@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.6

package/dist/esm/components/auth/methods/auth-method-presentation.d.ts

@@ -0,0 +1,105 @@
+import { UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { StandardIconReference } from '../../../core/icons/icon-registry.frontend.schemas';
+/**
+ * The glyph that identifies each authentication method wherever a person chooses or starts one —
+ * the sign-in, registration, invitation, second-factor and enrollment choosers, and the button that
+ * STARTS a method where it has one (passkey, magic link, organization SSO, the email and SMS
+ * send-code buttons). Password and authenticator-app codes are typed into a form whose submit button
+ * belongs to the form, not to the method, so those carry no glyph.
+ *
+ * TOTAL over `AuthMethod` on purpose: a method added to the enum is a compile error here, so no screen
+ * can offer a method without an icon. `KEY` and `FINGERPRINT` are the glyphs the Security settings panel
+ * uses for password and passkeys. That panel shows its phone factor with `MAIL`; the sign-in surfaces
+ * use `MESSAGE_CIRCLE` for SMS, because in the second-factor chooser it sits beside email codes.
+ *
+ * `MAGIC_LINK` and `EMAIL_OTP` share `MAIL`: both are delivered to the inbox, and they never appear in
+ * the same chooser (the first is first-factor only, the second is second-factor only). `SMS_OTP` and
+ * `TOTP` DO meet in the second-factor chooser, so they are kept apart — a message for the text, a
+ * handset for the authenticator app.
+ */
+export declare const AUTH_METHOD_ICON_REFERENCES: Readonly<Record<AuthMethod, StandardIconReference>>;
+/**
+ * The words that name a first-factor method on a chooser, in the `USER_AUTH` label namespace.
+ *
+ * One source for the sign-in, registration and invitation screens, which each carried their own copy
+ * of this map so a method would "read the same wherever it is chosen" — a promise three hand-kept
+ * copies could not keep. SAML and OIDC share the organization-SSO label. The second-factor chooser
+ * names methods in its own namespace (`MfaChallengeLabel`) and does not use this map.
+ */
+export declare const AUTH_METHOD_CHOICE_LABELS: Readonly<Partial<Record<AuthMethod, UserAuthLabel>>>;
+/**
+ * What a federated method offers to be named BY — the connection or provider behind it.
+ *
+ * `AUTH_METHOD_CHOICE_LABELS` names a method by its KIND, which is right for password, passkey and
+ * the emailed link: there is one of each and its kind is its name. It is wrong for the two federated
+ * kinds, where the thing a person recognises is the PROVIDER — "Google", "Okta", "Acme SSO" — and the
+ * kind is an implementation word they have no reason to know.
+ *
+ * Every other surface already knew this. The pre-identify section renders one button per provider
+ * reading "Continue with Google"; the ACTIVE enterprise method renders `CONTINUE_WITH` filled from the
+ * connection's own `displayName`. Only the "other sign-in methods" chooser fell back to the kind, and
+ * it did so while HOLDING the name: its three call sites each mapped their descriptors down to a bare
+ * `AuthMethod` before asking for a label, so the provider was discarded one line above the lookup that
+ * needed it. On Wonder Todos that rendered "External sign-in" for what every other surface calls
+ * "Continue with Google".
+ */
+export interface AuthMethodNamingSources {
+    /**
+     * The offered-method descriptor, when the surface has one. `identify` fills `config.displayName`
+     * with the enterprise connection's own name and `oauth2ProviderRefs` with the social providers the
+     * method stands for. Registration and invitation have no descriptor — they offer a method before
+     * anyone is identified — so they pass only `socialProviders`.
+     */
+    offeredMethod?: {
+        readonly config?: {
+            readonly displayName?: string;
+        } | undefined;
+        readonly oauth2ProviderRefs?: readonly string[] | undefined;
+    } | undefined;
+    /** The application's configured social providers, as the pre-identify section already resolves them. */
+    socialProviders?: readonly {
+        readonly providerRef: string;
+        readonly displayName?: string | undefined;
+        readonly displayNameLabelKey?: string | undefined;
+    }[] | undefined;
+}
+/**
+ * The provider name a federated method should be called by, or `undefined` when there is not exactly
+ * one to name.
+ *
+ * **Exactly one is the whole condition, and it is not conservatism.** `oauth2ProviderRefs` is a LIST:
+ * one `EXTERNAL_OAUTH2` entry can stand for Google AND GitHub, and one organization can publish
+ * several connections. Naming such a button after the first would tell the person they are signing in
+ * with a provider that may not be the one the button reaches — worse than the generic kind, because it
+ * is specific and wrong. Where several are offered, the kind is the honest word and the caller keeps
+ * its existing label.
+ *
+ * The social branch resolves through the SAME helper the provider buttons use, so a provider renamed
+ * in configuration is renamed in the chooser, and a raw `providerRef` ("google") can never reach a
+ * person as the brand name.
+ */
+export declare function resolveAuthMethodProviderName(method: AuthMethod, sources: AuthMethodNamingSources, resolveSocialProviderLabel: (provider: {
+    providerRef: string;
+    displayName?: string | undefined;
+    displayNameLabelKey?: string | undefined;
+}) => string): string | undefined;
+/**
+ * The words a chooser puts on one method's button: the provider's own name where exactly one is
+ * nameable, and the method's kind otherwise.
+ *
+ * Returned whole rather than as a name the caller interpolates, because the three choosers were
+ * already three copies of one decision — which is what `AUTH_METHOD_CHOICE_LABELS` exists to prevent —
+ * and a name plus a template is two things to copy instead of one.
+ */
+export declare function resolveAuthMethodChoiceLabel(method: AuthMethod, input: AuthMethodNamingSources & {
+    /** `t(UserAuthLabel.CONTINUE_WITH)` — the already-translated "Continue with {provider}" template. */
+    continueWithTemplate: string;
+    translateLabel: (label: UserAuthLabel) => string;
+    resolveSocialProviderLabel: (provider: {
+        providerRef: string;
+        displayName?: string | undefined;
+        displayNameLabelKey?: string | undefined;
+    }) => string;
+}): string;
+//# sourceMappingURL=auth-method-presentation.d.ts.map

package/dist/esm/components/auth/methods/auth-method-presentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-presentation.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/auth-method-presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAEtG;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAU3F,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAQ1F,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QACd,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAChE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;KAC7D,GAAG,SAAS,CAAC;IACd,wGAAwG;IACxG,eAAe,CAAC,EAAE,SAAS;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnD,EAAE,GAAG,SAAS,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,uBAAuB,EAChC,0BAA0B,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C,KAAK,MAAM,GACX,MAAM,GAAG,SAAS,CAuBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,uBAAuB,GAAG;IAC/B,qGAAqG;IACrG,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,MAAM,CAAC;IACjD,0BAA0B,EAAE,CAAC,QAAQ,EAAE;QACrC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC1C,KAAK,MAAM,CAAC;CACd,GACA,MAAM,CAQR"}

