uhc-portal-components-react 0.2.27 → 0.2.29

package/CHANGELOG.md

@@ -1,13 +1,27 @@
 # Changelog
 
-## Unreleased
+## 0.2.29 - 2026-10-22
+
+- Add one product-neutral WebRTC engine and call screen for audio/video start,
+  acceptance, local/remote media binding and hang-up. Host BFF adapters remain
+  responsible for subject/service authorization, ICE issuance, signalling and
+  durable call state.
+- Keep shared light/dark theme state synchronized with the host document so
+  independently deployed portal shells render the same selected theme.
+
+## 0.2.28 - 2026-10-22
+
+- Add one reusable existing-professional screen with two explicit alternatives:
+  scan or upload the signed professional-credential QR, or enter one DID/URN
+  plus the organization sector manually.
+- Keep the employee invitation, verified professional credential and device
+  registration as separate artifacts and flows.
 
 ## 0.2.27 - 2026-10-22
 
-- Add one brand-neutral Professional profile activation screen that accepts a
-  single organization-issued credential and a local PIN. Product BFFs resolve
-  organization, sector, role, licence and technical identities; the browser no
-  longer asks employees to reconstruct separate DID and URN values.
+- Add one brand-neutral employee-invitation activation screen and local PIN.
+  Product BFFs resolve organization, sector, role, licence and technical
+  identities without exposing provider internals to the browser.
 
 ## 0.2.26 - 2026-10-22
 

package/README.md

@@ -120,6 +120,10 @@ The package deliberately exposes modules instead of a cloned application:
 - `InvitationAcceptancePanel`: controlled invitation-code UI for a related
   individual member; the host refreshes the authorized-subject list after its
   BFF accepts the invitation.
+- `ExistingProfessionalProfilePanel`: existing employees scan or upload a
+  signed professional-credential QR, or use the explicit DID/URN plus sector
+  fallback. The host verifies the evidence before DCR; this screen never
+  accepts an employee invitation.
 - `SubjectAccessRequestPanel`: controlled provider-enabled QR, numeric-code,
   `did:web`, microchip, tattoo, email or telephone locator. Resolution and
   returned identifier evidence never grant subject access.

package/dist/BrowserRealtimeCallClient.d.ts

@@ -0,0 +1,80 @@
+export type RealtimeCallMedia = 'audio' | 'video';
+export type RealtimeCallSignal = Readonly<{
+    sequence: number;
+    type: 'offer' | 'answer' | 'ice-candidate';
+    payload: string;
+}>;
+export type BrowserRealtimeCallSession = Readonly<{
+    callId: string;
+    localStream: MediaStream;
+    remoteStream: MediaStream;
+    end(): Promise<void>;
+}>;
+export type BrowserRealtimeCallTransport<Conversation> = Readonly<{
+    getIceServers(conversation: Conversation): Promise<readonly RTCIceServer[]>;
+    startCall(input: Readonly<{
+        conversation: Conversation;
+        media: readonly RealtimeCallMedia[];
+    }>): Promise<Readonly<{
+        callId: string;
+    }>>;
+    postSignal(input: Readonly<{
+        conversation: Conversation;
+        callId: string;
+        signal: RealtimeCallSignal;
+    }>): Promise<void>;
+    listSignals(input: Readonly<{
+        conversation: Conversation;
+        callId: string;
+        afterSequence: number;
+    }>): Promise<readonly RealtimeCallSignal[]>;
+    endCall(input: Readonly<{
+        conversation: Conversation;
+        callId: string;
+    }>): Promise<void>;
+}>;
+export type BrowserRealtimeCallDependencies<Conversation> = Readonly<{
+    transport: BrowserRealtimeCallTransport<Conversation>;
+    getUserMedia?: (constraints: MediaStreamConstraints) => Promise<MediaStream>;
+    createPeerConnection?: (configuration: RTCConfiguration) => RTCPeerConnection;
+    createMediaStream?: () => MediaStream;
+    schedulePoll?: (callback: () => void, delayMs: number) => unknown;
+}>;
+/**
+ * Product-neutral WebRTC browser engine. Product BFF adapters own call
+ * authorization, ICE issuance and opaque signaling persistence; this engine
+ * never receives a private destination or sends media through the BFF.
+ */
+export declare function createBrowserRealtimeCallClient<Conversation>(dependencies: BrowserRealtimeCallDependencies<Conversation>): {
+    start(input: Readonly<{
+        conversation: Conversation;
+        media: readonly RealtimeCallMedia[];
+    }>): Promise<Readonly<{
+        callId: string;
+        localStream: MediaStream;
+        remoteStream: MediaStream;
+        end(): Promise<void>;
+    }>>;
+    accept(input: Readonly<{
+        conversation: Conversation;
+        callId: string;
+        media: readonly RealtimeCallMedia[];
+    }>): Promise<Readonly<{
+        callId: string;
+        localStream: MediaStream;
+        remoteStream: MediaStream;
+        end(): Promise<void>;
+    }>>;
+    join(input: Readonly<{
+        conversation: Conversation;
+        callId: string;
+        media: readonly RealtimeCallMedia[];
+        initiator: boolean;
+    }>): Promise<Readonly<{
+        callId: string;
+        localStream: MediaStream;
+        remoteStream: MediaStream;
+        end(): Promise<void>;
+    }>>;
+};
+//# sourceMappingURL=BrowserRealtimeCallClient.d.ts.map

