkey/register/verify` route. Passkey enrollment is the GO-FORWARD credential, not\n * this session's authenticator, so a cancelled/failed ceremony is non-fatal (the invitee is\n * already signed in and can add a passkey later). Falls back to an informational message when the\n * browser has no WebAuthn support.\n */\nconst InvitationPasskeyForm: React.FC<{\n  invitationEmail?: string;\n  disabled?: boolean;\n  error?: string | null;\n  onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n  t: (key: string) => string;\n}> = ({ invitationEmail, disabled, error, onSubmit, t }) => {\n  const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n  const schema = useMemo(\n    () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n    [],\n  );\n\n  if (!isSupported) {\n    return (\n      <Alert>\n        <AlertDescription>\n          {t(UserInvitationLabel.PASSKEY_UNAVAILABLE_HINT)}\n        </AlertDescription>\n      </Alert>\n    );\n  }\n\n  return (\n    <AutomatedForm\n      schema={schema}\n      defaultValues={{ firstName: '', lastName: '' }}\n      onSubmit={(data: { firstName?: string; lastName?: string }) =>\n        onSubmit(data.firstName?.trim() || undefined, data.lastName?.trim() || undefined)}\n      validationMode={ValidationMode.ON_BLUR}\n      disabled={disabled}\n      labels={{\n        fields: {\n          firstName: t(UserInvitationLabel.FIRST_NAME),\n          lastName: t(UserInvitationLabel.LAST_NAME),\n        },\n      }}\n      layoutTemplate={() => (\n        <InvitationPasskeyTemplate invitationEmail={invitationEmail} error={error} t={t} />\n      )}\n    />\n  );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserInvitation_DefaultProps {\n  token?: string;\n  email?: string;\n}\n\nexport const PublicLayoutPreset_UserInvitation_Default = ({\n  token,\n  email,\n}: PublicLayoutPreset_UserInvitation_DefaultProps): React.JSX.Element => {\n  const { auth, acceptInvitation } = useAuthSession();\n  // Central error handler — the password/passkey paths reach it via `acceptInvitation` (the context\n  // calls `handleError` in its catch); the magic-link path calls the HTTP client directly, so it wires\n  // `handleError` itself (below) to keep central logging + frontend-action execution symmetric.\n  const { handleError } = useError();\n  const resolvedAuth = useResolvedAuthConfig();\n\n  // Load BOTH label namespaces: the invitation chrome (`USER_INVITATION`) plus the\n  // login method components' namespace (`USER_AUTH`) — the reused SAML/OIDC/OAuth2/\n  // magic-link components label themselves from `UserAuthLabel.*`, and we hand them\n  // `tAuth`. The array is memoized so `useI18n` doesn't re-request keys every render.\n  const i18nComponents = useMemo(\n    () => [\n      FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n      FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n    ],\n    [],\n  );\n  const { tComponent, isReady } = useI18n({ component: i18nComponents });\n  const navigate = useNavigate();\n  const location = useLocation();\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const [isDeclining, setIsDeclining] = useState(false);\n  const [declined, setDeclined] = useState(false);\n  const [declineError, setDeclineError] = useState<string | null>(null);\n  // Passkey enroll-at-accept runs a WebAuthn ceremony AFTER the session is issued. While it runs,\n  // the `auth.accessToken` guard below is suppressed so the component isn't unmounted mid-ceremony.\n  const [passkeyCeremonyInProgress, setPasskeyCeremonyInProgress] = useState(false);\n  const [passkeyError, setPasskeyError] = useState<string | null>(null);\n  // Magic-link accept issues NO session — it emails a link + accepts the invite (consuming the\n  // token). On success we switch to a TERMINAL \"check your email\" state rather than leaving the\n  // chooser visible (whose other methods + decline would now dead-end on the consumed token).\n  const [magicLinkSent, setMagicLinkSent] = useState(false);\n  // In-flight flag for the magic-link accept (which bypasses the context's `auth.isLoading`), used\n  // to gate the decline / alternative-method buttons so a click can't race the single-use token.\n  const [magicLinkSubmitting, setMagicLinkSubmitting] = useState(false);\n\n  // Invitation-info discovery (SSO/SCIM-aware method set) keyed by the token.\n  const [invitationInfo, setInvitationInfo] = useState<AuthInvitationInfoResponse | null>(null);\n  const [infoLoading, setInfoLoading] = useState(true);\n  const [infoError, setInfoError] = useState<string | null>(null);\n  // User-selected active method; `null` → fall back to the display-ordered default.\n  const [activeMethod, setActiveMethod] = useState<AuthMethod | null>(null);\n\n  // Memoized on `tComponent` so `t`/`tAuth` keep a STABLE identity across renders — the schema\n  // (`invitationFormSchema`) and submit callbacks depend on them, and an unstable `t` would defeat\n  // those memos and churn the sub-form props (risking focus loss on a mid-entry parent re-render).\n  const t = useCallback((key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key), [tComponent]);\n  // `tAuth` keeps `tComponent`'s key-path-on-miss behaviour, because THIS component\n  // renders its result directly at five sites with no fallback (the magic-link\n  // button, the \"link sent\" heading and body, the methods divider, the per-method\n  // label). Normalizing it to `''` would turn a missing label into an invisible\n  // button and an empty heading — strictly worse than a visible key path.\n  const tAuth = useCallback(\n    (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key),\n    [tComponent],\n  );\n\n  // SEPARATE, miss-normalized resolver for the auth-method prop contract, which\n  // guarantees `''` on a miss so those components' `|| fallback` is live. Same\n  // split as `Auth_MfaChallenge`. Do NOT collapse the two: `tAuth` has six uses and\n  // only this one wants a normalized miss.\n  const tAuthForMethodComponent = useMemo(\n    () => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH),\n    [tComponent],\n  );\n  const loginPath = CommonRoutePaths.login;\n\n  // Where an already-authenticated invitee is forwarded — including one returning from\n  // an SSO/OAuth JIT round-trip. Mirrors `Auth_Main`: the SSO/OAuth method returns to\n  // this (auth) page, `Auth_AuthCallback` lands here after the code exchange, and this\n  // resolves the post-auth destination (a `redirect` param if present, else app home).\n  const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);\n\n  // The invitation-info response is authoritative for the invitee email; fall back to\n  // the URL `email` param until it resolves.\n  const inviteeEmail = invitationInfo?.inviteeEmail ?? email;\n\n  // Prefer the org-merged policy the endpoint resolved (the SAME one the backend accept\n  // validates against) so the strength indicator + client pre-check match the org's real\n  // requirements; fall back to the app-level policy until invitation-info resolves / when\n  // the endpoint couldn't resolve it.\n  const passwordPolicy: PasswordPolicyRules = useMemo(\n    () => invitationInfo?.passwordPolicy ?? resolvedAuth.passwordPolicy ?? DEFAULT_PASSWORD_POLICY,\n    [invitationInfo?.passwordPolicy, resolvedAuth.passwordPolicy],\n  );\n\n  const invitationFormSchema = useMemo(() => UserInvitationFormDtoSchema.refine(\n    (data) => !data.password || data.password === data.confirmPassword,\n    { message: t(UserInvitationLabel.PASSWORD_MISMATCH), path: ['confirmPassword'] },\n  ), [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  // Fetch invitation-info once per token. The endpoint reads the token WITHOUT\n  // consuming it, so a consumed/expired/invalid token surfaces as an error state.\n  useEffect(() => {\n    // Only an UNauthenticated invitee needs method discovery. If already authenticated\n    // (e.g. returning from an SSO/OAuth JIT round-trip that consumed the token), skip\n    // the fetch — the `accessToken` guard below forwards to the app, and hitting the\n    // now-consumed token would only 4xx.\n    if (!token || auth.accessToken) {\n      setInfoLoading(false);\n      return;\n    }\n    let cancelled = false;\n    setInfoLoading(true);\n    setInfoError(null);\n    getManualCallsHttpClient()\n      .getInvitationInfo(token)\n      .then((info) => {\n        if (!cancelled) setInvitationInfo(info);\n      })\n      .catch((e: any) => {\n        if (!cancelled) setInfoError(e?.message || t(UserInvitationLabel.UNEXPECTED_ERROR));\n      })\n      .finally(() => {\n        if (!cancelled) setInfoLoading(false);\n      });\n    return () => { cancelled = true; };\n    // `t` is intentionally omitted from deps. It is memoized on the i18n component bundle (stable\n    // across ordinary renders), so omitting it does NOT capture a per-render-stale closure; it is\n    // omitted so a later i18n-bundle reload cannot re-trigger this one-shot discovery fetch. A rejected\n    // fetch therefore labels the error with the `t` bound when the effect first ran — an acceptable\n    // fallback in the narrow window before i18n is ready.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [token, auth.accessToken]);\n\n  // Renderable, display-ordered first-factor methods from the org's policy.\n  const availableMethods: AvailableMethod[] = useMemo(() => {\n    const methods = invitationInfo?.availableFirstFactorMethods ?? [];\n    return sortMethodsByDisplayOrder(\n      methods.filter((m) => INVITATION_RENDERABLE_METHODS.has(m.method as AuthMethod)),\n    );\n  }, [invitationInfo]);\n\n  // Every renderable method is actionable (PASSKEY now enrolls at accept — Phase 3). The empty\n  // state (route to sign-in) is reserved for an org exposing NO renderable first-factor method\n  // (e.g. an SSO-only org whose per-connection lookup did not resolve).\n  const hasActionableMethod = availableMethods.length > 0;\n\n  // Any accept in flight — gates the decline / alternative-method buttons so a click can't race the\n  // single-use token. Password sets `auth.isLoading` via the context; magic-link + passkey run\n  // outside it (`magicLinkSubmitting` / `passkeyCeremonyInProgress`).\n  const methodSubmitInFlight = auth.isLoading || magicLinkSubmitting || passkeyCeremonyInProgress;\n\n  // Default to the first renderable method in display order.\n  const defaultMethod = useMemo(\n    () => (availableMethods[0]?.method as AuthMethod | undefined) ?? null,\n    [availableMethods],\n  );\n\n  const currentActiveMethod = activeMethod ?? defaultMethod;\n  const alternativeMethods = availableMethods.filter((m) => m.method !== currentActiveMethod);\n\n  useEffect(() => {\n    if (!auth.mfaRequired || !auth.mfaSessionId) return;\n\n    if (auth.availableEnrollmentMethods.length > 0) {\n      navigate(CommonRoutePaths.enrollmentRequired, { replace: true });\n      return;\n    }\n\n    const invitationEmail = inviteeEmail || '';\n    navigate(\n      `${CommonRoutePaths.mfaChallenge}?sessionId=${auth.mfaSessionId}&email=${encodeURIComponent(invitationEmail)}`,\n      { replace: true },\n    );\n  }, [auth.mfaRequired, auth.mfaSessionId, auth.availableEnrollmentMethods, navigate, inviteeEmail]);\n\n  const handleInvitationSubmit = useCallback(async (data: UserInvitationFormDto) => {\n    formMethodsRef.current?.clearErrors('root');\n\n    if (data.password) {\n      const policyResult = AuthUtils.validatePasswordAgainstPolicy(data.password, passwordPolicy);\n      if (!policyResult.valid) {\n        formMethodsRef.current?.setError('root', {\n          type: 'policy',\n          message: resolvePasswordViolationsToLabels(policyResult.violations, t, passwordPolicy).join('. '),\n        });\n        return;\n      }\n    }\n\n    const normalizeText = (value?: string): string | undefined => {\n      const trimmed = value?.trim();\n      return trimmed ? trimmed : undefined;\n    };\n\n    try {\n      await acceptInvitation({\n        invitationToken: token!,\n        firstName: normalizeText(data.firstName),\n        lastName: normalizeText(data.lastName),\n        password: data.password || undefined,\n      });\n      // Session issued → the `auth.accessToken` guard forwards to the app (honoring\n      // `postAuthRedirect`); MFA-gated → the `mfaRequired` effect routes. Nothing to complete here.\n    } catch (e: any) {\n      formMethodsRef.current?.setError('root', {\n        type: 'server',\n        message: e?.message || t(UserInvitationLabel.UNEXPECTED_ERROR),\n      });\n    }\n  }, [acceptInvitation, passwordPolicy, t, token]);\n\n  // Passkey enroll-at-accept: accept (bootstraps the session from the invitation token + returns a\n  // WebAuthn challenge) → run the browser ceremony → verify against the authenticated\n  // register-verify route. See `InvitationPasskeyForm`.\n  const handlePasskeySubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n    setPasskeyError(null);\n    setPasskeyCeremonyInProgress(true);\n    try {\n      const result = await acceptInvitation({\n        invitationToken: token!,\n        firstName,\n        lastName,\n        credentialMethod: AuthMethod.PASSKEY,\n      });\n      const options = result?.passkeyRegistrationOptions;\n      if (options) {\n        // Session issued + a challenge. Enrollment failure is NON-FATAL — the invitation token\n        // already bootstrapped the session, so the invitee proceeds signed in and can add a\n        // passkey later in security settings.\n        try {\n          const credential = await startRegistration({ optionsJSON: options as unknown as PublicKeyCredentialCreationOptionsJSON });\n          await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential });\n        } catch {\n          // Swallow — the session is already issued, so a cancelled/failed ceremony (or the rare\n          // cross-tab logout that clears the session mid-prompt and 401s the verify) is non-fatal:\n          // releasing the flag hands control to the `accessToken` guard, which forwards when the\n          // session survived and otherwise leaves the invitee on the accept screen (benign — they retry).\n        }\n      }\n      // Session path: releasing the flag (finally) → the `auth.accessToken` guard forwards to the\n      // app. MFA-gated path (no options): `acceptInvitation` set `mfaRequired` and the mfaRequired\n      // effect routes to enrollment (the invitee enrolls the passkey there via the existing route).