@atzentis/auth-react 0.0.14 → 0.0.15

package/dist/index.js

@@ -1,8 +1,8 @@
 import { AuthClient, AuthError, AuthErrorCode } from '@atzentis/auth-sdk';
-import { createContext, useState, useCallback, useMemo, useContext, useEffect } from 'react';
+import { createContext, useState, useCallback, useMemo, useContext, useEffect, useRef } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
-import { DropdownMenu, DropdownMenuTrigger, Button, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, Card, DropdownMenuLabel } from '@atzentis/ui-shadcn';
-import { FormSelect, FormInput, OTPInput, FormPasswordInput } from '@atzentis/ui-shared';
+import { DropdownMenu, DropdownMenuTrigger, Button, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, Card, CardHeader, CardTitle, CardDescription, CardContent, DropdownMenuLabel } from '@atzentis/ui-shadcn';
+import { OTPInput, FormInput, FormSelect, FormPasswordInput } from '@atzentis/ui-shared';
 import { zodResolver } from '@hookform/resolvers/zod';
 import { useForm } from 'react-hook-form';
 import { z } from 'zod';
@@ -280,10 +280,54 @@ var authLocalization = {
   RESET_PASSWORD_ACTION: "Save new password",
   /** @default "Password reset successfully" */
   RESET_PASSWORD_SUCCESS: "Password reset successfully",
+  /** @default "Confirm new password" */
+  CONFIRM_NEW_PASSWORD: "Confirm new password",
   /** @default "Set Password" */
   SET_PASSWORD: "Set Password",
   /** @default "Click the button to receive an email to set your password" */
   SET_PASSWORD_DESCRIPTION: "Click the button to receive an email to set your password",
+  // --- Forgot Password (P11) ---
+  /** @default "Check your email" */
+  CHECK_YOUR_EMAIL: "Check your email",
+  /** @default "Resend in {{seconds}}s" */
+  RESEND_IN: "Resend in {{seconds}}s",
+  // --- Email Verification (P11) ---
+  /** @default "Email Verification" */
+  EMAIL_VERIFICATION: "Email Verification",
+  /** @default "Verify your email address" */
+  EMAIL_VERIFICATION_DESCRIPTION: "Verify your email address",
+  /** @default "Email verified successfully" */
+  EMAIL_VERIFICATION_SUCCESS: "Email verified successfully",
+  /** @default "Verifying your email..." */
+  EMAIL_VERIFICATION_CHECKING: "Verifying your email...",
+  /** @default "Resend verification email" */
+  RESEND_VERIFICATION_EMAIL: "Resend verification email",
+  /** @default "Verification email sent" */
+  VERIFICATION_EMAIL_SENT: "Verification email sent",
+  // --- Email OTP (P11) ---
+  /** @default "Email Code Verification" */
+  EMAIL_OTP: "Email Code Verification",
+  /** @default "Enter your email to receive a verification code" */
+  EMAIL_OTP_DESCRIPTION: "Enter your email to receive a verification code",
+  /** @default "We sent a code to" */
+  EMAIL_OTP_SENT: "We sent a code to",
+  /** @default "Enter the 6-digit code" */
+  ENTER_VERIFICATION_CODE: "Enter the 6-digit code",
+  // --- Account Recovery ---
+  /** @default "Recover Account" */
+  RECOVER_ACCOUNT: "Recover Account",
+  /** @default "Recover access to your account" */
+  RECOVER_ACCOUNT_DESCRIPTION: "Recover access to your account",
+  /** @default "Select recovery method" */
+  SELECT_RECOVERY_METHOD: "Select recovery method",
+  /** @default "Reset via email link" */
+  RESET_VIA_EMAIL: "Reset via email link",
+  /** @default "Verify with email code" */
+  VERIFY_WITH_CODE: "Verify with email code",
+  /** @default "Verify via phone" */
+  VERIFY_VIA_PHONE: "Verify via phone",
+  /** @default "Step {{current}} of {{total}}" */
+  STEP_OF: "Step {{current}} of {{total}}",
   // --- Devices & Sessions ---
   /** @default "Current Session" */
   CURRENT_SESSION: "Current Session",
@@ -414,6 +458,15 @@ var authLocalization = {
   BACKUP_CODES: "Backup Codes",
   /** @default "Save these codes in a secure place" */
   BACKUP_CODES_DESCRIPTION: "Save these codes in a secure place",
+  // --- Two-Factor (P11) ---
+  /** @default "Enter your 6-digit code" */
+  ENTER_TOTP_CODE: "Enter your 6-digit code",
+  /** @default "Use backup code" */
+  USE_BACKUP_CODE: "Use backup code",
+  /** @default "Use authenticator" */
+  USE_AUTHENTICATOR: "Use authenticator",
+  /** @default "Enter backup code" */
+  BACKUP_CODE_PLACEHOLDER: "Enter backup code",
   // --- Validation ---
   /** @default "Passwords do not match" */