package/dist/BrowserRealtimeCallClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserRealtimeCallClient.d.ts","sourceRoot":"","sources":["../src/BrowserRealtimeCallClient.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,CAAA;AACjD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,eAAe,CAAA;IAC1C,OAAO,EAAE,MAAM,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,WAAW,CAAA;IACxB,YAAY,EAAE,WAAW,CAAA;IACzB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACrB,CAAC,CAAA;AAEF,MAAM,MAAM,4BAA4B,CAAC,YAAY,IAAI,QAAQ,CAAC;IAChE,aAAa,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAA;IAC3E,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAA;IACtI,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtH,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAA;IAC3I,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxF,CAAC,CAAA;AAEF,MAAM,MAAM,+BAA+B,CAAC,YAAY,IAAI,QAAQ,CAAC;IACnE,SAAS,EAAE,4BAA4B,CAAC,YAAY,CAAC,CAAA;IACrD,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAC5E,oBAAoB,CAAC,EAAE,CAAC,aAAa,EAAE,gBAAgB,KAAK,iBAAiB,CAAA;IAC7E,iBAAiB,CAAC,EAAE,MAAM,WAAW,CAAA;IACrC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;CAClE,CAAC,CAAA;AAEF;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,YAAY,EAAE,+BAA+B,CAAC,YAAY,CAAC;iBA+ElG,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;KAAE,CAAC;gBA1G1F,MAAM;qBACD,WAAW;sBACV,WAAW;eAClB,OAAO,CAAC,IAAI,CAAC;;kBA2GJ,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;KAAE,CAAC;gBA9GrG,MAAM;qBACD,WAAW;sBACV,WAAW;eAClB,OAAO,CAAC,IAAI,CAAC;;gBA8GN,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;gBAjHvH,MAAM;qBACD,WAAW;sBACV,WAAW;eAClB,OAAO,CAAC,IAAI,CAAC;;EAkHrB"}

package/dist/BrowserRealtimeCallClient.js

@@ -0,0 +1,104 @@
+/**
+ * Product-neutral WebRTC browser engine. Product BFF adapters own call
+ * authorization, ICE issuance and opaque signaling persistence; this engine
+ * never receives a private destination or sends media through the BFF.
+ */
+export function createBrowserRealtimeCallClient(dependencies) {
+    const getUserMedia = dependencies.getUserMedia ?? (constraints => navigator.mediaDevices.getUserMedia(constraints));
+    const createPeerConnection = dependencies.createPeerConnection ?? (configuration => new RTCPeerConnection(configuration));
+    const createMediaStream = dependencies.createMediaStream ?? (() => new MediaStream());
+    const schedulePoll = dependencies.schedulePoll ?? ((callback, delayMs) => globalThis.setTimeout(callback, delayMs));
+    async function connect(input) {
+        const iceServers = await dependencies.transport.getIceServers(input.conversation);
+        const peer = createPeerConnection({ iceServers: [...iceServers] });
+        const localStream = await getUserMedia({ audio: input.media.includes('audio'), video: input.media.includes('video') });
+        const remoteStream = createMediaStream();
+        for (const track of localStream.getTracks())
+            peer.addTrack(track, localStream);
+        let nextSequence = 1;
+        let lastReadSequence = 0;
+        let ended = false;
+        peer.ontrack = event => {
+            for (const track of event.streams[0]?.getTracks() ?? [event.track])
+                remoteStream.addTrack(track);
+        };
+        peer.onicecandidate = event => {
+            if (!event.candidate || ended)
+                return;
+            void dependencies.transport.postSignal({
+                conversation: input.conversation,
+                callId: input.callId,
+                signal: { sequence: nextSequence++, type: 'ice-candidate', payload: JSON.stringify(event.candidate.toJSON()) },
+            });
+        };
+        async function applySignals() {
+            const signals = await dependencies.transport.listSignals({
+                conversation: input.conversation, callId: input.callId, afterSequence: lastReadSequence,
+            });
+            for (const signal of signals) {
+                lastReadSequence = Math.max(lastReadSequence, signal.sequence);
+                nextSequence = Math.max(nextSequence, signal.sequence + 1);
+                if (signal.type === 'ice-candidate')
+                    await peer.addIceCandidate(JSON.parse(signal.payload));
+                else if (signal.type === 'offer' && !input.initiator) {
+                    await peer.setRemoteDescription(JSON.parse(signal.payload));
+                    const answer = await peer.createAnswer();
+                    await peer.setLocalDescription(answer);
+                    await dependencies.transport.postSignal({
+                        conversation: input.conversation, callId: input.callId,
+                        signal: { sequence: nextSequence++, type: 'answer', payload: JSON.stringify(answer) },
+                    });
+                }
+                else if (signal.type === 'answer' && input.initiator) {
+                    await peer.setRemoteDescription(JSON.parse(signal.payload));
+                }
+            }
+        }
+        if (input.initiator) {
+            const offer = await peer.createOffer();
+            await peer.setLocalDescription(offer);
+            await dependencies.transport.postSignal({
+                conversation: input.conversation, callId: input.callId,
+                signal: { sequence: nextSequence++, type: 'offer', payload: JSON.stringify(offer) },
+            });
+        }
+        else
+            await applySignals();
+        const poll = async () => {
+            if (ended)
+                return;
+            try {
+                await applySignals();
+            }
+            finally {
+                if (!ended)
+                    schedulePoll(() => void poll(), 750);
+            }
+        };
+        schedulePoll(() => void poll(), 250);
+        return {
+            callId: input.callId,
+            localStream,
+            remoteStream,
+            async end() {
+                ended = true;
+                for (const track of localStream.getTracks())
+                    track.stop();
+                peer.close();
+                await dependencies.transport.endCall({ conversation: input.conversation, callId: input.callId });
+            },
+        };
+    }
+    return {
+        async start(input) {
+            const { callId } = await dependencies.transport.startCall(input);
+            return connect({ ...input, callId, initiator: true });
+        },
+        accept(input) {
+            return connect({ ...input, initiator: false });
+        },
+        join(input) {
+            return connect(input);
+        },
+    };
+}

