Guard consent until session initialization

[masnwilliams]

Summary

• keep the consent/prime layout visible while the handoff code and initial session state load
• show generic preparation copy plus a disabled Loading... action until connection metadata is ready
• restore domain-specific copy and the normal Continue action after initialization
• keep skipPrimeStep sessions on discovery UI throughout initialization
• reset stale session data when the session identity changes
• cover delayed, failed, and skip-prime initialization behavior

Why

The consent action could render before initialization completed. An immediate click had no JWT to use and was ignored. Keeping initialization within the consent layout fixes the race without adding another full-screen state or a discovery → consent → discovery sequence.

Validation

• bun test
• bun run typecheck
• bun run build
• bun run format:check
• npm pack --dry-run --workspace packages/managed-auth-react

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
managed-auth-react-demo	Ready	Preview	Aug 24, 2026 5:19pm

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 93e79fd. Configure here.}