package/dist/esm/components/auth/methods/auth-method-presentation.js

@@ -0,0 +1,103 @@
+import { UserAuthLabel } from '@wildo-ai/presets-components-models';
+import { AuthMethod } from '@wildo-ai/saas-models';
+import { StandardIconReference } from '../../../core/icons/icon-registry.frontend.schemas.js';
+/**
+ * The glyph that identifies each authentication method wherever a person chooses or starts one —
+ * the sign-in, registration, invitation, second-factor and enrollment choosers, and the button that
+ * STARTS a method where it has one (passkey, magic link, organization SSO, the email and SMS
+ * send-code buttons). Password and authenticator-app codes are typed into a form whose submit button
+ * belongs to the form, not to the method, so those carry no glyph.
+ *
+ * TOTAL over `AuthMethod` on purpose: a method added to the enum is a compile error here, so no screen
+ * can offer a method without an icon. `KEY` and `FINGERPRINT` are the glyphs the Security settings panel
+ * uses for password and passkeys. That panel shows its phone factor with `MAIL`; the sign-in surfaces
+ * use `MESSAGE_CIRCLE` for SMS, because in the second-factor chooser it sits beside email codes.
+ *
+ * `MAGIC_LINK` and `EMAIL_OTP` share `MAIL`: both are delivered to the inbox, and they never appear in
+ * the same chooser (the first is first-factor only, the second is second-factor only). `SMS_OTP` and
+ * `TOTP` DO meet in the second-factor chooser, so they are kept apart — a message for the text, a
+ * handset for the authenticator app.
+ */
+export const AUTH_METHOD_ICON_REFERENCES = {
+    [AuthMethod.PASSWORD]: StandardIconReference.KEY,
+    [AuthMethod.PASSKEY]: StandardIconReference.FINGERPRINT,
+    [AuthMethod.MAGIC_LINK]: StandardIconReference.MAIL,
+    [AuthMethod.EMAIL_OTP]: StandardIconReference.MAIL,
+    [AuthMethod.SMS_OTP]: StandardIconReference.MESSAGE_CIRCLE,
+    [AuthMethod.TOTP]: StandardIconReference.SMARTPHONE,
+    [AuthMethod.ORG_SAML]: StandardIconReference.ORGANIZATION,
+    [AuthMethod.ORG_OPENID_CONNECT]: StandardIconReference.ORGANIZATION,
+    [AuthMethod.EXTERNAL_OAUTH2]: StandardIconReference.LINK,
+};
+/**
+ * The words that name a first-factor method on a chooser, in the `USER_AUTH` label namespace.
+ *
+ * One source for the sign-in, registration and invitation screens, which each carried their own copy
+ * of this map so a method would "read the same wherever it is chosen" — a promise three hand-kept
+ * copies could not keep. SAML and OIDC share the organization-SSO label. The second-factor chooser
+ * names methods in its own namespace (`MfaChallengeLabel`) and does not use this map.
+ */
+export const AUTH_METHOD_CHOICE_LABELS = {
+    [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,
+    [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,
+    [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,
+    [AuthMethod.SMS_OTP]: UserAuthLabel.METHOD_SMS_OTP,
+    [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,
+    [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,
+    [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,
+};
+/**
+ * The provider name a federated method should be called by, or `undefined` when there is not exactly
+ * one to name.
+ *
+ * **Exactly one is the whole condition, and it is not conservatism.** `oauth2ProviderRefs` is a LIST:
+ * one `EXTERNAL_OAUTH2` entry can stand for Google AND GitHub, and one organization can publish
+ * several connections. Naming such a button after the first would tell the person they are signing in
+ * with a provider that may not be the one the button reaches — worse than the generic kind, because it
+ * is specific and wrong. Where several are offered, the kind is the honest word and the caller keeps
+ * its existing label.
+ *
+ * The social branch resolves through the SAME helper the provider buttons use, so a provider renamed
+ * in configuration is renamed in the chooser, and a raw `providerRef` ("google") can never reach a
+ * person as the brand name.
+ */
+export function resolveAuthMethodProviderName(method, sources, resolveSocialProviderLabel) {
+    if (method === AuthMethod.ORG_SAML || method === AuthMethod.ORG_OPENID_CONNECT) {
+        const displayName = sources.offeredMethod?.config?.displayName?.trim();
+        return displayName ? displayName : undefined;
+    }
+    if (method !== AuthMethod.EXTERNAL_OAUTH2)
+        return undefined;
+    /*
+     * The descriptor's refs are authoritative when present — they are what `identify` says THIS method
+     * reaches. Registration and invitation have no descriptor, so they fall back to the application's
+     * configured providers, which is the same set their own provider buttons render.
+     */
+    const refs = sources.offeredMethod?.oauth2ProviderRefs;
+    const configured = sources.socialProviders ?? [];
+    const candidates = refs && refs.length > 0
+        ? configured.filter((provider) => refs.includes(provider.providerRef))
+        : configured;
+    // A ref the application does not declare cannot be named — resolving it would print the raw ref.
+    if (candidates.length !== 1)
+        return undefined;
+    const label = resolveSocialProviderLabel(candidates[0]).trim();
+    return label ? label : undefined;
+}
+/**
+ * The words a chooser puts on one method's button: the provider's own name where exactly one is
+ * nameable, and the method's kind otherwise.
+ *
+ * Returned whole rather than as a name the caller interpolates, because the three choosers were
+ * already three copies of one decision — which is what `AUTH_METHOD_CHOICE_LABELS` exists to prevent —
+ * and a name plus a template is two things to copy instead of one.
+ */
+export function resolveAuthMethodChoiceLabel(method, input) {
+    const providerName = resolveAuthMethodProviderName(method, input, input.resolveSocialProviderLabel);
+    if (providerName && input.continueWithTemplate.includes('{provider}')) {
+        return input.continueWithTemplate.replace('{provider}', providerName);
+    }
+    const labelKey = AUTH_METHOD_CHOICE_LABELS[method];
+    return labelKey ? input.translateLabel(labelKey) : method;
+}
+//# sourceMappingURL=auth-method-presentation.js.map