package/dist/BrowserRealtimeCallPanel.d.ts

@@ -0,0 +1,32 @@
+import type { BrowserRealtimeCallSession, RealtimeCallMedia } from './BrowserRealtimeCallClient.js';
+export type BrowserRealtimeCallPanelClient<Conversation> = Readonly<{
+    start(input: Readonly<{
+        conversation: Conversation;
+        media: readonly RealtimeCallMedia[];
+    }>): Promise<BrowserRealtimeCallSession>;
+    accept(input: Readonly<{
+        conversation: Conversation;
+        callId: string;
+        media: readonly RealtimeCallMedia[];
+    }>): Promise<BrowserRealtimeCallSession>;
+}>;
+export type BrowserRealtimeCallPanelLabels = Readonly<{
+    title: string;
+    start: string;
+    accept: string;
+    end: string;
+    connecting?: string;
+    connected?: string;
+    ended?: string;
+    failed?: string;
+}>;
+/** Product-neutral, two-sided browser call screen; authority remains in the supplied BFF client. */
+export declare function BrowserRealtimeCallPanel<Conversation>({ conversation, client, incomingCallId, labels, media, onFailure, }: Readonly<{
+    conversation: Conversation;
+    client: BrowserRealtimeCallPanelClient<Conversation>;
+    incomingCallId?: string;
+    labels: BrowserRealtimeCallPanelLabels;
+    media?: readonly RealtimeCallMedia[];
+    onFailure?: (error: unknown) => void;
+}>): import("react").JSX.Element;
+//# sourceMappingURL=BrowserRealtimeCallPanel.d.ts.map

package/dist/BrowserRealtimeCallPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserRealtimeCallPanel.d.ts","sourceRoot":"","sources":["../src/BrowserRealtimeCallPanel.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAEnG,MAAM,MAAM,8BAA8B,CAAC,YAAY,IAAI,QAAQ,CAAC;IAClE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAChI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;CAClJ,CAAC,CAAA;AAEF,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAC,CAAA;AAEF,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,EACrD,YAAY,EACZ,MAAM,EACN,cAAc,EACd,MAAM,EACN,KAA0B,EAC1B,SAAS,GACV,EAAE,QAAQ,CAAC;IACV,YAAY,EAAE,YAAY,CAAA;IAC1B,MAAM,EAAE,8BAA8B,CAAC,YAAY,CAAC,CAAA;IACpD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,8BAA8B,CAAA;IACtC,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACpC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CACrC,CAAC,+BAiDD"}

package/dist/BrowserRealtimeCallPanel.js

@@ -0,0 +1,42 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from 'react';
+/** Product-neutral, two-sided browser call screen; authority remains in the supplied BFF client. */
+export function BrowserRealtimeCallPanel({ conversation, client, incomingCallId, labels, media = ['audio', 'video'], onFailure, }) {
+    const [session, setSession] = useState();
+    const [status, setStatus] = useState('idle');
+    const localVideo = useRef(null);
+    const remoteVideo = useRef(null);
+    const activeSession = useRef(undefined);
+    useEffect(() => {
+        activeSession.current = session;
+        if (localVideo.current)
+            localVideo.current.srcObject = session?.localStream ?? null;
+        if (remoteVideo.current)
+            remoteVideo.current.srcObject = session?.remoteStream ?? null;
+    }, [session]);
+    useEffect(() => () => {
+        if (activeSession.current)
+            void activeSession.current.end().catch(() => undefined);
+    }, []);
+    async function open() {
+        setStatus('connecting');
+        try {
+            setSession(incomingCallId
+                ? await client.accept({ conversation, callId: incomingCallId, media })
+                : await client.start({ conversation, media }));
+            setStatus('connected');
+        }
+        catch (error) {
+            onFailure?.(error);
+            setStatus('failed');
+        }
+    }
+    async function end() {
+        const active = session;
+        setSession(undefined);
+        setStatus('ended');
+        await active?.end();
+    }
+    return _jsxs("section", { className: "uhcp-realtime-call-panel", "aria-label": labels.title, children: [_jsx("h3", { children: labels.title }), !session ? _jsx("button", { type: "button", onClick: () => void open(), disabled: status === 'connecting', children: incomingCallId ? labels.accept : labels.start }) : null, _jsx("p", { role: "status", children: labels[status] || status }), session ? _jsxs("div", { className: "uhcp-realtime-call-media", children: [_jsx("video", { ref: localVideo, "data-testid": "realtime-call-local-video", autoPlay: true, muted: true, playsInline: true }), _jsx("video", { ref: remoteVideo, "data-testid": "realtime-call-remote-video", autoPlay: true, playsInline: true }), _jsx("button", { type: "button", onClick: () => void end(), children: labels.end })] }) : null] });
+}