\n    } catch (e: any) {\n      setPasskeyError(e?.message || t(UserInvitationLabel.UNEXPECTED_ERROR));\n    } finally {\n      setPasskeyCeremonyInProgress(false);\n    }\n  }, [acceptInvitation, token, t]);\n\n  // Magic-link accept: emails a link + accepts the invite (via the HTTP client directly — no\n  // session to manage, like the login magic-link). On success the render switches to the terminal\n  // \"check your email\" state; errors propagate to the sub-form's root error.\n  const handleMagicLinkSubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n    setMagicLinkSubmitting(true);\n    try {\n      await getManualCallsHttpClient().acceptInvitation({\n        invitationToken: token!,\n        firstName,\n        lastName,\n        credentialMethod: AuthMethod.MAGIC_LINK,\n      });\n      setMagicLinkSent(true);\n    } catch (e: any) {\n      // Route through the central error handler (logging + frontend-action execution, e.g. the global\n      // lockout UI) so a magic-link failure is handled identically to the password/passkey paths, which\n      // reach `handleError` via `acceptInvitation`. Then RE-THROW so the sub-form's own catch still\n      // renders the inline root error (the UX surface the user sees).\n      handleError(e, 'Invitation acceptance failed (magic link)', { credentialMethod: AuthMethod.MAGIC_LINK });\n      throw e;\n    } finally {\n      // The flag just releases the gate; the inline root error is owned by the sub-form's catch.\n      setMagicLinkSubmitting(false);\n    }\n  }, [token, handleError]);\n\n  const handleDecline = useCallback(async () => {\n    setDeclineError(null);\n    if (!token) {\n      setDeclineError(t(UserInvitationLabel.INVALID_LINK));\n      return;\n    }\n\n    setIsDeclining(true);\n    try {\n      await getManualCallsHttpClient().rejectInvitation({ invitationToken: token });\n      setDeclined(true);\n    } catch (e: any) {\n      setDeclineError(e?.message || t(UserInvitationLabel.UNEXPECTED_ERROR));\n    } finally {\n      setIsDeclining(false);\n    }\n  }, [t, token]);\n\n  // The reused method components self-handle their outcome (SSO/OAuth do a full-page\n  // redirect; magic-link shows its own \"sent\" state), so there is nothing to complete\n  // here. On the rare in-place success the `auth.accessToken` guard below lands the\n  // invitee in the app.\n  const handleMethodSuccess = useCallback((_response: AuthenticationResponse) => {}, []);\n  const handleMethodError = useCallback((_error: string) => {}, []);\n\n  /**\n   * Render the active first-factor method:\n   *  - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms\n   *    (special-cased; never the login flow).\n   *  - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n   *    component from the registry.\n   */\n  const renderActiveMethod = (): React.ReactNode => {\n    if (!currentActiveMethod) return null;\n    const methodConfig = availableMethods.find((m) => m.method === currentActiveMethod);\n    if (!methodConfig) return null;\n\n    if (currentActiveMethod === AuthMethod.PASSWORD) {\n      return (\n        <AutomatedForm\n          schema={invitationFormSchema}\n          defaultValues={{\n            firstName: '',\n            lastName: '',\n            password: '',\n            confirmPassword: '',\n          }}\n          onSubmit={handleInvitationSubmit}\n          validationMode={ValidationMode.ON_BLUR}\n          disabled={auth.isLoading || isDeclining}\n          onFormReady={handleFormReady}\n          labels={{\n            fields: {\n              firstName: t(UserInvitationLabel.FIRST_NAME),\n              lastName: t(UserInvitationLabel.LAST_NAME),\n              password: t(UserInvitationLabel.PASSWORD),\n              confirmPassword: t(UserInvitationLabel.CONFIRM_PASSWORD),\n            },\n          }}\n          layoutTemplate={() => <InvitationFormTemplate invitationEmail={inviteeEmail} passwordPolicy={passwordPolicy} />}\n        />\n      );\n    }\n\n    if (currentActiveMethod === AuthMethod.MAGIC_LINK) {\n      // NOT the reused login `MagicLinkAuthMethod` (which sends a LOGIN magic link that\n      // never accepts the invite and rejects a not-yet-ACTIVE invitee at verify). This\n      // drives `acceptInvitation({ credentialMethod: MAGIC_LINK })`, which activates + flips\n      // the membership before emailing the link. See `handleMagicLinkSubmit`.\n      return (\n        <InvitationMagicLinkForm\n          invitationEmail={inviteeEmail}\n          disabled={auth.isLoading || isDeclining}\n          onSubmit={handleMagicLinkSubmit}\n          t={t}\n          tAuth={tAuth}\n        />\n      );\n    }\n\n    if (currentActiveMethod === AuthMethod.PASSKEY) {\n      // Passkey ENROLL-at-accept (Phase 3): the login `PasskeyAuthMethod` authenticates an\n      // EXISTING credential, so it is NOT reused. `InvitationPasskeyForm` drives\n      // `acceptInvitation({credentialMethod: PASSKEY})` (bootstraps the session + returns a\n      // WebAuthn challenge) then runs the ceremony + verify. See `handlePasskeySubmit`.\n      return (\n        <InvitationPasskeyForm\n          invitationEmail={inviteeEmail}\n          disabled={auth.isLoading || isDeclining}\n          error={passkeyError}\n          onSubmit={handlePasskeySubmit}\n          t={t}\n        />\n      );\n    }\n\n    // ORG_SAML / ORG_OPENID_CONNECT / EXTERNAL_OAUTH2 — reuse the shared login method\n    // components. They are account-agnostic and self-wire their own hooks/redirects\n    // (full-page IdP redirect / OAuth JIT, which consume the INVITED membership); we only\n    // supply the invitee email + org method config. (PASSWORD, MAGIC_LINK, and PASSKEY are\n    // special-cased above — they need invitation-specific accept wiring, not login reuse.)\n    const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];\n    if (!MethodComponent) return null;\n\n    const props: AuthMethodComponentProps = {\n      sessionId: '', // no session for a not-yet-activated invitee\n      email: inviteeEmail ?? '',\n      methodConfig,\n      onSuccess: handleMethodSuccess,\n      onError: handleMethodError,\n      factorLevel: 'first',\n      isLoading: auth.isLoading || isDeclining,\n      t: tAuthForMethodComponent,\n    };\n\n    return <MethodComponent {...props} />;\n  };\n\n  // Already authenticated — including returning from an SSO/OAuth JIT round-trip that\n  // consumed the invite — so forward the invitee into the app rather than re-showing the\n  // accept screen (mirrors `Auth_Main`). Guards against an already-signed-in user\n  // accepting a token minted for a different email.\n  // EXCEPTION: during passkey enroll-at-accept the token is issued BEFORE the WebAuthn ceremony\n  // runs, so suppress the forward until the ceremony finishes (else the component unmounts and\n  // the browser passkey prompt is cancelled); `handlePasskeySubmit` releases the flag when done.\n  // Ordered BEFORE the `!isReady` i18n gate (like `Auth_AuthCallback`): the `<Navigate>` renders no\n  // labels, so a slow/failed label load must not block forwarding an already-authenticated invitee.\n  if (auth.accessToken && !passkeyCeremonyInProgress) {\n    return <Navigate to={postAuthRedirect} replace />;\n  }\n\n  if (!isReady) return null;\n\n  if (!token) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.INVALID_LINK)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <Link href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</Link>\n        </div>\n      </>\n    );\n  }\n\n  if (declined) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.DECLINE_SUCCESS_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.DECLINE_SUCCESS_MESSAGE)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <Link href={loginPath}>{t(UserInvitationLabel.CONTINUE_LINK)}</Link>\n        </div>\n      </>\n    );\n  }\n\n  // Magic-link accepted — the invite is consumed and a sign-in link was emailed. Terminal state:\n  // the invitee finishes by clicking the emailed link (no chooser/decline — the token is gone, so\n  // any other method would only 4xx).\n  if (magicLinkSent) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{tAuth(UserAuthLabel.MAGIC_LINK_SENT_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{tAuth(UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION)}</Text>\n          {inviteeEmail && (\n            <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n          )}\n        </div>\n        <div className=\"text-center\">\n          <Link href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</Link>\n        </div>\n      </>\n    );\n  }\n\n  if (infoLoading) {\n    return (\n      <div className=\"flex items-center justify-center py-group\">\n        <LoadingSpinner size={40} />\n      </div>\n    );\n  }\n\n  if (infoError || !invitationInfo) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{infoError || t(UserInvitationLabel.INVALID_LINK)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <Link href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</Link>\n        </div>\n      </>\n    );\n  }\n\n  // SCIM-managed org → informational only, NO password/method form (locked decision:\n  // the directory is the identity authority, so no local credential is set here).\n  if (invitationInfo.managementMode === InvitationManagementMode.SCIM) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.SCIM_MANAGED_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">\n            {t(UserInvitationLabel.SCIM_MANAGED_MESSAGE)}\n          </Text>\n          {inviteeEmail && (\n            <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n          )}\n        </div>\n\n        {declineError && (\n          <Alert variant=\"destructive\" className=\"mb-group\">\n            <AlertDescription>{declineError}</AlertDescription>\n          </Alert>\n        )}\n\n        <div className=\"text-center mt-group space-y-item-sm\">\n          <Button\n            variant={ButtonVariants_Variant.OUTLINE}\n            onClick={handleDecline}\n            disabled={isDeclining}\n            className=\"w-full\"\n          >\n            {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n          </Button>\n          <Link href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</Link>\n        </div>\n      </>\n    );\n  }\n\n  // OPEN / SSO org → the method chooser.\n  return (\n    <>\n      <div className=\"text-center space-y-item-xs mb-group\">\n        <Heading>{t(UserInvitationLabel.TITLE)}</Heading>\n        <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SUB_TITLE)}</Text>\n        {invitationInfo.organizationName && (\n          <Text className=\"text-sm text-muted-foreground\">{invitationInfo.organizationName}</Text>\n        )}\n        {inviteeEmail && (\n          <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n        )}\n      </div>\n\n      {hasActionableMethod ? (\n        <>\n          <Text className=\"text-sm text-muted-foreground text-center mb-element\">\n            {t(UserInvitationLabel.METHOD_CHOICE_HINT)}\n          </Text>\n\n          {/* Active first-factor method (password form / magic-link form / passkey form / reused SSO·OAuth component). */}\n          {renderActiveMethod()}\n\n          {/* Alternative methods — buttons that switch the active method. */}\n          {alternativeMethods.length > 0 && (\n            <>\n              <LabeledDivider label={tAuth(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n\n              <div className=\"space-y-item\">\n                {alternativeMethods.map((method) => {\n                  const labelKey = METHOD_LABEL_MAP[method.method as AuthMethod];\n                  return (\n                    <Button\n                      key={method.method}\n                      variant={ButtonVariants_Variant.OUTLINE}\n                      className=\"w-full\"\n                      onClick={() => { setActiveMethod(method.method as AuthMethod); setPasskeyError(null); }}\n                      disabled={methodSubmitInFlight || isDeclining}\n                    >\n                      {labelKey ? tAuth(labelKey) : method.method}\n                    </Button>\n                  );\n                })}\n              </div>\n            </>\n          )}\n        </>\n      ) : (\n        /*\n          No renderable first-factor method on this screen — a valid state, not an error. The\n          common case is an SSO-only org whose invitee arrives before directory provisioning: the\n          token-keyed endpoint omits ORG_SAML/ORG_OPENID_CONNECT when no per-connection lookup\n          resolved, yielding an empty set with mode OPEN. Route the invitee to the sign-in page,\n          where email→domain SSO resolution works and the enterprise / OAuth JIT consumes the invite.\n        */\n        <Alert>\n          <AlertDescription>\n            {t(UserInvitationLabel.NO_METHOD_AVAILABLE_HINT)}\n          </AlertDescription>\n        </Alert>\n      )}\n\n      {declineError && (\n        <Alert variant=\"destructive\" className=\"mt-group\">\n          <AlertDescription>{declineError}</AlertDescription>\n        </Alert>\n      )}\n\n      <div className=\"text-center mt-group space-y-item-sm\">\n        <Button\n          variant={ButtonVariants_Variant.OUTLINE}\n          onClick={handleDecline}\n          disabled={methodSubmitInFlight || isDeclining}\n          className=\"w-full\"\n        >\n          {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n        </Button>\n        <Link href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</Link>\n      </div>\n    </>\n  );\n};\n\nexport function Auth_Invitation({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserInvitation_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_UserInvitation_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, 'Auth_Invitation')(preset);\n  return <Component {...props} />;\n}\n"]}