package/dist/esm/components/auth/methods/auth-method-presentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-method-presentation.js","sourceRoot":"","sources":["../../../../../../src/components/auth/methods/auth-method-presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+DAA+D,CAAC;AAEtG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwD;IAC9F,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,GAAG;IAChD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,WAAW;IACvD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC,IAAI;IACnD,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC,IAAI;IAClD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,cAAc;IAC1D,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,UAAU;IACnD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,YAAY;IACzD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,CAAC,YAAY;IACnE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAC,IAAI;CACzD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAyD;IAC7F,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,eAAe;IACpD,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,iBAAiB;IACxD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,cAAc;IAClD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,cAAc;IACnD,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,cAAc;IAC7D,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,sBAAsB;CACnE,CAAC;AAqCF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAkB,EAClB,OAAgC,EAChC,0BAIY;IAEZ,IAAI,MAAM,KAAK,UAAU,CAAC,QAAQ,IAAI,MAAM,KAAK,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACvE,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,KAAK,UAAU,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAE5D;;;;OAIG;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACxC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC,CAAC,UAAU,CAAC;IAEf,iGAAiG;IACjG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAkB,EAClB,KASC;IAED,MAAM,YAAY,GAAG,6BAA6B,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpG,IAAI,YAAY,IAAI,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC","sourcesContent":["import { UserAuthLabel } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { StandardIconReference } from '~wildo-frontend-lib/core/icons/icon-registry.frontend.schemas';\n\n/**\n * The glyph that identifies each authentication method wherever a person chooses or starts one —\n * the sign-in, registration, invitation, second-factor and enrollment choosers, and the button that\n * STARTS a method where it has one (passkey, magic link, organization SSO, the email and SMS\n * send-code buttons). Password and authenticator-app codes are typed into a form whose submit button\n * belongs to the form, not to the method, so those carry no glyph.\n *\n * TOTAL over `AuthMethod` on purpose: a method added to the enum is a compile error here, so no screen\n * can offer a method without an icon. `KEY` and `FINGERPRINT` are the glyphs the Security settings panel\n * uses for password and passkeys. That panel shows its phone factor with `MAIL`; the sign-in surfaces\n * use `MESSAGE_CIRCLE` for SMS, because in the second-factor chooser it sits beside email codes.\n *\n * `MAGIC_LINK` and `EMAIL_OTP` share `MAIL`: both are delivered to the inbox, and they never appear in\n * the same chooser (the first is first-factor only, the second is second-factor only). `SMS_OTP` and\n * `TOTP` DO meet in the second-factor chooser, so they are kept apart — a message for the text, a\n * handset for the authenticator app.\n */\nexport const AUTH_METHOD_ICON_REFERENCES: Readonly<Record<AuthMethod, StandardIconReference>> = {\n  [AuthMethod.PASSWORD]: StandardIconReference.KEY,\n  [AuthMethod.PASSKEY]: StandardIconReference.FINGERPRINT,\n  [AuthMethod.MAGIC_LINK]: StandardIconReference.MAIL,\n  [AuthMethod.EMAIL_OTP]: StandardIconReference.MAIL,\n  [AuthMethod.SMS_OTP]: StandardIconReference.MESSAGE_CIRCLE,\n  [AuthMethod.TOTP]: StandardIconReference.SMARTPHONE,\n  [AuthMethod.ORG_SAML]: StandardIconReference.ORGANIZATION,\n  [AuthMethod.ORG_OPENID_CONNECT]: StandardIconReference.ORGANIZATION,\n  [AuthMethod.EXTERNAL_OAUTH2]: StandardIconReference.LINK,\n};\n\n/**\n * The words that name a first-factor method on a chooser, in the `USER_AUTH` label namespace.\n *\n * One source for the sign-in, registration and invitation screens, which each carried their own copy\n * of this map so a method would \"read the same wherever it is chosen\" — a promise three hand-kept\n * copies could not keep. SAML and OIDC share the organization-SSO label. The second-factor chooser\n * names methods in its own namespace (`MfaChallengeLabel`) and does not use this map.\n */\nexport const AUTH_METHOD_CHOICE_LABELS: Readonly<Partial<Record<AuthMethod, UserAuthLabel>>> = {\n  [AuthMethod.PASSWORD]: UserAuthLabel.METHOD_PASSWORD,\n  [AuthMethod.MAGIC_LINK]: UserAuthLabel.METHOD_MAGIC_LINK,\n  [AuthMethod.PASSKEY]: UserAuthLabel.METHOD_PASSKEY,\n  [AuthMethod.SMS_OTP]: UserAuthLabel.METHOD_SMS_OTP,\n  [AuthMethod.ORG_SAML]: UserAuthLabel.METHOD_ORG_SSO,\n  [AuthMethod.ORG_OPENID_CONNECT]: UserAuthLabel.METHOD_ORG_SSO,\n  [AuthMethod.EXTERNAL_OAUTH2]: UserAuthLabel.METHOD_EXTERNAL_OAUTH2,\n};\n\n/**\n * What a federated method offers to be named BY — the connection or provider behind it.\n *\n * `AUTH_METHOD_CHOICE_LABELS` names a method by its KIND, which is right for password, passkey and\n * the emailed link: there is one of each and its kind is its name. It is wrong for the two federated\n * kinds, where the thing a person recognises is the PROVIDER — \"Google\", \"Okta\", \"Acme SSO\" — and the\n * kind is an implementation word they have no reason to know.\n *\n * Every other surface already knew this. The pre-identify section renders one button per provider\n * reading \"Continue with Google\"; the ACTIVE enterprise method renders `CONTINUE_WITH` filled from the\n * connection's own `displayName`. Only the \"other sign-in methods\" chooser fell back to the kind, and\n * it did so while HOLDING the name: its three call sites each mapped their descriptors down to a bare\n * `AuthMethod` before asking for a label, so the provider was discarded one line above the lookup that\n * needed it. On Wonder Todos that rendered \"External sign-in\" for what every other surface calls\n * \"Continue with Google\".\n */\nexport interface AuthMethodNamingSources {\n  /**\n   * The offered-method descriptor, when the surface has one. `identify` fills `config.displayName`\n   * with the enterprise connection's own name and `oauth2ProviderRefs` with the social providers the\n   * method stands for. Registration and invitation have no descriptor — they offer a method before\n   * anyone is identified — so they pass only `socialProviders`.\n   */\n  offeredMethod?: {\n    readonly config?: { readonly displayName?: string } | undefined;\n    readonly oauth2ProviderRefs?: readonly string[] | undefined;\n  } | undefined;\n  /** The application's configured social providers, as the pre-identify section already resolves them. */\n  socialProviders?: readonly {\n    readonly providerRef: string;\n    readonly displayName?: string | undefined;\n    readonly displayNameLabelKey?: string | undefined;\n  }[] | undefined;\n}\n\n/**\n * The provider name a federated method should be called by, or `undefined` when there is not exactly\n * one to name.\n *\n * **Exactly one is the whole condition, and it is not conservatism.** `oauth2ProviderRefs` is a LIST:\n * one `EXTERNAL_OAUTH2` entry can stand for Google AND GitHub, and one organization can publish\n * several connections. Naming such a button after the first would tell the person they are signing in\n * with a provider that may not be the one the button reaches — worse than the generic kind, because it\n * is specific and wrong. Where several are offered, the kind is the honest word and the caller keeps\n * its existing label.\n *\n * The social branch resolves through the SAME helper the provider buttons use, so a provider renamed\n * in configuration is renamed in the chooser, and a raw `providerRef` (\"google\") can never reach a\n * person as the brand name.\n */\nexport function resolveAuthMethodProviderName(\n  method: AuthMethod,\n  sources: AuthMethodNamingSources,\n  resolveSocialProviderLabel: (provider: {\n    providerRef: string;\n    displayName?: string | undefined;\n    displayNameLabelKey?: string | undefined;\n  }) => string,\n): string | undefined {\n  if (method === AuthMethod.ORG_SAML || method === AuthMethod.ORG_OPENID_CONNECT) {\n    const displayName = sources.offeredMethod?.config?.displayName?.trim();\n    return displayName ? displayName : undefined;\n  }\n\n  if (method !== AuthMethod.EXTERNAL_OAUTH2) return undefined;\n\n  /*\n   * The descriptor's refs are authoritative when present — they are what `identify` says THIS method\n   * reaches. Registration and invitation have no descriptor, so they fall back to the application's\n   * configured providers, which is the same set their own provider buttons render.\n   */\n  const refs = sources.offeredMethod?.oauth2ProviderRefs;\n  const configured = sources.socialProviders ?? [];\n  const candidates = refs && refs.length > 0\n    ? configured.filter((provider) => refs.includes(provider.providerRef))\n    : configured;\n\n  // A ref the application does not declare cannot be named — resolving it would print the raw ref.\n  if (candidates.length !== 1) return undefined;\n  const label = resolveSocialProviderLabel(candidates[0]!).trim();\n  return label ? label : undefined;\n}\n\n/**\n * The words a chooser puts on one method's button: the provider's own name where exactly one is\n * nameable, and the method's kind otherwise.\n *\n * Returned whole rather than as a name the caller interpolates, because the three choosers were\n * already three copies of one decision — which is what `AUTH_METHOD_CHOICE_LABELS` exists to prevent —\n * and a name plus a template is two things to copy instead of one.\n */\nexport function resolveAuthMethodChoiceLabel(\n  method: AuthMethod,\n  input: AuthMethodNamingSources & {\n    /** `t(UserAuthLabel.CONTINUE_WITH)` — the already-translated \"Continue with {provider}\" template. */\n    continueWithTemplate: string;\n    translateLabel: (label: UserAuthLabel) => string;\n    resolveSocialProviderLabel: (provider: {\n      providerRef: string;\n      displayName?: string | undefined;\n      displayNameLabelKey?: string | undefined;\n    }) => string;\n  },\n): string {\n  const providerName = resolveAuthMethodProviderName(method, input, input.resolveSocialProviderLabel);\n  if (providerName && input.continueWithTemplate.includes('{provider}')) {\n    return input.continueWithTemplate.replace('{provider}', providerName);\n  }\n\n  const labelKey = AUTH_METHOD_CHOICE_LABELS[method];\n  return labelKey ? input.translateLabel(labelKey) : method;\n}\n"]}