package/dist/ExistingProfessionalProfilePanel.d.ts

@@ -0,0 +1,63 @@
+export type ExistingProfessionalProfileCopy = Readonly<{
+    eyebrow?: string;
+    title: string;
+    description: string;
+    credentialMethodLabel: string;
+    manualMethodLabel: string;
+    scanProfessionalCredential: string;
+    uploadProfessionalCredentialQr: string;
+    professionalCredentialReady: string;
+    professionalCredentialRequired: string;
+    closeCamera: string;
+    cameraActive: string;
+    credentialQrUnreadable: string;
+    professionalIdentifierLabel: string;
+    sectorLabel: string;
+    pinLabel: string;
+    pinConfirmationLabel: string;
+    pinMismatch: string;
+    submit: string;
+    submitting: string;
+}>;
+export type ExistingProfessionalProfileInput = Readonly<{
+    method: 'credential';
+    professionalCredential: string;
+    pin: string;
+}> | Readonly<{
+    method: 'identifier';
+    professionalIdentifier: string;
+    sector: string;
+    pin: string;
+}>;
+export type ExistingProfessionalProfileRequest = Readonly<{
+    professionalCredential: string;
+    pin: string;
+}> | Readonly<{
+    professionalIdentifier: string;
+    sectorHint: string;
+    pin: string;
+}>;
+/** Shared BFF serialization keeps professional evidence distinct from an invitation code. */
+export declare function toExistingProfessionalProfileRequest(input: ExistingProfessionalProfileInput): ExistingProfessionalProfileRequest;
+export type ExistingProfessionalSectorOption = Readonly<{
+    value: string;
+    label: string;
+}>;
+export type ExistingProfessionalProfilePanelProps = Readonly<{
+    copy: ExistingProfessionalProfileCopy;
+    sectors: readonly ExistingProfessionalSectorOption[];
+    busy: boolean;
+    error?: string;
+    onScanProfessionalCredential?: () => Promise<string | undefined>;
+    onReadProfessionalCredentialImage?: (file: File) => Promise<string | undefined>;
+    onSubmit: (input: ExistingProfessionalProfileInput) => void | Promise<void>;
+}>;
+/**
+ * Registers this portal device for an already-active professional profile.
+ * Professional evidence, employee invitations and device registration are
+ * separate artifacts. This screen accepts no invitation. A signed credential
+ * is the preferred path; a single DID-or-URN field plus sector is the explicit
+ * manual fallback and never becomes browser-selected authority by itself.
+ */
+export declare function ExistingProfessionalProfilePanel({ copy, sectors, busy, error, onScanProfessionalCredential, onReadProfessionalCredentialImage, onSubmit }: ExistingProfessionalProfilePanelProps): import("react").JSX.Element;
+//# sourceMappingURL=ExistingProfessionalProfilePanel.d.ts.map

package/dist/ExistingProfessionalProfilePanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExistingProfessionalProfilePanel.d.ts","sourceRoot":"","sources":["../src/ExistingProfessionalProfilePanel.tsx"],"names":[],"mappings":"AAWA,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,iBAAiB,EAAE,MAAM,CAAA;IACzB,0BAA0B,EAAE,MAAM,CAAA;IAClC,8BAA8B,EAAE,MAAM,CAAA;IACtC,2BAA2B,EAAE,MAAM,CAAA;IACnC,8BAA8B,EAAE,MAAM,CAAA;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,2BAA2B,EAAE,MAAM,CAAA;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,CAAC,CAAA;AAEF,MAAM,MAAM,gCAAgC,GACxC,QAAQ,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/E,QAAQ,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAEnG,MAAM,MAAM,kCAAkC,GAC1C,QAAQ,CAAC;IAAE,sBAAsB,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,GACzD,QAAQ,CAAC;IAAE,sBAAsB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAEjF,6FAA6F;AAC7F,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,gCAAgC,GAAG,kCAAkC,CAIhI;AAED,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAEzF,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAC3D,IAAI,EAAE,+BAA+B,CAAA;IACrC,OAAO,EAAE,SAAS,gCAAgC,EAAE,CAAA;IACpD,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4BAA4B,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAChE,iCAAiC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/E,QAAQ,EAAE,CAAC,KAAK,EAAE,gCAAgC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5E,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,QAAQ,EAAE,EAAE,qCAAqC,+BAuIhM"}

