npm - @wildo-ai/saas-frontend-lib - Versions diffs - 1.1.9 → 1.1.11 - Mend

@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1566) hide show

package/dist/esm/components/auth/Auth_OAuthConsent.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_OAuthConsent.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthConsent.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AAEH,sGAAsG;AACtG,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,uBAAuB;IACvB,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AAeX,oGAAoG;AACpG,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,MAAoD,EACjC,EAAE;IACrB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsC,IAAI,CAAC,CAAC;IAClF,gGAAgG;IAChG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IACjF,oGAAoG;IACpG,oDAAoD;IACpD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IAEtC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,MAA+B,EAAU,EAAE,CACjE,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE9E,kGAAkG;IAClG,4FAA4F;IAC5F,oGAAoG;IACpG,mGAAmG;IACnG,uFAAuF;IACvF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpC,kGAAkG;IAClG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,2DAA2D;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,yDAAyD;QACnF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,wBAAwB,EAAE;aACvB,qBAAqB,CAAC,eAAe,CAAC;aACtC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,IAAI,QAAQ,IAAI,kBAAkB,IAAI,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACtG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,QAAQ,IAAI,aAAa,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzE,6FAA6F;gBAC7F,gGAAgG;gBAChG,sFAAsF;gBACtF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,aAAa,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,QAA4B,EAAE,EAAE;QACrC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO;YAAE,OAAO;QAC9C,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,oBAAoB,CAC3E,OAAO,CAAC,aAAa,EACrB,QAAQ;YACR,6EAA6E;YAC7E,QAAQ,KAAK,SAAS,IAAI,QAAQ,CACnC,CAAC;YACF,4FAA4F;YAC5F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,sFAAsF;YACtF,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAC;IAEF,yFAAyF;IACzF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,gBAAgB,CAAC,YAAY;YACvC,MAAM,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,SAAG,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,CACL,cAAK,SAAS,EAAC,+BAA+B,YAC5C,KAAC,cAAc,KAAG,GACd,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,CACL,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,IAAI,qBAAqB,CAAC,aAAa,CAAC,GAAoB,GACrF,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAW,EACxF,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,GAAQ,IAC1E,EAEL,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAC5B,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,YAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAQ,EAC5E,aAAI,SAAS,EAAC,iBAAiB,YAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC7B,uBACE,KAAC,IAAI,cAAE,KAAK,GAAQ,IADb,KAAK,CAET,CACN,CAAC,GACC,IACD,CACP,EAEA,OAAO,CAAC,QAAQ,IAAI,CACnB,KAAC,IAAI,IAAC,SAAS,EAAC,mBAAmB,YAAE,CAAC,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAQ,CACrH,EAED,iBAAO,SAAS,EAAC,8CAA8C,aAC7D,KAAC,YAAY,IAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,GAAI,EACpF,KAAC,IAAI,cAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAQ,IAC1C,EAER,eAAK,SAAS,EAAC,kBAAkB,aAC/B,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAE5B,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GACvB,EACT,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,YAE/B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAC1B,IACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,MAAM,GAAG,eAAe,CAAC,OAAO,EAChC,GAAG,KAAK,EAC4D;IACpE,MAAM,SAAS,GAAG,uBAAuB,CACvC,qBAAqB,CAAC,4BAA4B,EAClD,mBAAmB,CACpB,CAAC,MAAM,CAAC,CAAC;IACV,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useSearchParams } from 'react-router-dom';\nimport { CorePresetNames, FrontendComponentType, UserOAuthConsentLabel } from '@wildo-ai/presets-components-models';\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { CheckboxRoot } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n getManualCallsHttpClient,\n type OAuthConsentRequiredResponse,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n appendAuthRedirectToPath,\n buildAuthRedirectTarget,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\n/*\n OIDC interactive-consent screen (S1) — the body rendered by {@link AuthPage_OAuthConsent}.\n \n FLOW (Bearer-authed SPA, NOT a server-rendered page — see the backend `handleConsentDecision`\n * JSDoc): a third-party client redirects the browser here with the OAuth authorize query. This\n * component forwards that query to `GET /oauth/authorize` (Bearer auto-attached) → the backend\n * returns `consent_required` + a single-use consent token + the requesting client / scopes / agent\n * resource. On Approve/Deny it POSTs `{consent_token, decision}` to `/oauth/authorize/decision`,\n * which returns `{ redirect_to }`; the app then `window.location.assign(redirect_to)` to complete the\n * OAuth redirect back to the client (carrying the `code` on approve, `error=access_denied` on deny).\n \n Copy is resolved through {@link UserOAuthConsentLabel} (component\n * `PUBLIC_LAYOUTS_OAUTH_CONSENT`) via {@link useI18n}; the label metadata lives in the\n * companion-scanned `Auth_OAuthConsent.labels.ts`.\n /\n\n// The authorize params this screen forwards verbatim to `GET /oauth/authorize`; the backend validates\n// them (client/redirect allowlist, PKCE). Anything else in the URL is ignored.\nconst AUTHORIZE_PARAM_KEYS = [\n 'response_type',\n 'client_id',\n 'redirect_uri',\n 'code_challenge',\n 'code_challenge_method',\n 'scope',\n 'resource',\n 'state',\n 'nonce',\n] as const;\n\ntype ConsentStatus = 'loading' \| 'ready' \| 'submitting' \| 'error';\n\n/\n Props for the consent screen preset. The screen is self-driven from the authorize query\n * (`useSearchParams`) and the session (`useUserOrgs`), so it takes no external props — this interface\n * exists to satisfy the preset-wrapper contract (preset resolution + the frontend-component spec)\n * shared by every `PUBLIC_LAYOUTS` auth page.\n /\nexport interface PublicLayoutPreset_OAuthConsent_DefaultProps {\n /* Reserved: the consent screen is URL/session-driven and currently accepts no props. /\n readonly _selfDriven?: never;\n}\n\n/* Default preset implementation for {@link FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT}. /\nexport const PublicLayoutPreset_OAuthConsent_Default = (\n _props: PublicLayoutPreset_OAuthConsent_DefaultProps,\n): React.JSX.Element => {\n const { auth } = useUserOrgs();\n const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT });\n const [searchParams] = useSearchParams();\n const [status, setStatus] = useState<ConsentStatus>('loading');\n const [consent, setConsent] = useState<OAuthConsentRequiredResponse \| null>(null);\n // The error is held as a label KEY (not resolved copy) so it stays i18n-clean and translatable.\n const [errorLabel, setErrorLabel] = useState<UserOAuthConsentLabel \| null>(null);\n // Item 3 \"remember this app\" — opt-in (default off): on approve, stores a durable grant so a future\n // authorize with covering scopes skips this screen.\n const [remember, setRemember] = useState(false);\n\n const accessToken = auth?.accessToken;\n\n const t = (key: string, params?: Record<string, string>): string =>\n tComponent(FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT, key, params);\n\n // Stale-closure-proof single-flight guard for the decision POST. The buttons already unmount when\n // `status` flips to 'submitting' (see the render below) and the consent token is single-use\n // server-side, but a synchronous double-dispatch could still fire two POSTs before React re-renders\n // — a `status === 'submitting'` check would read the captured (stale) 'ready' in that window, so a\n // ref (set synchronously at the top of `decide`) is the only reliable in-flight latch.\n const submittingRef = useRef(false);\n\n // The authorize query, filtered to the known OAuth params (verbatim pass-through to the backend).\n const authorizeParams = useMemo(() => {\n const params = new URLSearchParams();\n for (const key of AUTHORIZE_PARAM_KEYS) {\n const value = searchParams.get(key);\n if (value) params.set(key, value);\n }\n return params;\n }, [searchParams]);\n\n // Load the consent request once the user is authenticated.\n useEffect(() => {\n if (!accessToken) return; // the Navigate guard below sends the user to login first\n let cancelled = false;\n setStatus('loading');\n setErrorLabel(null);\n getManualCallsHttpClient()\n .oauthAuthorizeConsent(authorizeParams)\n .then((response) => {\n if (cancelled) return;\n if (response && 'consent_required' in response && response.consent_required && response.consent_token) {\n setConsent(response);\n setStatus('ready');\n } else if (response && 'redirect_to' in response && response.redirect_to) {\n // Trusted (non-`requiresConsent`) client — the backend already minted the code; complete the\n // OAuth redirect back to the client WITHOUT a consent screen. (`window.location.assign` because\n // the redirect target is cross-origin; the XHR could not have followed a 302 itself.)\n window.location.assign(response.redirect_to);\n } else {\n setStatus('error');\n setErrorLabel(UserOAuthConsentLabel.ERROR_INVALID);\n }\n })\n .catch(() => {\n if (cancelled) return;\n setStatus('error');\n setErrorLabel(UserOAuthConsentLabel.ERROR_LOAD);\n });\n return () => {\n cancelled = true;\n };\n }, [accessToken, authorizeParams]);\n\n const decide = useCallback(\n async (decision: 'approve' \| 'deny') => {\n if (!consent \|\| submittingRef.current) return;\n submittingRef.current = true;\n setStatus('submitting');\n setErrorLabel(null);\n try {\n const { redirect_to } = await getManualCallsHttpClient().oauthConsentDecision(\n consent.consent_token,\n decision,\n // Only an APPROVE meaningfully \"remembers\"; a deny sends `false` harmlessly.\n decision === 'approve' && remember,\n );\n // Complete the OAuth redirect back to the third-party client (carries `code` or the error).\n window.location.assign(redirect_to);\n } catch {\n // Release the local latch. A lost response may follow server-side token consumption;\n // the error view does not retry this request token. A fresh flow obtains fresh state.\n submittingRef.current = false;\n setStatus('error');\n setErrorLabel(UserOAuthConsentLabel.ERROR_DECISION);\n }\n },\n [consent, remember],\n );\n\n // Not authenticated → send to login, returning to this exact consent request afterwards.\n if (!accessToken) {\n const target = buildAuthRedirectTarget({\n pathname: CommonRoutePaths.oauthConsent,\n search: `?${searchParams.toString()}`,\n });\n return <Navigate to={appendAuthRedirectToPath(CommonRoutePaths.login, target)} replace />;\n }\n\n if (status === 'loading' \|\| status === 'submitting' \|\| !isReady) {\n return (\n <div className=\"py-region flex justify-center\">\n <LoadingSpinner />\n </div>\n );\n }\n\n if (status === 'error' \|\| !consent) {\n return (\n <Alert variant=\"destructive\">\n <AlertDescription>{t(errorLabel ?? UserOAuthConsentLabel.ERROR_GENERIC)}</AlertDescription>\n </Alert>\n );\n }\n\n return (\n <div className=\"space-y-group\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(UserOAuthConsentLabel.TITLE, { clientName: consent.client.name })}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserOAuthConsentLabel.SUB_TITLE)}</Text>\n </div>\n\n {consent.scopes.length > 0 && (\n <div className=\"space-y-element\">\n <Text className=\"font-medium\">{t(UserOAuthConsentLabel.SCOPES_INTRO)}</Text>\n <ul className=\"space-y-item-xs\">\n {consent.scopes.map((scope) => (\n <li key={scope}>\n <Text>{scope}</Text>\n </li>\n ))}\n </ul>\n </div>\n )}\n\n {consent.resource && (\n <Text className=\"text-sm break-all\">{t(UserOAuthConsentLabel.AGENT_ENDPOINT, { resource: consent.resource })}</Text>\n )}\n\n <label className=\"flex items-center gap-item-xs cursor-pointer\">\n <CheckboxRoot checked={remember} onCheckedChange={(c) => setRemember(c === true)} />\n <Text>{t(UserOAuthConsentLabel.REMEMBER)}</Text>\n </label>\n\n <div className=\"flex gap-element\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"flex-1\"\n onClick={() => decide('deny')}\n >\n {t(UserOAuthConsentLabel.DENY)}\n </Button>\n <Button\n variant={ButtonVariants_Variant.DEFAULT}\n className=\"flex-1\"\n onClick={() => decide('approve')}\n >\n {t(UserOAuthConsentLabel.APPROVE)}\n </Button>\n </div>\n </div>\n );\n};\n\n/\n Preset-resolving wrapper for the OIDC consent screen (mirrors every other `PUBLIC_LAYOUTS` auth\n * page). Resolves `PUBLIC_LAYOUTS_OAUTH_CONSENT` to its registered preset (default =\n * {@link PublicLayoutPreset_OAuthConsent_Default}) so an application can swap in a branded consent UI\n * via the component registry. {@link AuthPage_OAuthConsent} renders this wrapper.\n */\nexport function Auth_OAuthConsent({\n preset = CorePresetNames.DEFAULT,\n ...props\n}: PublicLayoutPreset_OAuthConsent_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_OAuthConsent_DefaultProps>(\n FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT,\n 'Auth_OAuthConsent',\n )(preset);\n return <Component {...props} />;\n}\n"]}
1	+ {"version":3,"file":"Auth_OAuthConsent.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_OAuthConsent.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAC1H,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,+DAA+D,CAAC;AAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EACL,wBAAwB,GAEzB,MAAM,mFAAmF,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AAEH,sGAAsG;AACtG,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG;IAC3B,eAAe;IACf,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,uBAAuB;IACvB,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AAeX,oGAAoG;AACpG,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,MAAoD,EACjC,EAAE;IACrB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAsC,IAAI,CAAC,CAAC;IAClF,gGAAgG;IAChG,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IACjF,oGAAoG;IACpG,oDAAoD;IACpD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IAEtC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,MAA+B,EAAU,EAAE,CACjE,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE9E,kGAAkG;IAClG,4FAA4F;IAC5F,oGAAoG;IACpG,mGAAmG;IACnG,uFAAuF;IACvF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpC,kGAAkG;IAClG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,2DAA2D;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,yDAAyD;QACnF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,wBAAwB,EAAE;aACvB,qBAAqB,CAAC,eAAe,CAAC;aACtC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,IAAI,QAAQ,IAAI,kBAAkB,IAAI,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACtG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,QAAQ,IAAI,aAAa,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzE,6FAA6F;gBAC7F,gGAAgG;gBAChG,sFAAsF;gBACtF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnB,aAAa,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,WAAW,CACxB,KAAK,EAAE,QAA8B,EAAE,EAAE;QACvC,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO;YAAE,OAAO;QAC9C,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC;QAC7B,SAAS,CAAC,YAAY,CAAC,CAAC;QACxB,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC,oBAAoB,CAC3E,OAAO,CAAC,aAAa,EACrB,QAAQ;YACR,6EAA6E;YAC7E,QAAQ,KAAK,oBAAoB,CAAC,OAAO,IAAI,QAAQ,CACtD,CAAC;YACF,4FAA4F;YAC5F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,sFAAsF;YACtF,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,aAAa,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,OAAO,EAAE,QAAQ,CAAC,CACpB,CAAC;IAEF,yFAAyF;IACzF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,QAAQ,EAAE,gBAAgB,CAAC,YAAY;YACvC,MAAM,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,SAAG,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,CACL,cAAK,SAAS,EAAC,+BAA+B,YAC5C,KAAC,cAAc,KAAG,GACd,CACP,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,CACL,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,CAAC,CAAC,UAAU,IAAI,qBAAqB,CAAC,aAAa,CAAC,GAAoB,GACrF,CACT,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,eAAe,aAC5B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,KAAC,OAAO,cAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAW,EACxF,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,GAAQ,IAC1E,EAEL,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAC5B,eAAK,SAAS,EAAC,iBAAiB,aAC9B,KAAC,IAAI,IAAC,SAAS,EAAC,aAAa,YAAE,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAQ,EAC5E,aAAI,SAAS,EAAC,iBAAiB,YAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC7B,uBACE,KAAC,IAAI,cAAE,KAAK,GAAQ,IADb,KAAK,CAET,CACN,CAAC,GACC,IACD,CACP,EAEA,OAAO,CAAC,QAAQ,IAAI,CACnB,KAAC,IAAI,IAAC,SAAS,EAAC,mBAAmB,YAAE,CAAC,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAQ,CACrH,EAED,iBAAO,SAAS,EAAC,8CAA8C,aAC7D,KAAC,YAAY,IAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAC,GAAI,EACpF,KAAC,IAAI,cAAE,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAQ,IAC1C,EAER,eAAK,SAAS,EAAC,kBAAkB,aAC/B,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAE/C,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GACvB,EACT,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,OAAO,EACvC,SAAS,EAAC,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAElD,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAC1B,IACL,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,MAAM,GAAG,eAAe,CAAC,OAAO,EAChC,GAAG,KAAK,EAC4D;IACpE,MAAM,SAAS,GAAG,uBAAuB,CACvC,qBAAqB,CAAC,4BAA4B,EAClD,mBAAmB,CACpB,CAAC,MAAM,CAAC,CAAC;IACV,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useSearchParams } from 'react-router-dom';\nimport { OAuthConsentDecision } from '@wildo-ai/saas-models';\nimport { CorePresetNames, FrontendComponentType, UserOAuthConsentLabel } from '@wildo-ai/presets-components-models';\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport { CheckboxRoot } from '~wildo-frontend-lib/components/form/controls/boolean/checkbox';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { LoadingSpinner } from '~wildo-frontend-lib/components/feedback/loading-spinner';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport {\n getManualCallsHttpClient,\n type OAuthConsentRequiredResponse,\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport {\n appendAuthRedirectToPath,\n buildAuthRedirectTarget,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\n\n/*\n OIDC interactive-consent screen (S1) — the body rendered by {@link AuthPage_OAuthConsent}.\n \n FLOW (Bearer-authed SPA, NOT a server-rendered page — see the backend `handleConsentDecision`\n * JSDoc): a third-party client redirects the browser here with the OAuth authorize query. This\n * component forwards that query to `GET /oauth/authorize` (Bearer auto-attached) → the backend\n * returns `consent_required` + a single-use consent token + the requesting client / scopes / agent\n * resource. On Approve/Deny it POSTs `{consent_token, decision}` to `/oauth/authorize/decision`,\n * which returns `{ redirect_to }`; the app then `window.location.assign(redirect_to)` to complete the\n * OAuth redirect back to the client (carrying the `code` on approve, `error=access_denied` on deny).\n \n Copy is resolved through {@link UserOAuthConsentLabel} (component\n * `PUBLIC_LAYOUTS_OAUTH_CONSENT`) via {@link useI18n}; the label metadata lives in the\n * companion-scanned `Auth_OAuthConsent.labels.ts`.\n /\n\n// The authorize params this screen forwards verbatim to `GET /oauth/authorize`; the backend validates\n// them (client/redirect allowlist, PKCE). Anything else in the URL is ignored.\nconst AUTHORIZE_PARAM_KEYS = [\n 'response_type',\n 'client_id',\n 'redirect_uri',\n 'code_challenge',\n 'code_challenge_method',\n 'scope',\n 'resource',\n 'state',\n 'nonce',\n] as const;\n\ntype ConsentStatus = 'loading' \| 'ready' \| 'submitting' \| 'error';\n\n/\n Props for the consent screen preset. The screen is self-driven from the authorize query\n * (`useSearchParams`) and the session (`useUserOrgs`), so it takes no external props — this interface\n * exists to satisfy the preset-wrapper contract (preset resolution + the frontend-component spec)\n * shared by every `PUBLIC_LAYOUTS` auth page.\n /\nexport interface PublicLayoutPreset_OAuthConsent_DefaultProps {\n /* Reserved: the consent screen is URL/session-driven and currently accepts no props. /\n readonly _selfDriven?: never;\n}\n\n/* Default preset implementation for {@link FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT}. /\nexport const PublicLayoutPreset_OAuthConsent_Default = (\n _props: PublicLayoutPreset_OAuthConsent_DefaultProps,\n): React.JSX.Element => {\n const { auth } = useUserOrgs();\n const { tComponent, isReady } = useI18n({ component: FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT });\n const [searchParams] = useSearchParams();\n const [status, setStatus] = useState<ConsentStatus>('loading');\n const [consent, setConsent] = useState<OAuthConsentRequiredResponse \| null>(null);\n // The error is held as a label KEY (not resolved copy) so it stays i18n-clean and translatable.\n const [errorLabel, setErrorLabel] = useState<UserOAuthConsentLabel \| null>(null);\n // Item 3 \"remember this app\" — opt-in (default off): on approve, stores a durable grant so a future\n // authorize with covering scopes skips this screen.