@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.6

package/dist/esm/core/billing/billing-provider-display.frontend.utils.d.ts

@@ -1,7 +1,15 @@
-import type { FrontendAppProviderModule } from '@wildo-ai/external-connectors-public/app';
-export declare function collectBillingProviderLabelKeys(provider: FrontendAppProviderModule | null | undefined): string[];
+/**
+ * The billing provider's name, for the three billing components that show it (portal link, invoice
+ * history, subscription status).
+ *
+ * Keyed on the configured `billing.providerRef` and nothing else (#1701). The name is
+ * `providers.<ref>.displayName`, planned and generated for every declared provider (#1895). It used to
+ * be read off a frontend provider module — Stripe's, which loaded no Stripe code and existed only to
+ * carry it — so billing's visible name depended on declaring a browser module that did nothing.
+ */
+export declare function collectBillingProviderLabelKeys(providerRef: string | null | undefined): string[];
 export declare function resolveBillingProviderDisplayName(input: {
-    provider: FrontendAppProviderModule | null | undefined;
+    providerRef: string | null | undefined;
     translate?: (key: string) => string;
 }): string | undefined;
 //# sourceMappingURL=billing-provider-display.frontend.utils.d.ts.map

package/dist/esm/core/billing/billing-provider-display.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-provider-display.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/billing/billing-provider-display.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAM1F,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,GACrD,MAAM,EAAE,CAIV;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,CAAC;IACvD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC,GAAG,MAAM,GAAG,SAAS,CAWrB"}
+{"version":3,"file":"billing-provider-display.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/billing/billing-provider-display.frontend.utils.ts"],"names":[],"mappings":"AAMA;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAEhG;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACvC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC,GAAG,MAAM,GAAG,SAAS,CASrB"}

package/dist/esm/core/billing/billing-provider-display.frontend.utils.js

@@ -1,17 +1,23 @@
+import { buildProviderDisplayNameLabelKey } from '@wildo-ai/saas-models/public-runtime';
 import { collectFrontendProviderDisplayLabelKeys, resolveFrontendProviderDisplayLabel, } from '../../core/external-providers/frontend-provider-display-label.frontend.utils.js';
-export function collectBillingProviderLabelKeys(provider) {
-    return collectFrontendProviderDisplayLabelKeys([
-        provider?.metadata.displayNameLabelKey,
-    ]);
+/**
+ * The billing provider's name, for the three billing components that show it (portal link, invoice
+ * history, subscription status).
+ *
+ * Keyed on the configured `billing.providerRef` and nothing else (#1701). The name is
+ * `providers.<ref>.displayName`, planned and generated for every declared provider (#1895). It used to
+ * be read off a frontend provider module — Stripe's, which loaded no Stripe code and existed only to
+ * carry it — so billing's visible name depended on declaring a browser module that did nothing.
+ */
+export function collectBillingProviderLabelKeys(providerRef) {
+    return collectFrontendProviderDisplayLabelKeys([providerRef ? buildProviderDisplayNameLabelKey(providerRef) : undefined]);
 }
 export function resolveBillingProviderDisplayName(input) {
-    if (!input.provider) {
+    if (!input.providerRef) {
         return undefined;
     }
     return resolveFrontendProviderDisplayLabel({
-        providerRef: input.provider.metadata.ref,
-        displayName: input.provider.metadata.displayName,
-        displayNameLabelKey: input.provider.metadata.displayNameLabelKey,
+        providerRef: input.providerRef,
         translate: input.translate,
     });
 }

package/dist/esm/core/billing/billing-provider-display.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing-provider-display.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/billing/billing-provider-display.frontend.utils.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,4FAA4F,CAAC;AAEpG,MAAM,UAAU,+BAA+B,CAC7C,QAAsD;IAEtD,OAAO,uCAAuC,CAAC;QAC7C,QAAQ,EAAE,QAAQ,CAAC,mBAAmB;KACvC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAGjD;IACC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,mCAAmC,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG;QACxC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW;QAChD,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;QAChE,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { FrontendAppProviderModule } from '@wildo-ai/external-connectors-public/app';\nimport {\n  collectFrontendProviderDisplayLabelKeys,\n  resolveFrontendProviderDisplayLabel,\n} from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\n\nexport function collectBillingProviderLabelKeys(\n  provider: FrontendAppProviderModule | null | undefined,\n): string[] {\n  return collectFrontendProviderDisplayLabelKeys([\n    provider?.metadata.displayNameLabelKey,\n  ]);\n}\n\nexport function resolveBillingProviderDisplayName(input: {\n  provider: FrontendAppProviderModule | null | undefined;\n  translate?: (key: string) => string;\n}): string | undefined {\n  if (!input.provider) {\n    return undefined;\n  }\n\n  return resolveFrontendProviderDisplayLabel({\n    providerRef: input.provider.metadata.ref,\n    displayName: input.provider.metadata.displayName,\n    displayNameLabelKey: input.provider.metadata.displayNameLabelKey,\n    translate: input.translate,\n  });\n}\n"]}
+{"version":3,"file":"billing-provider-display.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/billing/billing-provider-display.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,EACL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,4FAA4F,CAAC;AAEpG;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAAC,WAAsC;IACpF,OAAO,uCAAuC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAGjD;IACC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,mCAAmC,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { buildProviderDisplayNameLabelKey } from '@wildo-ai/saas-models/public-runtime';\nimport {\n  collectFrontendProviderDisplayLabelKeys,\n  resolveFrontendProviderDisplayLabel,\n} from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\n\n/**\n * The billing provider's name, for the three billing components that show it (portal link, invoice\n * history, subscription status).\n *\n * Keyed on the configured `billing.providerRef` and nothing else (#1701). The name is\n * `providers.<ref>.displayName`, planned and generated for every declared provider (#1895). It used to\n * be read off a frontend provider module — Stripe's, which loaded no Stripe code and existed only to\n * carry it — so billing's visible name depended on declaring a browser module that did nothing.\n */\nexport function collectBillingProviderLabelKeys(providerRef: string | null | undefined): string[] {\n  return collectFrontendProviderDisplayLabelKeys([providerRef ? buildProviderDisplayNameLabelKey(providerRef) : undefined]);\n}\n\nexport function resolveBillingProviderDisplayName(input: {\n  providerRef: string | null | undefined;\n  translate?: (key: string) => string;\n}): string | undefined {\n  if (!input.providerRef) {\n    return undefined;\n  }\n\n  return resolveFrontendProviderDisplayLabel({\n    providerRef: input.providerRef,\n    translate: input.translate,\n  });\n}\n"]}

package/dist/esm/core/billing/useBilling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBilling.d.ts","sourceRoot":"","sources":["../../../../src/core/billing/useBilling.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,UAAU,QAAO,kBAM7B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,kBAAkB,GAAG,SAEtD,CAAC"}
+{"version":3,"file":"useBilling.d.ts","sourceRoot":"","sources":["../../../../../src/core/billing/useBilling.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,UAAU,QAAO,kBAM7B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,kBAAkB,GAAG,SAEtD,CAAC"}

package/dist/esm/core/billing/useBilling.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBilling.js","sourceRoot":"","sources":["../../../../src/core/billing/useBilling.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,cAAc,EAA2B,MAAM,kBAAkB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAuB,EAAE;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAmC,EAAE;IACjE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC,CAAC","sourcesContent":["/**\n * useBilling Hook\n *\n * Separated from BillingContext.tsx for React Fast Refresh compatibility.\n * Provides access to the billing context: state, actions, and product catalog.\n */\n\nimport { useContext } from 'react';\nimport { BillingContext, type BillingContextType } from './BillingContext';\n\n/**\n * Hook to access the Billing context.\n * @returns BillingContextType with billing state, actions, and product catalog.\n * @throws Error if used outside of BillingProvider.\n */\nexport const useBilling = (): BillingContextType => {\n  const context = useContext(BillingContext);\n  if (!context) {\n    throw new Error('useBilling must be used within a BillingProvider');\n  }\n  return context;\n};\n\n/**\n * Safe version that returns undefined if outside provider.\n * Useful for components that may render before the provider is mounted\n * or in contexts where billing may not be enabled.\n */\nexport const useBillingSafe = (): BillingContextType | undefined => {\n  return useContext(BillingContext);\n};\n"]}
+{"version":3,"file":"useBilling.js","sourceRoot":"","sources":["../../../../../src/core/billing/useBilling.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,cAAc,EAA2B,MAAM,kBAAkB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAuB,EAAE;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAmC,EAAE;IACjE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC,CAAC","sourcesContent":["/**\n * useBilling Hook\n *\n * Separated from BillingContext.tsx for React Fast Refresh compatibility.\n * Provides access to the billing context: state, actions, and product catalog.\n */\n\nimport { useContext } from 'react';\nimport { BillingContext, type BillingContextType } from './BillingContext';\n\n/**\n * Hook to access the Billing context.\n * @returns BillingContextType with billing state, actions, and product catalog.\n * @throws Error if used outside of BillingProvider.\n */\nexport const useBilling = (): BillingContextType => {\n  const context = useContext(BillingContext);\n  if (!context) {\n    throw new Error('useBilling must be used within a BillingProvider');\n  }\n  return context;\n};\n\n/**\n * Safe version that returns undefined if outside provider.\n * Useful for components that may render before the provider is mounted\n * or in contexts where billing may not be enabled.\n */\nexport const useBillingSafe = (): BillingContextType | undefined => {\n  return useContext(BillingContext);\n};\n"]}

