- acLogin/signup: await initAuth0() (which waits up to 10s for the async SDK) instead of bailing with 'still loading' when window.auth0 isn't ready yet. A full-page redirect needs no popup gesture, so awaiting is safe. - Pass appState.returnTo (current /$code path) through the Auth0 roundtrip and window.location.replace() back to it in handleRedirectCallback, so logging in from /$code lands back on that piece instead of the app root. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>