package/dist/esm/components/auth/pages/AuthPage_AuthCallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAYzC,CAAC"}
+{"version":3,"file":"AuthPage_AuthCallback.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAYzC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_AuthCallback.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_AuthCallback.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAE/D,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,IAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,GAAI,GAClE,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_AuthCallback } from '~wildo-frontend-lib/components/auth/Auth_AuthCallback';\n\n/**\n * AuthPage_AuthCallback\n *\n * Handles the OAuth2 callback redirect from the backend.\n * Flow: IdP -> Backend callback -> redirect to /auth/callback?code=xxx -> this page\n *\n * Thin page wrapper: extracts query params and delegates to Auth_AuthCallback\n * (injectable preset component with i18n).\n *\n * Browser-only flow (OAuth2 + SAML POST-binding callbacks). The framework\n * targets web stacks exclusively, so there is no native deep-link variant\n * for this callback entry point.\n */\nexport const AuthPage_AuthCallback: React.FC = () => {\n  const [searchParams] = useSearchParams();\n\n  const code = searchParams.get('code');\n  const errorParam = searchParams.get('error');\n  const errorDescription = searchParams.get('error_description');\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_AuthCallback code={code} errorParam={errorParam} errorDescription={errorDescription} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_AuthCallback.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_AuthCallback.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAE/D,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,IAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,GAAI,GAClE,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_AuthCallback } from '~wildo-frontend-lib/components/auth/Auth_AuthCallback';\n\n/**\n * AuthPage_AuthCallback\n *\n * Handles the OAuth2 callback redirect from the backend.\n * Flow: IdP -> Backend callback -> redirect to /auth/callback?code=xxx -> this page\n *\n * Thin page wrapper: extracts query params and delegates to Auth_AuthCallback\n * (injectable preset component with i18n).\n *\n * Browser-only flow (OAuth2 + SAML POST-binding callbacks). The framework\n * targets web stacks exclusively, so there is no native deep-link variant\n * for this callback entry point.\n */\nexport const AuthPage_AuthCallback: React.FC = () => {\n  const [searchParams] = useSearchParams();\n\n  const code = searchParams.get('code');\n  const errorParam = searchParams.get('error');\n  const errorDescription = searchParams.get('error_description');\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_AuthCallback code={code} errorParam={errorParam} errorDescription={errorDescription} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_AuthExchange.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_AuthExchange.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_AuthExchange.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAezC,CAAC"}
+{"version":3,"file":"AuthPage_AuthExchange.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_AuthExchange.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAezC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_AuthExchange.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_AuthExchange.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_AuthExchange.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAE5F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAElE,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,kBAAkB,IACjB,KAAK,EAAE,IAAI,EACX,IAAI,EAAC,wBAAwB,EAC7B,iBAAiB,EAAE,iBAAiB,GACpC,GACyB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OneOffSession } from '~wildo-frontend-lib/components/auth/Auth_OneOffSession';\n\n/**\n * AuthPage_AuthExchange (cross-app-jwt-propagation.md Step 5).\n *\n * Receiver page for cross-frontend handoff URLs of the shape\n * `<targetPublicUrl>/auth/exchange?code=<token>&return=<encodedReturnPath>`.\n * Mounted at `CommonRoutePaths.authExchange` (`/auth/exchange`) on every\n * frontend that participates in cross-frontend handoffs. Browser-only —\n * the framework targets web stacks exclusively, so there is no native\n * shell variant.\n *\n * Thin page wrapper: extracts the `code` and `return` query params and\n * delegates to `Auth_OneOffSession` in `mode='cross-frontend-handoff'`.\n * That component dual-dispatches to `handleAuthCodeExchange(code)` (which\n * hits `POST /auth/token/exchange` — the same exchange endpoint the OAuth2\n * callback already uses, since the cross-frontend-handoff issuer mints\n * AUTH_CODE_EXCHANGE tokens), then navigates to `returnPath` (preferred from\n * `auth.crossFrontendHandoffContext.returnPath` populated by the exchange\n * response, or the URL `return` query as defense-in-depth fallback).\n *\n * Why share `Auth_OneOffSession` rather than introduce a new component:\n *   - K-6 in cross-app-jwt-propagation.md pinned the dual-dispatch design:\n *     ONE landing component, mode-prop drives the receiving endpoint and\n *     the URL-resolution strategy. Avoids duplicating the loading / error /\n *     i18n shell.\n *   - The W7.3b ephemeral-storage guard in `Auth_OneOffSession` is mode-\n *     aware: cross-frontend-handoff mode skips it, since K-7 says the\n *     receiver's storage adapter (NOT the protocol) determines lifetime —\n *     the SaaS app's persistent storage is the correct landing for a\n *     handoff session-transfer.\n *\n * SSR safety: `useSearchParams` requires a `<BrowserRouter>` (or memory\n * router) ancestor; this page is mounted inside `AppRouter.tsx` which\n * provides one, so there's no Node-evaluation concern (unlike the\n * `AuthExchangePage` in `saas-technical-doc` which guards against\n * Docusaurus's static build pre-render).\n */\nexport const AuthPage_AuthExchange: React.FC = () => {\n  const [searchParams] = useSearchParams();\n\n  const code = searchParams.get('code') ?? undefined;\n  const returnPathFromUrl = searchParams.get('return') ?? undefined;\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OneOffSession\n        token={code}\n        mode=\"cross-frontend-handoff\"\n        returnPathFromUrl={returnPathFromUrl}\n      />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_AuthExchange.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_AuthExchange.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAE5F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAElE,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,kBAAkB,IACjB,KAAK,EAAE,IAAI,EACX,IAAI,EAAC,wBAAwB,EAC7B,iBAAiB,EAAE,iBAAiB,GACpC,GACyB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OneOffSession } from '~wildo-frontend-lib/components/auth/Auth_OneOffSession';\n\n/**\n * AuthPage_AuthExchange (cross-app-jwt-propagation.md Step 5).\n *\n * Receiver page for cross-frontend handoff URLs of the shape\n * `<targetPublicUrl>/auth/exchange?code=<token>&return=<encodedReturnPath>`.\n * Mounted at `CommonRoutePaths.authExchange` (`/auth/exchange`) on every\n * frontend that participates in cross-frontend handoffs. Browser-only —\n * the framework targets web stacks exclusively, so there is no native\n * shell variant.\n *\n * Thin page wrapper: extracts the `code` and `return` query params and\n * delegates to `Auth_OneOffSession` in `mode='cross-frontend-handoff'`.\n * That component dual-dispatches to `handleAuthCodeExchange(code)` (which\n * hits `POST /auth/token/exchange` — the same exchange endpoint the OAuth2\n * callback already uses, since the cross-frontend-handoff issuer mints\n * AUTH_CODE_EXCHANGE tokens), then navigates to `returnPath` (preferred from\n * `auth.crossFrontendHandoffContext.returnPath` populated by the exchange\n * response, or the URL `return` query as defense-in-depth fallback).\n *\n * Why share `Auth_OneOffSession` rather than introduce a new component:\n *   - K-6 in cross-app-jwt-propagation.md pinned the dual-dispatch design:\n *     ONE landing component, mode-prop drives the receiving endpoint and\n *     the URL-resolution strategy. Avoids duplicating the loading / error /\n *     i18n shell.\n *   - The W7.3b ephemeral-storage guard in `Auth_OneOffSession` is mode-\n *     aware: cross-frontend-handoff mode skips it, since K-7 says the\n *     receiver's storage adapter (NOT the protocol) determines lifetime —\n *     the SaaS app's persistent storage is the correct landing for a\n *     handoff session-transfer.\n *\n * SSR safety: `useSearchParams` requires a `<BrowserRouter>` (or memory\n * router) ancestor; this page is mounted inside `AppRouter.tsx` which\n * provides one, so there's no Node-evaluation concern (unlike the\n * `AuthExchangePage` in `saas-technical-doc` which guards against\n * Docusaurus's static build pre-render).\n */\nexport const AuthPage_AuthExchange: React.FC = () => {\n  const [searchParams] = useSearchParams();\n\n  const code = searchParams.get('code') ?? undefined;\n  const returnPathFromUrl = searchParams.get('return') ?? undefined;\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OneOffSession\n        token={code}\n        mode=\"cross-frontend-handoff\"\n        returnPathFromUrl={returnPathFromUrl}\n      />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_ConfirmEmail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_ConfirmEmail.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_ConfirmEmail.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAkBzC,CAAC"}
+{"version":3,"file":"AuthPage_ConfirmEmail.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_ConfirmEmail.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAkBzC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_ConfirmEmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_ConfirmEmail.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_ConfirmEmail.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAErD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,IAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAI,GACtB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_ConfirmEmail } from '~wildo-frontend-lib/components/auth/Auth_ConfirmEmail';\n\nexport const AuthPage_ConfirmEmail: React.FC = () => {\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get('token') || undefined;\n  const email = searchParams.get('email') || undefined;\n\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => { document.head.removeChild(meta); };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_ConfirmEmail token={token} email={email} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_ConfirmEmail.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_ConfirmEmail.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAErD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,IAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAI,GACtB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_ConfirmEmail } from '~wildo-frontend-lib/components/auth/Auth_ConfirmEmail';\n\nexport const AuthPage_ConfirmEmail: React.FC = () => {\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get('token') || undefined;\n  const email = searchParams.get('email') || undefined;\n\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => { document.head.removeChild(meta); };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_ConfirmEmail token={token} email={email} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_EnrollmentRequired.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_EnrollmentRequired.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_EnrollmentRequired.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,EAM/C,CAAC"}
+{"version":3,"file":"AuthPage_EnrollmentRequired.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_EnrollmentRequired.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,EAM/C,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_EnrollmentRequired.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_EnrollmentRequired.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_EnrollmentRequired.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAEtG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAa,GAAG,EAAE;IACxD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,uBAAuB,KAAG,GACA,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_EnrollmentRequired } from '~wildo-frontend-lib/components/auth/Auth_EnrollmentRequired';\n\n/**\n * AuthPage_EnrollmentRequired\n *\n * Displayed when the user's organization requires MFA but the user has\n * not enrolled any second-factor method yet.\n *\n * Thin page wrapper: delegates to Auth_EnrollmentRequired\n * (injectable preset component with i18n).\n */\nexport const AuthPage_EnrollmentRequired: React.FC = () => {\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_EnrollmentRequired />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_EnrollmentRequired.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_EnrollmentRequired.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAEtG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAa,GAAG,EAAE;IACxD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,uBAAuB,KAAG,GACA,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_EnrollmentRequired } from '~wildo-frontend-lib/components/auth/Auth_EnrollmentRequired';\n\n/**\n * AuthPage_EnrollmentRequired\n *\n * Displayed when the user's organization requires MFA but the user has\n * not enrolled any second-factor method yet.\n *\n * Thin page wrapper: delegates to Auth_EnrollmentRequired\n * (injectable preset component with i18n).\n */\nexport const AuthPage_EnrollmentRequired: React.FC = () => {\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_EnrollmentRequired />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_Invitation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_Invitation.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_Invitation.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAkBvC,CAAC"}
+{"version":3,"file":"AuthPage_Invitation.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_Invitation.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAkBvC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_Invitation.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_Invitation.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_Invitation.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAEtF,MAAM,CAAC,MAAM,mBAAmB,GAAa,GAAG,EAAE;IAChD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAErD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,eAAe,IAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAI,GACpB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_Invitation } from '~wildo-frontend-lib/components/auth/Auth_Invitation';\n\nexport const AuthPage_Invitation: React.FC = () => {\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get('token') || undefined;\n  const email = searchParams.get('email') || undefined;\n\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => { document.head.removeChild(meta); };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_Invitation token={token} email={email} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_Invitation.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_Invitation.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAEtF,MAAM,CAAC,MAAM,mBAAmB,GAAa,GAAG,EAAE;IAChD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAErD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,eAAe,IAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAI,GACpB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_Invitation } from '~wildo-frontend-lib/components/auth/Auth_Invitation';\n\nexport const AuthPage_Invitation: React.FC = () => {\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get('token') || undefined;\n  const email = searchParams.get('email') || undefined;\n\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => { document.head.removeChild(meta); };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_Invitation token={token} email={email} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_MagicLinkVerify.d.ts