\n const [remember, setRemember] = useState(false);\n\n const accessToken = auth?.accessToken;\n\n const t = (key: string, params?: Record<string, string>): string =>\n tComponent(FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT, key, params);\n\n // Stale-closure-proof single-flight guard for the decision POST. The buttons already unmount when\n // `status` flips to 'submitting' (see the render below) and the consent token is single-use\n // server-side, but a synchronous double-dispatch could still fire two POSTs before React re-renders\n // — a `status === 'submitting'` check would read the captured (stale) 'ready' in that window, so a\n // ref (set synchronously at the top of `decide`) is the only reliable in-flight latch.\n const submittingRef = useRef(false);\n\n // The authorize query, filtered to the known OAuth params (verbatim pass-through to the backend).\n const authorizeParams = useMemo(() => {\n const params = new URLSearchParams();\n for (const key of AUTHORIZE_PARAM_KEYS) {\n const value = searchParams.get(key);\n if (value) params.set(key, value);\n }\n return params;\n }, [searchParams]);\n\n // Load the consent request once the user is authenticated.\n useEffect(() => {\n if (!accessToken) return; // the Navigate guard below sends the user to login first\n let cancelled = false;\n setStatus('loading');\n setErrorLabel(null);\n getManualCallsHttpClient()\n .oauthAuthorizeConsent(authorizeParams)\n .then((response) => {\n if (cancelled) return;\n if (response && 'consent_required' in response && response.consent_required && response.consent_token) {\n setConsent(response);\n setStatus('ready');\n } else if (response && 'redirect_to' in response && response.redirect_to) {\n // Trusted (non-`requiresConsent`) client — the backend already minted the code; complete the\n // OAuth redirect back to the client WITHOUT a consent screen. (`window.location.assign` because\n // the redirect target is cross-origin; the XHR could not have followed a 302 itself.)\n window.location.assign(response.redirect_to);\n } else {\n setStatus('error');\n setErrorLabel(UserOAuthConsentLabel.ERROR_INVALID);\n }\n })\n .catch(() => {\n if (cancelled) return;\n setStatus('error');\n setErrorLabel(UserOAuthConsentLabel.ERROR_LOAD);\n });\n return () => {\n cancelled = true;\n };\n }, [accessToken, authorizeParams]);\n\n const decide = useCallback(\n async (decision: OAuthConsentDecision) => {\n if (!consent \|\| submittingRef.current) return;\n submittingRef.current = true;\n setStatus('submitting');\n setErrorLabel(null);\n try {\n const { redirect_to } = await getManualCallsHttpClient().oauthConsentDecision(\n consent.consent_token,\n decision,\n // Only an APPROVE meaningfully \"remembers\"; a deny sends `false` harmlessly.\n decision === OAuthConsentDecision.APPROVE && remember,\n );\n // Complete the OAuth redirect back to the third-party client (carries `code` or the error).\n window.location.assign(redirect_to);\n } catch {\n // Release the local latch. A lost response may follow server-side token consumption;\n // the error view does not retry this request token. A fresh flow obtains fresh state.\n submittingRef.current = false;\n setStatus('error');\n setErrorLabel(UserOAuthConsentLabel.ERROR_DECISION);\n }\n },\n [consent, remember],\n );\n\n // Not authenticated → send to login, returning to this exact consent request afterwards.\n if (!accessToken) {\n const target = buildAuthRedirectTarget({\n pathname: CommonRoutePaths.oauthConsent,\n search: `?${searchParams.toString()}`,\n });\n return <Navigate to={appendAuthRedirectToPath(CommonRoutePaths.login, target)} replace />;\n }\n\n if (status === 'loading' \|\| status === 'submitting' \|\| !isReady) {\n return (\n <div className=\"py-region flex justify-center\">\n <LoadingSpinner />\n </div>\n );\n }\n\n if (status === 'error' \|\| !consent) {\n return (\n <Alert variant=\"destructive\">\n <AlertDescription>{t(errorLabel ?? UserOAuthConsentLabel.ERROR_GENERIC)}</AlertDescription>\n </Alert>\n );\n }\n\n return (\n <div className=\"space-y-group\">\n <div className=\"text-center space-y-item-xs\">\n <Heading>{t(UserOAuthConsentLabel.TITLE, { clientName: consent.client.name })}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserOAuthConsentLabel.SUB_TITLE)}</Text>\n </div>\n\n {consent.scopes.length > 0 && (\n <div className=\"space-y-element\">\n <Text className=\"font-medium\">{t(UserOAuthConsentLabel.SCOPES_INTRO)}</Text>\n <ul className=\"space-y-item-xs\">\n {consent.scopes.map((scope) => (\n <li key={scope}>\n <Text>{scope}</Text>\n </li>\n ))}\n </ul>\n </div>\n )}\n\n {consent.resource && (\n <Text className=\"text-sm break-all\">{t(UserOAuthConsentLabel.AGENT_ENDPOINT, { resource: consent.resource })}</Text>\n )}\n\n <label className=\"flex items-center gap-item-xs cursor-pointer\">\n <CheckboxRoot checked={remember} onCheckedChange={(c) => setRemember(c === true)} />\n <Text>{t(UserOAuthConsentLabel.REMEMBER)}</Text>\n </label>\n\n <div className=\"flex gap-element\">\n <Button\n variant={ButtonVariants_Variant.OUTLINE}\n className=\"flex-1\"\n onClick={() => decide(OAuthConsentDecision.DENY)}\n >\n {t(UserOAuthConsentLabel.DENY)}\n </Button>\n <Button\n variant={ButtonVariants_Variant.DEFAULT}\n className=\"flex-1\"\n onClick={() => decide(OAuthConsentDecision.APPROVE)}\n >\n {t(UserOAuthConsentLabel.APPROVE)}\n </Button>\n </div>\n </div>\n );\n};\n\n/\n Preset-resolving wrapper for the OIDC consent screen (mirrors every other `PUBLIC_LAYOUTS` auth\n * page). Resolves `PUBLIC_LAYOUTS_OAUTH_CONSENT` to its registered preset (default =\n * {@link PublicLayoutPreset_OAuthConsent_Default}) so an application can swap in a branded consent UI\n * via the component registry. {@link AuthPage_OAuthConsent} renders this wrapper.\n */\nexport function Auth_OAuthConsent({\n preset = CorePresetNames.DEFAULT,\n ...props\n}: PublicLayoutPreset_OAuthConsent_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const Component = createComponentResolver<PublicLayoutPreset_OAuthConsent_DefaultProps>(\n FrontendComponentType.PUBLIC_LAYOUTS_OAUTH_CONSENT,\n 'Auth_OAuthConsent',\n )(preset);\n return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_PasswordLost.labels.js CHANGED Viewed

@@ -27,13 +27,13 @@ export const PublicLayoutsUserPasswordLostLabels = [
         ref: UserPasswordLostLabel.POLICY_MIN_LENGTH,
         kind: LabelKind.DESCRIPTION,
         purpose: 'Password-policy hint for the minimum required length',
-        params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],
+        params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain', isCount: true }],
     },
     {
         ref: UserPasswordLostLabel.POLICY_MAX_LENGTH,
         kind: LabelKind.DESCRIPTION,
         purpose: 'Password-policy hint for the maximum allowed length',
-        params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],
+        params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain', isCount: true }],
     },
     { ref: UserPasswordLostLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },
     { ref: UserPasswordLostLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },

package/dist/esm/components/auth/Auth_PasswordLost.labels.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_PasswordLost.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_PasswordLost.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEjK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACtH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5H,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACtJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC3I,EAAE,GAAG,EAAE,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACjJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACrH,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACpH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAChI,EAAE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC1J,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IAClJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IAClJ;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;~~KAClG~~;IACD;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;~~KACjG~~;IACD,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzJ;QACE,GAAG,EAAE,qBAAqB,CAAC,kBAAkB;QAC7C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EACL,0VAA0V;KAC7V;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserPasswordLostLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserPasswordLostLabels: LabellingUnitaryDef[] = [\n { ref: UserPasswordLostLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the request-password-reset screen' },\n { ref: UserPasswordLostLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the reset-link request' },\n { ref: UserPasswordLostLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email input that receives the reset link' },\n { ref: UserPasswordLostLabel.SEND_RESET_PASSWORD_LINK, kind: LabelKind.BUTTON, purpose: 'Button that emails the password-reset link' },\n { ref: UserPasswordLostLabel.SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the reset link is being sent' },\n { ref: UserPasswordLostLabel.SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the reset link was sent' },\n { ref: UserPasswordLostLabel.SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the reset link' },\n { ref: UserPasswordLostLabel.BACK_TO_LOGIN, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen from the request-reset view' },\n { ref: UserPasswordLostLabel.RESET_TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the set-new-password screen reached via the reset link' },\n { ref: UserPasswordLostLabel.RESET_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the set-new-password screen' },\n { ref: UserPasswordLostLabel.NEW_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n { ref: UserPasswordLostLabel.CONFIRM_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n { ref: UserPasswordLostLabel.RESET_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that submits the new password' },\n { ref: UserPasswordLostLabel.RESETTING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the new password is being saved' },\n { ref: UserPasswordLostLabel.RESET_SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the password was reset' },\n { ref: UserPasswordLostLabel.RESET_SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming the password was changed and inviting sign-in' },\n { ref: UserPasswordLostLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen after a successful reset' },\n { ref: UserPasswordLostLabel.PASSWORD_MISMATCH, kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n { ref: UserPasswordLostLabel.INVALID_TOKEN, kind: LabelKind.MESSAGE, purpose: 'Error shown when the reset token is missing, invalid, or expired' },\n { ref: UserPasswordLostLabel.UNEXPECTED_ERROR, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the reset request fails unexpectedly' },\n {\n ref: UserPasswordLostLabel.POLICY_MIN_LENGTH,\n kind: LabelKind.DESCRIPTION,\n purpose: 'Password-policy hint for the minimum required length',\n params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],\n },\n {\n ref: UserPasswordLostLabel.POLICY_MAX_LENGTH,\n kind: LabelKind.DESCRIPTION,\n purpose: 'Password-policy hint for the maximum allowed length',\n params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],\n },\n { ref: UserPasswordLostLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },\n { ref: UserPasswordLostLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },\n { ref: UserPasswordLostLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },\n { ref: UserPasswordLostLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },\n {\n ref: UserPasswordLostLabel.POLICY_BLOCKLISTED,\n kind: LabelKind.DESCRIPTION,\n purpose:\n 'Refusal shown when the chosen password is a known common guess, the application\\'s own name, or the local part of the user\\'s own email address. It reports a property of THIS password rather than an unmet rule, so it must not read like the other hints — there is no character the user can add to satisfy it, only a different password to choose.',\n },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_PASSWORD_LOST, PublicLayoutsUserPasswordLostLabels);\n"]}
1	+ {"version":3,"file":"Auth_PasswordLost.labels.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_PasswordLost.labels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAA4B,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAEjK,4EAA4E;AAC5E,8EAA8E;AAC9E,4DAA4D;AAE5D,MAAM,CAAC,MAAM,mCAAmC,GAA0B;IACxE,EAAE,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACtH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACnI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,8DAA8D,EAAE;IAC5I,EAAE,GAAG,EAAE,qBAAqB,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,uDAAuD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC5H,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IACtJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC3I,EAAE,GAAG,EAAE,qBAAqB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACjJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACrH,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACpH,EAAE,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,0DAA0D,EAAE;IACtI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACjI,EAAE,GAAG,EAAE,qBAAqB,CAAC,qBAAqB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE;IAC5J,EAAE,GAAG,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAChI,EAAE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,sEAAsE,EAAE;IAC1J,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;IAClJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,+DAA+D,EAAE;IAClJ;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KACjH;IACD;QACE,GAAG,EAAE,qBAAqB,CAAC,iBAAiB;QAC5C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KAChH;IACD,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACrJ,EAAE,GAAG,EAAE,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACvI,EAAE,GAAG,EAAE,qBAAqB,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACzJ;QACE,GAAG,EAAE,qBAAqB,CAAC,kBAAkB;QAC7C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EACL,0VAA0V;KAC7V;CACF,CAAC;AACF,uBAAuB,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { FrontendComponentType, LabelKind, type LabellingUnitaryDef, registerComponentLabels, UserPasswordLostLabel } from '@wildo-ai/presets-components-models';\n\n// Companion-only label metadata for this component: keys + params + per-key\n// purpose / kind / variable meaning. Statically scanned by the dev companion;\n// NOT imported at runtime, so it never ships in the bundle.\n\nexport const PublicLayoutsUserPasswordLostLabels: LabellingUnitaryDef[] = [\n { ref: UserPasswordLostLabel.TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the request-password-reset screen' },\n { ref: UserPasswordLostLabel.SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line explaining the reset-link request' },\n { ref: UserPasswordLostLabel.EMAIL_ADDRESS, kind: LabelKind.LABEL, purpose: 'Field label for the email input that receives the reset link' },\n { ref: UserPasswordLostLabel.SEND_RESET_PASSWORD_LINK, kind: LabelKind.BUTTON, purpose: 'Button that emails the password-reset link' },\n { ref: UserPasswordLostLabel.SENDING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the reset link is being sent' },\n { ref: UserPasswordLostLabel.SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the reset link was sent' },\n { ref: UserPasswordLostLabel.SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text telling the user to check their inbox for the reset link' },\n { ref: UserPasswordLostLabel.BACK_TO_LOGIN, kind: LabelKind.LABEL, purpose: 'Link back to the sign-in screen from the request-reset view' },\n { ref: UserPasswordLostLabel.RESET_TITLE, kind: LabelKind.HEADING, purpose: 'Heading of the set-new-password screen reached via the reset link' },\n { ref: UserPasswordLostLabel.RESET_SUB_TITLE, kind: LabelKind.DESCRIPTION, purpose: 'Supporting line for the set-new-password screen' },\n { ref: UserPasswordLostLabel.NEW_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the new-password input' },\n { ref: UserPasswordLostLabel.CONFIRM_PASSWORD, kind: LabelKind.LABEL, purpose: 'Field label for the confirm-new-password input' },\n { ref: UserPasswordLostLabel.RESET_BUTTON, kind: LabelKind.BUTTON, purpose: 'Button that submits the new password' },\n { ref: UserPasswordLostLabel.RESETTING, kind: LabelKind.MESSAGE, purpose: 'In-progress status while the new password is being saved' },\n { ref: UserPasswordLostLabel.RESET_SUCCESS_TITLE, kind: LabelKind.HEADING, purpose: 'Heading confirming the password was reset' },\n { ref: UserPasswordLostLabel.RESET_SUCCESS_MESSAGE, kind: LabelKind.MESSAGE, purpose: 'Body text confirming the password was changed and inviting sign-in' },\n { ref: UserPasswordLostLabel.LOGIN_LINK, kind: LabelKind.LABEL, purpose: 'Link to the sign-in screen after a successful reset' },\n { ref: UserPasswordLostLabel.PASSWORD_MISMATCH, kind: LabelKind.MESSAGE, purpose: 'Validation error when the new password and confirmation do not match' },\n { ref: UserPasswordLostLabel.INVALID_TOKEN, kind: LabelKind.MESSAGE, purpose: 'Error shown when the reset token is missing, invalid, or expired' },\n { ref: UserPasswordLostLabel.UNEXPECTED_ERROR, kind: LabelKind.MESSAGE, purpose: 'Generic error shown when the reset request fails unexpectedly' },\n {\n ref: UserPasswordLostLabel.POLICY_MIN_LENGTH,\n kind: LabelKind.DESCRIPTION,\n purpose: 'Password-policy hint for the minimum required length',\n params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain', isCount: true }],\n },\n {\n ref: UserPasswordLostLabel.POLICY_MAX_LENGTH,\n kind: LabelKind.DESCRIPTION,\n purpose: 'Password-policy hint for the maximum allowed length',\n params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain', isCount: true }],\n },\n { ref: UserPasswordLostLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },\n { ref: UserPasswordLostLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },\n { ref: UserPasswordLostLabel.POLICY_NUMBER, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one digit' },\n { ref: UserPasswordLostLabel.POLICY_SPECIAL_CHAR, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one special character' },\n {\n ref: UserPasswordLostLabel.POLICY_BLOCKLISTED,\n kind: LabelKind.DESCRIPTION,\n purpose:\n 'Refusal shown when the chosen password is a known common guess, the application\\'s own name, or the local part of the user\\'s own email address. It reports a property of THIS password rather than an unmet rule, so it must not read like the other hints — there is no character the user can add to satisfy it, only a different password to choose.',\n },\n];\nregisterComponentLabels(FrontendComponentType.PUBLIC_LAYOUTS_USER_PASSWORD_LOST, PublicLayoutsUserPasswordLostLabels);\n"]}

package/dist/esm/components/auth/Auth_Register.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Register.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Register.tsx"],"names":[],"mappings":"AAwBA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmDjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AA4JxH,MAAM,WAAW,4CAA4C;CAC5D;AAED,eAAO,MAAM,uCAAuC,GAAI,IAAI,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,~~OAqqBpH~~,CAAC;AAyCF,wBAAgB,aAAa,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoBpK"}
1	+ {"version":3,"file":"Auth_Register.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Register.tsx"],"names":[],"mappings":"AAwBA,OAAO,KAA4D,MAAM,OAAO,CAAC;AAmDjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kFAAkF,CAAC;AA4JxH,MAAM,WAAW,4CAA4C;CAC5D;AAED,eAAO,MAAM,uCAAuC,GAAI,IAAI,4CAA4C,KAAG,KAAK,CAAC,GAAG,CAAC,OA4qBpH,CAAC;AAyCF,wBAAgB,aAAa,CAAC,EAAE,MAAgC,EAAE,GAAG,KAAK,EAAE,EAAE,4CAA4C,GAAG,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoBpK"}

package/dist/esm/components/auth/Auth_Register.js CHANGED Viewed

@@ -243,6 +243,13 @@ export const PublicLayoutPreset_UserRegister_Default = ({}) => {
     const t = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);
     const tAuth = (key) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);
     const authRedirectTarget = useMemo(() => extractAuthRedirectFromSearch(location.search), [location.search]);
+    /**
+     * The address a link into sign-up names (`?email=`), filled in for the person to confirm (#2618). A representing
+     * organization's invitation sends its invitee here with the invited address, because its proposal reaches only an
+     * organization whose owner proved THAT address. A suggestion only: the field stays editable, and the address is
+     * proven by the verification email like any other.
+     */
+    const prefilledEmail = useMemo(() => new URLSearchParams(location.search).get('email')?.trim() ?? '', [location.search]);
     const loginPath = useMemo(() => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget), [authRedirectTarget]);
     const postAuthRedirect = useMemo(() => resolvePostAuthRedirect(location.search), [location.search]);
     // ─── Social OAuth2 providers from resolved config ───
@@ -556,7 +563,7 @@ export const PublicLayoutPreset_UserRegister_Default = ({}) => {
                     method: activeMethod,
                 }, children: _jsx(AutomatedForm
                 // One form per method: switching remounts it with that method's schema and defaults.