+{"version":3,"file":"Auth_Invitation.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Invitation.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACjI,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,wBAAwB,EACxB,2BAA2B,GAM5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AACzI,OAAO,EAAE,+BAA+B,EAAE,MAAM,2EAA2E,CAAC;AAC5H,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACxI,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EACL,iCAAiC,GAClC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EACL,sBAAsB,GAEvB,MAAM,oEAAoE,CAAC;AAG5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAE1H;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,6BAA6B,GAA4B,IAAI,GAAG,CAAC;IACrE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,OAAO;CACnB,CAAC,CAAC;AAcH;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAA0C,CAAC,EACrE,eAAe,EACf,cAAc,GACf,EAAE,EAAE;IACH,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,8BAA8B;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAEjG,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,+BAA+B,IAAC,KAAK,EAAE,eAAe,GAAI,EAC3D,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,iBAAiB,GAAG,EAEpC,KAAC,yBAAyB,IAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAI,EAE/E,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,EAC5D,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAI5B,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,OAAO,CACL,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EAC3C,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EACrD,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,uBAAuB,GAMxB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACzD,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,4FAA4F;IAC5F,mEAAmE;IACnE,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,gGAAgG;IAChG,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA+C,EAAE,EAAE;QACzF,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE5C,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EACvE,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,2BAA2B,IAAC,eAAe,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,GAAI,CACtF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,yBAAyB,GAI1B,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CACtC,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GACtC,EACP,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAC5C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,EACxD,SAAS,SACT,IACS,CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAMtB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;IACzD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,CAAC,IAA+C,EAAE,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,EACnF,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,yBAAyB,IAAC,eAAe,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,GAAI,CACpF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,EACxD,KAAK,EACL,KAAK,GAC0C,EAAqB,EAAE;IACtE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,CAAC;IACpD,kGAAkG;IAClG,qGAAqG;IACrG,8FAA8F;IAC9F,MAAM,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;IACnC,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAE7C,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,oFAAoF;IACpF,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC;QACJ,qBAAqB,CAAC,8BAA8B;QACpD,qBAAqB,CAAC,wBAAwB;KAC/C,EACD,EAAE,CACH,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,gGAAgG;IAChG,kGAAkG;IAClG,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,6FAA6F;IAC7F,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,0FAA0F;IAC1F,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,iGAAiG;IACjG,+FAA+F;IAC/F,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtE,4EAA4E;IAC5E,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoC,IAAI,CAAC,CAAC;IAC9F,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAChE,kFAAkF;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,6FAA6F;IAC7F,iGAAiG;IACjG,iGAAiG;IACjG,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5H,kFAAkF;IAClF,6EAA6E;IAC7E,gFAAgF;IAChF,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,iFAAiF;IACjF,uFAAuF;IACvF,MAAM,uBAAuB,GAAG,OAAO,CACrC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC5F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC;IAEzC,qFAAqF;IACrF,oFAAoF;IACpF,qFAAqF;IACrF,qFAAqF;IACrF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5G,oFAAoF;IACpF,2CAA2C;IAC3C,MAAM,YAAY,GAAG,cAAc,EAAE,YAAY,IAAI,KAAK,CAAC;IAE3D,sFAAsF;IACtF,uFAAuF;IACvF,wFAAwF;IACxF,oCAAoC;IACpC,MAAM,cAAc,GAAwB,OAAO,CACjD,GAAG,EAAE,CAAC,cAAc,EAAE,cAAc,IAAI,YAAY,CAAC,cAAc,IAAI,uBAAuB,EAC9F,CAAC,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,CAC9D,CAAC;IAEF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAC3E,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAClE,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CACjF,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6EAA6E;IAC7E,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE;QACb,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,qCAAqC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,wBAAwB,EAAE;aACvB,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,SAAS;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,8FAA8F;QAC9F,8FAA8F;QAC9F,oGAAoG;QACpG,gGAAgG;QAChG,sDAAsD;QACtD,uDAAuD;IACzD,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE9B;;;;;;OAMG;IACH,MAAM,gBAAgB,GAAsB,OAAO,CAAC,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,cAAc,EAAE,2BAA2B,IAAI,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;IAC1F,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,6FAA6F;IAC7F,6FAA6F;IAC7F,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAExD,kGAAkG;IAClG,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,IAAI,yBAAyB,CAAC;IAEhG,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAiC,IAAI,IAAI,EACrE,CAAC,gBAAgB,CAAC,CACnB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;IAE5F;;;;;OAKG;IACH,4BAA4B,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,KAAK,EAAE,YAAY,IAAI,SAAS;QAChC,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,WAAW,CAAC,KAAK,EAAE,IAA2B,EAAE,EAAE;QAC/E,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,SAAS,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,KAAc,EAAsB,EAAE;YAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACvC,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,cAAc;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,8EAA8E;YAC9E,oHAAoH;QACtH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3E,iGAAiG;IACjG,oFAAoF;IACpF,sDAAsD;IACtD,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACrG,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,OAAO;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC3B,yFAAyF;gBACzF,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,EAAE,0BAA0B,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,uFAAuF;gBACvF,oFAAoF;gBACpF,sCAAsC;gBACtC,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAA4D,EAAE,CAAC,CAAC;oBAC1H,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC;oBACP,uFAAuF;oBACvF,yFAAyF;oBACzF,uFAAuF;oBACvF,gGAAgG;gBAClG,CAAC;YACH,CAAC;YACD,4FAA4F;YAC5F,6FAA6F;YAC7F,8FAA8F;QAChG,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3D,2FAA2F;IAC3F,gGAAgG;IAChG,2EAA2E;IAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACvG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC;gBACjE,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,UAAU;gBACvC,sGAAsG;gBACtG,qGAAqG;gBACrG,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC;YACH,uGAAuG;YACvG,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,gBAAgB;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;;gBAC5E,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gGAAgG;YAChG,kGAAkG;YAClG,8FAA8F;YAC9F,gEAAgE;YAChE,WAAW,CAAC,CAAC,EAAE,2CAA2C,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACzG,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,2FAA2F;YAC3F,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEzC,mFAAmF;IACnF,oFAAoF;IACpF,kFAAkF;IAClF,sBAAsB;IACtB,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAElE;;;;;;OAMG;IACH,MAAM,kBAAkB,GAAG,GAAoB,EAAE;QAC/C,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,IAAI,mBAAmB,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,oBAAoB,EAC5B,aAAa,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,EAAE;oBACZ,QAAQ,EAAE,EAAE;oBACZ,eAAe,EAAE,EAAE;iBACpB,EACD,QAAQ,EAAE,sBAAsB,EAChC,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;wBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;wBAC1C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;wBACzC,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;qBACzD;iBACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,KAAC,sBAAsB,IAAC,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,GAAI,GAC/G,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAClD,kFAAkF;YAClF,iFAAiF;YACjF,uFAAuF;YACvF,wEAAwE;YACxE,OAAO,CACL,KAAC,uBAAuB,IACtB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,QAAQ,EAAE,qBAAqB,EAC/B,CAAC,EAAE,CAAC,EACJ,KAAK,EAAE,KAAK,GACZ,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/C,qFAAqF;YACrF,2EAA2E;YAC3E,sFAAsF;YACtF,kFAAkF;YAClF,OAAO,CACL,KAAC,qBAAqB,IACpB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,CAAC,EAAE,CAAC,GACJ,CACH,CAAC;QACJ,CAAC;QAED,kFAAkF;QAClF,gFAAgF;QAChF,sFAAsF;QACtF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,KAAK,GAA6B;YACtC,SAAS,EAAE,EAAE,EAAE,6CAA6C;YAC5D,KAAK,EAAE,YAAY,IAAI,EAAE;YACzB,YAAY;YACZ,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW;YACxC,CAAC,EAAE,uBAAuB;SAC3B,CAAC;QAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;IACxC,CAAC,CAAC;IAEF,oFAAoF;IACpF,uFAAuF;IACvF,gFAAgF;IAChF,kDAAkD;IAClD,8FAA8F;IAC9F,6FAA6F;IAC7F,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IAC3E,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,GAAW,EACjE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAQ,IACtF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,GAAqB,GAC1F,IACL,CACJ,CAAC;IACJ,CAAC;IAED,qHAAqH;IACrH,sFAAsF;IACtF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,GAAW,EAClE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAAQ,IACvF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,oCAAoC;IACpC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAW,EAC/D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAQ,EAC3F,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CACL,cAAK,SAAS,EAAC,2CAA2C,YACxD,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,GACxB,CACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,SAAS,IAAI,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IACxF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,cAAc,CAAC,cAAc,KAAK,wBAAwB,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAAW,EAC9D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,GACvC,EACN,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,IACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAW,EACjD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAQ,EAC3E,cAAc,CAAC,gBAAgB,IAAI,CAClC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,cAAc,CAAC,gBAAgB,GAAQ,CACzF,EACA,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,mBAAmB,CAAC,CAAC,CAAC,CACrB,8BACE,KAAC,IAAI,IAAC,SAAS,EAAC,sDAAsD,YACnE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GACrC,EAGN,kBAAkB,EAAE,EAGpB,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChC,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EAErE,KAAC,oBAAoB,IACnB,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAoB,CAAC;gCACxE;;;;;;;mCAOG;gCACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,EAAE;oCACzD,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;oCAClF,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC;oCACxD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;oCACvC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;iCACvF,CAAC,EACF,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACzE,QAAQ,EAAE,oBAAoB,IAAI,WAAW,GAC7C,IACD,CACJ,IACA,CACJ,CAAC,CAAC,CAAC;YACF;;;;;;cAME;YACF,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,EAEA,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,oBAAoB,IAAI,WAAW,EAC7C,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,IACvF,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAyE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAAiD,qBAAqB,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useFormContext } from 'react-hook-form';\nimport { CorePresetNames, FrontendComponentType, UserAuthLabel, UserInvitationLabel } from '@wildo-ai/presets-components-models';\nimport {\n  AuthNextStep,\n  AuthMethod,\n  AuthUtils,\n  InvitationManagementMode,\n  UserInvitationFormDtoSchema,\n  type AuthenticationResponse,\n  type AuthInvitationInfoResponse,\n  type AvailableMethod,\n  type PasswordPolicyRules,\n  type UserInvitationFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { PasswordStrengthIndicator, DEFAULT_PASSWORD_POLICY } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport { CredentialUsernameAutofillField } from '~wildo-frontend-lib/components/auth/utils/CredentialUsernameAutofillField';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { resolveAuthMethodChoiceLabel } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { makeComponentLabelResolver } from '~wildo-frontend-lib/core/i18n/component-label-resolution.utils';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useError } from '~wildo-frontend-lib/core/errors/useError';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { extractAuthRedirectFromSearch, resolvePostAuthRedirect } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useMfaContinuationNavigation } from '~wildo-frontend-lib/components/auth/utils/useMfaContinuationNavigation';\nimport {\n  resolvePasswordViolationsToLabels,\n} from '~wildo-frontend-lib/components/auth/utils/resolvePasswordViolationsToLabels';\nimport {\n  AUTH_METHOD_COMPONENTS,\n  type AuthMethodComponentProps,\n} from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\n/**\n * First-factor methods the PUBLIC invitation-accept chooser knows how to render.\n *\n * The invitation-info endpoint returns whatever the org allows for a joining member,\n * but the chooser can only surface methods that are usable BEFORE the invitee has an\n * account/session:\n *  - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms that drive\n *    `acceptInvitation` (set a password / email a link / enroll a passkey). NOT the login\n *    method components — those authenticate an EXISTING account, which an invitee lacks. In\n *    particular the login magic-link (`magicLinkSend`) is ACTIVE-only and never accepts the\n *    invite; the passkey login component authenticates an already-enrolled credential.\n *  - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n *    components, which are account-agnostic (full-page redirect) and consume the `INVITED`\n *    membership via enterprise-SSO JIT / OAuth JIT (email match on the live membership, no token).\n *\n * Session-bound MFA methods (`SMS_OTP` / `EMAIL_OTP` / `TOTP`) are intentionally\n * excluded — they need a session the invitee does not have.\n */\nconst INVITATION_RENDERABLE_METHODS: ReadonlySet<AuthMethod> = new Set([\n  AuthMethod.PASSWORD,\n  AuthMethod.ORG_SAML,\n  AuthMethod.ORG_OPENID_CONNECT,\n  AuthMethod.EXTERNAL_OAUTH2,\n  AuthMethod.MAGIC_LINK,\n  AuthMethod.PASSKEY,\n]);\n\n\ninterface InvitationFormTemplateProps {\n  invitationEmail?: string;\n  /**\n   * The effective (org-merged) password policy the parent resolved from the\n   * invitation-info response — the SAME policy the backend accept endpoint enforces —\n   * falling back to the app-level policy. Passed in (not read from `useResolvedAuthConfig`\n   * here) so the strength indicator matches what the org actually requires.