@@ -3,10 +3,11 @@ import React from 'react';
  * AuthPage_MagicLinkVerify
  *
  * Handles the magic link verification redirect from the email.
- * Flow: Email link -> /auth/magic-link/verify?token=xxx&email=yyy -> this page
+ * Flow: Email link -> /auth/magic-link/verify?token=xxx&email=yyy[&redirect=/path] -> this page
  *
  * Thin page wrapper: extracts query params, injects no-referrer meta,
  * and delegates to Auth_MagicLinkVerify (injectable preset component with i18n).
+ * `redirect` is passed raw; the component owns the same-origin check, since it is the public contract.
  */
 export declare const AuthPage_MagicLinkVerify: React.FC;
 //# sourceMappingURL=AuthPage_MagicLinkVerify.d.ts.map

package/dist/esm/components/auth/pages/AuthPage_MagicLinkVerify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_MagicLinkVerify.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_MagicLinkVerify.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAkB5C,CAAC"}
+{"version":3,"file":"AuthPage_MagicLinkVerify.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_MagicLinkVerify.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAmB5C,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_MagicLinkVerify.js

@@ -7,15 +7,17 @@ import { Auth_MagicLinkVerify } from '../../../components/auth/Auth_MagicLinkVer
  * AuthPage_MagicLinkVerify
  *
  * Handles the magic link verification redirect from the email.
- * Flow: Email link -> /auth/magic-link/verify?token=xxx&email=yyy -> this page
+ * Flow: Email link -> /auth/magic-link/verify?token=xxx&email=yyy[&redirect=/path] -> this page
  *
  * Thin page wrapper: extracts query params, injects no-referrer meta,
  * and delegates to Auth_MagicLinkVerify (injectable preset component with i18n).
+ * `redirect` is passed raw; the component owns the same-origin check, since it is the public contract.
  */
 export const AuthPage_MagicLinkVerify = () => {
     const [searchParams] = useSearchParams();
     const token = searchParams.get('token');
     const email = searchParams.get('email');
+    const redirect = searchParams.get('redirect');
     React.useEffect(() => {
         const meta = document.createElement('meta');
         meta.name = 'referrer';
@@ -23,6 +25,6 @@ export const AuthPage_MagicLinkVerify = () => {
         document.head.appendChild(meta);
         return () => { document.head.removeChild(meta); };
     }, []);
-    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, children: _jsx(Auth_MagicLinkVerify, { token: token, email: email }) }));
+    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, children: _jsx(Auth_MagicLinkVerify, { token: token, email: email, redirect: redirect }) }));
 };
 //# sourceMappingURL=AuthPage_MagicLinkVerify.js.map