package/dist/esm/core/billing/useBillingAction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBillingAction.d.ts","sourceRoot":"","sources":["../../../../src/core/billing/useBillingAction.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0DAA0D,CAAC;AAIpG;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,CAAC,YAAY,EAAE,mBAAmB,KAAK,IAAI,CAyD9E"}
+{"version":3,"file":"useBillingAction.d.ts","sourceRoot":"","sources":["../../../../../src/core/billing/useBillingAction.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0DAA0D,CAAC;AAIpG;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,CAAC,YAAY,EAAE,mBAAmB,KAAK,IAAI,CA0D9E"}

package/dist/esm/core/billing/useBillingAction.js

@@ -8,7 +8,7 @@
  * If billing is not enabled (useBillingSafe returns undefined), the action is a no-op.
  */
 import { useCallback } from 'react';
-import { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';
+import { BillingStateSlice, FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';
 import { useBillingSafe } from './useBilling.js';
 import { useSafeBillingActionExecutor } from './useSafeBillingActionExecutor.js';
 /**
@@ -25,14 +25,14 @@ export function useBillingAction() {
     const billing = useBillingSafe();
     const runBillingActionSafely = useSafeBillingActionExecutor();
     return useCallback((availability) => {
-        if (!billing || !billing.isEnabled)
+        if (!billing || !billing.isEnabled || !billing.isSliceAvailable(BillingStateSlice.BILLING_ACCOUNT))
             return;
         const { behavior, suggestedProductRef, upgradeOptions } = availability;
         // Determine which product/price to use for checkout
         let productKey;
         let priceId;
         // Try the suggestedProductRef first (per-feature override)
-        if (suggestedProductRef) {
+        if (suggestedProductRef && billing.isSliceAvailable(BillingStateSlice.PRODUCTS) && billing.isSliceAvailable(BillingStateSlice.PRICES)) {
             const product = billing.getProductByKey(suggestedProductRef);
             if (product) {
                 productKey = product.key;
@@ -53,11 +53,12 @@ export function useBillingAction() {
             case FeatureUnavailabilityBehavior.UPGRADE_PROMPT:
             case FeatureUnavailabilityBehavior.LIMIT_UPGRADE_PROMPT:
             case FeatureUnavailabilityBehavior.ADDON_PROMPT:
-                if (productKey && priceId) {
+                if (productKey && priceId && [BillingStateSlice.SUBSCRIPTION, BillingStateSlice.PRODUCTS, BillingStateSlice.PRICES].every(billing.isSliceAvailable)) {
                     runBillingActionSafely(() => billing.openCheckout(productKey, priceId));
                 }
                 else {
-                    // No specific product found — open customer portal as fallback
+                    // Missing or unavailable purchase information must never select a checkout.
+                    // The portal remains usable when its account is known, independently of catalog failures.
                     runBillingActionSafely(() => billing.openCustomerPortal());
                 }
                 break;

package/dist/esm/core/billing/useBillingAction.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBillingAction.js","sourceRoot":"","sources":["../../../../src/core/billing/useBillingAction.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,sBAAsB,GAAG,4BAA4B,EAAE,CAAC;IAE9D,OAAO,WAAW,CAChB,CAAC,YAAiC,EAAE,EAAE;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO;QAE3C,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;QAEvE,oDAAoD;QACpD,IAAI,UAA8B,CAAC;QACnC,IAAI,OAA2B,CAAC;QAEhC,2DAA2D;QAC3D,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;YAC7D,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;gBACzB,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACxD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO,GAAG,YAAY,EAAE,GAAG,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,UAAU,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,WAAW,EAAE,CAAC;gBAChB,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;gBACpC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,CAAC;QACH,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,6BAA6B,CAAC,cAAc,CAAC;YAClD,KAAK,6BAA6B,CAAC,oBAAoB,CAAC;YACxD,KAAK,6BAA6B,CAAC,YAAY;gBAC7C,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;oBAC1B,sBAAsB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,+DAA+D;oBAC/D,sBAAsB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM;YAER,KAAK,6BAA6B,CAAC,aAAa,CAAC;YACjD,KAAK,6BAA6B,CAAC,OAAO,CAAC;YAC3C,KAAK,6BAA6B,CAAC,IAAI,CAAC;YACxC,KAAK,6BAA6B,CAAC,MAAM,CAAC;YAC1C;gBACE,wCAAwC;gBACxC,MAAM;QACV,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAClC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * useBillingAction Hook\n *\n * Resolves the appropriate billing action from a FeatureAvailability object.\n * Used by FeatureRouteGuard, FeatureGate, and action bar buttons to wire\n * feature unavailability prompts to billing checkout or customer portal flows.\n *\n * If billing is not enabled (useBillingSafe returns undefined), the action is a no-op.\n */\n\nimport { useCallback } from 'react';\nimport { FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport type { FeatureAvailability } from '~wildo-frontend-lib/core/features/useFeatureAvailability';\nimport { useBillingSafe } from './useBilling';\nimport { useSafeBillingActionExecutor } from './useSafeBillingActionExecutor';\n\n/**\n * Returns a callback that executes the appropriate billing action for a given FeatureAvailability.\n *\n * - upgrade_prompt / limit_upgrade_prompt → openCheckout with suggested product + default price\n * - addon_prompt → openCheckout with suggested addon product + default price\n * - contact_admin → no-op (no billing action)\n * - disable / hide / custom → no-op\n *\n * Falls back gracefully when billing is not enabled.\n */\nexport function useBillingAction(): (availability: FeatureAvailability) => void {\n  const billing = useBillingSafe();\n  const runBillingActionSafely = useSafeBillingActionExecutor();\n\n  return useCallback(\n    (availability: FeatureAvailability) => {\n      if (!billing || !billing.isEnabled) return;\n\n      const { behavior, suggestedProductRef, upgradeOptions } = availability;\n\n      // Determine which product/price to use for checkout\n      let productKey: string | undefined;\n      let priceId: string | undefined;\n\n      // Try the suggestedProductRef first (per-feature override)\n      if (suggestedProductRef) {\n        const product = billing.getProductByKey(suggestedProductRef);\n        if (product) {\n          productKey = product.key;\n          const prices = billing.getPricesForProduct(product._id);\n          const defaultPrice = prices.find(p => p.isDefault) ?? prices[0];\n          priceId = defaultPrice?._id;\n        }\n      }\n\n      // Fallback to upgrade options from resolved features\n      if (!productKey && upgradeOptions && upgradeOptions.length > 0) {\n        const firstOption = upgradeOptions[0];\n        if (firstOption) {\n          productKey = firstOption.productKey;\n          priceId = firstOption.priceId;\n        }\n      }\n\n      switch (behavior) {\n        case FeatureUnavailabilityBehavior.UPGRADE_PROMPT:\n        case FeatureUnavailabilityBehavior.LIMIT_UPGRADE_PROMPT:\n        case FeatureUnavailabilityBehavior.ADDON_PROMPT:\n          if (productKey && priceId) {\n            runBillingActionSafely(() => billing.openCheckout(productKey, priceId));\n          } else {\n            // No specific product found — open customer portal as fallback\n            runBillingActionSafely(() => billing.openCustomerPortal());\n          }\n          break;\n\n        case FeatureUnavailabilityBehavior.CONTACT_ADMIN:\n        case FeatureUnavailabilityBehavior.DISABLE:\n        case FeatureUnavailabilityBehavior.HIDE:\n        case FeatureUnavailabilityBehavior.CUSTOM:\n        default:\n          // No billing action for these behaviors\n          break;\n      }\n    },\n    [billing, runBillingActionSafely],\n  );\n}\n"]}
+{"version":3,"file":"useBillingAction.js","sourceRoot":"","sources":["../../../../../src/core/billing/useBillingAction.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,sBAAsB,GAAG,4BAA4B,EAAE,CAAC;IAE9D,OAAO,WAAW,CAChB,CAAC,YAAiC,EAAE,EAAE;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC;YAAE,OAAO;QAE3G,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;QAEvE,oDAAoD;QACpD,IAAI,UAA8B,CAAC;QACnC,IAAI,OAA2B,CAAC;QAEhC,2DAA2D;QAC3D,IAAI,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtI,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;YAC7D,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;gBACzB,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACxD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO,GAAG,YAAY,EAAE,GAAG,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,UAAU,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,WAAW,EAAE,CAAC;gBAChB,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;gBACpC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;YAChC,CAAC;QACH,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,6BAA6B,CAAC,cAAc,CAAC;YAClD,KAAK,6BAA6B,CAAC,oBAAoB,CAAC;YACxD,KAAK,6BAA6B,CAAC,YAAY;gBAC7C,IAAI,UAAU,IAAI,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACpJ,sBAAsB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,4EAA4E;oBAC5E,0FAA0F;oBAC1F,sBAAsB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM;YAER,KAAK,6BAA6B,CAAC,aAAa,CAAC;YACjD,KAAK,6BAA6B,CAAC,OAAO,CAAC;YAC3C,KAAK,6BAA6B,CAAC,IAAI,CAAC;YACxC,KAAK,6BAA6B,CAAC,MAAM,CAAC;YAC1C;gBACE,wCAAwC;gBACxC,MAAM;QACV,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAClC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * useBillingAction Hook\n *\n * Resolves the appropriate billing action from a FeatureAvailability object.\n * Used by FeatureRouteGuard, FeatureGate, and action bar buttons to wire\n * feature unavailability prompts to billing checkout or customer portal flows.\n *\n * If billing is not enabled (useBillingSafe returns undefined), the action is a no-op.\n */\n\nimport { useCallback } from 'react';\nimport { BillingStateSlice, FeatureUnavailabilityBehavior } from '@wildo-ai/saas-models';\nimport type { FeatureAvailability } from '~wildo-frontend-lib/core/features/useFeatureAvailability';\nimport { useBillingSafe } from './useBilling';\nimport { useSafeBillingActionExecutor } from './useSafeBillingActionExecutor';\n\n/**\n * Returns a callback that executes the appropriate billing action for a given FeatureAvailability.\n *\n * - upgrade_prompt / limit_upgrade_prompt → openCheckout with suggested product + default price\n * - addon_prompt → openCheckout with suggested addon product + default price\n * - contact_admin → no-op (no billing action)\n * - disable / hide / custom → no-op\n *\n * Falls back gracefully when billing is not enabled.\n */\nexport function useBillingAction(): (availability: FeatureAvailability) => void {\n  const billing = useBillingSafe();\n  const runBillingActionSafely = useSafeBillingActionExecutor();\n\n  return useCallback(\n    (availability: FeatureAvailability) => {\n      if (!billing || !billing.isEnabled || !billing.isSliceAvailable(BillingStateSlice.BILLING_ACCOUNT)) return;\n\n      const { behavior, suggestedProductRef, upgradeOptions } = availability;\n\n      // Determine which product/price to use for checkout\n      let productKey: string | undefined;\n      let priceId: string | undefined;\n\n      // Try the suggestedProductRef first (per-feature override)\n      if (suggestedProductRef && billing.isSliceAvailable(BillingStateSlice.PRODUCTS) && billing.isSliceAvailable(BillingStateSlice.PRICES)) {\n        const product = billing.getProductByKey(suggestedProductRef);\n        if (product) {\n          productKey = product.key;\n          const prices = billing.getPricesForProduct(product._id);\n          const defaultPrice = prices.find(p => p.isDefault) ?? prices[0];\n          priceId = defaultPrice?._id;\n        }\n      }\n\n      // Fallback to upgrade options from resolved features\n      if (!productKey && upgradeOptions && upgradeOptions.length > 0) {\n        const firstOption = upgradeOptions[0];\n        if (firstOption) {\n          productKey = firstOption.productKey;\n          priceId = firstOption.priceId;\n        }\n      }\n\n      switch (behavior) {\n        case FeatureUnavailabilityBehavior.UPGRADE_PROMPT:\n        case FeatureUnavailabilityBehavior.LIMIT_UPGRADE_PROMPT:\n        case FeatureUnavailabilityBehavior.ADDON_PROMPT:\n          if (productKey && priceId && [BillingStateSlice.SUBSCRIPTION, BillingStateSlice.PRODUCTS, BillingStateSlice.PRICES].every(billing.isSliceAvailable)) {\n            runBillingActionSafely(() => billing.openCheckout(productKey, priceId));\n          } else {\n            // Missing or unavailable purchase information must never select a checkout.\n            // The portal remains usable when its account is known, independently of catalog failures.\n            runBillingActionSafely(() => billing.openCustomerPortal());\n          }\n          break;\n\n        case FeatureUnavailabilityBehavior.CONTACT_ADMIN:\n        case FeatureUnavailabilityBehavior.DISABLE:\n        case FeatureUnavailabilityBehavior.HIDE:\n        case FeatureUnavailabilityBehavior.CUSTOM:\n        default:\n          // No billing action for these behaviors\n          break;\n      }\n    },\n    [billing, runBillingActionSafely],\n  );\n}\n"]}