\n   */\n  passwordPolicy: PasswordPolicyRules;\n}\n\n/**\n * Password-method accept form body — first/last name + optional password with the\n * strength indicator + a hidden username field for password-manager autofill.\n *\n * Rendered only when `PASSWORD` is the active chooser method. Password is OPTIONAL\n * here (a passwordless accept creates the account and the user adds a credential\n * later); the enclosing chooser owns the method-choice hint, so this template no\n * longer renders a standalone \"password is optional\" aside.\n */\nconst InvitationFormTemplate: React.FC<InvitationFormTemplateProps> = ({\n  invitationEmail,\n  passwordPolicy,\n}) => {\n  const { formState } = useFormContext();\n  const { tComponent, isReady } = useI18n({\n    component: FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n  });\n\n  const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key);\n\n  if (!isReady) return null;\n\n  return (\n    <FormLayout>\n      <CredentialUsernameAutofillField email={invitationEmail} />\n      <FormField name=\"firstName\" />\n      <FormField name=\"lastName\" />\n      <FormField name=\"password\" />\n      <FormField name=\"confirmPassword\" />\n\n      <PasswordStrengthIndicator fieldName=\"password\" policy={passwordPolicy} t={t} />\n\n      {formState.errors.root && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{formState.errors.root.message}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={t(UserInvitationLabel.ACCEPT_INVITATION)}\n        submittingLabel={t(UserInvitationLabel.ACCEPTING_INVITATION)}\n        fullWidth\n      />\n    </FormLayout>\n  );\n};\n\n/**\n * Body of the magic-link accept sub-form (first/last name + send button). Split out so it\n * can read `formState.errors.root` via `useFormContext` inside the `AutomatedForm` provider.\n */\nconst InvitationMagicLinkTemplate: React.FC<{\n  invitationEmail?: string;\n  t: (key: string) => string;\n  tAuth: (key: string) => string;\n}> = ({ invitationEmail, t, tAuth }) => {\n  const { formState } = useFormContext();\n  return (\n    <FormLayout>\n      {invitationEmail && (\n        <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n      )}\n      <FormField name=\"firstName\" />\n      <FormField name=\"lastName\" />\n\n      {formState.errors.root && (\n        <Alert variant=\"destructive\">\n          <AlertDescription>{formState.errors.root.message}</AlertDescription>\n        </Alert>\n      )}\n\n      <SubmitButton\n        label={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n        submittingLabel={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n        fullWidth\n      />\n    </FormLayout>\n  );\n};\n\n/**\n * Magic-link ACCEPT sub-form — the invitation-aware counterpart of the login\n * `MagicLinkAuthMethod`.\n *\n * The login component sends a *login* magic link via `magicLinkSend`, which never accepts\n * the invitation: `sendMagicLink` resolves users ACTIVE-only, so a not-yet-activated\n * (`PENDING_INVITATION`) invitee gets no email, and `verifyMagicLink` rejects any non-ACTIVE\n * user and never flips the INVITED membership. So it is NOT reused here.\n *\n * Instead this drives the purpose-built `acceptInvitation({ credentialMethod: MAGIC_LINK })`\n * endpoint, which ACTIVATES the invitee + flips the membership FIRST and only THEN mints +\n * emails the link — so the eventual `verifyMagicLink` click (now ACTIVE) establishes the\n * session. First/last name are collected because the accept DTO requires them (the invitee's\n * profile is seeded at acceptance). No session is issued (the parent switches to a terminal\n * \"check your email\" state); the session lands when the invitee clicks the emailed link.\n */\nconst InvitationMagicLinkForm: React.FC<{\n  invitationEmail?: string;\n  disabled?: boolean;\n  onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n  t: (key: string) => string;\n  tAuth: (key: string) => string;\n}> = ({ invitationEmail, disabled, onSubmit, t, tAuth }) => {\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  // Only the name fields — reuse the accept form schema's first/last (with their autocomplete\n  // decorators); the credential is the emailed link, not a password.\n  const schema = useMemo(\n    () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n    [],\n  );\n\n  // On success the PARENT switches to the terminal \"check your email\" state — the accept consumed\n  // the token + accepted the invite, so there is NO in-place \"sent\" / \"try another method\" state\n  // (that would dead-end on the now-consumed token). Only errors are surfaced here.\n  const handleSubmit = useCallback(async (data: { firstName?: string; lastName?: string }) => {\n    formMethodsRef.current?.clearErrors('root');\n    try {\n      await onSubmit(data.firstName?.trim() || undefined, data.lastName?.trim() || undefined);\n    } catch (e: unknown) {\n      formMethodsRef.current?.setError('root', {\n        type: 'server',\n        message: toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)),\n      });\n    }\n  }, [onSubmit, t, toUserFacingErrorMessage]);\n\n  return (\n    <AutomatedForm\n      schema={schema}\n      defaultValues={{ firstName: '', lastName: '' }}\n      onSubmit={handleSubmit}\n      validationMode={ValidationMode.ON_BLUR}\n      disabled={disabled}\n      onFormReady={(formMethods) => { formMethodsRef.current = formMethods; }}\n      labels={{\n        fields: {\n          firstName: t(UserInvitationLabel.FIRST_NAME),\n          lastName: t(UserInvitationLabel.LAST_NAME),\n        },\n      }}\n      layoutTemplate={() => (\n        <InvitationMagicLinkTemplate invitationEmail={invitationEmail} t={t} tAuth={tAuth} />\n      )}\n    />\n  );\n};\n\n/**\n * Body of the passkey accept sub-form. The ceremony error is owned by the parent (the WebAuthn\n * flow runs outside the form), so it is passed in rather than read from `formState`.\n */\nconst InvitationPasskeyTemplate: React.FC<{\n  invitationEmail?: string;\n  error?: string | null;\n  t: (key: string) => string;\n}> = ({ invitationEmail, error, t }) => (\n  <FormLayout>\n    {invitationEmail && (\n      <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n    )}\n    <Text className=\"text-sm text-muted-foreground text-center\">\n      {t(UserInvitationLabel.PASSKEY_DESCRIPTION)}\n    </Text>\n    <FormField name=\"firstName\" />\n    <FormField name=\"lastName\" />\n\n    {error && (\n      <Alert variant=\"destructive\">\n        <AlertDescription>{error}</AlertDescription>\n      </Alert>\n    )}\n\n    <SubmitButton\n      label={t(UserInvitationLabel.PASSKEY_CREATE)}\n      submittingLabel={t(UserInvitationLabel.PASSKEY_CREATING)}\n      fullWidth\n    />\n  </FormLayout>\n);\n\n/**\n * Passkey ENROLL-at-accept sub-form (Phase 3). Collects the invitee's name (the accept DTO\n * requires it; the profile is seeded at acceptance), then hands off to the parent's `onSubmit`,\n * which drives `acceptInvitation({credentialMethod: PASSKEY})` — the invitation token bootstraps\n * the session and the response carries a WebAuthn registration challenge — runs the browser\n * ceremony (`startRegistration`), and completes it against the authenticated\n * `/auth/passkey/register/verify` route. Passkey enrollment is the GO-FORWARD credential, not\n * this session's authenticator, so a cancelled/failed ceremony is non-fatal (the invitee is\n * already signed in and can add a passkey later). Falls back to an informational message when the\n * browser has no WebAuthn support.\n */\nconst InvitationPasskeyForm: React.FC<{\n  invitationEmail?: string;\n  disabled?: boolean;\n  error?: string | null;\n  onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n  t: (key: string) => string;\n}> = ({ invitationEmail, disabled, error, onSubmit, t }) => {\n  const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n  const schema = useMemo(\n    () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n    [],\n  );\n\n  if (!isSupported) {\n    return (\n      <Alert>\n        <AlertDescription>\n          {t(UserInvitationLabel.PASSKEY_UNAVAILABLE_HINT)}\n        </AlertDescription>\n      </Alert>\n    );\n  }\n\n  return (\n    <AutomatedForm\n      schema={schema}\n      defaultValues={{ firstName: '', lastName: '' }}\n      onSubmit={(data: { firstName?: string; lastName?: string }) =>\n        onSubmit(data.firstName?.trim() || undefined, data.lastName?.trim() || undefined)}\n      validationMode={ValidationMode.ON_BLUR}\n      disabled={disabled}\n      labels={{\n        fields: {\n          firstName: t(UserInvitationLabel.FIRST_NAME),\n          lastName: t(UserInvitationLabel.LAST_NAME),\n        },\n      }}\n      layoutTemplate={() => (\n        <InvitationPasskeyTemplate invitationEmail={invitationEmail} error={error} t={t} />\n      )}\n    />\n  );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserInvitation_DefaultProps {\n  token?: string;\n  email?: string;\n}\n\nexport const PublicLayoutPreset_UserInvitation_Default = ({\n  token,\n  email,\n}: PublicLayoutPreset_UserInvitation_DefaultProps): React.JSX.Element => {\n  const { auth, acceptInvitation } = useAuthSession();\n  // Central error handler — the password/passkey paths reach it via `acceptInvitation` (the context\n  // calls `handleError` in its catch); the magic-link path calls the HTTP client directly, so it wires\n  // `handleError` itself (below) to keep central logging + frontend-action execution symmetric.\n  const { handleError } = useError();\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n  const resolvedAuth = useResolvedAuthConfig();\n\n  // Load BOTH label namespaces: the invitation chrome (`USER_INVITATION`) plus the\n  // login method components' namespace (`USER_AUTH`) — the reused SAML/OIDC/OAuth2/\n  // magic-link components label themselves from `UserAuthLabel.*`, and we hand them\n  // `tAuth`. The array is memoized so `useI18n` doesn't re-request keys every render.\n  const i18nComponents = useMemo(\n    () => [\n      FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n      FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n    ],\n    [],\n  );\n  const { tComponent, isReady } = useI18n({ component: i18nComponents });\n  const location = useLocation();\n  const formMethodsRef = useRef<FormMethods | null>(null);\n  const [isDeclining, setIsDeclining] = useState(false);\n  const [declined, setDeclined] = useState(false);\n  const [declineError, setDeclineError] = useState<string | null>(null);\n  // Passkey enroll-at-accept runs a WebAuthn ceremony AFTER the session is issued. While it runs,\n  // the `auth.accessToken` guard below is suppressed so the component isn't unmounted mid-ceremony.\n  const [passkeyCeremonyInProgress, setPasskeyCeremonyInProgress] = useState(false);\n  const [passkeyError, setPasskeyError] = useState<string | null>(null);\n  // Magic-link accept issues NO session — it emails a link + accepts the invite (consuming the\n  // token). On success we switch to a TERMINAL \"check your email\" state rather than leaving the\n  // chooser visible (whose other methods + decline would now dead-end on the consumed token).\n  const [magicLinkSent, setMagicLinkSent] = useState(false);\n  // #1158: accepted without a session; the invitee's policy requires signing in separately.\n  const [signInRequired, setSignInRequired] = useState(false);\n  // In-flight flag for the magic-link accept (which bypasses the context's `auth.isLoading`), used\n  // to gate the decline / alternative-method buttons so a click can't race the single-use token.\n  const [magicLinkSubmitting, setMagicLinkSubmitting] = useState(false);\n\n  // Invitation-info discovery (SSO/SCIM-aware method set) keyed by the token.\n  const [invitationInfo, setInvitationInfo] = useState<AuthInvitationInfoResponse | null>(null);\n  const [infoLoading, setInfoLoading] = useState(true);\n  const [infoError, setInfoError] = useState<string | null>(null);\n  // User-selected active method; `null` → fall back to the display-ordered default.\n  const [activeMethod, setActiveMethod] = useState<AuthMethod | null>(null);\n\n  // Memoized on `tComponent` so `t`/`tAuth` keep a STABLE identity across renders — the schema\n  // (`invitationFormSchema`) and submit callbacks depend on them, and an unstable `t` would defeat\n  // those memos and churn the sub-form props (risking focus loss on a mid-entry parent re-render).\n  const t = useCallback((key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key), [tComponent]);\n  // `tAuth` keeps `tComponent`'s key-path-on-miss behaviour, because THIS component\n  // renders its result directly at five sites with no fallback (the magic-link\n  // button, the \"link sent\" heading and body, the methods divider, the per-method\n  // label). Normalizing it to `''` would turn a missing label into an invisible\n  // button and an empty heading — strictly worse than a visible key path.\n  const tAuth = useCallback(\n    (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key),\n    [tComponent],\n  );\n\n  // The auth-method prop contract's resolver, built through the shared seam so the\n  // `USER_AUTH` namespace binding lives in one place. Same shape as `Auth_MfaChallenge`.\n  const tAuthForMethodComponent = useMemo(\n    () => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH),\n    [tComponent],\n  );\n  const loginPath = CommonRoutePaths.login;\n\n  // Where an already-authenticated invitee is forwarded — including one returning from\n  // an SSO/OAuth JIT round-trip. Mirrors `Auth_Main`: the SSO/OAuth method returns to\n  // this (auth) page, `Auth_AuthCallback` lands here after the code exchange, and this\n  // resolves the post-auth destination (a `redirect` param if present, else app home).\n  const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);\n  const authRedirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);\n\n  // The invitation-info response is authoritative for the invitee email; fall back to\n  // the URL `email` param until it resolves.\n  const inviteeEmail = invitationInfo?.inviteeEmail ?? email;\n\n  // Prefer the org-merged policy the endpoint resolved (the SAME one the backend accept\n  // validates against) so the strength indicator + client pre-check match the org's real\n  // requirements; fall back to the app-level policy until invitation-info resolves / when\n  // the endpoint couldn't resolve it.