@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

package/dist/esm/components/app/AppLayout_AuthenticatedRoute.js

@@ -8,15 +8,17 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * This ensures that ALL authenticated routes (resource pages, home, etc.)
  * are wrapped with the application shell (sidebar, menubar, etc.)
  */
-import { useContext, useEffect, useRef } from 'react';
+import { useContext, useEffect, useMemo, useRef } from 'react';
 import { Outlet, Navigate, useLocation, useNavigate } from 'react-router-dom';
 import { ErrorCustomMessageReference, ErrorType } from '@wildo-ai/saas-models';
 import { useUserOrgs } from '../../core/security/useUserOrgs.js';
 import { useAppScopeSafe } from '../../core/scope/useAppScope.js';
 import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
 import { appendAuthRedirectToPath, buildAuthRedirectTarget, } from '../../core/security/auth-redirect.frontend.utils.js';
-import { useRouteOrganizationAccess } from '../../core/security/useRouteOrganizationAccess.js';
-import { RouteOrganizationAccess } from '../../core/security/route-organization-access.frontend.utils.js';
+import { useRouteOrganizationAccess, useRouteOrganizationId } from '../../core/security/useRouteOrganizationAccess.js';
+import { RouteOrganizationAccess, RouteOrganizationFollow, } from '../../core/security/route-organization-access.frontend.utils.js';
+import { RouteOrganizationDecisionContext } from '../../core/security/RouteOrganizationDecisionContext.js';
+import { useRouteOrganizationFollow } from '../../core/security/useRouteOrganizationFollow.js';
 import { useNotification } from '../../core/events/useNotification.js';
 import { useI18n } from '../../core/i18n/useI18n.js';
 import { resolveUserFacingErrorMessage } from '../../core/errors/user-facing-error-message.frontend.utils.js';
@@ -71,6 +73,12 @@ const AppLayout_OrganizationAccessRefused = () => {
  * {@link RouteOrganizationAccess}). This is the one layout every signed-in route
  * renders through, so resource, composite, chart, custom, flows and execution
  * routes are all covered, whatever path brought the person there.
+ *
+ * A route addressing an organization this account IS an active member of makes it the session's current
+ * organization before the page renders (see {@link RouteOrganizationFollow}, #2247), so every request and every
+ * reader of the current organization agrees with the organization the page shows. The decision is also published
+ * to the navigation zones, which hold their own entries by it (#2276): in session the page is a zone entry, and the
+ * entry is pushed before the route moves.
  */
 export const AppLayout_AuthenticatedRoute = ({ redirectTo = CommonRoutePaths.login, }) => {
     const { auth } = useUserOrgs();
@@ -78,6 +86,16 @@ export const AppLayout_AuthenticatedRoute = ({ redirectTo = CommonRoutePaths.log
     const appScope = useAppScopeSafe();
     const location = useLocation();
     const routeOrganizationAccess = useRouteOrganizationAccess();
+    // The session follows the organization the route names (#2247): see `RouteOrganizationFollow`.
+    const routeOrganizationFollow = useRouteOrganizationFollow(routeOrganizationAccess);
+    const routeOrganizationId = useRouteOrganizationId() ?? null;
+    // The route's content is withheld while its organization is verified, refused, or being followed. Published to the
+    // navigation zones (#2276): in session the page is rendered from the zone stacks, not this outlet, so a zone entry
+    // addressing the route's organization is held by this same decision (`decideZoneEntryOrganizationHold`).
+    const routeContentHeld = routeOrganizationAccess === RouteOrganizationAccess.VERIFYING
+        || routeOrganizationAccess === RouteOrganizationAccess.REFUSED
+        || routeOrganizationFollow === RouteOrganizationFollow.FOLLOWING;
+    const routeOrganizationDecision = useMemo(() => ({ routeOrganizationId, routeContentHeld }), [routeOrganizationId, routeContentHeld]);
     const currentOrganizationId = appScope?.currentOrganizationId;
     const isAuthenticated = !!auth.accessToken;
     const redirectTarget = buildAuthRedirectTarget(location);
@@ -97,12 +115,15 @@ export const AppLayout_AuthenticatedRoute = ({ redirectTo = CommonRoutePaths.log
     // outlet is swapped: the shell below keeps the same element tree, so the sidebar, menubar and zone stacks
     // stay mounted while an organization is verified.
     let routeContent = _jsx(Outlet, {});
-    if (routeOrganizationAccess === RouteOrganizationAccess.VERIFYING) {
-        routeContent = _jsx(AppLayout_ContentLoading, {});
-    }
-    else if (routeOrganizationAccess === RouteOrganizationAccess.REFUSED) {
+    // Likewise while the session is being moved into the route's organization (#2247): the page's reads and roles
+    // must start in the organization the page shows, never in the one the session was in before. (Features are then
+    // refetched for it; until they land `FeaturesContext` reports loading, which its readers wait on.)
+    if (routeOrganizationAccess === RouteOrganizationAccess.REFUSED) {
         routeContent = _jsx(AppLayout_OrganizationAccessRefused, {});
     }
+    else if (routeContentHeld) {
+        routeContent = _jsx(AppLayout_ContentLoading, {});
+    }
     // The consent gate wraps the SHELL, never the outlet. Signed-in page content is rendered from the
     // navigation zone stacks, and this outlet is only the PRIMARY zone's fallback while that stack is empty —
     // it is unmounted once the route has synced into the stack. A gate around it left the page after that sync
@@ -117,6 +138,6 @@ export const AppLayout_AuthenticatedRoute = ({ redirectTo = CommonRoutePaths.log
     // Shell companions (`ApplicationMainProviderOptions.shellCompanions`) sit beside the shell, inside both
     // gates and only once the session is restored: they live exactly as long as the signed-in shell does,
     // on every page, and never read before a person has agreed to what the application does.
-    return (_jsx(AppLayout_DocumentAcceptanceGate, { children: _jsxs(AppLayout_ConsentGate, { children: [shellCompanions.map((Companion, index) => _jsx(Companion, {}, index)), _jsx(AppLayout_MainContainer, { children: routeContent })] }) }));
+    return (_jsx(RouteOrganizationDecisionContext.Provider, { value: routeOrganizationDecision, children: _jsx(AppLayout_DocumentAcceptanceGate, { children: _jsxs(AppLayout_ConsentGate, { children: [shellCompanions.map((Companion, index) => _jsx(Companion, {}, index)), _jsx(AppLayout_MainContainer, { children: routeContent })] }) }) }));
 };
 //# sourceMappingURL=AppLayout_AuthenticatedRoute.js.map