package/dist/ExistingProfessionalProfilePanel.js

@@ -0,0 +1,132 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from 'react';
+import jsQrModule from 'jsqr';
+const decodeQrImage = jsQrModule;
+/** Shared BFF serialization keeps professional evidence distinct from an invitation code. */
+export function toExistingProfessionalProfileRequest(input) {
+    return input.method === 'credential'
+        ? Object.freeze({ professionalCredential: input.professionalCredential, pin: input.pin })
+        : Object.freeze({ professionalIdentifier: input.professionalIdentifier, sectorHint: input.sector, pin: input.pin });
+}
+/**
+ * Registers this portal device for an already-active professional profile.
+ * Professional evidence, employee invitations and device registration are
+ * separate artifacts. This screen accepts no invitation. A signed credential
+ * is the preferred path; a single DID-or-URN field plus sector is the explicit
+ * manual fallback and never becomes browser-selected authority by itself.
+ */
+export function ExistingProfessionalProfilePanel({ copy, sectors, busy, error, onScanProfessionalCredential, onReadProfessionalCredentialImage, onSubmit }) {
+    const [method, setMethod] = useState('credential');
+    const [professionalCredential, setProfessionalCredential] = useState('');
+    const [professionalIdentifier, setProfessionalIdentifier] = useState('');
+    const [sector, setSector] = useState(sectors[0]?.value || '');
+    const [pin, setPin] = useState('');
+    const [pinConfirmation, setPinConfirmation] = useState('');
+    const [localError, setLocalError] = useState('');
+    const [cameraActive, setCameraActive] = useState(false);
+    const videoRef = useRef(null);
+    const canvasRef = useRef(null);
+    const streamRef = useRef(null);
+    const timerRef = useRef(null);
+    const scanResolverRef = useRef(null);
+    function stopCamera(value) {
+        if (timerRef.current)
+            window.clearInterval(timerRef.current);
+        timerRef.current = null;
+        streamRef.current?.getTracks().forEach(track => track.stop());
+        streamRef.current = null;
+        if (videoRef.current)
+            videoRef.current.srcObject = null;
+        setCameraActive(false);
+        scanResolverRef.current?.(value);
+        scanResolverRef.current = null;
+    }
+    useEffect(() => () => stopCamera(), []);
+    async function scanWithCamera() {
+        if (onScanProfessionalCredential)
+            return onScanProfessionalCredential();
+        const stream = await navigator.mediaDevices.getUserMedia({ video: { facingMode: { ideal: 'environment' } }, audio: false });
+        streamRef.current = stream;
+        if (!videoRef.current) {
+            stream.getTracks().forEach(track => track.stop());
+            return undefined;
+        }
+        videoRef.current.srcObject = stream;
+        await videoRef.current.play();
+        setCameraActive(true);
+        return new Promise(resolve => {
+            scanResolverRef.current = resolve;
+            const Detector = window.BarcodeDetector;
+            timerRef.current = window.setInterval(() => {
+                const video = videoRef.current;
+                if (!video)
+                    return;
+                const accept = (value) => { if (value)
+                    stopCamera(value); };
+                if (Detector) {
+                    void new Detector({ formats: ['qr_code'] }).detect(video).then(([barcode]) => accept(barcode?.rawValue)).catch(() => undefined);
+                    return;
+                }
+                const canvas = canvasRef.current;
+                if (!canvas || !video.videoWidth || !video.videoHeight)
+                    return;
+                canvas.width = video.videoWidth;
+                canvas.height = video.videoHeight;
+                const context = canvas.getContext('2d', { willReadFrequently: true });
+                if (!context)
+                    return;
+                context.drawImage(video, 0, 0, canvas.width, canvas.height);
+                accept(decodeQrImage(context.getImageData(0, 0, canvas.width, canvas.height).data, canvas.width, canvas.height)?.data);
+            }, 400);
+        });
+    }
+    async function readCredentialImage(file) {
+        if (onReadProfessionalCredentialImage)
+            return onReadProfessionalCredentialImage(file);
+        const bitmap = await createImageBitmap(file);
+        const canvas = canvasRef.current;
+        if (!canvas)
+            return undefined;
+        canvas.width = bitmap.width;
+        canvas.height = bitmap.height;
+        const context = canvas.getContext('2d', { willReadFrequently: true });
+        if (!context)
+            return undefined;
+        context.drawImage(bitmap, 0, 0);
+        return decodeQrImage(context.getImageData(0, 0, canvas.width, canvas.height).data, canvas.width, canvas.height)?.data;
+    }
+    async function captureCredential(read) {
+        setLocalError('');
+        const credential = String(await read() || '').trim();
+        if (!credential) {
+            setLocalError(copy.professionalCredentialRequired);
+            return;
+        }
+        setProfessionalCredential(credential);
+    }
+    function submit(event) {
+        event.preventDefault();
+        if (pin !== pinConfirmation) {
+            setLocalError(copy.pinMismatch);
+            return;
+        }
+        setLocalError('');
+        if (method === 'credential') {
+            if (!professionalCredential) {
+                setLocalError(copy.professionalCredentialRequired);
+                return;
+            }
+            void onSubmit({ method, professionalCredential: professionalCredential.trim(), pin });
+            return;
+        }
+        void onSubmit({ method, professionalIdentifier: professionalIdentifier.trim(), sector, pin });
+    }
+    return _jsx("section", { className: "uhcp-professional-activation", "aria-labelledby": "uhcp-existing-professional-title", children: _jsxs("form", { onSubmit: submit, children: [_jsxs("header", { children: [copy.eyebrow ? _jsx("p", { className: "uhcp-eyebrow", children: copy.eyebrow }) : null, _jsx("h1", { id: "uhcp-existing-professional-title", children: copy.title }), _jsx("p", { children: copy.description })] }), _jsxs("fieldset", { children: [_jsxs("label", { children: [_jsx("input", { type: "radio", name: "professionalEvidenceMethod", value: "credential", checked: method === 'credential', onChange: () => setMethod('credential') }), copy.credentialMethodLabel] }), _jsxs("label", { children: [_jsx("input", { type: "radio", name: "professionalEvidenceMethod", value: "identifier", checked: method === 'identifier', onChange: () => setMethod('identifier') }), copy.manualMethodLabel] })] }), method === 'credential'
+                    ? _jsxs("div", { className: "uhcp-professional-credential-capture", children: [_jsx("button", { type: "button", disabled: busy, onClick: () => void captureCredential(scanWithCamera).catch(() => setLocalError(copy.professionalCredentialRequired)), children: copy.scanProfessionalCredential }), _jsxs("label", { children: [_jsx("span", { children: copy.uploadProfessionalCredentialQr }), _jsx("input", { name: "professionalCredentialQrImage", type: "file", accept: "image/png,image/jpeg,image/webp", disabled: busy, onChange: event => {
+                                            const file = event.currentTarget.files?.[0];
+                                            if (file)
+                                                void captureCredential(() => readCredentialImage(file)).catch(() => setLocalError(copy.credentialQrUnreadable));
+                                        } })] }), cameraActive ? _jsxs(_Fragment, { children: [_jsx("video", { ref: videoRef, playsInline: true, muted: true, "aria-label": copy.cameraActive }), _jsx("p", { role: "status", children: copy.cameraActive }), _jsx("button", { type: "button", onClick: () => stopCamera(), children: copy.closeCamera })] }) : _jsx("video", { ref: videoRef, hidden: true, playsInline: true, muted: true }), _jsx("canvas", { ref: canvasRef, hidden: true, "aria-hidden": "true" }), professionalCredential ? _jsx("p", { role: "status", children: copy.professionalCredentialReady }) : null] })
+                    : _jsxs(_Fragment, { children: [_jsxs("label", { children: [_jsx("span", { children: copy.professionalIdentifierLabel }), _jsx("input", { name: "professionalIdentifier", value: professionalIdentifier, onChange: event => setProfessionalIdentifier(event.currentTarget.value), autoComplete: "off", required: true })] }), _jsxs("label", { children: [_jsx("span", { children: copy.sectorLabel }), _jsx("select", { name: "professionalSector", value: sector, onChange: event => setSector(event.currentTarget.value), required: true, children: sectors.map(option => _jsx("option", { value: option.value, children: option.label }, option.value)) })] })] }), _jsxs("label", { children: [_jsx("span", { children: copy.pinLabel }), _jsx("input", { name: "newPin", type: "password", inputMode: "numeric", minLength: 6, maxLength: 12, autoComplete: "new-password", value: pin, onChange: event => setPin(event.currentTarget.value), required: true })] }), _jsxs("label", { children: [_jsx("span", { children: copy.pinConfirmationLabel }), _jsx("input", { name: "confirmPin", type: "password", inputMode: "numeric", minLength: 6, maxLength: 12, autoComplete: "new-password", value: pinConfirmation, onChange: event => setPinConfirmation(event.currentTarget.value), required: true })] }), (localError || error) ? _jsx("p", { role: "alert", children: localError || error }) : null, _jsx("button", { type: "submit", disabled: busy, children: busy ? copy.submitting : copy.submit })] }) });
+}