   PASSWORDS_DO_NOT_MATCH: "Passwords do not match",
@@ -610,25 +663,55 @@ function useAuth() {
     }
     return {};
   }, [client]);
+  const requestPasswordReset = useCallback(
+    async (request) => {
+      await client.requestPasswordReset(request);
+    },
+    [client]
+  );
+  const resetPassword = useCallback(
+    async (request) => {
+      return client.resetPassword(request);
+    },
+    [client]
+  );
+  const sendVerificationEmail = useCallback(
+    async (request) => {
+      await client.sendVerificationEmail(request);
+    },
+    [client]
+  );
+  const verifyEmail = useCallback(
+    async (request) => {
+      const response = await client.verifyEmail(request);
+      setUser(response.user);
+      return response;
+    },
+    [client, setUser]
+  );
   return {
     user,
     isAuthenticated,
     isLoading,
     error,
+    clearError,
+    getAccessToken,
+    getAuthHeader,
+    getOAuthUrl,
+    isUsernameAvailable,
     login,
     loginWithUsername,
-    signup,
     logout,
     logoutAllDevices,
-    getOAuthUrl,
-    verifyOAuthCode,
+    refreshToken,
+    requestPasswordReset,
+    resetPassword,
     sendMagicLink,
+    sendVerificationEmail,
+    signup,
+    verifyEmail,
     verifyMagicLink,
-    isUsernameAvailable,
-    getAccessToken,
-    refreshToken,
-    getAuthHeader,
-    clearError
+    verifyOAuthCode
   };
 }
 function useAuthLocalization() {
@@ -1213,264 +1296,494 @@ function SessionGuard({
   }
   return className ? /* @__PURE__ */ jsx("div", { className, children }) : /* @__PURE__ */ jsx(Fragment, { children });
 }
-var DEFAULT_DEVICE_ICONS = {
-  mobile: "\u{1F4F1}",
-  desktop: "\u{1F4BB}",
-  tablet: "\u{1F4DF}"
+
+// src/components/auth/auth-view-paths.ts
+var authViewPaths = {
+  "/sign-in": "/sign-in",
+  "/sign-up": "/sign-up",
+  "/forgot-password": "/forgot-password",
+  "/reset-password": "/reset-password",
+  "/verify-email": "/verify-email",
+  "/email-otp": "/email-otp",
+  "/recover-account": "/recover-account",
+  "/two-factor": "/two-factor"
 };
-function DeviceList({
-  showTrustToggle = false,
-  showRemoveAction = false,
-  onDeviceTrusted,
-  onDeviceUntrusted,
-  onDeviceRemoved,
-  renderDeviceIcon,
+function toAuthError(error) {
+  if (error instanceof AuthError) return error;
+  const message = error instanceof Error ? error.message : String(error);
+  return new AuthError({
+    code: AuthErrorCode.NetworkError,
+    message,
+    statusCode: 0
+  });
+}
+var emailOtpEmailSchema = z.object({
+  email: z.string().min(1).email()
+});
+var emailOtpCodeSchema = z.object({
+  code: z.string().length(6).regex(/^\d{6}$/)
+});
+function SubmitButton({ loading, loadingLabel, actionLabel, className }) {
+  return /* @__PURE__ */ jsx(Button, { type: "submit", disabled: loading, className: className ?? "w-full", children: loading ? loadingLabel : actionLabel });
+}
+
+// src/components/shared/utils.ts
+function isEmail(value) {
+  return value.includes("@");
+}
+function maskEmail(email) {
+  const [local, domain] = email.split("@");
+  if (!local || !domain) return email;
+  const masked = local.length <= 1 ? local : `${local[0]}${"*".repeat(Math.min(local.length - 1, 3))}`;
+  return `${masked}@${domain}`;
+}
+function EmailOTPForm({
+  redirectUrl,
+  onSuccess,
+  onError,
+  resendCooldown = 60,
+  autoSubmit = true,
   className
 }) {
-  const { devices, isLoading, error, refresh, trustDevice, untrustDevice, removeDevice } = useDevices();
-  const { localization } = useAuthLocalization();
+  const { sendVerificationEmail, verifyEmail } = useAuth();
+  const { localization, localizeErrors } = useAuthLocalization();
+  const [step, setStep] = useState(1);
+  const [email, setEmail] = useState("");
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const [formError, setFormError] = useState(null);
+  const [cooldownRemaining, setCooldownRemaining] = useState(0);
+  const codeRef = useRef("");
+  const {
+    register,
+    handleSubmit,
+    formState: { errors }
+  } = useForm({
+    resolver: zodResolver(emailOtpEmailSchema),
+    defaultValues: { email: "" }
+  });
   useEffect(() => {
-    refresh();
-  }, [refresh]);
-  const handleTrustToggle = useCallback(
-    async (device) => {
-      if (device.isTrusted) {