-                , { schema: registerFormSchema, defaultValues: { email: '', ...(collectsNamesAtSignUp && { firstName: '', lastName: '' }), ...(showOrgNameField && { organizationName: '' }), ...(showPasswordFields && { password: '', confirmPassword: '' }) }, onSubmit: handleRegisterSubmit, onFormReady: handleFormReady, validationMode: ValidationMode.ON_BLUR, disabled: isLoading, layoutTemplate: RegisterFormTemplate, labels: {
+                , { schema: registerFormSchema, defaultValues: { email: prefilledEmail, ...(collectsNamesAtSignUp && { firstName: '', lastName: '' }), ...(showOrgNameField && { organizationName: '' }), ...(showPasswordFields && { password: '', confirmPassword: '' }) }, onSubmit: handleRegisterSubmit, onFormReady: handleFormReady, validationMode: ValidationMode.ON_BLUR, disabled: isLoading, layoutTemplate: RegisterFormTemplate, labels: {
                         fields: {
                             email: t(UserRegisterLabel.EMAIL_ADDRESS),
                             ...(collectsNamesAtSignUp && { firstName: t(UserRegisterLabel.FIRST_NAME), lastName: t(UserRegisterLabel.LAST_NAME) }),

package/dist/esm/components/auth/Auth_Register.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"Auth_Register.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Register.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC/H,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,UAAU,EACV,+CAA+C,EAC/C,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,SAAS,GAGV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,6CAA6C,EAC7C,iCAAiC,EACjC,4BAA4B,EAC5B,qCAAqC,GAEtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EACL,iCAAiC,GAGlC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mFAAmF,CAAC;AAClI,OAAO,EAAE,uBAAuB,EAAE,MAAM,+EAA+E,CAAC;AACxH,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iEAAiE,CAAC;AACjI,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AACzI,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAE7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AAC5G,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAEhG,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,uFAAuF,CAAC;AAG5K,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAE1H,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,mBAAmB,GAA0B,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AAgCpH,MAAM,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAAuB;IACvE,gBAAgB,EAAE,EAAE;IACpB,cAAc,EAAE,8BAA8B,CAAC,iBAAiB;IAChE,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,EAAE;IACnB,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;IACrB,aAAa,EAAE,EAAE;IACjB,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;IAC1B,MAAM,EAAE,UAAU,CAAC,QAAQ;CAC5B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,yBAAyB,GAG1B,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;IACzB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC/E,OAAO,KAAC,iCAAiC,IAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,GAAI,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAa,GAAG,EAAE;IAC1C,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,4BAA4B;KAC9D,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAE/F,MAAM,cAAc,GAAwB,YAAY,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACnG,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IACxG,MAAM,gBAAgB,GAAG,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC;IAExD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,mGAAmG;IACnG,oGAAoG;IACpG,wDAAwD;IACxD,MAAM,WAAW,GAAG,gBAAgB;QAClC,CAAC,CAAC,iBAAiB,CAAC,eAAe;QACnC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,OAAO;YAC7B,CAAC,CAAC,iBAAiB,CAAC,qBAAqB;YACzC,CAAC,CAAC,iBAAiB,CAAC,wBAAwB,CAAC;IACjD,MAAM,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,yBAAyB,CAAC;IAEvH,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAC1B,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,kBAAkB,GAAG,EAOpC,CAAC,YAAY,CAAC,kBAAkB,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CACpF,KAAC,SAAS,IAAmB,IAAI,EAAE,QAAQ,CAAC,EAAE,IAA9B,QAAQ,CAAC,EAAE,CAAuB,CACnD,CAAC,EACF,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,iBAAiB,GAAG,EAEnC,gBAAgB,IAAI,KAAC,yBAAyB,IAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAI,EAEpG,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAkBD,KAAC,yBAAyB,IAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,GAAI,EAE3D,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,EACrB,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,EACnC,SAAS;gBACT;;;;;;;;;;mBAUG;gBACH,QAAQ,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,6CAA6C,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,GACnH,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAgD,EAAqB,EAAE;IAC7H,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,WAAW,EAAE,CAAC;IACpD,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF;;;;;OAKG;IACH,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,wBAAwB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;;;;;OAMG;IACH,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,EAAE,8BAA8B,IAAI,8BAA8B,CAAC,iBAAiB,CAAC;IAEhI;;;;;;;;;;;;;;OAcG;IACH,MAAM,wBAAwB,GAAG,iCAAiC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzF,MAAM,gCAAgC,GAAG,OAAO,CAC9C,GAAG,EAAE,CAAC,qCAAqC,CACzC,SAAS,CAAC,UAAU,EAAE,wBAAwB,IAAI,EAAE,EACpD,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACxB,2FAA2F;IAC3F,kBAAkB;IAClB,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAC9C,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,+BAA+B,CAAC,iBAAiB,CAAC,CAAC;IAClH,oGAAoG;IACpG,CAAC,SAAS,CAAC,UAAU,EAAE,wBAAwB,EAAE,wBAAwB,CAAC,CAC3E,CAAC;IAEF;;;;;;;;;;;OAWG;IACH,MAAM,iBAAiB,GAAG,OAAO,CAC/B,GAAG,EAAE;QACH,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,gCAAgC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO;YACP,QAAQ,EAAE,4BAA4B,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE;gBAC7H,eAAe,EAAE,wBAAwB;aAC1C,CAAC;SACH,CAAC,CAAC,CAAC;IACN,CAAC;IACD,sHAAsH;IACtH,CAAC,gCAAgC,EAAE,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,wBAAwB,CAAC,CACpG,CAAC;IAEF,6FAA6F;IAC7F,MAAM,eAAe,GAAG,OAAO,CAC7B,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EACjD,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CACxC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,sBAAsB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5C,gBAAgB,EAAE,gCAAgC;QAClD,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,QAAQ,EAAE,yBAAyB;QACnC,WAAW,EAAE,4BAA4B;QACzC,aAAa,EAAE,qBAAqB;QACpC,gBAAgB;QAChB,MAAM,EAAE,UAAU,CAAC,eAAe;KACnC,CAAC,EAAE,CAAC,gCAAgC,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEhK;;;;;OAKG;IACH,MAAM,oBAAoB,GAAG,gCAAgC,CAAC,MAAM,GAAG,CAAC;WACnE,6CAA6C,CAAC,cAAc,CAAC;WAC7D,CAAC,yBAAyB,CAAC;IAEhC;;;;;;;;;;;OAWG;IACH,MAAM,yBAAyB,GAAG,OAAO,CAAW,GAAG,EAAE;QACvD,IAAI,gCAAgC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,IAAI,6CAA6C,CAAC,cAAc,CAAC,IAAI,CAAC,yBAAyB;YAAE,OAAO,EAAE,CAAC;QAC3G,OAAO,gCAAgC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC,EAAE,CAAC,gCAAgC,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAGlF,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,EAAE;QAChD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACzF,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,iCAAiC,CAAC;YACvC,eAAe,EAAE,YAAY,CAAC,UAAU,EAAE,qBAAqB;SAChE,CAAC,CAAC;IACL,CAAC,EAAE;QACD,YAAY,CAAC,UAAU,EAAE,qBAAqB;QAC9C,YAAY,CAAC,kBAAkB,CAAC,cAAc;KAC/C,CAAC,CAAC;IACH,MAAM,6BAA6B,GAAG,OAAO,CAAC,GAAG,EAAE;QACjD,OAAO,uCAAuC,CAC5C,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAC7E,CAAC;IACJ,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnC,kGAAkG;IAClG,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC1G,EAAE,CACH,CAAC;IACF,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACpD,SAAS,EAAE,cAAc;QACzB,IAAI,EAAE,6BAA6B;KACpC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1E,CAAC,kBAAkB,CAAC,CACrB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,uDAAuD;IACvD,MAAM,wBAAwB,GAAG,4BAA4B,CAAC,MAAM,GAAG,CAAC,CAAC;IAEzE,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,WAAmB,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC,EAAE,CAAC,yBAAyB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAEzE,sDAAsD;IACtD,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC5G,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;QACrC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEvB,gBAAgB;IAChB,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD;;;;;OAKG;IACH,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,QAAQ,CAA6B,IAAI,CAAC,CAAC;IACjG,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE3D;;;;OAIG;IACH,4BAA4B,CAAC;QAC3B,WAAW,EAAE,mBAAmB,KAAK,mBAAmB,CAAC,uBAAuB,IAAI,IAAI,CAAC,WAAW;QACpG,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,KAAK,EAAE,eAAe;QACtB,kBAAkB;KACnB,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAe,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,cAAc,IAAI,CAAC;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;oBACd,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,OAAO,IAAI,GAAG,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC,eAAe,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO;QACnD,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC;YAC1E,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,cAAc,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,kDAAkD;IAEzF,yDAAyD;IACzD,MAAM,cAAc,GAAwB,OAAO,CAAC,GAAG,EAAE;QACvD,OAAQ,YAAY,CAAC,cAAsC,IAAI,uBAAuB,CAAC;IACzF,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;IAElC,uDAAuD;IACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE;QACpC,IAAI,CAAC,YAAY,CAAC,gBAAgB;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,OAAO,GAAG,+CAA+C,CAC7D,SAAS,CAAC,iBAAiB,EAC3B,YAAY,CAAC,gBAAgB,CAC9B,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;eACtB,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,cAAc,EAAE,aAAa;oBACjD,sBAAsB,CAAC,GAAG,CAAC;IACrC,CAAC,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEjE,sDAAsD;IACtD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,OAAO,YAAY,CAAC,kBAAkB,CAAC;IACzC,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,kBAAkB,CAAC,cAAc,CAAC;IACzD;;;;OAIG;IACH,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC7E,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACvI,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,YAAY,KAAK,IAAI,CAAC;IACvC;;;;;;;;;;OAUG;IACH,MAAM,qBAAqB,GAAG,QAAQ,IAAI,YAAY,KAAK,IAAI,CAAC;IAChE,MAAM,kBAAkB,GAAG,YAAY,KAAK,UAAU,CAAC,QAAQ,CAAC;IAChE,MAAM,WAAW,GAAG,wBAAwB,IAAI,QAAQ,CAAC;IAEzD;;;;;OAKG;IACH;;;;;;OAMG;IACH,MAAM,wBAAwB,GAAG,YAAY,CAAC,kBAAkB,CAAC,0BAA0B,IAAI,EAAE,CAAC;IAClG;;;;;OAKG;IACH,MAAM,qBAAqB,GAAG,YAAY,CAAC,kBAAkB,CAAC,uBAAuB,KAAK,4BAA4B,CAAC,UAAU,CAAC;IAElI,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC;;;;;;;;;;;;;;WAcG;QACH,MAAM,cAAc,GAAiC,EAAE,CAAC;QACxD,KAAK,MAAM,QAAQ,IAAI,wBAAwB,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,4BAA4B,CAAC,MAAM;gBAChE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;gBACZ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtB,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,qBAAqB,GAAG,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,qBAAqB;YACrC,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,MAAM,gBAAgB,GAAG,gBAAgB;YACvC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,+FAA+F;QAC/F,kEAAkE;QAClE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAM,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAClE,EAAE,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAE/F,qHAAqH;IACrH,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,kEAAkE;IAClE,+DAA+D;IAC/D,kEAAkE;IAClE,IAAI,mBAAmB,KAAK,mBAAmB,CAAC,SAAS,EAAE,CAAC;QAC1D,oHAAoH;QACpH,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAED,IAAI,mBAAmB,KAAK,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;QACxE,yGAAyG;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACjC;;;;;WAKG;QACH,MAAM,iBAAiB,GAAG,mBAAmB,KAAK,mBAAmB,CAAC,qBAAqB,CAAC;QAC5F,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;QAC7G,MAAM,OAAO,GAAG,iBAAiB;YAC/B,CAAC,CAAC,iBAAiB,CAAC,wBAAwB;YAC5C,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,UAAU;gBACtD,CAAC,CAAC,iBAAiB,CAAC,uBAAuB;gBAC3C,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,eAAe;oBAC3D,CAAC,CAAC,iBAAiB,CAAC,uBAAuB;oBAC3C,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,0BAA0B;wBACtE,CAAC,CAAC,iBAAiB,CAAC,kCAAkC;wBACtD,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC;QAC5C;;;;WAIG;QACH,MAAM,wBAAwB,GAAG,mBAAmB,KAAK,mBAAmB,CAAC,0BAA0B,CAAC;QACxG,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,cAAK,SAAS,EAAC,0FAA0F,YACvG,cAAK,SAAS,EAAC,sBAAsB,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,YACzG,eAAM,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,EAAC,sGAAsG,GAAG,GAC1J,GACF,EACN,KAAC,OAAO,cAAE,CAAC,CAAC,KAAK,CAAC,GAAW,EAC7B,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,IAClD,EAEL,wBAAwB,IAAI,CAC7B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,GAAG,EACxC,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,IAAI,EACpC,SAAS,EAAC,oBAAoB,EAC9B,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,YAAY,KAAK,SAAS,IAAI,cAAc,GAAG,CAAC,YAEzD,YAAY,KAAK,SAAS;wCACzB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;wCACrC,CAAC,CAAC,cAAc,GAAG,CAAC;4CAClB,CAAC,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC,KAAK,cAAc,IAAI;4CAChE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAC/B,IACJ,EACN,YAAY,KAAK,MAAM,IAAI,CAC1B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAoB,GACpE,CACT,EACA,YAAY,KAAK,OAAO,IAAI,WAAW,IAAI,CAC1C,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,WAAW,GAAoB,GAC5C,CACT,IACG,CACL,EAED,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAqB,GACtF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,oBAAoB;IACpB,kEAAkE;IAClE,MAAM,oBAAoB,GAAG,KAAK,EAAE,IAA2E,EAAE,EAAE;QACjH,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,iBAAiB,EAAE,CAAC;QAEpB,MAAM,MAAM,GAAG,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC;QACnD,IAAI,MAAM,KAAK,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,SAAS,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClG,CAAC,CAAC;gBACH,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;gBACpC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,+FAA+F;gBAC/F,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,yFAAyF;gBACzF,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS;gBACzF,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS;gBAC5D;;;;;;;mBAOG;gBACH,cAAc,EAAE,wBAAwB,CAAC,MAAM,GAAG,CAAC;oBACjD,CAAC,CAAC,MAAM,CAAC,WAAW,CAClB,wBAAwB;yBACrB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAG,IAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;yBAChF,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CACjB;oBAC9C,CAAC,CAAC,SAAS;gBACb;;;;mBAIG;gBACH,MAAM;gBACN,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D;;;;mBAIG;gBACH,GAAG,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC;oBACtC,CAAC,CAAC,EAAE,kCAAkC,EAAE,yBAAyB,EAAE;oBACnE,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;YACtD,IAAI,YAAY,EAAE,CAAC;gBACjB,kBAAkB,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;gBAClF,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iBAAiB,IAAI,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;iBACjG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,wBAAwB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,GAAQ,IAClF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAqB,GACtF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IACtE,EAsBL,4BAA4B,CAAC,MAAM,GAAG,CAAC,IAAI,gCAAgC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,CACnH,KAAC,sBAAsB,CAAC,QAAQ,IAAC,KAAK,EAAE,sBAAsB,YAC5D,KAAC,yBAAyB,IAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,GAAI,GAC3B,CACnC,EAED,KAAC,qBAAqB,IACpB,SAAS,EAAE,4BAA4B,EACvC,eAAe,EAAE,iBAAiB,EAClC,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,EACtC,QAAQ,EAAE,oBAAoB,EAC9B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EACrD,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAC7C,WAAW,EAAE,WAAW,GACxB,EAED,QAAQ,IAAI,YAAY,KAAK,IAAI,IAAI,CACpC,KAAC,sBAAsB,CAAC,QAAQ,IAC9B,KAAK,EAAE;oBACL,gBAAgB,EAAE,gCAAgC;oBAClD,cAAc;oBACd,iBAAiB;oBACjB,eAAe;oBACf,QAAQ,EAAE,yBAAyB;oBACnC,WAAW,EAAE,4BAA4B;oBACzC,aAAa,EAAE,qBAAqB;oBACpC,gBAAgB;oBAChB,MAAM,EAAE,YAAY;iBACrB,YAEH,KAAC,aAAa;gBACZ,qFAAqF;oBAErF,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,qBAAqB,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,kBAAkB,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,EAAE,EAChN,QAAQ,EAAE,oBAAoB,EAC9B,WAAW,EAAE,eAAe,EAC5B,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,cAAc,EAAE,oBAAoB,EACpC,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,KAAK,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;4BACzC,GAAG,CAAC,qBAAqB,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;4BACtH,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,CAAC;4BACrF,GAAG,CAAC,kBAAkB,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;yBAC/H;qBACF,IAfI,YAAY,CAgBjB,GACgC,CACnC,EAOA,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChC,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EACrE,KAAC,IAAI,IAAC,SAAS,EAAC,sDAAsD,YAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,GAAQ,EACvH,KAAC,oBAAoB,IACnB,OAAO,EAAE,kBAAkB;wBAC3B;;;;;2BAKG;wBACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,EAAE;4BACzD,eAAe,EAAE,4BAA4B;4BAC7C,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC;4BACxD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;4BACvC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,gCAAgC,CAAC;gCACzE,WAAW,EAAE,QAAQ,CAAC,WAAW;gCACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;gCACjC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gCACjD,UAAU,EAAE,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK;gCAChE,SAAS;6BACV,CAAC;yBACH,CAAC,EACF,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,SAAS,GACnB,IACD,CACJ,EAED,cAAK,SAAS,EAAC,sBAAsB,YACnC,MAAC,IAAI,IAAC,SAAS,EAAC,SAAS,aACtB,CAAC,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAC/C,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAQ,IAC3D,GACH,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,uBAAuB,CAAC,EAC/B,IAAI,GAGL;IACC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,4BAA4B;KAC9D,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1E,CAAC,kBAAkB,CAAC,CACrB,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,IAAI,KAAK,gBAAgB,CAAC,eAAe;QACvD,CAAC,CAAC,iBAAiB,CAAC,eAAe;QACnC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,UAAU;YACpC,CAAC,CAAC,iBAAiB,CAAC,UAAU;YAC9B,CAAC,CAAC,iBAAiB,CAAC,qBAAqB,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAE/F,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,IAClD,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAqB,GACtF,IACL,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IAC/I,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,+FAA+F;IAC/F,kEAAkE;IAClE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,2BAA2B,EAAE,CAAC;QACjE,OAAO,KAAC,uBAAuB,IAAC,IAAI,EAAE,YAAY,CAAC,kBAAkB,CAAC,IAAI,GAAI,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACrK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import { CorePresetNames, FrontendComponentType, UserAuthLabel, UserRegisterLabel } from '@wildo-ai/presets-components-models';\nimport {\n OnboardingSurveyQuestionType,\n ProfileNamesCollectionMoment,\n AuthMethod,\n findOrganizationTypeRegistrationCreationMatches,\n OrganizationNameSource,\n RegistrationMode,\n UserRegisterFormDtoSchema,\n AuthUtils,\n type PasswordPolicyRules,\n type UserRegisterFormDto,\n} from '@wildo-ai/saas-models';\nimport {\n GovernedDocumentAcceptanceMode,\n GovernedDocumentInteractionKind,\n governedDocumentAcceptanceRequiresExplicitAct,\n requiresApprovedGovernedDocuments,\n resolveInForcePublicDocument,\n selectGovernedDocumentReleasesInForce,\n type GovernedDocumentPublicDocument,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { z } from 'zod/v4';\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useFormContext } from 'react-hook-form';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport {\n GovernedDocumentAcceptanceControl,\n type GovernedDocumentAcceptanceState,\n type RequiredDocumentPresentation,\n} from '~wildo-frontend-lib/components/compliance/GovernedDocumentAcceptanceControl';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { extractServerValidationErrors } from '~wildo-frontend-lib/components/form/validation-errors/form-error-extraction.utils';\nimport { useServerErrorInjection } from '~wildo-frontend-lib/components/form/validation-errors/useServerErrorInjection';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { OAuthProvidersSection, SSO_PROVIDER_BRAND_META } from '~wildo-frontend-lib/components/auth/utils/OAuthProvidersSection';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { resolveAuthMethodChoiceLabel } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { DEFAULT_PASSWORD_POLICY, PasswordStrengthIndicator } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport {\n extractPasswordPolicyErrorMessage,\n resolvePasswordViolationsToLabels,\n} from '~wildo-frontend-lib/components/auth/utils/resolvePasswordViolationsToLabels';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { RegistrationOutcome } from '~wildo-frontend-lib/core/security/registration-outcome.frontend.utils';\nimport { useMfaContinuationNavigation } from '~wildo-frontend-lib/components/auth/utils/useMfaContinuationNavigation';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport type { ResendStatus } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\nimport { collectFrontendProviderDisplayLabelKeys } from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\nimport { resolveOAuthProviderDisplayLabel, resolvePublicOAuthProviderEntries } from '~wildo-frontend-lib/components/auth/utils/oauth-provider-display-label.frontend.utils';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\nconst RESEND_COOLDOWN_SECONDS = 60;\n\n/*\n The sign-up methods THIS screen can carry out, in the order they are offered (#1093). The backend\n * implements public sign-up for exactly these three (`registerUser`); social OAuth2 is a hand-off the\n * providers section owns, and enterprise SSO signs up through the organization. A method is offered\n * only when the user type's `registration.allowedMethods` lists it, so an application that allows\n * MAGIC_LINK alone gets a password-less form and never a password field.