package/dist/PortalHeader.d.ts

@@ -1,4 +1,4 @@
-import { type PortalBrand, type PortalAccountOption, type PortalLanguageOption, type PortalMenuAction, type PortalShellCopy } from './contracts.js';
+import { type PortalBrand, type PortalAccountOption, type PortalLanguageOption, type PortalMenuAction, type PortalShellCopy, type PortalUiTheme } from './contracts.js';
 import { type PortalCurrentSubjectRegistration } from './PortalCurrentSubject.js';
 export type PortalHeaderProps = Readonly<{
     brand: PortalBrand;
@@ -11,6 +11,7 @@ export type PortalHeaderProps = Readonly<{
     onSelectAccount?: (id: string) => void;
     menuActions?: readonly PortalMenuAction[];
     onSignOut?: () => void | Promise<void>;
+    onThemeChange?: (theme: PortalUiTheme) => void;
     storageNamespace?: string;
     currentSubject?: PortalCurrentSubjectRegistration;
 }>;
@@ -20,5 +21,5 @@ export type PortalHeaderProps = Readonly<{
  * Authentication is deliberately supplied as data and callbacks. The
  * component never imports Firebase and never treats browser state as a role.
  */
-export declare function PortalHeader({ brand, copy, accountIdentifier, languageHref, languageOptions, guestActionHref, accountOptions, onSelectAccount, menuActions, onSignOut, storageNamespace, currentSubject, }: PortalHeaderProps): import("react").JSX.Element;
+export declare function PortalHeader({ brand, copy, accountIdentifier, languageHref, languageOptions, guestActionHref, accountOptions, onSelectAccount, menuActions, onSignOut, onThemeChange, storageNamespace, currentSubject, }: PortalHeaderProps): import("react").JSX.Element;
 //# sourceMappingURL=PortalHeader.d.ts.map

