npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.7 → 1.1.9 - Mend

@wildo-ai/saas-frontend-lib 1.1.7 → 1.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1962) hide show

package/dist/esm/components/auth/Auth_ConfirmEmail.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_ConfirmEmail.labels.js","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_ConfirmEmail.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEjK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAC7I,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC7I,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC3H,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACzJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IAC3H,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACvJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAC9J,EAAE,GAAG,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC1I,EAAE,GAAG,EAAE,qBAAqB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAClJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;IACzJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC3H,EAAE,GAAG,EAAE,qBAAqB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACvG,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iFAAiF,EAAE;IAC1K;QACE,GAAG,EAAE,qBAAqB,CAAC,4BAA4B;QACvD,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,0EAA0E;QACnF,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;KACtF;IACD;QACE,GAAG,EAAE,qBAAqB,CAAC,8BAA8B;QACzD,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,oEAAoE;QAC7E,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;KACtF;IACD,EAAE,GAAG,EAAE,qBAAqB,CAAC,8BAA8B,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4DAA4D,EAAE;CAC7J,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserConfirmEmailLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserConfirmEmailLabels: LabellingUnitaryDef[] = [\n { ref: UserConfirmEmailLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown while the email verification token is being validated' },\n { ref: UserConfirmEmailLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line under the confirm-email heading' },\n { ref: UserConfirmEmailLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email address being confirmed' },\n { ref: UserConfirmEmailLabel.CONFIRM_EMAIL, kind: LabelKind.BUTTON, purpose: 'Button that submits the email-confirmation request' },\n { ref: UserConfirmEmailLabel.VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status line shown while verifying the email address' },\n { ref: UserConfirmEmailLabel.SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the email was verified' },\n { ref: UserConfirmEmailLabel.SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming verification succeeded and the user is signed in' },\n { ref: UserConfirmEmailLabel.ERROR_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when email verification fails' },\n { ref: UserConfirmEmailLabel.ERROR_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Fallback error message used when the backend gives no specific reason' },\n { ref: UserConfirmEmailLabel.RESEND_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text introducing the option to resend the verification email' },\n { ref: UserConfirmEmailLabel.RESEND_EMAIL_PLACEHOLDER, kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the resend email input' },\n { ref: UserConfirmEmailLabel.RESEND_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the verification email is being resent' },\n { ref: UserConfirmEmailLabel.RESEND_COOLDOWN, kind: LabelKind.BUTTON, purpose: 'Resend button label during the cooldown window (countdown is appended)' },\n { ref: UserConfirmEmailLabel.RESEND_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that resends the verification email' },\n { ref: UserConfirmEmailLabel.RESEND_SUCCESS, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the verification email was resent' },\n { ref: UserConfirmEmailLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen' },\n { ref: UserConfirmEmailLabel.INVALID_LINK, kind: LabelKind.MESSAGE, purpose: 'Error shown when the confirmation link is missing its token or email' },\n { ref: UserConfirmEmailLabel.SESSION_CONFLICT_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when a different account is already signed in during confirmation' },\n {\n ref: UserConfirmEmailLabel.SESSION_CONFLICT_DESCRIPTION,\n kind: LabelKind.MESSAGE,\n purpose: 'Explains that confirming will affect the account matching the link email',\n params: [{ key: 'email', meaning: 'email address the confirmation link belongs to' }],\n },\n {\n ref: UserConfirmEmailLabel.SESSION_CONFLICT_VERIFY_BUTTON,\n kind: LabelKind.BUTTON,\n purpose: 'Button to proceed and confirm the email despite the active session',\n params: [{ key: 'email', meaning: 'email address the confirmation link belongs to' }],\n },\n { ref: UserConfirmEmailLabel.SESSION_CONFLICT_CANCEL_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button to cancel confirmation and keep the current session' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_CONFIRM_EMAIL, PublicLayoutsUserConfirmEmailLabels);\n"]}
1	+ {"version":3,"file":"Auth_ConfirmEmail.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_ConfirmEmail.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEjK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAC7I,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC7I,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC3H,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACzJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE;IAC3H,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IACvJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAC9J,EAAE,GAAG,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC1I,EAAE,GAAG,EAAE,qBAAqB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAClJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;IACzJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC3H,EAAE,GAAG,EAAE,qBAAqB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE;IACvG,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,sBAAsB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iFAAiF,EAAE;IAC1K;QACE,GAAG,EAAE,qBAAqB,CAAC,4BAA4B;QACvD,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,0EAA0E;QACnF,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;KACtF;IACD;QACE,GAAG,EAAE,qBAAqB,CAAC,8BAA8B;QACzD,IAAI,EAAE,SAAS,CAAC,MAAM;QACtB,OAAO,EAAE,oEAAoE;QAC7E,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;KACtF;IACD,EAAE,GAAG,EAAE,qBAAqB,CAAC,8BAA8B,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4DAA4D,EAAE;CAC7J,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserConfirmEmailLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserConfirmEmailLabels: LabellingUnitaryDef[] = [\n { ref: UserConfirmEmailLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown while the email verification token is being validated' },\n { ref: UserConfirmEmailLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line under the confirm-email heading' },\n { ref: UserConfirmEmailLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email address being confirmed' },\n { ref: UserConfirmEmailLabel.CONFIRM_EMAIL, kind: LabelKind.BUTTON, purpose: 'Button that submits the email-confirmation request' },\n { ref: UserConfirmEmailLabel.VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status line shown while verifying the email address' },\n { ref: UserConfirmEmailLabel.SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the email was verified' },\n { ref: UserConfirmEmailLabel.SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming verification succeeded and the user is signed in' },\n { ref: UserConfirmEmailLabel.ERROR_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when email verification fails' },\n { ref: UserConfirmEmailLabel.ERROR_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Fallback error message used when the backend gives no specific reason' },\n { ref: UserConfirmEmailLabel.RESEND_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text introducing the option to resend the verification email' },\n { ref: UserConfirmEmailLabel.RESEND_EMAIL_PLACEHOLDER, kind: LabelKind.PLACEHOLDER, purpose: 'Placeholder inside the resend email input' },\n { ref: UserConfirmEmailLabel.RESEND_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the verification email is being resent' },\n { ref: UserConfirmEmailLabel.RESEND_COOLDOWN, kind: LabelKind.BUTTON, purpose: 'Resend button label during the cooldown window (countdown is appended)' },\n { ref: UserConfirmEmailLabel.RESEND_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that resends the verification email' },\n { ref: UserConfirmEmailLabel.RESEND_SUCCESS, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the verification email was resent' },\n { ref: UserConfirmEmailLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen' },\n { ref: UserConfirmEmailLabel.INVALID_LINK, kind: LabelKind.MESSAGE, purpose: 'Error shown when the confirmation link is missing its token or email' },\n { ref: UserConfirmEmailLabel.SESSION_CONFLICT_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when a different account is already signed in during confirmation' },\n {\n ref: UserConfirmEmailLabel.SESSION_CONFLICT_DESCRIPTION,\n kind: LabelKind.MESSAGE,\n purpose: 'Explains that confirming will affect the account matching the link email',\n params: [{ key: 'email', meaning: 'email address the confirmation link belongs to' }],\n },\n {\n ref: UserConfirmEmailLabel.SESSION_CONFLICT_VERIFY_BUTTON,\n kind: LabelKind.BUTTON,\n purpose: 'Button to proceed and confirm the email despite the active session',\n params: [{ key: 'email', meaning: 'email address the confirmation link belongs to' }],\n },\n { ref: UserConfirmEmailLabel.SESSION_CONFLICT_CANCEL_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button to cancel confirmation and keep the current session' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_CONFIRM_EMAIL, PublicLayoutsUserConfirmEmailLabels);\n"]}

package/dist/esm/components/auth/Auth_EnrollmentRequired.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_EnrollmentRequired.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_EnrollmentRequired.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAuBjF,OAAO,qEAAqE,CAAC;AAC7E,OAAO,wEAAwE,CAAC;AAChF,OAAO,sEAAsE,CAAC;AAE9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAIxH,MAAM,WAAW,kDAAkD;CAAG;AAQtE;;;;;;;;GAQG;AACH,eAAO,MAAM,6CAA6C,GAAI,QAAQ,kDAAkD,KAAG,KAAK,CAAC,GAAG,CAAC,OAqQpI,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,kDAAkD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGpL"}
1	+ {"version":3,"file":"Auth_EnrollmentRequired.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_EnrollmentRequired.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAuBjF,OAAO,qEAAqE,CAAC;AAC7E,OAAO,wEAAwE,CAAC;AAChF,OAAO,sEAAsE,CAAC;AAE9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAIxH,MAAM,WAAW,kDAAkD;CAAG;AAQtE;;;;;;;;GAQG;AACH,eAAO,MAAM,6CAA6C,GAAI,QAAQ,kDAAkD,KAAG,KAAK,CAAC,GAAG,CAAC,OAqQpI,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,kDAAkD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGpL"}

package/dist/esm/components/auth/Auth_EnrollmentRequired.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_EnrollmentRequired.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_EnrollmentRequired.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAClI,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6EAA6E,CAAC;AAC3H,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAC9H,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,8EAA8E,CAAC;AAC9I,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAEnG,OAAO,qEAAqE,CAAC;AAC7E,OAAO,wEAAwE,CAAC;AAChF,OAAO,sEAAsE,CAAC;AAG9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAK1H,MAAM,qBAAqB,GAA4C;IACrE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,UAAU;IACrD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,aAAa;IAC3D,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,WAAW;CAC1D,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,MAA0D,EAAqB,EAAE;IAC7I,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,cAAc,EAAE,CAAC;IACtG,8GAA8G;IAC9G,4EAA4E;IAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IACrG,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACxF,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvE,MAAM,iBAAiB,GAAG,YAAY,IAAI,oBAAoB,EAAE,SAAS,IAAI,IAAI,CAAC;IAClF,MAAM,aAAa,GAAG,QAAQ,IAAI,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;IACpE,MAAM,oBAAoB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,iBAAiB,CAAC;IAC3F,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,yBAAyB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,oBAAoB,IAAI,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,OAAO;YAAE,OAAO;QAC7F,yBAAyB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEzC,yGAAyG;QACzG,2BAA2B;QAC3B,MAAM,kBAAkB,GAAG,GAAG,EAAE;YAC9B,IAAI,oBAAoB,EAAE,SAAS,KAAK,iBAAiB;gBAAE,uBAAuB,EAAE,CAAC;QACvF,CAAC,CAAC;QAEF,eAAe,CAAC,iBAAiB,CAAC;aAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;YACrB,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC;gBAAE,kBAAkB,EAAE,CAAC;QACrF,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAyC,EAAE,EAAE;YACnD,qGAAqG;YACrG,mFAAmF;YACnF,MAAM,MAAM,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;YACvC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;gBAAE,kBAAkB,EAAE,CAAC;QAC7D,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1E,CAAC,kBAAkB,CAAC,CACrB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,iBAAiB,GAAG,OAAO,CAC/B,GAAG,EAAE,CAAE,IAAI,CAAC,0BAA2C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,EACpG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAClC,CAAC;IAEF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACrF,CAAC;QAED,wGAAwG;QACxG,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,aAAa,CAAC;QAC1D,OAAO,wBAAwB,CAC7B,GAAG,gBAAgB,CAAC,YAAY,cAAc,SAAS,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC5F,kBAAkB,CACnB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEvF;;;;;;;;;;;;;OAaG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,UAAgD,EAAE,EAAE;QAChG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9B,UAAU,CAAC,GAAG,EAAE;YACd,QAAQ,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAE5D,MAAM,qBAAqB,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE;QACxD,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,qHAAqH;IACrH,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,mGAAmG;IACnG,qGAAqG;IACrG,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,gGAAgG;QAChG,yFAAyF;QACzF,IAAI,oBAAoB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACpD,OAAO,mBAAK,CAAC;QACf,CAAC;QACD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,SAAS,EAAE,OAAO,SAAG,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,qBAAqB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,YAAY,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACjF,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,oGAAoG;IACpG,sDAAsD;IACtD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CACL,eAAK,SAAS,EAAC,0BAA0B,aACvC,cAAK,SAAS,EAAC,6BAA6B,YAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAW,GACjD,EACN,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,GAAoB,GAChF,EACR,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,YACxF,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,GAClC,IACL,CACP,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CACL,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,cAAc,CAAC,GAAoB,GAC1E,EACR,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAQ,IACvF,CACP,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/F,OAAO,CACL,eAAK,SAAS,EAAC,0BAA0B,aACvC,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAW,EACrD,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YACrD,CAAC,CAAC,uBAAuB,CAAC,WAAW,CAAC,GAClC,IACH,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAEA,CAAC,cAAc,IAAI,CAClB,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,iCAAiC,YAC9C,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,GACpC,EACP,KAAC,oBAAoB,IACnB,MAAM,EAAE,sBAAsB,CAAC,IAAI,EACnC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAChE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GACpE,IACE,CACP,EAEA,cAAc,IAAI,iBAAiB,IAAI,CACtC,eAAK,SAAS,EAAC,cAAc,aAC3B,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,KAAK,EACrC,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,OAAO,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAGpD,EACT,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAClC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,GACtD,IACH,EACN,KAAC,iBAAiB,IAChB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS,EACzC,UAAU,EAAE,wBAAwB,EACpC,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,KAAK,EAChB,CAAC,EAAE,CAAC,GACJ,IACE,CACP,EAED,cAAK,SAAS,EAAC,MAAM,YACnB,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,YACxF,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,GAClC,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAA6E;IAC/J,MAAM,SAAS,GAAG,uBAAuB,CAAqD,qBAAqB,CAAC,kCAAkC,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3L,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation, useNavigate } from 'react-router-dom';\nimport { ButtonSize, CorePresetNames, EnrollmentRequiredLabel, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport type { EnrollmentSessionSettlementResponse } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { ENROLLMENT_METHOD_COMPONENTS } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\nimport { AuthMethodChoiceLayout, AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { forgetPendingMfaSession, readPendingMfaSession } from '~wildo-frontend-lib/core/security/pending-mfa-session-storage.frontend.utils';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\n\nimport '~wildo-frontend-lib/components/auth/enrollment/TotpEnrollmentMethod';\nimport '~wildo-frontend-lib/components/auth/enrollment/PasskeyEnrollmentMethod';\nimport '~wildo-frontend-lib/components/auth/enrollment/PhoneEnrollmentMethod';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\n// --- Contract ---\nexport interface PublicLayoutPreset_EnrollmentRequired_DefaultProps {}\n\nconst METHOD_DISPLAY_LABELS: Record<string, EnrollmentRequiredLabel> = {\n [AuthMethod.TOTP]: EnrollmentRequiredLabel.TOTP_TITLE,\n [AuthMethod.PASSKEY]: EnrollmentRequiredLabel.PASSKEY_TITLE,\n [AuthMethod.SMS_OTP]: EnrollmentRequiredLabel.PHONE_TITLE,\n};\n\n/*\n MFA enrollment required default preset.\n \n Displayed when the user's organization requires MFA but the user has\n * not enrolled any second-factor method yet. Offers enrollment options\n * and redirects to MFA challenge upon completion.\n \n All user-facing strings are i18n-driven via EnrollmentRequiredLabel.\n /\nexport const PublicLayoutPreset_EnrollmentRequired_Default = (_props: PublicLayoutPreset_EnrollmentRequired_DefaultProps): React.JSX.Element => {\n const { auth, completeEnrollmentSession, getSessionState, adoptPendingMfaSession } = useAuthSession();\n // Signing out goes through `UserOrgsProvider`, which announces the person's departure before their consent is\n // cleared (#1977). The auth session's own `logout` skips that announcement.\n const { logout } = useUserOrgs();\n const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED });\n const navigate = useNavigate();\n const location = useLocation();\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, key);\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const { urlSessionId, urlEmail } = useMemo(() => {\n const params = new URLSearchParams(location.search);\n return { urlSessionId: params.get('sessionId'), urlEmail: params.get('email') \|\| '' };\n }, [location.search]);\n\n /\n * Recover the session when this page was LOADED with an empty auth context rather than routed to.\n \n Every in-app arrival here finds the context already holding the session. A hard load does not, and this\n * screen used to read ONLY the context, so it sent a valid session to sign-in. Two routes lead here, and\n * each leaves the session somewhere a reload can find it:\n * - the MFA CHALLENGE, itself loaded from a URL carrying `sessionId`, passes `sessionId`/`email` on in the\n * gate URL — ids its own URL already showed (#1033);\n * - the in-app hand-off from sign-in, registration, email confirmation, invitation and magic link\n * (`useMfaContinuationNavigation`) carries NOTHING in the URL — a registration or invitation session\n * issues tokens and lives 24h — so a reload after it recovers from the tab-scoped copy the auth provider\n * keeps (`pending-mfa-session-storage.frontend.utils.ts`, #1068).\n \n The URL wins when both exist: it names the session this exact navigation was made for. Storage is read\n * ONCE, in the first render — before any effect runs — so the provider's own bookkeeping cannot race it.\n \n A session in a state the server no longer admits second-factor work on, or one the server no longer\n * knows, is not adopted, its stored copy is forgotten, and the sign-in bounce below proceeds as before.