From ab1c1129b2e014fb9353df9003b1765bdded3d73 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 10:07:38 +0900
Subject: [PATCH 1/3] fix(frontend): remember OIDC return URL and drop
 unreachable AdminPanel render

main's login screen builds returnUrl via raw string concatenation
instead of returnUrlFromLocation()/rememberOidcReturnUrl(), leaving
both imports unused (TS6192) and rendering an AdminPanel with
accessToken: string | undefined on the unauthenticated branch
(TS2322) -- pnpm run build fails on main's current tip. This is the
same bug pattern fixed independently across several feature branches
this session; landing it on main directly stops every branch built
from main's tip from inheriting the broken build.
---
 frontend/src/App.test.tsx | 1 +
 frontend/src/App.tsx      | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/frontend/src/App.test.tsx b/frontend/src/App.test.tsx
index 7462abd2c..e17af8ae3 100644
--- a/frontend/src/App.test.tsx
+++ b/frontend/src/App.test.tsx
@@ -41,6 +41,7 @@ describe("App, unauthenticated", () => {
         state: expect.objectContaining({ returnUrl: expect.stringMatching(/^\//) }),
       }),
     );
+    expect(window.sessionStorage.getItem("lineageweave.oidc.returnUrl")).toMatch(/^\//);
   });
 });
 
diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx
index 6fba0dd41..1b5b351ab 100644
--- a/frontend/src/App.tsx
+++ b/frontend/src/App.tsx
@@ -4610,7 +4610,8 @@ export default function App({ showLabPanels = false }: { showLabPanels?: boolean
             </div>
             <div className="login-controls">
               <button className="btn-primary" onClick={() => {
-                const returnUrl = window.location.pathname + window.location.search;
+                const returnUrl = returnUrlFromLocation();
+                rememberOidcReturnUrl(returnUrl);
                 void auth.signinRedirect({ state: { returnUrl } });
               }}>
                 {t("Log in")}
@@ -4620,7 +4621,6 @@ export default function App({ showLabPanels = false }: { showLabPanels?: boolean
               <small>Enterprise SSO Authentication</small>
             </div>
           </div>
-          {destination === "admin" ? <AdminPanel currentBrandName={brandName} onBrandNameChange={setBrandName} accessToken={accessToken} /> : null}
       </main>
         <footer className="app-footer" role="contentinfo">
           <div className="app-footer-title">

From 2a889fcab6502cda5081f24335ad7c5726584be0 Mon Sep 17 00:00:00 2001
From: seonghobae <seonghobae@users.noreply.github.com>
Date: Mon, 24 Aug 2026 16:22:23 +0900
Subject: [PATCH 2/3] chore: re-trigger required checks after central strix
 fallback fix

Central .github main landed 0c6b9a64 (openai-direct fallback prefix
mapping + OpenAI fallback key routing), so NVIDIA NIM 429s now degrade
to a working terminal OpenAI fallback instead of failing every PR's
required strix check. Re-run to pick up the fixed org workflow.

From 522ebf060dbd3ed71c8a8dd058e591ddb444ab3f Mon Sep 17 00:00:00 2001
From: seonghobae <seonghobae@users.noreply.github.com>
Date: Mon, 24 Aug 2026 16:55:34 +0900
Subject: [PATCH 3/3] chore: nudge PR head sync after ref update