package/dist/PortalHeader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PortalHeader.d.ts","sourceRoot":"","sources":["../src/PortalHeader.tsx"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAGrB,MAAM,gBAAgB,CAAA;AAOvB,OAAO,EAGL,KAAK,gCAAgC,EACtC,MAAM,2BAA2B,CAAA;AAElC,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,eAAe,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACjD,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAC/C,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IACtC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,cAAc,CAAC,EAAE,gCAAgC,CAAA;CAClD,CAAC,CAAA;AAEF;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,YAAY,EACZ,eAAoB,EACpB,eAAe,EACf,cAAmB,EACnB,eAAe,EACf,WAAgB,EAChB,SAAS,EACT,gBAA+B,EAC/B,cAAc,GACf,EAAE,iBAAiB,+BA6KnB"}
+{"version":3,"file":"PortalHeader.d.ts","sourceRoot":"","sources":["../src/PortalHeader.tsx"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAEpB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAA;AAOvB,OAAO,EAGL,KAAK,gCAAgC,EACtC,MAAM,2BAA2B,CAAA;AAElC,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,KAAK,EAAE,WAAW,CAAA;IAClB,IAAI,EAAE,eAAe,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACjD,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAC/C,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IACtC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,cAAc,CAAC,EAAE,gCAAgC,CAAA;CAClD,CAAC,CAAA;AAEF;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,YAAY,EACZ,eAAoB,EACpB,eAAe,EACf,cAAmB,EACnB,eAAe,EACf,WAAgB,EAChB,SAAS,EACT,aAAa,EACb,gBAA+B,EAC/B,cAAc,GACf,EAAE,iBAAiB,+BAgLnB"}

package/dist/PortalHeader.js

@@ -11,7 +11,7 @@ import { PortalCurrentSubjectControl, PortalCurrentSubjectSlot, } from './Portal
  * Authentication is deliberately supplied as data and callbacks. The
  * component never imports Firebase and never treats browser state as a role.
  */
-export function PortalHeader({ brand, copy, accountIdentifier, languageHref, languageOptions = [], guestActionHref, accountOptions = [], onSelectAccount, menuActions = [], onSignOut, storageNamespace = 'uhc-portal', currentSubject, }) {
+export function PortalHeader({ brand, copy, accountIdentifier, languageHref, languageOptions = [], guestActionHref, accountOptions = [], onSelectAccount, menuActions = [], onSignOut, onThemeChange, storageNamespace = 'uhc-portal', currentSubject, }) {
     const [open, setOpen] = useState(false);
     const [density, setDensity] = useState('medium');
     const [theme, setTheme] = useState('system');
@@ -32,6 +32,8 @@ export function PortalHeader({ brand, copy, accountIdentifier, languageHref, lan
         const apply = () => {
             const rendered = resolveRenderedPortalTheme(theme, media?.matches === true);
             document.documentElement.dataset.theme = rendered;
+            document.documentElement.classList.toggle('dark', rendered === 'dark');
+            document.documentElement.classList.toggle('light', rendered === 'light');
             document.documentElement.style.colorScheme = rendered;
         };
         apply();
@@ -62,6 +64,7 @@ export function PortalHeader({ brand, copy, accountIdentifier, languageHref, lan
     function changeTheme(value) {
         setTheme(value);
         localStorage.setItem(themeKey, value);
+        onThemeChange?.(value);
     }
     return (_jsxs("header", { className: "uhcp-header", style: brand.variables, children: [_jsxs("a", { className: "uhcp-brand", href: brand.homeHref, "aria-label": copy.home, children: [brand.mark ? (_jsx(PortalBrandArtwork, { artwork: brand.mark, className: "uhcp-brand-mark" })) : null, _jsxs("span", { children: [_jsx("strong", { children: brand.productName }), _jsx("small", { className: accountIdentifier ? 'uhcp-brand-account' : undefined, children: accountIdentifier || brand.organizationName })] })] }), currentSubject
                 ? _jsx(PortalCurrentSubjectControl, { ...currentSubject })

package/dist/ProfessionalProfileActivationPanel.d.ts

@@ -20,9 +20,10 @@ export type ProfessionalProfileActivationPanelProps = Readonly<{
     onSubmit: (input: ProfessionalProfileActivationInput) => void | Promise<void>;
 }>;
 /**
- * Brand-neutral first-device activation for an authorized employee.
- * The BFF resolves trusted routing and authority from one organization-issued
- * value; the browser never reconstructs a sector, organization, DID and URN.
+ * Legacy brand-neutral employee-invitation activation.
+ * `credential` is retained as an API-compatible field name, but its value is
+ * an invitation/activation code, never a reusable professional credential.
+ * Existing professionals use ExistingProfessionalProfilePanel instead.
  */
 export declare function ProfessionalProfileActivationPanel({ copy, busy, error, onSubmit }: ProfessionalProfileActivationPanelProps): import("react").JSX.Element;
 //# sourceMappingURL=ProfessionalProfileActivationPanel.d.ts.map

package/dist/ProfessionalProfileActivationPanel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProfessionalProfileActivationPanel.d.ts","sourceRoot":"","sources":["../src/ProfessionalProfileActivationPanel.tsx"],"names":[],"mappings":"AAIA,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,CAAC,CAAA;AAEF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;CACZ,CAAC,CAAA;AAEF,MAAM,MAAM,uCAAuC,GAAG,QAAQ,CAAC;IAC7D,IAAI,EAAE,iCAAiC,CAAA;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,kCAAkC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9E,CAAC,CAAA;AAEF;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,uCAAuC,+BA8B1H"}
+{"version":3,"file":"ProfessionalProfileActivationPanel.d.ts","sourceRoot":"","sources":["../src/ProfessionalProfileActivationPanel.tsx"],"names":[],"mappings":"AAIA,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,CAAC,CAAA;AAEF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;CACZ,CAAC,CAAA;AAEF,MAAM,MAAM,uCAAuC,GAAG,QAAQ,CAAC;IAC7D,IAAI,EAAE,iCAAiC,CAAA;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,CAAC,KAAK,EAAE,kCAAkC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9E,CAAC,CAAA;AAEF;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,uCAAuC,+BA8B1H"}