\n /\nconst SELF_SIGNUP_METHODS: readonly AuthMethod[] = [AuthMethod.PASSWORD, AuthMethod.MAGIC_LINK, AuthMethod.PASSKEY];\n\n\n// =============================================================================\n// SELF-SUFFICIENT FORM TEMPLATE\n// =============================================================================\n\n/\n Module-scope template for the registration form. Fully self-sufficient — derives\n * all runtime state from standard hooks. No `useFormTemplateContext()` call.\n \n - Password policy → `useResolvedAuthConfig()`\n * - Root-level form errors → `useFormContext().formState.errors.root`\n * - Labels → `useI18n()`, passed directly to `<SubmitButton>` as props\n * - Conditional fields → FormField returns null for fields not in schema\n /\n/\n The registration form's acceptance state: exactly what the shared acceptance control takes, plus the\n * sign-up method the form is for (#1093), which decides the password fields and the submit wording.\n \n A CONTEXT rather than props because the form template renders inside `AutomatedForm`, which owns\n * its own tree. The control itself is `GovernedDocumentAcceptanceControl`, shared with the signed-in\n * re-acceptance gate so the two surfaces ask in the same three modes, with the same reading gate.\n \n Defaulted to \"nothing required, nothing accepted\" so a template rendered outside the provider —\n * any existing test, any other preset — behaves exactly as it did before this existed. The default\n * mode is the shipped one rather than the lightest, so it keeps withholding the button.\n /\ninterface RegisterConsentState extends GovernedDocumentAcceptanceState {\n readonly method: AuthMethod;\n}\n\nconst RegisterConsentContext = React.createContext<RegisterConsentState>({\n requiredReleases: [],\n acceptanceMode: GovernedDocumentAcceptanceMode.EXPLICIT_CHECKBOX,\n requiredDocuments: [],\n servedDocuments: [],\n accepted: false,\n setAccepted: () => {},\n documentsRead: [],\n markDocumentRead: () => {},\n method: AuthMethod.PASSWORD,\n});\n\n/* The shared acceptance control, fed from the registration form's context. /\nconst DocumentAcceptanceControl: React.FC<{\n readonly t: (key: string) => string;\n readonly tComponent: (component: FrontendComponentType, key: string, params?: Record<string, string \| number>) => string;\n}> = ({ t, tComponent }) => {\n const { method: _method, ...state } = React.useContext(RegisterConsentContext);\n return <GovernedDocumentAcceptanceControl state={state} t={t} tComponent={tComponent} />;\n};\n\nconst RegisterFormTemplate: React.FC = () => {\n const resolvedAuth = useResolvedAuthConfig();\n const { formState } = useFormContext();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);\n\n const passwordPolicy: PasswordPolicyRules = resolvedAuth.passwordPolicy ?? DEFAULT_PASSWORD_POLICY;\n const { requiredReleases, acceptanceMode, accepted, method } = React.useContext(RegisterConsentContext);\n const isPasswordSignup = method === AuthMethod.PASSWORD;\n\n if (!isReady) return null;\n\n // A password-less sign-up sets no password: its schema omits the fields (FormField renders nothing\n // for a field the schema lacks), the strength indicator has nothing to measure, and the submit says\n // what will happen instead — a sign-in link is emailed.\n const submitLabel = isPasswordSignup\n ? UserRegisterLabel.REGISTER_BUTTON\n : method === AuthMethod.PASSKEY\n ? UserRegisterLabel.PASSKEY_SIGNUP_BUTTON\n : UserRegisterLabel.MAGIC_LINK_SIGNUP_BUTTON;\n const submittingLabel = isPasswordSignup ? UserRegisterLabel.REGISTERING : UserRegisterLabel.MAGIC_LINK_SIGNUP_SENDING;\n\n return (\n <FormLayout>\n <FormField name=\"email\" />\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n <FormField name=\"organizationName\" />\n {/\n * The application's own sign-up questions (#1371), in declaration order, between the\n * identity fields and the credential. `FormField` renders nothing for a name the schema\n * lacks, so a user type declaring none changes this template not at all — the same\n * mechanism that already makes `organizationName` and the password pair conditional.\n /}\n {(resolvedAuth.registrationConfig.additionalProfileQuestions ?? []).map((question) => (\n <FormField key={question.id} name={question.id} />\n ))}\n <FormField name=\"password\" />\n <FormField name=\"confirmPassword\" />\n\n {isPasswordSignup && <PasswordStrengthIndicator fieldName=\"password\" policy={passwordPolicy} t={t} />}\n\n {formState.errors.root && (\n <Alert variant=\"destructive\">\n <AlertDescription>{formState.errors.root.message}</AlertDescription>\n </Alert>\n )}\n\n {/\n * The consent control this application's own labels have declared since before it existed.\n \n `UserRegisterLabel.TERMS_ACCEPTANCE` — \"I accept the terms and privacy policy\" — was\n * declared in `Auth_Register.labels.ts` and shipped into two applications' locale files for a\n * control this component did not render (issue #54). The label was the only part that\n * existed; a registrant could not accept anything, so nothing could be recorded.\n \n It renders only when the application declares an in-force release that PERMITS acceptance.\n * An application with no governed documents gets the form it always had — no empty checkbox,\n * no consent nobody asked for. That is `derive-before-you-ask.md` rule 3 in the UI: total over\n * what was declared, so a document added to the configuration tomorrow is offered with no\n * edit here.\n \n WHICH shape it takes is the application's declared `governedDocumentAcceptanceMode` (#1258).\n /}\n <DocumentAcceptanceControl t={t} tComponent={tComponent} />\n\n <SubmitButton\n label={t(submitLabel)}\n submittingLabel={t(submittingLabel)}\n fullWidth\n /\n * Unticked means the button is unavailable, not that the request is refused server-side. The\n * acceptance is what makes the record TRUE, so the honest place to insist on it is where the\n * person can act — and a registration that reached the backend without it would simply\n * record nothing, which is the correct behaviour there.\n \n Under `IMPLIED_BY_REGISTERING` nothing is withheld, because there is no second act to wait\n * for: pressing this button IS the acceptance. `governedDocumentAcceptanceRequiresExplicitAct`\n * is the same predicate `handleRegisterSubmit` decides on, so a button the person can press\n * and a request that carries the accepted ids are one decision rather than two.\n /\n disabled={requiredReleases.length > 0 && governedDocumentAcceptanceRequiresExplicitAct(acceptanceMode) && !accepted}\n />\n </FormLayout>\n );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserRegister_DefaultProps {\n}\n\nexport const PublicLayoutPreset_UserRegister_Default = ({}: PublicLayoutPreset_UserRegister_DefaultProps): React.JSX.Element => {\n const { auth, initiateOAuth2Login } = useUserOrgs();\n const { registerAccount } = useAuthSession();\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n const { appConfig } = useApplication();\n const [governedDocumentsAccepted, setGovernedDocumentsAccepted] = useState(false);\n /\n * The reading EVIDENCE lives here, beside the act, and not inside the form — `AutomatedForm` is\n * keyed on the sign-up method, so anything it owns is reset by choosing a different one. With the\n * two at different lifetimes, switching method reset the evidence and kept the tick: the box\n * rendered already ticked against a gate that no longer read as satisfied.\n /\n const [governedDocumentsRead, setGovernedDocumentsRead] = useState<readonly string[]>([]);\n const markDocumentRead = useCallback((paneKey: string) => {\n setGovernedDocumentsRead((read) => (read.includes(paneKey) ? read : [...read, paneKey]));\n }, []);\n\n /\n How this application asks (#1258) — see {@link GovernedDocumentAcceptanceMode}.\n \n Read straight from the shared configuration, whose schema defaults it to `EXPLICIT_CHECKBOX`, so\n * an application that has declared nothing keeps the behaviour registration shipped with. The `??`\n * covers the config object itself being absent, which is the same answer for the same reason.\n /\n const acceptanceMode = appConfig.compliance?.governedDocumentAcceptanceMode ?? GovernedDocumentAcceptanceMode.EXPLICIT_CHECKBOX;\n\n /\n The governed-document releases a registrant must ACCEPT — issue #54.\n \n Read from `compliance.governedDocumentReleases`, the same authored value the backend composes\n * its records from, so the control and the record cannot disagree about which release was in play.\n * `selectGovernedDocumentReleasesInForce` is the shared predicate, so \"in force\" means one thing\n * across the browser, the recorder and `resolveEffectiveDocumentRelease`.\n \n Only releases permitting `CONTRACT_ACCEPTED` are here. A privacy notice permits delivery and\n * acknowledgement, which are not things a checkbox makes true — and until an application can SERVE\n * a document, neither is recordable at all.\n \n Evaluated once per mount rather than per render: a release taking effect mid-form would\n * otherwise change what the registrant is agreeing to while they type.\n /\n const requireApprovedDocuments = requiresApprovedGovernedDocuments(appConfig.compliance);\n const requiredGovernedDocumentReleases = useMemo(\n () => selectGovernedDocumentReleasesInForce(\n appConfig.compliance?.governedDocumentReleases ?? [],\n new Date().toISOString(),\n // The approval gate (#1565): armed, sign-up never asks for a release the public page would\n // refuse to show.\n { requireApproved: requireApprovedDocuments },\n ).filter((release) => release.allowedInteractionKinds.includes(GovernedDocumentInteractionKind.CONTRACT_ACCEPTED)),\n // eslint-disable-next-line react-hooks/exhaustive-deps -- pinned at mount, deliberately; see above.\n [appConfig.compliance?.governedDocumentReleases, requireApprovedDocuments],\n );\n\n /\n Each required release paired with the public document the application publishes for it.\n \n Resolved through `resolveInForcePublicDocument`, the same function the public page uses, so a\n * pane and the page cannot show different releases of one document. A release whose document the\n * application does not serve publicly keeps its entry with `document: undefined` — the ABSENCE is\n * information, and dropping the entry is what previously let a partial set look complete.\n \n Resolved in EVERY mode, not only the reading one. It costs one lookup per release and it is what\n * lets the acceptance links name their documents whichever shape the application asked for; the\n * text itself is only rendered under `EXPLICIT_AFTER_READING`.\n /\n const requiredDocuments = useMemo<readonly RequiredDocumentPresentation[]>(\n () => {\n const at = new Date().toISOString();\n return requiredGovernedDocumentReleases.map((release) => ({\n release,\n document: resolveInForcePublicDocument(appConfig.compliance?.publicDocuments ?? [], release.identity.document.documentRef, at, {\n requireApproved: requireApprovedDocuments,\n }),\n }));\n },\n // eslint-disable-next-line react-hooks/exhaustive-deps -- pinned at mount with its releases, deliberately; see above.\n [requiredGovernedDocumentReleases, appConfig.compliance?.publicDocuments, requireApprovedDocuments],\n );\n\n /* Every public document the application serves — linked beside the control, never gated. /\n const servedDocuments = useMemo<readonly GovernedDocumentPublicDocument[]>(\n () => appConfig.compliance?.publicDocuments ?? [],\n [appConfig.compliance?.publicDocuments],\n );\n\n /\n * ONE acceptance context for BOTH sign-up paths — the form and the OAuth buttons.\n \n Two provider values would be two states, and a person would tick a box on one path while the\n * other stayed ungated. `method` is the form's own concern, so the form overrides it below; nothing\n * the OAuth path renders reads it.\n /\n const acceptanceContextValue = useMemo(() => ({\n requiredReleases: requiredGovernedDocumentReleases,\n acceptanceMode,\n requiredDocuments,\n servedDocuments,\n accepted: governedDocumentsAccepted,\n setAccepted: setGovernedDocumentsAccepted,\n documentsRead: governedDocumentsRead,\n markDocumentRead,\n method: AuthMethod.EXTERNAL_OAUTH2,\n }), [requiredGovernedDocumentReleases, acceptanceMode, requiredDocuments, servedDocuments, governedDocumentsAccepted, governedDocumentsRead, markDocumentRead]);\n\n /\n Whether an act of acceptance is owed before an account may be started by ANY route.\n \n The same predicate the submit button uses, so the form and the OAuth buttons cannot disagree\n * about whether the person has done what the application asked of them.\n /\n const acceptanceIsWithheld = requiredGovernedDocumentReleases.length > 0\n && governedDocumentAcceptanceRequiresExplicitAct(acceptanceMode)\n && !governedDocumentsAccepted;\n\n /\n The release ids that travel with whichever sign-up the person starts — the form, or a provider.\n \n ONE derivation for both, because the two must agree: a submit the person can press without the\n * ids being sent records nothing while reporting success, and that asymmetry is exactly what left\n * a social sign-up binding people with no evidence they had been asked (#1383). Under\n * `IMPLIED_BY_REGISTERING` there is no tick to wait for, so the act of starting the sign-up IS the\n * assent and the ids travel from the first keystroke.\n \n Empty rather than `undefined` when nothing is owed, so a caller cannot mistake \"nothing to\n * accept\" for \"something to accept that I forgot to read\".\n /\n const acceptedReleaseIdsToCarry = useMemo<string[]>(() => {\n if (requiredGovernedDocumentReleases.length === 0) return [];\n if (governedDocumentAcceptanceRequiresExplicitAct(acceptanceMode) && !governedDocumentsAccepted) return [];\n return requiredGovernedDocumentReleases.map((release) => release.identity.releaseId);\n }, [requiredGovernedDocumentReleases, acceptanceMode, governedDocumentsAccepted]);\n\n\n const resolvedAuth = useResolvedAuthConfig();\n const location = useLocation();\n const enabledSocialOAuth2Providers = useMemo(() => {\n if (!resolvedAuth.registrationConfig.allowedMethods.includes(AuthMethod.EXTERNAL_OAUTH2)) {\n return [];\n }\n return resolvePublicOAuthProviderEntries({\n publicProviders: resolvedAuth.globalAuth?.socialOAuth2Providers,\n });\n }, [\n resolvedAuth.globalAuth?.socialOAuth2Providers,\n resolvedAuth.registrationConfig.allowedMethods,\n ]);\n const socialOAuth2ProviderLabelKeys = useMemo(() => {\n return collectFrontendProviderDisplayLabelKeys(\n enabledSocialOAuth2Providers.map((provider) => provider.displayNameLabelKey),\n );\n }, [enabledSocialOAuth2Providers]);\n // Two label namespaces: this screen's own, and the sign-in screen's for the method words (#1093).\n const i18nComponents = useMemo(\n () => [FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH],\n [],\n );\n const { t: translate, tComponent, isReady } = useI18n({\n component: i18nComponents,\n keys: socialOAuth2ProviderLabelKeys,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);\n const tAuth = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget),\n [authRedirectTarget],\n );\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n // ─── Social OAuth2 providers from resolved config ───\n const hasSocialOAuth2Providers = enabledSocialOAuth2Providers.length > 0;\n\n const handleOAuth2Click = useCallback(async (providerRef: string) => {\n try {\n await initiateOAuth2Login(providerRef, authRedirectTarget, acceptedReleaseIdsToCarry);\n } catch {\n // Error handled in AuthSessionContext\n }\n }, [acceptedReleaseIdsToCarry, authRedirectTarget, initiateOAuth2Login]);\n\n // ─── Form methods ref for server error injection ───\n const formMethodsRef = useRef<FormMethods \| null>(null);\n const { initAutoClearing, injectServerErrors, clearServerErrors } = useServerErrorInjection(formMethodsRef);\n const handleFormReady = useCallback((formMethods: FormMethods) => {\n formMethodsRef.current = formMethods;\n initAutoClearing(formMethods);\n }, [initAutoClearing]);\n\n // ─── State ───\n const [isLoading, setIsLoading] = useState(false);\n /\n What the registration answer MEANT (#972), classified once by `registerAccount`. `null` until the\n * form is submitted. This replaced a `registrationComplete` boolean that was set for every answer and\n * rendered \"check your email\" — false for a registrant who had been signed in, and a dead end for one\n * who owed a second-factor enrollment.\n /\n const [registrationOutcome, setRegistrationOutcome] = useState<RegistrationOutcome \| null>(null);\n const [registeredEmail, setRegisteredEmail] = useState('');\n\n /\n * A registration session parked at the enrollment gate is routed exactly as the login screen routes\n * the same auth state — the hook IS the login screen's routing. Gated on THIS submission's outcome so\n * a stale `mfaRequired` left by an abandoned sign-in cannot pull a visitor off the sign-up form.\n /\n useMfaContinuationNavigation({\n mfaRequired: registrationOutcome === RegistrationOutcome.MFA_ENROLLMENT_REQUIRED && auth.mfaRequired,\n mfaSessionId: auth.mfaSessionId,\n usableSecondFactorMethods: auth.usableSecondFactorMethods,\n email: registeredEmail,\n authRedirectTarget,\n });\n\n // ─── Resend state ───\n const [resendStatus, setResendStatus] = useState<ResendStatus>('idle');\n const [resendCooldown, setResendCooldown] = useState(0);\n const [resendError, setResendError] = useState<string \| null>(null);\n\n useEffect(() => {\n if (resendCooldown <= 0) return;\n const timer = setInterval(() => {\n setResendCooldown((prev) => {\n if (prev <= 1) {\n clearInterval(timer);\n return 0;\n }\n return prev - 1;\n });\n }, 1000);\n return () => clearInterval(timer);\n }, [resendCooldown]);\n\n const handleResend = useCallback(async () => {\n if (!registeredEmail \|\| resendCooldown > 0) return;\n setResendStatus('sending');\n setResendError(null);\n try {\n await getManualCallsHttpClient().resendVerificationEmail(registeredEmail);\n setResendStatus('sent');\n setResendCooldown(RESEND_COOLDOWN_SECONDS);\n } catch (e: unknown) {\n setResendStatus('error');\n setResendError(toUserFacingErrorMessage(e, t(UserRegisterLabel.UNEXPECTED_ERROR)));\n }\n }, [registeredEmail, resendCooldown]); // eslint-disable-line react-hooks/exhaustive-deps\n\n // ─── Password policy from resolved user type config ───\n const passwordPolicy: PasswordPolicyRules = useMemo(() => {\n return (resolvedAuth.passwordPolicy as PasswordPolicyRules) ?? DEFAULT_PASSWORD_POLICY;\n }, [resolvedAuth.passwordPolicy]);\n\n // ─── W6.2: Org name required during registration? ───\n const showOrgNameField = useMemo(() => {\n if (!resolvedAuth.resolvedUserType) return false;\n const matches = findOrganizationTypeRegistrationCreationMatches(\n appConfig.organizationTypes,\n resolvedAuth.resolvedUserType,\n );\n return matches.length === 1\n && matches[0]?.definition.creationPolicy?.orgNameSource\n === OrganizationNameSource.ASK;\n }, [appConfig.organizationTypes, resolvedAuth.resolvedUserType]);\n\n // ─── Registration config from resolved user type ───\n const registrationConfig = useMemo(() => {\n return resolvedAuth.registrationConfig;\n }, [resolvedAuth.registrationConfig]);\n\n const allowedMethods = registrationConfig.allowedMethods;\n /\n * The sign-up methods offered (#1093): the ones this screen carries out that the user type allows, in\n * the screen's order — so PASSWORD is the form shown first when it is allowed, exactly as before, and a\n * user type allowing only a password-less method gets that form with no password field at all.\n /\n const offeredMethods = useMemo(\n () => SELF_SIGNUP_METHODS.filter((method) => allowedMethods.includes(method)),\n [allowedMethods],\n );\n const [selectedMethod, setSelectedMethod] = useState<AuthMethod \| null>(null);\n const activeMethod = selectedMethod !== null && offeredMethods.includes(selectedMethod) ? selectedMethod : (offeredMethods[0] ?? null);\n const alternativeMethods = offeredMethods.filter((method) => method !== activeMethod);\n const showForm = activeMethod !== null;\n /\n * ONE control on the page, never two.\n \n The form renders the acceptance control whenever it renders at all, and both paths share one\n * state — so where a form exists, its control is what the OAuth buttons wait on too. Rendering a\n * second one beside the providers put two boxes, two reading panes and two sets of document links\n * on the same screen: driven live, the terms document was paned TWICE.