package/dist/esm/components/app/AppLayout_AuthenticatedRoute.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppLayout_AuthenticatedRoute.js","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_AuthenticatedRoute.tsx"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;AAEH,OAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8DAA8D,CAAC;AAC1G,OAAO,EAAE,uBAAuB,EAAE,MAAM,4EAA4E,CAAC;AACrH,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0EAA0E,CAAC;AACzH,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAOhG;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAa,GAAG,EAAE,CAAC,CAC/C,cAAK,SAAS,EAAC,uDAAuD,YACpE,KAAC,cAAc,KAAG,GACd,CACP,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,mCAAmC,GAAa,GAAG,EAAE;IACzD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,EAAE,CAAC;IAC5C,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,aAAa,CAAC,6BAA6B,CACzC,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,yCAAyC,EAAE,EAChI,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,CACnD,CAAC,CAAC;QACH,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IAE7D,OAAO,KAAC,wBAAwB,KAAG,CAAC;AACtC,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAgD,CAAC,EACxF,UAAU,GAAG,gBAAgB,CAAC,KAAK,GACpC,EAAE,EAAE;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,eAAe,GAAG,UAAU,CAAC,kBAAkB,CAAC,EAAE,eAAe,IAAI,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,uBAAuB,GAAG,0BAA0B,EAAE,CAAC;IAC7D,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,CAAC;IAC9D,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAE/E,wCAAwC;IACxC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,iBAAiB,EAAE,OAAO,SAAG,CAAC;IACrD,CAAC;IAED,qEAAqE;IACrE,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjF,OAAO,CACL,KAAC,uBAAuB,cACtB,KAAC,wBAAwB,KAAG,GACJ,CAC3B,CAAC;IACJ,CAAC;IAED,wGAAwG;IACxG,wGAAwG;IACxG,0GAA0G;IAC1G,kDAAkD;IAClD,IAAI,YAAY,GAAoB,KAAC,MAAM,KAAG,CAAC;IAC/C,IAAI,uBAAuB,KAAK,uBAAuB,CAAC,SAAS,EAAE,CAAC;QAClE,YAAY,GAAG,KAAC,wBAAwB,KAAG,CAAC;IAC9C,CAAC;SAAM,IAAI,uBAAuB,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;QACvE,YAAY,GAAG,KAAC,mCAAmC,KAAG,CAAC;IACzD,CAAC;IAED,kGAAkG;IAClG,0GAA0G;IAC1G,2GAA2G;IAC3G,4GAA4G;IAC5G,yGAAyG;IACzG,6FAA6F;IAC7F,2BAA2B;IAC3B,qGAAqG;IACrG,qGAAqG;IACrG,yGAAyG;IACzG,wDAAwD;IACxD,wGAAwG;IACxG,sGAAsG;IACtG,yFAAyF;IACzF,OAAO,CACL,KAAC,gCAAgC,cAC/B,MAAC,qBAAqB,eACnB,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,KAAC,SAAS,MAAM,KAAK,CAAI,CAAC,EACrE,KAAC,uBAAuB,cACrB,YAAY,GACW,IACJ,GACS,CACpC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * AppLayout_AuthenticatedRoute\n *\n * Layout route component for authenticated pages.\n * Uses React Router's Outlet to render nested routes inside the MainContainer shell.\n *\n * This ensures that ALL authenticated routes (resource pages, home, etc.)\n * are wrapped with the application shell (sidebar, menubar, etc.)\n */\n\nimport React, { useContext, useEffect, useRef } from 'react';\nimport { Outlet, Navigate, useLocation, useNavigate } from 'react-router-dom';\nimport { ErrorCustomMessageReference, ErrorType } from '@wildo-ai/saas-models';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n  appendAuthRedirectToPath,\n  buildAuthRedirectTarget,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useRouteOrganizationAccess } from '~wildo-frontend-lib/core/security/useRouteOrganizationAccess';\nimport { RouteOrganizationAccess } from '~wildo-frontend-lib/core/security/route-organization-access.frontend.utils';\nimport { useNotification } from '~wildo-frontend-lib/core/events/useNotification';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { resolveUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/user-facing-error-message.frontend.utils';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { AppLayout_MainContainer } from './AppLayout_MainContainer';\nimport { AppLayout_ConsentGate } from './AppLayout_ConsentGate';\nimport { AppLayout_DocumentAcceptanceGate } from './AppLayout_DocumentAcceptanceGate';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\n\ninterface AppLayout_AuthenticatedRouteProps {\n  /** Redirect path for unauthenticated users */\n  redirectTo?: string;\n}\n\n/**\n * A spinner in place of page content.\n *\n * I-5: the registry-resolved `LoadingSpinner` exposes `role=\"status\"` + `aria-live=\"polite\"` for screen\n * readers; no text is rendered here intentionally — i18n is not guaranteed to be ready during the early\n * auth-restore phase, and a localized aria-label would couple this layout to a component-scope translation\n * key it has no natural home for.\n */\nconst AppLayout_ContentLoading: React.FC = () => (\n  <div className=\"flex items-center justify-center w-full min-h-[200px]\">\n    <LoadingSpinner />\n  </div>\n);\n\n/**\n * Leaves a route whose organization the server refused to this account: sends it to the home page and says why.\n *\n * The words come from `errors_messages` / `errors_guidance` under\n * {@link ErrorCustomMessageReference.AUTHORIZATION_ORGANIZATION_NOT_ACCESSIBLE}, through the same resolver\n * the global error toast uses, so this notice is authored and translated like every other error.\n *\n * The ref guards a single notice per refusal: StrictMode runs the effect twice, and the translators change\n * identity on every i18n render.\n */\nconst AppLayout_OrganizationAccessRefused: React.FC = () => {\n  const navigate = useNavigate();\n  const { notifyWarning } = useNotification();\n  const { tErrorMessage, tErrorGuidance } = useI18n();\n  const handledRef = useRef(false);\n\n  useEffect(() => {\n    if (handledRef.current) {\n      return;\n    }\n    handledRef.current = true;\n    notifyWarning(resolveUserFacingErrorMessage(\n      { type: ErrorType.AUTHORIZATION, customMessageReference: ErrorCustomMessageReference.AUTHORIZATION_ORGANIZATION_NOT_ACCESSIBLE },\n      { translators: { tErrorMessage, tErrorGuidance } },\n    ));\n    navigate(CommonRoutePaths.home, { replace: true });\n  }, [navigate, notifyWarning, tErrorMessage, tErrorGuidance]);\n\n  return <AppLayout_ContentLoading />;\n};\n\n/**\n * Layout route that wraps authenticated content with MainContainer.\n * Redirects to login if user is not authenticated.\n * Waits while authenticated restore is still unresolved so the shell does not\n * render against prevalidated scope hints. After restore completes, a missing\n * AppScope organization remains a valid authenticated shell state.\n *\n * A route addressing an organization this account cannot open is left for the\n * home page with a notice, before any page content loads (see\n * {@link RouteOrganizationAccess}). This is the one layout every signed-in route\n * renders through, so resource, composite, chart, custom, flows and execution\n * routes are all covered, whatever path brought the person there.\n */\nexport const AppLayout_AuthenticatedRoute: React.FC<AppLayout_AuthenticatedRouteProps> = ({\n  redirectTo = CommonRoutePaths.login,\n}) => {\n  const { auth } = useUserOrgs();\n  const shellCompanions = useContext(ApplicationContext)?.shellCompanions ?? [];\n  const appScope = useAppScopeSafe();\n  const location = useLocation();\n  const routeOrganizationAccess = useRouteOrganizationAccess();\n  const currentOrganizationId = appScope?.currentOrganizationId;\n  const isAuthenticated = !!auth.accessToken;\n  const redirectTarget = buildAuthRedirectTarget(location);\n  const loginRedirectPath = appendAuthRedirectToPath(redirectTo, redirectTarget);\n\n  // Not authenticated - redirect to login\n  if (!isAuthenticated) {\n    return <Navigate to={loginRedirectPath} replace />;\n  }\n\n  // Wait while restore is unresolved so children do not render against\n  // prevalidated organization hints. Once restore is complete, missing org is\n  // still a valid authenticated shell state for org-optional flows.\n  if (auth.isRestoringSession || (!auth.sessionRestored && !currentOrganizationId)) {\n    return (\n      <AppLayout_MainContainer>\n        <AppLayout_ContentLoading />\n      </AppLayout_MainContainer>\n    );\n  }\n\n  // The page's own reads would carry the route's organization, so the route outlet (which syncs the route\n  // into the navigation zones and starts those reads) is withheld until the server has answered. Only the\n  // outlet is swapped: the shell below keeps the same element tree, so the sidebar, menubar and zone stacks\n  // stay mounted while an organization is verified.\n  let routeContent: React.ReactNode = <Outlet />;\n  if (routeOrganizationAccess === RouteOrganizationAccess.VERIFYING) {\n    routeContent = <AppLayout_ContentLoading />;\n  } else if (routeOrganizationAccess === RouteOrganizationAccess.REFUSED) {\n    routeContent = <AppLayout_OrganizationAccessRefused />;\n  }\n\n  // The consent gate wraps the SHELL, never the outlet. Signed-in page content is rendered from the\n  // navigation zone stacks, and this outlet is only the PRIMARY zone's fallback while that stack is empty —\n  // it is unmounted once the route has synced into the stack. A gate around it left the page after that sync\n  // (a live browser never showed the prompt, #977), and the shell could navigate past it. Around the shell it\n  // holds on every signed-in render: a missing REQUIRED purpose withholds the whole application (its panel\n  // carries sign-out), and an undecided optional purpose prompts in a fixed panel over it. See\n  // `AppLayout_ConsentGate`.\n  // The document acceptance gate sits OUTSIDE the consent gate, so a person agrees to the terms before\n  // being asked about processing: while an acceptance is owed the consent gate is not rendered at all,\n  // and its non-blocking prompt cannot float over the acceptance panel. Both wrap the whole shell, for the\n  // reason above. See `AppLayout_DocumentAcceptanceGate`.\n  // Shell companions (`ApplicationMainProviderOptions.shellCompanions`) sit beside the shell, inside both\n  // gates and only once the session is restored: they live exactly as long as the signed-in shell does,\n  // on every page, and never read before a person has agreed to what the application does.\n  return (\n    <AppLayout_DocumentAcceptanceGate>\n      <AppLayout_ConsentGate>\n        {shellCompanions.map((Companion, index) => <Companion key={index} />)}\n        <AppLayout_MainContainer>\n          {routeContent}\n        </AppLayout_MainContainer>\n      </AppLayout_ConsentGate>\n    </AppLayout_DocumentAcceptanceGate>\n  );\n};\n\n\n"]}