-        await untrustDevice(device.id);
-        onDeviceUntrusted?.(device);
-      } else {
-        await trustDevice(device.id);
-        onDeviceTrusted?.(device);
+    if (cooldownRemaining <= 0) return;
+    const timer = setInterval(() => {
+      setCooldownRemaining((prev) => Math.max(0, prev - 1));
+    }, 1e3);
+    return () => clearInterval(timer);
+  }, [cooldownRemaining]);
+  const onEmailSubmit = useCallback(
+    async (data) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        await sendVerificationEmail({ email: data.email, redirectUrl });
+        setEmail(data.email);
+        setStep(2);
+        setCooldownRemaining(resendCooldown);
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
       }
     },
-    [trustDevice, untrustDevice, onDeviceTrusted, onDeviceUntrusted]
+    [sendVerificationEmail, redirectUrl, resendCooldown, onError, localization, localizeErrors]
   );
-  const handleRemove = useCallback(
-    async (device) => {
-      await removeDevice(device.id);
-      onDeviceRemoved?.(device);
+  const handleVerifyCode = useCallback(
+    async (code) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        const response = await verifyEmail({ token: code });
+        onSuccess?.(response.user);
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
     },
-    [removeDevice, onDeviceRemoved]
+    [verifyEmail, onSuccess, onError, localization, localizeErrors]
   );
-  if (isLoading && devices.length === 0) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.LOADING_DEVICES }) });
-  }
-  if (error) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-red-600", children: error.message }) });
-  }
-  if (devices.length === 0) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.NO_DEVICES }) });
-  }
-  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 space-y-4", children: devices.map((device) => /* @__PURE__ */ jsxs(
-    "div",
-    {
-      className: "flex items-start justify-between gap-4 rounded border p-4",
-      children: [
-        /* @__PURE__ */ jsxs("div", { className: "flex items-start gap-3", children: [
-          /* @__PURE__ */ jsx("span", { className: "text-2xl", children: renderDeviceIcon ? renderDeviceIcon(device) : DEFAULT_DEVICE_ICONS[device.deviceType] ?? "\u{1F4BB}" }),
-          /* @__PURE__ */ jsxs("div", { children: [
-            /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
-              /* @__PURE__ */ jsx("span", { className: "font-medium", children: device.name }),
-              device.isCurrent && /* @__PURE__ */ jsx("span", { className: "rounded bg-blue-100 px-2 py-0.5 text-xs text-blue-700", children: localization.CURRENT_DEVICE })
-            ] }),
-            /* @__PURE__ */ jsxs("p", { className: "text-sm text-gray-500", children: [
-              device.browser,
-              " \xB7 ",
-              device.os
-            ] }),
-            (device.lastCity || device.lastCountry) && /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: [device.lastCity, device.lastCountry].filter(Boolean).join(", ") }),
-            /* @__PURE__ */ jsxs("p", { className: "text-xs text-gray-400", children: [
-              localization.LAST_USED,
-              " ",
-              device.lastUsedAt,
-              " \xB7 ",
-              localization.IP_LABEL,
-              " ",
-              device.lastIp
-            ] })
-          ] })
+  const handleOtpComplete = useCallback(
+    (code) => {
+      codeRef.current = code;
+      if (autoSubmit) {
+        handleVerifyCode(code);
+      }
+    },
+    [autoSubmit, handleVerifyCode]
+  );
+  const handleManualVerify = useCallback(
+    (e) => {
+      e.preventDefault();
+      if (codeRef.current) {
+        handleVerifyCode(codeRef.current);
+      }
+    },
+    [handleVerifyCode]
+  );
+  const handleResend = useCallback(async () => {
+    setFormError(null);
+    setIsSubmitting(true);
+    try {
+      await sendVerificationEmail({ email, redirectUrl });
+      setCooldownRemaining(resendCooldown);
+    } catch (err) {
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+    } finally {
+      setIsSubmitting(false);
+    }
+  }, [sendVerificationEmail, email, redirectUrl, resendCooldown, localization, localizeErrors]);
+  const handleGoBack = useCallback(() => {
+    setStep(1);
