feat(mosaic): wire enterprise accounts

[austincalvelage]

Description

Wire Mosaic's enterprise accounts section to Clerk so users can see linked accounts and connect eligible organization SSO connections. Connect calls the resource API directly and displays failures through the existing error UI. Session reverification UI is deferred. Add the profile-panel slot, section styles, and a Swingset live page at /live/enterprise-accounts.

Staging verification exposed an existing backend issue: SAML linking silently fails when the IdP email matches the user's already-verified primary email. The callback attempts to finalize that email's verification again and rejects it as already existing. Linking with a different email succeeds. That backend fix is outside this PR.

Checklist

• pnpm test runs as expected.
• pnpm build runs as expected.
• (If applicable) JSDoc comments have been added or updated for any package exports
• (If applicable) Documentation has been updated

Type of change

• 🐛 Bug fix
• 🌟 New feature
• 🔨 Breaking change
• 📖 Refactoring / dependency upgrade / documentation
• other:

[changeset-bot]

🦋 Changeset detected

Latest commit: be39204

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Oct 2, 2026 8:13pm UTC
swingset	Ready	Preview	Oct 2, 2026 8:13pm UTC

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Team

Run ID: 241a50a4-cbab-4fb5-b005-1e4fa705beb3

📥 Commits

Reviewing files that changed from the base of the PR and between 58c24d4 and 6dd278a.

📒 Files selected for processing (6)

• packages/mosaic/src/__tests__/feature/fake-fapi.ts
• packages/mosaic/src/__tests__/feature/fapi.ts
• packages/mosaic/src/features/user-profile/__tests__/user-profile-enterprise-accounts.feature.test.tsx
• packages/mosaic/src/features/user-profile/__tests__/user-profile-profile-panel.view.test.tsx
• packages/mosaic/src/features/user-profile/user-profile-profile-panel.view.tsx
• packages/swingset/src/app/(clerk)/live-sidebar.tsx

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• clerk/clerk_go (manual)
• clerk/dashboard (manual)
• clerk/accounts (manual)
• clerk/backoffice (manual)
• clerk/clerk (manual)
• clerk/clerk-docs (manual)
• clerk/cloudflare-workers (manual)
• clerk/cli (auto-detected)
• clerk/clerk-ios (auto-detected)
• clerk/clerk-android (auto-detected)

Included review availability: This review used your included allowance. 6 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 10 reviews per hour.

---

📝 Walkthrough

Walkthrough

Adds enterprise account projection and connection flows to the user-profile feature. The section displays active enterprise accounts and eligible unlinked connections, and supports creating an external account and navigating to its verification redirect. The change adds connection pending and error states, exposes a profile-panel slot, and adds a live enterprise accounts page and sidebar link. It also adds FAPI fixtures and tests for projection, connection behavior, and integration.

Priority: ➖ Normal

Estimated code review effort: 3 (Moderate) | ~25 minutes

Merge Risk: 🟡 Moderate · up to 6dd27

Users with linked OAuth enterprise accounts can still be offered those same connections. Correct linkage matching before merging, or explicitly accept this limitation.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 25 functions across 21 files.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely identifies the main change: wiring enterprise accounts into Mosaic.
Description check	✅ Passed	The description directly explains the enterprise accounts integration, API behavior, UI changes, live page, testing, and known backend limitation.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}