\n  const passwordPolicy: PasswordPolicyRules = useMemo(\n    () => invitationInfo?.passwordPolicy ?? resolvedAuth.passwordPolicy ?? DEFAULT_PASSWORD_POLICY,\n    [invitationInfo?.passwordPolicy, resolvedAuth.passwordPolicy],\n  );\n\n  const invitationFormSchema = useMemo(() => UserInvitationFormDtoSchema.refine(\n    (data) => !data.password || data.password === data.confirmPassword,\n    { message: t(UserInvitationLabel.PASSWORD_MISMATCH), path: ['confirmPassword'] },\n  ), [t]);\n\n  const handleFormReady = useCallback((formMethods: FormMethods) => {\n    formMethodsRef.current = formMethods;\n  }, []);\n\n  // Fetch invitation-info once per token. The endpoint reads the token WITHOUT\n  // consuming it, so a consumed/expired/invalid token surfaces as an error state.\n  useEffect(() => {\n    // Only an UNauthenticated invitee needs method discovery. If already authenticated\n    // (e.g. returning from an SSO/OAuth JIT round-trip that consumed the token), skip\n    // the fetch — the `accessToken` guard below forwards to the app, and hitting the\n    // now-consumed token would only 4xx.\n    if (!token || auth.accessToken) {\n      setInfoLoading(false);\n      return;\n    }\n    let cancelled = false;\n    setInfoLoading(true);\n    setInfoError(null);\n    getManualCallsHttpClient()\n      .getInvitationInfo(token)\n      .then((info) => {\n        if (!cancelled) setInvitationInfo(info);\n      })\n      .catch((e: unknown) => {\n        if (!cancelled) setInfoError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n      })\n      .finally(() => {\n        if (!cancelled) setInfoLoading(false);\n      });\n    return () => { cancelled = true; };\n    // `t` is intentionally omitted from deps. It is memoized on the i18n component bundle (stable\n    // across ordinary renders), so omitting it does NOT capture a per-render-stale closure; it is\n    // omitted so a later i18n-bundle reload cannot re-trigger this one-shot discovery fetch. A rejected\n    // fetch therefore labels the error with the `t` bound when the effect first ran — an acceptable\n    // fallback in the narrow window before i18n is ready.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [token, auth.accessToken]);\n\n  /*\n   * Renderable first-factor methods from the org's policy, in the order the server sent (#1218).\n   *\n   * The invitation-info endpoint builds this list through the SAME `buildFirstFactorMethodsForPolicy` the sign-in\n   * page's `identify` uses, which orders by `AUTH_METHOD_PRECEDENCE`. That is why this page can stop re-sorting and\n   * why it inherits the fix rather than needing its own: filtering preserves order.\n   */\n  const availableMethods: AvailableMethod[] = useMemo(() => {\n    const methods = invitationInfo?.availableFirstFactorMethods ?? [];\n    return methods.filter((m) => INVITATION_RENDERABLE_METHODS.has(m.method as AuthMethod));\n  }, [invitationInfo]);\n\n  // Every renderable method is actionable (PASSKEY now enrolls at accept — Phase 3). The empty\n  // state (route to sign-in) is reserved for an org exposing NO renderable first-factor method\n  // (e.g. an SSO-only org whose per-connection lookup did not resolve).\n  const hasActionableMethod = availableMethods.length > 0;\n\n  // Any accept in flight — gates the decline / alternative-method buttons so a click can't race the\n  // single-use token. Password sets `auth.isLoading` via the context; magic-link + passkey run\n  // outside it (`magicLinkSubmitting` / `passkeyCeremonyInProgress`).\n  const methodSubmitInFlight = auth.isLoading || magicLinkSubmitting || passkeyCeremonyInProgress;\n\n  // Default to the first renderable method in display order.\n  const defaultMethod = useMemo(\n    () => (availableMethods[0]?.method as AuthMethod | undefined) ?? null,\n    [availableMethods],\n  );\n\n  const currentActiveMethod = activeMethod ?? defaultMethod;\n  const alternativeMethods = availableMethods.filter((m) => m.method !== currentActiveMethod);\n\n  /*\n   * The routing every auth screen shares (#972): nothing usable → the enrollment gate, which for an\n   * INVITATION session completes it and signs the invitee in (#603); something usable → the challenge.\n   * This screen already honours a `redirect` param for its post-auth destination, so the same target\n   * rides the MFA detour — the inline copy this replaced dropped it there.\n   */\n  useMfaContinuationNavigation({\n    mfaRequired: auth.mfaRequired,\n    mfaSessionId: auth.mfaSessionId,\n    usableSecondFactorMethods: auth.usableSecondFactorMethods,\n    email: inviteeEmail || undefined,\n    authRedirectTarget,\n  });\n\n  const handleInvitationSubmit = useCallback(async (data: UserInvitationFormDto) => {\n    formMethodsRef.current?.clearErrors('root');\n\n    if (data.password) {\n      const policyResult = AuthUtils.validatePasswordAgainstPolicy(data.password, passwordPolicy);\n      if (!policyResult.valid) {\n        formMethodsRef.current?.setError('root', {\n          type: 'policy',\n          message: resolvePasswordViolationsToLabels(policyResult.violations, t, passwordPolicy).join('. '),\n        });\n        return;\n      }\n    }\n\n    const normalizeText = (value?: string): string | undefined => {\n      const trimmed = value?.trim();\n      return trimmed ? trimmed : undefined;\n    };\n\n    try {\n      const result = await acceptInvitation({\n        invitationToken: token!,\n        firstName: normalizeText(data.firstName),\n        lastName: normalizeText(data.lastName),\n        password: data.password || undefined,\n      });\n      if (result?.signInRequired) setSignInRequired(true);\n      // Session issued → the `auth.accessToken` guard forwards to the app (honoring\n      // `postAuthRedirect`); MFA-gated → the `mfaRequired` effect routes; no session (#1158) → the sign-in state renders.\n    } catch (e: unknown) {\n      formMethodsRef.current?.setError('root', {\n        type: 'server',\n        message: toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)),\n      });\n    }\n  }, [acceptInvitation, passwordPolicy, t, token, toUserFacingErrorMessage]);\n\n  // Passkey enroll-at-accept: accept (bootstraps the session from the invitation token + returns a\n  // WebAuthn challenge) → run the browser ceremony → verify against the authenticated\n  // register-verify route. See `InvitationPasskeyForm`.\n  const handlePasskeySubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n    setPasskeyError(null);\n    setPasskeyCeremonyInProgress(true);\n    try {\n      const result = await acceptInvitation({\n        invitationToken: token!,\n        firstName,\n        lastName,\n        credentialMethod: AuthMethod.PASSKEY,\n      });\n      if (result?.signInRequired) {\n        // #1158: no session, so there is no ceremony to run; the terminal sign-in state renders.\n        setSignInRequired(true);\n        return;\n      }\n      const options = result?.passkeyRegistrationOptions;\n      if (options) {\n        // Session issued + a challenge. Enrollment failure is NON-FATAL — the invitation token\n        // already bootstrapped the session, so the invitee proceeds signed in and can add a\n        // passkey later in security settings.\n        try {\n          const credential = await startRegistration({ optionsJSON: options as unknown as PublicKeyCredentialCreationOptionsJSON });\n          await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential });\n        } catch {\n          // Swallow — the session is already issued, so a cancelled/failed ceremony (or the rare\n          // cross-tab logout that clears the session mid-prompt and 401s the verify) is non-fatal:\n          // releasing the flag hands control to the `accessToken` guard, which forwards when the\n          // session survived and otherwise leaves the invitee on the accept screen (benign — they retry).\n        }\n      }\n      // Session path: releasing the flag (finally) → the `auth.accessToken` guard forwards to the\n      // app. MFA-gated path (no options): `acceptInvitation` set `mfaRequired` and the mfaRequired\n      // effect routes to enrollment (the invitee enrolls the passkey there via the existing route).\n    } catch (e: unknown) {\n      setPasskeyError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n    } finally {\n      setPasskeyCeremonyInProgress(false);\n    }\n  }, [acceptInvitation, token, t, toUserFacingErrorMessage]);\n\n  // Magic-link accept: emails a link + accepts the invite (via the HTTP client directly — no\n  // session to manage, like the login magic-link). On success the render switches to the terminal\n  // \"check your email\" state; errors propagate to the sub-form's root error.\n  const handleMagicLinkSubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n    setMagicLinkSubmitting(true);\n    try {\n      const response = await getManualCallsHttpClient().acceptInvitation({\n        invitationToken: token!,\n        firstName,\n        lastName,\n        credentialMethod: AuthMethod.MAGIC_LINK,\n        // The emailed link is opened on another page, so the deep link must travel inside it (#1014). Already\n        // same-origin: `extractAuthRedirectFromSearch` sanitised it, and the client and backend check again.\n        redirect: authRedirectTarget,\n      });\n      // #1158: an accept that issued no session sends no link either; say so rather than \"check your email\".\n      if (response.nextStep === AuthNextStep.SIGN_IN_REQUIRED) setSignInRequired(true);\n      else setMagicLinkSent(true);\n    } catch (e: any) {\n      // Route through the central error handler (logging + frontend-action execution, e.g. the global\n      // lockout UI) so a magic-link failure is handled identically to the password/passkey paths, which\n      // reach `handleError` via `acceptInvitation`. Then RE-THROW so the sub-form's own catch still\n      // renders the inline root error (the UX surface the user sees).\n      handleError(e, 'Invitation acceptance failed (magic link)', { credentialMethod: AuthMethod.MAGIC_LINK });\n      throw e;\n    } finally {\n      // The flag just releases the gate; the inline root error is owned by the sub-form's catch.\n      setMagicLinkSubmitting(false);\n    }\n  }, [token, handleError, authRedirectTarget]);\n\n  const handleDecline = useCallback(async () => {\n    setDeclineError(null);\n    if (!token) {\n      setDeclineError(t(UserInvitationLabel.INVALID_LINK));\n      return;\n    }\n\n    setIsDeclining(true);\n    try {\n      await getManualCallsHttpClient().rejectInvitation({ invitationToken: token });\n      setDeclined(true);\n    } catch (e: unknown) {\n      setDeclineError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n    } finally {\n      setIsDeclining(false);\n    }\n  }, [t, token, toUserFacingErrorMessage]);\n\n  // The reused method components self-handle their outcome (SSO/OAuth do a full-page\n  // redirect; magic-link shows its own \"sent\" state), so there is nothing to complete\n  // here. On the rare in-place success the `auth.accessToken` guard below lands the\n  // invitee in the app.\n  const handleMethodSuccess = useCallback((_response: AuthenticationResponse) => {}, []);\n  const handleMethodError = useCallback((_error: string) => {}, []);\n\n  /**\n   * Render the active first-factor method:\n   *  - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms\n   *    (special-cased; never the login flow).\n   *  - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n   *    component from the registry.\n   */\n  const renderActiveMethod = (): React.ReactNode => {\n    if (!currentActiveMethod) return null;\n    const methodConfig = availableMethods.find((m) => m.method === currentActiveMethod);\n    if (!methodConfig) return null;\n\n    if (currentActiveMethod === AuthMethod.PASSWORD) {\n      return (\n        <AutomatedForm\n          schema={invitationFormSchema}\n          defaultValues={{\n            firstName: '',\n            lastName: '',\n            password: '',\n            confirmPassword: '',\n          }}\n          onSubmit={handleInvitationSubmit}\n          validationMode={ValidationMode.ON_BLUR}\n          disabled={auth.isLoading || isDeclining}\n          onFormReady={handleFormReady}\n          labels={{\n            fields: {\n              firstName: t(UserInvitationLabel.FIRST_NAME),\n              lastName: t(UserInvitationLabel.LAST_NAME),\n              password: t(UserInvitationLabel.PASSWORD),\n              confirmPassword: t(UserInvitationLabel.CONFIRM_PASSWORD),\n            },\n          }}\n          layoutTemplate={() => <InvitationFormTemplate invitationEmail={inviteeEmail} passwordPolicy={passwordPolicy} />}\n        />\n      );\n    }\n\n    if (currentActiveMethod === AuthMethod.MAGIC_LINK) {\n      // NOT the reused login `MagicLinkAuthMethod` (which sends a LOGIN magic link that\n      // never accepts the invite and rejects a not-yet-ACTIVE invitee at verify). This\n      // drives `acceptInvitation({ credentialMethod: MAGIC_LINK })`, which activates + flips\n      // the membership before emailing the link. See `handleMagicLinkSubmit`.\n      return (\n        <InvitationMagicLinkForm\n          invitationEmail={inviteeEmail}\n          disabled={auth.isLoading || isDeclining}\n          onSubmit={handleMagicLinkSubmit}\n          t={t}\n          tAuth={tAuth}\n        />\n      );\n    }\n\n    if (currentActiveMethod === AuthMethod.PASSKEY) {\n      // Passkey ENROLL-at-accept (Phase 3): the login `PasskeyAuthMethod` authenticates an\n      // EXISTING credential, so it is NOT reused. `InvitationPasskeyForm` drives\n      // `acceptInvitation({credentialMethod: PASSKEY})` (bootstraps the session + returns a\n      // WebAuthn challenge) then runs the ceremony + verify. See `handlePasskeySubmit`.\n      return (\n        <InvitationPasskeyForm\n          invitationEmail={inviteeEmail}\n          disabled={auth.isLoading || isDeclining}\n          error={passkeyError}\n          onSubmit={handlePasskeySubmit}\n          t={t}\n        />\n      );\n    }\n\n    // ORG_SAML / ORG_OPENID_CONNECT / EXTERNAL_OAUTH2 — reuse the shared login method\n    // components. They are account-agnostic and self-wire their own hooks/redirects\n    // (full-page IdP redirect / OAuth JIT, which consume the INVITED membership); we only\n    // supply the invitee email + org method config. (PASSWORD, MAGIC_LINK, and PASSKEY are\n    // special-cased above — they need invitation-specific accept wiring, not login reuse.)