package/dist/esm/core/billing/useBillingPlanChange.d.ts

@@ -0,0 +1,37 @@
+import { type InvoicePreview } from '@wildo-ai/saas-models';
+import type { BillingContextType, BillingPlanChangeTarget, BillingPlanChangePreviewResponse } from './BillingContext';
+export declare enum BillingPlanChangePhase {
+    IDLE = "idle",
+    PREVIEWING = "previewing",
+    READY = "ready",
+    CONFIRMING = "confirming",
+    FAILED = "failed"
+}
+type Selection = {
+    target: BillingPlanChangeTarget;
+    scopeIdentity: string;
+};
+export type BillingPlanChangeState = {
+    phase: BillingPlanChangePhase.IDLE;
+} | (Selection & {
+    phase: BillingPlanChangePhase.PREVIEWING | BillingPlanChangePhase.FAILED;
+}) | (Selection & {
+    phase: BillingPlanChangePhase.READY | BillingPlanChangePhase.CONFIRMING;
+    response: BillingPlanChangePreviewResponse;
+    preview: InvoicePreview;
+    hasError?: boolean;
+});
+/** A provider amount uses the currency's own minor units, not an authored price's arbitrary scale. */
+export declare function invoicePreviewForDisplay(response: BillingPlanChangePreviewResponse): InvoicePreview;
+/** Owns the composed selection flow. A server token is only usable with its original selection.
+ * Request generation fences late responses; cancellation aborts only a preview, never an accepted mutation.
+ * A failed confirmation retains its token for the server's idempotent retry path.
+ */
+export declare function useBillingPlanChange(billing: BillingContextType | undefined): {
+    state: BillingPlanChangeState;
+    select: (target: BillingPlanChangeTarget) => Promise<void>;
+    cancel: () => void;
+    confirm: () => Promise<void>;
+};
+export {};
+//# sourceMappingURL=useBillingPlanChange.d.ts.map

package/dist/esm/core/billing/useBillingPlanChange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useBillingPlanChange.d.ts","sourceRoot":"","sources":["../../../../../src/core/billing/useBillingPlanChange.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AAEtH,oBAAY,sBAAsB;IAChC,IAAI,SAAS;IACb,UAAU,eAAe;IACzB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,MAAM,WAAW;CAClB;AAED,KAAK,SAAS,GAAG;IAAE,MAAM,EAAE,uBAAuB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAC9B;IAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,CAAA;CAAE,GACtC,CAAC,SAAS,GAAG;IAAE,KAAK,EAAE,sBAAsB,CAAC,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAA;CAAE,CAAC,GAC1F,CAAC,SAAS,GAAG;IAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,GAAG,sBAAsB,CAAC,UAAU,CAAC;IAAC,QAAQ,EAAE,gCAAgC,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAEvL,sGAAsG;AACtG,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gCAAgC,GAAG,cAAc,CAcnG;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS;;qBAgChC,uBAAuB;;;EA4ClE"}

package/dist/esm/core/billing/useBillingPlanChange.js

@@ -0,0 +1,115 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { currencyMinorUnitDecimals } from '@wildo-ai/zod-decorators';
+import { BillingStateSlice } from '@wildo-ai/saas-models';
+export var BillingPlanChangePhase;
+(function (BillingPlanChangePhase) {
+    BillingPlanChangePhase["IDLE"] = "idle";
+    BillingPlanChangePhase["PREVIEWING"] = "previewing";
+    BillingPlanChangePhase["READY"] = "ready";
+    BillingPlanChangePhase["CONFIRMING"] = "confirming";
+    BillingPlanChangePhase["FAILED"] = "failed";
+})(BillingPlanChangePhase || (BillingPlanChangePhase = {}));
+/** A provider amount uses the currency's own minor units, not an authored price's arbitrary scale. */
+export function invoicePreviewForDisplay(response) {
+    const currency = response.currency.toUpperCase();
+    const decimals = currencyMinorUnitDecimals(currency);
+    if (decimals === undefined || !Number.isSafeInteger(response.amount) || response.lineItems.some(item => !Number.isSafeInteger(item.amount))) {
+        throw new Error('The invoice estimate contains unsupported monetary values.');
+    }
+    return {
+        amount: { amount: BigInt(response.amount), currency, decimals },
+        lineItems: response.lineItems.map(item => ({ ...item, amount: { amount: BigInt(item.amount), currency, decimals } })),
+        periodStart: response.periodStart,
+        periodEnd: response.periodEnd,
+        timing: response.timing,
+        effectiveAt: new Date(response.effectiveAt),
+    };
+}
+/** Owns the composed selection flow. A server token is only usable with its original selection.
+ * Request generation fences late responses; cancellation aborts only a preview, never an accepted mutation.
+ * A failed confirmation retains its token for the server's idempotent retry path.
+ */
+export function useBillingPlanChange(billing) {
+    const [state, setState] = useState({ phase: BillingPlanChangePhase.IDLE });
+    const generation = useRef(0);
+    const pendingPreview = useRef(null);
+    const confirming = useRef(false);
+    const stateRef = useRef(state);
+    stateRef.current = state;
+    const scopeIdentity = JSON.stringify([billing?.currentScope, billing?.billingAccount?._id, billing?.subscription?._id]);
+    const currentIdentity = useRef(scopeIdentity);
+    currentIdentity.current = scopeIdentity;
+    const ready = !!billing?.isEnabled && [BillingStateSlice.BILLING_ACCOUNT, BillingStateSlice.SUBSCRIPTION, BillingStateSlice.PRODUCTS, BillingStateSlice.PRICES].every(billing.isSliceAvailable);
+    useEffect(() => {
+        generation.current += 1;
+        pendingPreview.current?.abort();
+        setState({ phase: BillingPlanChangePhase.IDLE });
+        return () => { generation.current += 1; pendingPreview.current?.abort(); };
+    }, [scopeIdentity]);
+    // A same-scope refresh cannot revoke an already submitted confirmation or its retry token.
+    // Availability controls whether another dispatch is allowed; it is not evidence that the
+    // provider did not accept the first one. The server validates the quote's semantic basis.
+    useEffect(() => {
+        const current = stateRef.current;
+        if (confirming.current || (current.phase === BillingPlanChangePhase.READY && current.hasError))
+            return;
+        if (!ready) {
+            generation.current += 1;
+            pendingPreview.current?.abort();
+            setState({ phase: BillingPlanChangePhase.IDLE });
+        }
+    }, [ready]);
+    const select = useCallback(async (target) => {
+        if (!billing || !ready || !billing.subscription || confirming.current)
+            return;
+        const requestGeneration = ++generation.current;
+        pendingPreview.current?.abort();
+        const controller = new AbortController();
+        pendingPreview.current = controller;
+        const selection = { target, scopeIdentity };
+        setState({ ...selection, phase: BillingPlanChangePhase.PREVIEWING });
+        try {
+            const response = await billing.previewPlanChange(target, { signal: controller.signal });
+            const preview = invoicePreviewForDisplay(response);
+            if (!response.previewToken)
+                throw new Error('The invoice estimate has no confirmation binding.');
+            if (generation.current !== requestGeneration || currentIdentity.current !== scopeIdentity)
+                return;
+            setState({ ...selection, phase: BillingPlanChangePhase.READY, response, preview });
+        }
+        catch {
+            if (generation.current !== requestGeneration || controller.signal.aborted)
+                return;
+            setState({ ...selection, phase: BillingPlanChangePhase.FAILED });
+        }
+    }, [billing, ready, scopeIdentity]);
+    const cancel = useCallback(() => {
+        if (confirming.current)
+            return;
+        generation.current += 1;
+        pendingPreview.current?.abort();
+        setState({ phase: BillingPlanChangePhase.IDLE });
+    }, []);
+    const confirm = useCallback(async () => {
+        const current = stateRef.current;
+        if (!billing || !ready || confirming.current || current.phase !== BillingPlanChangePhase.READY || current.scopeIdentity !== currentIdentity.current)
+            return;
+        confirming.current = true;
+        const requestGeneration = generation.current;
+        setState({ ...current, phase: BillingPlanChangePhase.CONFIRMING, hasError: false });
+        try {
+            await billing.confirmPlanChange({ ...current.target, previewToken: current.response.previewToken });
+            if (generation.current === requestGeneration)
+                setState({ phase: BillingPlanChangePhase.IDLE });
+        }
+        catch {
+            if (generation.current === requestGeneration)
+                setState({ ...current, phase: BillingPlanChangePhase.READY, hasError: true });
+        }
+        finally {
+            confirming.current = false;
+        }
+    }, [billing, ready]);
+    return { state, select, cancel, confirm };
+}
+//# sourceMappingURL=useBillingPlanChange.js.map