\n /\n const [storedPendingSession] = useState(() => readPendingMfaSession());\n const recoverySessionId = urlSessionId ?? storedPendingSession?.sessionId ?? null;\n const recoveryEmail = urlEmail \|\| storedPendingSession?.email \|\| '';\n const needsSessionRecovery = !auth.accessToken && !auth.mfaRequired && !!recoverySessionId;\n const [sessionRecoverySettled, setSessionRecoverySettled] = useState(false);\n const sessionRecoveryStartedRef = useRef(false);\n\n useEffect(() => {\n if (!needsSessionRecovery \|\| !recoverySessionId \|\| sessionRecoveryStartedRef.current) return;\n sessionRecoveryStartedRef.current = true;\n\n // Only a copy of THIS session is dropped: a URL-named session failing says nothing about a different one\n // the tab still remembers.\n const forgetIfRemembered = () => {\n if (storedPendingSession?.sessionId === recoverySessionId) forgetPendingMfaSession();\n };\n\n getSessionState(recoverySessionId)\n .then((sessionState) => {\n if (!adoptPendingMfaSession(recoverySessionId, sessionState)) forgetIfRemembered();\n })\n .catch((error: { response?: { status?: number } }) => {\n // Forget only what the server says is GONE. A transient failure leaves the copy for the next reload,\n // matching how the challenge screen tells an expired session from a generic error.\n const status = error?.response?.status;\n if (status === 404 \|\| status === 410) forgetIfRemembered();\n })\n .finally(() => setSessionRecoverySettled(true));\n }, [needsSessionRecovery, recoverySessionId, storedPendingSession, getSessionState, adoptPendingMfaSession]);\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget),\n [authRedirectTarget],\n );\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n const [selectedMethod, setSelectedMethod] = useState<AuthMethod \| null>(null);\n const [enrolledSuccessfully, setEnrolledSuccessfully] = useState(false);\n const [error, setError] = useState<string \| null>(null);\n\n const enrollableOptions = useMemo(\n () => (auth.availableEnrollmentMethods as AuthMethod[]).filter(m => ENROLLMENT_METHOD_COMPONENTS[m]),\n [auth.availableEnrollmentMethods],\n );\n\n const mfaChallengePath = useMemo(() => {\n const sessionId = auth.mfaSessionId;\n if (!sessionId) {\n return appendAuthRedirectToPath(CommonRoutePaths.mfaChallenge, authRedirectTarget);\n }\n\n // A recovered session has no identification response behind it, so the recovered email is the fallback.\n const email = auth.identification?.email \|\| recoveryEmail;\n return appendAuthRedirectToPath(\n `${CommonRoutePaths.mfaChallenge}?sessionId=${sessionId}&email=${encodeURIComponent(email)}`,\n authRedirectTarget,\n );\n }, [auth.mfaSessionId, auth.identification?.email, recoveryEmail, authRedirectTarget]);\n\n /\n * Where enrollment leads depends on the session it was performed on, and the backend has already\n * decided it (`enrollmentSession` on the ceremony response):\n * - a REGISTRATION or INVITATION session is COMPLETED by the enrollment itself — the registrant has\n * just proven the factor, so there is nothing to challenge. The response carries the access\n * token; adopting it signs them in, and the `auth.accessToken` redirect below takes them into the\n * application. Sending them to the challenge instead is the dead end #603 records: the session is\n * consumed and no door would answer.\n * - a LOGIN session was moved to `MFA_REQUIRED`, and the enrolled factor is now presented as the\n * challenge it still owes.\n * - a registration settlement that stopped at `ONBOARDING_PENDING` (reachable since #1011) is adopted as a\n * parked onboarding session; the organization-onboarding guard below then takes the registrant to name\n * their organization, which signs them in (#1090).\n /\n const handleEnrollmentComplete = useCallback((settlement?: EnrollmentSessionSettlementResponse) => {\n setError(null);\n if (completeEnrollmentSession(settlement)) {\n return;\n }\n setEnrolledSuccessfully(true);\n setTimeout(() => {\n navigate(mfaChallengePath, { replace: true });\n }, 1200);\n }, [navigate, mfaChallengePath, completeEnrollmentSession]);\n\n const handleEnrollmentError = useCallback((msg: string) => {\n setError(msg);\n }, []);\n\n // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.\n const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, authRedirectTarget);\n if (organizationOnboardingTarget) {\n return <Navigate to={organizationOnboardingTarget} replace />;\n }\n\n // Signed in — including by an enrollment that completed a registration session. Checked BEFORE the\n // `mfaRequired` bounce, which that completion clears and would otherwise read as \"go back to login\".\n if (auth.accessToken && !auth.isLoading) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!auth.mfaRequired) {\n // Not yet: the URL names a session and the recovery above has not answered. Bouncing now is the\n // defect #1033 records — the session is valid, only this page's memory of it is missing.\n if (needsSessionRecovery && !sessionRecoverySettled) {\n return <></>;\n }\n return <Navigate to={loginPath} replace />;\n }\n\n /\n * Hand back to the challenge ONLY when a challenge can actually run.\n \n This bounce means \"you do not need to enroll anything, go and answer the challenge\" — a sentence\n * that is only true when something is usable. It used to fire on `enrollableOptions.length === 0`\n * alone, which made it the other half of a redirect loop: the challenge sends a user here when\n * nothing is usable, and this sent them straight back when there was nothing to enroll. Both\n * screens were individually reasonable and the PAIR never terminated.\n \n Requiring a usable factor breaks the cycle HERE, at the source, rather than relying on the two\n * screens agreeing about `availableEnrollmentMethods` — which they read from different places (this\n * one from the auth context, the challenge from its own session fetch), so any backend path that\n * populates one and not the other would reopen it.\n */\n const hasUsableSecondFactor = auth.usableSecondFactorMethods.length > 0;\n if (auth.mfaSessionId && enrollableOptions.length === 0 && hasUsableSecondFactor) {\n return <Navigate to={mfaChallengePath} replace />;\n }\n\n if (!isReady) return null;\n\n // Required, nothing usable, nothing enrollable: terminal, and it says so. Only an administrator can\n // resolve it, so the sole action left is to sign out.\n if (enrollableOptions.length === 0) {\n return (\n <div className=\"space-y-group py-section\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(EnrollmentRequiredLabel.TITLE)}</Heading>\n </div>\n <Alert>\n <AlertDescription>{t(EnrollmentRequiredLabel.NO_METHODS_AVAILABLE)}</AlertDescription>\n </Alert>\n <Button variant={ButtonVariants_Variant.OUTLINE} className=\"w-full\" onClick={() => logout()}>\n {t(EnrollmentRequiredLabel.LOGOUT_BUTTON)}\n </Button>\n </div>\n );\n }\n\n if (enrolledSuccessfully) {\n return (\n <div className=\"text-center space-y-group py-section\">\n <Alert>\n <AlertDescription>{t(EnrollmentRequiredLabel.ENROLL_SUCCESS)}</AlertDescription>\n </Alert>\n <Text className=\"text-sm text-muted-foreground\">{t(EnrollmentRequiredLabel.LOADING)}</Text>\n </div>\n );\n }\n\n const SelectedComponent = selectedMethod ? ENROLLMENT_METHOD_COMPONENTS[selectedMethod] : null;\n\n return (\n <div className=\"space-y-group py-section\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(EnrollmentRequiredLabel.TITLE)}</Heading>\n <Text className=\"text-muted-foreground max-w-sm mx-auto\">\n {t(EnrollmentRequiredLabel.DESCRIPTION)}\n </Text>\n </div>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n {!selectedMethod && (\n <div className=\"space-y-item\">\n <Text className=\"text-sm font-medium text-center\">\n {t(EnrollmentRequiredLabel.SELECT_METHOD)}\n </Text>\n <AuthMethodChoiceList\n layout={AuthMethodChoiceLayout.LIST}\n methods={enrollableOptions}\n labelFor={(method) => t(METHOD_DISPLAY_LABELS[method] \|\| method)}\n onSelect={(method) => { setSelectedMethod(method); setError(null); }}\n />\n </div>\n )}\n\n {selectedMethod && SelectedComponent && (\n <div className=\"space-y-item\">\n <div className=\"flex items-center gap-2\">\n <Button\n variant={ButtonVariants_Variant.GHOST}\n size={ButtonSize.SM}\n onClick={() => { setSelectedMethod(null); setError(null); }}\n >\n ←\n </Button>\n <Text className=\"text-sm font-medium\">\n {t(METHOD_DISPLAY_LABELS[selectedMethod] \|\| selectedMethod)}\n </Text>\n </div>\n <SelectedComponent\n sessionId={auth.mfaSessionId \|\| undefined}\n onComplete={handleEnrollmentComplete}\n onError={handleEnrollmentError}\n isLoading={false}\n t={t}\n />\n </div>\n )}\n\n <div className=\"pt-2\">\n <Button variant={ButtonVariants_Variant.OUTLINE} className=\"w-full\" onClick={() => logout()}>\n {t(EnrollmentRequiredLabel.LOGOUT_BUTTON)}\n </Button>\n </div>\n </div>\n );\n};\n\nexport function Auth_EnrollmentRequired({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_EnrollmentRequired_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_EnrollmentRequired_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, 'Auth_EnrollmentRequired')(preset);\n return <Component {...props} />;\n}\n"]}
1	+ {"version":3,"file":"Auth_EnrollmentRequired.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_EnrollmentRequired.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAClI,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6EAA6E,CAAC;AAC3H,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAC9H,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,8EAA8E,CAAC;AAC9I,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AAEnG,OAAO,qEAAqE,CAAC;AAC7E,OAAO,wEAAwE,CAAC;AAChF,OAAO,sEAAsE,CAAC;AAG9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAK1H,MAAM,qBAAqB,GAA4C;IACrE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,UAAU;IACrD,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,aAAa;IAC3D,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,WAAW;CAC1D,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,MAA0D,EAAqB,EAAE;IAC7I,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,cAAc,EAAE,CAAC;IACtG,8GAA8G;IAC9G,4EAA4E;IAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IACrG,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACxF,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACvE,MAAM,iBAAiB,GAAG,YAAY,IAAI,oBAAoB,EAAE,SAAS,IAAI,IAAI,CAAC;IAClF,MAAM,aAAa,GAAG,QAAQ,IAAI,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;IACpE,MAAM,oBAAoB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,iBAAiB,CAAC;IAC3F,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,yBAAyB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,oBAAoB,IAAI,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,OAAO;YAAE,OAAO;QAC7F,yBAAyB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEzC,yGAAyG;QACzG,2BAA2B;QAC3B,MAAM,kBAAkB,GAAG,GAAG,EAAE;YAC9B,IAAI,oBAAoB,EAAE,SAAS,KAAK,iBAAiB;gBAAE,uBAAuB,EAAE,CAAC;QACvF,CAAC,CAAC;QAEF,eAAe,CAAC,iBAAiB,CAAC;aAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;YACrB,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,YAAY,CAAC;gBAAE,kBAAkB,EAAE,CAAC;QACrF,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAyC,EAAE,EAAE;YACnD,qGAAqG;YACrG,mFAAmF;YACnF,MAAM,MAAM,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;YACvC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;gBAAE,kBAAkB,EAAE,CAAC;QAC7D,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC,EAAE,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1E,CAAC,kBAAkB,CAAC,CACrB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,iBAAiB,GAAG,OAAO,CAC/B,GAAG,EAAE,CAAE,IAAI,CAAC,0BAA2C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,EACpG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAClC,CAAC;IAEF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACrF,CAAC;QAED,wGAAwG;QACxG,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,aAAa,CAAC;QAC1D,OAAO,wBAAwB,CAC7B,GAAG,gBAAgB,CAAC,YAAY,cAAc,SAAS,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC5F,kBAAkB,CACnB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEvF;;;;;;;;;;;;;OAaG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,UAAgD,EAAE,EAAE;QAChG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9B,UAAU,CAAC,GAAG,EAAE;YACd,QAAQ,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAE5D,MAAM,qBAAqB,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE;QACxD,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,qHAAqH;IACrH,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,mGAAmG;IACnG,qGAAqG;IACrG,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,gGAAgG;QAChG,yFAAyF;QACzF,IAAI,oBAAoB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACpD,OAAO,mBAAK,CAAC;QACf,CAAC;QACD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,SAAS,EAAE,OAAO,SAAG,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,qBAAqB,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,YAAY,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACjF,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,oGAAoG;IACpG,sDAAsD;IACtD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CACL,eAAK,SAAS,EAAC,0BAA0B,aACvC,cAAK,SAAS,EAAC,6BAA6B,YAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAW,GACjD,EACN,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,GAAoB,GAChF,EACR,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,YACxF,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,GAClC,IACL,CACP,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CACL,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,uBAAuB,CAAC,cAAc,CAAC,GAAoB,GAC1E,EACR,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAQ,IACvF,CACP,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/F,OAAO,CACL,eAAK,SAAS,EAAC,0BAA0B,aACvC,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAW,EACrD,KAAC,IAAI,IAAC,SAAS,EAAC,wCAAwC,YACrD,CAAC,CAAC,uBAAuB,CAAC,WAAW,CAAC,GAClC,IACH,EAEL,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAEA,CAAC,cAAc,IAAI,CAClB,eAAK,SAAS,EAAC,cAAc,aAC3B,KAAC,IAAI,IAAC,SAAS,EAAC,iCAAiC,YAC9C,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,GACpC,EACP,KAAC,oBAAoB,IACnB,MAAM,EAAE,sBAAsB,CAAC,IAAI,EACnC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAChE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GACpE,IACE,CACP,EAEA,cAAc,IAAI,iBAAiB,IAAI,CACtC,eAAK,SAAS,EAAC,cAAc,aAC3B,eAAK,SAAS,EAAC,yBAAyB,aACtC,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,KAAK,EACrC,IAAI,EAAE,UAAU,CAAC,EAAE,EACnB,OAAO,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAGpD,EACT,KAAC,IAAI,IAAC,SAAS,EAAC,qBAAqB,YAClC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,GACtD,IACH,EACN,KAAC,iBAAiB,IAChB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS,EACzC,UAAU,EAAE,wBAAwB,EACpC,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,KAAK,EAChB,CAAC,EAAE,CAAC,GACJ,IACE,CACP,EAED,cAAK,SAAS,EAAC,MAAM,YACnB,KAAC,MAAM,IAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,YACxF,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,GAClC,GACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAA6E;IAC/J,MAAM,SAAS,GAAG,uBAAuB,CAAqD,qBAAqB,CAAC,kCAAkC,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3L,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation, useNavigate } from 'react-router-dom';\nimport { ButtonSize, CorePresetNames, EnrollmentRequiredLabel, FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { AuthMethod } from '@wildo-ai/saas-models';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport type { EnrollmentSessionSettlementResponse } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { ENROLLMENT_METHOD_COMPONENTS } from '~wildo-frontend-lib/components/auth/enrollment/enrollment-method-components';\nimport { AuthMethodChoiceLayout, AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { forgetPendingMfaSession, readPendingMfaSession } from '~wildo-frontend-lib/core/security/pending-mfa-session-storage.frontend.utils';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\n\nimport '~wildo-frontend-lib/components/auth/enrollment/TotpEnrollmentMethod';\nimport '~wildo-frontend-lib/components/auth/enrollment/PasskeyEnrollmentMethod';\nimport '~wildo-frontend-lib/components/auth/enrollment/PhoneEnrollmentMethod';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\n// --- Contract ---\nexport interface PublicLayoutPreset_EnrollmentRequired_DefaultProps {}\n\nconst METHOD_DISPLAY_LABELS: Record<string, EnrollmentRequiredLabel> = {\n [AuthMethod.TOTP]: EnrollmentRequiredLabel.TOTP_TITLE,\n [AuthMethod.PASSKEY]: EnrollmentRequiredLabel.PASSKEY_TITLE,\n [AuthMethod.SMS_OTP]: EnrollmentRequiredLabel.PHONE_TITLE,\n};\n\n/*\n MFA enrollment required default preset.\n \n Displayed when the user's organization requires MFA but the user has\n * not enrolled any second-factor method yet. Offers enrollment options\n * and redirects to MFA challenge upon completion.\n \n All user-facing strings are i18n-driven via EnrollmentRequiredLabel.\n /\nexport const PublicLayoutPreset_EnrollmentRequired_Default = (_props: PublicLayoutPreset_EnrollmentRequired_DefaultProps): React.JSX.Element => {\n const { auth, completeEnrollmentSession, getSessionState, adoptPendingMfaSession } = useAuthSession();\n // Signing out goes through `UserOrgsProvider`, which announces the person's departure before their consent is\n // cleared (#1977). The auth session's own `logout` skips that announcement.\n const { logout } = useUserOrgs();\n const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED });\n const navigate = useNavigate();\n const location = useLocation();\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, key);\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const { urlSessionId, urlEmail } = useMemo(() => {\n const params = new URLSearchParams(location.search);\n return { urlSessionId: params.get('sessionId'), urlEmail: params.get('email') \|\| '' };\n }, [location.search]);\n\n /\n * Recover the session when this page was LOADED with an empty auth context rather than routed to.\n \n Every in-app arrival here finds the context already holding the session. A hard load does not, and this\n * screen used to read ONLY the context, so it sent a valid session to sign-in. Two routes lead here, and\n * each leaves the session somewhere a reload can find it:\n * - the MFA CHALLENGE, itself loaded from a URL carrying `sessionId`, passes `sessionId`/`email` on in the\n * gate URL — ids its own URL already showed (#1033);\n * - the in-app hand-off from sign-in, registration, email confirmation, invitation and magic link\n * (`useMfaContinuationNavigation`) carries NOTHING in the URL — a registration or invitation session\n * issues tokens and lives 24h — so a reload after it recovers from the tab-scoped copy the auth provider\n * keeps (`pending-mfa-session-storage.frontend.utils.ts`, #1068).\n \n The URL wins when both exist: it names the session this exact navigation was made for. Storage is read\n * ONCE, in the first render — before any effect runs — so the provider's own bookkeeping cannot race it.\n \n A session in a state the server no longer admits second-factor work on, or one the server no longer\n * knows, is not adopted, its stored copy is forgotten, and the sign-in bounce below proceeds as before.\n /\n const [storedPendingSession] = useState(() => readPendingMfaSession());\n const recoverySessionId = urlSessionId ?? storedPendingSession?.sessionId ?? null;\n const recoveryEmail = urlEmail \|\| storedPendingSession?.email \|\| '';\n const needsSessionRecovery = !auth.accessToken && !auth.mfaRequired && !!recoverySessionId;\n const [sessionRecoverySettled, setSessionRecoverySettled] = useState(false);\n const sessionRecoveryStartedRef = useRef(false);\n\n useEffect(() => {\n if (!needsSessionRecovery \|\| !recoverySessionId \|\| sessionRecoveryStartedRef.current) return;\n sessionRecoveryStartedRef.current = true;\n\n // Only a copy of THIS session is dropped: a URL-named session failing says nothing about a different one\n // the tab still remembers.\n const forgetIfRemembered = () => {\n if (storedPendingSession?.sessionId === recoverySessionId) forgetPendingMfaSession();\n };\n\n getSessionState(recoverySessionId)\n .then((sessionState) => {\n if (!adoptPendingMfaSession(recoverySessionId, sessionState)) forgetIfRemembered();\n })\n .catch((error: { response?: { status?: number } }) => {\n // Forget only what the server says is GONE. A transient failure leaves the copy for the next reload,\n // matching how the challenge screen tells an expired session from a generic error.\n const status = error?.response?.status;\n if (status === 404 \|\| status === 410) forgetIfRemembered();\n })\n .finally(() => setSessionRecoverySettled(true));\n }, [needsSessionRecovery, recoverySessionId, storedPendingSession, getSessionState, adoptPendingMfaSession]);\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget),\n [authRedirectTarget],\n );\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n const [selectedMethod, setSelectedMethod] = useState<AuthMethod \| null>(null);\n const [enrolledSuccessfully, setEnrolledSuccessfully] = useState(false);\n const [error, setError] = useState<string \| null>(null);\n\n const enrollableOptions = useMemo(\n () => (auth.availableEnrollmentMethods as AuthMethod[]).filter(m => ENROLLMENT_METHOD_COMPONENTS[m]),\n [auth.availableEnrollmentMethods],\n );\n\n const mfaChallengePath = useMemo(() => {\n const sessionId = auth.mfaSessionId;\n if (!sessionId) {\n return appendAuthRedirectToPath(CommonRoutePaths.mfaChallenge, authRedirectTarget);\n }\n\n // A recovered session has no identification response behind it, so the recovered email is the fallback.