\n    const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];\n    if (!MethodComponent) return null;\n\n    const props: AuthMethodComponentProps = {\n      sessionId: '', // no session for a not-yet-activated invitee\n      email: inviteeEmail ?? '',\n      methodConfig,\n      onSuccess: handleMethodSuccess,\n      onError: handleMethodError,\n      factorLevel: 'first',\n      isLoading: auth.isLoading || isDeclining,\n      t: tAuthForMethodComponent,\n    };\n\n    return <MethodComponent {...props} />;\n  };\n\n  // Already authenticated — including returning from an SSO/OAuth JIT round-trip that\n  // consumed the invite — so forward the invitee into the app rather than re-showing the\n  // accept screen (mirrors `Auth_Main`). Guards against an already-signed-in user\n  // accepting a token minted for a different email.\n  // EXCEPTION: during passkey enroll-at-accept the token is issued BEFORE the WebAuthn ceremony\n  // runs, so suppress the forward until the ceremony finishes (else the component unmounts and\n  // the browser passkey prompt is cancelled); `handlePasskeySubmit` releases the flag when done.\n  // Ordered BEFORE the `!isReady` i18n gate (like `Auth_AuthCallback`): the `<Navigate>` renders no\n  // labels, so a slow/failed label load must not block forwarding an already-authenticated invitee.\n  if (auth.accessToken && !passkeyCeremonyInProgress) {\n    return <Navigate to={postAuthRedirect} replace />;\n  }\n\n  if (!isReady) return null;\n\n  if (!token) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.INVALID_LINK)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  if (declined) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.DECLINE_SUCCESS_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.DECLINE_SUCCESS_MESSAGE)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.CONTINUE_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  // Accepted without a session (#1158): the invitee's policy disables the email-possession sign-in the invitation link\n  // amounts to. Terminal: the membership exists, and they continue on the sign-in page.\n  if (signInRequired) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.SIGN_IN_REQUIRED_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SIGN_IN_REQUIRED_MESSAGE)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  // Magic-link accepted — the invite is consumed and a sign-in link was emailed. Terminal state:\n  // the invitee finishes by clicking the emailed link (no chooser/decline — the token is gone, so\n  // any other method would only 4xx).\n  if (magicLinkSent) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{tAuth(UserAuthLabel.MAGIC_LINK_SENT_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{tAuth(UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION)}</Text>\n          {inviteeEmail && (\n            <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n          )}\n        </div>\n        <div className=\"text-center\">\n          <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  if (infoLoading) {\n    return (\n      <div className=\"flex items-center justify-center py-group\">\n        <LoadingSpinner size={40} />\n      </div>\n    );\n  }\n\n  if (infoError || !invitationInfo) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">{infoError || t(UserInvitationLabel.INVALID_LINK)}</Text>\n        </div>\n        <div className=\"text-center\">\n          <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  // SCIM-managed org → informational only, NO password/method form (locked decision:\n  // the directory is the identity authority, so no local credential is set here).\n  if (invitationInfo.managementMode === InvitationManagementMode.SCIM) {\n    return (\n      <>\n        <div className=\"text-center space-y-item-xs mb-group\">\n          <Heading>{t(UserInvitationLabel.SCIM_MANAGED_TITLE)}</Heading>\n          <Text className=\"max-w-sm mx-auto\">\n            {t(UserInvitationLabel.SCIM_MANAGED_MESSAGE)}\n          </Text>\n          {inviteeEmail && (\n            <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n          )}\n        </div>\n\n        {declineError && (\n          <Alert variant=\"destructive\" className=\"mb-group\">\n            <AlertDescription>{declineError}</AlertDescription>\n          </Alert>\n        )}\n\n        <div className=\"text-center mt-group space-y-item-sm\">\n          <Button\n            variant={ButtonVariants_Variant.OUTLINE}\n            onClick={handleDecline}\n            disabled={isDeclining}\n            className=\"w-full\"\n          >\n            {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n          </Button>\n          <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n        </div>\n      </>\n    );\n  }\n\n  // OPEN / SSO org → the method chooser.\n  return (\n    <>\n      <div className=\"text-center space-y-item-xs mb-group\">\n        <Heading>{t(UserInvitationLabel.TITLE)}</Heading>\n        <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SUB_TITLE)}</Text>\n        {invitationInfo.organizationName && (\n          <Text className=\"text-sm text-muted-foreground\">{invitationInfo.organizationName}</Text>\n        )}\n        {inviteeEmail && (\n          <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n        )}\n      </div>\n\n      {hasActionableMethod ? (\n        <>\n          <Text className=\"text-sm text-muted-foreground text-center mb-element\">\n            {t(UserInvitationLabel.METHOD_CHOICE_HINT)}\n          </Text>\n\n          {/* Active first-factor method (password form / magic-link form / passkey form / reused SSO·OAuth component). */}\n          {renderActiveMethod()}\n\n          {/* Alternative methods — buttons that switch the active method. */}\n          {alternativeMethods.length > 0 && (\n            <>\n              <LabeledDivider label={tAuth(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n\n              <AuthMethodChoiceList\n                methods={alternativeMethods.map((method) => method.method as AuthMethod)}\n                /*\n                 * The descriptor names an enterprise connection, so an invitee choosing their\n                 * organization's provider sees ITS name rather than \"Organization sign-in\".\n                 *\n                 * No `socialProviders`: this screen configures no social buttons of its own, and the\n                 * resolver declines to name a provider it cannot resolve rather than printing a raw\n                 * `providerRef` — so a social alternative keeps the generic kind here, deliberately.\n                 */\n                labelFor={(method) => resolveAuthMethodChoiceLabel(method, {\n                  offeredMethod: alternativeMethods.find((candidate) => candidate.method === method),\n                  continueWithTemplate: tAuth(UserAuthLabel.CONTINUE_WITH),\n                  translateLabel: (label) => tAuth(label),\n                  resolveSocialProviderLabel: (provider) => provider.displayName ?? provider.providerRef,\n                })}\n                onSelect={(method) => { setActiveMethod(method); setPasskeyError(null); }}\n                disabled={methodSubmitInFlight || isDeclining}\n              />\n            </>\n          )}\n        </>\n      ) : (\n        /*\n          No renderable first-factor method on this screen — a valid state, not an error. The\n          common case is an SSO-only org whose invitee arrives before directory provisioning: the\n          token-keyed endpoint omits ORG_SAML/ORG_OPENID_CONNECT when no per-connection lookup\n          resolved, yielding an empty set with mode OPEN. Route the invitee to the sign-in page,\n          where email→domain SSO resolution works and the enterprise / OAuth JIT consumes the invite.\n        */\n        <Alert>\n          <AlertDescription>\n            {t(UserInvitationLabel.NO_METHOD_AVAILABLE_HINT)}\n          </AlertDescription>\n        </Alert>\n      )}\n\n      {declineError && (\n        <Alert variant=\"destructive\" className=\"mt-group\">\n          <AlertDescription>{declineError}</AlertDescription>\n        </Alert>\n      )}\n\n      <div className=\"text-center mt-group space-y-item-sm\">\n        <Button\n          variant={ButtonVariants_Variant.OUTLINE}\n          onClick={handleDecline}\n          disabled={methodSubmitInFlight || isDeclining}\n          className=\"w-full\"\n        >\n          {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n        </Button>\n        <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n      </div>\n    </>\n  );\n};\n\nexport function Auth_Invitation({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserInvitation_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_UserInvitation_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, 'Auth_Invitation')(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_Invitation.labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_Invitation.labels.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Invitation.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAgD,MAAM,qCAAqC,CAAC;AAM/J,eAAO,MAAM,iCAAiC,EAAE,mBAAmB,EA4ClE,CAAC"}
+{"version":3,"file":"Auth_Invitation.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Invitation.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAgD,MAAM,qCAAqC,CAAC;AAM/J,eAAO,MAAM,iCAAiC,EAAE,mBAAmB,EAoDlE,CAAC"}

package/dist/esm/components/auth/Auth_Invitation.labels.js

@@ -30,6 +30,8 @@ export const PublicLayoutsUserInvitationLabels = [
     { ref: UserInvitationLabel.PASSKEY_CREATE, kind: LabelKind.BUTTON, purpose: 'Primary button that accepts the invitation by creating a passkey (starts the WebAuthn ceremony)' },
     { ref: UserInvitationLabel.PASSKEY_CREATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status shown while the passkey is being created and verified' },
     { ref: UserInvitationLabel.NO_METHOD_AVAILABLE_HINT, kind: LabelKind.MESSAGE, purpose: 'Informational message shown when the organization exposes no sign-in method on the invitation screen (e.g. an SSO-only org whose invitee arrived before directory provisioning), directing them to continue on the sign-in page' },
+    { ref: UserInvitationLabel.SIGN_IN_REQUIRED_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown after accepting an invitation that did not sign the user in: the invitation is accepted and they must sign in separately' },
+    { ref: UserInvitationLabel.SIGN_IN_REQUIRED_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body explaining the invitation was accepted, but this account cannot be signed in from the invitation link and must sign in on the sign-in page' },
     {
         ref: UserInvitationLabel.POLICY_MIN_LENGTH,
         kind: LabelKind.DESCRIPTION,
@@ -46,6 +48,11 @@ export const PublicLayoutsUserInvitationLabels = [
     { ref: UserInvitationLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },
     { ref: UserInvitationLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },
     { ref: UserInvitationLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },
+    {
+        ref: UserInvitationLabel.POLICY_BLOCKLISTED,
+        kind: LabelKind.DESCRIPTION,
+        purpose: 'Refusal shown when the chosen password is a known common guess, the application\'s own name, or the local part of the user\'s own email address. It reports a property of THIS password rather than an unmet rule, so it must not read like the other hints — there is no character the user can add to satisfy it, only a different password to choose.',
+    },
 ];
 registerComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, PublicLayoutsUserInvitationLabels);
 //# sourceMappingURL=Auth_Invitation.labels.js.map

package/dist/esm/components/auth/Auth_Invitation.labels.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_Invitation.labels.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Invitation.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE/J,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,iCAAiC,GAA0B;IACtE,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yCAAyC,EAAE;IAC/G,EAAE,GAAG,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACxI,EAAE,GAAG,EAAE,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACvH,EAAE,GAAG,EAAE,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sCAAsC,EAAE;IAC/G,EAAE,GAAG,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7G,EAAE,GAAG,EAAE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE;IAC3G,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC3H,EAAE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACrJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE;IAChJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IACvH,EAAE,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE;IAChJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACtI,EAAE,GAAG,EAAE,mBAAmB,CAAC,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC1I,EAAE,GAAG,EAAE,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACnJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACnI,EAAE,GAAG,EAAE,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACrG,EAAE,GAAG,EAAE,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAC1I,EAAE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gHAAgH,EAAE;IACvM,EAAE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAChJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACvJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iIAAiI,EAAE;IACpN,EAAE,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+LAA+L,EAAE;IACpR,EAAE,GAAG,EAAE,mBAAmB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0IAA0I,EAAE;IACnO,EAAE,GAAG,EAAE,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6HAA6H,EAAE;IACrN,EAAE,GAAG,EAAE,mBAAmB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iGAAiG,EAAE;IAC/K,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAC3J,EAAE,GAAG,EAAE,mBAAmB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iOAAiO,EAAE;IAC1T;QACE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB;QAC1C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;KAClG;IACD;QACE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB;QAC1C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;KACjG;IACD,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACnJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACnJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACrI,EAAE,GAAG,EAAE,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE;CACxJ,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,iCAAiC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserInvitationLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserInvitationLabels: LabellingUnitaryDef[] = [\n  { ref: UserInvitationLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the