package/dist/esm/components/auth/pages/AuthPage_MagicLinkVerify.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_MagicLinkVerify.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_MagicLinkVerify.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAEhG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAa,GAAG,EAAE;IACrD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAExC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,oBAAoB,IAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAI,GACzB,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_MagicLinkVerify } from '~wildo-frontend-lib/components/auth/Auth_MagicLinkVerify';\n\n/**\n * AuthPage_MagicLinkVerify\n *\n * Handles the magic link verification redirect from the email.\n * Flow: Email link -> /auth/magic-link/verify?token=xxx&email=yyy -> this page\n *\n * Thin page wrapper: extracts query params, injects no-referrer meta,\n * and delegates to Auth_MagicLinkVerify (injectable preset component with i18n).\n */\nexport const AuthPage_MagicLinkVerify: React.FC = () => {\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get('token');\n  const email = searchParams.get('email');\n\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => { document.head.removeChild(meta); };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_MagicLinkVerify token={token} email={email} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_MagicLinkVerify.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_MagicLinkVerify.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAEhG;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAa,GAAG,EAAE;IACrD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE9C,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,oBAAoB,IAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,GAAI,GAC7C,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_MagicLinkVerify } from '~wildo-frontend-lib/components/auth/Auth_MagicLinkVerify';\n\n/**\n * AuthPage_MagicLinkVerify\n *\n * Handles the magic link verification redirect from the email.\n * Flow: Email link -> /auth/magic-link/verify?token=xxx&email=yyy[&redirect=/path] -> this page\n *\n * Thin page wrapper: extracts query params, injects no-referrer meta,\n * and delegates to Auth_MagicLinkVerify (injectable preset component with i18n).\n * `redirect` is passed raw; the component owns the same-origin check, since it is the public contract.\n */\nexport const AuthPage_MagicLinkVerify: React.FC = () => {\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get('token');\n  const email = searchParams.get('email');\n  const redirect = searchParams.get('redirect');\n\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => { document.head.removeChild(meta); };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_MagicLinkVerify token={token} email={email} redirect={redirect} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_Main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_Main.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_Main.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAU1B,UAAU,kBAAkB;CAE3B;AAMD,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CA0CtD,CAAC"}
+{"version":3,"file":"AuthPage_Main.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_Main.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAW1B,UAAU,kBAAkB;CAE3B;AAMD,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,CA4CtD,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_Main.js

@@ -1,4 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { useAuthSession } from '../../../core/security/useAuthSession.js';
 import { FrontendComponentType } from '@wildo-ai/presets-components-models';
 import { PublicLayout_MainContainer } from '../../../components/app/PublicLayout_MainContainer.js';
 import { Auth_Main } from '../../../components/auth/Auth_Main.js';
@@ -9,6 +10,7 @@ const logger = LoggerFrontendService.getLogger();
 const logDebug = logger.debugByType('AuthPage_Main');
 logger.setDebugTypeLogging('AuthPage_Main', false);
 export const AuthPage_Main = () => {
+    const { auth } = useAuthSession();
     // Coordinate the sign-in reveal so it appears in ONE shot instead of
     // cascading (spinner → card+labels → form ~300ms later → "flip").
     //
@@ -39,6 +41,6 @@ export const AuthPage_Main = () => {
         return (_jsx("div", { className: "flex min-h-screen w-screen items-center justify-center bg-background", children: _jsx(LoadingSpinner, { size: 48 }) }));
     }
     // Render the required layout composition using the resources registry context
-    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, children: _jsx(Auth_Main, {}) }));
+    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, organizationBranding: auth.identification?.organizationBranding, children: _jsx(Auth_Main, {}) }));
 };
 //# sourceMappingURL=AuthPage_Main.js.map