\n const email = auth.identification?.email \|\| recoveryEmail;\n return appendAuthRedirectToPath(\n `${CommonRoutePaths.mfaChallenge}?sessionId=${sessionId}&email=${encodeURIComponent(email)}`,\n authRedirectTarget,\n );\n }, [auth.mfaSessionId, auth.identification?.email, recoveryEmail, authRedirectTarget]);\n\n /\n * Where enrollment leads depends on the session it was performed on, and the backend has already\n * decided it (`enrollmentSession` on the ceremony response):\n * - a REGISTRATION or INVITATION session is COMPLETED by the enrollment itself — the registrant has\n * just proven the factor, so there is nothing to challenge. The response carries the access\n * token; adopting it signs them in, and the `auth.accessToken` redirect below takes them into the\n * application. Sending them to the challenge instead is the dead end #603 records: the session is\n * consumed and no door would answer.\n * - a LOGIN session was moved to `MFA_REQUIRED`, and the enrolled factor is now presented as the\n * challenge it still owes.\n * - a registration settlement that stopped at `ONBOARDING_PENDING` (reachable since #1011) is adopted as a\n * parked onboarding session; the organization-onboarding guard below then takes the registrant to name\n * their organization, which signs them in (#1090).\n /\n const handleEnrollmentComplete = useCallback((settlement?: EnrollmentSessionSettlementResponse) => {\n setError(null);\n if (completeEnrollmentSession(settlement)) {\n return;\n }\n setEnrolledSuccessfully(true);\n setTimeout(() => {\n navigate(mfaChallengePath, { replace: true });\n }, 1200);\n }, [navigate, mfaChallengePath, completeEnrollmentSession]);\n\n const handleEnrollmentError = useCallback((msg: string) => {\n setError(msg);\n }, []);\n\n // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.\n const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, authRedirectTarget);\n if (organizationOnboardingTarget) {\n return <Navigate to={organizationOnboardingTarget} replace />;\n }\n\n // Signed in — including by an enrollment that completed a registration session. Checked BEFORE the\n // `mfaRequired` bounce, which that completion clears and would otherwise read as \"go back to login\".\n if (auth.accessToken && !auth.isLoading) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!auth.mfaRequired) {\n // Not yet: the URL names a session and the recovery above has not answered. Bouncing now is the\n // defect #1033 records — the session is valid, only this page's memory of it is missing.\n if (needsSessionRecovery && !sessionRecoverySettled) {\n return <></>;\n }\n return <Navigate to={loginPath} replace />;\n }\n\n /\n * Hand back to the challenge ONLY when a challenge can actually run.\n \n This bounce means \"you do not need to enroll anything, go and answer the challenge\" — a sentence\n * that is only true when something is usable. It used to fire on `enrollableOptions.length === 0`\n * alone, which made it the other half of a redirect loop: the challenge sends a user here when\n * nothing is usable, and this sent them straight back when there was nothing to enroll. Both\n * screens were individually reasonable and the PAIR never terminated.\n \n Requiring a usable factor breaks the cycle HERE, at the source, rather than relying on the two\n * screens agreeing about `availableEnrollmentMethods` — which they read from different places (this\n * one from the auth context, the challenge from its own session fetch), so any backend path that\n * populates one and not the other would reopen it.\n */\n const hasUsableSecondFactor = auth.usableSecondFactorMethods.length > 0;\n if (auth.mfaSessionId && enrollableOptions.length === 0 && hasUsableSecondFactor) {\n return <Navigate to={mfaChallengePath} replace />;\n }\n\n if (!isReady) return null;\n\n // Required, nothing usable, nothing enrollable: terminal, and it says so. Only an administrator can\n // resolve it, so the sole action left is to sign out.\n if (enrollableOptions.length === 0) {\n return (\n <div className=\"space-y-group py-section\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(EnrollmentRequiredLabel.TITLE)}</Heading>\n </div>\n <Alert>\n <AlertDescription>{t(EnrollmentRequiredLabel.NO_METHODS_AVAILABLE)}</AlertDescription>\n </Alert>\n <Button variant={ButtonVariants_Variant.OUTLINE} className=\"w-full\" onClick={() => logout()}>\n {t(EnrollmentRequiredLabel.LOGOUT_BUTTON)}\n </Button>\n </div>\n );\n }\n\n if (enrolledSuccessfully) {\n return (\n <div className=\"text-center space-y-group py-section\">\n <Alert>\n <AlertDescription>{t(EnrollmentRequiredLabel.ENROLL_SUCCESS)}</AlertDescription>\n </Alert>\n <Text className=\"text-sm text-muted-foreground\">{t(EnrollmentRequiredLabel.LOADING)}</Text>\n </div>\n );\n }\n\n const SelectedComponent = selectedMethod ? ENROLLMENT_METHOD_COMPONENTS[selectedMethod] : null;\n\n return (\n <div className=\"space-y-group py-section\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(EnrollmentRequiredLabel.TITLE)}</Heading>\n <Text className=\"text-muted-foreground max-w-sm mx-auto\">\n {t(EnrollmentRequiredLabel.DESCRIPTION)}\n </Text>\n </div>\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n {!selectedMethod && (\n <div className=\"space-y-item\">\n <Text className=\"text-sm font-medium text-center\">\n {t(EnrollmentRequiredLabel.SELECT_METHOD)}\n </Text>\n <AuthMethodChoiceList\n layout={AuthMethodChoiceLayout.LIST}\n methods={enrollableOptions}\n labelFor={(method) => t(METHOD_DISPLAY_LABELS[method] \|\| method)}\n onSelect={(method) => { setSelectedMethod(method); setError(null); }}\n />\n </div>\n )}\n\n {selectedMethod && SelectedComponent && (\n <div className=\"space-y-item\">\n <div className=\"flex items-center gap-2\">\n <Button\n variant={ButtonVariants_Variant.GHOST}\n size={ButtonSize.SM}\n onClick={() => { setSelectedMethod(null); setError(null); }}\n >\n ←\n </Button>\n <Text className=\"text-sm font-medium\">\n {t(METHOD_DISPLAY_LABELS[selectedMethod] \|\| selectedMethod)}\n </Text>\n </div>\n <SelectedComponent\n sessionId={auth.mfaSessionId \|\| undefined}\n onComplete={handleEnrollmentComplete}\n onError={handleEnrollmentError}\n isLoading={false}\n t={t}\n />\n </div>\n )}\n\n <div className=\"pt-2\">\n <Button variant={ButtonVariants_Variant.OUTLINE} className=\"w-full\" onClick={() => logout()}>\n {t(EnrollmentRequiredLabel.LOGOUT_BUTTON)}\n </Button>\n </div>\n </div>\n );\n};\n\nexport function Auth_EnrollmentRequired({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_EnrollmentRequired_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_EnrollmentRequired_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, 'Auth_EnrollmentRequired')(preset);\n return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_EnrollmentRequired.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_EnrollmentRequired.labels.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_EnrollmentRequired.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6D,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAMnK,eAAO,MAAM,qCAAqC,EAAE,mBAAmB,EAmCtE,CAAC"}
1	+ {"version":3,"file":"Auth_EnrollmentRequired.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_EnrollmentRequired.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6D,KAAK,mBAAmB,EAA2B,MAAM,qCAAqC,CAAC;AAMnK,eAAO,MAAM,qCAAqC,EAAE,mBAAmB,EAmCtE,CAAC"}

package/dist/esm/components/auth/Auth_EnrollmentRequired.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_EnrollmentRequired.labels.js","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_EnrollmentRequired.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEnK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,qCAAqC,GAA0B;IAC1E,EAAE,GAAG,EAAE,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2EAA2E,EAAE;IACrJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACvJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC1I,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACnJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4KAA4K,EAAE;IACrQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC5I,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAClI,EAAE,GAAG,EAAE,uBAAuB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACvI,EAAE,GAAG,EAAE,uBAAuB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC9I,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2DAA2D,EAAE;IACvJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACzJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAC1I,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC5J,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACnJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yEAAyE,EAAE;IAC/J,EAAE,GAAG,EAAE,uBAAuB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC1J,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uCAAuC,EAAE;IACzH,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACvI,EAAE,GAAG,EAAE,uBAAuB,CAAC,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC/I,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAClJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IAC3J,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC1J,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC3H,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACvJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAC7H,EAAE,GAAG,EAAE,uBAAuB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qEAAqE,EAAE;IACxJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACtJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC5I,EAAE,GAAG,EAAE,uBAAuB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACtI,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACpJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC3J,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACjI,EAAE,GAAG,EAAE,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACzH,EAAE,GAAG,EAAE,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8EAA8E,EAAE;CAC3J,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,qCAAqC,CAAC,CAAC","sourcesContent":["import { EnrollmentRequiredLabel, FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsEnrollmentRequiredLabels: LabellingUnitaryDef[] = [\n { ref: EnrollmentRequiredLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when the user must enroll a second factor before continuing' },\n { ref: EnrollmentRequiredLabel.DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Explains that the organization requires MFA enrollment to proceed' },\n { ref: EnrollmentRequiredLabel.LOGOUT_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button to sign out instead of enrolling a second factor' },\n { ref: EnrollmentRequiredLabel.SELECT_METHOD, kind: LabelKind.LABEL, purpose: 'Prompt asking the user to choose a second-factor method to enroll' },\n { ref: EnrollmentRequiredLabel.NO_METHODS_AVAILABLE, kind: LabelKind.MESSAGE, purpose: 'Shown when a second factor is required but the configuration offers this user nothing to enroll and nothing to be challenged with — the user must contact an administrator' },\n { ref: EnrollmentRequiredLabel.ENROLL_SUCCESS, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the second-factor method was enrolled' },\n { ref: EnrollmentRequiredLabel.ENROLL_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when second-factor enrollment fails' },\n { ref: EnrollmentRequiredLabel.TOTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the authenticator-app (TOTP) enrollment block' },\n { ref: EnrollmentRequiredLabel.TOTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining authenticator-app enrollment' },\n { ref: EnrollmentRequiredLabel.TOTP_QR_INSTRUCTION, kind: LabelKind.DESCRIPTION, purpose: 'Instruction to scan the QR code with an authenticator app' },\n { ref: EnrollmentRequiredLabel.TOTP_MANUAL_SECRET, kind: LabelKind.LABEL, purpose: 'Label for the manual entry secret offered as a QR-code alternative' },\n { ref: EnrollmentRequiredLabel.TOTP_BACKUP_CODES, kind: LabelKind.LABEL, purpose: 'Label introducing the one-time backup recovery codes' },\n { ref: EnrollmentRequiredLabel.TOTP_BACKUP_SAVED, kind: LabelKind.LABEL, purpose: 'Confirmation checkbox/label that the user has saved their backup codes' },\n { ref: EnrollmentRequiredLabel.TOTP_VERIFY_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app verification code input' },\n { ref: EnrollmentRequiredLabel.TOTP_VERIFY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that confirms authenticator-app enrollment with the entered code' },\n { ref: EnrollmentRequiredLabel.TOTP_VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the authenticator-app code is being verified' },\n { ref: EnrollmentRequiredLabel.PASSKEY_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the passkey enrollment block' },\n { ref: EnrollmentRequiredLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining passkey enrollment' },\n { ref: EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that starts the passkey registration prompt' },\n { ref: EnrollmentRequiredLabel.PASSKEY_REGISTERING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the passkey is being registered' },\n { ref: EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: EnrollmentRequiredLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey registration prompt' },\n { ref: EnrollmentRequiredLabel.PHONE_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the phone / SMS enrollment block' },\n { ref: EnrollmentRequiredLabel.PHONE_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining phone / SMS second-factor enrollment' },\n { ref: EnrollmentRequiredLabel.PHONE_NUMBER_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the phone-number input' },\n { ref: EnrollmentRequiredLabel.PHONE_SEND_CODE, kind: LabelKind.BUTTON, purpose: 'Button that sends the verification code to the entered phone number' },\n { ref: EnrollmentRequiredLabel.PHONE_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the phone verification code is being sent' },\n { ref: EnrollmentRequiredLabel.PHONE_CODE_SENT, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the phone verification code was sent' },\n { ref: EnrollmentRequiredLabel.PHONE_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the phone verification code input' },\n { ref: EnrollmentRequiredLabel.PHONE_VERIFY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that confirms phone enrollment with the entered code' },\n { ref: EnrollmentRequiredLabel.PHONE_VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the phone verification code is being checked' },\n { ref: EnrollmentRequiredLabel.PHONE_RESEND, kind: LabelKind.BUTTON, purpose: 'Button that resends the phone verification code' },\n { ref: EnrollmentRequiredLabel.SUBMIT, kind: LabelKind.BUTTON, purpose: 'Generic submit button for the enrollment step' },\n { ref: EnrollmentRequiredLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Loading status shown after enrollment while redirecting to the MFA challenge' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, PublicLayoutsEnrollmentRequiredLabels);\n"]}
1	+ {"version":3,"file":"Auth_EnrollmentRequired.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_EnrollmentRequired.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEnK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,qCAAqC,GAA0B;IAC1E,EAAE,GAAG,EAAE,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2EAA2E,EAAE;IACrJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACvJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC1I,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACnJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4KAA4K,EAAE;IACrQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC5I,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAClI,EAAE,GAAG,EAAE,uBAAuB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACvI,EAAE,GAAG,EAAE,uBAAuB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC9I,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2DAA2D,EAAE;IACvJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACzJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAC1I,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wEAAwE,EAAE;IAC5J,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACnJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,yEAAyE,EAAE;IAC/J,EAAE,GAAG,EAAE,uBAAuB,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC1J,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uCAAuC,EAAE;IACzH,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACvI,EAAE,GAAG,EAAE,uBAAuB,CAAC,uBAAuB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC/I,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAClJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IAC3J,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC1J,EAAE,GAAG,EAAE,uBAAuB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC3H,EAAE,GAAG,EAAE,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACvJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAC7H,EAAE,GAAG,EAAE,uBAAuB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,qEAAqE,EAAE;IACxJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACtJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC5I,EAAE,GAAG,EAAE,uBAAuB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACtI,EAAE,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACpJ,EAAE,GAAG,EAAE,uBAAuB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAC3J,EAAE,GAAG,EAAE,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACjI,EAAE,GAAG,EAAE,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACzH,EAAE,GAAG,EAAE,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8EAA8E,EAAE;CAC3J,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,qCAAqC,CAAC,CAAC","sourcesContent":["import { EnrollmentRequiredLabel, FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsEnrollmentRequiredLabels: LabellingUnitaryDef[] = [\n { ref: EnrollmentRequiredLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when the user must enroll a second factor before continuing' },\n { ref: EnrollmentRequiredLabel.DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Explains that the organization requires MFA enrollment to proceed' },\n { ref: EnrollmentRequiredLabel.LOGOUT_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button to sign out instead of enrolling a second factor' },\n { ref: EnrollmentRequiredLabel.SELECT_METHOD, kind: LabelKind.LABEL, purpose: 'Prompt asking the user to choose a second-factor method to enroll' },\n { ref: EnrollmentRequiredLabel.NO_METHODS_AVAILABLE, kind: LabelKind.MESSAGE, purpose: 'Shown when a second factor is required but the configuration offers this user nothing to enroll and nothing to be challenged with — the user must contact an administrator' },\n { ref: EnrollmentRequiredLabel.ENROLL_SUCCESS, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the second-factor method was enrolled' },\n { ref: EnrollmentRequiredLabel.ENROLL_ERROR, kind: LabelKind.MESSAGE, purpose: 'Error shown when second-factor enrollment fails' },\n { ref: EnrollmentRequiredLabel.TOTP_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the authenticator-app (TOTP) enrollment block' },\n { ref: EnrollmentRequiredLabel.TOTP_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining authenticator-app enrollment' },\n { ref: EnrollmentRequiredLabel.TOTP_QR_INSTRUCTION, kind: LabelKind.DESCRIPTION, purpose: 'Instruction to scan the QR code with an authenticator app' },\n { ref: EnrollmentRequiredLabel.TOTP_MANUAL_SECRET, kind: LabelKind.LABEL, purpose: 'Label for the manual entry secret offered as a QR-code alternative' },\n { ref: EnrollmentRequiredLabel.TOTP_BACKUP_CODES, kind: LabelKind.LABEL, purpose: 'Label introducing the one-time backup recovery codes' },\n { ref: EnrollmentRequiredLabel.TOTP_BACKUP_SAVED, kind: LabelKind.LABEL, purpose: 'Confirmation checkbox/label that the user has saved their backup codes' },\n { ref: EnrollmentRequiredLabel.TOTP_VERIFY_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the authenticator-app verification code input' },\n { ref: EnrollmentRequiredLabel.TOTP_VERIFY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that confirms authenticator-app enrollment with the entered code' },\n { ref: EnrollmentRequiredLabel.TOTP_VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the authenticator-app code is being verified' },\n { ref: EnrollmentRequiredLabel.PASSKEY_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the passkey enrollment block' },\n { ref: EnrollmentRequiredLabel.PASSKEY_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining passkey enrollment' },\n { ref: EnrollmentRequiredLabel.PASSKEY_REGISTER_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that starts the passkey registration prompt' },\n { ref: EnrollmentRequiredLabel.PASSKEY_REGISTERING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the passkey is being registered' },\n { ref: EnrollmentRequiredLabel.PASSKEY_UNSUPPORTED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the device or browser does not support passkeys' },\n { ref: EnrollmentRequiredLabel.PASSKEY_CANCELLED, kind: LabelKind.MESSAGE, purpose: 'Notice shown when the user cancels the passkey registration prompt' },\n { ref: EnrollmentRequiredLabel.PHONE_TITLE, kind: LabelKind.HEADING, purpose: 'Title of the phone / SMS enrollment block' },\n { ref: EnrollmentRequiredLabel.PHONE_DESCRIPTION, kind: LabelKind.DESCRIPTION, purpose: 'Helper text explaining phone / SMS second-factor enrollment' },\n { ref: EnrollmentRequiredLabel.PHONE_NUMBER_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the phone-number input' },\n { ref: EnrollmentRequiredLabel.PHONE_SEND_CODE, kind: LabelKind.BUTTON, purpose: 'Button that sends the verification code to the entered phone number' },\n { ref: EnrollmentRequiredLabel.PHONE_SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the phone verification code is being sent' },\n { ref: EnrollmentRequiredLabel.PHONE_CODE_SENT, kind: LabelKind.MESSAGE, purpose: 'Confirmation that the phone verification code was sent' },\n { ref: EnrollmentRequiredLabel.PHONE_CODE_LABEL, kind: LabelKind.LABEL, purpose: 'Field label for the phone verification code input' },\n { ref: EnrollmentRequiredLabel.PHONE_VERIFY_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that confirms phone enrollment with the entered code' },\n { ref: EnrollmentRequiredLabel.PHONE_VERIFYING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the phone verification code is being checked' },\n { ref: EnrollmentRequiredLabel.PHONE_RESEND, kind: LabelKind.BUTTON, purpose: 'Button that resends the phone verification code' },\n { ref: EnrollmentRequiredLabel.SUBMIT, kind: LabelKind.BUTTON, purpose: 'Generic submit button for the enrollment step' },\n { ref: EnrollmentRequiredLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Loading status shown after enrollment while redirecting to the MFA challenge' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_ENROLLMENT_REQUIRED, PublicLayoutsEnrollmentRequiredLabels);\n"]}