accept-invitation screen' },\n  { ref: UserInvitationLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the invitation being accepted' },\n  { ref: UserInvitationLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the invited email address' },\n  { ref: UserInvitationLabel.FIRST_NAME, kind: LabelKind.LABEL, purpose: 'Field label for the first-name input' },\n  { ref: UserInvitationLabel.LAST_NAME, kind: LabelKind.LABEL, purpose: 'Field label for the last-name input' },\n  { ref: UserInvitationLabel.PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the password input' },\n  { ref: UserInvitationLabel.CONFIRM_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the confirm-password input' },\n  { ref: UserInvitationLabel.ACCEPT_INVITATION, kind: LabelKind.BUTTON, purpose: 'Primary button that accepts the invitation and creates the account' },\n  { ref: UserInvitationLabel.ACCEPTING_INVITATION, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the invitation is being accepted' },\n  { ref: UserInvitationLabel.DECLINE_INVITATION, kind: LabelKind.BUTTON, purpose: 'Button that declines the invitation' },\n  { ref: UserInvitationLabel.DECLINING_INVITATION, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the invitation is being declined' },\n  { ref: UserInvitationLabel.DECLINE_SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the invitation was declined' },\n  { ref: UserInvitationLabel.DECLINE_SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming the invitation was declined' },\n  { ref: UserInvitationLabel.INVALID_LINK, kind: LabelKind.MESSAGE, purpose: 'Error shown when the invitation link is missing, invalid, or expired' },\n  { ref: UserInvitationLabel.ERROR_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when the invitation cannot be processed' },\n  { ref: UserInvitationLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen' },\n  { ref: UserInvitationLabel.CONTINUE_LINK, kind: LabelKind.LABEL, purpose: 'Link to continue into the app after accepting the invitation' },\n  { ref: UserInvitationLabel.METHOD_CHOICE_HINT, kind: LabelKind.DESCRIPTION, purpose: 'Intro hint above the method chooser inviting the user to choose how they will sign in to accept the invitation' },\n  { ref: UserInvitationLabel.PASSWORD_MISMATCH, kind: LabelKind.MESSAGE, purpose: 'Validation error when password and confirmation do not match' },\n  { ref: UserInvitationLabel.UNEXPECTED_ERROR, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when accepting the invitation fails unexpectedly' },\n  { ref: UserInvitationLabel.SCIM_MANAGED_TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the informational state shown when the org is directory-managed (SCIM) and the invitee cannot set a local credential' },\n  { ref: UserInvitationLabel.SCIM_MANAGED_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body explaining that a directory-managed (SCIM) account is provisioned by the organization directory — sign in via SSO or wait to be provisioned automatically; no local password is set here' },\n  { ref: UserInvitationLabel.PASSKEY_UNAVAILABLE_HINT, kind: LabelKind.MESSAGE, purpose: 'Message shown for the passkey method when the browser has no WebAuthn/passkey support, telling the user to choose another sign-in method' },\n  { ref: UserInvitationLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Short description above the passkey accept form explaining the invitee will be prompted by their device to create a passkey' },\n  { ref: UserInvitationLabel.PASSKEY_CREATE, kind: LabelKind.BUTTON, purpose: 'Primary button that accepts the invitation by creating a passkey (starts the WebAuthn ceremony)' },\n  { ref: UserInvitationLabel.PASSKEY_CREATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status shown while the passkey is being created and verified' },\n  { ref: UserInvitationLabel.NO_METHOD_AVAILABLE_HINT, kind: LabelKind.MESSAGE, purpose: 'Informational message shown when the organization exposes no sign-in method on the invitation screen (e.g. an SSO-only org whose invitee arrived before directory provisioning), directing them to continue on the sign-in page' },\n  {\n    ref: UserInvitationLabel.POLICY_MIN_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the minimum required length',\n    params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],\n  },\n  {\n    ref: UserInvitationLabel.POLICY_MAX_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the maximum allowed length',\n    params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],\n  },\n  { ref: UserInvitationLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },\n  { ref: UserInvitationLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },\n  { ref: UserInvitationLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },\n  { ref: UserInvitationLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, PublicLayoutsUserInvitationLabels);\n"]}
+{"version":3,"file":"Auth_Invitation.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Invitation.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE/J,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,iCAAiC,GAA0B;IACtE,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yCAAyC,EAAE;IAC/G,EAAE,GAAG,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACxI,EAAE,GAAG,EAAE,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACvH,EAAE,GAAG,EAAE,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sCAAsC,EAAE;IAC/G,EAAE,GAAG,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC7G,EAAE,GAAG,EAAE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE;IAC3G,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC3H,EAAE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACrJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE;IAChJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qCAAqC,EAAE;IACvH,EAAE,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE;IAChJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACtI,EAAE,GAAG,EAAE,mBAAmB,CAAC,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC1I,EAAE,GAAG,EAAE,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACnJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACnI,EAAE,GAAG,EAAE,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACrG,EAAE,GAAG,EAAE,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAC1I,EAAE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,gHAAgH,EAAE;IACvM,EAAE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAChJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACvJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iIAAiI,EAAE;IACpN,EAAE,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+LAA+L,EAAE;IACpR,EAAE,GAAG,EAAE,mBAAmB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0IAA0I,EAAE;IACnO,EAAE,GAAG,EAAE,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6HAA6H,EAAE;IACrN,EAAE,GAAG,EAAE,mBAAmB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iGAAiG,EAAE;IAC/K,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAC3J,EAAE,GAAG,EAAE,mBAAmB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iOAAiO,EAAE;IAC1T,EAAE,GAAG,EAAE,mBAAmB,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wIAAwI,EAAE;IAC/N,EAAE,GAAG,EAAE,mBAAmB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iJAAiJ,EAAE;IAC1O;QACE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB;QAC1C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;KAClG;IACD;QACE,GAAG,EAAE,mBAAmB,CAAC,iBAAiB;QAC1C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;KACjG;IACD,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACnJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACnJ,EAAE,GAAG,EAAE,mBAAmB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACrI,EAAE,GAAG,EAAE,mBAAmB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACvJ;QACE,GAAG,EAAE,mBAAmB,CAAC,kBAAkB;QAC3C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EACL,0VAA0V;KAC7V;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,iCAAiC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserInvitationLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserInvitationLabels: LabellingUnitaryDef[] = [\n  { ref: UserInvitationLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the accept-invitation screen' },\n  { ref: UserInvitationLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the invitation being accepted' },\n  { ref: UserInvitationLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the invited email address' },\n  { ref: UserInvitationLabel.FIRST_NAME, kind: LabelKind.LABEL, purpose: 'Field label for the first-name input' },\n  { ref: UserInvitationLabel.LAST_NAME, kind: LabelKind.LABEL, purpose: 'Field label for the last-name input' },\n  { ref: UserInvitationLabel.PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the password input' },\n  { ref: UserInvitationLabel.CONFIRM_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the confirm-password input' },\n  { ref: UserInvitationLabel.ACCEPT_INVITATION, kind: LabelKind.BUTTON, purpose: 'Primary button that accepts the invitation and creates the account' },\n  { ref: UserInvitationLabel.ACCEPTING_INVITATION, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the invitation is being accepted' },\n  { ref: UserInvitationLabel.DECLINE_INVITATION, kind: LabelKind.BUTTON, purpose: 'Button that declines the invitation' },\n  { ref: UserInvitationLabel.DECLINING_INVITATION, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the invitation is being declined' },\n  { ref: UserInvitationLabel.DECLINE_SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the invitation was declined' },\n  { ref: UserInvitationLabel.DECLINE_SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming the invitation was declined' },\n  { ref: UserInvitationLabel.INVALID_LINK, kind: LabelKind.MESSAGE, purpose: 'Error shown when the invitation link is missing, invalid, or expired' },\n  { ref: UserInvitationLabel.ERROR_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when the invitation cannot be processed' },\n  { ref: UserInvitationLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen' },\n  { ref: UserInvitationLabel.CONTINUE_LINK, kind: LabelKind.LABEL, purpose: 'Link to continue into the app after accepting the invitation' },\n  { ref: UserInvitationLabel.METHOD_CHOICE_HINT, kind: LabelKind.DESCRIPTION, purpose: 'Intro hint above the method chooser inviting the user to choose how they will sign in to accept the invitation' },\n  { ref: UserInvitationLabel.PASSWORD_MISMATCH, kind: LabelKind.MESSAGE, purpose: 'Validation error when password and confirmation do not match' },\n  { ref: UserInvitationLabel.UNEXPECTED_ERROR, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when accepting the invitation fails unexpectedly' },\n  { ref: UserInvitationLabel.SCIM_MANAGED_TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the informational state shown when the org is directory-managed (SCIM) and the invitee cannot set a local credential' },\n  { ref: UserInvitationLabel.SCIM_MANAGED_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body explaining that a directory-managed (SCIM) account is provisioned by the organization directory — sign in via SSO or wait to be provisioned automatically; no local password is set here' },\n  { ref: UserInvitationLabel.PASSKEY_UNAVAILABLE_HINT, kind: LabelKind.MESSAGE, purpose: 'Message shown for the passkey method when the browser has no WebAuthn/passkey support, telling the user to choose another sign-in method' },\n  { ref: UserInvitationLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Short description above the passkey accept form explaining the invitee will be prompted by their device to create a passkey' },\n  { ref: UserInvitationLabel.PASSKEY_CREATE, kind: LabelKind.BUTTON, purpose: 'Primary button that accepts the invitation by creating a passkey (starts the WebAuthn ceremony)' },\n  { ref: UserInvitationLabel.PASSKEY_CREATING, kind: LabelKind.MESSAGE, purpose: 'In-progress status shown while the passkey is being created and verified' },\n  { ref: UserInvitationLabel.NO_METHOD_AVAILABLE_HINT, kind: LabelKind.MESSAGE, purpose: 'Informational message shown when the organization exposes no sign-in method on the invitation screen (e.g. an SSO-only org whose invitee arrived before directory provisioning), directing them to continue on the sign-in page' },\n  { ref: UserInvitationLabel.SIGN_IN_REQUIRED_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown after accepting an invitation that did not sign the user in: the invitation is accepted and they must sign in separately' },\n  { ref: UserInvitationLabel.SIGN_IN_REQUIRED_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body explaining the invitation was accepted, but this account cannot be signed in from the invitation link and must sign in on the sign-in page' },\n  {\n    ref: UserInvitationLabel.POLICY_MIN_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the minimum required length',\n    params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],\n  },\n  {\n    ref: UserInvitationLabel.POLICY_MAX_LENGTH,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Password-policy hint for the maximum allowed length',\n    params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],\n  },\n  { ref: UserInvitationLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },\n  { ref: UserInvitationLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },\n  { ref: UserInvitationLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },\n  { ref: UserInvitationLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },\n  {\n    ref: UserInvitationLabel.POLICY_BLOCKLISTED,\n    kind: LabelKind.DESCRIPTION,\n    purpose:\n      'Refusal shown when the chosen password is a known common guess, the application\\'s own name, or the local part of the user\\'s own email address. It reports a property of THIS password rather than an unmet rule, so it must not read like the other hints — there is no character the user can add to satisfy it, only a different password to choose.',\n  },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, PublicLayoutsUserInvitationLabels);\n"]}

package/dist/esm/components/auth/Auth_MagicLinkVerify.d.ts

@@ -3,16 +3,21 @@ import { ComponentPresetProps } from '../../core/components-registry/component-r
 export interface PublicLayoutPreset_MagicLinkVerify_DefaultProps {
     token?: string | null;
     email?: string | null;
+    /**
+     * The emailed link's `redirect` query parameter, raw. Honoured only when it is a same-origin path
+     * (`isSafeAuthRedirectTarget`); anything else is ignored and the person lands on the application home (#1014).