+{"version":3,"file":"AppLayout_AuthenticatedRoute.js","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_AuthenticatedRoute.tsx"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;AAEH,OAAc,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AAClI,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GAExB,MAAM,4EAA4E,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,oEAAoE,CAAC;AACtH,OAAO,EAAE,0BAA0B,EAAE,MAAM,8DAA8D,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0EAA0E,CAAC;AACzH,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAOhG;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAa,GAAG,EAAE,CAAC,CAC/C,cAAK,SAAS,EAAC,uDAAuD,YACpE,KAAC,cAAc,KAAG,GACd,CACP,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,mCAAmC,GAAa,GAAG,EAAE;IACzD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,EAAE,CAAC;IAC5C,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,aAAa,CAAC,6BAA6B,CACzC,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,yCAAyC,EAAE,EAChI,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,CACnD,CAAC,CAAC;QACH,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IAE7D,OAAO,KAAC,wBAAwB,KAAG,CAAC;AACtC,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAgD,CAAC,EACxF,UAAU,GAAG,gBAAgB,CAAC,KAAK,GACpC,EAAE,EAAE;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,eAAe,GAAG,UAAU,CAAC,kBAAkB,CAAC,EAAE,eAAe,IAAI,EAAE,CAAC;IAC9E,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,uBAAuB,GAAG,0BAA0B,EAAE,CAAC;IAC7D,+FAA+F;IAC/F,MAAM,uBAAuB,GAAG,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IACpF,MAAM,mBAAmB,GAAG,sBAAsB,EAAE,IAAI,IAAI,CAAC;IAC7D,mHAAmH;IACnH,mHAAmH;IACnH,yGAAyG;IACzG,MAAM,gBAAgB,GAAG,uBAAuB,KAAK,uBAAuB,CAAC,SAAS;WACjF,uBAAuB,KAAK,uBAAuB,CAAC,OAAO;WAC3D,uBAAuB,KAAK,uBAAuB,CAAC,SAAS,CAAC;IACnE,MAAM,yBAAyB,GAAG,OAAO,CACvC,GAAG,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,CAAC,EACjD,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CACxC,CAAC;IACF,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,CAAC;IAC9D,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAE/E,wCAAwC;IACxC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,iBAAiB,EAAE,OAAO,SAAG,CAAC;IACrD,CAAC;IAED,qEAAqE;IACrE,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjF,OAAO,CACL,KAAC,uBAAuB,cACtB,KAAC,wBAAwB,KAAG,GACJ,CAC3B,CAAC;IACJ,CAAC;IAED,wGAAwG;IACxG,wGAAwG;IACxG,0GAA0G;IAC1G,kDAAkD;IAClD,IAAI,YAAY,GAAoB,KAAC,MAAM,KAAG,CAAC;IAC/C,8GAA8G;IAC9G,gHAAgH;IAChH,mGAAmG;IACnG,IAAI,uBAAuB,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;QAChE,YAAY,GAAG,KAAC,mCAAmC,KAAG,CAAC;IACzD,CAAC;SAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5B,YAAY,GAAG,KAAC,wBAAwB,KAAG,CAAC;IAC9C,CAAC;IAED,kGAAkG;IAClG,0GAA0G;IAC1G,2GAA2G;IAC3G,4GAA4G;IAC5G,yGAAyG;IACzG,6FAA6F;IAC7F,2BAA2B;IAC3B,qGAAqG;IACrG,qGAAqG;IACrG,yGAAyG;IACzG,wDAAwD;IACxD,wGAAwG;IACxG,sGAAsG;IACtG,yFAAyF;IACzF,OAAO,CACL,KAAC,gCAAgC,CAAC,QAAQ,IAAC,KAAK,EAAE,yBAAyB,YACzE,KAAC,gCAAgC,cAC/B,MAAC,qBAAqB,eACnB,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,KAAC,SAAS,MAAM,KAAK,CAAI,CAAC,EACrE,KAAC,uBAAuB,cACrB,YAAY,GACW,IACJ,GACS,GACO,CAC7C,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * AppLayout_AuthenticatedRoute\n *\n * Layout route component for authenticated pages.\n * Uses React Router's Outlet to render nested routes inside the MainContainer shell.\n *\n * This ensures that ALL authenticated routes (resource pages, home, etc.)\n * are wrapped with the application shell (sidebar, menubar, etc.)\n */\n\nimport React, { useContext, useEffect, useMemo, useRef } from 'react';\nimport { Outlet, Navigate, useLocation, useNavigate } from 'react-router-dom';\nimport { ErrorCustomMessageReference, ErrorType } from '@wildo-ai/saas-models';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n  appendAuthRedirectToPath,\n  buildAuthRedirectTarget,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useRouteOrganizationAccess, useRouteOrganizationId } from '~wildo-frontend-lib/core/security/useRouteOrganizationAccess';\nimport {\n  RouteOrganizationAccess,\n  RouteOrganizationFollow,\n  type RouteOrganizationDecision,\n} from '~wildo-frontend-lib/core/security/route-organization-access.frontend.utils';\nimport { RouteOrganizationDecisionContext } from '~wildo-frontend-lib/core/security/RouteOrganizationDecisionContext';\nimport { useRouteOrganizationFollow } from '~wildo-frontend-lib/core/security/useRouteOrganizationFollow';\nimport { useNotification } from '~wildo-frontend-lib/core/events/useNotification';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { resolveUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/user-facing-error-message.frontend.utils';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { AppLayout_MainContainer } from './AppLayout_MainContainer';\nimport { AppLayout_ConsentGate } from './AppLayout_ConsentGate';\nimport { AppLayout_DocumentAcceptanceGate } from './AppLayout_DocumentAcceptanceGate';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\n\ninterface AppLayout_AuthenticatedRouteProps {\n  /** Redirect path for unauthenticated users */\n  redirectTo?: string;\n}\n\n/**\n * A spinner in place of page content.\n *\n * I-5: the registry-resolved `LoadingSpinner` exposes `role=\"status\"` + `aria-live=\"polite\"` for screen\n * readers; no text is rendered here intentionally — i18n is not guaranteed to be ready during the early\n * auth-restore phase, and a localized aria-label would couple this layout to a component-scope translation\n * key it has no natural home for.\n */\nconst AppLayout_ContentLoading: React.FC = () => (\n  <div className=\"flex items-center justify-center w-full min-h-[200px]\">\n    <LoadingSpinner />\n  </div>\n);\n\n/**\n * Leaves a route whose organization the server refused to this account: sends it to the home page and says why.\n *\n * The words come from `errors_messages` / `errors_guidance` under\n * {@link ErrorCustomMessageReference.AUTHORIZATION_ORGANIZATION_NOT_ACCESSIBLE}, through the same resolver\n * the global error toast uses, so this notice is authored and translated like every other error.\n *\n * The ref guards a single notice per refusal: StrictMode runs the effect twice, and the translators change\n * identity on every i18n render.\n */\nconst AppLayout_OrganizationAccessRefused: React.FC = () => {\n  const navigate = useNavigate();\n  const { notifyWarning } = useNotification();\n  const { tErrorMessage, tErrorGuidance } = useI18n();\n  const handledRef = useRef(false);\n\n  useEffect(() => {\n    if (handledRef.current) {\n      return;\n    }\n    handledRef.current = true;\n    notifyWarning(resolveUserFacingErrorMessage(\n      { type: ErrorType.AUTHORIZATION, customMessageReference: ErrorCustomMessageReference.AUTHORIZATION_ORGANIZATION_NOT_ACCESSIBLE },\n      { translators: { tErrorMessage, tErrorGuidance } },\n    ));\n    navigate(CommonRoutePaths.home, { replace: true });\n  }, [navigate, notifyWarning, tErrorMessage, tErrorGuidance]);\n\n  return <AppLayout_ContentLoading />;\n};\n\n/**\n * Layout route that wraps authenticated content with MainContainer.\n * Redirects to login if user is not authenticated.\n * Waits while authenticated restore is still unresolved so the shell does not\n * render against prevalidated scope hints. After restore completes, a missing\n * AppScope organization remains a valid authenticated shell state.\n *\n * A route addressing an organization this account cannot open is left for the\n * home page with a notice, before any page content loads (see\n * {@link RouteOrganizationAccess}). This is the one layout every signed-in route\n * renders through, so resource, composite, chart, custom, flows and execution\n * routes are all covered, whatever path brought the person there.\n *\n * A route addressing an organization this account IS an active member of makes it the session's current\n * organization before the page renders (see {@link RouteOrganizationFollow}, #2247), so every request and every\n * reader of the current organization agrees with the organization the page shows. The decision is also published\n * to the navigation zones, which hold their own entries by it (#2276): in session the page is a zone entry, and the\n * entry is pushed before the route moves.\n */\nexport const AppLayout_AuthenticatedRoute: React.FC<AppLayout_AuthenticatedRouteProps> = ({\n  redirectTo = CommonRoutePaths.login,\n}) => {\n  const { auth } = useUserOrgs();\n  const shellCompanions = useContext(ApplicationContext)?.shellCompanions ?? [];\n  const appScope = useAppScopeSafe();\n  const location = useLocation();\n  const routeOrganizationAccess = useRouteOrganizationAccess();\n  // The session follows the organization the route names (#2247): see `RouteOrganizationFollow`.\n  const routeOrganizationFollow = useRouteOrganizationFollow(routeOrganizationAccess);\n  const routeOrganizationId = useRouteOrganizationId() ?? null;\n  // The route's content is withheld while its organization is verified, refused, or being followed. Published to the\n  // navigation zones (#2276): in session the page is rendered from the zone stacks, not this outlet, so a zone entry\n  // addressing the route's organization is held by this same decision (`decideZoneEntryOrganizationHold`).\n  const routeContentHeld = routeOrganizationAccess === RouteOrganizationAccess.VERIFYING\n    || routeOrganizationAccess === RouteOrganizationAccess.REFUSED\n    || routeOrganizationFollow === RouteOrganizationFollow.FOLLOWING;\n  const routeOrganizationDecision = useMemo<RouteOrganizationDecision>(\n    () => ({ routeOrganizationId, routeContentHeld }),\n    [routeOrganizationId, routeContentHeld],\n  );\n  const currentOrganizationId = appScope?.currentOrganizationId;\n  const isAuthenticated = !!auth.accessToken;\n  const redirectTarget = buildAuthRedirectTarget(location);\n  const loginRedirectPath = appendAuthRedirectToPath(redirectTo, redirectTarget);\n\n  // Not authenticated - redirect to login\n  if (!isAuthenticated) {\n    return <Navigate to={loginRedirectPath} replace />;\n  }\n\n  // Wait while restore is unresolved so children do not render against\n  // prevalidated organization hints. Once restore is complete, missing org is\n  // still a valid authenticated shell state for org-optional flows.\n  if (auth.isRestoringSession || (!auth.sessionRestored && !currentOrganizationId)) {\n    return (\n      <AppLayout_MainContainer>\n        <AppLayout_ContentLoading />\n      </AppLayout_MainContainer>\n    );\n  }\n\n  // The page's own reads would carry the route's organization, so the route outlet (which syncs the route\n  // into the navigation zones and starts those reads) is withheld until the server has answered. Only the\n  // outlet is swapped: the shell below keeps the same element tree, so the sidebar, menubar and zone stacks\n  // stay mounted while an organization is verified.\n  let routeContent: React.ReactNode = <Outlet />;\n  // Likewise while the session is being moved into the route's organization (#2247): the page's reads and roles\n  // must start in the organization the page shows, never in the one the session was in before. (Features are then\n  // refetched for it; until they land `FeaturesContext` reports loading, which its readers wait on.)\n  if (routeOrganizationAccess === RouteOrganizationAccess.REFUSED) {\n    routeContent = <AppLayout_OrganizationAccessRefused />;\n  } else if (routeContentHeld) {\n    routeContent = <AppLayout_ContentLoading />;\n  }\n\n  // The consent gate wraps the SHELL, never the outlet. Signed-in page content is rendered from the\n  // navigation zone stacks, and this outlet is only the PRIMARY zone's fallback while that stack is empty —\n  // it is unmounted once the route has synced into the stack. A gate around it left the page after that sync\n  // (a live browser never showed the prompt, #977), and the shell could navigate past it. Around the shell it\n  // holds on every signed-in render: a missing REQUIRED purpose withholds the whole application (its panel\n  // carries sign-out), and an undecided optional purpose prompts in a fixed panel over it. See\n  // `AppLayout_ConsentGate`.\n  // The document acceptance gate sits OUTSIDE the consent gate, so a person agrees to the terms before\n  // being asked about processing: while an acceptance is owed the consent gate is not rendered at all,\n  // and its non-blocking prompt cannot float over the acceptance panel. Both wrap the whole shell, for the\n  // reason above. See `AppLayout_DocumentAcceptanceGate`.\n  // Shell companions (`ApplicationMainProviderOptions.shellCompanions`) sit beside the shell, inside both\n  // gates and only once the session is restored: they live exactly as long as the signed-in shell does,\n  // on every page, and never read before a person has agreed to what the application does.\n  return (\n    <RouteOrganizationDecisionContext.Provider value={routeOrganizationDecision}>\n      <AppLayout_DocumentAcceptanceGate>\n        <AppLayout_ConsentGate>\n          {shellCompanions.map((Companion, index) => <Companion key={index} />)}\n          <AppLayout_MainContainer>\n            {routeContent}\n          </AppLayout_MainContainer>\n        </AppLayout_ConsentGate>\n      </AppLayout_DocumentAcceptanceGate>\n    </RouteOrganizationDecisionContext.Provider>\n  );\n};\n\n\n"]}