package/dist/esm/components/auth/Auth_Invitation.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Invitation.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_Invitation.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAqDjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAwRxH,MAAM,WAAW,8CAA8C;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,yCAAyC,GAAI,mBAGvD,8CAA8C,KAAG,KAAK,CAAC,GAAG,CAAC,OAmnB7D,CAAC;AAEF,wBAAgB,eAAe,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,8CAA8C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}
1	+ {"version":3,"file":"Auth_Invitation.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Invitation.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAqDjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAwRxH,MAAM,WAAW,8CAA8C;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,yCAAyC,GAAI,mBAGvD,8CAA8C,KAAG,KAAK,CAAC,GAAG,CAAC,OAmnB7D,CAAC;AAEF,wBAAgB,eAAe,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,8CAA8C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAGxK"}

package/dist/esm/components/auth/Auth_Invitation.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Invitation.js","sourceRoot":"","sources":["../../../../src/components/auth/Auth_Invitation.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACjI,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,wBAAwB,EACxB,2BAA2B,GAM5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AACzI,OAAO,EAAE,+BAA+B,EAAE,MAAM,2EAA2E,CAAC;AAC5H,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACxI,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EACL,iCAAiC,GAClC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EACL,sBAAsB,GAEvB,MAAM,oEAAoE,CAAC;AAG5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAE1H;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,6BAA6B,GAA4B,IAAI,GAAG,CAAC;IACrE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,OAAO;CACnB,CAAC,CAAC;AAcH;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAA0C,CAAC,EACrE,eAAe,EACf,cAAc,GACf,EAAE,EAAE;IACH,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,8BAA8B;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAEjG,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,+BAA+B,IAAC,KAAK,EAAE,eAAe,GAAI,EAC3D,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,iBAAiB,GAAG,EAEpC,KAAC,yBAAyB,IAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAI,EAE/E,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,EAC5D,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAI5B,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,OAAO,CACL,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EAC3C,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EACrD,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,uBAAuB,GAMxB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACzD,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,4FAA4F;IAC5F,mEAAmE;IACnE,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,gGAAgG;IAChG,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA+C,EAAE,EAAE;QACzF,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE5C,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EACvE,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,2BAA2B,IAAC,eAAe,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,GAAI,CACtF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,yBAAyB,GAI1B,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CACtC,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GACtC,EACP,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAC5C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,EACxD,SAAS,SACT,IACS,CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAMtB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;IACzD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,CAAC,IAA+C,EAAE,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,EACnF,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,yBAAyB,IAAC,eAAe,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,GAAI,CACpF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,EACxD,KAAK,EACL,KAAK,GAC0C,EAAqB,EAAE;IACtE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,CAAC;IACpD,kGAAkG;IAClG,qGAAqG;IACrG,8FAA8F;IAC9F,MAAM,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;IACnC,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAE7C,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,oFAAoF;IACpF,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC;QACJ,qBAAqB,CAAC,8BAA8B;QACpD,qBAAqB,CAAC,wBAAwB;KAC/C,EACD,EAAE,CACH,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,gGAAgG;IAChG,kGAAkG;IAClG,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,6FAA6F;IAC7F,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,0FAA0F;IAC1F,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,iGAAiG;IACjG,+FAA+F;IAC/F,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtE,4EAA4E;IAC5E,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoC,IAAI,CAAC,CAAC;IAC9F,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAChE,kFAAkF;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,6FAA6F;IAC7F,iGAAiG;IACjG,iGAAiG;IACjG,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5H,kFAAkF;IAClF,6EAA6E;IAC7E,gFAAgF;IAChF,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,iFAAiF;IACjF,uFAAuF;IACvF,MAAM,uBAAuB,GAAG,OAAO,CACrC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC5F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC;IAEzC,qFAAqF;IACrF,oFAAoF;IACpF,qFAAqF;IACrF,qFAAqF;IACrF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5G,oFAAoF;IACpF,2CAA2C;IAC3C,MAAM,YAAY,GAAG,cAAc,EAAE,YAAY,IAAI,KAAK,CAAC;IAE3D,sFAAsF;IACtF,uFAAuF;IACvF,wFAAwF;IACxF,oCAAoC;IACpC,MAAM,cAAc,GAAwB,OAAO,CACjD,GAAG,EAAE,CAAC,cAAc,EAAE,cAAc,IAAI,YAAY,CAAC,cAAc,IAAI,uBAAuB,EAC9F,CAAC,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,CAC9D,CAAC;IAEF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAC3E,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAClE,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CACjF,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6EAA6E;IAC7E,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE;QACb,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,qCAAqC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,wBAAwB,EAAE;aACvB,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,SAAS;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,8FAA8F;QAC9F,8FAA8F;QAC9F,oGAAoG;QACpG,gGAAgG;QAChG,sDAAsD;QACtD,uDAAuD;IACzD,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE9B;;;;;;OAMG;IACH,MAAM,gBAAgB,GAAsB,OAAO,CAAC,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,cAAc,EAAE,2BAA2B,IAAI,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;IAC1F,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,6FAA6F;IAC7F,6FAA6F;IAC7F,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAExD,kGAAkG;IAClG,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,IAAI,yBAAyB,CAAC;IAEhG,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAiC,IAAI,IAAI,EACrE,CAAC,gBAAgB,CAAC,CACnB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;IAE5F;;;;;OAKG;IACH,4BAA4B,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,KAAK,EAAE,YAAY,IAAI,SAAS;QAChC,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,WAAW,CAAC,KAAK,EAAE,IAA2B,EAAE,EAAE;QAC/E,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,SAAS,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,KAAc,EAAsB,EAAE;YAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACvC,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,cAAc;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,8EAA8E;YAC9E,oHAAoH;QACtH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3E,iGAAiG;IACjG,oFAAoF;IACpF,sDAAsD;IACtD,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACrG,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,OAAO;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC3B,yFAAyF;gBACzF,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,EAAE,0BAA0B,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,uFAAuF;gBACvF,oFAAoF;gBACpF,sCAAsC;gBACtC,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAA4D,EAAE,CAAC,CAAC;oBAC1H,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC;oBACP,uFAAuF;oBACvF,yFAAyF;oBACzF,uFAAuF;oBACvF,gGAAgG;gBAClG,CAAC;YACH,CAAC;YACD,4FAA4F;YAC5F,6FAA6F;YAC7F,8FAA8F;QAChG,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3D,2FAA2F;IAC3F,gGAAgG;IAChG,2EAA2E;IAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACvG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC;gBACjE,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,UAAU;gBACvC,sGAAsG;gBACtG,qGAAqG;gBACrG,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC;YACH,uGAAuG;YACvG,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,gBAAgB;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;;gBAC5E,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gGAAgG;YAChG,kGAAkG;YAClG,8FAA8F;YAC9F,gEAAgE;YAChE,WAAW,CAAC,CAAC,EAAE,2CAA2C,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACzG,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,2FAA2F;YAC3F,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEzC,mFAAmF;IACnF,oFAAoF;IACpF,kFAAkF;IAClF,sBAAsB;IACtB,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAElE;;;;;;OAMG;IACH,MAAM,kBAAkB,GAAG,GAAoB,EAAE;QAC/C,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,IAAI,mBAAmB,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,oBAAoB,EAC5B,aAAa,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,EAAE;oBACZ,QAAQ,EAAE,EAAE;oBACZ,eAAe,EAAE,EAAE;iBACpB,EACD,QAAQ,EAAE,sBAAsB,EAChC,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;wBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;wBAC1C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;wBACzC,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;qBACzD;iBACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,KAAC,sBAAsB,IAAC,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,GAAI,GAC/G,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAClD,kFAAkF;YAClF,iFAAiF;YACjF,uFAAuF;YACvF,wEAAwE;YACxE,OAAO,CACL,KAAC,uBAAuB,IACtB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,QAAQ,EAAE,qBAAqB,EAC/B,CAAC,EAAE,CAAC,EACJ,KAAK,EAAE,KAAK,GACZ,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/C,qFAAqF;YACrF,2EAA2E;YAC3E,sFAAsF;YACtF,kFAAkF;YAClF,OAAO,CACL,KAAC,qBAAqB,IACpB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,CAAC,EAAE,CAAC,GACJ,CACH,CAAC;QACJ,CAAC;QAED,kFAAkF;QAClF,gFAAgF;QAChF,sFAAsF;QACtF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,KAAK,GAA6B;YACtC,SAAS,EAAE,EAAE,EAAE,6CAA6C;YAC5D,KAAK,EAAE,YAAY,IAAI,EAAE;YACzB,YAAY;YACZ,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW;YACxC,CAAC,EAAE,uBAAuB;SAC3B,CAAC;QAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;IACxC,CAAC,CAAC;IAEF,oFAAoF;IACpF,uFAAuF;IACvF,gFAAgF;IAChF,kDAAkD;IAClD,8FAA8F;IAC9F,6FAA6F;IAC7F,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IAC3E,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,GAAW,EACjE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAQ,IACtF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,GAAqB,GAC1F,IACL,CACJ,CAAC;IACJ,CAAC;IAED,qHAAqH;IACrH,sFAAsF;IACtF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,GAAW,EAClE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAAQ,IACvF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,oCAAoC;IACpC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAW,EAC/D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAQ,EAC3F,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CACL,cAAK,SAAS,EAAC,2CAA2C,YACxD,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,GACxB,CACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,SAAS,IAAI,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IACxF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,cAAc,CAAC,cAAc,KAAK,wBAAwB,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAAW,EAC9D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,GACvC,EACN,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,IACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAW,EACjD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAQ,EAC3E,cAAc,CAAC,gBAAgB,IAAI,CAClC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,cAAc,CAAC,gBAAgB,GAAQ,CACzF,EACA,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,mBAAmB,CAAC,CAAC,CAAC,CACrB,8BACE,KAAC,IAAI,IAAC,SAAS,EAAC,sDAAsD,YACnE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GACrC,EAGN,kBAAkB,EAAE,EAGpB,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChC,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EAErE,KAAC,oBAAoB,IACnB,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAoB,CAAC;gCACxE;;;;;;;mCAOG;gCACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,EAAE;oCACzD,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;oCAClF,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC;oCACxD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;oCACvC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;iCACvF,CAAC,EACF,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACzE,QAAQ,EAAE,oBAAoB,IAAI,WAAW,GAC7C,IACD,CACJ,IACA,CACJ,CAAC,CAAC,CAAC;YACF;;;;;;cAME;YACF,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,EAEA,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,oBAAoB,IAAI,WAAW,EAC7C,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,IACvF,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAyE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAAiD,qBAAqB,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useFormContext } from 'react-hook-form';\nimport { CorePresetNames, FrontendComponentType, UserAuthLabel, UserInvitationLabel } from '@wildo-ai/presets-components-models';\nimport {\n AuthNextStep,\n AuthMethod,\n AuthUtils,\n InvitationManagementMode,\n UserInvitationFormDtoSchema,\n type AuthenticationResponse,\n type AuthInvitationInfoResponse,\n type AvailableMethod,\n type PasswordPolicyRules,\n type UserInvitationFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { PasswordStrengthIndicator, DEFAULT_PASSWORD_POLICY } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport { CredentialUsernameAutofillField } from '~wildo-frontend-lib/components/auth/utils/CredentialUsernameAutofillField';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { resolveAuthMethodChoiceLabel } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { makeComponentLabelResolver } from '~wildo-frontend-lib/core/i18n/component-label-resolution.utils';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useError } from '~wildo-frontend-lib/core/errors/useError';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { extractAuthRedirectFromSearch, resolvePostAuthRedirect } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useMfaContinuationNavigation } from '~wildo-frontend-lib/components/auth/utils/useMfaContinuationNavigation';\nimport {\n resolvePasswordViolationsToLabels,\n} from '~wildo-frontend-lib/components/auth/utils/resolvePasswordViolationsToLabels';\nimport {\n AUTH_METHOD_COMPONENTS,\n type AuthMethodComponentProps,\n} from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\n/*\n First-factor methods the PUBLIC invitation-accept chooser knows how to render.\n \n The invitation-info endpoint returns whatever the org allows for a joining member,\n * but the chooser can only surface methods that are usable BEFORE the invitee has an\n * account/session:\n * - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms that drive\n * `acceptInvitation` (set a password / email a link / enroll a passkey). NOT the login\n * method components — those authenticate an EXISTING account, which an invitee lacks. In\n * particular the login magic-link (`magicLinkSend`) is ACTIVE-only and never accepts the\n * invite; the passkey login component authenticates an already-enrolled credential.\n * - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n * components, which are account-agnostic (full-page redirect) and consume the `INVITED`\n * membership via enterprise-SSO JIT / OAuth JIT (email match on the live membership, no token).\n \n Session-bound MFA methods (`SMS_OTP` / `EMAIL_OTP` / `TOTP`) are intentionally\n * excluded — they need a session the invitee does not have.\n /\nconst INVITATION_RENDERABLE_METHODS: ReadonlySet<AuthMethod> = new Set([\n AuthMethod.PASSWORD,\n AuthMethod.ORG_SAML,\n AuthMethod.ORG_OPENID_CONNECT,\n AuthMethod.EXTERNAL_OAUTH2,\n AuthMethod.MAGIC_LINK,\n AuthMethod.PASSKEY,\n]);\n\n\ninterface InvitationFormTemplateProps {\n invitationEmail?: string;\n /\n The effective (org-merged) password policy the parent resolved from the\n * invitation-info response — the SAME policy the backend accept endpoint enforces —\n * falling back to the app-level policy. Passed in (not read from `useResolvedAuthConfig`\n * here) so the strength indicator matches what the org actually requires.\n /\n passwordPolicy: PasswordPolicyRules;\n}\n\n/\n Password-method accept form body — first/last name + optional password with the\n * strength indicator + a hidden username field for password-manager autofill.\n \n Rendered only when `PASSWORD` is the active chooser method. Password is OPTIONAL\n * here (a passwordless accept creates the account and the user adds a credential\n * later); the enclosing chooser owns the method-choice hint, so this template no\n * longer renders a standalone \"password is optional\" aside.\n /\nconst InvitationFormTemplate: React.FC<InvitationFormTemplateProps> = ({\n invitationEmail,\n passwordPolicy,\n}) => {\n const { formState } = useFormContext();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key);\n\n if (!isReady) return null;\n\n return (\n <FormLayout>\n <CredentialUsernameAutofillField email={invitationEmail} />\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n <FormField name=\"password\" />\n <FormField name=\"confirmPassword\" />\n\n <PasswordStrengthIndicator fieldName=\"password\" policy={passwordPolicy} t={t} />\n\n {formState.errors.root && (\n <Alert variant=\"destructive\">\n <AlertDescription>{formState.errors.root.message}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={t(UserInvitationLabel.ACCEPT_INVITATION)}\n submittingLabel={t(UserInvitationLabel.ACCEPTING_INVITATION)}\n fullWidth\n />\n </FormLayout>\n );\n};\n\n/\n Body of the magic-link accept sub-form (first/last name + send button). Split out so it\n * can read `formState.errors.root` via `useFormContext` inside the `AutomatedForm` provider.\n /\nconst InvitationMagicLinkTemplate: React.FC<{\n invitationEmail?: string;\n t: (key: string) => string;\n tAuth: (key: string) => string;\n}> = ({ invitationEmail, t, tAuth }) => {\n const { formState } = useFormContext();\n return (\n <FormLayout>\n {invitationEmail && (\n <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n )}\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n\n {formState.errors.root && (\n <Alert variant=\"destructive\">\n <AlertDescription>{formState.errors.root.message}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n submittingLabel={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n fullWidth\n />\n </FormLayout>\n );\n};\n\n/\n Magic-link ACCEPT sub-form — the invitation-aware counterpart of the login\n * `MagicLinkAuthMethod`.