package/dist/esm/core/billing/useBillingPlanChange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useBillingPlanChange.js","sourceRoot":"","sources":["../../../../../src/core/billing/useBillingPlanChange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAuB,MAAM,uBAAuB,CAAC;AAG/E,MAAM,CAAN,IAAY,sBAMX;AAND,WAAY,sBAAsB;IAChC,uCAAa,CAAA;IACb,mDAAyB,CAAA;IACzB,yCAAe,CAAA;IACf,mDAAyB,CAAA;IACzB,2CAAiB,CAAA;AACnB,CAAC,EANW,sBAAsB,KAAtB,sBAAsB,QAMjC;AAQD,sGAAsG;AACtG,MAAM,UAAU,wBAAwB,CAAC,QAA0C;IACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC5I,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC/D,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrH,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAuC;IAC1E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAyB,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IACnG,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,cAAc,GAAG,MAAM,CAAyB,IAAI,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;IACzB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IACxH,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9C,eAAe,CAAC,OAAO,GAAG,aAAa,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEhM,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;QACxB,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAChC,QAAQ,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,2FAA2F;IAC3F,yFAAyF;IACzF,0FAA0F;IAC1F,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,sBAAsB,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO;QACvG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;YACxB,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YAChC,QAAQ,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,MAA+B,EAAE,EAAE;QACnE,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,OAAO;YAAE,OAAO;QAC9E,MAAM,iBAAiB,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC;QAC/C,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,cAAc,CAAC,OAAO,GAAG,UAAU,CAAC;QACpC,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC5C,QAAQ,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACxF,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACjG,IAAI,UAAU,CAAC,OAAO,KAAK,iBAAiB,IAAI,eAAe,CAAC,OAAO,KAAK,aAAa;gBAAE,OAAO;YAClG,QAAQ,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,UAAU,CAAC,OAAO,KAAK,iBAAiB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YAClF,QAAQ,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,sBAAsB,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,IAAI,UAAU,CAAC,OAAO;YAAE,OAAO;QAC/B,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;QACxB,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAChC,QAAQ,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,sBAAsB,CAAC,KAAK,IAAI,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,OAAO;YAAE,OAAO;QAC5J,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC;QAC7C,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;YACpG,IAAI,UAAU,CAAC,OAAO,KAAK,iBAAiB;gBAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,UAAU,CAAC,OAAO,KAAK,iBAAiB;gBAAE,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9H,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAErB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC","sourcesContent":["import { useCallback, useEffect, useRef, useState } from 'react';\nimport { currencyMinorUnitDecimals } from '@wildo-ai/zod-decorators';\nimport { BillingStateSlice, type InvoicePreview } from '@wildo-ai/saas-models';\nimport type { BillingContextType, BillingPlanChangeTarget, BillingPlanChangePreviewResponse } from './BillingContext';\n\nexport enum BillingPlanChangePhase {\n  IDLE = 'idle',\n  PREVIEWING = 'previewing',\n  READY = 'ready',\n  CONFIRMING = 'confirming',\n  FAILED = 'failed',\n}\n\ntype Selection = { target: BillingPlanChangeTarget; scopeIdentity: string };\nexport type BillingPlanChangeState =\n  | { phase: BillingPlanChangePhase.IDLE }\n  | (Selection & { phase: BillingPlanChangePhase.PREVIEWING | BillingPlanChangePhase.FAILED })\n  | (Selection & { phase: BillingPlanChangePhase.READY | BillingPlanChangePhase.CONFIRMING; response: BillingPlanChangePreviewResponse; preview: InvoicePreview; hasError?: boolean });\n\n/** A provider amount uses the currency's own minor units, not an authored price's arbitrary scale. */\nexport function invoicePreviewForDisplay(response: BillingPlanChangePreviewResponse): InvoicePreview {\n  const currency = response.currency.toUpperCase();\n  const decimals = currencyMinorUnitDecimals(currency);\n  if (decimals === undefined || !Number.isSafeInteger(response.amount) || response.lineItems.some(item => !Number.isSafeInteger(item.amount))) {\n    throw new Error('The invoice estimate contains unsupported monetary values.');\n  }\n  return {\n    amount: { amount: BigInt(response.amount), currency, decimals },\n    lineItems: response.lineItems.map(item => ({ ...item, amount: { amount: BigInt(item.amount), currency, decimals } })),\n    periodStart: response.periodStart,\n    periodEnd: response.periodEnd,\n    timing: response.timing,\n    effectiveAt: new Date(response.effectiveAt),\n  };\n}\n\n/** Owns the composed selection flow. A server token is only usable with its original selection.\n * Request generation fences late responses; cancellation aborts only a preview, never an accepted mutation.\n * A failed confirmation retains its token for the server's idempotent retry path.\n */\nexport function useBillingPlanChange(billing: BillingContextType | undefined) {\n  const [state, setState] = useState<BillingPlanChangeState>({ phase: BillingPlanChangePhase.IDLE });\n  const generation = useRef(0);\n  const pendingPreview = useRef<AbortController | null>(null);\n  const confirming = useRef(false);\n  const stateRef = useRef(state);\n  stateRef.current = state;\n  const scopeIdentity = JSON.stringify([billing?.currentScope, billing?.billingAccount?._id, billing?.subscription?._id]);\n  const currentIdentity = useRef(scopeIdentity);\n  currentIdentity.current = scopeIdentity;\n  const ready = !!billing?.isEnabled && [BillingStateSlice.BILLING_ACCOUNT, BillingStateSlice.SUBSCRIPTION, BillingStateSlice.PRODUCTS, BillingStateSlice.PRICES].every(billing.isSliceAvailable);\n\n  useEffect(() => {\n    generation.current += 1;\n    pendingPreview.current?.abort();\n    setState({ phase: BillingPlanChangePhase.IDLE });\n    return () => { generation.current += 1; pendingPreview.current?.abort(); };\n  }, [scopeIdentity]);\n\n  // A same-scope refresh cannot revoke an already submitted confirmation or its retry token.\n  // Availability controls whether another dispatch is allowed; it is not evidence that the\n  // provider did not accept the first one. The server validates the quote's semantic basis.\n  useEffect(() => {\n    const current = stateRef.current;\n    if (confirming.current || (current.phase === BillingPlanChangePhase.READY && current.hasError)) return;\n    if (!ready) {\n      generation.current += 1;\n      pendingPreview.current?.abort();\n      setState({ phase: BillingPlanChangePhase.IDLE });\n    }\n  }, [ready]);\n\n  const select = useCallback(async (target: BillingPlanChangeTarget) => {\n    if (!billing || !ready || !billing.subscription || confirming.current) return;\n    const requestGeneration = ++generation.current;\n    pendingPreview.current?.abort();\n    const controller = new AbortController();\n    pendingPreview.current = controller;\n    const selection = { target, scopeIdentity };\n    setState({ ...selection, phase: BillingPlanChangePhase.PREVIEWING });\n    try {\n      const response = await billing.previewPlanChange(target, { signal: controller.signal });\n      const preview = invoicePreviewForDisplay(response);\n      if (!response.previewToken) throw new Error('The invoice estimate has no confirmation binding.');\n      if (generation.current !== requestGeneration || currentIdentity.current !== scopeIdentity) return;\n      setState({ ...selection, phase: BillingPlanChangePhase.READY, response, preview });\n    } catch {\n      if (generation.current !== requestGeneration || controller.signal.aborted) return;\n      setState({ ...selection, phase: BillingPlanChangePhase.FAILED });\n    }\n  }, [billing, ready, scopeIdentity]);\n\n  const cancel = useCallback(() => {\n    if (confirming.current) return;\n    generation.current += 1;\n    pendingPreview.current?.abort();\n    setState({ phase: BillingPlanChangePhase.IDLE });\n  }, []);\n\n  const confirm = useCallback(async () => {\n    const current = stateRef.current;\n    if (!billing || !ready || confirming.current || current.phase !== BillingPlanChangePhase.READY || current.scopeIdentity !== currentIdentity.current) return;\n    confirming.current = true;\n    const requestGeneration = generation.current;\n    setState({ ...current, phase: BillingPlanChangePhase.CONFIRMING, hasError: false });\n    try {\n      await billing.confirmPlanChange({ ...current.target, previewToken: current.response.previewToken });\n      if (generation.current === requestGeneration) setState({ phase: BillingPlanChangePhase.IDLE });\n    } catch {\n      if (generation.current === requestGeneration) setState({ ...current, phase: BillingPlanChangePhase.READY, hasError: true });\n    } finally {\n      confirming.current = false;\n    }\n  }, [billing, ready]);\n\n  return { state, select, cancel, confirm };\n}\n"]}

