Show a notice when a field value was rejected

[masnwilliams]

summary

• require canonical managed-auth fields to declare reason: "missing" | "rejected"
• carry the reason through the canonical-to-rendered field projection
• show a localized rejection notice only when reason === "rejected"
• retain legacy-only placeholder and hint text while canonical and legacy projections coexist
• expose fieldRejectedNotice and inputRejectedNotice customization points
• validate the vendored canonical field, choice, event, and submit types against @onkernel/sdk@0.93.0
• install the latest Kernel SDK in the backend quick start

This removes the temporary public replace_existing shape entirely.

stack

• depends on feat: bind canonical managed-auth submissions #20
• requires kernel/kernel#3185 and kernel/kernel#3380 to deploy before publication

testing

• bun run test
• bun run typecheck
• bun run build
• bun run format:check
• cd packages/managed-auth-react && npm pack --dry-run
• linked the top-of-stack package into managed-auth-hosted-ui
• hosted UI: bun run test, bun run typecheck, bun run lint, bun run build, bun run format:check

---

Note

Medium Risk
Touches managed-auth protocol types and the login form’s field projection. Behavior is additive UI plus a required reason on canonical fields, not auth/session security logic.

Overview
Canonical managed-auth fields now require reason: "missing" | "rejected". When a field is rejected, the form shows a localized notice so users know to enter a new value.

fieldsFromCanonical carries reason into the rendered field and still pulls placeholder/hint from coexisting legacy discovered_fields. Customization is via fieldRejectedNotice and the inputRejectedNotice appearance slot (danger-colored).

Vendored protocol types are checked against @onkernel/sdk@0.93.0, and the README install line includes the SDK.

^{Reviewed by Cursor Bugbot for commit bd66c28. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
managed-auth-react-demo	Ready	Preview	Aug 20, 2026 8:27pm