+     */
+    redirect?: string | null;
 }
 /**
  * Magic link verification default preset.
  *
  * Extracts `token` and `email` from props, calls POST /auth/magic-link/verify,
- * then either auto-logs in (stores tokens, redirects to home),
- * redirects to MFA challenge when required, or shows error with link back to login.
+ * then either auto-logs in (stores tokens, redirects to the requested deep link or home),
+ * redirects to MFA challenge when required (carrying the deep link), or shows error with link back to login.
  *
  * All user-facing strings are i18n-driven via MagicLinkVerifyLabel.
  */
-export declare const PublicLayoutPreset_MagicLinkVerify_Default: ({ token, email }: PublicLayoutPreset_MagicLinkVerify_DefaultProps) => React.JSX.Element;
+export declare const PublicLayoutPreset_MagicLinkVerify_Default: ({ token, email, redirect }: PublicLayoutPreset_MagicLinkVerify_DefaultProps) => React.JSX.Element;
 export declare function Auth_MagicLinkVerify({ preset, ...props }: PublicLayoutPreset_MagicLinkVerify_DefaultProps & ComponentPresetProps): React.JSX.Element;
 //# sourceMappingURL=Auth_MagicLinkVerify.d.ts.map

package/dist/esm/components/auth/Auth_MagicLinkVerify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth_MagicLinkVerify.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/Auth_MagicLinkVerify.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAWpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAMxH,MAAM,WAAW,+CAA+C;IAC9D,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,GAAI,kBAAkB,+CAA+C,KAAG,KAAK,CAAC,GAAG,CAAC,OAoFxI,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,+CAA+C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG9K"}
+{"version":3,"file":"Auth_MagicLinkVerify.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_MagicLinkVerify.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA+C,MAAM,OAAO,CAAC;AAepE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAMxH,MAAM,WAAW,+CAA+C;IAC9D,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,GAAI,4BAA4B,+CAA+C,KAAG,KAAK,CAAC,GAAG,CAAC,OAmGlJ,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,+CAA+C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG9K"}

package/dist/esm/components/auth/Auth_MagicLinkVerify.js

@@ -1,12 +1,16 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useEffect, useRef, useState } from 'react';
-import { Navigate, useNavigate } from 'react-router-dom';
+import { Navigate } from 'react-router-dom';
 import { useAuthSession } from '../../core/security/useAuthSession.js';
+import { organizationOnboardingNavigationTarget } from '../../core/security/organization-onboarding.frontend.utils.js';
+import { useMfaContinuationNavigation } from '../../components/auth/utils/useMfaContinuationNavigation.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
+import { useUserFacingErrorMessage } from '../../core/errors/useUserFacingErrorMessage.js';
 import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
+import { isSafeAuthRedirectTarget } from '../../core/security/auth-redirect.frontend.utils.js';
 import { Heading } from '../../components/typography/heading.js';
 import { Text } from '../../components/typography/text.js';
-import { Link } from '../../components/typography/link.js';
+import { AuthSecondaryLink } from '../../components/auth/utils/AuthSecondaryLink.js';
 import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
 import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
 import { CorePresetNames, FrontendComponentType, MagicLinkVerifyLabel } from '@wildo-ai/presets-components-models';
@@ -15,15 +19,17 @@ import { LoadingSpinner } from '../../components/feedback/loading-spinner.js';
  * Magic link verification default preset.
  *
  * Extracts `token` and `email` from props, calls POST /auth/magic-link/verify,
- * then either auto-logs in (stores tokens, redirects to home),
- * redirects to MFA challenge when required, or shows error with link back to login.
+ * then either auto-logs in (stores tokens, redirects to the requested deep link or home),
+ * redirects to MFA challenge when required (carrying the deep link), or shows error with link back to login.
  *
  * All user-facing strings are i18n-driven via MagicLinkVerifyLabel.
  */
-export const PublicLayoutPreset_MagicLinkVerify_Default = ({ token, email }) => {
+export const PublicLayoutPreset_MagicLinkVerify_Default = ({ token, email, redirect }) => {
+    // The one same-origin check on this screen: both the MFA detour and the signed-in forward read this value.
+    const authRedirectTarget = isSafeAuthRedirectTarget(redirect) ? redirect : undefined;
     const { handleMagicLinkVerify, auth } = useAuthSession();
     const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_MAGIC_LINK_VERIFY });
-    const navigate = useNavigate();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_MAGIC_LINK_VERIFY, key);
     const loginPath = CommonRoutePaths.login;
     const [error, setError] = useState(null);
@@ -44,31 +50,42 @@ export const PublicLayoutPreset_MagicLinkVerify_Default = ({ token, email }) =>
         handleMagicLinkVerify(token, email)
             .then((response) => {
             if (!response.success && !response.requiresMFA) {
-                setError(response.error || t(MagicLinkVerifyLabel.ERROR_VERIFICATION_FAILED));
+                // `response.error` is server-authored English ("Invalid or expired magic link"); the surface says it.
+                setError(toUserFacingErrorMessage(null, t(MagicLinkVerifyLabel.ERROR_VERIFICATION_FAILED)));
             }
         })
             .catch((e) => {
-            setError(e?.message || t(MagicLinkVerifyLabel.ERROR_EXPIRED));
+            setError(toUserFacingErrorMessage(e, t(MagicLinkVerifyLabel.ERROR_EXPIRED)));
         });
     }, [token, email, auth.accessToken, handleMagicLinkVerify]); // eslint-disable-line react-hooks/exhaustive-deps
-    useEffect(() => {
-        if (auth.mfaRequired && auth.mfaSessionId) {
-            if (auth.enrolledSecondFactorMethods.length === 0) {
-                navigate(CommonRoutePaths.enrollmentRequired, { replace: true });
-            }
-            else {
-                const mfaEmail = email || '';
-                navigate(`${CommonRoutePaths.mfaChallenge}?sessionId=${auth.mfaSessionId}&email=${encodeURIComponent(mfaEmail)}`, { replace: true });
-            }
-        }
-    }, [auth.mfaRequired, auth.mfaSessionId, auth.enrolledSecondFactorMethods, navigate, email]);
+    /*
+     * The routing every auth screen shares (#972), which branches on `usableSecondFactorMethods`, not
+     * `enrolledSecondFactorMethods`. The enrolled set answers "did this person set anything up"; the
+     * usable set answers "is there a challenge we can actually run", which is the question a redirect
+     * must be made on. They differ whenever the policy accepts a factor that needs no enrollment (email
+     * OTP), and again whenever the user enrolled something the policy does not accept.
+     */
+    useMfaContinuationNavigation({
+        mfaRequired: auth.mfaRequired,
+        mfaSessionId: auth.mfaSessionId,
+        usableSecondFactorMethods: auth.usableSecondFactorMethods,
+        email: email ?? undefined,
+        // The emailed link carries the deep link it was requested from as `redirect` (#1014), so the challenge
+        // and the enrollment gate return the person there exactly as the password sign-in does.
+        authRedirectTarget,
+    });
+    // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.
+    const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, authRedirectTarget);
+    if (organizationOnboardingTarget) {
+        return _jsx(Navigate, { to: organizationOnboardingTarget, replace: true });
+    }
     if (auth.accessToken && !auth.isLoading) {
-        return _jsx(Navigate, { to: CommonRoutePaths.home, replace: true });
+        return _jsx(Navigate, { to: authRedirectTarget ?? CommonRoutePaths.home, replace: true });
     }
     if (!isReady)
         return null;
     if (error) {
-        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(MagicLinkVerifyLabel.ERROR_TITLE) })] }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(Link, { href: loginPath, children: t(MagicLinkVerifyLabel.LOGIN_LINK) }) })] }));
+        return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "text-center space-y-item-xs mb-group", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-destructive/10 mb-element", children: _jsx("svg", { className: "h-6 w-6 text-destructive", fill: "none", viewBox: "0 0 24 24", stroke: "currentColor", strokeWidth: "2", children: _jsx("path", { strokeLinecap: "round", strokeLinejoin: "round", d: "M6 18L18 6M6 6l12 12" }) }) }), _jsx(Heading, { children: t(MagicLinkVerifyLabel.ERROR_TITLE) })] }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: error }) }), _jsx("div", { className: "text-center mt-group", children: _jsx(AuthSecondaryLink, { href: loginPath, children: t(MagicLinkVerifyLabel.LOGIN_LINK) }) })] }));
     }
     return (_jsxs("div", { role: "status", "aria-live": "polite", className: "text-center space-y-item-xs", children: [_jsx("div", { className: "mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element", "aria-hidden": "true", children: _jsx(LoadingSpinner, { size: 24, className: "text-primary" }) }), _jsx(Text, { className: "max-w-sm mx-auto", children: t(MagicLinkVerifyLabel.VERIFYING) })] }));
 };