package/dist/esm/core/billing/useSafeBillingActionExecutor.d.ts

@@ -1,6 +1,9 @@
 /**
  * Wrap billing UI actions so user-triggered checkout / portal failures surface
  * through the notification system instead of becoming dropped promise rejections.
+ *
+ * The notification shows the failure's localized words, never the error's own `message` (a reference key
+ * for a backend rejection, developer text for a thrown `Error`).
  */
 export declare function useSafeBillingActionExecutor(): (action: () => Promise<void>) => void;
 //# sourceMappingURL=useSafeBillingActionExecutor.d.ts.map

package/dist/esm/core/billing/useSafeBillingActionExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSafeBillingActionExecutor.d.ts","sourceRoot":"","sources":["../../../../src/core/billing/useSafeBillingActionExecutor.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAWpF"}
+{"version":3,"file":"useSafeBillingActionExecutor.d.ts","sourceRoot":"","sources":["../../../../../src/core/billing/useSafeBillingActionExecutor.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,wBAAgB,4BAA4B,IAAI,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CASpF"}

package/dist/esm/core/billing/useSafeBillingActionExecutor.js

@@ -1,18 +1,20 @@
 import { useCallback } from 'react';
 import { useNotification } from '../../core/events/useNotification.js';
+import { useUserFacingErrorMessage } from '../../core/errors/useUserFacingErrorMessage.js';
 /**
  * Wrap billing UI actions so user-triggered checkout / portal failures surface
  * through the notification system instead of becoming dropped promise rejections.
+ *
+ * The notification shows the failure's localized words, never the error's own `message` (a reference key
+ * for a backend rejection, developer text for a thrown `Error`).
  */
 export function useSafeBillingActionExecutor() {
     const { notifyError } = useNotification();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
     return useCallback((action) => {
         void action().catch((error) => {
-            const message = error instanceof Error
-                ? error.message
-                : 'An unexpected billing error occurred';
-            notifyError(message);
+            notifyError(toUserFacingErrorMessage(error));
         });
-    }, [notifyError]);
+    }, [notifyError, toUserFacingErrorMessage]);
 }
 //# sourceMappingURL=useSafeBillingActionExecutor.js.map

package/dist/esm/core/billing/useSafeBillingActionExecutor.js.map

@@ -1 +1 @@
-{"version":3,"file":"useSafeBillingActionExecutor.js","sourceRoot":"","sources":["../../../../src/core/billing/useSafeBillingActionExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAElF;;;GAGG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,WAAW,EAAE,GAAG,eAAe,EAAE,CAAC;IAE1C,OAAO,WAAW,CAAC,CAAC,MAA2B,EAAE,EAAE;QACjD,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK;gBACpC,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,sCAAsC,CAAC;YAC3C,WAAW,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;AACpB,CAAC","sourcesContent":["import { useCallback } from 'react';\nimport { useNotification } from '~wildo-frontend-lib/core/events/useNotification';\n\n/**\n * Wrap billing UI actions so user-triggered checkout / portal failures surface\n * through the notification system instead of becoming dropped promise rejections.\n */\nexport function useSafeBillingActionExecutor(): (action: () => Promise<void>) => void {\n  const { notifyError } = useNotification();\n\n  return useCallback((action: () => Promise<void>) => {\n    void action().catch((error: unknown) => {\n      const message = error instanceof Error\n        ? error.message\n        : 'An unexpected billing error occurred';\n      notifyError(message);\n    });\n  }, [notifyError]);\n}\n"]}
+{"version":3,"file":"useSafeBillingActionExecutor.js","sourceRoot":"","sources":["../../../../../src/core/billing/useSafeBillingActionExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AAEtG;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,WAAW,EAAE,GAAG,eAAe,EAAE,CAAC;IAC1C,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,OAAO,WAAW,CAAC,CAAC,MAA2B,EAAE,EAAE;QACjD,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACrC,WAAW,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAC9C,CAAC","sourcesContent":["import { useCallback } from 'react';\nimport { useNotification } from '~wildo-frontend-lib/core/events/useNotification';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\n\n/**\n * Wrap billing UI actions so user-triggered checkout / portal failures surface\n * through the notification system instead of becoming dropped promise rejections.\n *\n * The notification shows the failure's localized words, never the error's own `message` (a reference key\n * for a backend rejection, developer text for a thrown `Error`).\n */\nexport function useSafeBillingActionExecutor(): (action: () => Promise<void>) => void {\n  const { notifyError } = useNotification();\n  const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n  return useCallback((action: () => Promise<void>) => {\n    void action().catch((error: unknown) => {\n      notifyError(toUserFacingErrorMessage(error));\n    });\n  }, [notifyError, toUserFacingErrorMessage]);\n}\n"]}

package/dist/esm/core/branding/useBrandIdentity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandIdentity.d.ts","sourceRoot":"","sources":["../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAK/B;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,oEAAoE;IACpE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa,CAqDrF"}
+{"version":3,"file":"useBrandIdentity.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAK/B;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,oEAAoE;IACpE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa,CAqDrF"}