package/dist/esm/components/app/AppLayout_DecisionInbox.d.ts

@@ -0,0 +1,17 @@
+import React from 'react';
+/**
+ * The engine's decision inbox page, at `/decisions` (`EnginePageRef.DECISIONS`, #2527): every pending decision the
+ * signed-in person may act on.
+ *
+ * The ENGINE places it, so an application whose agents can wait on a person's decision needs no page of its own. Wonder
+ * Todos and Wonder Ledger each hand-mounted the same composition before this, and every other application left the
+ * reviewer a notification about a decision with no page to answer it from. The sidebar row that leads here is shown
+ * only when the application declares a gate or a per-representative approval and the viewer holds a role a decision can wait on
+ * (`appConfig.decisionInbox`; an OWNER gate counts as `APP_USER`).
+ *
+ * Nothing here decides WHOSE decisions are shown: the server lists only those the caller may act on, re-checked with the
+ * rule each act is checked by, so the page needs no role gate of its own. A person who reaches it by URL with nothing
+ * routed to them sees the inbox's own empty state, never someone else's decision.
+ */
+export declare function AppLayout_DecisionInbox(): React.JSX.Element;
+//# sourceMappingURL=AppLayout_DecisionInbox.d.ts.map

package/dist/esm/components/app/AppLayout_DecisionInbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppLayout_DecisionInbox.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_DecisionInbox.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAS3D"}

package/dist/esm/components/app/AppLayout_DecisionInbox.js

@@ -0,0 +1,24 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { SectionMode } from '@wildo-ai/zod-decorators';
+import { CompositeLayout } from '../../components/views/composite-view/CompositeLayout.js';
+import { Section } from '../../components/resources/skeleton/Section.js';
+import { FlowsActors_ApprovalQueue } from '../../components/flows-actors/approval.js';
+/**
+ * The engine's decision inbox page, at `/decisions` (`EnginePageRef.DECISIONS`, #2527): every pending decision the
+ * signed-in person may act on.
+ *
+ * The ENGINE places it, so an application whose agents can wait on a person's decision needs no page of its own. Wonder
+ * Todos and Wonder Ledger each hand-mounted the same composition before this, and every other application left the
+ * reviewer a notification about a decision with no page to answer it from. The sidebar row that leads here is shown
+ * only when the application declares a gate or a per-representative approval and the viewer holds a role a decision can wait on
+ * (`appConfig.decisionInbox`; an OWNER gate counts as `APP_USER`).
+ *
+ * Nothing here decides WHOSE decisions are shown: the server lists only those the caller may act on, re-checked with the
+ * rule each act is checked by, so the page needs no role gate of its own. A person who reaches it by URL with nothing
+ * routed to them sees the inbox's own empty state, never someone else's decision.
+ */
+export function AppLayout_DecisionInbox() {
+    // Solo CARD: one embedded surface drawing its own list chrome (title, count, filter, read states).
+    return (_jsx(CompositeLayout, { children: _jsx(Section, { name: "decisions", appearance: SectionMode.CARD, children: _jsx(FlowsActors_ApprovalQueue, {}) }) }));
+}
+//# sourceMappingURL=AppLayout_DecisionInbox.js.map

package/dist/esm/components/app/AppLayout_DecisionInbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppLayout_DecisionInbox.js","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_DecisionInbox.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,qEAAqE,CAAC;AACtG,OAAO,EAAE,OAAO,EAAE,MAAM,2DAA2D,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AAEjG;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB;IACrC,mGAAmG;IACnG,OAAO,CACL,KAAC,eAAe,cACd,KAAC,OAAO,IAAC,IAAI,EAAC,WAAW,EAAC,UAAU,EAAE,WAAW,CAAC,IAAI,YACpD,KAAC,yBAAyB,KAAG,GACrB,GACM,CACnB,CAAC;AACJ,CAAC","sourcesContent":["import React from 'react';\nimport { SectionMode } from '@wildo-ai/zod-decorators';\n\nimport { CompositeLayout } from '~wildo-frontend-lib/components/views/composite-view/CompositeLayout';\nimport { Section } from '~wildo-frontend-lib/components/resources/skeleton/Section';\nimport { FlowsActors_ApprovalQueue } from '~wildo-frontend-lib/components/flows-actors/approval';\n\n/**\n * The engine's decision inbox page, at `/decisions` (`EnginePageRef.DECISIONS`, #2527): every pending decision the\n * signed-in person may act on.\n *\n * The ENGINE places it, so an application whose agents can wait on a person's decision needs no page of its own. Wonder\n * Todos and Wonder Ledger each hand-mounted the same composition before this, and every other application left the\n * reviewer a notification about a decision with no page to answer it from. The sidebar row that leads here is shown\n * only when the application declares a gate or a per-representative approval and the viewer holds a role a decision can wait on\n * (`appConfig.decisionInbox`; an OWNER gate counts as `APP_USER`).\n *\n * Nothing here decides WHOSE decisions are shown: the server lists only those the caller may act on, re-checked with the\n * rule each act is checked by, so the page needs no role gate of its own. A person who reaches it by URL with nothing\n * routed to them sees the inbox's own empty state, never someone else's decision.\n */\nexport function AppLayout_DecisionInbox(): React.JSX.Element {\n  // Solo CARD: one embedded surface drawing its own list chrome (title, count, filter, read states).\n  return (\n    <CompositeLayout>\n      <Section name=\"decisions\" appearance={SectionMode.CARD}>\n        <FlowsActors_ApprovalQueue />\n      </Section>\n    </CompositeLayout>\n  );\n}\n"]}

package/dist/esm/components/app/AppLayout_MainContainer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppLayout_MainContainer.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_MainContainer.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAMxH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAGD,wBAAgB,uBAAuB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,0CAA0C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG5K"}
+{"version":3,"file":"AppLayout_MainContainer.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_MainContainer.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAOxH,MAAM,WAAW,0CAA0C;IACzD,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAGD,wBAAgB,uBAAuB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,0CAA0C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAK5K"}

package/dist/esm/components/app/AppLayout_MainContainer.js

@@ -1,7 +1,10 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
 import { FrontendComponentType, CorePresetNames } from '@wildo-ai/presets-components-models';
+import { useOrganizationDocumentTitle } from '../../core/branding/useOrganizationDocumentTitle.js';
 export function AppLayout_MainContainer({ preset = CorePresetNames.DEFAULT, ...props }) {
+    // The signed-in shell's tab names the organization's product while its branding is in effect (#2979).
+    useOrganizationDocumentTitle();
     const Component = createComponentResolver(FrontendComponentType.APP_LAYOUTS_MAIN_CONTAINER, 'AppLayout_MainContainer')(preset);
     return _jsx(Component, { ...props });
 }