\n \n The login component sends a login magic link via `magicLinkSend`, which never accepts\n * the invitation: `sendMagicLink` resolves users ACTIVE-only, so a not-yet-activated\n * (`PENDING_INVITATION`) invitee gets no email, and `verifyMagicLink` rejects any non-ACTIVE\n * user and never flips the INVITED membership. So it is NOT reused here.\n \n Instead this drives the purpose-built `acceptInvitation({ credentialMethod: MAGIC_LINK })`\n * endpoint, which ACTIVATES the invitee + flips the membership FIRST and only THEN mints +\n * emails the link — so the eventual `verifyMagicLink` click (now ACTIVE) establishes the\n * session. First/last name are collected because the accept DTO requires them (the invitee's\n * profile is seeded at acceptance). No session is issued (the parent switches to a terminal\n * \"check your email\" state); the session lands when the invitee clicks the emailed link.\n /\nconst InvitationMagicLinkForm: React.FC<{\n invitationEmail?: string;\n disabled?: boolean;\n onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n t: (key: string) => string;\n tAuth: (key: string) => string;\n}> = ({ invitationEmail, disabled, onSubmit, t, tAuth }) => {\n const formMethodsRef = useRef<FormMethods \| null>(null);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n // Only the name fields — reuse the accept form schema's first/last (with their autocomplete\n // decorators); the credential is the emailed link, not a password.\n const schema = useMemo(\n () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n [],\n );\n\n // On success the PARENT switches to the terminal \"check your email\" state — the accept consumed\n // the token + accepted the invite, so there is NO in-place \"sent\" / \"try another method\" state\n // (that would dead-end on the now-consumed token). Only errors are surfaced here.\n const handleSubmit = useCallback(async (data: { firstName?: string; lastName?: string }) => {\n formMethodsRef.current?.clearErrors('root');\n try {\n await onSubmit(data.firstName?.trim() \|\| undefined, data.lastName?.trim() \|\| undefined);\n } catch (e: unknown) {\n formMethodsRef.current?.setError('root', {\n type: 'server',\n message: toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)),\n });\n }\n }, [onSubmit, t, toUserFacingErrorMessage]);\n\n return (\n <AutomatedForm\n schema={schema}\n defaultValues={{ firstName: '', lastName: '' }}\n onSubmit={handleSubmit}\n validationMode={ValidationMode.ON_BLUR}\n disabled={disabled}\n onFormReady={(formMethods) => { formMethodsRef.current = formMethods; }}\n labels={{\n fields: {\n firstName: t(UserInvitationLabel.FIRST_NAME),\n lastName: t(UserInvitationLabel.LAST_NAME),\n },\n }}\n layoutTemplate={() => (\n <InvitationMagicLinkTemplate invitationEmail={invitationEmail} t={t} tAuth={tAuth} />\n )}\n />\n );\n};\n\n/\n Body of the passkey accept sub-form. The ceremony error is owned by the parent (the WebAuthn\n * flow runs outside the form), so it is passed in rather than read from `formState`.\n /\nconst InvitationPasskeyTemplate: React.FC<{\n invitationEmail?: string;\n error?: string \| null;\n t: (key: string) => string;\n}> = ({ invitationEmail, error, t }) => (\n <FormLayout>\n {invitationEmail && (\n <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n )}\n <Text className=\"text-sm text-muted-foreground text-center\">\n {t(UserInvitationLabel.PASSKEY_DESCRIPTION)}\n </Text>\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={t(UserInvitationLabel.PASSKEY_CREATE)}\n submittingLabel={t(UserInvitationLabel.PASSKEY_CREATING)}\n fullWidth\n />\n </FormLayout>\n);\n\n/\n Passkey ENROLL-at-accept sub-form (Phase 3). Collects the invitee's name (the accept DTO\n * requires it; the profile is seeded at acceptance), then hands off to the parent's `onSubmit`,\n * which drives `acceptInvitation({credentialMethod: PASSKEY})` — the invitation token bootstraps\n * the session and the response carries a WebAuthn registration challenge — runs the browser\n * ceremony (`startRegistration`), and completes it against the authenticated\n * `/auth/passkey/register/verify` route. Passkey enrollment is the GO-FORWARD credential, not\n * this session's authenticator, so a cancelled/failed ceremony is non-fatal (the invitee is\n * already signed in and can add a passkey later). Falls back to an informational message when the\n * browser has no WebAuthn support.\n /\nconst InvitationPasskeyForm: React.FC<{\n invitationEmail?: string;\n disabled?: boolean;\n error?: string \| null;\n onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n t: (key: string) => string;\n}> = ({ invitationEmail, disabled, error, onSubmit, t }) => {\n const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n const schema = useMemo(\n () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n [],\n );\n\n if (!isSupported) {\n return (\n <Alert>\n <AlertDescription>\n {t(UserInvitationLabel.PASSKEY_UNAVAILABLE_HINT)}\n </AlertDescription>\n </Alert>\n );\n }\n\n return (\n <AutomatedForm\n schema={schema}\n defaultValues={{ firstName: '', lastName: '' }}\n onSubmit={(data: { firstName?: string; lastName?: string }) =>\n onSubmit(data.firstName?.trim() \|\| undefined, data.lastName?.trim() \|\| undefined)}\n validationMode={ValidationMode.ON_BLUR}\n disabled={disabled}\n labels={{\n fields: {\n firstName: t(UserInvitationLabel.FIRST_NAME),\n lastName: t(UserInvitationLabel.LAST_NAME),\n },\n }}\n layoutTemplate={() => (\n <InvitationPasskeyTemplate invitationEmail={invitationEmail} error={error} t={t} />\n )}\n />\n );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserInvitation_DefaultProps {\n token?: string;\n email?: string;\n}\n\nexport const PublicLayoutPreset_UserInvitation_Default = ({\n token,\n email,\n}: PublicLayoutPreset_UserInvitation_DefaultProps): React.JSX.Element => {\n const { auth, acceptInvitation } = useAuthSession();\n // Central error handler — the password/passkey paths reach it via `acceptInvitation` (the context\n // calls `handleError` in its catch); the magic-link path calls the HTTP client directly, so it wires\n // `handleError` itself (below) to keep central logging + frontend-action execution symmetric.\n const { handleError } = useError();\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n const resolvedAuth = useResolvedAuthConfig();\n\n // Load BOTH label namespaces: the invitation chrome (`USER_INVITATION`) plus the\n // login method components' namespace (`USER_AUTH`) — the reused SAML/OIDC/OAuth2/\n // magic-link components label themselves from `UserAuthLabel.`, and we hand them\n // `tAuth`. The array is memoized so `useI18n` doesn't re-request keys every render.\n const i18nComponents = useMemo(\n () => [\n FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n ],\n [],\n );\n const { tComponent, isReady } = useI18n({ component: i18nComponents });\n const location = useLocation();\n const formMethodsRef = useRef<FormMethods \| null>(null);\n const [isDeclining, setIsDeclining] = useState(false);\n const [declined, setDeclined] = useState(false);\n const [declineError, setDeclineError] = useState<string \| null>(null);\n // Passkey enroll-at-accept runs a WebAuthn ceremony AFTER the session is issued. While it runs,\n // the `auth.accessToken` guard below is suppressed so the component isn't unmounted mid-ceremony.\n const [passkeyCeremonyInProgress, setPasskeyCeremonyInProgress] = useState(false);\n const [passkeyError, setPasskeyError] = useState<string \| null>(null);\n // Magic-link accept issues NO session — it emails a link + accepts the invite (consuming the\n // token). On success we switch to a TERMINAL \"check your email\" state rather than leaving the\n // chooser visible (whose other methods + decline would now dead-end on the consumed token).\n const [magicLinkSent, setMagicLinkSent] = useState(false);\n // #1158: accepted without a session; the invitee's policy requires signing in separately.\n const [signInRequired, setSignInRequired] = useState(false);\n // In-flight flag for the magic-link accept (which bypasses the context's `auth.isLoading`), used\n // to gate the decline / alternative-method buttons so a click can't race the single-use token.\n const [magicLinkSubmitting, setMagicLinkSubmitting] = useState(false);\n\n // Invitation-info discovery (SSO/SCIM-aware method set) keyed by the token.\n const [invitationInfo, setInvitationInfo] = useState<AuthInvitationInfoResponse \| null>(null);\n const [infoLoading, setInfoLoading] = useState(true);\n const [infoError, setInfoError] = useState<string \| null>(null);\n // User-selected active method; `null` → fall back to the display-ordered default.\n const [activeMethod, setActiveMethod] = useState<AuthMethod \| null>(null);\n\n // Memoized on `tComponent` so `t`/`tAuth` keep a STABLE identity across renders — the schema\n // (`invitationFormSchema`) and submit callbacks depend on them, and an unstable `t` would defeat\n // those memos and churn the sub-form props (risking focus loss on a mid-entry parent re-render).\n const t = useCallback((key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key), [tComponent]);\n // `tAuth` keeps `tComponent`'s key-path-on-miss behaviour, because THIS component\n // renders its result directly at five sites with no fallback (the magic-link\n // button, the \"link sent\" heading and body, the methods divider, the per-method\n // label). Normalizing it to `''` would turn a missing label into an invisible\n // button and an empty heading — strictly worse than a visible key path.\n const tAuth = useCallback(\n (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key),\n [tComponent],\n );\n\n // The auth-method prop contract's resolver, built through the shared seam so the\n // `USER_AUTH` namespace binding lives in one place. Same shape as `Auth_MfaChallenge`.\n const tAuthForMethodComponent = useMemo(\n () => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH),\n [tComponent],\n );\n const loginPath = CommonRoutePaths.login;\n\n // Where an already-authenticated invitee is forwarded — including one returning from\n // an SSO/OAuth JIT round-trip. Mirrors `Auth_Main`: the SSO/OAuth method returns to\n // this (auth) page, `Auth_AuthCallback` lands here after the code exchange, and this\n // resolves the post-auth destination (a `redirect` param if present, else app home).\n const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);\n const authRedirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);\n\n // The invitation-info response is authoritative for the invitee email; fall back to\n // the URL `email` param until it resolves.\n const inviteeEmail = invitationInfo?.inviteeEmail ?? email;\n\n // Prefer the org-merged policy the endpoint resolved (the SAME one the backend accept\n // validates against) so the strength indicator + client pre-check match the org's real\n // requirements; fall back to the app-level policy until invitation-info resolves / when\n // the endpoint couldn't resolve it.\n const passwordPolicy: PasswordPolicyRules = useMemo(\n () => invitationInfo?.passwordPolicy ?? resolvedAuth.passwordPolicy ?? DEFAULT_PASSWORD_POLICY,\n [invitationInfo?.passwordPolicy, resolvedAuth.passwordPolicy],\n );\n\n const invitationFormSchema = useMemo(() => UserInvitationFormDtoSchema.refine(\n (data) => !data.password \|\| data.password === data.confirmPassword,\n { message: t(UserInvitationLabel.PASSWORD_MISMATCH), path: ['confirmPassword'] },\n ), [t]);\n\n const handleFormReady = useCallback((formMethods: FormMethods) => {\n formMethodsRef.current = formMethods;\n }, []);\n\n // Fetch invitation-info once per token. The endpoint reads the token WITHOUT\n // consuming it, so a consumed/expired/invalid token surfaces as an error state.\n useEffect(() => {\n // Only an UNauthenticated invitee needs method discovery. If already authenticated\n // (e.g. returning from an SSO/OAuth JIT round-trip that consumed the token), skip\n // the fetch — the `accessToken` guard below forwards to the app, and hitting the\n // now-consumed token would only 4xx.\n if (!token \|\| auth.accessToken) {\n setInfoLoading(false);\n return;\n }\n let cancelled = false;\n setInfoLoading(true);\n setInfoError(null);\n getManualCallsHttpClient()\n .getInvitationInfo(token)\n .then((info) => {\n if (!cancelled) setInvitationInfo(info);\n })\n .catch((e: unknown) => {\n if (!cancelled) setInfoError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n })\n .finally(() => {\n if (!cancelled) setInfoLoading(false);\n });\n return () => { cancelled = true; };\n // `t` is intentionally omitted from deps. It is memoized on the i18n component bundle (stable\n // across ordinary renders), so omitting it does NOT capture a per-render-stale closure; it is\n // omitted so a later i18n-bundle reload cannot re-trigger this one-shot discovery fetch. A rejected\n // fetch therefore labels the error with the `t` bound when the effect first ran — an acceptable\n // fallback in the narrow window before i18n is ready.\n // eslint-disable-next-line react-hooks/exhaustive-deps\n }, [token, auth.accessToken]);\n\n /\n Renderable first-factor methods from the org's policy, in the order the server sent (#1218).\n \n The invitation-info endpoint builds this list through the SAME `buildFirstFactorMethodsForPolicy` the sign-in\n * page's `identify` uses, which orders by `AUTH_METHOD_PRECEDENCE`. That is why this page can stop re-sorting and\n * why it inherits the fix rather than needing its own: filtering preserves order.\n /\n const availableMethods: AvailableMethod[] = useMemo(() => {\n const methods = invitationInfo?.availableFirstFactorMethods ?? [];\n return methods.filter((m) => INVITATION_RENDERABLE_METHODS.has(m.method as AuthMethod));\n }, [invitationInfo]);\n\n // Every renderable method is actionable (PASSKEY now enrolls at accept — Phase 3). The empty\n // state (route to sign-in) is reserved for an org exposing NO renderable first-factor method\n // (e.g. an SSO-only org whose per-connection lookup did not resolve).\n const hasActionableMethod = availableMethods.length > 0;\n\n // Any accept in flight — gates the decline / alternative-method buttons so a click can't race the\n // single-use token. Password sets `auth.isLoading` via the context; magic-link + passkey run\n // outside it (`magicLinkSubmitting` / `passkeyCeremonyInProgress`).\n const methodSubmitInFlight = auth.isLoading \|\| magicLinkSubmitting \|\| passkeyCeremonyInProgress;\n\n // Default to the first renderable method in display order.\n const defaultMethod = useMemo(\n () => (availableMethods[0]?.method as AuthMethod \| undefined) ?? null,\n [availableMethods],\n );\n\n const currentActiveMethod = activeMethod ?? defaultMethod;\n const alternativeMethods = availableMethods.filter((m) => m.method !== currentActiveMethod);\n\n /\n * The routing every auth screen shares (#972): nothing usable → the enrollment gate, which for an\n * INVITATION session completes it and signs the invitee in (#603); something usable → the challenge.\n * This screen already honours a `redirect` param for its post-auth destination, so the same target\n * rides the MFA detour — the inline copy this replaced dropped it there.\n /\n useMfaContinuationNavigation({\n mfaRequired: auth.mfaRequired,\n mfaSessionId: auth.mfaSessionId,\n usableSecondFactorMethods: auth.usableSecondFactorMethods,\n email: inviteeEmail \|\| undefined,\n authRedirectTarget,\n });\n\n const handleInvitationSubmit = useCallback(async (data: UserInvitationFormDto) => {\n formMethodsRef.current?.clearErrors('root');\n\n if (data.password) {\n const policyResult = AuthUtils.validatePasswordAgainstPolicy(data.password, passwordPolicy);\n if (!policyResult.valid) {\n formMethodsRef.current?.setError('root', {\n type: 'policy',\n message: resolvePasswordViolationsToLabels(policyResult.violations, t, passwordPolicy).join('. '),\n });\n return;\n }\n }\n\n const normalizeText = (value?: string): string \| undefined => {\n const trimmed = value?.trim();\n return trimmed ? trimmed : undefined;\n };\n\n try {\n const result = await acceptInvitation({\n invitationToken: token!,\n firstName: normalizeText(data.firstName),\n lastName: normalizeText(data.lastName),\n password: data.password \|\| undefined,\n });\n if (result?.signInRequired) setSignInRequired(true);\n // Session issued → the `auth.accessToken` guard forwards to the app (honoring\n // `postAuthRedirect`); MFA-gated → the `mfaRequired` effect routes; no session (#1158) → the sign-in state renders.\n } catch (e: unknown) {\n formMethodsRef.current?.setError('root', {\n type: 'server',\n message: toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)),\n });\n }\n }, [acceptInvitation, passwordPolicy, t, token, toUserFacingErrorMessage]);\n\n // Passkey enroll-at-accept: accept (bootstraps the session from the invitation token + returns a\n // WebAuthn challenge) → run the browser ceremony → verify against the authenticated\n // register-verify route. See `InvitationPasskeyForm`.\n const handlePasskeySubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n setPasskeyError(null);\n setPasskeyCeremonyInProgress(true);\n try {\n const result = await acceptInvitation({\n invitationToken: token!,\n firstName,\n lastName,\n credentialMethod: AuthMethod.PASSKEY,\n });\n if (result?.signInRequired) {\n // #1158: no session, so there is no ceremony to run; the terminal sign-in state renders.\n setSignInRequired(true);\n return;\n }\n const options = result?.passkeyRegistrationOptions;\n if (options) {\n // Session issued + a challenge. Enrollment failure is NON-FATAL — the invitation token\n // already bootstrapped the session, so the invitee proceeds signed in and can add a\n // passkey later in security settings.\n try {\n const credential = await startRegistration({ optionsJSON: options as unknown as PublicKeyCredentialCreationOptionsJSON });\n await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential });\n } catch {\n // Swallow — the session is already issued, so a cancelled/failed ceremony (or the rare\n // cross-tab logout that clears the session mid-prompt and 401s the verify) is non-fatal:\n // releasing the flag hands control to the `accessToken` guard, which forwards when the\n // session survived and otherwise leaves the invitee on the accept screen (benign — they retry).\n }\n }\n // Session path: releasing the flag (finally) → the `auth.accessToken` guard forwards to the\n // app. MFA-gated path (no options): `acceptInvitation` set `mfaRequired` and the mfaRequired\n // effect routes to enrollment (the invitee enrolls the passkey there via the existing route).\n } catch (e: unknown) {\n setPasskeyError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n } finally {\n setPasskeyCeremonyInProgress(false);\n }\n }, [acceptInvitation, token, t, toUserFacingErrorMessage]);\n\n // Magic-link accept: emails a link + accepts the invite (via the HTTP client directly — no\n // session to manage, like the login magic-link). On success the render switches to the terminal\n // \"check your email\" state; errors propagate to the sub-form's root error.\n const handleMagicLinkSubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n setMagicLinkSubmitting(true);\n try {\n const response = await getManualCallsHttpClient().acceptInvitation({\n invitationToken: token!,\n firstName,\n lastName,\n credentialMethod: AuthMethod.MAGIC_LINK,\n // The emailed link is opened on another page, so the deep link must travel inside it (#1014). Already\n // same-origin: `extractAuthRedirectFromSearch` sanitised it, and the client and backend check again.\n redirect: authRedirectTarget,\n });\n // #1158: an accept that issued no session sends no link either; say so rather than \"check your email\".\n if (response.nextStep === AuthNextStep.SIGN_IN_REQUIRED) setSignInRequired(true);\n else setMagicLinkSent(true);\n } catch (e: any) {\n // Route through the central error handler (logging + frontend-action execution, e.g. the global\n // lockout UI) so a magic-link failure is handled identically to the password/passkey paths, which\n // reach `handleError` via `acceptInvitation`. Then RE-THROW so the sub-form's own catch still\n // renders the inline root error (the UX surface the user sees).\n handleError(e, 'Invitation acceptance failed (magic link)', { credentialMethod: AuthMethod.MAGIC_LINK });\n throw e;\n } finally {\n // The flag just releases the gate; the inline root error is owned by the sub-form's catch.\n setMagicLinkSubmitting(false);\n }\n }, [token, handleError, authRedirectTarget]);\n\n const handleDecline = useCallback(async () => {\n setDeclineError(null);\n if (!token) {\n setDeclineError(t(UserInvitationLabel.INVALID_LINK));\n return;\n }\n\n setIsDeclining(true);\n try {\n await getManualCallsHttpClient().rejectInvitation({ invitationToken: token });\n setDeclined(true);\n } catch (e: unknown) {\n setDeclineError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n } finally {\n setIsDeclining(false);\n }\n }, [t, token, toUserFacingErrorMessage]);\n\n // The reused method components self-handle their outcome (SSO/OAuth do a full-page\n // redirect; magic-link shows its own \"sent\" state), so there is nothing to complete\n // here. On the rare in-place success the `auth.accessToken` guard below lands the\n // invitee in the app.