package/dist/esm/core/branding/useBrandIdentity.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandIdentity.js","sourceRoot":"","sources":["../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAwD1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,EAAE,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3G,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,CAAC;IAE1C,8EAA8E;IAC9E,EAAE;IACF,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,sCAAsC;IACtC,EAAE;IACF,6EAA6E;IAC7E,+DAA+D;IAC/D,sFAAsF;IACtF,yEAAyE;IACzE,4EAA4E;IAC5E,eAAe;IACf,EAAE;IACF,+EAA+E;IAC/E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE;IACF,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,WAAW,GAAoC,aAAa;QAChE,CAAC,CAAC,aAAa,CAAC,WAAW;QAC3B,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC1B,MAAM,IAAI,GAAG,aAAa;QACxB,CAAC,CAAC,aAAa,CAAC,IAAI;QACpB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC,WAAW,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,iBAAiB,CAAC,WAAW,EAAE;YACpC,WAAW;YACX,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,aAAa;YACb,KAAK,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;YACvE,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAEvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAClF,CAAC","sourcesContent":["import { useMemo } from 'react';\n\nimport {\n  BrandAssetComposition,\n  BrandAssetPurpose,\n  BrandAssetTheme,\n  resolveBrandAsset,\n  type RuntimeBrandAsset,\n} from '@wildo-ai/saas-models';\n\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\n\n/**\n * The application's brand identity as a shell surface needs it: a display name\n * plus the URL of the brand asset matching the requested composition and the\n * ACTIVE light/dark theme.\n */\nexport interface BrandIdentity {\n  /**\n   * Human-readable application name — `appIdentity.displayName` when authored,\n   * falling back to the technical `appName` (which the config schema requires,\n   * so this is always non-empty).\n   */\n  name: string;\n  /**\n   * Resolved brand-asset URL, or `undefined` when the application has generated\n   * no brand yet. Consumers must degrade gracefully rather than render a broken\n   * image (the schema documents brand assets as absent until generated).\n   */\n  logoUrl?: string;\n  /**\n   * Composition of the asset that was ACTUALLY resolved — which may differ from\n   * the one requested. `resolveBrandAsset`'s last fallback rung matches any\n   * composition at `(DEFAULT, PRIMARY)`, so an application whose brand contains\n   * no `SYMBOL` (a wordmark-only identity is a supported brand shape) yields its\n   * `WORDMARK`/`LOCKUP` master here.\n   *\n   * Surfaces MUST branch on this rather than assume they got what they asked\n   * for: a wordmark or lockup already CONTAINS the application name, so\n   * rendering it beside a name label duplicates the name, and squeezing a wide\n   * asset into a square icon slot letterboxes it.\n   */\n  logoComposition?: BrandAssetComposition;\n}\n\nexport interface UseBrandIdentityOptions {\n  /**\n   * Which brand composition the surface wants. Defaults to\n   * {@link BrandAssetComposition.SYMBOL} — the right choice for any surface that\n   * renders the application NAME as text beside the mark, because a `LOCKUP`\n   * already contains the name and would duplicate it.\n   */\n  composition?: BrandAssetComposition;\n  /** Asset purpose. Defaults to {@link BrandAssetPurpose.PRIMARY}. */\n  purpose?: BrandAssetPurpose;\n  /**\n   * PINS the mark variant instead of following the active UI theme — e.g.\n   * {@link BrandAssetTheme.MONOCHROME} for the single-colour mark, or\n   * {@link BrandAssetTheme.DEFAULT} to keep the colour mark on a dark shell.\n   *\n   * Omitted (the default) means ADAPTIVE: dark UI asks for `DARK`, light UI for\n   * `LIGHT`, both falling back through `DEFAULT` inside `resolveBrandAsset`.\n   */\n  theme?: BrandAssetTheme;\n}\n\n/**\n * @wildo_source:part:start saas.frontend.brand-identity facet:layer:frontend facet:audience:app-developer\n *\n * Reads the application's brand identity for a shell surface.\n *\n * Owns ONE decision every brand-rendering surface would otherwise re-derive:\n * how the active UI theme maps onto {@link BrandAssetTheme} (dark UI → `DARK`,\n * light UI → `LIGHT`), unless the caller PINS a variant via `options.theme`.\n * `resolveBrandAsset` then applies the framework's documented fallback chain, so\n * an app that generated only a default-theme mark still gets it in dark mode\n * instead of nothing.\n *\n * Must be used inside `ApplicationMainProvider` (it reads the application\n * config) and inside `UIProvider` (it reads the resolved dark-mode state).\n *\n * ## Two things a caller does not have to solve\n *\n * The MARK VARIANT follows the active UI theme by default — dark UI asks for the dark mark, light UI\n * for the light one, each falling back through the default. So an application that generated only a\n * default-theme mark still gets it in dark mode rather than nothing. Pin `options.theme` only when a\n * surface genuinely needs a fixed variant, such as a monochrome mark.\n *\n * WHOSE identity is rendered is decided here too, and it matters for any frontend that observes an\n * application rather than being one — a creation tool, a back office. Such a frontend declares\n * `shellIdentity` in its frontend configuration, and that identity WINS over the application config\n * it reads. Without that precedence the tool renders its customer's brand as its own, because there\n * is exactly one application-config endpoint and it belongs to the application.\n *\n * @wildo_source:part:end saas.frontend.brand-identity\n */\nexport function useBrandIdentity(options: UseBrandIdentityOptions = {}): BrandIdentity {\n  const { composition = BrandAssetComposition.SYMBOL, purpose = BrandAssetPurpose.PRIMARY, theme } = options;\n  const { appConfig } = useApplication();\n  const { isDark, shellIdentity } = useUI();\n\n  // ── WHOSE identity is this? ────────────────────────────────────────────────\n  //\n  // A frontend that declares `shellIdentity` in its frontend configuration is\n  // saying \"I am not the application I talk to\" — a creation tool, a back\n  // office, anything observing an application rather than being one. Its\n  // identity WINS here, because the alternative is silently presenting the\n  // customer's brand as the tool's own.\n  //\n  // That is not hypothetical. There is exactly ONE application-config endpoint\n  // and it belongs to the application: the dev companion answers\n  // `GET /api/v1/application-config?frontendServiceName=application-creation-workbench`\n  // with `appIdentity.displayName: \"Wonder CRM\"` (measured 2026-08-31), so\n  // without this precedence the workbench's brand header reads as the managed\n  // application.\n  //\n  // The two halves are taken TOGETHER, never mixed. A shell that declared a name\n  // but no assets must render its name UNMARKED rather than borrowing the\n  // application's mark — a foreign logo beside your own name is worse than no\n  // logo, and it is the exact mismatch this field exists to prevent. So the\n  // assets are read from whichever side supplied the name.\n  //\n  // `appConfig` is non-optional on the context type and the provider only mounts\n  // past the bootstrap gate, so it is read directly; `appIdentity` keeps its\n  // optional read because the runtime payload has historically been treated as\n  // possibly-absent (see `ApplicationMainContext`'s own `appIdentity?.version`).\n  const brandAssets: RuntimeBrandAsset[] | undefined = shellIdentity\n    ? shellIdentity.brandAssets\n    : appConfig.brandAssets;\n  const name = shellIdentity\n    ? shellIdentity.name\n    : (appConfig.appIdentity?.displayName || appConfig.appIdentity?.appName || '');\n\n  const resolved = useMemo(() => {\n    if (!brandAssets?.length) return undefined;\n    return resolveBrandAsset(brandAssets, {\n      composition,\n      // An explicit `theme` pins the variant (monochrome, or a forced side).\n      // Otherwise ADAPTIVE: LIGHT rather than DEFAULT for a light UI, because\n      // `resolveBrandAsset` tries the requested theme first and falls back to\n      // DEFAULT on its own — so asking for LIGHT strictly adds the ability to\n      // honor a light-specific asset, while asking for DEFAULT could never\n      // reach one.\n      theme: theme ?? (isDark ? BrandAssetTheme.DARK : BrandAssetTheme.LIGHT),\n      purpose,\n    });\n  }, [brandAssets, composition, purpose, theme, isDark]);\n\n  return { name, logoUrl: resolved?.url, logoComposition: resolved?.composition };\n}\n"]}
+{"version":3,"file":"useBrandIdentity.js","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAwD1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,EAAE,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3G,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,CAAC;IAE1C,8EAA8E;IAC9E,EAAE;IACF,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,sCAAsC;IACtC,EAAE;IACF,6EAA6E;IAC7E,+DAA+D;IAC/D,sFAAsF;IACtF,yEAAyE;IACzE,4EAA4E;IAC5E,eAAe;IACf,EAAE;IACF,+EAA+E;IAC/E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE;IACF,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,WAAW,GAAoC,aAAa;QAChE,CAAC,CAAC,aAAa,CAAC,WAAW;QAC3B,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC1B,MAAM,IAAI,GAAG,aAAa;QACxB,CAAC,CAAC,aAAa,CAAC,IAAI;QACpB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC,WAAW,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,iBAAiB,CAAC,WAAW,EAAE;YACpC,WAAW;YACX,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,aAAa;YACb,KAAK,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;YACvE,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAEvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAClF,CAAC","sourcesContent":["import { useMemo } from 'react';\n\nimport {\n  BrandAssetComposition,\n  BrandAssetPurpose,\n  BrandAssetTheme,\n  resolveBrandAsset,\n  type RuntimeBrandAsset,\n} from '@wildo-ai/saas-models';\n\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\n\n/**\n * The application's brand identity as a shell surface needs it: a display name\n * plus the URL of the brand asset matching the requested composition and the\n * ACTIVE light/dark theme.\n */\nexport interface BrandIdentity {\n  /**\n   * Human-readable application name — `appIdentity.displayName` when authored,\n   * falling back to the technical `appName` (which the config schema requires,\n   * so this is always non-empty).\n   */\n  name: string;\n  /**\n   * Resolved brand-asset URL, or `undefined` when the application has generated\n   * no brand yet. Consumers must degrade gracefully rather than render a broken\n   * image (the schema documents brand assets as absent until generated).\n   */\n  logoUrl?: string;\n  /**\n   * Composition of the asset that was ACTUALLY resolved — which may differ from\n   * the one requested. `resolveBrandAsset`'s last fallback rung matches any\n   * composition at `(DEFAULT, PRIMARY)`, so an application whose brand contains\n   * no `SYMBOL` (a wordmark-only identity is a supported brand shape) yields its\n   * `WORDMARK`/`LOCKUP` master here.\n   *\n   * Surfaces MUST branch on this rather than assume they got what they asked\n   * for: a wordmark or lockup already CONTAINS the application name, so\n   * rendering it beside a name label duplicates the name, and squeezing a wide\n   * asset into a square icon slot letterboxes it.\n   */\n  logoComposition?: BrandAssetComposition;\n}\n\nexport interface UseBrandIdentityOptions {\n  /**\n   * Which brand composition the surface wants. Defaults to\n   * {@link BrandAssetComposition.SYMBOL} — the right choice for any surface that\n   * renders the application NAME as text beside the mark, because a `LOCKUP`\n   * already contains the name and would duplicate it.\n   */\n  composition?: BrandAssetComposition;\n  /** Asset purpose. Defaults to {@link BrandAssetPurpose.PRIMARY}. */\n  purpose?: BrandAssetPurpose;\n  /**\n   * PINS the mark variant instead of following the active UI theme — e.g.\n   * {@link BrandAssetTheme.MONOCHROME} for the single-colour mark, or\n   * {@link BrandAssetTheme.DEFAULT} to keep the colour mark on a dark shell.\n   *\n   * Omitted (the default) means ADAPTIVE: dark UI asks for `DARK`, light UI for\n   * `LIGHT`, both falling back through `DEFAULT` inside `resolveBrandAsset`.\n   */\n  theme?: BrandAssetTheme;\n}\n\n/**\n * @wildo_source:part:start saas.frontend.brand-identity facet:layer:frontend facet:audience:app-developer\n *\n * Reads the application's brand identity for a shell surface.\n *\n * Owns ONE decision every brand-rendering surface would otherwise re-derive:\n * how the active UI theme maps onto {@link BrandAssetTheme} (dark UI → `DARK`,\n * light UI → `LIGHT`), unless the caller PINS a variant via `options.theme`.\n * `resolveBrandAsset` then applies the framework's documented fallback chain, so\n * an app that generated only a default-theme mark still gets it in dark mode\n * instead of nothing.\n *\n * Must be used inside `ApplicationMainProvider` (it reads the application\n * config) and inside `UIProvider` (it reads the resolved dark-mode state).\n *\n * ## Two things a caller does not have to solve\n *\n * The MARK VARIANT follows the active UI theme by default — dark UI asks for the dark mark, light UI\n * for the light one, each falling back through the default. So an application that generated only a\n * default-theme mark still gets it in dark mode rather than nothing. Pin `options.theme` only when a\n * surface genuinely needs a fixed variant, such as a monochrome mark.\n *\n * WHOSE identity is rendered is decided here too, and it matters for any frontend that observes an\n * application rather than being one — a creation tool, a back office. Such a frontend declares\n * `shellIdentity` in its frontend configuration, and that identity WINS over the application config\n * it reads. Without that precedence the tool renders its customer's brand as its own, because there\n * is exactly one application-config endpoint and it belongs to the application.\n *\n * @wildo_source:part:end saas.frontend.brand-identity\n */\nexport function useBrandIdentity(options: UseBrandIdentityOptions = {}): BrandIdentity {\n  const { composition = BrandAssetComposition.SYMBOL, purpose = BrandAssetPurpose.PRIMARY, theme } = options;\n  const { appConfig } = useApplication();\n  const { isDark, shellIdentity } = useUI();\n\n  // ── WHOSE identity is this? ────────────────────────────────────────────────\n  //\n  // A frontend that declares `shellIdentity` in its frontend configuration is\n  // saying \"I am not the application I talk to\" — a creation tool, a back\n  // office, anything observing an application rather than being one. Its\n  // identity WINS here, because the alternative is silently presenting the\n  // customer's brand as the tool's own.\n  //\n  // That is not hypothetical. There is exactly ONE application-config endpoint\n  // and it belongs to the application: the dev companion answers\n  // `GET /api/v1/application-config?frontendServiceName=application-creation-workbench`\n  // with `appIdentity.displayName: \"Wonder CRM\"` (measured 2026-08-31), so\n  // without this precedence the workbench's brand header reads as the managed\n  // application.\n  //\n  // The two halves are taken TOGETHER, never mixed. A shell that declared a name\n  // but no assets must render its name UNMARKED rather than borrowing the\n  // application's mark — a foreign logo beside your own name is worse than no\n  // logo, and it is the exact mismatch this field exists to prevent. So the\n  // assets are read from whichever side supplied the name.\n  //\n  // `appConfig` is non-optional on the context type and the provider only mounts\n  // past the bootstrap gate, so it is read directly; `appIdentity` keeps its\n  // optional read because the runtime payload has historically been treated as\n  // possibly-absent (see `ApplicationMainContext`'s own `appIdentity?.version`).\n  const brandAssets: RuntimeBrandAsset[] | undefined = shellIdentity\n    ? shellIdentity.brandAssets\n    : appConfig.brandAssets;\n  const name = shellIdentity\n    ? shellIdentity.name\n    : (appConfig.appIdentity?.displayName || appConfig.appIdentity?.appName || '');\n\n  const resolved = useMemo(() => {\n    if (!brandAssets?.length) return undefined;\n    return resolveBrandAsset(brandAssets, {\n      composition,\n      // An explicit `theme` pins the variant (monochrome, or a forced side).\n      // Otherwise ADAPTIVE: LIGHT rather than DEFAULT for a light UI, because\n      // `resolveBrandAsset` tries the requested theme first and falls back to\n      // DEFAULT on its own — so asking for LIGHT strictly adds the ability to\n      // honor a light-specific asset, while asking for DEFAULT could never\n      // reach one.\n      theme: theme ?? (isDark ? BrandAssetTheme.DARK : BrandAssetTheme.LIGHT),\n      purpose,\n    });\n  }, [brandAssets, composition, purpose, theme, isDark]);\n\n  return { name, logoUrl: resolved?.url, logoComposition: resolved?.composition };\n}\n"]}