package/dist/ProfessionalProfileActivationPanel.js

@@ -2,9 +2,10 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState } from 'react';
 /**
- * Brand-neutral first-device activation for an authorized employee.
- * The BFF resolves trusted routing and authority from one organization-issued
- * value; the browser never reconstructs a sector, organization, DID and URN.
+ * Legacy brand-neutral employee-invitation activation.
+ * `credential` is retained as an API-compatible field name, but its value is
+ * an invitation/activation code, never a reusable professional credential.
+ * Existing professionals use ExistingProfessionalProfilePanel instead.
  */
 export function ProfessionalProfileActivationPanel({ copy, busy, error, onSubmit }) {
     const [credential, setCredential] = useState('');

package/dist/index.d.ts

@@ -56,5 +56,8 @@ export * from './CollapsiblePortalSection.js';
 export * from './ElapsedOperationStatus.js';
 export * from './ProfileRecoveryPanel.js';
 export * from './ProfessionalProfileActivationPanel.js';
+export * from './ExistingProfessionalProfilePanel.js';
+export * from './BrowserRealtimeCallClient.js';
+export * from './BrowserRealtimeCallPanel.js';
 export * from './passkey-policy.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,2BAA2B,CAAA;AACzC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wCAAwC,CAAA;AACtD,cAAc,0BAA0B,CAAA;AACxC,cAAc,uBAAuB,CAAA;AACrC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mCAAmC,CAAA;AACjD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,qCAAqC,CAAA;AACnD,cAAc,mCAAmC,CAAA;AACjD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,0BAA0B,CAAA;AACxC,cAAc,iCAAiC,CAAA;AAC/C,cAAc,2BAA2B,CAAA;AACzC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,wBAAwB,CAAA;AACtC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,0CAA0C,CAAA;AACxD,cAAc,kCAAkC,CAAA;AAChD,cAAc,0BAA0B,CAAA;AACxC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,oCAAoC,CAAA;AAClD,cAAc,sCAAsC,CAAA;AACpD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yBAAyB,CAAA;AACvC,cAAc,uCAAuC,CAAA;AACrD,cAAc,uBAAuB,CAAA;AACrC,cAAc,iCAAiC,CAAA;AAC/C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,2BAA2B,CAAA;AACzC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,uBAAuB,CAAA;AACrC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kBAAkB,CAAA;AAChC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yCAAyC,CAAA;AACvD,cAAc,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,2BAA2B,CAAA;AACzC,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wCAAwC,CAAA;AACtD,cAAc,0BAA0B,CAAA;AACxC,cAAc,uBAAuB,CAAA;AACrC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mCAAmC,CAAA;AACjD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,qCAAqC,CAAA;AACnD,cAAc,mCAAmC,CAAA;AACjD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,0BAA0B,CAAA;AACxC,cAAc,iCAAiC,CAAA;AAC/C,cAAc,2BAA2B,CAAA;AACzC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,wBAAwB,CAAA;AACtC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,0CAA0C,CAAA;AACxD,cAAc,kCAAkC,CAAA;AAChD,cAAc,0BAA0B,CAAA;AACxC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,oCAAoC,CAAA;AAClD,cAAc,sCAAsC,CAAA;AACpD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,iCAAiC,CAAA;AAC/C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yBAAyB,CAAA;AACvC,cAAc,uCAAuC,CAAA;AACrD,cAAc,uBAAuB,CAAA;AACrC,cAAc,iCAAiC,CAAA;AAC/C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,2BAA2B,CAAA;AACzC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,uBAAuB,CAAA;AACrC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kBAAkB,CAAA;AAChC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,2BAA2B,CAAA;AACzC,cAAc,yCAAyC,CAAA;AACvD,cAAc,uCAAuC,CAAA;AACrD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,qBAAqB,CAAA"}

package/dist/index.js

@@ -56,4 +56,7 @@ export * from './CollapsiblePortalSection.js';
 export * from './ElapsedOperationStatus.js';
 export * from './ProfileRecoveryPanel.js';
 export * from './ProfessionalProfileActivationPanel.js';
+export * from './ExistingProfessionalProfilePanel.js';
+export * from './BrowserRealtimeCallClient.js';
+export * from './BrowserRealtimeCallPanel.js';
 export * from './passkey-policy.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uhc-portal-components-react",
-  "version": "0.2.27",
+  "version": "0.2.29",
   "description": "Brand-neutral React portal screens, account preferences and protected-profile UI.",
   "license": "Apache-2.0",
   "type": "module",
@@ -33,6 +33,7 @@
   "dependencies": {
     "fhir-data-utils-ts": "0.6.21",
     "gdc-common-utils-ts": "2.9.30",
+    "jsqr": "1.4.0",
     "sos-data-utils-ts": "0.6.15",
     "terminology-components-react": "0.2.0"
   },