\n const handleMethodSuccess = useCallback((_response: AuthenticationResponse) => {}, []);\n const handleMethodError = useCallback((_error: string) => {}, []);\n\n /\n Render the active first-factor method:\n * - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms\n * (special-cased; never the login flow).\n * - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n * component from the registry.\n /\n const renderActiveMethod = (): React.ReactNode => {\n if (!currentActiveMethod) return null;\n const methodConfig = availableMethods.find((m) => m.method === currentActiveMethod);\n if (!methodConfig) return null;\n\n if (currentActiveMethod === AuthMethod.PASSWORD) {\n return (\n <AutomatedForm\n schema={invitationFormSchema}\n defaultValues={{\n firstName: '',\n lastName: '',\n password: '',\n confirmPassword: '',\n }}\n onSubmit={handleInvitationSubmit}\n validationMode={ValidationMode.ON_BLUR}\n disabled={auth.isLoading \|\| isDeclining}\n onFormReady={handleFormReady}\n labels={{\n fields: {\n firstName: t(UserInvitationLabel.FIRST_NAME),\n lastName: t(UserInvitationLabel.LAST_NAME),\n password: t(UserInvitationLabel.PASSWORD),\n confirmPassword: t(UserInvitationLabel.CONFIRM_PASSWORD),\n },\n }}\n layoutTemplate={() => <InvitationFormTemplate invitationEmail={inviteeEmail} passwordPolicy={passwordPolicy} />}\n />\n );\n }\n\n if (currentActiveMethod === AuthMethod.MAGIC_LINK) {\n // NOT the reused login `MagicLinkAuthMethod` (which sends a LOGIN magic link that\n // never accepts the invite and rejects a not-yet-ACTIVE invitee at verify). This\n // drives `acceptInvitation({ credentialMethod: MAGIC_LINK })`, which activates + flips\n // the membership before emailing the link. See `handleMagicLinkSubmit`.\n return (\n <InvitationMagicLinkForm\n invitationEmail={inviteeEmail}\n disabled={auth.isLoading \|\| isDeclining}\n onSubmit={handleMagicLinkSubmit}\n t={t}\n tAuth={tAuth}\n />\n );\n }\n\n if (currentActiveMethod === AuthMethod.PASSKEY) {\n // Passkey ENROLL-at-accept (Phase 3): the login `PasskeyAuthMethod` authenticates an\n // EXISTING credential, so it is NOT reused. `InvitationPasskeyForm` drives\n // `acceptInvitation({credentialMethod: PASSKEY})` (bootstraps the session + returns a\n // WebAuthn challenge) then runs the ceremony + verify. See `handlePasskeySubmit`.\n return (\n <InvitationPasskeyForm\n invitationEmail={inviteeEmail}\n disabled={auth.isLoading \|\| isDeclining}\n error={passkeyError}\n onSubmit={handlePasskeySubmit}\n t={t}\n />\n );\n }\n\n // ORG_SAML / ORG_OPENID_CONNECT / EXTERNAL_OAUTH2 — reuse the shared login method\n // components. They are account-agnostic and self-wire their own hooks/redirects\n // (full-page IdP redirect / OAuth JIT, which consume the INVITED membership); we only\n // supply the invitee email + org method config. (PASSWORD, MAGIC_LINK, and PASSKEY are\n // special-cased above — they need invitation-specific accept wiring, not login reuse.)\n const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];\n if (!MethodComponent) return null;\n\n const props: AuthMethodComponentProps = {\n sessionId: '', // no session for a not-yet-activated invitee\n email: inviteeEmail ?? '',\n methodConfig,\n onSuccess: handleMethodSuccess,\n onError: handleMethodError,\n factorLevel: 'first',\n isLoading: auth.isLoading \|\| isDeclining,\n t: tAuthForMethodComponent,\n };\n\n return <MethodComponent {...props} />;\n };\n\n // Already authenticated — including returning from an SSO/OAuth JIT round-trip that\n // consumed the invite — so forward the invitee into the app rather than re-showing the\n // accept screen (mirrors `Auth_Main`). Guards against an already-signed-in user\n // accepting a token minted for a different email.\n // EXCEPTION: during passkey enroll-at-accept the token is issued BEFORE the WebAuthn ceremony\n // runs, so suppress the forward until the ceremony finishes (else the component unmounts and\n // the browser passkey prompt is cancelled); `handlePasskeySubmit` releases the flag when done.\n // Ordered BEFORE the `!isReady` i18n gate (like `Auth_AuthCallback`): the `<Navigate>` renders no\n // labels, so a slow/failed label load must not block forwarding an already-authenticated invitee.\n if (auth.accessToken && !passkeyCeremonyInProgress) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!isReady) return null;\n\n if (!token) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.INVALID_LINK)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n if (declined) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.DECLINE_SUCCESS_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.DECLINE_SUCCESS_MESSAGE)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.CONTINUE_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // Accepted without a session (#1158): the invitee's policy disables the email-possession sign-in the invitation link\n // amounts to. Terminal: the membership exists, and they continue on the sign-in page.\n if (signInRequired) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.SIGN_IN_REQUIRED_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SIGN_IN_REQUIRED_MESSAGE)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // Magic-link accepted — the invite is consumed and a sign-in link was emailed. Terminal state:\n // the invitee finishes by clicking the emailed link (no chooser/decline — the token is gone, so\n // any other method would only 4xx).\n if (magicLinkSent) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{tAuth(UserAuthLabel.MAGIC_LINK_SENT_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{tAuth(UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION)}</Text>\n {inviteeEmail && (\n <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n )}\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n if (infoLoading) {\n return (\n <div className=\"flex items-center justify-center py-group\">\n <LoadingSpinner size={40} />\n </div>\n );\n }\n\n if (infoError \|\| !invitationInfo) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{infoError \|\| t(UserInvitationLabel.INVALID_LINK)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // SCIM-managed org → informational only, NO password/method form (locked decision:\n // the directory is the identity authority, so no local credential is set here).\n if (invitationInfo.managementMode === InvitationManagementMode.SCIM) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.SCIM_MANAGED_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">\n {t(UserInvitationLabel.SCIM_MANAGED_MESSAGE)}\n </Text>\n {inviteeEmail && (\n <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n )}\n </div>\n\n {declineError && (\n <Alert variant=\"destructive\" className=\"mb-group\">\n <AlertDescription>{declineError}</AlertDescription>\n </Alert>\n )}\n\n <div className=\"text-center mt-group space-y-item-sm\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={handleDecline}\n disabled={isDeclining}\n className=\"w-full\"\n >\n {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n </Button>\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // OPEN / SSO org → the method chooser.\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SUB_TITLE)}</Text>\n {invitationInfo.organizationName && (\n <Text className=\"text-sm text-muted-foreground\">{invitationInfo.organizationName}</Text>\n )}\n {inviteeEmail && (\n <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n )}\n </div>\n\n {hasActionableMethod ? (\n <>\n <Text className=\"text-sm text-muted-foreground text-center mb-element\">\n {t(UserInvitationLabel.METHOD_CHOICE_HINT)}\n </Text>\n\n {/ Active first-factor method (password form / magic-link form / passkey form / reused SSO·OAuth component). /}\n {renderActiveMethod()}\n\n {/ Alternative methods — buttons that switch the active method. /}\n {alternativeMethods.length > 0 && (\n <>\n <LabeledDivider label={tAuth(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n\n <AuthMethodChoiceList\n methods={alternativeMethods.map((method) => method.method as AuthMethod)}\n /\n * The descriptor names an enterprise connection, so an invitee choosing their\n * organization's provider sees ITS name rather than \"Organization sign-in\".\n \n No `socialProviders`: this screen configures no social buttons of its own, and the\n * resolver declines to name a provider it cannot resolve rather than printing a raw\n * `providerRef` — so a social alternative keeps the generic kind here, deliberately.\n /\n labelFor={(method) => resolveAuthMethodChoiceLabel(method, {\n offeredMethod: alternativeMethods.find((candidate) => candidate.method === method),\n continueWithTemplate: tAuth(UserAuthLabel.CONTINUE_WITH),\n translateLabel: (label) => tAuth(label),\n resolveSocialProviderLabel: (provider) => provider.displayName ?? provider.providerRef,\n })}\n onSelect={(method) => { setActiveMethod(method); setPasskeyError(null); }}\n disabled={methodSubmitInFlight \|\| isDeclining}\n />\n </>\n )}\n </>\n ) : (\n /\n No renderable first-factor method on this screen — a valid state, not an error. The\n common case is an SSO-only org whose invitee arrives before directory provisioning: the\n token-keyed endpoint omits ORG_SAML/ORG_OPENID_CONNECT when no per-connection lookup\n resolved, yielding an empty set with mode OPEN. Route the invitee to the sign-in page,\n where email→domain SSO resolution works and the enterprise / OAuth JIT consumes the invite.\n */\n <Alert>\n <AlertDescription>\n {t(UserInvitationLabel.NO_METHOD_AVAILABLE_HINT)}\n </AlertDescription>\n </Alert>\n )}\n\n {declineError && (\n <Alert variant=\"destructive\" className=\"mt-group\">\n <AlertDescription>{declineError}</AlertDescription>\n </Alert>\n )}\n\n <div className=\"text-center mt-group space-y-item-sm\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={handleDecline}\n disabled={methodSubmitInFlight \|\| isDeclining}\n className=\"w-full\"\n >\n {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n </Button>\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n};\n\nexport function Auth_Invitation({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserInvitation_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_UserInvitation_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, 'Auth_Invitation')(preset);\n return <Component {...props} />;\n}\n"]}
1	+ {"version":3,"file":"Auth_Invitation.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Invitation.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACjI,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,wBAAwB,EACxB,2BAA2B,GAM5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AACzI,OAAO,EAAE,+BAA+B,EAAE,MAAM,2EAA2E,CAAC;AAC5H,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gEAAgE,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAC7H,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,gEAAgE,CAAC;AACxI,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EACL,iCAAiC,GAClC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EACL,sBAAsB,GAEvB,MAAM,oEAAoE,CAAC;AAG5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAE1H;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,6BAA6B,GAA4B,IAAI,GAAG,CAAC;IACrE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,OAAO;CACnB,CAAC,CAAC;AAcH;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAA0C,CAAC,EACrE,eAAe,EACf,cAAc,GACf,EAAE,EAAE;IACH,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,8BAA8B;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAEjG,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO,CACL,MAAC,UAAU,eACT,KAAC,+BAA+B,IAAC,KAAK,EAAE,eAAe,GAAI,EAC3D,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,iBAAiB,GAAG,EAEpC,KAAC,yBAAyB,IAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAI,EAE/E,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAC/C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,EAC5D,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,2BAA2B,GAI5B,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,OAAO,CACL,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EAC3C,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EACrD,SAAS,SACT,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,uBAAuB,GAMxB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IACzD,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAE7D,4FAA4F;IAC5F,mEAAmE;IACnE,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,gGAAgG;IAChG,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,IAA+C,EAAE,EAAE;QACzF,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE5C,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,EACvE,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,2BAA2B,IAAC,eAAe,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,GAAI,CACtF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,yBAAyB,GAI1B,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CACtC,MAAC,UAAU,eACR,eAAe,IAAI,CAClB,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YAAE,eAAe,GAAQ,CACrF,EACD,KAAC,IAAI,IAAC,SAAS,EAAC,2CAA2C,YACxD,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,GACtC,EACP,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAE5B,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,KAAK,GAAoB,GACtC,CACT,EAED,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAC5C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,EACxD,SAAS,SACT,IACS,CACd,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAMtB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;IACzD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC3E,EAAE,CACH,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CACL,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9C,QAAQ,EAAE,CAAC,IAA+C,EAAE,EAAE,CAC5D,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,EACnF,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;aAC3C;SACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,CACpB,KAAC,yBAAyB,IAAC,eAAe,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,GAAI,CACpF,GACD,CACH,CAAC;AACJ,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,EACxD,KAAK,EACL,KAAK,GAC0C,EAAqB,EAAE;IACtE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,CAAC;IACpD,kGAAkG;IAClG,qGAAqG;IACrG,8FAA8F;IAC9F,MAAM,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;IACnC,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAE7C,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,oFAAoF;IACpF,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC;QACJ,qBAAqB,CAAC,8BAA8B;QACpD,qBAAqB,CAAC,wBAAwB;KAC/C,EACD,EAAE,CACH,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,gGAAgG;IAChG,kGAAkG;IAClG,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,6FAA6F;IAC7F,8FAA8F;IAC9F,4FAA4F;IAC5F,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,0FAA0F;IAC1F,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,iGAAiG;IACjG,+FAA+F;IAC/F,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtE,4EAA4E;IAC5E,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoC,IAAI,CAAC,CAAC;IAC9F,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAChE,kFAAkF;IAClF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAE1E,6FAA6F;IAC7F,iGAAiG;IACjG,iGAAiG;IACjG,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5H,kFAAkF;IAClF,6EAA6E;IAC7E,gFAAgF;IAChF,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAChF,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,iFAAiF;IACjF,uFAAuF;IACvF,MAAM,uBAAuB,GAAG,OAAO,CACrC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC5F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC;IAEzC,qFAAqF;IACrF,oFAAoF;IACpF,qFAAqF;IACrF,qFAAqF;IACrF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5G,oFAAoF;IACpF,2CAA2C;IAC3C,MAAM,YAAY,GAAG,cAAc,EAAE,YAAY,IAAI,KAAK,CAAC;IAE3D,sFAAsF;IACtF,uFAAuF;IACvF,wFAAwF;IACxF,oCAAoC;IACpC,MAAM,cAAc,GAAwB,OAAO,CACjD,GAAG,EAAE,CAAC,cAAc,EAAE,cAAc,IAAI,YAAY,CAAC,cAAc,IAAI,uBAAuB,EAC9F,CAAC,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,CAC9D,CAAC;IAEF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAC3E,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAClE,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CACjF,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IACvC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,6EAA6E;IAC7E,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE;QACb,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,qCAAqC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,wBAAwB,EAAE;aACvB,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,SAAS;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,8FAA8F;QAC9F,8FAA8F;QAC9F,oGAAoG;QACpG,gGAAgG;QAChG,sDAAsD;QACtD,uDAAuD;IACzD,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE9B;;;;;;OAMG;IACH,MAAM,gBAAgB,GAAsB,OAAO,CAAC,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,cAAc,EAAE,2BAA2B,IAAI,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC;IAC1F,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,6FAA6F;IAC7F,6FAA6F;IAC7F,sEAAsE;IACtE,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAExD,kGAAkG;IAClG,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,IAAI,yBAAyB,CAAC;IAEhG,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAiC,IAAI,IAAI,EACrE,CAAC,gBAAgB,CAAC,CACnB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,IAAI,aAAa,CAAC;IAC1D,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;IAE5F;;;;;OAKG;IACH,4BAA4B,CAAC;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,KAAK,EAAE,YAAY,IAAI,SAAS;QAChC,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,WAAW,CAAC,KAAK,EAAE,IAA2B,EAAE,EAAE;QAC/E,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,SAAS,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,KAAc,EAAsB,EAAE;YAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACvC,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;gBACxC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,cAAc;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,8EAA8E;YAC9E,oHAAoH;QACtH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACvC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3E,iGAAiG;IACjG,oFAAoF;IACpF,sDAAsD;IACtD,MAAM,mBAAmB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACrG,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;gBACpC,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,OAAO;aACrC,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC3B,yFAAyF;gBACzF,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,EAAE,0BAA0B,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,uFAAuF;gBACvF,oFAAoF;gBACpF,sCAAsC;gBACtC,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,OAA4D,EAAE,CAAC,CAAC;oBAC1H,MAAM,wBAAwB,EAAE,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC;oBACP,uFAAuF;oBACvF,yFAAyF;oBACzF,uFAAuF;oBACvF,gGAAgG;gBAClG,CAAC;YACH,CAAC;YACD,4FAA4F;YAC5F,6FAA6F;YAC7F,8FAA8F;QAChG,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAE3D,2FAA2F;IAC3F,gGAAgG;IAChG,2EAA2E;IAC3E,MAAM,qBAAqB,GAAG,WAAW,CAAC,KAAK,EAAE,SAAkB,EAAE,QAAiB,EAAiB,EAAE;QACvG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC;gBACjE,eAAe,EAAE,KAAM;gBACvB,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,UAAU,CAAC,UAAU;gBACvC,sGAAsG;gBACtG,qGAAqG;gBACrG,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC;YACH,uGAAuG;YACvG,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,gBAAgB;gBAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;;gBAC5E,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gGAAgG;YAChG,kGAAkG;YAClG,8FAA8F;YAC9F,gEAAgE;YAChE,WAAW,CAAC,CAAC,EAAE,2CAA2C,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YACzG,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,2FAA2F;YAC3F,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAEzC,mFAAmF;IACnF,oFAAoF;IACpF,kFAAkF;IAClF,sBAAsB;IACtB,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,SAAiC,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,MAAc,EAAE,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAElE;;;;;;OAMG;IACH,MAAM,kBAAkB,GAAG,GAAoB,EAAE;QAC/C,IAAI,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,IAAI,mBAAmB,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,CACL,KAAC,aAAa,IACZ,MAAM,EAAE,oBAAoB,EAC5B,aAAa,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,EAAE;oBACZ,QAAQ,EAAE,EAAE;oBACZ,eAAe,EAAE,EAAE;iBACpB,EACD,QAAQ,EAAE,sBAAsB,EAChC,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC;wBAC5C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;wBAC1C,QAAQ,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;wBACzC,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;qBACzD;iBACF,EACD,cAAc,EAAE,GAAG,EAAE,CAAC,KAAC,sBAAsB,IAAC,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,GAAI,GAC/G,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAClD,kFAAkF;YAClF,iFAAiF;YACjF,uFAAuF;YACvF,wEAAwE;YACxE,OAAO,CACL,KAAC,uBAAuB,IACtB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,QAAQ,EAAE,qBAAqB,EAC/B,CAAC,EAAE,CAAC,EACJ,KAAK,EAAE,KAAK,GACZ,CACH,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/C,qFAAqF;YACrF,2EAA2E;YAC3E,sFAAsF;YACtF,kFAAkF;YAClF,OAAO,CACL,KAAC,qBAAqB,IACpB,eAAe,EAAE,YAAY,EAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW,EACvC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,CAAC,EAAE,CAAC,GACJ,CACH,CAAC;QACJ,CAAC;QAED,kFAAkF;QAClF,gFAAgF;QAChF,sFAAsF;QACtF