package/dist/esm/components/app/AppLayout_MainContainer.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppLayout_MainContainer.js","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_MainContainer.tsx"],"names":[],"mappings":";AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAS7F,MAAM,UAAU,uBAAuB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAqE;IACvJ,MAAM,SAAS,GAAG,uBAAuB,CAA6C,qBAAqB,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React from 'react';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { FrontendComponentType, CorePresetNames } from '@wildo-ai/presets-components-models';\n\n\n// --- Contract ---\nexport interface AppLayoutPreset_MainContainer_DefaultProps {\n  children: React.ReactNode;\n}\n\n\nexport function AppLayout_MainContainer({ preset = CorePresetNames.DEFAULT, ...props }: AppLayoutPreset_MainContainer_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<AppLayoutPreset_MainContainer_DefaultProps>(FrontendComponentType.APP_LAYOUTS_MAIN_CONTAINER, 'AppLayout_MainContainer')(preset);\n  return <Component {...props} />;\n}\n"]}
+{"version":3,"file":"AppLayout_MainContainer.js","sourceRoot":"","sources":["../../../../../src/components/app/AppLayout_MainContainer.tsx"],"names":[],"mappings":";AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,gEAAgE,CAAC;AAS9G,MAAM,UAAU,uBAAuB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAqE;IACvJ,sGAAsG;IACtG,4BAA4B,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,uBAAuB,CAA6C,qBAAqB,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React from 'react';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { FrontendComponentType, CorePresetNames } from '@wildo-ai/presets-components-models';\nimport { useOrganizationDocumentTitle } from '~wildo-frontend-lib/core/branding/useOrganizationDocumentTitle';\n\n\n// --- Contract ---\nexport interface AppLayoutPreset_MainContainer_DefaultProps {\n  children: React.ReactNode;\n}\n\n\nexport function AppLayout_MainContainer({ preset = CorePresetNames.DEFAULT, ...props }: AppLayoutPreset_MainContainer_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  // The signed-in shell's tab names the organization's product while its branding is in effect (#2979).\n  useOrganizationDocumentTitle();\n  const Component = createComponentResolver<AppLayoutPreset_MainContainer_DefaultProps>(FrontendComponentType.APP_LAYOUTS_MAIN_CONTAINER, 'AppLayout_MainContainer')(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/app/PublicLayout_LegalNotice.d.ts

@@ -0,0 +1,18 @@
+import React from 'react';
+import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas';
+/**
+ * The public LEGAL NOTICE (imprint) page, at `/legal-notice` (#2588).
+ *
+ * An information-society service provider established in the EU, the EEA, the UK or Switzerland must keep its identity easily, directly and
+ * permanently accessible (Directive 2000/31/EC Art. 5(1)). The page renders the application's `compliance.legalNotice`,
+ * which `wildo config legal-notice` projects from the operator's declared identity: a rendering of that declaration,
+ * never a second copy, which is why the slot takes no content props.
+ * spec-cite: Directive 2000/31/EC Art. 5(1)
+ *
+ * It is not a governed document: no release, no draft, no approval gate. The particulars are facts the operator
+ * declares, so the page shows them as declared and MARKS a particular every provider owes that is not declared yet.
+ */
+export interface PublicLayoutPreset_LegalNotice_DefaultProps {
+}
+export declare function PublicLayout_LegalNotice({ preset, ...props }: PublicLayoutPreset_LegalNotice_DefaultProps & ComponentPresetProps): React.JSX.Element;
+//# sourceMappingURL=PublicLayout_LegalNotice.d.ts.map

package/dist/esm/components/app/PublicLayout_LegalNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicLayout_LegalNotice.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_LegalNotice.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAIxH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,2CAA2C;CAAG;AAE/D,wBAAgB,wBAAwB,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,2CAA2C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAG9K"}

package/dist/esm/components/app/PublicLayout_LegalNotice.js

@@ -0,0 +1,8 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
+import { CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';
+export function PublicLayout_LegalNotice({ preset = CorePresetNames.DEFAULT, ...props }) {
+    const Component = createComponentResolver(FrontendComponentType.PUBLIC_LAYOUTS_LEGAL_NOTICE, 'PublicLayout_LegalNotice')(preset);
+    return _jsx(Component, { ...props });
+}
+//# sourceMappingURL=PublicLayout_LegalNotice.js.map

package/dist/esm/components/app/PublicLayout_LegalNotice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicLayout_LegalNotice.js","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_LegalNotice.tsx"],"names":[],"mappings":";AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAgB7F,MAAM,UAAU,wBAAwB,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAsE;IACzJ,MAAM,SAAS,GAAG,uBAAuB,CAA8C,qBAAqB,CAAC,2BAA2B,EAAE,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9K,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React from 'react';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';\n\n/**\n * The public LEGAL NOTICE (imprint) page, at `/legal-notice` (#2588).\n *\n * An information-society service provider established in the EU, the EEA, the UK or Switzerland must keep its identity easily, directly and\n * permanently accessible (Directive 2000/31/EC Art. 5(1)). The page renders the application's `compliance.legalNotice`,\n * which `wildo config legal-notice` projects from the operator's declared identity: a rendering of that declaration,\n * never a second copy, which is why the slot takes no content props.\n * spec-cite: Directive 2000/31/EC Art. 5(1)\n *\n * It is not a governed document: no release, no draft, no approval gate. The particulars are facts the operator\n * declares, so the page shows them as declared and MARKS a particular every provider owes that is not declared yet.\n */\nexport interface PublicLayoutPreset_LegalNotice_DefaultProps {}\n\nexport function PublicLayout_LegalNotice({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_LegalNotice_DefaultProps & ComponentPresetProps): React.JSX.Element {\n  const Component = createComponentResolver<PublicLayoutPreset_LegalNotice_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_LEGAL_NOTICE, 'PublicLayout_LegalNotice')(preset);\n  return <Component {...props} />;\n}\n"]}

package/dist/esm/components/app/PublicLayout_LegalNotice.labels.d.ts

@@ -0,0 +1,3 @@
+import { type LabellingUnitaryDef } from '@wildo-ai/presets-components-models';
+export declare const PublicLayoutsLegalNoticeLabels: LabellingUnitaryDef[];
+//# sourceMappingURL=PublicLayout_LegalNotice.labels.d.ts.map

package/dist/esm/components/app/PublicLayout_LegalNotice.labels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicLayout_LegalNotice.labels.d.ts","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_LegalNotice.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAK7C,eAAO,MAAM,8BAA8B,EAAE,mBAAmB,EAgC/D,CAAC"}

package/dist/esm/components/app/PublicLayout_LegalNotice.labels.js

@@ -0,0 +1,38 @@
+import { FrontendComponentType, LabelKind, PublicLayoutsLegalNoticeLabel, registerComponentLabels, } from '@wildo-ai/presets-components-models';
+// Companion-only label metadata for this component: keys + params + per-key purpose / kind. Statically scanned by the
+// dev companion; NOT imported at runtime, so it never ships in the bundle.
+export const PublicLayoutsLegalNoticeLabels = [
+    { ref: PublicLayoutsLegalNoticeLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Status shown while the legal notice page prepares its content' },
+    { ref: PublicLayoutsLegalNoticeLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the legal notice (imprint) page: the operator identity a website must publish' },
+    { ref: PublicLayoutsLegalNoticeLabel.NONE_PUBLISHED_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when this application publishes no legal notice. State only that none is published; never claim one is not required' },
+    {
+        ref: PublicLayoutsLegalNoticeLabel.NONE_PUBLISHED_DESCRIPTION,
+        kind: LabelKind.DESCRIPTION,
+        purpose: 'Explanation, shown instead of any particulars, that this application publishes no legal notice. Neutral: it must not claim that no notice is required, since the operator may not have declared where it is established yet',
+    },
+    {
+        ref: PublicLayoutsLegalNoticeLabel.NOT_YET_DECLARED,
+        kind: LabelKind.MESSAGE,
+        purpose: 'Shown in place of a value the operator must publish and has not provided yet, so the gap is visible rather than hidden',
+    },
+    { ref: PublicLayoutsLegalNoticeLabel.LEGAL_ENTITY_NAME, kind: LabelKind.LABEL, purpose: 'Label of the operator\'s legal name, as registered' },
+    { ref: PublicLayoutsLegalNoticeLabel.REGISTERED_ADDRESS, kind: LabelKind.LABEL, purpose: 'Label of the geographic address where the operator is established' },
+    { ref: PublicLayoutsLegalNoticeLabel.GENERAL_CONTACT, kind: LabelKind.LABEL, purpose: 'Label of the operator\'s contact details (e-mail and, when given, telephone)' },
+    { ref: PublicLayoutsLegalNoticeLabel.LEGAL_FORM, kind: LabelKind.LABEL, purpose: 'Label of the operator\'s legal form, such as a limited company' },
+    { ref: PublicLayoutsLegalNoticeLabel.AUTHORIZED_REPRESENTATIVES, kind: LabelKind.LABEL, purpose: 'Label of the persons authorised to represent the operator, such as its managing directors' },
+    { ref: PublicLayoutsLegalNoticeLabel.TRADE_REGISTER, kind: LabelKind.LABEL, purpose: 'Label of the trade register the operator is entered in and its registration number' },
+    { ref: PublicLayoutsLegalNoticeLabel.VAT_IDENTIFICATION_NUMBER, kind: LabelKind.LABEL, purpose: 'Label of the operator\'s VAT identification number' },
+    { ref: PublicLayoutsLegalNoticeLabel.SUPERVISORY_AUTHORITY, kind: LabelKind.LABEL, purpose: 'Label of the authority supervising the operator\'s licensed activity' },
+    { ref: PublicLayoutsLegalNoticeLabel.REGULATED_PROFESSION, kind: LabelKind.LABEL, purpose: 'Label of the regulated profession the service is provided in: professional body, title and rules' },
+    { ref: PublicLayoutsLegalNoticeLabel.SHARE_CAPITAL, kind: LabelKind.LABEL, purpose: 'Label of the company\'s share capital (registered or stated capital)' },
+    {
+        ref: PublicLayoutsLegalNoticeLabel.OUTSTANDING_CONTRIBUTIONS,
+        kind: LabelKind.LABEL,
+        purpose: 'Short phrase introducing the total of capital contributions not yet paid in, shown after the share capital amount',
+    },
+    { ref: PublicLayoutsLegalNoticeLabel.ECONOMIC_IDENTIFICATION_NUMBER, kind: LabelKind.LABEL, purpose: 'Label of the German economic identification number (Wirtschafts-Identifikationsnummer)' },
+    { ref: PublicLayoutsLegalNoticeLabel.LIQUIDATION, kind: LabelKind.LABEL, purpose: 'Label of the row stating whether the company is being wound up' },
+    { ref: PublicLayoutsLegalNoticeLabel.IN_LIQUIDATION, kind: LabelKind.MESSAGE, purpose: 'Statement that the company is in liquidation (being wound up)' },
+];
+registerComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_LEGAL_NOTICE, PublicLayoutsLegalNoticeLabels);
+//# sourceMappingURL=PublicLayout_LegalNotice.labels.js.map