package/dist/esm/components/auth/pages/AuthPage_Main.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_Main.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_Main.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAOpG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;AACrD,MAAM,CAAC,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,aAAa,GAAiC,GAAG,EAAE;IAC9D,qEAAqE;IACrE,kEAAkE;IAClE,EAAE;IACF,uEAAuE;IACvE,mEAAmE;IACnE,iFAAiF;IACjF,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,iCAAiC;IACjC,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,yCAAyC;IACzC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC1B,SAAS,EAAE;YACT,qBAAqB,CAAC,wBAAwB;YAC9C,qBAAqB,CAAC,sBAAsB;SAC7C;QACD,IAAI,EAAE,CAAC,mBAAmB,CAAC;KAC5B,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CACL,cAAK,SAAS,EAAC,sEAAsE,YACnF,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,GACxB,CACP,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,SAAS,KAAE,GACe,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\n\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_Main } from '~wildo-frontend-lib/components/auth/Auth_Main';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\n\ninterface AuthPage_MainProps {\n\n}\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('AuthPage_Main');\nlogger.setDebugTypeLogging('AuthPage_Main', false);\n\nexport const AuthPage_Main: React.FC<AuthPage_MainProps> = () => {\n  // Coordinate the sign-in reveal so it appears in ONE shot instead of\n  // cascading (spinner → card+labels → form ~300ms later → \"flip\").\n  //\n  // Why it cascaded: the sign-in tree is a stack of components that each\n  // `return null` until THEIR own i18n bundle resolves — `Auth_Main`\n  // (PUBLIC_LAYOUTS_USER_AUTH), the form / submit button (LOW_LEVEL_FORM_MESSAGE),\n  // the field (errors_validation). Because a parent returning `null` never\n  // mounts its children, each bundle was only requested once the parent's\n  // bundle had landed → the labels loaded in serial waves, and every component\n  // popped in as its wave arrived.\n  //\n  // Fix: request ALL of those bundles HERE, in a single `useI18n` call. They\n  // coalesce into one micro-batched fetch and resolve together, so by the time\n  // we mount the card + `Auth_Main`, every nested gate already has its labels\n  // and renders immediately — atomic reveal, no waterfall. Until then we show\n  // the SAME minimal centered spinner as every other app loading state (no card\n  // chrome). The \"already authenticated → redirect\" path is unaffected: that\n  // check runs earlier inside `Auth_Main`.\n  const { isReady } = useI18n({\n    component: [\n      FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n      FrontendComponentType.LOW_LEVEL_FORM_MESSAGE,\n    ],\n    keys: ['errors_validation'],\n  });\n  logDebug(`Render ready=${isReady}`);\n\n  if (!isReady) {\n    return (\n      <div className=\"flex min-h-screen w-screen items-center justify-center bg-background\">\n        <LoadingSpinner size={48} />\n      </div>\n    );\n  }\n\n  // Render the required layout composition using the resources registry context\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_Main/>\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_Main.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_Main.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAElF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAOpG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;AACrD,MAAM,CAAC,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,aAAa,GAAiC,GAAG,EAAE;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IAElC,qEAAqE;IACrE,kEAAkE;IAClE,EAAE;IACF,uEAAuE;IACvE,mEAAmE;IACnE,iFAAiF;IACjF,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,iCAAiC;IACjC,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,yCAAyC;IACzC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC1B,SAAS,EAAE;YACT,qBAAqB,CAAC,wBAAwB;YAC9C,qBAAqB,CAAC,sBAAsB;SAC7C;QACD,IAAI,EAAE,CAAC,mBAAmB,CAAC;KAC5B,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CACL,cAAK,SAAS,EAAC,sEAAsE,YACnF,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,GACxB,CACP,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,cAAc,EAAE,oBAAoB,YAC9G,KAAC,SAAS,KAAE,GACe,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\n\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_Main } from '~wildo-frontend-lib/components/auth/Auth_Main';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\n\ninterface AuthPage_MainProps {\n\n}\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('AuthPage_Main');\nlogger.setDebugTypeLogging('AuthPage_Main', false);\n\nexport const AuthPage_Main: React.FC<AuthPage_MainProps> = () => {\n  const { auth } = useAuthSession();\n\n  // Coordinate the sign-in reveal so it appears in ONE shot instead of\n  // cascading (spinner → card+labels → form ~300ms later → \"flip\").\n  //\n  // Why it cascaded: the sign-in tree is a stack of components that each\n  // `return null` until THEIR own i18n bundle resolves — `Auth_Main`\n  // (PUBLIC_LAYOUTS_USER_AUTH), the form / submit button (LOW_LEVEL_FORM_MESSAGE),\n  // the field (errors_validation). Because a parent returning `null` never\n  // mounts its children, each bundle was only requested once the parent's\n  // bundle had landed → the labels loaded in serial waves, and every component\n  // popped in as its wave arrived.\n  //\n  // Fix: request ALL of those bundles HERE, in a single `useI18n` call. They\n  // coalesce into one micro-batched fetch and resolve together, so by the time\n  // we mount the card + `Auth_Main`, every nested gate already has its labels\n  // and renders immediately — atomic reveal, no waterfall. Until then we show\n  // the SAME minimal centered spinner as every other app loading state (no card\n  // chrome). The \"already authenticated → redirect\" path is unaffected: that\n  // check runs earlier inside `Auth_Main`.\n  const { isReady } = useI18n({\n    component: [\n      FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n      FrontendComponentType.LOW_LEVEL_FORM_MESSAGE,\n    ],\n    keys: ['errors_validation'],\n  });\n  logDebug(`Render ready=${isReady}`);\n\n  if (!isReady) {\n    return (\n      <div className=\"flex min-h-screen w-screen items-center justify-center bg-background\">\n        <LoadingSpinner size={48} />\n      </div>\n    );\n  }\n\n  // Render the required layout composition using the resources registry context\n  return (\n    <PublicLayout_MainContainer useCardLayout={true} organizationBranding={auth.identification?.organizationBranding}>\n      <Auth_Main/>\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_MfaChallenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_MfaChallenge.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_MfaChallenge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAWzC,CAAC"}
+{"version":3,"file":"AuthPage_MfaChallenge.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_MfaChallenge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAWzC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_MfaChallenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_MfaChallenge.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_MfaChallenge.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAErD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,IAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,GAAI,GAC5C,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_MfaChallenge } from '~wildo-frontend-lib/components/auth/Auth_MfaChallenge';\n\n/**\n * AuthPage_MfaChallenge\n *\n * Generic MFA challenge page at /auth/mfa.\n * Accepts `sessionId` and `email` query params.\n *\n * Thin page wrapper: extracts query params and delegates to Auth_MfaChallenge\n * (injectable preset component with i18n).\n */\nexport const AuthPage_MfaChallenge: React.FC = () => {\n  const [searchParams] = useSearchParams();\n\n  const sessionId = searchParams.get('sessionId');\n  const sessionEmail = searchParams.get('email') || '';\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_MfaChallenge sessionId={sessionId} sessionEmail={sessionEmail} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_MfaChallenge.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_MfaChallenge.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IAEzC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAErD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,IAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,GAAI,GAC5C,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useSearchParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_MfaChallenge } from '~wildo-frontend-lib/components/auth/Auth_MfaChallenge';\n\n/**\n * AuthPage_MfaChallenge\n *\n * Generic MFA challenge page at /auth/mfa.\n * Accepts `sessionId` and `email` query params.\n *\n * Thin page wrapper: extracts query params and delegates to Auth_MfaChallenge\n * (injectable preset component with i18n).\n */\nexport const AuthPage_MfaChallenge: React.FC = () => {\n  const [searchParams] = useSearchParams();\n\n  const sessionId = searchParams.get('sessionId');\n  const sessionEmail = searchParams.get('email') || '';\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_MfaChallenge sessionId={sessionId} sessionEmail={sessionEmail} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_OAuthConsent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OAuthConsent.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OAuthConsent.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAgBzC,CAAC"}
+{"version":3,"file":"AuthPage_OAuthConsent.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OAuthConsent.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAgBzC,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_OAuthConsent.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OAuthConsent.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OAuthConsent.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE;YACV,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,KAAG,GACM,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OAuthConsent } from '~wildo-frontend-lib/components/auth/Auth_OAuthConsent';\n\n/**\n * `/oauth/consent` — the routed wrapper for the OIDC interactive-consent screen (S1). A public route\n * (the body self-redirects to login when unauthenticated), rendered in the centered public card. The\n * body ({@link Auth_OAuthConsent}) owns the whole flow (read authorize params → `GET /oauth/authorize`\n * → render client/scopes/resource → approve/deny → navigate to the returned `redirect_to`).\n *\n * `referrer: no-referrer` (like the other auth pages) keeps the authorize query — which carries the\n * client's `redirect_uri` and PKCE challenge — out of the `Referer` header on any outbound navigation.\n */\nexport const AuthPage_OAuthConsent: React.FC = () => {\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => {\n      document.head.removeChild(meta);\n    };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OAuthConsent />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_OAuthConsent.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OAuthConsent.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAE1F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa,GAAG,EAAE;IAClD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE;YACV,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,iBAAiB,KAAG,GACM,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OAuthConsent } from '~wildo-frontend-lib/components/auth/Auth_OAuthConsent';\n\n/**\n * `/oauth/consent` — the routed wrapper for the OIDC interactive-consent screen (S1). A public route\n * (the body self-redirects to login when unauthenticated), rendered in the centered public card. The\n * body ({@link Auth_OAuthConsent}) owns the whole flow (read authorize params → `GET /oauth/authorize`\n * → render client/scopes/resource → approve/deny → navigate to the returned `redirect_to`).\n *\n * `referrer: no-referrer` (like the other auth pages) keeps the authorize query — which carries the\n * client's `redirect_uri` and PKCE challenge — out of the `Referer` header on any outbound navigation.\n */\nexport const AuthPage_OAuthConsent: React.FC = () => {\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => {\n      document.head.removeChild(meta);\n    };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OAuthConsent />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_OAuthLoggedOut.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OAuthLoggedOut.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OAuthLoggedOut.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAM3C,CAAC"}
+{"version":3,"file":"AuthPage_OAuthLoggedOut.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OAuthLoggedOut.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAM3C,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_OAuthLoggedOut.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OAuthLoggedOut.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OAuthLoggedOut.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAE9F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,mBAAmB,KAAG,GACI,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OAuthLoggedOut } from '~wildo-frontend-lib/components/auth/Auth_OAuthLoggedOut';\n\n/**\n * `/oauth/logged-out` — the routed wrapper for the OIDC RP-Initiated Logout landing screen (§5). A public\n * route, rendered in the centered public card. Where `GET /oauth/end-session` sends the browser after it\n * terminates the End-User's OP session when the request carried no valid `post_logout_redirect_uri`. The\n * body ({@link Auth_OAuthLoggedOut}) is purely informational — the session was already ended server-side\n * before the browser arrived, so there is no query to carry and no `no-referrer` concern.\n */\nexport const AuthPage_OAuthLoggedOut: React.FC = () => {\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OAuthLoggedOut />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_OAuthLoggedOut.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OAuthLoggedOut.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAE9F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,mBAAmB,KAAG,GACI,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OAuthLoggedOut } from '~wildo-frontend-lib/components/auth/Auth_OAuthLoggedOut';\n\n/**\n * `/oauth/logged-out` — the routed wrapper for the OIDC RP-Initiated Logout landing screen (§5). A public\n * route, rendered in the centered public card. Where `GET /oauth/end-session` sends the browser after it\n * terminates the End-User's OP session when the request carried no valid `post_logout_redirect_uri`. The\n * body ({@link Auth_OAuthLoggedOut}) is purely informational — the session was already ended server-side\n * before the browser arrived, so there is no query to carry and no `no-referrer` concern.\n */\nexport const AuthPage_OAuthLoggedOut: React.FC = () => {\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OAuthLoggedOut />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_OAuthLogoutConfirm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OAuthLogoutConfirm.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OAuthLogoutConfirm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,EAgB/C,CAAC"}
+{"version":3,"file":"AuthPage_OAuthLogoutConfirm.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OAuthLogoutConfirm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,EAgB/C,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_OAuthLogoutConfirm.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OAuthLogoutConfirm.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OAuthLogoutConfirm.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAEtG;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAa,GAAG,EAAE;IACxD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE;YACV,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,uBAAuB,KAAG,GACA,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OAuthLogoutConfirm } from '~wildo-frontend-lib/components/auth/Auth_OAuthLogoutConfirm';\n\n/**\n * `/oauth/logout-confirm` — the routed wrapper for the OIDC RP-Initiated Logout §6 confirmation prompt. A\n * public route (token-driven, never gates on a Bearer), rendered in the centered public card. Where\n * `GET /oauth/end-session` sends the browser for a NON-trusted logout so the End-User can confirm before\n * the session is terminated; the body ({@link Auth_OAuthLogoutConfirm}) POSTs the single-use token to\n * `POST /oauth/end-session/confirm` on confirm, then lands on `/oauth/logged-out`.\n *\n * `referrer: no-referrer` (like `/oauth/consent`) keeps the single-use confirmation `token` — which is\n * carried in this page's query string — out of the `Referer` header on any outbound navigation.\n */\nexport const AuthPage_OAuthLogoutConfirm: React.FC = () => {\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => {\n      document.head.removeChild(meta);\n    };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OAuthLogoutConfirm />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_OAuthLogoutConfirm.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OAuthLogoutConfirm.tsx"],"names":[],"mappings":";AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAEtG;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAa,GAAG,EAAE;IACxD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE;YACV,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,uBAAuB,KAAG,GACA,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OAuthLogoutConfirm } from '~wildo-frontend-lib/components/auth/Auth_OAuthLogoutConfirm';\n\n/**\n * `/oauth/logout-confirm` — the routed wrapper for the OIDC RP-Initiated Logout §6 confirmation prompt. A\n * public route (token-driven, never gates on a Bearer), rendered in the centered public card. Where\n * `GET /oauth/end-session` sends the browser for a NON-trusted logout so the End-User can confirm before\n * the session is terminated; the body ({@link Auth_OAuthLogoutConfirm}) POSTs the single-use token to\n * `POST /oauth/end-session/confirm` on confirm, then lands on `/oauth/logged-out`.\n *\n * `referrer: no-referrer` (like `/oauth/consent`) keeps the single-use confirmation `token` — which is\n * carried in this page's query string — out of the `Referer` header on any outbound navigation.\n */\nexport const AuthPage_OAuthLogoutConfirm: React.FC = () => {\n  React.useEffect(() => {\n    const meta = document.createElement('meta');\n    meta.name = 'referrer';\n    meta.content = 'no-referrer';\n    document.head.appendChild(meta);\n    return () => {\n      document.head.removeChild(meta);\n    };\n  }, []);\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OAuthLogoutConfirm />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_OneOffSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OneOffSession.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OneOffSession.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,EAQ1C,CAAC"}
+{"version":3,"file":"AuthPage_OneOffSession.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OneOffSession.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,EAQ1C,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_OneOffSession.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage_OneOffSession.js","sourceRoot":"","sources":["../../../../../src/components/auth/pages/AuthPage_OneOffSession.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAa,GAAG,EAAE;IACnD,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAqB,CAAC;IAEjD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,kBAAkB,IAAC,KAAK,EAAE,KAAK,GAAI,GACT,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OneOffSession } from '~wildo-frontend-lib/components/auth/Auth_OneOffSession';\n\n/**\n * AuthPage_OneOffSession\n *\n * W7.3b: Thin page wrapper for the one-off session exchange.\n * Extracts the :token from URL params and delegates to Auth_OneOffSession\n * (injectable preset component with i18n).\n */\nexport const AuthPage_OneOffSession: React.FC = () => {\n  const { token } = useParams<{ token: string }>();\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OneOffSession token={token} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}
+{"version":3,"file":"AuthPage_OneOffSession.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OneOffSession.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAa,GAAG,EAAE;IACnD,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAqB,CAAC;IAEjD,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,kBAAkB,IAAC,KAAK,EAAE,KAAK,GAAI,GACT,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { useParams } from 'react-router-dom';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OneOffSession } from '~wildo-frontend-lib/components/auth/Auth_OneOffSession';\n\n/**\n * AuthPage_OneOffSession\n *\n * W7.3b: Thin page wrapper for the one-off session exchange.\n * Extracts the :token from URL params and delegates to Auth_OneOffSession\n * (injectable preset component with i18n).\n */\nexport const AuthPage_OneOffSession: React.FC = () => {\n  const { token } = useParams<{ token: string }>();\n\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OneOffSession token={token} />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}