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,eAAe,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,KAAK,GAA6B;YACtC,SAAS,EAAE,EAAE,EAAE,6CAA6C;YAC5D,KAAK,EAAE,YAAY,IAAI,EAAE;YACzB,YAAY;YACZ,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,WAAW;YACxC,CAAC,EAAE,uBAAuB;SAC3B,CAAC;QAEF,OAAO,KAAC,eAAe,OAAK,KAAK,GAAI,CAAC;IACxC,CAAC,CAAC;IAEF,oFAAoF;IACpF,uFAAuF;IACvF,gFAAgF;IAChF,kDAAkD;IAClD,8FAA8F;IAC9F,6FAA6F;IAC7F,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IAC3E,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,GAAW,EACjE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,GAAQ,IACtF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,GAAqB,GAC1F,IACL,CACJ,CAAC;IACJ,CAAC;IAED,qHAAqH;IACrH,sFAAsF;IACtF,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,GAAW,EAClE,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAAQ,IACvF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,gGAAgG;IAChG,oCAAoC;IACpC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAW,EAC/D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAQ,EAC3F,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CACL,cAAK,SAAS,EAAC,2CAA2C,YACxD,KAAC,cAAc,IAAC,IAAI,EAAE,EAAE,GAAI,GACxB,CACP,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,GAAW,EACvD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,SAAS,IAAI,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAQ,IACxF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,GACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,cAAc,CAAC,cAAc,KAAK,wBAAwB,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAAW,EAC9D,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAC/B,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,GACvC,EACN,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,IACvF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAW,EACjD,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAQ,EAC3E,cAAc,CAAC,gBAAgB,IAAI,CAClC,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,cAAc,CAAC,gBAAgB,GAAQ,CACzF,EACA,YAAY,IAAI,CACf,KAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,YAAE,YAAY,GAAQ,CACtE,IACG,EAEL,mBAAmB,CAAC,CAAC,CAAC,CACrB,8BACE,KAAC,IAAI,IAAC,SAAS,EAAC,sDAAsD,YACnE,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GACrC,EAGN,kBAAkB,EAAE,EAGpB,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChC,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EAErE,KAAC,oBAAoB,IACnB,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAoB,CAAC;gCACxE;;;;;;;mCAOG;gCACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,EAAE;oCACzD,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;oCAClF,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC;oCACxD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;oCACvC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;iCACvF,CAAC,EACF,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACzE,QAAQ,EAAE,oBAAoB,IAAI,WAAW,GAC7C,IACD,CACJ,IACA,CACJ,CAAC,CAAC,CAAC;YACF;;;;;;cAME;YACF,KAAC,KAAK,cACJ,KAAC,gBAAgB,cACd,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,GAC/B,GACb,CACT,EAEA,YAAY,IAAI,CACf,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,YAC/C,KAAC,gBAAgB,cAAE,YAAY,GAAoB,GAC7C,CACT,EAED,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,oBAAoB,IAAI,WAAW,EAC7C,SAAS,EAAC,QAAQ,YAEjB,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,GAC/F,EACT,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,GAAqB,IACvF,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAyE;IACnJ,MAAM,SAAS,GAAG,uBAAuB,CAAiD,qBAAqB,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useFormContext } from 'react-hook-form';\nimport { CorePresetNames, FrontendComponentType, UserAuthLabel, UserInvitationLabel } from '@wildo-ai/presets-components-models';\nimport {\n AuthNextStep,\n AuthMethod,\n AuthUtils,\n InvitationManagementMode,\n UserInvitationFormDtoSchema,\n type AuthenticationResponse,\n type AuthInvitationInfoResponse,\n type AvailableMethod,\n type PasswordPolicyRules,\n type UserInvitationFormDto,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { startRegistration } from '@simplewebauthn/browser';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '@simplewebauthn/browser';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { PasswordStrengthIndicator, DEFAULT_PASSWORD_POLICY } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport { CredentialUsernameAutofillField } from '~wildo-frontend-lib/components/auth/utils/CredentialUsernameAutofillField';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { resolveAuthMethodChoiceLabel } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { makeComponentLabelResolver } from '~wildo-frontend-lib/core/i18n/component-label-resolution.utils';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { useError } from '~wildo-frontend-lib/core/errors/useError';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport { extractAuthRedirectFromSearch, resolvePostAuthRedirect } from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useMfaContinuationNavigation } from '~wildo-frontend-lib/components/auth/utils/useMfaContinuationNavigation';\nimport {\n resolvePasswordViolationsToLabels,\n} from '~wildo-frontend-lib/components/auth/utils/resolvePasswordViolationsToLabels';\nimport {\n AUTH_METHOD_COMPONENTS,\n type AuthMethodComponentProps,\n} from '~wildo-frontend-lib/components/auth/methods/auth-method-components';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\n/*\n First-factor methods the PUBLIC invitation-accept chooser knows how to render.\n \n The invitation-info endpoint returns whatever the org allows for a joining member,\n * but the chooser can only surface methods that are usable BEFORE the invitee has an\n * account/session:\n * - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms that drive\n * `acceptInvitation` (set a password / email a link / enroll a passkey). NOT the login\n * method components — those authenticate an EXISTING account, which an invitee lacks. In\n * particular the login magic-link (`magicLinkSend`) is ACTIVE-only and never accepts the\n * invite; the passkey login component authenticates an already-enrolled credential.\n * - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n * components, which are account-agnostic (full-page redirect) and consume the `INVITED`\n * membership via enterprise-SSO JIT / OAuth JIT (email match on the live membership, no token).\n \n Session-bound MFA methods (`SMS_OTP` / `EMAIL_OTP` / `TOTP`) are intentionally\n * excluded — they need a session the invitee does not have.\n /\nconst INVITATION_RENDERABLE_METHODS: ReadonlySet<AuthMethod> = new Set([\n AuthMethod.PASSWORD,\n AuthMethod.ORG_SAML,\n AuthMethod.ORG_OPENID_CONNECT,\n AuthMethod.EXTERNAL_OAUTH2,\n AuthMethod.MAGIC_LINK,\n AuthMethod.PASSKEY,\n]);\n\n\ninterface InvitationFormTemplateProps {\n invitationEmail?: string;\n /\n The effective (org-merged) password policy the parent resolved from the\n * invitation-info response — the SAME policy the backend accept endpoint enforces —\n * falling back to the app-level policy. Passed in (not read from `useResolvedAuthConfig`\n * here) so the strength indicator matches what the org actually requires.\n /\n passwordPolicy: PasswordPolicyRules;\n}\n\n/\n Password-method accept form body — first/last name + optional password with the\n * strength indicator + a hidden username field for password-manager autofill.\n \n Rendered only when `PASSWORD` is the active chooser method. Password is OPTIONAL\n * here (a passwordless accept creates the account and the user adds a credential\n * later); the enclosing chooser owns the method-choice hint, so this template no\n * longer renders a standalone \"password is optional\" aside.\n /\nconst InvitationFormTemplate: React.FC<InvitationFormTemplateProps> = ({\n invitationEmail,\n passwordPolicy,\n}) => {\n const { formState } = useFormContext();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key);\n\n if (!isReady) return null;\n\n return (\n <FormLayout>\n <CredentialUsernameAutofillField email={invitationEmail} />\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n <FormField name=\"password\" />\n <FormField name=\"confirmPassword\" />\n\n <PasswordStrengthIndicator fieldName=\"password\" policy={passwordPolicy} t={t} />\n\n {formState.errors.root && (\n <Alert variant=\"destructive\">\n <AlertDescription>{formState.errors.root.message}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={t(UserInvitationLabel.ACCEPT_INVITATION)}\n submittingLabel={t(UserInvitationLabel.ACCEPTING_INVITATION)}\n fullWidth\n />\n </FormLayout>\n );\n};\n\n/\n Body of the magic-link accept sub-form (first/last name + send button). Split out so it\n * can read `formState.errors.root` via `useFormContext` inside the `AutomatedForm` provider.\n /\nconst InvitationMagicLinkTemplate: React.FC<{\n invitationEmail?: string;\n t: (key: string) => string;\n tAuth: (key: string) => string;\n}> = ({ invitationEmail, t, tAuth }) => {\n const { formState } = useFormContext();\n return (\n <FormLayout>\n {invitationEmail && (\n <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n )}\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n\n {formState.errors.root && (\n <Alert variant=\"destructive\">\n <AlertDescription>{formState.errors.root.message}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n submittingLabel={tAuth(UserAuthLabel.MAGIC_LINK_SEND)}\n fullWidth\n />\n </FormLayout>\n );\n};\n\n/\n Magic-link ACCEPT sub-form — the invitation-aware counterpart of the login\n * `MagicLinkAuthMethod`.\n \n The login component sends a login magic link via `magicLinkSend`, which never accepts\n * the invitation: `sendMagicLink` resolves users ACTIVE-only, so a not-yet-activated\n * (`PENDING_INVITATION`) invitee gets no email, and `verifyMagicLink` rejects any non-ACTIVE\n * user and never flips the INVITED membership. So it is NOT reused here.\n \n Instead this drives the purpose-built `acceptInvitation({ credentialMethod: MAGIC_LINK })`\n * endpoint, which ACTIVATES the invitee + flips the membership FIRST and only THEN mints +\n * emails the link — so the eventual `verifyMagicLink` click (now ACTIVE) establishes the\n * session. First/last name are collected because the accept DTO requires them (the invitee's\n * profile is seeded at acceptance). No session is issued (the parent switches to a terminal\n * \"check your email\" state); the session lands when the invitee clicks the emailed link.\n /\nconst InvitationMagicLinkForm: React.FC<{\n invitationEmail?: string;\n disabled?: boolean;\n onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n t: (key: string) => string;\n tAuth: (key: string) => string;\n}> = ({ invitationEmail, disabled, onSubmit, t, tAuth }) => {\n const formMethodsRef = useRef<FormMethods \| null>(null);\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n\n // Only the name fields — reuse the accept form schema's first/last (with their autocomplete\n // decorators); the credential is the emailed link, not a password.\n const schema = useMemo(\n () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n [],\n );\n\n // On success the PARENT switches to the terminal \"check your email\" state — the accept consumed\n // the token + accepted the invite, so there is NO in-place \"sent\" / \"try another method\" state\n // (that would dead-end on the now-consumed token). Only errors are surfaced here.\n const handleSubmit = useCallback(async (data: { firstName?: string; lastName?: string }) => {\n formMethodsRef.current?.clearErrors('root');\n try {\n await onSubmit(data.firstName?.trim() \|\| undefined, data.lastName?.trim() \|\| undefined);\n } catch (e: unknown) {\n formMethodsRef.current?.setError('root', {\n type: 'server',\n message: toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)),\n });\n }\n }, [onSubmit, t, toUserFacingErrorMessage]);\n\n return (\n <AutomatedForm\n schema={schema}\n defaultValues={{ firstName: '', lastName: '' }}\n onSubmit={handleSubmit}\n validationMode={ValidationMode.ON_BLUR}\n disabled={disabled}\n onFormReady={(formMethods) => { formMethodsRef.current = formMethods; }}\n labels={{\n fields: {\n firstName: t(UserInvitationLabel.FIRST_NAME),\n lastName: t(UserInvitationLabel.LAST_NAME),\n },\n }}\n layoutTemplate={() => (\n <InvitationMagicLinkTemplate invitationEmail={invitationEmail} t={t} tAuth={tAuth} />\n )}\n />\n );\n};\n\n/\n Body of the passkey accept sub-form. The ceremony error is owned by the parent (the WebAuthn\n * flow runs outside the form), so it is passed in rather than read from `formState`.\n /\nconst InvitationPasskeyTemplate: React.FC<{\n invitationEmail?: string;\n error?: string \| null;\n t: (key: string) => string;\n}> = ({ invitationEmail, error, t }) => (\n <FormLayout>\n {invitationEmail && (\n <Text className=\"text-sm text-muted-foreground text-center\">{invitationEmail}</Text>\n )}\n <Text className=\"text-sm text-muted-foreground text-center\">\n {t(UserInvitationLabel.PASSKEY_DESCRIPTION)}\n </Text>\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n\n {error && (\n <Alert variant=\"destructive\">\n <AlertDescription>{error}</AlertDescription>\n </Alert>\n )}\n\n <SubmitButton\n label={t(UserInvitationLabel.PASSKEY_CREATE)}\n submittingLabel={t(UserInvitationLabel.PASSKEY_CREATING)}\n fullWidth\n />\n </FormLayout>\n);\n\n/\n Passkey ENROLL-at-accept sub-form (Phase 3). Collects the invitee's name (the accept DTO\n * requires it; the profile is seeded at acceptance), then hands off to the parent's `onSubmit`,\n * which drives `acceptInvitation({credentialMethod: PASSKEY})` — the invitation token bootstraps\n * the session and the response carries a WebAuthn registration challenge — runs the browser\n * ceremony (`startRegistration`), and completes it against the authenticated\n * `/auth/passkey/register/verify` route. Passkey enrollment is the GO-FORWARD credential, not\n * this session's authenticator, so a cancelled/failed ceremony is non-fatal (the invitee is\n * already signed in and can add a passkey later). Falls back to an informational message when the\n * browser has no WebAuthn support.\n /\nconst InvitationPasskeyForm: React.FC<{\n invitationEmail?: string;\n disabled?: boolean;\n error?: string \| null;\n onSubmit: (firstName?: string, lastName?: string) => Promise<void>;\n t: (key: string) => string;\n}> = ({ invitationEmail, disabled, error, onSubmit, t }) => {\n const isSupported = typeof window !== 'undefined' && !!window.PublicKeyCredential;\n const schema = useMemo(\n () => UserInvitationFormDtoSchema.pick({ firstName: true, lastName: true }),\n [],\n );\n\n if (!isSupported) {\n return (\n <Alert>\n <AlertDescription>\n {t(UserInvitationLabel.PASSKEY_UNAVAILABLE_HINT)}\n </AlertDescription>\n </Alert>\n );\n }\n\n return (\n <AutomatedForm\n schema={schema}\n defaultValues={{ firstName: '', lastName: '' }}\n onSubmit={(data: { firstName?: string; lastName?: string }) =>\n onSubmit(data.firstName?.trim() \|\| undefined, data.lastName?.trim() \|\| undefined)}\n validationMode={ValidationMode.ON_BLUR}\n disabled={disabled}\n labels={{\n fields: {\n firstName: t(UserInvitationLabel.FIRST_NAME),\n lastName: t(UserInvitationLabel.LAST_NAME),\n },\n }}\n layoutTemplate={() => (\n <InvitationPasskeyTemplate invitationEmail={invitationEmail} error={error} t={t} />\n )}\n />\n );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserInvitation_DefaultProps {\n token?: string;\n email?: string;\n}\n\nexport const PublicLayoutPreset_UserInvitation_Default = ({\n token,\n email,\n}: PublicLayoutPreset_UserInvitation_DefaultProps): React.JSX.Element => {\n const { auth, acceptInvitation } = useAuthSession();\n // Central error handler — the password/passkey paths reach it via `acceptInvitation` (the context\n // calls `handleError` in its catch); the magic-link path calls the HTTP client directly, so it wires\n // `handleError` itself (below) to keep central logging + frontend-action execution symmetric.\n const { handleError } = useError();\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n const resolvedAuth = useResolvedAuthConfig();\n\n // Load BOTH label namespaces: the invitation chrome (`USER_INVITATION`) plus the\n // login method components' namespace (`USER_AUTH`) — the reused SAML/OIDC/OAuth2/\n // magic-link components label themselves from `UserAuthLabel.`, and we hand them\n // `tAuth`. The array is memoized so `useI18n` doesn't re-request keys every render.\n const i18nComponents = useMemo(\n () => [\n FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION,\n FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH,\n ],\n [],\n );\n const { tComponent, isReady } = useI18n({ component: i18nComponents });\n const location = useLocation();\n const formMethodsRef = useRef<FormMethods \| null>(null);\n const [isDeclining, setIsDeclining] = useState(false);\n const [declined, setDeclined] = useState(false);\n const [declineError, setDeclineError] = useState<string \| null>(null);\n // Passkey enroll-at-accept runs a WebAuthn ceremony AFTER the session is issued. While it runs,\n // the `auth.accessToken` guard below is suppressed so the component isn't unmounted mid-ceremony.\n const [passkeyCeremonyInProgress, setPasskeyCeremonyInProgress] = useState(false);\n const [passkeyError, setPasskeyError] = useState<string \| null>(null);\n // Magic-link accept issues NO session — it emails a link + accepts the invite (consuming the\n // token). On success we switch to a TERMINAL \"check your email\" state rather than leaving the\n // chooser visible (whose other methods + decline would now dead-end on the consumed token).\n const [magicLinkSent, setMagicLinkSent] = useState(false);\n // #1158: accepted without a session; the invitee's policy requires signing in separately.\n const [signInRequired, setSignInRequired] = useState(false);\n // In-flight flag for the magic-link accept (which bypasses the context's `auth.isLoading`), used\n // to gate the decline / alternative-method buttons so a click can't race the single-use token.\n const [magicLinkSubmitting, setMagicLinkSubmitting] = useState(false);\n\n // Invitation-info discovery (SSO/SCIM-aware method set) keyed by the token.\n const [invitationInfo, setInvitationInfo] = useState<AuthInvitationInfoResponse \| null>(null);\n const [infoLoading, setInfoLoading] = useState(true);\n const [infoError, setInfoError] = useState<string \| null>(null);\n // User-selected active method; `null` → fall back to the display-ordered default.\n const [activeMethod, setActiveMethod] = useState<AuthMethod \| null>(null);\n\n // Memoized on `tComponent` so `t`/`tAuth` keep a STABLE identity across renders — the schema\n // (`invitationFormSchema`) and submit callbacks depend on them, and an unstable `t` would defeat\n // those memos and churn the sub-form props (risking focus loss on a mid-entry parent re-render).\n const t = useCallback((key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, key), [tComponent]);\n // `tAuth` keeps `tComponent`'s key-path-on-miss behaviour, because THIS component\n // renders its result directly at five sites with no fallback (the magic-link\n // button, the \"link sent\" heading and body, the methods divider, the per-method\n // label). Normalizing it to `''` would turn a missing label into an invisible\n // button and an empty heading — strictly worse than a visible key path.\n const tAuth = useCallback(\n (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key),\n [tComponent],\n );\n\n // The auth-method prop contract's resolver, built through the shared seam so the\n // `USER_AUTH` namespace binding lives in one place. Same shape as `Auth_MfaChallenge`.\n const tAuthForMethodComponent = useMemo(\n () => makeComponentLabelResolver(tComponent, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH),\n [tComponent],\n );\n const loginPath = CommonRoutePaths.login;\n\n // Where an already-authenticated invitee is forwarded — including one returning from\n // an SSO/OAuth JIT round-trip. Mirrors `Auth_Main`: the SSO/OAuth method returns to\n // this (auth) page, `Auth_AuthCallback` lands here after the code exchange, and this\n // resolves the post-auth destination (a `redirect` param if present, else app home).\n const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);\n const authRedirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);\n\n // The invitation-info response is authoritative for the invitee email; fall back to\n // the URL `email` param until it resolves.\n const inviteeEmail = invitationInfo?.inviteeEmail ?? email;\n\n // Prefer the org-merged policy the endpoint resolved (the SAME one the backend accept\n // validates against) so the strength indicator + client pre-check match the org's real\n // requirements; fall back to the app-level policy until invitation-info resolves / when\n // the endpoint couldn't resolve it.\n const passwordPolicy: PasswordPolicyRules = useMemo(\n () => invitationInfo?.passwordPolicy ?? resolvedAuth.passwordPolicy ?? DEFAULT_PASSWORD_POLICY,\n [invitationInfo?.passwordPolicy, resolvedAuth.passwordPolicy],\n );\n\n const invitationFormSchema = useMemo(() => UserInvitationFormDtoSchema.refine(\n (data) => !data.password \|\| data.password === data.confirmPassword,\n { message: t(UserInvitationLabel.PASSWORD_MISMATCH), path: ['confirmPassword'] },\n ), [t]);\n\n const handleFormReady = useCallback((formMethods: FormMethods) => {\n formMethodsRef.current = formMethods;\n }, []);\n\n // Fetch invitation-info once per token. The endpoint reads the token WITHOUT\n // consuming it, so a consumed/expired/invalid token surfaces as an error state.