\n \n The OAuth-path control therefore exists for exactly the case that had nothing: an application\n * offering only social sign-up, where `SELF_SIGNUP_METHODS` leaves no active method and no form.\n /\n const formCarriesAcceptance = showForm && activeMethod !== null;\n const showPasswordFields = activeMethod === AuthMethod.PASSWORD;\n const showDivider = hasSocialOAuth2Providers && showForm;\n\n /\n The application's own sign-up questions (#1371), in declaration order.\n \n This is the field set the engine does NOT own. Everything above is fixed; these come from the\n * resolved user type's `registration.additionalProfileQuestions`.\n /\n /\n * `?? []` is not defensive noise. This screen is preset-overridable and its resolved config\n * arrives from a boundary, so an absent list must mean \"this user type asks nothing\" — the same\n * thing an empty one means. Reading it unguarded took the ENTIRE sign-up screen down with\n * `declaredProfileQuestions is not iterable` when the field was missing, which is the worst\n * possible failure direction for an optional question nobody declared.\n /\n const declaredProfileQuestions = resolvedAuth.registrationConfig.additionalProfileQuestions ?? [];\n /\n * Whether this form asks for the person's names (#1374). A user type that collects them at onboarding leaves them\n * out: they are asked once the address is proven, at the onboarding step, and the server neither requires nor\n * expects them here. Omitted from the SCHEMA, so the template's `FormField`s render nothing — the same mechanism\n * that makes the organization and password fields conditional.\n /\n const collectsNamesAtSignUp = resolvedAuth.registrationConfig.profileNamesCollectedAt !== ProfileNamesCollectionMoment.ONBOARDING;\n\n const registerFormSchema = useMemo(() => {\n /\n * The application's declared questions become real schema entries (#1371).\n \n This is what the form schema had to stop being a module constant FOR. The acceptance control\n * above records the same constraint from the other side — it had to be built as a context\n * BESIDE the form precisely because \"a Zod form schema cannot declare a field per document\n * without being built at render time\". It is built at render time now.\n \n Extended FIRST, before the conditional omissions, so both branches below derive from one\n * object type. Extending after the `showOrgNameField` ternary would widen it to a union and\n * neither `.omit` nor `.refine` would narrow.\n \n The type map is total over the bindable set: the config schema restricts a sign-up question\n * to the types whose answer IS a value, so there is no option-ref case to represent here.\n /\n const declaredFields: Record<string, z.ZodTypeAny> = {};\n for (const question of declaredProfileQuestions) {\n const base = question.type === OnboardingSurveyQuestionType.RATING\n ? z.number()\n : z.string().min(1);\n declaredFields[question.id] = question.required ? base : base.optional();\n }\n const withDeclaredQuestions = UserRegisterFormDtoSchema.extend(declaredFields);\n const withNames = collectsNamesAtSignUp\n ? withDeclaredQuestions\n : withDeclaredQuestions.omit({ firstName: true, lastName: true });\n\n const withOrganization = showOrgNameField\n ? withNames\n : withNames.omit({ organizationName: true });\n // A password-less sign-up has no password to ask for: the fields leave the schema, so the form\n // renders none, validates none, and has no confirmation to match.\n if (!showPasswordFields) {\n return withOrganization.omit({ password: true, confirmPassword: true });\n }\n return withOrganization.refine(\n (data) => !data.password \|\| data.password === data.confirmPassword,\n { message: t(UserRegisterLabel.PASSWORD_MISMATCH), path: ['confirmPassword'] },\n );\n }, [t, showOrgNameField, showPasswordFields, declaredProfileQuestions, collectsNamesAtSignUp]);\n\n // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.\n const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, authRedirectTarget);\n if (organizationOnboardingTarget) {\n return <Navigate to={organizationOnboardingTarget} replace />;\n }\n\n if (!isReady) return null;\n\n // ═══════════════════════════════════════════════════════════════\n // Registration answered — one branch per `RegistrationOutcome`\n // ═══════════════════════════════════════════════════════════════\n if (registrationOutcome === RegistrationOutcome.SIGNED_IN) {\n // The native `Auth_Register` wrapper also forwards on `auth.accessToken`; this covers a preset rendered without it.\n return auth.accessToken ? <Navigate to={postAuthRedirect} replace /> : null;\n }\n\n if (registrationOutcome === RegistrationOutcome.MFA_ENROLLMENT_REQUIRED) {\n // `useMfaContinuationNavigation` above takes the registrant, with their session, to the enrollment gate.\n return null;\n }\n\n if (registrationOutcome !== null) {\n /\n * An SSO-enforced domain is a REFUSAL, not a success: the backend returns before creating anything\n * (`registerUser`, `blockForSSODomains`), and nothing redirects. So it has its own heading and body —\n * \"Account created\" and \"you'll be redirected\" were both false there. The sign-in link below is the\n * way forward: the sign-in screen resolves the address's domain to its organization's SSO.\n /\n const isSsoRegistration = registrationOutcome === RegistrationOutcome.SSO_REDIRECT_REQUIRED;\n const title = isSsoRegistration ? UserRegisterLabel.SSO_REGISTRATION_TITLE : UserRegisterLabel.SUCCESS_TITLE;\n const message = isSsoRegistration\n ? UserRegisterLabel.SSO_REGISTRATION_MESSAGE\n : registrationOutcome === RegistrationOutcome.UNFINISHED\n ? UserRegisterLabel.REGISTRATION_UNFINISHED\n : registrationOutcome === RegistrationOutcome.MAGIC_LINK_SENT\n ? UserRegisterLabel.MAGIC_LINK_SENT_MESSAGE\n : registrationOutcome === RegistrationOutcome.PASSKEY_ENROLLMENT_PENDING\n ? UserRegisterLabel.PASSKEY_ENROLLMENT_PENDING_MESSAGE\n : UserRegisterLabel.SUCCESS_MESSAGE;\n /\n * Resend re-sends a VERIFICATION email, so it is offered only when one is what the registrant is\n * waiting for. A magic-link signup's link is not a verification mail, and an unfinished one is not\n * waiting on email at all.\n /\n const offersVerificationResend = registrationOutcome === RegistrationOutcome.EMAIL_VERIFICATION_PENDING;\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element\">\n <svg className=\"h-6 w-6 text-primary\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" strokeWidth=\"2\">\n <path strokeLinecap=\"round\" strokeLinejoin=\"round\" d=\"M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z\" />\n </svg>\n </div>\n <Heading>{t(title)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(message)}</Text>\n </div>\n\n {offersVerificationResend && (\n <div className=\"text-center space-y-item-xs\">\n <Text className=\"text-sm text-muted-foreground\">\n {t(UserRegisterLabel.RESEND_PROMPT)}{' '}\n <Button\n variant={ButtonVariants_Variant.LINK}\n className=\"p-0 h-auto text-sm\"\n onClick={handleResend}\n disabled={resendStatus === 'sending' \|\| resendCooldown > 0}\n >\n {resendStatus === 'sending'\n ? t(UserRegisterLabel.RESEND_SENDING)\n : resendCooldown > 0\n ? `${t(UserRegisterLabel.RESEND_COOLDOWN)} (${resendCooldown}s)`\n : t(UserRegisterLabel.RESEND_LINK)}\n </Button>\n </Text>\n {resendStatus === 'sent' && (\n <Alert>\n <AlertDescription>{t(UserRegisterLabel.RESEND_SUCCESS)}</AlertDescription>\n </Alert>\n )}\n {resendStatus === 'error' && resendError && (\n <Alert variant=\"destructive\">\n <AlertDescription>{resendError}</AlertDescription>\n </Alert>\n )}\n </div>\n )}\n\n <div className=\"text-center mt-group\">\n <AuthSecondaryLink href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // ═══════════════════════════════════════════════════════════════\n // Registration Form\n // ═══════════════════════════════════════════════════════════════\n const handleRegisterSubmit = async (data: UserRegisterFormDto & { password?: string; confirmPassword?: string }) => {\n setIsLoading(true);\n formMethodsRef.current?.clearErrors('root');\n clearServerErrors();\n\n const method = activeMethod ?? AuthMethod.PASSWORD;\n if (method === AuthMethod.PASSWORD && data.password) {\n const policyResult = AuthUtils.validatePasswordAgainstPolicy(data.password, passwordPolicy);\n if (!policyResult.valid) {\n formMethodsRef.current?.setError('root', {\n type: 'policy',\n message: resolvePasswordViolationsToLabels(policyResult.violations, t, passwordPolicy).join('. '),\n });\n setIsLoading(false);\n return;\n }\n }\n\n try {\n const outcome = await registerAccount({\n email: data.email,\n // Absent when the names are collected at onboarding (#1374): the schema does not ask for them.\n ...(collectsNamesAtSignUp ? { firstName: data.firstName, lastName: data.lastName } : {}),\n // The credential ONLY for the method that takes one; a password-less sign-up sends none.\n password: method === AuthMethod.PASSWORD ? data.password?.trim() \|\| undefined : undefined,\n organizationName: data.organizationName?.trim() \|\| undefined,\n /\n * The declared sign-up answers (#1371), keyed by QUESTION ID — the server re-reads the same\n * declaration and refuses a key this user type does not declare, so the mapping from\n * question to profile field is made in one place, on the side that owns the write.\n \n Omitted entirely when nothing is declared, so a registration from an application that\n * asks nothing is byte-identical to what it was.\n /\n profileAnswers: declaredProfileQuestions.length > 0\n ? Object.fromEntries(\n declaredProfileQuestions\n .map((question) => [question.id, (data as Record<string, unknown>)[question.id]])\n .filter(([, value]) => value !== undefined && value !== ''),\n ) as Record<string, string \| number \| boolean>\n : undefined,\n /\n * The chosen method, and the deep link this screen was opened with (#1093). The backend keeps\n * the redirect only when same-origin and within bounds, and carries it into the emailed sign-in\n * link of a password-less sign-up — the one register outcome that signs the person in elsewhere.\n /\n method,\n ...(authRedirectTarget ? { redirect: authRedirectTarget } : {}),\n /\n * IDS only. The server resolves which releases are in force and matches these against them,\n * so this cannot choose a VERSION, invent a release, or accept a document the application\n * does not publish — see `UserRegisterApiDtoSchema.acceptedGovernedDocumentReleaseIds`.\n /\n ...(acceptedReleaseIdsToCarry.length > 0\n ? { acceptedGovernedDocumentReleaseIds: acceptedReleaseIdsToCarry }\n : {}),\n });\n setRegisteredEmail(data.email);\n setRegistrationOutcome(outcome);\n } catch (e: any) {\n const serverErrors = extractServerValidationErrors(e);\n if (serverErrors) {\n injectServerErrors(serverErrors.validationErrors);\n } else {\n const passwordPolicyMsg = extractPasswordPolicyErrorMessage(e, t, passwordPolicy);\n formMethodsRef.current?.setError('root', {\n type: 'server',\n message: passwordPolicyMsg ?? toUserFacingErrorMessage(e, t(UserRegisterLabel.UNEXPECTED_ERROR)),\n });\n }\n } finally {\n setIsLoading(false);\n }\n };\n\n if (!hasSocialOAuth2Providers && !showForm) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserRegisterLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserRegisterLabel.REGISTRATION_DISABLED)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserRegisterLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserRegisterLabel.SUB_TITLE)}</Text>\n </div>\n\n {/\n * ACCEPTANCE GOVERNS THE OAUTH PATH TOO — it did not, and that was a hole straight through the\n * whole vocabulary.\n \n `SELF_SIGNUP_METHODS` excludes `EXTERNAL_OAUTH2`, so an application offering only social\n * sign-up has no `activeMethod`, renders no form, and therefore rendered no acceptance control\n * at all: a person created an account through Google having been asked nothing and shown\n * nothing. Even where a form WAS rendered, these buttons sat outside its provider and were\n * live before the box was ticked, so the strongest two modes could be walked around by\n * choosing the other button.\n \n So the control is rendered HERE when there are providers, and the buttons are withheld until\n * the act is made. Under `IMPLIED_BY_REGISTERING` nothing is withheld — pressing the button IS\n * the act, exactly as pressing submit is.\n \n What this does NOT fix: the accepted release ids do not survive the OAuth redirect, so the\n * JIT-provisioned account carries no interaction record. The ACT now happens on every path;\n * RECORDING it on this one needs the ids carried through the callback, which is backend work\n * and is named in the mode's own note as the boundary of what a registration screen controls.\n /}\n {enabledSocialOAuth2Providers.length > 0 && requiredGovernedDocumentReleases.length > 0 && !formCarriesAcceptance && (\n <RegisterConsentContext.Provider value={acceptanceContextValue}>\n <DocumentAcceptanceControl t={t} tComponent={tComponent} />\n </RegisterConsentContext.Provider>\n )}\n\n <OAuthProvidersSection\n providers={enabledSocialOAuth2Providers}\n onProviderClick={handleOAuth2Click}\n isLoading={isLoading \|\| auth.isLoading}\n disabled={acceptanceIsWithheld}\n continueWithLabel={t(UserRegisterLabel.CONTINUE_WITH)}\n translate={translate}\n dividerLabel={t(UserRegisterLabel.DIVIDER_OR)}\n showDivider={showDivider}\n />\n\n {showForm && activeMethod !== null && (\n <RegisterConsentContext.Provider\n value={{\n requiredReleases: requiredGovernedDocumentReleases,\n acceptanceMode,\n requiredDocuments,\n servedDocuments,\n accepted: governedDocumentsAccepted,\n setAccepted: setGovernedDocumentsAccepted,\n documentsRead: governedDocumentsRead,\n markDocumentRead,\n method: activeMethod,\n }}\n >\n <AutomatedForm\n // One form per method: switching remounts it with that method's schema and defaults.\n key={activeMethod}\n schema={registerFormSchema}\n defaultValues={{ email: '', ...(collectsNamesAtSignUp && { firstName: '', lastName: '' }), ...(showOrgNameField && { organizationName: '' }), ...(showPasswordFields && { password: '', confirmPassword: '' }) }}\n onSubmit={handleRegisterSubmit}\n onFormReady={handleFormReady}\n validationMode={ValidationMode.ON_BLUR}\n disabled={isLoading}\n layoutTemplate={RegisterFormTemplate}\n labels={{\n fields: {\n email: t(UserRegisterLabel.EMAIL_ADDRESS),\n ...(collectsNamesAtSignUp && { firstName: t(UserRegisterLabel.FIRST_NAME), lastName: t(UserRegisterLabel.LAST_NAME) }),\n ...(showOrgNameField && { organizationName: t(UserRegisterLabel.ORGANIZATION_NAME) }),\n ...(showPasswordFields && { password: t(UserRegisterLabel.PASSWORD), confirmPassword: t(UserRegisterLabel.CONFIRM_PASSWORD) }),\n },\n }}\n />\n </RegisterConsentContext.Provider>\n )}\n\n {/\n * The other sign-up methods the user type allows (#1093), as the invitation screen offers\n * them: a button per method switches the form. Named with the sign-in screen's words, so a\n * method reads the same wherever it is chosen.\n /}\n {alternativeMethods.length > 0 && (\n <>\n <LabeledDivider label={tAuth(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n <Text className=\"text-sm text-muted-foreground text-center mb-element\">{t(UserRegisterLabel.METHOD_CHOICE_HINT)}</Text>\n <AuthMethodChoiceList\n methods={alternativeMethods}\n /\n * Registration offers a method before anyone is identified, so there is no descriptor and\n * no enterprise connection to name — but the application's social providers are known, and\n * they are the same ones this screen's own provider buttons render. Where exactly one is\n * configured the button reads \"Continue with Google\" instead of the kind.\n */\n labelFor={(method) => resolveAuthMethodChoiceLabel(method, {\n socialProviders: enabledSocialOAuth2Providers,\n continueWithTemplate: tAuth(UserAuthLabel.CONTINUE_WITH),\n translateLabel: (label) => tAuth(label),\n resolveSocialProviderLabel: (provider) => resolveOAuthProviderDisplayLabel({\n providerRef: provider.providerRef,\n displayName: provider.displayName,\n displayNameLabelKey: provider.displayNameLabelKey,\n brandLabel: SSO_PROVIDER_BRAND_META[provider.providerRef]?.label,\n translate,\n }),\n })}\n onSelect={setSelectedMethod}\n disabled={isLoading}\n />\n </>\n )}\n\n <div className=\"text-center mt-group\">\n <Text className=\"text-sm\">\n {t(UserRegisterLabel.ALREADY_HAVE_ACCOUNT)}{' '}\n <Link href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</Link>\n </Text>\n </div>\n </>\n );\n};\n\nfunction RegistrationUnavailable({\n mode,\n}: {\n mode: RegistrationMode;\n}): React.JSX.Element \| null {\n const location = useLocation();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER,\n });\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget),\n [authRedirectTarget],\n );\n if (!isReady) return null;\n\n const message = mode === RegistrationMode.INVITATION_ONLY\n ? UserRegisterLabel.INVITATION_ONLY\n : mode === RegistrationMode.ADMIN_ONLY\n ? UserRegisterLabel.ADMIN_ONLY\n : UserRegisterLabel.REGISTRATION_DISABLED;\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserRegisterLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(message)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n}\n\nexport function Auth_Register({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserRegister_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const { auth } = useUserOrgs();\n const resolvedAuth = useResolvedAuthConfig();\n const location = useLocation();\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n // This native wrapper is the non-overridable availability boundary. Presets customize only the\n // presentation of an already-authorized public registration flow.\n if (auth.accessToken) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n if (!resolvedAuth.registrationConfig.publicRegistrationAvailable) {\n return <RegistrationUnavailable mode={resolvedAuth.registrationConfig.mode} />;\n }\n\n const Component = createComponentResolver<PublicLayoutPreset_UserRegister_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, 'Auth_Register')(preset);\n return <Component {...props} />;\n}\n"]}