package/dist/esm/components/auth/pages/AuthPage_OrganizationOnboarding.d.ts

@@ -0,0 +1,11 @@
+import React from 'react';
+/**
+ * AuthPage_OrganizationOnboarding
+ *
+ * Displayed when an account's authentication session is parked at organization onboarding: its user type names
+ * its organization at onboarding and it has none yet (#1090).
+ *
+ * Thin page wrapper: delegates to Auth_OrganizationOnboarding (injectable preset component with i18n).
+ */
+export declare const AuthPage_OrganizationOnboarding: React.FC;
+//# sourceMappingURL=AuthPage_OrganizationOnboarding.d.ts.map

package/dist/esm/components/auth/pages/AuthPage_OrganizationOnboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPage_OrganizationOnboarding.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OrganizationOnboarding.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,KAAK,CAAC,EAMnD,CAAC"}

package/dist/esm/components/auth/pages/AuthPage_OrganizationOnboarding.js

@@ -0,0 +1,15 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { PublicLayout_MainContainer } from '../../../components/app/PublicLayout_MainContainer.js';
+import { Auth_OrganizationOnboarding } from '../../../components/auth/Auth_OrganizationOnboarding.js';
+/**
+ * AuthPage_OrganizationOnboarding
+ *
+ * Displayed when an account's authentication session is parked at organization onboarding: its user type names
+ * its organization at onboarding and it has none yet (#1090).
+ *
+ * Thin page wrapper: delegates to Auth_OrganizationOnboarding (injectable preset component with i18n).
+ */
+export const AuthPage_OrganizationOnboarding = () => {
+    return (_jsx(PublicLayout_MainContainer, { useCardLayout: true, children: _jsx(Auth_OrganizationOnboarding, {}) }));
+};
+//# sourceMappingURL=AuthPage_OrganizationOnboarding.js.map

package/dist/esm/components/auth/pages/AuthPage_OrganizationOnboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPage_OrganizationOnboarding.js","sourceRoot":"","sources":["../../../../../../src/components/auth/pages/AuthPage_OrganizationOnboarding.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+DAA+D,CAAC;AAC3G,OAAO,EAAE,2BAA2B,EAAE,MAAM,iEAAiE,CAAC;AAE9G;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAa,GAAG,EAAE;IAC5D,OAAO,CACL,KAAC,0BAA0B,IAAC,aAAa,EAAE,IAAI,YAC7C,KAAC,2BAA2B,KAAG,GACJ,CAC9B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import React from 'react';\nimport { PublicLayout_MainContainer } from '~wildo-frontend-lib/components/app/PublicLayout_MainContainer';\nimport { Auth_OrganizationOnboarding } from '~wildo-frontend-lib/components/auth/Auth_OrganizationOnboarding';\n\n/**\n * AuthPage_OrganizationOnboarding\n *\n * Displayed when an account's authentication session is parked at organization onboarding: its user type names\n * its organization at onboarding and it has none yet (#1090).\n *\n * Thin page wrapper: delegates to Auth_OrganizationOnboarding (injectable preset component with i18n).\n */\nexport const AuthPage_OrganizationOnboarding: React.FC = () => {\n  return (\n    <PublicLayout_MainContainer useCardLayout={true}>\n      <Auth_OrganizationOnboarding />\n    </PublicLayout_MainContainer>\n  );\n};\n"]}