\n useEffect(() => {\n // Only an UNauthenticated invitee needs method discovery. If already authenticated\n // (e.g. returning from an SSO/OAuth JIT round-trip that consumed the token), skip\n // the fetch — the `accessToken` guard below forwards to the app, and hitting the\n // now-consumed token would only 4xx.\n if (!token \|\| auth.accessToken) {\n setInfoLoading(false);\n return;\n }\n let cancelled = false;\n setInfoLoading(true);\n setInfoError(null);\n getManualCallsHttpClient()\n .getInvitationInfo(token)\n .then((info) => {\n if (!cancelled) setInvitationInfo(info);\n })\n .catch((e: unknown) => {\n if (!cancelled) setInfoError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n })\n .finally(() => {\n if (!cancelled) setInfoLoading(false);\n });\n return () => { cancelled = true; };\n // `t` is intentionally omitted from deps. It is memoized on the i18n component bundle (stable\n // across ordinary renders), so omitting it does NOT capture a per-render-stale closure; it is\n // omitted so a later i18n-bundle reload cannot re-trigger this one-shot discovery fetch. A rejected\n // fetch therefore labels the error with the `t` bound when the effect first ran — an acceptable\n // fallback in the narrow window before i18n is ready.\n // eslint-disable-next-line react-hooks/exhaustive-deps\n }, [token, auth.accessToken]);\n\n /\n Renderable first-factor methods from the org's policy, in the order the server sent (#1218).\n \n The invitation-info endpoint builds this list through the SAME `buildFirstFactorMethodsForPolicy` the sign-in\n * page's `identify` uses, which orders by `AUTH_METHOD_PRECEDENCE`. That is why this page can stop re-sorting and\n * why it inherits the fix rather than needing its own: filtering preserves order.\n /\n const availableMethods: AvailableMethod[] = useMemo(() => {\n const methods = invitationInfo?.availableFirstFactorMethods ?? [];\n return methods.filter((m) => INVITATION_RENDERABLE_METHODS.has(m.method as AuthMethod));\n }, [invitationInfo]);\n\n // Every renderable method is actionable (PASSKEY now enrolls at accept — Phase 3). The empty\n // state (route to sign-in) is reserved for an org exposing NO renderable first-factor method\n // (e.g. an SSO-only org whose per-connection lookup did not resolve).\n const hasActionableMethod = availableMethods.length > 0;\n\n // Any accept in flight — gates the decline / alternative-method buttons so a click can't race the\n // single-use token. Password sets `auth.isLoading` via the context; magic-link + passkey run\n // outside it (`magicLinkSubmitting` / `passkeyCeremonyInProgress`).\n const methodSubmitInFlight = auth.isLoading \|\| magicLinkSubmitting \|\| passkeyCeremonyInProgress;\n\n // Default to the first renderable method in display order.\n const defaultMethod = useMemo(\n () => (availableMethods[0]?.method as AuthMethod \| undefined) ?? null,\n [availableMethods],\n );\n\n const currentActiveMethod = activeMethod ?? defaultMethod;\n const alternativeMethods = availableMethods.filter((m) => m.method !== currentActiveMethod);\n\n /\n * The routing every auth screen shares (#972): nothing usable → the enrollment gate, which for an\n * INVITATION session completes it and signs the invitee in (#603); something usable → the challenge.\n * This screen already honours a `redirect` param for its post-auth destination, so the same target\n * rides the MFA detour — the inline copy this replaced dropped it there.\n /\n useMfaContinuationNavigation({\n mfaRequired: auth.mfaRequired,\n mfaSessionId: auth.mfaSessionId,\n usableSecondFactorMethods: auth.usableSecondFactorMethods,\n email: inviteeEmail \|\| undefined,\n authRedirectTarget,\n });\n\n const handleInvitationSubmit = useCallback(async (data: UserInvitationFormDto) => {\n formMethodsRef.current?.clearErrors('root');\n\n if (data.password) {\n const policyResult = AuthUtils.validatePasswordAgainstPolicy(data.password, passwordPolicy);\n if (!policyResult.valid) {\n formMethodsRef.current?.setError('root', {\n type: 'policy',\n message: resolvePasswordViolationsToLabels(policyResult.violations, t, passwordPolicy).join('. '),\n });\n return;\n }\n }\n\n const normalizeText = (value?: string): string \| undefined => {\n const trimmed = value?.trim();\n return trimmed ? trimmed : undefined;\n };\n\n try {\n const result = await acceptInvitation({\n invitationToken: token!,\n firstName: normalizeText(data.firstName),\n lastName: normalizeText(data.lastName),\n password: data.password \|\| undefined,\n });\n if (result?.signInRequired) setSignInRequired(true);\n // Session issued → the `auth.accessToken` guard forwards to the app (honoring\n // `postAuthRedirect`); MFA-gated → the `mfaRequired` effect routes; no session (#1158) → the sign-in state renders.\n } catch (e: unknown) {\n formMethodsRef.current?.setError('root', {\n type: 'server',\n message: toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)),\n });\n }\n }, [acceptInvitation, passwordPolicy, t, token, toUserFacingErrorMessage]);\n\n // Passkey enroll-at-accept: accept (bootstraps the session from the invitation token + returns a\n // WebAuthn challenge) → run the browser ceremony → verify against the authenticated\n // register-verify route. See `InvitationPasskeyForm`.\n const handlePasskeySubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n setPasskeyError(null);\n setPasskeyCeremonyInProgress(true);\n try {\n const result = await acceptInvitation({\n invitationToken: token!,\n firstName,\n lastName,\n credentialMethod: AuthMethod.PASSKEY,\n });\n if (result?.signInRequired) {\n // #1158: no session, so there is no ceremony to run; the terminal sign-in state renders.\n setSignInRequired(true);\n return;\n }\n const options = result?.passkeyRegistrationOptions;\n if (options) {\n // Session issued + a challenge. Enrollment failure is NON-FATAL — the invitation token\n // already bootstrapped the session, so the invitee proceeds signed in and can add a\n // passkey later in security settings.\n try {\n const credential = await startRegistration({ optionsJSON: options as unknown as PublicKeyCredentialCreationOptionsJSON });\n await getManualCallsHttpClient().passkeyRegisterVerify({ response: credential });\n } catch {\n // Swallow — the session is already issued, so a cancelled/failed ceremony (or the rare\n // cross-tab logout that clears the session mid-prompt and 401s the verify) is non-fatal:\n // releasing the flag hands control to the `accessToken` guard, which forwards when the\n // session survived and otherwise leaves the invitee on the accept screen (benign — they retry).\n }\n }\n // Session path: releasing the flag (finally) → the `auth.accessToken` guard forwards to the\n // app. MFA-gated path (no options): `acceptInvitation` set `mfaRequired` and the mfaRequired\n // effect routes to enrollment (the invitee enrolls the passkey there via the existing route).\n } catch (e: unknown) {\n setPasskeyError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n } finally {\n setPasskeyCeremonyInProgress(false);\n }\n }, [acceptInvitation, token, t, toUserFacingErrorMessage]);\n\n // Magic-link accept: emails a link + accepts the invite (via the HTTP client directly — no\n // session to manage, like the login magic-link). On success the render switches to the terminal\n // \"check your email\" state; errors propagate to the sub-form's root error.\n const handleMagicLinkSubmit = useCallback(async (firstName?: string, lastName?: string): Promise<void> => {\n setMagicLinkSubmitting(true);\n try {\n const response = await getManualCallsHttpClient().acceptInvitation({\n invitationToken: token!,\n firstName,\n lastName,\n credentialMethod: AuthMethod.MAGIC_LINK,\n // The emailed link is opened on another page, so the deep link must travel inside it (#1014). Already\n // same-origin: `extractAuthRedirectFromSearch` sanitised it, and the client and backend check again.\n redirect: authRedirectTarget,\n });\n // #1158: an accept that issued no session sends no link either; say so rather than \"check your email\".\n if (response.nextStep === AuthNextStep.SIGN_IN_REQUIRED) setSignInRequired(true);\n else setMagicLinkSent(true);\n } catch (e: any) {\n // Route through the central error handler (logging + frontend-action execution, e.g. the global\n // lockout UI) so a magic-link failure is handled identically to the password/passkey paths, which\n // reach `handleError` via `acceptInvitation`. Then RE-THROW so the sub-form's own catch still\n // renders the inline root error (the UX surface the user sees).\n handleError(e, 'Invitation acceptance failed (magic link)', { credentialMethod: AuthMethod.MAGIC_LINK });\n throw e;\n } finally {\n // The flag just releases the gate; the inline root error is owned by the sub-form's catch.\n setMagicLinkSubmitting(false);\n }\n }, [token, handleError, authRedirectTarget]);\n\n const handleDecline = useCallback(async () => {\n setDeclineError(null);\n if (!token) {\n setDeclineError(t(UserInvitationLabel.INVALID_LINK));\n return;\n }\n\n setIsDeclining(true);\n try {\n await getManualCallsHttpClient().rejectInvitation({ invitationToken: token });\n setDeclined(true);\n } catch (e: unknown) {\n setDeclineError(toUserFacingErrorMessage(e, t(UserInvitationLabel.UNEXPECTED_ERROR)));\n } finally {\n setIsDeclining(false);\n }\n }, [t, token, toUserFacingErrorMessage]);\n\n // The reused method components self-handle their outcome (SSO/OAuth do a full-page\n // redirect; magic-link shows its own \"sent\" state), so there is nothing to complete\n // here. On the rare in-place success the `auth.accessToken` guard below lands the\n // invitee in the app.\n const handleMethodSuccess = useCallback((_response: AuthenticationResponse) => {}, []);\n const handleMethodError = useCallback((_error: string) => {}, []);\n\n /\n Render the active first-factor method:\n * - `PASSWORD` / `MAGIC_LINK` / `PASSKEY` → invitation-specific accept sub-forms\n * (special-cased; never the login flow).\n * - `ORG_SAML` / `ORG_OPENID_CONNECT` / `EXTERNAL_OAUTH2` → the shared login method\n * component from the registry.\n /\n const renderActiveMethod = (): React.ReactNode => {\n if (!currentActiveMethod) return null;\n const methodConfig = availableMethods.find((m) => m.method === currentActiveMethod);\n if (!methodConfig) return null;\n\n if (currentActiveMethod === AuthMethod.PASSWORD) {\n return (\n <AutomatedForm\n schema={invitationFormSchema}\n defaultValues={{\n firstName: '',\n lastName: '',\n password: '',\n confirmPassword: '',\n }}\n onSubmit={handleInvitationSubmit}\n validationMode={ValidationMode.ON_BLUR}\n disabled={auth.isLoading \|\| isDeclining}\n onFormReady={handleFormReady}\n labels={{\n fields: {\n firstName: t(UserInvitationLabel.FIRST_NAME),\n lastName: t(UserInvitationLabel.LAST_NAME),\n password: t(UserInvitationLabel.PASSWORD),\n confirmPassword: t(UserInvitationLabel.CONFIRM_PASSWORD),\n },\n }}\n layoutTemplate={() => <InvitationFormTemplate invitationEmail={inviteeEmail} passwordPolicy={passwordPolicy} />}\n />\n );\n }\n\n if (currentActiveMethod === AuthMethod.MAGIC_LINK) {\n // NOT the reused login `MagicLinkAuthMethod` (which sends a LOGIN magic link that\n // never accepts the invite and rejects a not-yet-ACTIVE invitee at verify). This\n // drives `acceptInvitation({ credentialMethod: MAGIC_LINK })`, which activates + flips\n // the membership before emailing the link. See `handleMagicLinkSubmit`.\n return (\n <InvitationMagicLinkForm\n invitationEmail={inviteeEmail}\n disabled={auth.isLoading \|\| isDeclining}\n onSubmit={handleMagicLinkSubmit}\n t={t}\n tAuth={tAuth}\n />\n );\n }\n\n if (currentActiveMethod === AuthMethod.PASSKEY) {\n // Passkey ENROLL-at-accept (Phase 3): the login `PasskeyAuthMethod` authenticates an\n // EXISTING credential, so it is NOT reused. `InvitationPasskeyForm` drives\n // `acceptInvitation({credentialMethod: PASSKEY})` (bootstraps the session + returns a\n // WebAuthn challenge) then runs the ceremony + verify. See `handlePasskeySubmit`.\n return (\n <InvitationPasskeyForm\n invitationEmail={inviteeEmail}\n disabled={auth.isLoading \|\| isDeclining}\n error={passkeyError}\n onSubmit={handlePasskeySubmit}\n t={t}\n />\n );\n }\n\n // ORG_SAML / ORG_OPENID_CONNECT / EXTERNAL_OAUTH2 — reuse the shared login method\n // components. They are account-agnostic and self-wire their own hooks/redirects\n // (full-page IdP redirect / OAuth JIT, which consume the INVITED membership); we only\n // supply the invitee email + org method config. (PASSWORD, MAGIC_LINK, and PASSKEY are\n // special-cased above — they need invitation-specific accept wiring, not login reuse.)\n const MethodComponent = AUTH_METHOD_COMPONENTS[currentActiveMethod];\n if (!MethodComponent) return null;\n\n const props: AuthMethodComponentProps = {\n sessionId: '', // no session for a not-yet-activated invitee\n email: inviteeEmail ?? '',\n methodConfig,\n onSuccess: handleMethodSuccess,\n onError: handleMethodError,\n factorLevel: 'first',\n isLoading: auth.isLoading \|\| isDeclining,\n t: tAuthForMethodComponent,\n };\n\n return <MethodComponent {...props} />;\n };\n\n // Already authenticated — including returning from an SSO/OAuth JIT round-trip that\n // consumed the invite — so forward the invitee into the app rather than re-showing the\n // accept screen (mirrors `Auth_Main`). Guards against an already-signed-in user\n // accepting a token minted for a different email.\n // EXCEPTION: during passkey enroll-at-accept the token is issued BEFORE the WebAuthn ceremony\n // runs, so suppress the forward until the ceremony finishes (else the component unmounts and\n // the browser passkey prompt is cancelled); `handlePasskeySubmit` releases the flag when done.\n // Ordered BEFORE the `!isReady` i18n gate (like `Auth_AuthCallback`): the `<Navigate>` renders no\n // labels, so a slow/failed label load must not block forwarding an already-authenticated invitee.\n if (auth.accessToken && !passkeyCeremonyInProgress) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n\n if (!isReady) return null;\n\n if (!token) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.INVALID_LINK)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n if (declined) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.DECLINE_SUCCESS_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.DECLINE_SUCCESS_MESSAGE)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.CONTINUE_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // Accepted without a session (#1158): the invitee's policy disables the email-possession sign-in the invitation link\n // amounts to. Terminal: the membership exists, and they continue on the sign-in page.\n if (signInRequired) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.SIGN_IN_REQUIRED_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SIGN_IN_REQUIRED_MESSAGE)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // Magic-link accepted — the invite is consumed and a sign-in link was emailed. Terminal state:\n // the invitee finishes by clicking the emailed link (no chooser/decline — the token is gone, so\n // any other method would only 4xx).\n if (magicLinkSent) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{tAuth(UserAuthLabel.MAGIC_LINK_SENT_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{tAuth(UserAuthLabel.MAGIC_LINK_SENT_DESCRIPTION)}</Text>\n {inviteeEmail && (\n <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n )}\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n if (infoLoading) {\n return (\n <div className=\"flex items-center justify-center py-group\">\n <LoadingSpinner size={40} />\n </div>\n );\n }\n\n if (infoError \|\| !invitationInfo) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.ERROR_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{infoError \|\| t(UserInvitationLabel.INVALID_LINK)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // SCIM-managed org → informational only, NO password/method form (locked decision:\n // the directory is the identity authority, so no local credential is set here).\n if (invitationInfo.managementMode === InvitationManagementMode.SCIM) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.SCIM_MANAGED_TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">\n {t(UserInvitationLabel.SCIM_MANAGED_MESSAGE)}\n </Text>\n {inviteeEmail && (\n <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n )}\n </div>\n\n {declineError && (\n <Alert variant=\"destructive\" className=\"mb-group\">\n <AlertDescription>{declineError}</AlertDescription>\n </Alert>\n )}\n\n <div className=\"text-center mt-group space-y-item-sm\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={handleDecline}\n disabled={isDeclining}\n className=\"w-full\"\n >\n {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n </Button>\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // OPEN / SSO org → the method chooser.\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserInvitationLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserInvitationLabel.SUB_TITLE)}</Text>\n {invitationInfo.organizationName && (\n <Text className=\"text-sm text-muted-foreground\">{invitationInfo.organizationName}</Text>\n )}\n {inviteeEmail && (\n <Text className=\"text-sm text-muted-foreground\">{inviteeEmail}</Text>\n )}\n </div>\n\n {hasActionableMethod ? (\n <>\n <Text className=\"text-sm text-muted-foreground text-center mb-element\">\n {t(UserInvitationLabel.METHOD_CHOICE_HINT)}\n </Text>\n\n {/ Active first-factor method (password form / magic-link form / passkey form / reused SSO·OAuth component). /}\n {renderActiveMethod()}\n\n {/ Alternative methods — buttons that switch the active method. /}\n {alternativeMethods.length > 0 && (\n <>\n <LabeledDivider label={tAuth(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n\n <AuthMethodChoiceList\n methods={alternativeMethods.map((method) => method.method as AuthMethod)}\n /\n * The descriptor names an enterprise connection, so an invitee choosing their\n * organization's provider sees ITS name rather than \"Organization sign-in\".\n \n No `socialProviders`: this screen configures no social buttons of its own, and the\n * resolver declines to name a provider it cannot resolve rather than printing a raw\n * `providerRef` — so a social alternative keeps the generic kind here, deliberately.\n /\n labelFor={(method) => resolveAuthMethodChoiceLabel(method, {\n offeredMethod: alternativeMethods.find((candidate) => candidate.method === method),\n continueWithTemplate: tAuth(UserAuthLabel.CONTINUE_WITH),\n translateLabel: (label) => tAuth(label),\n resolveSocialProviderLabel: (provider) => provider.displayName ?? provider.providerRef,\n })}\n onSelect={(method) => { setActiveMethod(method); setPasskeyError(null); }}\n disabled={methodSubmitInFlight \|\| isDeclining}\n />\n </>\n )}\n </>\n ) : (\n /\n No renderable first-factor method on this screen — a valid state, not an error. The\n common case is an SSO-only org whose invitee arrives before directory provisioning: the\n token-keyed endpoint omits ORG_SAML/ORG_OPENID_CONNECT when no per-connection lookup\n resolved, yielding an empty set with mode OPEN. Route the invitee to the sign-in page,\n where email→domain SSO resolution works and the enterprise / OAuth JIT consumes the invite.\n */\n <Alert>\n <AlertDescription>\n {t(UserInvitationLabel.NO_METHOD_AVAILABLE_HINT)}\n </AlertDescription>\n </Alert>\n )}\n\n {declineError && (\n <Alert variant=\"destructive\" className=\"mt-group\">\n <AlertDescription>{declineError}</AlertDescription>\n </Alert>\n )}\n\n <div className=\"text-center mt-group space-y-item-sm\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n onClick={handleDecline}\n disabled={methodSubmitInFlight \|\| isDeclining}\n className=\"w-full\"\n >\n {isDeclining ? t(UserInvitationLabel.DECLINING_INVITATION) : t(UserInvitationLabel.DECLINE_INVITATION)}\n </Button>\n <AuthSecondaryLink href={loginPath}>{t(UserInvitationLabel.LOGIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n};\n\nexport function Auth_Invitation({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserInvitation_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_UserInvitation_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_INVITATION, 'Auth_Invitation')(preset);\n return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_Invitation.labels.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Invitation.labels.d.ts","sourceRoot":"","sources":["~~../../../../~~src/components/auth/Auth_Invitation.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAgD,MAAM,qCAAqC,CAAC;AAM/J,eAAO,MAAM,iCAAiC,EAAE,mBAAmB,EAoDlE,CAAC"}
1	+ {"version":3,"file":"Auth_Invitation.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Invitation.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,mBAAmB,EAAgD,MAAM,qCAAqC,CAAC;AAM/J,eAAO,MAAM,iCAAiC,EAAE,mBAAmB,EAoDlE,CAAC"}