1	+ {"version":3,"file":"Auth_Register.js","sourceRoot":"","sources":["../../../../../src/components/auth/Auth_Register.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC/H,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,UAAU,EACV,+CAA+C,EAC/C,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,SAAS,GAGV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,6CAA6C,EAC7C,iCAAiC,EACjC,4BAA4B,EAC5B,qCAAqC,GAEtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EACL,iCAAiC,GAGlC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,6DAA6D,CAAC;AAE5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mFAAmF,CAAC;AAClI,OAAO,EAAE,uBAAuB,EAAE,MAAM,+EAA+E,CAAC;AACxH,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iEAAiE,CAAC;AACjI,OAAO,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAC;AACzI,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,6EAA6E,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,8DAA8D,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,yDAAyD,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gEAAgE,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,mDAAmD,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mFAAmF,CAAC;AAE7H,OAAO,EAAE,gBAAgB,EAAE,MAAM,8DAA8D,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,0EAA0E,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AAC5G,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yDAAyD,CAAC;AAEhG,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,uFAAuF,CAAC;AAG5K,OAAO,EAAE,uBAAuB,EAAE,MAAM,iFAAiF,CAAC;AAE1H,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,mBAAmB,GAA0B,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AAgCpH,MAAM,sBAAsB,GAAG,KAAK,CAAC,aAAa,CAAuB;IACvE,gBAAgB,EAAE,EAAE;IACpB,cAAc,EAAE,8BAA8B,CAAC,iBAAiB;IAChE,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,EAAE;IACnB,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;IACrB,aAAa,EAAE,EAAE;IACjB,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;IAC1B,MAAM,EAAE,UAAU,CAAC,QAAQ;CAC5B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,yBAAyB,GAG1B,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;IACzB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC/E,OAAO,KAAC,iCAAiC,IAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,GAAI,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAa,GAAG,EAAE;IAC1C,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,4BAA4B;KAC9D,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAE/F,MAAM,cAAc,GAAwB,YAAY,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACnG,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IACxG,MAAM,gBAAgB,GAAG,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC;IAExD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,mGAAmG;IACnG,oGAAoG;IACpG,wDAAwD;IACxD,MAAM,WAAW,GAAG,gBAAgB;QAClC,CAAC,CAAC,iBAAiB,CAAC,eAAe;QACnC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,OAAO;YAC7B,CAAC,CAAC,iBAAiB,CAAC,qBAAqB;YACzC,CAAC,CAAC,iBAAiB,CAAC,wBAAwB,CAAC;IACjD,MAAM,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,yBAAyB,CAAC;IAEvH,OAAO,CACL,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,IAAI,EAAC,OAAO,GAAG,EAC1B,KAAC,SAAS,IAAC,IAAI,EAAC,WAAW,GAAG,EAC9B,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,kBAAkB,GAAG,EAOpC,CAAC,YAAY,CAAC,kBAAkB,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CACpF,KAAC,SAAS,IAAmB,IAAI,EAAE,QAAQ,CAAC,EAAE,IAA9B,QAAQ,CAAC,EAAE,CAAuB,CACnD,CAAC,EACF,KAAC,SAAS,IAAC,IAAI,EAAC,UAAU,GAAG,EAC7B,KAAC,SAAS,IAAC,IAAI,EAAC,iBAAiB,GAAG,EAEnC,gBAAgB,IAAI,KAAC,yBAAyB,IAAC,SAAS,EAAC,UAAU,EAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,GAAI,EAEpG,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CACxB,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,GAAoB,GAC9D,CACT,EAkBD,KAAC,yBAAyB,IAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,GAAI,EAE3D,KAAC,YAAY,IACX,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,EACrB,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,EACnC,SAAS;gBACT;;;;;;;;;;mBAUG;gBACH,QAAQ,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,6CAA6C,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,GACnH,IACS,CACd,CAAC;AACJ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,EAAgD,EAAqB,EAAE;IAC7H,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,WAAW,EAAE,CAAC;IACpD,MAAM,EAAE,eAAe,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,wBAAwB,GAAG,yBAAyB,EAAE,CAAC;IAC7D,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF;;;;;OAKG;IACH,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,OAAe,EAAE,EAAE;QACvD,wBAAwB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;;;;;OAMG;IACH,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,EAAE,8BAA8B,IAAI,8BAA8B,CAAC,iBAAiB,CAAC;IAEhI;;;;;;;;;;;;;;OAcG;IACH,MAAM,wBAAwB,GAAG,iCAAiC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzF,MAAM,gCAAgC,GAAG,OAAO,CAC9C,GAAG,EAAE,CAAC,qCAAqC,CACzC,SAAS,CAAC,UAAU,EAAE,wBAAwB,IAAI,EAAE,EACpD,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACxB,2FAA2F;IAC3F,kBAAkB;IAClB,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAC9C,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,+BAA+B,CAAC,iBAAiB,CAAC,CAAC;IAClH,oGAAoG;IACpG,CAAC,SAAS,CAAC,UAAU,EAAE,wBAAwB,EAAE,wBAAwB,CAAC,CAC3E,CAAC;IAEF;;;;;;;;;;;OAWG;IACH,MAAM,iBAAiB,GAAG,OAAO,CAC/B,GAAG,EAAE;QACH,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,gCAAgC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO;YACP,QAAQ,EAAE,4BAA4B,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE;gBAC7H,eAAe,EAAE,wBAAwB;aAC1C,CAAC;SACH,CAAC,CAAC,CAAC;IACN,CAAC;IACD,sHAAsH;IACtH,CAAC,gCAAgC,EAAE,SAAS,CAAC,UAAU,EAAE,eAAe,EAAE,wBAAwB,CAAC,CACpG,CAAC;IAEF,6FAA6F;IAC7F,MAAM,eAAe,GAAG,OAAO,CAC7B,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,EACjD,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CACxC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,sBAAsB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5C,gBAAgB,EAAE,gCAAgC;QAClD,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,QAAQ,EAAE,yBAAyB;QACnC,WAAW,EAAE,4BAA4B;QACzC,aAAa,EAAE,qBAAqB;QACpC,gBAAgB;QAChB,MAAM,EAAE,UAAU,CAAC,eAAe;KACnC,CAAC,EAAE,CAAC,gCAAgC,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEhK;;;;;OAKG;IACH,MAAM,oBAAoB,GAAG,gCAAgC,CAAC,MAAM,GAAG,CAAC;WACnE,6CAA6C,CAAC,cAAc,CAAC;WAC7D,CAAC,yBAAyB,CAAC;IAEhC;;;;;;;;;;;OAWG;IACH,MAAM,yBAAyB,GAAG,OAAO,CAAW,GAAG,EAAE;QACvD,IAAI,gCAAgC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7D,IAAI,6CAA6C,CAAC,cAAc,CAAC,IAAI,CAAC,yBAAyB;YAAE,OAAO,EAAE,CAAC;QAC3G,OAAO,gCAAgC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC,EAAE,CAAC,gCAAgC,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAGlF,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,EAAE;QAChD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACzF,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,iCAAiC,CAAC;YACvC,eAAe,EAAE,YAAY,CAAC,UAAU,EAAE,qBAAqB;SAChE,CAAC,CAAC;IACL,CAAC,EAAE;QACD,YAAY,CAAC,UAAU,EAAE,qBAAqB;QAC9C,YAAY,CAAC,kBAAkB,CAAC,cAAc;KAC/C,CAAC,CAAC;IACH,MAAM,6BAA6B,GAAG,OAAO,CAAC,GAAG,EAAE;QACjD,OAAO,uCAAuC,CAC5C,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAC7E,CAAC;IACJ,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnC,kGAAkG;IAClG,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,EAC1G,EAAE,CACH,CAAC;IACF,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACpD,SAAS,EAAE,cAAc;QACzB,IAAI,EAAE,6BAA6B;KACpC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF;;;;;OAKG;IACH,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzH,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1E,CAAC,kBAAkB,CAAC,CACrB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,uDAAuD;IACvD,MAAM,wBAAwB,GAAG,4BAA4B,CAAC,MAAM,GAAG,CAAC,CAAC;IAEzE,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,WAAmB,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC,EAAE,CAAC,yBAAyB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAEzE,sDAAsD;IACtD,MAAM,cAAc,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACxD,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC5G,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,WAAwB,EAAE,EAAE;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;QACrC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEvB,gBAAgB;IAChB,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD;;;;;OAKG;IACH,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,QAAQ,CAA6B,IAAI,CAAC,CAAC;IACjG,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE3D;;;;OAIG;IACH,4BAA4B,CAAC;QAC3B,WAAW,EAAE,mBAAmB,KAAK,mBAAmB,CAAC,uBAAuB,IAAI,IAAI,CAAC,WAAW;QACpG,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,KAAK,EAAE,eAAe;QACtB,kBAAkB;KACnB,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAe,MAAM,CAAC,CAAC;IACvE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAEpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,cAAc,IAAI,CAAC;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;oBACd,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,OAAO,IAAI,GAAG,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAErB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC,eAAe,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO;QACnD,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC;YAC1E,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,cAAc,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,kDAAkD;IAEzF,yDAAyD;IACzD,MAAM,cAAc,GAAwB,OAAO,CAAC,GAAG,EAAE;QACvD,OAAQ,YAAY,CAAC,cAAsC,IAAI,uBAAuB,CAAC;IACzF,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;IAElC,uDAAuD;IACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE;QACpC,IAAI,CAAC,YAAY,CAAC,gBAAgB;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,OAAO,GAAG,+CAA+C,CAC7D,SAAS,CAAC,iBAAiB,EAC3B,YAAY,CAAC,gBAAgB,CAC9B,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;eACtB,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,cAAc,EAAE,aAAa;oBACjD,sBAAsB,CAAC,GAAG,CAAC;IACrC,CAAC,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEjE,sDAAsD;IACtD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC,OAAO,YAAY,CAAC,kBAAkB,CAAC;IACzC,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,kBAAkB,CAAC,cAAc,CAAC;IACzD;;;;OAIG;IACH,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC7E,CAAC,cAAc,CAAC,CACjB,CAAC;IACF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACvI,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,YAAY,KAAK,IAAI,CAAC;IACvC;;;;;;;;;;OAUG;IACH,MAAM,qBAAqB,GAAG,QAAQ,IAAI,YAAY,KAAK,IAAI,CAAC;IAChE,MAAM,kBAAkB,GAAG,YAAY,KAAK,UAAU,CAAC,QAAQ,CAAC;IAChE,MAAM,WAAW,GAAG,wBAAwB,IAAI,QAAQ,CAAC;IAEzD;;;;;OAKG;IACH;;;;;;OAMG;IACH,MAAM,wBAAwB,GAAG,YAAY,CAAC,kBAAkB,CAAC,0BAA0B,IAAI,EAAE,CAAC;IAClG;;;;;OAKG;IACH,MAAM,qBAAqB,GAAG,YAAY,CAAC,kBAAkB,CAAC,uBAAuB,KAAK,4BAA4B,CAAC,UAAU,CAAC;IAElI,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE;QACtC;;;;;;;;;;;;;;WAcG;QACH,MAAM,cAAc,GAAiC,EAAE,CAAC;QACxD,KAAK,MAAM,QAAQ,IAAI,wBAAwB,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,4BAA4B,CAAC,MAAM;gBAChE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;gBACZ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtB,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,qBAAqB,GAAG,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,qBAAqB;YACrC,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,MAAM,gBAAgB,GAAG,gBAAgB;YACvC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,+FAA+F;QAC/F,kEAAkE;QAClE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAM,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAClE,EAAE,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAE/F,qHAAqH;IACrH,MAAM,4BAA4B,GAAG,sCAAsC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtG,IAAI,4BAA4B,EAAE,CAAC;QACjC,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,4BAA4B,EAAE,OAAO,SAAG,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,kEAAkE;IAClE,+DAA+D;IAC/D,kEAAkE;IAClE,IAAI,mBAAmB,KAAK,mBAAmB,CAAC,SAAS,EAAE,CAAC;QAC1D,oHAAoH;QACpH,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAED,IAAI,mBAAmB,KAAK,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;QACxE,yGAAyG;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACjC;;;;;WAKG;QACH,MAAM,iBAAiB,GAAG,mBAAmB,KAAK,mBAAmB,CAAC,qBAAqB,CAAC;QAC5F,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;QAC7G,MAAM,OAAO,GAAG,iBAAiB;YAC/B,CAAC,CAAC,iBAAiB,CAAC,wBAAwB;YAC5C,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,UAAU;gBACtD,CAAC,CAAC,iBAAiB,CAAC,uBAAuB;gBAC3C,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,eAAe;oBAC3D,CAAC,CAAC,iBAAiB,CAAC,uBAAuB;oBAC3C,CAAC,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,0BAA0B;wBACtE,CAAC,CAAC,iBAAiB,CAAC,kCAAkC;wBACtD,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC;QAC5C;;;;WAIG;QACH,MAAM,wBAAwB,GAAG,mBAAmB,KAAK,mBAAmB,CAAC,0BAA0B,CAAC;QACxG,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,cAAK,SAAS,EAAC,0FAA0F,YACvG,cAAK,SAAS,EAAC,sBAAsB,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,GAAG,YACzG,eAAM,aAAa,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,EAAC,sGAAsG,GAAG,GAC1J,GACF,EACN,KAAC,OAAO,cAAE,CAAC,CAAC,KAAK,CAAC,GAAW,EAC7B,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,IAClD,EAEL,wBAAwB,IAAI,CAC7B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,MAAC,IAAI,IAAC,SAAS,EAAC,+BAA+B,aAC5C,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,GAAG,EACxC,KAAC,MAAM,IACL,OAAO,EAAE,sBAAsB,CAAC,IAAI,EACpC,SAAS,EAAC,oBAAoB,EAC9B,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,YAAY,KAAK,SAAS,IAAI,cAAc,GAAG,CAAC,YAEzD,YAAY,KAAK,SAAS;wCACzB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC;wCACrC,CAAC,CAAC,cAAc,GAAG,CAAC;4CAClB,CAAC,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,eAAe,CAAC,KAAK,cAAc,IAAI;4CAChE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAC/B,IACJ,EACN,YAAY,KAAK,MAAM,IAAI,CAC1B,KAAC,KAAK,cACJ,KAAC,gBAAgB,cAAE,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAoB,GACpE,CACT,EACA,YAAY,KAAK,OAAO,IAAI,WAAW,IAAI,CAC1C,KAAC,KAAK,IAAC,OAAO,EAAC,aAAa,YAC1B,KAAC,gBAAgB,cAAE,WAAW,GAAoB,GAC5C,CACT,IACG,CACL,EAED,cAAK,SAAS,EAAC,sBAAsB,YACnC,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAqB,GACtF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,oBAAoB;IACpB,kEAAkE;IAClE,MAAM,oBAAoB,GAAG,KAAK,EAAE,IAA2E,EAAE,EAAE;QACjH,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,iBAAiB,EAAE,CAAC;QAEpB,MAAM,MAAM,GAAG,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC;QACnD,IAAI,MAAM,KAAK,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,SAAS,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAClG,CAAC,CAAC;gBACH,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;gBACpC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,+FAA+F;gBAC/F,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,yFAAyF;gBACzF,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS;gBACzF,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS;gBAC5D;;;;;;;mBAOG;gBACH,cAAc,EAAE,wBAAwB,CAAC,MAAM,GAAG,CAAC;oBACjD,CAAC,CAAC,MAAM,CAAC,WAAW,CAClB,wBAAwB;yBACrB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAG,IAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;yBAChF,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CACjB;oBAC9C,CAAC,CAAC,SAAS;gBACb;;;;mBAIG;gBACH,MAAM;gBACN,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D;;;;mBAIG;gBACH,GAAG,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC;oBACtC,CAAC,CAAC,EAAE,kCAAkC,EAAE,yBAAyB,EAAE;oBACnE,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;YACtD,IAAI,YAAY,EAAE,CAAC;gBACjB,kBAAkB,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,iBAAiB,GAAG,iCAAiC,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;gBAClF,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE;oBACvC,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iBAAiB,IAAI,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;iBACjG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,wBAAwB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,GAAQ,IAClF,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAqB,GACtF,IACL,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAQ,IACtE,EAsBL,4BAA4B,CAAC,MAAM,GAAG,CAAC,IAAI,gCAAgC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,CACnH,KAAC,sBAAsB,CAAC,QAAQ,IAAC,KAAK,EAAE,sBAAsB,YAC5D,KAAC,yBAAyB,IAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,GAAI,GAC3B,CACnC,EAED,KAAC,qBAAqB,IACpB,SAAS,EAAE,4BAA4B,EACvC,eAAe,EAAE,iBAAiB,EAClC,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,EACtC,QAAQ,EAAE,oBAAoB,EAC9B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,EACrD,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAC7C,WAAW,EAAE,WAAW,GACxB,EAED,QAAQ,IAAI,YAAY,KAAK,IAAI,IAAI,CACpC,KAAC,sBAAsB,CAAC,QAAQ,IAC9B,KAAK,EAAE;oBACL,gBAAgB,EAAE,gCAAgC;oBAClD,cAAc;oBACd,iBAAiB;oBACjB,eAAe;oBACf,QAAQ,EAAE,yBAAyB;oBACnC,WAAW,EAAE,4BAA4B;oBACzC,aAAa,EAAE,qBAAqB;oBACpC,gBAAgB;oBAChB,MAAM,EAAE,YAAY;iBACrB,YAEH,KAAC,aAAa;gBACZ,qFAAqF;oBAErF,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,qBAAqB,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,kBAAkB,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,EAAE,EAC5N,QAAQ,EAAE,oBAAoB,EAC9B,WAAW,EAAE,eAAe,EAC5B,cAAc,EAAE,cAAc,CAAC,OAAO,EACtC,QAAQ,EAAE,SAAS,EACnB,cAAc,EAAE,oBAAoB,EACpC,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,KAAK,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;4BACzC,GAAG,CAAC,qBAAqB,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;4BACtH,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,CAAC;4BACrF,GAAG,CAAC,kBAAkB,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;yBAC/H;qBACF,IAfI,YAAY,CAgBjB,GACgC,CACnC,EAOA,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,CAChC,8BACE,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAI,EACrE,KAAC,IAAI,IAAC,SAAS,EAAC,sDAAsD,YAAE,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,GAAQ,EACvH,KAAC,oBAAoB,IACnB,OAAO,EAAE,kBAAkB;wBAC3B;;;;;2BAKG;wBACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,4BAA4B,CAAC,MAAM,EAAE;4BACzD,eAAe,EAAE,4BAA4B;4BAC7C,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC;4BACxD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;4BACvC,0BAA0B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,gCAAgC,CAAC;gCACzE,WAAW,EAAE,QAAQ,CAAC,WAAW;gCACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;gCACjC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gCACjD,UAAU,EAAE,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK;gCAChE,SAAS;6BACV,CAAC;yBACH,CAAC,EACF,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,SAAS,GACnB,IACD,CACJ,EAED,cAAK,SAAS,EAAC,sBAAsB,YACnC,MAAC,IAAI,IAAC,SAAS,EAAC,SAAS,aACtB,CAAC,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAC/C,KAAC,IAAI,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAQ,IAC3D,GACH,IACL,CACJ,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,uBAAuB,CAAC,EAC/B,IAAI,GAGL;IACC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,qBAAqB,CAAC,4BAA4B;KAC9D,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,OAAO,CAChC,GAAG,EAAE,CAAC,6BAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1E,CAAC,kBAAkB,CAAC,CACrB,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,IAAI,KAAK,gBAAgB,CAAC,eAAe;QACvD,CAAC,CAAC,iBAAiB,CAAC,eAAe;QACnC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,UAAU;YACpC,CAAC,CAAC,iBAAiB,CAAC,UAAU;YAC9B,CAAC,CAAC,iBAAiB,CAAC,qBAAqB,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAE/F,OAAO,CACL,8BACE,eAAK,SAAS,EAAC,sCAAsC,aACnD,KAAC,OAAO,cAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAW,EAC/C,KAAC,IAAI,IAAC,SAAS,EAAC,kBAAkB,YAAE,CAAC,CAAC,OAAO,CAAC,GAAQ,IAClD,EACN,cAAK,SAAS,EAAC,aAAa,YAC1B,KAAC,iBAAiB,IAAC,IAAI,EAAE,SAAS,YAAG,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAqB,GACtF,IACL,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAE,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,KAAK,EAAuE;IAC/I,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,gBAAgB,GAAG,OAAO,CAC9B,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC9C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAEF,+FAA+F;IAC/F,kEAAkE;IAClE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,SAAG,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,2BAA2B,EAAE,CAAC;QACjE,OAAO,KAAC,uBAAuB,IAAC,IAAI,EAAE,YAAY,CAAC,kBAAkB,CAAC,IAAI,GAAI,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,uBAAuB,CAA+C,qBAAqB,CAAC,4BAA4B,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACrK,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;AAClC,CAAC","sourcesContent":["import { CorePresetNames, FrontendComponentType, UserAuthLabel, UserRegisterLabel } from '@wildo-ai/presets-components-models';\nimport {\n OnboardingSurveyQuestionType,\n ProfileNamesCollectionMoment,\n AuthMethod,\n findOrganizationTypeRegistrationCreationMatches,\n OrganizationNameSource,\n RegistrationMode,\n UserRegisterFormDtoSchema,\n AuthUtils,\n type PasswordPolicyRules,\n type UserRegisterFormDto,\n} from '@wildo-ai/saas-models';\nimport {\n GovernedDocumentAcceptanceMode,\n GovernedDocumentInteractionKind,\n governedDocumentAcceptanceRequiresExplicitAct,\n requiresApprovedGovernedDocuments,\n resolveInForcePublicDocument,\n selectGovernedDocumentReleasesInForce,\n type GovernedDocumentPublicDocument,\n} from '@wildo-ai/saas-models';\nimport { ValidationMode } from '@wildo-ai/zod-decorators';\nimport { z } from 'zod/v4';\nimport React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { Navigate, useLocation } from 'react-router-dom';\nimport { useFormContext } from 'react-hook-form';\nimport { Button, ButtonVariants_Variant } from '~wildo-frontend-lib/components/actions/button';\nimport {\n GovernedDocumentAcceptanceControl,\n type GovernedDocumentAcceptanceState,\n type RequiredDocumentPresentation,\n} from '~wildo-frontend-lib/components/compliance/GovernedDocumentAcceptanceControl';\nimport { AutomatedForm } from '~wildo-frontend-lib/components/form/automated/AutomatedForm';\nimport { type FormMethods } from '~wildo-frontend-lib/components/form/Form';\nimport { extractServerValidationErrors } from '~wildo-frontend-lib/components/form/validation-errors/form-error-extraction.utils';\nimport { useServerErrorInjection } from '~wildo-frontend-lib/components/form/validation-errors/useServerErrorInjection';\nimport { Alert, AlertDescription } from '~wildo-frontend-lib/components/overlays/containers/alert';\nimport { OAuthProvidersSection, SSO_PROVIDER_BRAND_META } from '~wildo-frontend-lib/components/auth/utils/OAuthProvidersSection';\nimport { LabeledDivider } from '~wildo-frontend-lib/components/auth/utils/LabeledDivider';\nimport { AuthMethodChoiceList } from '~wildo-frontend-lib/components/auth/utils/AuthMethodChoiceList';\nimport { resolveAuthMethodChoiceLabel } from '~wildo-frontend-lib/components/auth/methods/auth-method-presentation';\nimport { DEFAULT_PASSWORD_POLICY, PasswordStrengthIndicator } from '~wildo-frontend-lib/components/auth/utils/PasswordStrengthIndicator';\nimport {\n extractPasswordPolicyErrorMessage,\n resolvePasswordViolationsToLabels,\n} from '~wildo-frontend-lib/components/auth/utils/resolvePasswordViolationsToLabels';\nimport { FormLayout } from '~wildo-frontend-lib/components/resources/skeleton/FormLayout';\nimport { FormField } from '~wildo-frontend-lib/components/form/automated/FormField';\nimport { SubmitButton } from '~wildo-frontend-lib/components/resources/skeleton/SubmitButton';\nimport { Heading } from '~wildo-frontend-lib/components/typography/heading';\nimport { Link } from '~wildo-frontend-lib/components/typography/link';\nimport { AuthSecondaryLink } from '~wildo-frontend-lib/components/auth/utils/AuthSecondaryLink';\nimport { Text } from '~wildo-frontend-lib/components/typography/text';\nimport { useI18n } from '~wildo-frontend-lib/core/i18n/useI18n';\nimport { useUserFacingErrorMessage } from '~wildo-frontend-lib/core/errors/useUserFacingErrorMessage';\nimport { getManualCallsHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\n\nimport { CommonRoutePaths } from '~wildo-frontend-lib/core/runtime/routes.frontend.definitions';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport {\n appendAuthRedirectToPath,\n extractAuthRedirectFromSearch,\n resolvePostAuthRedirect,\n} from '~wildo-frontend-lib/core/security/auth-redirect.frontend.utils';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { organizationOnboardingNavigationTarget } from '~wildo-frontend-lib/core/security/organization-onboarding.frontend.utils';\nimport { useAuthSession } from '~wildo-frontend-lib/core/security/useAuthSession';\nimport { RegistrationOutcome } from '~wildo-frontend-lib/core/security/registration-outcome.frontend.utils';\nimport { useMfaContinuationNavigation } from '~wildo-frontend-lib/components/auth/utils/useMfaContinuationNavigation';\nimport { useResolvedAuthConfig } from '~wildo-frontend-lib/core/security/useResolvedAuthConfig';\nimport type { ResendStatus } from '~wildo-frontend-lib/core/security/security.frontend.schemas';\nimport { collectFrontendProviderDisplayLabelKeys } from '~wildo-frontend-lib/core/external-providers/frontend-provider-display-label.frontend.utils';\nimport { resolveOAuthProviderDisplayLabel, resolvePublicOAuthProviderEntries } from '~wildo-frontend-lib/components/auth/utils/oauth-provider-display-label.frontend.utils';\n\nimport { ComponentPresetProps } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.schemas';\nimport { createComponentResolver } from '~wildo-frontend-lib/core/components-registry/component-resolver.frontend.helper';\n\nconst RESEND_COOLDOWN_SECONDS = 60;\n\n/*\n The sign-up methods THIS screen can carry out, in the order they are offered (#1093). The backend\n * implements public sign-up for exactly these three (`registerUser`); social OAuth2 is a hand-off the\n * providers section owns, and enterprise SSO signs up through the organization. A method is offered\n * only when the user type's `registration.allowedMethods` lists it, so an application that allows\n * MAGIC_LINK alone gets a password-less form and never a password field.