package/dist/esm/components/app/PublicLayout_LegalNotice.labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicLayout_LegalNotice.labels.js","sourceRoot":"","sources":["../../../../../src/components/app/PublicLayout_LegalNotice.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,6BAA6B,EAE7B,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,sHAAsH;AACtH,2EAA2E;AAE3E,MAAM,CAAC,MAAM,8BAA8B,GAA0B;IACnE,EAAE,GAAG,EAAE,6BAA6B,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACjJ,EAAE,GAAG,EAAE,6BAA6B,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0FAA0F,EAAE;IAC1K,EAAE,GAAG,EAAE,6BAA6B,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mIAAmI,EAAE;IAClO;QACE,GAAG,EAAE,6BAA6B,CAAC,0BAA0B;QAC7D,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,6NAA6N;KACvO;IACD;QACE,GAAG,EAAE,6BAA6B,CAAC,gBAAgB;QACnD,IAAI,EAAE,SAAS,CAAC,OAAO;QACvB,OAAO,EAAE,wHAAwH;KAClI;IACD,EAAE,GAAG,EAAE,6BAA6B,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC9I,EAAE,GAAG,EAAE,6BAA6B,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,mEAAmE,EAAE;IAC9J,EAAE,GAAG,EAAE,6BAA6B,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8EAA8E,EAAE;IACtK,EAAE,GAAG,EAAE,6BAA6B,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACnJ,EAAE,GAAG,EAAE,6BAA6B,CAAC,0BAA0B,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,2FAA2F,EAAE;IAC9L,EAAE,GAAG,EAAE,6BAA6B,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oFAAoF,EAAE;IAC3K,EAAE,GAAG,EAAE,6BAA6B,CAAC,yBAAyB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,oDAAoD,EAAE;IACtJ,EAAE,GAAG,EAAE,6BAA6B,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sEAAsE,EAAE;IACpK,EAAE,GAAG,EAAE,6BAA6B,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,kGAAkG,EAAE;IAC/L,EAAE,GAAG,EAAE,6BAA6B,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC5J;QACE,GAAG,EAAE,6BAA6B,CAAC,yBAAyB;QAC5D,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,mHAAmH;KAC7H;IACD,EAAE,GAAG,EAAE,6BAA6B,CAAC,8BAA8B,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wFAAwF,EAAE;IAC/L,EAAE,GAAG,EAAE,6BAA6B,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACpJ,EAAE,GAAG,EAAE,6BAA6B,CAAC,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;CACzJ,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAC","sourcesContent":["import {\n  FrontendComponentType,\n  LabelKind,\n  PublicLayoutsLegalNoticeLabel,\n  type LabellingUnitaryDef,\n  registerComponentLabels,\n} from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key purpose / kind. Statically scanned by the\n// dev companion; NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsLegalNoticeLabels: LabellingUnitaryDef[] = [\n  { ref: PublicLayoutsLegalNoticeLabel.LOADING, kind: LabelKind.MESSAGE, purpose: 'Status shown while the legal notice page prepares its content' },\n  { ref: PublicLayoutsLegalNoticeLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the legal notice (imprint) page: the operator identity a website must publish' },\n  { ref: PublicLayoutsLegalNoticeLabel.NONE_PUBLISHED_TITLE, kind: LabelKind.HEADING, purpose: 'Heading shown when this application publishes no legal notice. State only that none is published; never claim one is not required' },\n  {\n    ref: PublicLayoutsLegalNoticeLabel.NONE_PUBLISHED_DESCRIPTION,\n    kind: LabelKind.DESCRIPTION,\n    purpose: 'Explanation, shown instead of any particulars, that this application publishes no legal notice. Neutral: it must not claim that no notice is required, since the operator may not have declared where it is established yet',\n  },\n  {\n    ref: PublicLayoutsLegalNoticeLabel.NOT_YET_DECLARED,\n    kind: LabelKind.MESSAGE,\n    purpose: 'Shown in place of a value the operator must publish and has not provided yet, so the gap is visible rather than hidden',\n  },\n  { ref: PublicLayoutsLegalNoticeLabel.LEGAL_ENTITY_NAME, kind: LabelKind.LABEL, purpose: 'Label of the operator\\'s legal name, as registered' },\n  { ref: PublicLayoutsLegalNoticeLabel.REGISTERED_ADDRESS, kind: LabelKind.LABEL, purpose: 'Label of the geographic address where the operator is established' },\n  { ref: PublicLayoutsLegalNoticeLabel.GENERAL_CONTACT, kind: LabelKind.LABEL, purpose: 'Label of the operator\\'s contact details (e-mail and, when given, telephone)' },\n  { ref: PublicLayoutsLegalNoticeLabel.LEGAL_FORM, kind: LabelKind.LABEL, purpose: 'Label of the operator\\'s legal form, such as a limited company' },\n  { ref: PublicLayoutsLegalNoticeLabel.AUTHORIZED_REPRESENTATIVES, kind: LabelKind.LABEL, purpose: 'Label of the persons authorised to represent the operator, such as its managing directors' },\n  { ref: PublicLayoutsLegalNoticeLabel.TRADE_REGISTER, kind: LabelKind.LABEL, purpose: 'Label of the trade register the operator is entered in and its registration number' },\n  { ref: PublicLayoutsLegalNoticeLabel.VAT_IDENTIFICATION_NUMBER, kind: LabelKind.LABEL, purpose: 'Label of the operator\\'s VAT identification number' },\n  { ref: PublicLayoutsLegalNoticeLabel.SUPERVISORY_AUTHORITY, kind: LabelKind.LABEL, purpose: 'Label of the authority supervising the operator\\'s licensed activity' },\n  { ref: PublicLayoutsLegalNoticeLabel.REGULATED_PROFESSION, kind: LabelKind.LABEL, purpose: 'Label of the regulated profession the service is provided in: professional body, title and rules' },\n  { ref: PublicLayoutsLegalNoticeLabel.SHARE_CAPITAL, kind: LabelKind.LABEL, purpose: 'Label of the company\\'s share capital (registered or stated capital)' },\n  {\n    ref: PublicLayoutsLegalNoticeLabel.OUTSTANDING_CONTRIBUTIONS,\n    kind: LabelKind.LABEL,\n    purpose: 'Short phrase introducing the total of capital contributions not yet paid in, shown after the share capital amount',\n  },\n  { ref: PublicLayoutsLegalNoticeLabel.ECONOMIC_IDENTIFICATION_NUMBER, kind: LabelKind.LABEL, purpose: 'Label of the German economic identification number (Wirtschafts-Identifikationsnummer)' },\n  { ref: PublicLayoutsLegalNoticeLabel.LIQUIDATION, kind: LabelKind.LABEL, purpose: 'Label of the row stating whether the company is being wound up' },\n  { ref: PublicLayoutsLegalNoticeLabel.IN_LIQUIDATION, kind: LabelKind.MESSAGE, purpose: 'Statement that the company is in liquidation (being wound up)' },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_LEGAL_NOTICE, PublicLayoutsLegalNoticeLabels);\n"]}