package/dist/esm/core/branding/useBrandPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandPresentation.d.ts","sourceRoot":"","sources":["../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,CAyB3F"}
+{"version":3,"file":"useBrandPresentation.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,CAyB3F"}

package/dist/esm/core/branding/useBrandPresentation.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandPresentation.js","sourceRoot":"","sources":["../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAuC9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmC;IACtE,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAElC;;;OAGG;IACH,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;IAChD,MAAM,eAAe,GACnB,OAAO,IAAI,QAAQ,EAAE,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,MAAM,CAAC;IAElH,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtC,OAAO;QACP,eAAe;QACf,OAAO,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import { useCallback, useEffect, useState } from 'react';\n\nimport { BrandAssetComposition } from '@wildo-ai/saas-models';\n\nimport type { BrandIdentity } from './useBrandIdentity';\n\n/**\n * A brand identity, reduced to the decisions every surface that RENDERS one must take.\n *\n * {@link BrandIdentity} answers \"what did the brand resolve to\". This answers \"what may I therefore\n * draw\", which is a different question with four traps in it — and each trap is a visible defect\n * rather than a crash, so nothing fails loudly when a surface gets one wrong.\n */\nexport interface BrandPresentation {\n  /** The application (or shell) name. May be empty only if the identity itself carries none. */\n  name: string;\n  /** The mark's URL — present only when {@link hasMark} is true. */\n  logoUrl?: string;\n  /**\n   * A mark resolved AND has not failed to load. Distinct from `logoUrl !== undefined`: a URL that\n   * 404s is a resolved mark that must not be drawn.\n   */\n  hasMark: boolean;\n  /**\n   * The resolved mark CONTAINS the name — a `WORDMARK` or `LOCKUP`, which the resolver's last\n   * fallback rung can return for an application that generated no `SYMBOL`.\n   *\n   * Surfaces must not print the name beside such a mark: it would appear twice. They must also give\n   * it intrinsic width rather than a square slot, or it letterboxes.\n   */\n  markCarriesName: boolean;\n  /** Nothing identifiable at all — no usable mark and no name. Render no identity affordance. */\n  isEmpty: boolean;\n  /**\n   * Wire to the `<img>`'s `onError`. A brand asset URL comes from configuration and can point at a\n   * file that is not there; without this the surface renders a browser broken-image glyph where the\n   * product identity should be.\n   */\n  onMarkError: () => void;\n}\n\n/**\n * Turns a resolved {@link BrandIdentity} into the presentation decisions a surface needs.\n *\n * ## Why this is shared rather than re-derived\n *\n * The sidebar's `BRAND_HEADER` worked these out first, and every one of them is a rule about the\n * DATA rather than about a sidebar: a wordmark contains the name; a failed load must degrade to the\n * no-mark presentation instead of a broken image; the failure latch must reset when the URL changes\n * or a light/dark switch leaves the surface permanently markless; an identity with neither mark nor\n * name must render nothing rather than an empty click target.\n *\n * A second surface presenting a brand needs the same four answers, so they live here once. What is\n * NOT here is anything about layout — a rail collapses, a login page does not — because that is the\n * part that genuinely differs per surface.\n */\nexport function useBrandPresentation(identity: BrandIdentity | undefined): BrandPresentation {\n  const logoUrl = identity?.logoUrl;\n  const name = identity?.name ?? '';\n\n  /*\n   * Reset on every URL change, not only on mount. A light/dark switch resolves a DIFFERENT asset,\n   * and a latch left set from the previous one would suppress a mark that loads perfectly.\n   */\n  const [markFailed, setMarkFailed] = useState(false);\n  useEffect(() => setMarkFailed(false), [logoUrl]);\n\n  const onMarkError = useCallback(() => setMarkFailed(true), []);\n\n  const hasMark = Boolean(logoUrl) && !markFailed;\n  const markCarriesName =\n    hasMark && identity?.logoComposition !== undefined && identity.logoComposition !== BrandAssetComposition.SYMBOL;\n\n  return {\n    name,\n    logoUrl: hasMark ? logoUrl : undefined,\n    hasMark,\n    markCarriesName,\n    isEmpty: !hasMark && name.length === 0,\n    onMarkError,\n  };\n}\n"]}
+{"version":3,"file":"useBrandPresentation.js","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAuC9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmC;IACtE,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAElC;;;OAGG;IACH,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;IAChD,MAAM,eAAe,GACnB,OAAO,IAAI,QAAQ,EAAE,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,MAAM,CAAC;IAElH,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtC,OAAO;QACP,eAAe;QACf,OAAO,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import { useCallback, useEffect, useState } from 'react';\n\nimport { BrandAssetComposition } from '@wildo-ai/saas-models';\n\nimport type { BrandIdentity } from './useBrandIdentity';\n\n/**\n * A brand identity, reduced to the decisions every surface that RENDERS one must take.\n *\n * {@link BrandIdentity} answers \"what did the brand resolve to\". This answers \"what may I therefore\n * draw\", which is a different question with four traps in it — and each trap is a visible defect\n * rather than a crash, so nothing fails loudly when a surface gets one wrong.\n */\nexport interface BrandPresentation {\n  /** The application (or shell) name. May be empty only if the identity itself carries none. */\n  name: string;\n  /** The mark's URL — present only when {@link hasMark} is true. */\n  logoUrl?: string;\n  /**\n   * A mark resolved AND has not failed to load. Distinct from `logoUrl !== undefined`: a URL that\n   * 404s is a resolved mark that must not be drawn.\n   */\n  hasMark: boolean;\n  /**\n   * The resolved mark CONTAINS the name — a `WORDMARK` or `LOCKUP`, which the resolver's last\n   * fallback rung can return for an application that generated no `SYMBOL`.\n   *\n   * Surfaces must not print the name beside such a mark: it would appear twice. They must also give\n   * it intrinsic width rather than a square slot, or it letterboxes.\n   */\n  markCarriesName: boolean;\n  /** Nothing identifiable at all — no usable mark and no name. Render no identity affordance. */\n  isEmpty: boolean;\n  /**\n   * Wire to the `<img>`'s `onError`. A brand asset URL comes from configuration and can point at a\n   * file that is not there; without this the surface renders a browser broken-image glyph where the\n   * product identity should be.\n   */\n  onMarkError: () => void;\n}\n\n/**\n * Turns a resolved {@link BrandIdentity} into the presentation decisions a surface needs.\n *\n * ## Why this is shared rather than re-derived\n *\n * The sidebar's `BRAND_HEADER` worked these out first, and every one of them is a rule about the\n * DATA rather than about a sidebar: a wordmark contains the name; a failed load must degrade to the\n * no-mark presentation instead of a broken image; the failure latch must reset when the URL changes\n * or a light/dark switch leaves the surface permanently markless; an identity with neither mark nor\n * name must render nothing rather than an empty click target.\n *\n * A second surface presenting a brand needs the same four answers, so they live here once. What is\n * NOT here is anything about layout — a rail collapses, a login page does not — because that is the\n * part that genuinely differs per surface.\n */\nexport function useBrandPresentation(identity: BrandIdentity | undefined): BrandPresentation {\n  const logoUrl = identity?.logoUrl;\n  const name = identity?.name ?? '';\n\n  /*\n   * Reset on every URL change, not only on mount. A light/dark switch resolves a DIFFERENT asset,\n   * and a latch left set from the previous one would suppress a mark that loads perfectly.\n   */\n  const [markFailed, setMarkFailed] = useState(false);\n  useEffect(() => setMarkFailed(false), [logoUrl]);\n\n  const onMarkError = useCallback(() => setMarkFailed(true), []);\n\n  const hasMark = Boolean(logoUrl) && !markFailed;\n  const markCarriesName =\n    hasMark && identity?.logoComposition !== undefined && identity.logoComposition !== BrandAssetComposition.SYMBOL;\n\n  return {\n    name,\n    logoUrl: hasMark ? logoUrl : undefined,\n    hasMark,\n    markCarriesName,\n    isEmpty: !hasMark && name.length === 0,\n    onMarkError,\n  };\n}\n"]}