\n /\nconst SELF_SIGNUP_METHODS: readonly AuthMethod[] = [AuthMethod.PASSWORD, AuthMethod.MAGIC_LINK, AuthMethod.PASSKEY];\n\n\n// =============================================================================\n// SELF-SUFFICIENT FORM TEMPLATE\n// =============================================================================\n\n/\n Module-scope template for the registration form. Fully self-sufficient — derives\n * all runtime state from standard hooks. No `useFormTemplateContext()` call.\n \n - Password policy → `useResolvedAuthConfig()`\n * - Root-level form errors → `useFormContext().formState.errors.root`\n * - Labels → `useI18n()`, passed directly to `<SubmitButton>` as props\n * - Conditional fields → FormField returns null for fields not in schema\n /\n/\n The registration form's acceptance state: exactly what the shared acceptance control takes, plus the\n * sign-up method the form is for (#1093), which decides the password fields and the submit wording.\n \n A CONTEXT rather than props because the form template renders inside `AutomatedForm`, which owns\n * its own tree. The control itself is `GovernedDocumentAcceptanceControl`, shared with the signed-in\n * re-acceptance gate so the two surfaces ask in the same three modes, with the same reading gate.\n \n Defaulted to \"nothing required, nothing accepted\" so a template rendered outside the provider —\n * any existing test, any other preset — behaves exactly as it did before this existed. The default\n * mode is the shipped one rather than the lightest, so it keeps withholding the button.\n /\ninterface RegisterConsentState extends GovernedDocumentAcceptanceState {\n readonly method: AuthMethod;\n}\n\nconst RegisterConsentContext = React.createContext<RegisterConsentState>({\n requiredReleases: [],\n acceptanceMode: GovernedDocumentAcceptanceMode.EXPLICIT_CHECKBOX,\n requiredDocuments: [],\n servedDocuments: [],\n accepted: false,\n setAccepted: () => {},\n documentsRead: [],\n markDocumentRead: () => {},\n method: AuthMethod.PASSWORD,\n});\n\n/* The shared acceptance control, fed from the registration form's context. /\nconst DocumentAcceptanceControl: React.FC<{\n readonly t: (key: string) => string;\n readonly tComponent: (component: FrontendComponentType, key: string, params?: Record<string, string \| number>) => string;\n}> = ({ t, tComponent }) => {\n const { method: _method, ...state } = React.useContext(RegisterConsentContext);\n return <GovernedDocumentAcceptanceControl state={state} t={t} tComponent={tComponent} />;\n};\n\nconst RegisterFormTemplate: React.FC = () => {\n const resolvedAuth = useResolvedAuthConfig();\n const { formState } = useFormContext();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);\n\n const passwordPolicy: PasswordPolicyRules = resolvedAuth.passwordPolicy ?? DEFAULT_PASSWORD_POLICY;\n const { requiredReleases, acceptanceMode, accepted, method } = React.useContext(RegisterConsentContext);\n const isPasswordSignup = method === AuthMethod.PASSWORD;\n\n if (!isReady) return null;\n\n // A password-less sign-up sets no password: its schema omits the fields (FormField renders nothing\n // for a field the schema lacks), the strength indicator has nothing to measure, and the submit says\n // what will happen instead — a sign-in link is emailed.\n const submitLabel = isPasswordSignup\n ? UserRegisterLabel.REGISTER_BUTTON\n : method === AuthMethod.PASSKEY\n ? UserRegisterLabel.PASSKEY_SIGNUP_BUTTON\n : UserRegisterLabel.MAGIC_LINK_SIGNUP_BUTTON;\n const submittingLabel = isPasswordSignup ? UserRegisterLabel.REGISTERING : UserRegisterLabel.MAGIC_LINK_SIGNUP_SENDING;\n\n return (\n <FormLayout>\n <FormField name=\"email\" />\n <FormField name=\"firstName\" />\n <FormField name=\"lastName\" />\n <FormField name=\"organizationName\" />\n {/\n * The application's own sign-up questions (#1371), in declaration order, between the\n * identity fields and the credential. `FormField` renders nothing for a name the schema\n * lacks, so a user type declaring none changes this template not at all — the same\n * mechanism that already makes `organizationName` and the password pair conditional.\n /}\n {(resolvedAuth.registrationConfig.additionalProfileQuestions ?? []).map((question) => (\n <FormField key={question.id} name={question.id} />\n ))}\n <FormField name=\"password\" />\n <FormField name=\"confirmPassword\" />\n\n {isPasswordSignup && <PasswordStrengthIndicator fieldName=\"password\" policy={passwordPolicy} t={t} />}\n\n {formState.errors.root && (\n <Alert variant=\"destructive\">\n <AlertDescription>{formState.errors.root.message}</AlertDescription>\n </Alert>\n )}\n\n {/\n * The consent control this application's own labels have declared since before it existed.\n \n `UserRegisterLabel.TERMS_ACCEPTANCE` — \"I accept the terms and privacy policy\" — was\n * declared in `Auth_Register.labels.ts` and shipped into two applications' locale files for a\n * control this component did not render (issue #54). The label was the only part that\n * existed; a registrant could not accept anything, so nothing could be recorded.\n \n It renders only when the application declares an in-force release that PERMITS acceptance.\n * An application with no governed documents gets the form it always had — no empty checkbox,\n * no consent nobody asked for. That is `derive-before-you-ask.md` rule 3 in the UI: total over\n * what was declared, so a document added to the configuration tomorrow is offered with no\n * edit here.\n \n WHICH shape it takes is the application's declared `governedDocumentAcceptanceMode` (#1258).\n /}\n <DocumentAcceptanceControl t={t} tComponent={tComponent} />\n\n <SubmitButton\n label={t(submitLabel)}\n submittingLabel={t(submittingLabel)}\n fullWidth\n /\n * Unticked means the button is unavailable, not that the request is refused server-side. The\n * acceptance is what makes the record TRUE, so the honest place to insist on it is where the\n * person can act — and a registration that reached the backend without it would simply\n * record nothing, which is the correct behaviour there.\n \n Under `IMPLIED_BY_REGISTERING` nothing is withheld, because there is no second act to wait\n * for: pressing this button IS the acceptance. `governedDocumentAcceptanceRequiresExplicitAct`\n * is the same predicate `handleRegisterSubmit` decides on, so a button the person can press\n * and a request that carries the accepted ids are one decision rather than two.\n /\n disabled={requiredReleases.length > 0 && governedDocumentAcceptanceRequiresExplicitAct(acceptanceMode) && !accepted}\n />\n </FormLayout>\n );\n};\n\n// --- Contract ---\nexport interface PublicLayoutPreset_UserRegister_DefaultProps {\n}\n\nexport const PublicLayoutPreset_UserRegister_Default = ({}: PublicLayoutPreset_UserRegister_DefaultProps): React.JSX.Element => {\n const { auth, initiateOAuth2Login } = useUserOrgs();\n const { registerAccount } = useAuthSession();\n const toUserFacingErrorMessage = useUserFacingErrorMessage();\n const { appConfig } = useApplication();\n const [governedDocumentsAccepted, setGovernedDocumentsAccepted] = useState(false);\n /\n * The reading EVIDENCE lives here, beside the act, and not inside the form — `AutomatedForm` is\n * keyed on the sign-up method, so anything it owns is reset by choosing a different one. With the\n * two at different lifetimes, switching method reset the evidence and kept the tick: the box\n * rendered already ticked against a gate that no longer read as satisfied.\n /\n const [governedDocumentsRead, setGovernedDocumentsRead] = useState<readonly string[]>([]);\n const markDocumentRead = useCallback((paneKey: string) => {\n setGovernedDocumentsRead((read) => (read.includes(paneKey) ? read : [...read, paneKey]));\n }, []);\n\n /\n How this application asks (#1258) — see {@link GovernedDocumentAcceptanceMode}.\n \n Read straight from the shared configuration, whose schema defaults it to `EXPLICIT_CHECKBOX`, so\n * an application that has declared nothing keeps the behaviour registration shipped with. The `??`\n * covers the config object itself being absent, which is the same answer for the same reason.\n /\n const acceptanceMode = appConfig.compliance?.governedDocumentAcceptanceMode ?? GovernedDocumentAcceptanceMode.EXPLICIT_CHECKBOX;\n\n /\n The governed-document releases a registrant must ACCEPT — issue #54.\n \n Read from `compliance.governedDocumentReleases`, the same authored value the backend composes\n * its records from, so the control and the record cannot disagree about which release was in play.\n * `selectGovernedDocumentReleasesInForce` is the shared predicate, so \"in force\" means one thing\n * across the browser, the recorder and `resolveEffectiveDocumentRelease`.\n \n Only releases permitting `CONTRACT_ACCEPTED` are here. A privacy notice permits delivery and\n * acknowledgement, which are not things a checkbox makes true — and until an application can SERVE\n * a document, neither is recordable at all.\n \n Evaluated once per mount rather than per render: a release taking effect mid-form would\n * otherwise change what the registrant is agreeing to while they type.\n /\n const requireApprovedDocuments = requiresApprovedGovernedDocuments(appConfig.compliance);\n const requiredGovernedDocumentReleases = useMemo(\n () => selectGovernedDocumentReleasesInForce(\n appConfig.compliance?.governedDocumentReleases ?? [],\n new Date().toISOString(),\n // The approval gate (#1565): armed, sign-up never asks for a release the public page would\n // refuse to show.\n { requireApproved: requireApprovedDocuments },\n ).filter((release) => release.allowedInteractionKinds.includes(GovernedDocumentInteractionKind.CONTRACT_ACCEPTED)),\n // eslint-disable-next-line react-hooks/exhaustive-deps -- pinned at mount, deliberately; see above.\n [appConfig.compliance?.governedDocumentReleases, requireApprovedDocuments],\n );\n\n /\n Each required release paired with the public document the application publishes for it.\n \n Resolved through `resolveInForcePublicDocument`, the same function the public page uses, so a\n * pane and the page cannot show different releases of one document. A release whose document the\n * application does not serve publicly keeps its entry with `document: undefined` — the ABSENCE is\n * information, and dropping the entry is what previously let a partial set look complete.\n \n Resolved in EVERY mode, not only the reading one. It costs one lookup per release and it is what\n * lets the acceptance links name their documents whichever shape the application asked for; the\n * text itself is only rendered under `EXPLICIT_AFTER_READING`.\n /\n const requiredDocuments = useMemo<readonly RequiredDocumentPresentation[]>(\n () => {\n const at = new Date().toISOString();\n return requiredGovernedDocumentReleases.map((release) => ({\n release,\n document: resolveInForcePublicDocument(appConfig.compliance?.publicDocuments ?? [], release.identity.document.documentRef, at, {\n requireApproved: requireApprovedDocuments,\n }),\n }));\n },\n // eslint-disable-next-line react-hooks/exhaustive-deps -- pinned at mount with its releases, deliberately; see above.\n [requiredGovernedDocumentReleases, appConfig.compliance?.publicDocuments, requireApprovedDocuments],\n );\n\n /* Every public document the application serves — linked beside the control, never gated. /\n const servedDocuments = useMemo<readonly GovernedDocumentPublicDocument[]>(\n () => appConfig.compliance?.publicDocuments ?? [],\n [appConfig.compliance?.publicDocuments],\n );\n\n /\n * ONE acceptance context for BOTH sign-up paths — the form and the OAuth buttons.\n \n Two provider values would be two states, and a person would tick a box on one path while the\n * other stayed ungated. `method` is the form's own concern, so the form overrides it below; nothing\n * the OAuth path renders reads it.\n /\n const acceptanceContextValue = useMemo(() => ({\n requiredReleases: requiredGovernedDocumentReleases,\n acceptanceMode,\n requiredDocuments,\n servedDocuments,\n accepted: governedDocumentsAccepted,\n setAccepted: setGovernedDocumentsAccepted,\n documentsRead: governedDocumentsRead,\n markDocumentRead,\n method: AuthMethod.EXTERNAL_OAUTH2,\n }), [requiredGovernedDocumentReleases, acceptanceMode, requiredDocuments, servedDocuments, governedDocumentsAccepted, governedDocumentsRead, markDocumentRead]);\n\n /\n Whether an act of acceptance is owed before an account may be started by ANY route.\n \n The same predicate the submit button uses, so the form and the OAuth buttons cannot disagree\n * about whether the person has done what the application asked of them.\n /\n const acceptanceIsWithheld = requiredGovernedDocumentReleases.length > 0\n && governedDocumentAcceptanceRequiresExplicitAct(acceptanceMode)\n && !governedDocumentsAccepted;\n\n /\n The release ids that travel with whichever sign-up the person starts — the form, or a provider.\n \n ONE derivation for both, because the two must agree: a submit the person can press without the\n * ids being sent records nothing while reporting success, and that asymmetry is exactly what left\n * a social sign-up binding people with no evidence they had been asked (#1383). Under\n * `IMPLIED_BY_REGISTERING` there is no tick to wait for, so the act of starting the sign-up IS the\n * assent and the ids travel from the first keystroke.\n \n Empty rather than `undefined` when nothing is owed, so a caller cannot mistake \"nothing to\n * accept\" for \"something to accept that I forgot to read\".\n /\n const acceptedReleaseIdsToCarry = useMemo<string[]>(() => {\n if (requiredGovernedDocumentReleases.length === 0) return [];\n if (governedDocumentAcceptanceRequiresExplicitAct(acceptanceMode) && !governedDocumentsAccepted) return [];\n return requiredGovernedDocumentReleases.map((release) => release.identity.releaseId);\n }, [requiredGovernedDocumentReleases, acceptanceMode, governedDocumentsAccepted]);\n\n\n const resolvedAuth = useResolvedAuthConfig();\n const location = useLocation();\n const enabledSocialOAuth2Providers = useMemo(() => {\n if (!resolvedAuth.registrationConfig.allowedMethods.includes(AuthMethod.EXTERNAL_OAUTH2)) {\n return [];\n }\n return resolvePublicOAuthProviderEntries({\n publicProviders: resolvedAuth.globalAuth?.socialOAuth2Providers,\n });\n }, [\n resolvedAuth.globalAuth?.socialOAuth2Providers,\n resolvedAuth.registrationConfig.allowedMethods,\n ]);\n const socialOAuth2ProviderLabelKeys = useMemo(() => {\n return collectFrontendProviderDisplayLabelKeys(\n enabledSocialOAuth2Providers.map((provider) => provider.displayNameLabelKey),\n );\n }, [enabledSocialOAuth2Providers]);\n // Two label namespaces: this screen's own, and the sign-in screen's for the method words (#1093).\n const i18nComponents = useMemo(\n () => [FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH],\n [],\n );\n const { t: translate, tComponent, isReady } = useI18n({\n component: i18nComponents,\n keys: socialOAuth2ProviderLabelKeys,\n });\n\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);\n const tAuth = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_AUTH, key);\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n /\n The address a link into sign-up names (`?email=`), filled in for the person to confirm (#2618). A representing\n * organization's invitation sends its invitee here with the invited address, because its proposal reaches only an\n * organization whose owner proved THAT address. A suggestion only: the field stays editable, and the address is\n * proven by the verification email like any other.\n /\n const prefilledEmail = useMemo(() => new URLSearchParams(location.search).get('email')?.trim() ?? '', [location.search]);\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget),\n [authRedirectTarget],\n );\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n // ─── Social OAuth2 providers from resolved config ───\n const hasSocialOAuth2Providers = enabledSocialOAuth2Providers.length > 0;\n\n const handleOAuth2Click = useCallback(async (providerRef: string) => {\n try {\n await initiateOAuth2Login(providerRef, authRedirectTarget, acceptedReleaseIdsToCarry);\n } catch {\n // Error handled in AuthSessionContext\n }\n }, [acceptedReleaseIdsToCarry, authRedirectTarget, initiateOAuth2Login]);\n\n // ─── Form methods ref for server error injection ───\n const formMethodsRef = useRef<FormMethods \| null>(null);\n const { initAutoClearing, injectServerErrors, clearServerErrors } = useServerErrorInjection(formMethodsRef);\n const handleFormReady = useCallback((formMethods: FormMethods) => {\n formMethodsRef.current = formMethods;\n initAutoClearing(formMethods);\n }, [initAutoClearing]);\n\n // ─── State ───\n const [isLoading, setIsLoading] = useState(false);\n /\n What the registration answer MEANT (#972), classified once by `registerAccount`. `null` until the\n * form is submitted. This replaced a `registrationComplete` boolean that was set for every answer and\n * rendered \"check your email\" — false for a registrant who had been signed in, and a dead end for one\n * who owed a second-factor enrollment.\n /\n const [registrationOutcome, setRegistrationOutcome] = useState<RegistrationOutcome \| null>(null);\n const [registeredEmail, setRegisteredEmail] = useState('');\n\n /\n * A registration session parked at the enrollment gate is routed exactly as the login screen routes\n * the same auth state — the hook IS the login screen's routing. Gated on THIS submission's outcome so\n * a stale `mfaRequired` left by an abandoned sign-in cannot pull a visitor off the sign-up form.\n /\n useMfaContinuationNavigation({\n mfaRequired: registrationOutcome === RegistrationOutcome.MFA_ENROLLMENT_REQUIRED && auth.mfaRequired,\n mfaSessionId: auth.mfaSessionId,\n usableSecondFactorMethods: auth.usableSecondFactorMethods,\n email: registeredEmail,\n authRedirectTarget,\n });\n\n // ─── Resend state ───\n const [resendStatus, setResendStatus] = useState<ResendStatus>('idle');\n const [resendCooldown, setResendCooldown] = useState(0);\n const [resendError, setResendError] = useState<string \| null>(null);\n\n useEffect(() => {\n if (resendCooldown <= 0) return;\n const timer = setInterval(() => {\n setResendCooldown((prev) => {\n if (prev <= 1) {\n clearInterval(timer);\n return 0;\n }\n return prev - 1;\n });\n }, 1000);\n return () => clearInterval(timer);\n }, [resendCooldown]);\n\n const handleResend = useCallback(async () => {\n if (!registeredEmail \|\| resendCooldown > 0) return;\n setResendStatus('sending');\n setResendError(null);\n try {\n await getManualCallsHttpClient().resendVerificationEmail(registeredEmail);\n setResendStatus('sent');\n setResendCooldown(RESEND_COOLDOWN_SECONDS);\n } catch (e: unknown) {\n setResendStatus('error');\n setResendError(toUserFacingErrorMessage(e, t(UserRegisterLabel.UNEXPECTED_ERROR)));\n }\n }, [registeredEmail, resendCooldown]); // eslint-disable-line react-hooks/exhaustive-deps\n\n // ─── Password policy from resolved user type config ───\n const passwordPolicy: PasswordPolicyRules = useMemo(() => {\n return (resolvedAuth.passwordPolicy as PasswordPolicyRules) ?? DEFAULT_PASSWORD_POLICY;\n }, [resolvedAuth.passwordPolicy]);\n\n // ─── W6.2: Org name required during registration? ───\n const showOrgNameField = useMemo(() => {\n if (!resolvedAuth.resolvedUserType) return false;\n const matches = findOrganizationTypeRegistrationCreationMatches(\n appConfig.organizationTypes,\n resolvedAuth.resolvedUserType,\n );\n return matches.length === 1\n && matches[0]?.definition.creationPolicy?.orgNameSource\n === OrganizationNameSource.ASK;\n }, [appConfig.organizationTypes, resolvedAuth.resolvedUserType]);\n\n // ─── Registration config from resolved user type ───\n const registrationConfig = useMemo(() => {\n return resolvedAuth.registrationConfig;\n }, [resolvedAuth.registrationConfig]);\n\n const allowedMethods = registrationConfig.allowedMethods;\n /\n * The sign-up methods offered (#1093): the ones this screen carries out that the user type allows, in\n * the screen's order — so PASSWORD is the form shown first when it is allowed, exactly as before, and a\n * user type allowing only a password-less method gets that form with no password field at all.