package/dist/esm/components/auth/Auth_ChatIdentityLink.d.ts

@@ -0,0 +1,15 @@
+import React from 'react';
+import { ComponentPresetProps } from '../../core/components-registry/component-registry.frontend.schemas';
+/** Props for the chat-link page preset. Self-driven from the link's query and the session, so it takes none. */
+export interface PublicLayoutPreset_ChatIdentityLink_DefaultProps {
+    /** Reserved: the page is URL/session-driven and currently accepts no props. */
+    readonly _selfDriven?: never;
+}
+/** Default preset implementation for {@link FrontendComponentType.PUBLIC_LAYOUTS_CHAT_IDENTITY_LINK}. */
+export declare const PublicLayoutPreset_ChatIdentityLink_Default: (_props: PublicLayoutPreset_ChatIdentityLink_DefaultProps) => React.JSX.Element;
+/**
+ * Preset-resolving wrapper for the chat-link page (mirrors every other `PUBLIC_LAYOUTS` page), so an application can
+ * swap in its own through the component registry. {@link AuthPage_ChatIdentityLink} renders this wrapper.
+ */
+export declare function Auth_ChatIdentityLink({ preset, ...props }: PublicLayoutPreset_ChatIdentityLink_DefaultProps & ComponentPresetProps): React.JSX.Element;
+//# sourceMappingURL=Auth_ChatIdentityLink.d.ts.map

package/dist/esm/components/auth/Auth_ChatIdentityLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth_ChatIdentityLink.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_ChatIdentityLink.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmD,MAAM,OAAO,CAAC;AAcxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AAmExH,gHAAgH;AAChH,MAAM,WAAW,gDAAgD;IAC/D,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAcD,yGAAyG;AACzG,eAAO,MAAM,2CAA2C,GACtD,QAAQ,gDAAgD,KACvD,KAAK,CAAC,GAAG,CAAC,OAyMZ,CAAC;AAEF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,MAAgC,EAChC,GAAG,KAAK,EACT,EAAE,gDAAgD,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAM7F"}