package/dist/esm/core/commons/devices.frontend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devices.frontend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/commons/devices.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,GAAG,QAAQ;CACZ;AAED;;GAEG;AACH,oBAAY,QAAQ;IAClB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,eAAO,MAAM,gBAAgB;;;;;;iBAM3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC"}
+{"version":3,"file":"devices.frontend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/core/commons/devices.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,GAAG,QAAQ;CACZ;AAED;;GAEG;AACH,oBAAY,QAAQ;IAClB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,eAAO,MAAM,gBAAgB;;;;;;iBAM3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC"}

package/dist/esm/core/commons/devices.frontend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"devices.frontend.schemas.js","sourceRoot":"","sources":["../../../../src/core/commons/devices.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,+BAAiB,CAAA;IACjB,+BAAiB,CAAA;IACjB,yBAAW,CAAA;AACb,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EAJW,QAAQ,KAAR,QAAQ,QAInB;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC","sourcesContent":["/**\n * Device Shared Schemas\n * \n * Centralized device-related schemas and enums\n */\n\nimport { z } from 'zod';\n\n/**\n * Device type enum for authentication, sessions, and DTOs\n */\nexport enum DeviceType {\n  DESKTOP = 'desktop',\n  MOBILE = 'mobile',\n  TABLET = 'tablet',\n  API = 'api'\n}\n\n/**\n * SameSite cookie option enum\n */\nexport enum SameSite {\n  STRICT = 'strict',\n  LAX = 'lax',\n  NONE = 'none'\n}\n\nexport const DeviceInfoSchema = z.object({\n  userAgent: z.string().min(1, 'User agent is required'),\n  ipAddress: z.ipv4(),\n  deviceType: z.enum(DeviceType).default(DeviceType.DESKTOP),\n  location: z.string().optional(),\n  fingerprint: z.string().optional()\n});\n\nexport type DeviceInfo = z.infer<typeof DeviceInfoSchema>;\n\n// Type exports\nexport type DeviceTypeValue = DeviceType; \n"]}
+{"version":3,"file":"devices.frontend.schemas.js","sourceRoot":"","sources":["../../../../../src/core/commons/devices.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,+BAAiB,CAAA;IACjB,+BAAiB,CAAA;IACjB,yBAAW,CAAA;AACb,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,QAIX;AAJD,WAAY,QAAQ;IAClB,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EAJW,QAAQ,KAAR,QAAQ,QAInB;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC","sourcesContent":["/**\n * Device Shared Schemas\n * \n * Centralized device-related schemas and enums\n */\n\nimport { z } from 'zod';\n\n/**\n * Device type enum for authentication, sessions, and DTOs\n */\nexport enum DeviceType {\n  DESKTOP = 'desktop',\n  MOBILE = 'mobile',\n  TABLET = 'tablet',\n  API = 'api'\n}\n\n/**\n * SameSite cookie option enum\n */\nexport enum SameSite {\n  STRICT = 'strict',\n  LAX = 'lax',\n  NONE = 'none'\n}\n\nexport const DeviceInfoSchema = z.object({\n  userAgent: z.string().min(1, 'User agent is required'),\n  ipAddress: z.ipv4(),\n  deviceType: z.enum(DeviceType).default(DeviceType.DESKTOP),\n  location: z.string().optional(),\n  fingerprint: z.string().optional()\n});\n\nexport type DeviceInfo = z.infer<typeof DeviceInfoSchema>;\n\n// Type exports\nexport type DeviceTypeValue = DeviceType; \n"]}

package/dist/esm/core/commons/local-storage.frontend.schemas.d.ts

@@ -22,6 +22,21 @@ export declare enum RUNTIME_SCOPED_STORAGE_KEYS {
      */
     CLIENT_INSTANCE_ID = "clientInstanceId"
 }
+/**
+ * Web-storage keys that always live in `sessionStorage` — scoped to ONE tab and gone when it closes.
+ *
+ * Its own registry rather than members of {@link LOCAL_STORAGE_KEYS}, for the same reason
+ * {@link RUNTIME_SCOPED_STORAGE_KEYS} is: the storage AREA is the key's contract. A value that must die with
+ * the tab written through a localStorage helper would silently outlive it on every tab of the origin.
+ */
+export declare enum SESSION_STORAGE_KEYS {
+    /**
+     * The MFA session this tab still owes a second factor on, so a reload of the enrollment gate can recover
+     * it (#1068). Written and forgotten ONLY through `pending-mfa-session-storage.frontend.utils.ts`, which
+     * records why this lives in `sessionStorage` rather than the URL or `localStorage`.
+     */
+    PENDING_MFA_SESSION = "wildo-pending-mfa-session"
+}
 export declare enum LOCAL_STORAGE_KEYS {
     JWT_TOKEN = "jwtToken",
     REFRESH_TOKEN = "refreshToken",

package/dist/esm/core/commons/local-storage.frontend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-storage.frontend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/commons/local-storage.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;GAOG;AACH,oBAAY,2BAA2B;IACrC;;;;OAIG;IACH,kBAAkB,qBAAqB;CACxC;AAED,oBAAY,kBAAkB;IAC5B,SAAS,aAA4B;IACrC,aAAa,iBAA4B;IACzC,QAAQ,aAA6B;IACrC,uBAAuB,0BAA2B;IAClD,YAAY,gBAA4B;IACxC,yBAAyB,oCAAoC;IAC7D;;;;;;OAMG;IACH,iBAAiB,4BAAmC;IACpD;;;;;;;;OAQG;IACH,iBAAiB,4BAAmC;IACpD,iBAAiB,oBAA2B;IAC5C,uBAAuB,0BAA2B;CACnD;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,IAO1D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAOhE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,KAAK,MAAM,KAAG,IAOpD,CAAC"}
+{"version":3,"file":"local-storage.frontend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/core/commons/local-storage.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;GAOG;AACH,oBAAY,2BAA2B;IACrC;;;;OAIG;IACH,kBAAkB,qBAAqB;CACxC;AAED;;;;;;GAMG;AACH,oBAAY,oBAAoB;IAC9B;;;;OAIG;IACH,mBAAmB,8BAA8B;CAClD;AAED,oBAAY,kBAAkB;IAC5B,SAAS,aAA4B;IACrC,aAAa,iBAA4B;IACzC,QAAQ,aAA6B;IACrC,uBAAuB,0BAA2B;IAClD,YAAY,gBAA4B;IACxC,yBAAyB,oCAAoC;IAC7D;;;;;;OAMG;IACH,iBAAiB,4BAAmC;IACpD;;;;;;;;OAQG;IACH,iBAAiB,4BAAmC;IACpD,iBAAiB,oBAA2B;IAC5C,uBAAuB,0BAA2B;CACnD;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,IAO1D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAOhE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,KAAK,MAAM,KAAG,IAOpD,CAAC"}

package/dist/esm/core/commons/local-storage.frontend.schemas.js

@@ -23,6 +23,22 @@ export var RUNTIME_SCOPED_STORAGE_KEYS;
      */
     RUNTIME_SCOPED_STORAGE_KEYS["CLIENT_INSTANCE_ID"] = "clientInstanceId";
 })(RUNTIME_SCOPED_STORAGE_KEYS || (RUNTIME_SCOPED_STORAGE_KEYS = {}));
+/**
+ * Web-storage keys that always live in `sessionStorage` — scoped to ONE tab and gone when it closes.
+ *
+ * Its own registry rather than members of {@link LOCAL_STORAGE_KEYS}, for the same reason
+ * {@link RUNTIME_SCOPED_STORAGE_KEYS} is: the storage AREA is the key's contract. A value that must die with
+ * the tab written through a localStorage helper would silently outlive it on every tab of the origin.
+ */
+export var SESSION_STORAGE_KEYS;
+(function (SESSION_STORAGE_KEYS) {
+    /**
+     * The MFA session this tab still owes a second factor on, so a reload of the enrollment gate can recover
+     * it (#1068). Written and forgotten ONLY through `pending-mfa-session-storage.frontend.utils.ts`, which
+     * records why this lives in `sessionStorage` rather than the URL or `localStorage`.
+     */
+    SESSION_STORAGE_KEYS["PENDING_MFA_SESSION"] = "wildo-pending-mfa-session";
+})(SESSION_STORAGE_KEYS || (SESSION_STORAGE_KEYS = {}));
 export var LOCAL_STORAGE_KEYS;
 (function (LOCAL_STORAGE_KEYS) {
     LOCAL_STORAGE_KEYS["JWT_TOKEN"] = "jwtToken";