\n /\n const offeredMethods = useMemo(\n () => SELF_SIGNUP_METHODS.filter((method) => allowedMethods.includes(method)),\n [allowedMethods],\n );\n const [selectedMethod, setSelectedMethod] = useState<AuthMethod \| null>(null);\n const activeMethod = selectedMethod !== null && offeredMethods.includes(selectedMethod) ? selectedMethod : (offeredMethods[0] ?? null);\n const alternativeMethods = offeredMethods.filter((method) => method !== activeMethod);\n const showForm = activeMethod !== null;\n /\n * ONE control on the page, never two.\n \n The form renders the acceptance control whenever it renders at all, and both paths share one\n * state — so where a form exists, its control is what the OAuth buttons wait on too. Rendering a\n * second one beside the providers put two boxes, two reading panes and two sets of document links\n * on the same screen: driven live, the terms document was paned TWICE.\n \n The OAuth-path control therefore exists for exactly the case that had nothing: an application\n * offering only social sign-up, where `SELF_SIGNUP_METHODS` leaves no active method and no form.\n /\n const formCarriesAcceptance = showForm && activeMethod !== null;\n const showPasswordFields = activeMethod === AuthMethod.PASSWORD;\n const showDivider = hasSocialOAuth2Providers && showForm;\n\n /\n The application's own sign-up questions (#1371), in declaration order.\n \n This is the field set the engine does NOT own. Everything above is fixed; these come from the\n * resolved user type's `registration.additionalProfileQuestions`.\n /\n /\n * `?? []` is not defensive noise. This screen is preset-overridable and its resolved config\n * arrives from a boundary, so an absent list must mean \"this user type asks nothing\" — the same\n * thing an empty one means. Reading it unguarded took the ENTIRE sign-up screen down with\n * `declaredProfileQuestions is not iterable` when the field was missing, which is the worst\n * possible failure direction for an optional question nobody declared.\n /\n const declaredProfileQuestions = resolvedAuth.registrationConfig.additionalProfileQuestions ?? [];\n /\n * Whether this form asks for the person's names (#1374). A user type that collects them at onboarding leaves them\n * out: they are asked once the address is proven, at the onboarding step, and the server neither requires nor\n * expects them here. Omitted from the SCHEMA, so the template's `FormField`s render nothing — the same mechanism\n * that makes the organization and password fields conditional.\n /\n const collectsNamesAtSignUp = resolvedAuth.registrationConfig.profileNamesCollectedAt !== ProfileNamesCollectionMoment.ONBOARDING;\n\n const registerFormSchema = useMemo(() => {\n /\n * The application's declared questions become real schema entries (#1371).\n \n This is what the form schema had to stop being a module constant FOR. The acceptance control\n * above records the same constraint from the other side — it had to be built as a context\n * BESIDE the form precisely because \"a Zod form schema cannot declare a field per document\n * without being built at render time\". It is built at render time now.\n \n Extended FIRST, before the conditional omissions, so both branches below derive from one\n * object type. Extending after the `showOrgNameField` ternary would widen it to a union and\n * neither `.omit` nor `.refine` would narrow.\n \n The type map is total over the bindable set: the config schema restricts a sign-up question\n * to the types whose answer IS a value, so there is no option-ref case to represent here.\n /\n const declaredFields: Record<string, z.ZodTypeAny> = {};\n for (const question of declaredProfileQuestions) {\n const base = question.type === OnboardingSurveyQuestionType.RATING\n ? z.number()\n : z.string().min(1);\n declaredFields[question.id] = question.required ? base : base.optional();\n }\n const withDeclaredQuestions = UserRegisterFormDtoSchema.extend(declaredFields);\n const withNames = collectsNamesAtSignUp\n ? withDeclaredQuestions\n : withDeclaredQuestions.omit({ firstName: true, lastName: true });\n\n const withOrganization = showOrgNameField\n ? withNames\n : withNames.omit({ organizationName: true });\n // A password-less sign-up has no password to ask for: the fields leave the schema, so the form\n // renders none, validates none, and has no confirmation to match.\n if (!showPasswordFields) {\n return withOrganization.omit({ password: true, confirmPassword: true });\n }\n return withOrganization.refine(\n (data) => !data.password \|\| data.password === data.confirmPassword,\n { message: t(UserRegisterLabel.PASSWORD_MISMATCH), path: ['confirmPassword'] },\n );\n }, [t, showOrgNameField, showPasswordFields, declaredProfileQuestions, collectsNamesAtSignUp]);\n\n // Parked at organization onboarding (#1090): the organization is the only step left, whatever this screen was doing.\n const organizationOnboardingTarget = organizationOnboardingNavigationTarget(auth, authRedirectTarget);\n if (organizationOnboardingTarget) {\n return <Navigate to={organizationOnboardingTarget} replace />;\n }\n\n if (!isReady) return null;\n\n // ═══════════════════════════════════════════════════════════════\n // Registration answered — one branch per `RegistrationOutcome`\n // ═══════════════════════════════════════════════════════════════\n if (registrationOutcome === RegistrationOutcome.SIGNED_IN) {\n // The native `Auth_Register` wrapper also forwards on `auth.accessToken`; this covers a preset rendered without it.\n return auth.accessToken ? <Navigate to={postAuthRedirect} replace /> : null;\n }\n\n if (registrationOutcome === RegistrationOutcome.MFA_ENROLLMENT_REQUIRED) {\n // `useMfaContinuationNavigation` above takes the registrant, with their session, to the enrollment gate.\n return null;\n }\n\n if (registrationOutcome !== null) {\n /\n * An SSO-enforced domain is a REFUSAL, not a success: the backend returns before creating anything\n * (`registerUser`, `blockForSSODomains`), and nothing redirects. So it has its own heading and body —\n * \"Account created\" and \"you'll be redirected\" were both false there. The sign-in link below is the\n * way forward: the sign-in screen resolves the address's domain to its organization's SSO.\n /\n const isSsoRegistration = registrationOutcome === RegistrationOutcome.SSO_REDIRECT_REQUIRED;\n const title = isSsoRegistration ? UserRegisterLabel.SSO_REGISTRATION_TITLE : UserRegisterLabel.SUCCESS_TITLE;\n const message = isSsoRegistration\n ? UserRegisterLabel.SSO_REGISTRATION_MESSAGE\n : registrationOutcome === RegistrationOutcome.UNFINISHED\n ? UserRegisterLabel.REGISTRATION_UNFINISHED\n : registrationOutcome === RegistrationOutcome.MAGIC_LINK_SENT\n ? UserRegisterLabel.MAGIC_LINK_SENT_MESSAGE\n : registrationOutcome === RegistrationOutcome.PASSKEY_ENROLLMENT_PENDING\n ? UserRegisterLabel.PASSKEY_ENROLLMENT_PENDING_MESSAGE\n : UserRegisterLabel.SUCCESS_MESSAGE;\n /\n * Resend re-sends a VERIFICATION email, so it is offered only when one is what the registrant is\n * waiting for. A magic-link signup's link is not a verification mail, and an unfinished one is not\n * waiting on email at all.\n /\n const offersVerificationResend = registrationOutcome === RegistrationOutcome.EMAIL_VERIFICATION_PENDING;\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <div className=\"mx-auto flex h-12 w-12 items-center justify-center rounded-full bg-primary/10 mb-element\">\n <svg className=\"h-6 w-6 text-primary\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" strokeWidth=\"2\">\n <path strokeLinecap=\"round\" strokeLinejoin=\"round\" d=\"M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z\" />\n </svg>\n </div>\n <Heading>{t(title)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(message)}</Text>\n </div>\n\n {offersVerificationResend && (\n <div className=\"text-center space-y-item-xs\">\n <Text className=\"text-sm text-muted-foreground\">\n {t(UserRegisterLabel.RESEND_PROMPT)}{' '}\n <Button\n variant={ButtonVariants_Variant.LINK}\n className=\"p-0 h-auto text-sm\"\n onClick={handleResend}\n disabled={resendStatus === 'sending' \|\| resendCooldown > 0}\n >\n {resendStatus === 'sending'\n ? t(UserRegisterLabel.RESEND_SENDING)\n : resendCooldown > 0\n ? `${t(UserRegisterLabel.RESEND_COOLDOWN)} (${resendCooldown}s)`\n : t(UserRegisterLabel.RESEND_LINK)}\n </Button>\n </Text>\n {resendStatus === 'sent' && (\n <Alert>\n <AlertDescription>{t(UserRegisterLabel.RESEND_SUCCESS)}</AlertDescription>\n </Alert>\n )}\n {resendStatus === 'error' && resendError && (\n <Alert variant=\"destructive\">\n <AlertDescription>{resendError}</AlertDescription>\n </Alert>\n )}\n </div>\n )}\n\n <div className=\"text-center mt-group\">\n <AuthSecondaryLink href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n // ═══════════════════════════════════════════════════════════════\n // Registration Form\n // ═══════════════════════════════════════════════════════════════\n const handleRegisterSubmit = async (data: UserRegisterFormDto & { password?: string; confirmPassword?: string }) => {\n setIsLoading(true);\n formMethodsRef.current?.clearErrors('root');\n clearServerErrors();\n\n const method = activeMethod ?? AuthMethod.PASSWORD;\n if (method === AuthMethod.PASSWORD && data.password) {\n const policyResult = AuthUtils.validatePasswordAgainstPolicy(data.password, passwordPolicy);\n if (!policyResult.valid) {\n formMethodsRef.current?.setError('root', {\n type: 'policy',\n message: resolvePasswordViolationsToLabels(policyResult.violations, t, passwordPolicy).join('. '),\n });\n setIsLoading(false);\n return;\n }\n }\n\n try {\n const outcome = await registerAccount({\n email: data.email,\n // Absent when the names are collected at onboarding (#1374): the schema does not ask for them.\n ...(collectsNamesAtSignUp ? { firstName: data.firstName, lastName: data.lastName } : {}),\n // The credential ONLY for the method that takes one; a password-less sign-up sends none.\n password: method === AuthMethod.PASSWORD ? data.password?.trim() \|\| undefined : undefined,\n organizationName: data.organizationName?.trim() \|\| undefined,\n /\n * The declared sign-up answers (#1371), keyed by QUESTION ID — the server re-reads the same\n * declaration and refuses a key this user type does not declare, so the mapping from\n * question to profile field is made in one place, on the side that owns the write.\n \n Omitted entirely when nothing is declared, so a registration from an application that\n * asks nothing is byte-identical to what it was.\n /\n profileAnswers: declaredProfileQuestions.length > 0\n ? Object.fromEntries(\n declaredProfileQuestions\n .map((question) => [question.id, (data as Record<string, unknown>)[question.id]])\n .filter(([, value]) => value !== undefined && value !== ''),\n ) as Record<string, string \| number \| boolean>\n : undefined,\n /\n * The chosen method, and the deep link this screen was opened with (#1093). The backend keeps\n * the redirect only when same-origin and within bounds, and carries it into the emailed sign-in\n * link of a password-less sign-up — the one register outcome that signs the person in elsewhere.\n /\n method,\n ...(authRedirectTarget ? { redirect: authRedirectTarget } : {}),\n /\n * IDS only. The server resolves which releases are in force and matches these against them,\n * so this cannot choose a VERSION, invent a release, or accept a document the application\n * does not publish — see `UserRegisterApiDtoSchema.acceptedGovernedDocumentReleaseIds`.\n /\n ...(acceptedReleaseIdsToCarry.length > 0\n ? { acceptedGovernedDocumentReleaseIds: acceptedReleaseIdsToCarry }\n : {}),\n });\n setRegisteredEmail(data.email);\n setRegistrationOutcome(outcome);\n } catch (e: any) {\n const serverErrors = extractServerValidationErrors(e);\n if (serverErrors) {\n injectServerErrors(serverErrors.validationErrors);\n } else {\n const passwordPolicyMsg = extractPasswordPolicyErrorMessage(e, t, passwordPolicy);\n formMethodsRef.current?.setError('root', {\n type: 'server',\n message: passwordPolicyMsg ?? toUserFacingErrorMessage(e, t(UserRegisterLabel.UNEXPECTED_ERROR)),\n });\n }\n } finally {\n setIsLoading(false);\n }\n };\n\n if (!hasSocialOAuth2Providers && !showForm) {\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserRegisterLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserRegisterLabel.REGISTRATION_DISABLED)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n }\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserRegisterLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(UserRegisterLabel.SUB_TITLE)}</Text>\n </div>\n\n {/\n * ACCEPTANCE GOVERNS THE OAUTH PATH TOO — it did not, and that was a hole straight through the\n * whole vocabulary.\n \n `SELF_SIGNUP_METHODS` excludes `EXTERNAL_OAUTH2`, so an application offering only social\n * sign-up has no `activeMethod`, renders no form, and therefore rendered no acceptance control\n * at all: a person created an account through Google having been asked nothing and shown\n * nothing. Even where a form WAS rendered, these buttons sat outside its provider and were\n * live before the box was ticked, so the strongest two modes could be walked around by\n * choosing the other button.\n \n So the control is rendered HERE when there are providers, and the buttons are withheld until\n * the act is made. Under `IMPLIED_BY_REGISTERING` nothing is withheld — pressing the button IS\n * the act, exactly as pressing submit is.\n \n What this does NOT fix: the accepted release ids do not survive the OAuth redirect, so the\n * JIT-provisioned account carries no interaction record. The ACT now happens on every path;\n * RECORDING it on this one needs the ids carried through the callback, which is backend work\n * and is named in the mode's own note as the boundary of what a registration screen controls.\n /}\n {enabledSocialOAuth2Providers.length > 0 && requiredGovernedDocumentReleases.length > 0 && !formCarriesAcceptance && (\n <RegisterConsentContext.Provider value={acceptanceContextValue}>\n <DocumentAcceptanceControl t={t} tComponent={tComponent} />\n </RegisterConsentContext.Provider>\n )}\n\n <OAuthProvidersSection\n providers={enabledSocialOAuth2Providers}\n onProviderClick={handleOAuth2Click}\n isLoading={isLoading \|\| auth.isLoading}\n disabled={acceptanceIsWithheld}\n continueWithLabel={t(UserRegisterLabel.CONTINUE_WITH)}\n translate={translate}\n dividerLabel={t(UserRegisterLabel.DIVIDER_OR)}\n showDivider={showDivider}\n />\n\n {showForm && activeMethod !== null && (\n <RegisterConsentContext.Provider\n value={{\n requiredReleases: requiredGovernedDocumentReleases,\n acceptanceMode,\n requiredDocuments,\n servedDocuments,\n accepted: governedDocumentsAccepted,\n setAccepted: setGovernedDocumentsAccepted,\n documentsRead: governedDocumentsRead,\n markDocumentRead,\n method: activeMethod,\n }}\n >\n <AutomatedForm\n // One form per method: switching remounts it with that method's schema and defaults.\n key={activeMethod}\n schema={registerFormSchema}\n defaultValues={{ email: prefilledEmail, ...(collectsNamesAtSignUp && { firstName: '', lastName: '' }), ...(showOrgNameField && { organizationName: '' }), ...(showPasswordFields && { password: '', confirmPassword: '' }) }}\n onSubmit={handleRegisterSubmit}\n onFormReady={handleFormReady}\n validationMode={ValidationMode.ON_BLUR}\n disabled={isLoading}\n layoutTemplate={RegisterFormTemplate}\n labels={{\n fields: {\n email: t(UserRegisterLabel.EMAIL_ADDRESS),\n ...(collectsNamesAtSignUp && { firstName: t(UserRegisterLabel.FIRST_NAME), lastName: t(UserRegisterLabel.LAST_NAME) }),\n ...(showOrgNameField && { organizationName: t(UserRegisterLabel.ORGANIZATION_NAME) }),\n ...(showPasswordFields && { password: t(UserRegisterLabel.PASSWORD), confirmPassword: t(UserRegisterLabel.CONFIRM_PASSWORD) }),\n },\n }}\n />\n </RegisterConsentContext.Provider>\n )}\n\n {/\n * The other sign-up methods the user type allows (#1093), as the invitation screen offers\n * them: a button per method switches the form. Named with the sign-in screen's words, so a\n * method reads the same wherever it is chosen.\n /}\n {alternativeMethods.length > 0 && (\n <>\n <LabeledDivider label={tAuth(UserAuthLabel.OTHER_METHODS_DIVIDER)} />\n <Text className=\"text-sm text-muted-foreground text-center mb-element\">{t(UserRegisterLabel.METHOD_CHOICE_HINT)}</Text>\n <AuthMethodChoiceList\n methods={alternativeMethods}\n /\n * Registration offers a method before anyone is identified, so there is no descriptor and\n * no enterprise connection to name — but the application's social providers are known, and\n * they are the same ones this screen's own provider buttons render. Where exactly one is\n * configured the button reads \"Continue with Google\" instead of the kind.\n */\n labelFor={(method) => resolveAuthMethodChoiceLabel(method, {\n socialProviders: enabledSocialOAuth2Providers,\n continueWithTemplate: tAuth(UserAuthLabel.CONTINUE_WITH),\n translateLabel: (label) => tAuth(label),\n resolveSocialProviderLabel: (provider) => resolveOAuthProviderDisplayLabel({\n providerRef: provider.providerRef,\n displayName: provider.displayName,\n displayNameLabelKey: provider.displayNameLabelKey,\n brandLabel: SSO_PROVIDER_BRAND_META[provider.providerRef]?.label,\n translate,\n }),\n })}\n onSelect={setSelectedMethod}\n disabled={isLoading}\n />\n </>\n )}\n\n <div className=\"text-center mt-group\">\n <Text className=\"text-sm\">\n {t(UserRegisterLabel.ALREADY_HAVE_ACCOUNT)}{' '}\n <Link href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</Link>\n </Text>\n </div>\n </>\n );\n};\n\nfunction RegistrationUnavailable({\n mode,\n}: {\n mode: RegistrationMode;\n}): React.JSX.Element \| null {\n const location = useLocation();\n const { tComponent, isReady } = useI18n({\n component: FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER,\n });\n const authRedirectTarget = useMemo(\n () => extractAuthRedirectFromSearch(location.search),\n [location.search],\n );\n const loginPath = useMemo(\n () => appendAuthRedirectToPath(CommonRoutePaths.login, authRedirectTarget),\n [authRedirectTarget],\n );\n if (!isReady) return null;\n\n const message = mode === RegistrationMode.INVITATION_ONLY\n ? UserRegisterLabel.INVITATION_ONLY\n : mode === RegistrationMode.ADMIN_ONLY\n ? UserRegisterLabel.ADMIN_ONLY\n : UserRegisterLabel.REGISTRATION_DISABLED;\n const t = (key: string) => tComponent(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, key);\n\n return (\n <>\n <div className=\"text-center space-y-item-xs mb-group\">\n <Heading>{t(UserRegisterLabel.TITLE)}</Heading>\n <Text className=\"max-w-sm mx-auto\">{t(message)}</Text>\n </div>\n <div className=\"text-center\">\n <AuthSecondaryLink href={loginPath}>{t(UserRegisterLabel.SIGNIN_LINK)}</AuthSecondaryLink>\n </div>\n </>\n );\n}\n\nexport function Auth_Register({ preset = CorePresetNames.DEFAULT, ...props }: PublicLayoutPreset_UserRegister_DefaultProps & ComponentPresetProps): React.JSX.Element {\n const { auth } = useUserOrgs();\n const resolvedAuth = useResolvedAuthConfig();\n const location = useLocation();\n const postAuthRedirect = useMemo(\n () => resolvePostAuthRedirect(location.search),\n [location.search],\n );\n\n // This native wrapper is the non-overridable availability boundary. Presets customize only the\n // presentation of an already-authorized public registration flow.\n if (auth.accessToken) {\n return <Navigate to={postAuthRedirect} replace />;\n }\n if (!resolvedAuth.registrationConfig.publicRegistrationAvailable) {\n return <RegistrationUnavailable mode={resolvedAuth.registrationConfig.mode} />;\n }\n\n const Component = createComponentResolver<PublicLayoutPreset_UserRegister_DefaultProps>(FrontendComponentType.PUBLIC_LAYOUTS_USER_REGISTER, 'Auth_Register')(preset);\n return <Component {...props} />;\n}\n"]}

package/dist/esm/components/auth/Auth_Register.labels.js CHANGED Viewed

@@ -30,13 +30,13 @@ export const PublicLayoutsUserRegisterLabels = [
         ref: UserRegisterLabel.POLICY_MIN_LENGTH,
         kind: LabelKind.DESCRIPTION,
         purpose: 'Password-policy hint for the minimum required length',
-        params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain' }],
+        params: [{ key: 'minLength', meaning: 'minimum number of characters the password must contain', isCount: true }],
     },
     {
         ref: UserRegisterLabel.POLICY_MAX_LENGTH,
         kind: LabelKind.DESCRIPTION,
         purpose: 'Password-policy hint for the maximum allowed length',
-        params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain' }],
+        params: [{ key: 'maxLength', meaning: 'maximum number of characters the password may contain', isCount: true }],
     },
     { ref: UserRegisterLabel.POLICY_UPPERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one uppercase letter' },
     { ref: UserRegisterLabel.POLICY_LOWERCASE, kind: LabelKind.DESCRIPTION, purpose: 'Password-policy hint requiring at least one lowercase letter' },