package/dist/esm/components/auth/Auth_ChatIdentityLink.js

@@ -0,0 +1,219 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { Navigate, useNavigate, useSearchParams } from 'react-router-dom';
+import { ChatIdentityLinkLabel, CorePresetNames, FrontendComponentType } from '@wildo-ai/presets-components-models';
+import { CHAT_IDENTITY_LINK_PAGE_PATH, ChatIdentityLinkPageQueryParam, ChatIdentityLinkPreviewStanding, ChatIdentityLinks_Operations, CoreResourceType, ResourceOperationVariantType, ResourcesConfig_OperationPathUtils, parseChatIdentityLinkHost, } from '@wildo-ai/saas-models';
+import { createComponentResolver } from '../../core/components-registry/component-resolver.frontend.helper.js';
+import { Button, ButtonVariants_Variant } from '../../components/actions/button.js';
+import { Heading } from '../../components/typography/heading.js';
+import { Text } from '../../components/typography/text.js';
+import { Alert, AlertDescription } from '../../components/overlays/containers/alert.js';
+import { LoadingSpinner } from '../../components/feedback/loading-spinner.js';
+import { useI18n } from '../../core/i18n/useI18n.js';
+import { useResourceRegistry } from '../../core/resources/useResourceRegistry.js';
+import { useUserFacingErrorMessage } from '../../core/errors/useUserFacingErrorMessage.js';
+import { useUserOrgs } from '../../core/security/useUserOrgs.js';
+import { CommonRoutePaths } from '../../core/runtime/routes.frontend.definitions.js';
+import { appendAuthRedirectToPath, buildAuthRedirectTarget } from '../../core/security/auth-redirect.frontend.utils.js';
+import { ChatSignInCompletionOutcome, useChatSignInCompletion } from '../../core/external-providers/chat-sign-in-completion.frontend.js';
+/**
+ * The chat-link page (#2660) — the body rendered by {@link AuthPage_ChatIdentityLink}.
+ *
+ * A chat bot (Slack, Microsoft Teams) answers a person it does not know yet with a one-time link to this page,
+ * carrying the organization the bot is installed for and a token naming the person's chat account. The page:
+ *
+ *   1. sends a visitor who is not signed in to sign in, returning here with the same link;
+ *   2. takes the token out of the address bar once the member is signed in. The sign-in page's own address still
+ *      carries the link on the way, which is one reason the token is single use and lasts fifteen minutes;
+ *   3. asks `chatIdentityLinks.previewLink` which chat account the token names, WITHOUT using it;
+ *   4. shows that account, with a warning to continue only if it is the member's own, and links it on an
+ *      explicit click (`chatIdentityLinks.completeLink`).
+ *
+ * The confirmation is the point of step 3. A link is obtained without the member meaning to in one way only:
+ * someone else's chat account asks the bot for a link and sends it to the member. The account line then names THAT
+ * account, and it is where the member can see it. Nothing completes on load.
+ *
+ * The vendor's ids are ALWAYS shown, under the names when there are names. A chat user sets their own display name and
+ * a vendor does not require it to be unique, so in exactly that attack the name can read as the member's own; the ids
+ * cannot be chosen. Even so, the confirmation is a check a hurried member can miss: the email sent once a link exists
+ * (`SecurityAlertType.CHAT_ACCOUNT_LINKED`) is the backstop, and it points to where the member unlinks it.
+ *
+ * A chat host may open the page in a window of its OWN (Microsoft Teams' authentication window, for a message-extension
+ * search) and wait to be told the sign-in ended. The link then carries a host marker (`ChatIdentityLinkPageQueryParam.HOST`),
+ * read once with the link, so it survives both the sign-in round trip and the strip of the query. The page tells the
+ * providers serving `FRONTEND_CHAT_SIGN_IN_COMPLETION` for that host (#2790), without knowing which host it is:
+ *   - a working link (completed now, or already linked to the member) → told SUCCEEDED at once, so the host can close
+ *     its window and carry on;
+ *   - anything else → told FAILED only when the member presses Close, so the explanation stays readable until then.
+ * In the window of a host a provider SERVES, Close replaces "back to the app" and "cancel": going to the home page inside
+ * the host's window would leave it open on the application. With no marker, or a marker no provider serves, nothing is
+ * loaded and the page is unchanged.
+ *
+ * Copy is resolved through {@link ChatIdentityLinkLabel} (component `PUBLIC_LAYOUTS_CHAT_IDENTITY_LINK`); the
+ * label metadata lives in the companion-scanned `Auth_ChatIdentityLink.labels.ts`. A refusal from the backend
+ * (expired, used, replaced, another organization) is shown through the error message it carries.
+ */
+/** Where the page is in the link's life. */
+var ChatLinkPageStatus;
+(function (ChatLinkPageStatus) {
+    /** Reading which chat account the link names. */
+    ChatLinkPageStatus["LOADING"] = "loading";
+    /** The account is shown; nothing is linked until the member confirms. */
+    ChatLinkPageStatus["READY"] = "ready";
+    /** The member confirmed; the link is being completed. */
+    ChatLinkPageStatus["LINKING"] = "linking";
+    /** The chat account now acts as the member. */
+    ChatLinkPageStatus["LINKED"] = "linked";
+    /** The link cannot be used, or the page was opened without one. */
+    ChatLinkPageStatus["ERROR"] = "error";
+})(ChatLinkPageStatus || (ChatLinkPageStatus = {}));
+const COMPONENT = FrontendComponentType.PUBLIC_LAYOUTS_CHAT_IDENTITY_LINK;
+function operationPathKey(operationIdentifier) {
+    return ResourcesConfig_OperationPathUtils.createOperationPathKey({
+        resourceIdentifier: CoreResourceType.CHAT_IDENTITY_LINKS,
+        operationIdentifier,
+        variantType: ResourceOperationVariantType.API_CALL,
+        isOperationDefault: true,
+        isBulkOperation: false,
+    });
+}
+/** Default preset implementation for {@link FrontendComponentType.PUBLIC_LAYOUTS_CHAT_IDENTITY_LINK}. */
+export const PublicLayoutPreset_ChatIdentityLink_Default = (_props) => {
+    const { auth } = useUserOrgs();
+    const accessToken = auth?.accessToken;
+    const { tComponent, isReady, formatDateTime } = useI18n({ component: COMPONENT });
+    const t = (key, params) => tComponent(COMPONENT, key, params);
+    const { doOperation } = useResourceRegistry();
+    const toUserFacingErrorMessage = useUserFacingErrorMessage();
+    const navigate = useNavigate();
+    const [searchParams, setSearchParams] = useSearchParams();
+    // Read once: the token leaves the address bar as soon as the member is signed in (below).
+    const [link] = useState(() => ({
+        organizationId: searchParams.get(ChatIdentityLinkPageQueryParam.ORGANIZATION_ID),
+        token: searchParams.get(ChatIdentityLinkPageQueryParam.TOKEN),
+        host: parseChatIdentityLinkHost(searchParams.get(ChatIdentityLinkPageQueryParam.HOST)),
+    }));
+    const host = useChatSignInCompletion(link.host);
+    const [status, setStatus] = useState(ChatLinkPageStatus.LOADING);
+    const [preview, setPreview] = useState(null);
+    const [failure, setFailure] = useState(null);
+    // A synchronous double click must not send two completions; the token is single use either way.
+    const linkingRef = useRef(false);
+    // The preview runs once per link, when the member is signed in. It keys on BEING signed in rather than on the access
+    // token, because a session refresh hands out a new token and must not re-preview a link this page already spent. The
+    // operation runner and the error mapper are read through refs so a provider handing out new function identities
+    // cannot make the page ask again either.
+    const doOperationRef = useRef(doOperation);
+    doOperationRef.current = doOperation;
+    const toMessageRef = useRef(toUserFacingErrorMessage);
+    toMessageRef.current = toUserFacingErrorMessage;
+    const requestFor = useCallback(() => ({ contextualParameters: { organizationId: link.organizationId ?? '' }, requestData: { token: link.token ?? '' } }), [link]);
+    const signedIn = Boolean(accessToken);
+    useEffect(() => {
+        if (!signedIn)
+            return; // the Navigate guard below sends the visitor to sign in first, link intact
+        if (linkingRef.current)
+            return; // completing or completed: the link is spent, there is nothing left to preview
+        if (searchParams.has(ChatIdentityLinkPageQueryParam.TOKEN))
+            setSearchParams({}, { replace: true });
+        if (!link.organizationId || !link.token) {
+            setStatus(ChatLinkPageStatus.ERROR);
+            setFailure(null);
+            return;
+        }
+        let cancelled = false;
+        setStatus(ChatLinkPageStatus.LOADING);
+        doOperationRef.current(operationPathKey(ChatIdentityLinks_Operations.PREVIEW_LINK), requestFor())
+            .then((answer) => {
+            if (cancelled)
+                return;
+            setPreview(answer);
+            setStatus(ChatLinkPageStatus.READY);
+        })
+            .catch((error) => {
+            if (cancelled)
+                return;
+            setFailure(toMessageRef.current(error));
+            setStatus(ChatLinkPageStatus.ERROR);
+        });
+        return () => {
+            cancelled = true;
+        };
+        // `searchParams` is read for the strip only; re-running on its change would preview twice.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [signedIn, link, requestFor]);
+    const confirm = useCallback(async () => {
+        if (linkingRef.current)
+            return;
+        linkingRef.current = true;
+        setStatus(ChatLinkPageStatus.LINKING);
+        try {
+            await doOperationRef.current(operationPathKey(ChatIdentityLinks_Operations.COMPLETE_LINK), requestFor());
+            setStatus(ChatLinkPageStatus.LINKED);
+        }
+        catch (error) {
+            linkingRef.current = false;
+            setFailure(toMessageRef.current(error));
+            setStatus(ChatLinkPageStatus.ERROR);
+        }
+    }, [requestFor]);
+    // A working link is told to the host at once (see the module note); a failure only on Close.
+    const linkWorks = status === ChatLinkPageStatus.LINKED
+        || (status === ChatLinkPageStatus.READY && preview?.standing === ChatIdentityLinkPreviewStanding.LINKED_TO_YOU);
+    const tellHost = host.tell;
+    useEffect(() => {
+        if (linkWorks)
+            void tellHost(ChatSignInCompletionOutcome.SUCCEEDED);
+    }, [linkWorks, tellHost]);
+    /**
+     * How the member leaves: home, as always; Close only in the window of a host a provider actually SERVES, telling it
+     * how the sign-in ended. A marker no provider serves (the host's frontend facet not scoped here, or a marked link
+     * opened elsewhere) keeps the way home: a Close that nothing answers would leave the member stuck.
+     */
+    const leaveButton = (labelInTab, className) => (!host.hostServed
+        ? _jsx(Button, { variant: ButtonVariants_Variant.OUTLINE, className: className, onClick: () => navigate(CommonRoutePaths.home), children: t(labelInTab) })
+        : (_jsx(Button, { variant: ButtonVariants_Variant.OUTLINE, className: className, 
+            // A Close that told nobody (a marked link opened outside the host's window, a provider that failed to load)
+            // falls back to the way home, so the member is never left on a button that does nothing.
+            onClick: () => {
+                void tellHost(linkWorks ? ChatSignInCompletionOutcome.SUCCEEDED : ChatSignInCompletionOutcome.FAILED, { repeat: true })
+                    .then((told) => { if (told === 0)
+                    navigate(CommonRoutePaths.home); });
+            }, children: t(ChatIdentityLinkLabel.CLOSE_HOST_WINDOW) })));
+    const backToApp = leaveButton(ChatIdentityLinkLabel.BACK_TO_APP);
+    // Not signed in → sign in, returning to this exact link afterwards.
+    if (!accessToken) {
+        const target = buildAuthRedirectTarget({ pathname: CHAT_IDENTITY_LINK_PAGE_PATH, search: `?${searchParams.toString()}` });
+        return _jsx(Navigate, { to: appendAuthRedirectToPath(CommonRoutePaths.login, target), replace: true });
+    }
+    if (!isReady || status === ChatLinkPageStatus.LOADING || status === ChatLinkPageStatus.LINKING) {
+        return (_jsxs("div", { className: "py-region flex flex-col items-center gap-element", children: [_jsx(LoadingSpinner, {}), isReady && _jsx(Text, { children: t(status === ChatLinkPageStatus.LINKING ? ChatIdentityLinkLabel.LINKING : ChatIdentityLinkLabel.LOADING) })] }));
+    }
+    if (status === ChatLinkPageStatus.ERROR || !preview) {
+        return (_jsxs("div", { className: "space-y-group", children: [_jsx(Heading, { children: t(ChatIdentityLinkLabel.ERROR_TITLE) }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: failure ?? t(ChatIdentityLinkLabel.ERROR_INCOMPLETE_LINK) }) }), backToApp] }));
+    }
+    if (status === ChatLinkPageStatus.LINKED) {
+        return (_jsxs("div", { className: "space-y-group text-center", children: [_jsx(Heading, { children: t(ChatIdentityLinkLabel.SUCCESS_TITLE) }), _jsx(Text, { children: t(ChatIdentityLinkLabel.SUCCESS_MESSAGE) }), backToApp] }));
+    }
+    if (preview.standing === ChatIdentityLinkPreviewStanding.LINKED_TO_YOU) {
+        return (_jsxs("div", { className: "space-y-group text-center", children: [_jsx(Heading, { children: t(ChatIdentityLinkLabel.ALREADY_LINKED_TITLE) }), _jsx(Text, { children: t(ChatIdentityLinkLabel.ALREADY_LINKED) }), backToApp] }));
+    }
+    if (preview.standing === ChatIdentityLinkPreviewStanding.LINKED_TO_ANOTHER_MEMBER) {
+        return (_jsxs("div", { className: "space-y-group", children: [_jsx(Heading, { children: t(ChatIdentityLinkLabel.LINKED_TO_ANOTHER_TITLE) }), _jsx(Alert, { variant: "destructive", children: _jsx(AlertDescription, { children: t(ChatIdentityLinkLabel.LINKED_TO_ANOTHER) }) }), backToApp] }));
+    }
+    // The names when the vendor reported them, and the ids always: the names are the chat user's own choice.
+    const accountNames = preview.chatUserDisplayName && preview.workspaceDisplayName
+        ? t(ChatIdentityLinkLabel.ACCOUNT_NAMED, { chatUser: preview.chatUserDisplayName, workspace: preview.workspaceDisplayName })
+        : undefined;
+    const accountIds = t(ChatIdentityLinkLabel.ACCOUNT_IDS, { chatUserId: preview.chatUserId, workspaceId: preview.workspaceRef });
+    return (_jsxs("div", { className: "space-y-group", children: [_jsxs("div", { className: "text-center space-y-item-xs", children: [_jsx(Heading, { children: t(ChatIdentityLinkLabel.TITLE) }), _jsx(Text, { className: "max-w-sm mx-auto", children: t(ChatIdentityLinkLabel.INTRO) })] }), _jsxs("dl", { className: "space-y-item-xs", children: [_jsx("dt", { children: _jsx(Text, { className: "font-medium", children: t(ChatIdentityLinkLabel.ACCOUNT_LABEL) }) }), _jsxs("dd", { className: "space-y-item-xs", children: [accountNames !== undefined && _jsx(Text, { children: accountNames }), _jsx(Text, { className: "font-mono text-sm", children: accountIds })] })] }), _jsx(Alert, { variant: "warning", children: _jsx(AlertDescription, { children: t(ChatIdentityLinkLabel.WARNING_NOT_YOURS) }) }), _jsx(Text, { className: "text-sm", children: t(ChatIdentityLinkLabel.EXPIRES_AT, { expiresAt: formatDateTime(preview.expiresAt) }) }), _jsxs("div", { className: "flex gap-element", children: [leaveButton(ChatIdentityLinkLabel.CANCEL, 'flex-1'), _jsx(Button, { variant: ButtonVariants_Variant.DEFAULT, className: "flex-1", onClick: confirm, children: t(ChatIdentityLinkLabel.CONFIRM) })] })] }));
+};
+/**
+ * Preset-resolving wrapper for the chat-link page (mirrors every other `PUBLIC_LAYOUTS` page), so an application can
+ * swap in its own through the component registry. {@link AuthPage_ChatIdentityLink} renders this wrapper.
+ */
+export function Auth_ChatIdentityLink({ preset = CorePresetNames.DEFAULT, ...props }) {
+    const Component = createComponentResolver(COMPONENT, 'Auth_ChatIdentityLink')(preset);
+    return _jsx(Component, { ...props });
+}
+//# sourceMappingURL=Auth_ChatIdentityLink.js.map