+    setFormError(null);
+    codeRef.current = "";
+  }, []);
+  if (step === 2) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4", children: [
+      /* @__PURE__ */ jsxs("div", { className: "text-center space-y-2", children: [
+        /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: localization.EMAIL_OTP }),
+        /* @__PURE__ */ jsxs("p", { className: "text-sm", children: [
+          localization.EMAIL_OTP_SENT,
+          " ",
+          /* @__PURE__ */ jsx("strong", { children: maskEmail(email) })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxs("form", { onSubmit: handleManualVerify, className: "space-y-4", children: [
+        /* @__PURE__ */ jsxs("label", { className: "block text-sm font-medium", children: [
+          localization.ENTER_VERIFICATION_CODE,
+          /* @__PURE__ */ jsx(
+            OTPInput,
+            {
+              length: 6,
+              onComplete: handleOtpComplete,
+              disabled: isSubmitting,
+              className: "mt-2"
+            }
+          )
         ] }),
-        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
-          showTrustToggle && /* @__PURE__ */ jsx(
+        formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+        /* @__PURE__ */ jsx(
+          SubmitButton,
+          {
+            loading: isSubmitting,
+            loadingLabel: localization.VERIFYING,
+            actionLabel: localization.VERIFY
+          }
+        ),
+        /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+          /* @__PURE__ */ jsx(
             Button,
             {
               type: "button",
               variant: "outline",
-              size: "sm",
-              onClick: () => handleTrustToggle(device),
-              children: device.isTrusted ? localization.UNTRUST_DEVICE : localization.TRUST_DEVICE
+              disabled: isSubmitting || cooldownRemaining > 0,
+              onClick: handleResend,
+              className: "w-full",
+              children: cooldownRemaining > 0 ? localization.RESEND_IN.replace("{{seconds}}", String(cooldownRemaining)) : isSubmitting ? localization.RESENDING : localization.RESEND
             }
           ),
-          showRemoveAction && /* @__PURE__ */ jsx(
-            Button,
-            {
-              type: "button",
-              variant: "destructive",
-              size: "sm",
-              disabled: device.isCurrent,
-              onClick: () => handleRemove(device),
-              children: localization.REMOVE
-            }
-          )
+          /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
         ] })
-      ]
-    },
-    device.id
-  )) }) });
+      ] })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4", children: [
+    /* @__PURE__ */ jsxs("div", { className: "text-center space-y-2", children: [
+      /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: localization.EMAIL_OTP }),
+      /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: localization.EMAIL_OTP_DESCRIPTION })
+    ] }),
+    /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onEmailSubmit), className: "space-y-4", children: [
+      /* @__PURE__ */ jsx(
+        FormInput,
+        {
+          label: localization.EMAIL,
+          id: "email-otp-email",
+          type: "email",
+          autoComplete: "email",
+          error: errors.email?.message,
+          disabled: isSubmitting,
+          ...register("email")
+        }
+      ),
+      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+      /* @__PURE__ */ jsx(
+        SubmitButton,
+        {
+          loading: isSubmitting,
+          loadingLabel: localization.SENDING,
+          actionLabel: localization.SEND_VERIFICATION_CODE
+        }
+      )
+    ] })
+  ] }) });
 }
-function LoadingBoundary({
-  children,
-  spinner = /* @__PURE__ */ jsx("div", { children: "Loading..." }),
-  delay = 0,
+function EmailVerificationForm({
+  token,
+  email,
+  redirectUrl,
+  onSuccess,
+  onError,
+  resendCooldown = 60,
   className
 }) {
-  const { isLoading } = useSession();
-  const [showSpinner, setShowSpinner] = useState(delay === 0 && isLoading);
+  const { sendVerificationEmail, verifyEmail } = useAuth();
+  const { localization, localizeErrors } = useAuthLocalization();
+  const [status, setStatus] = useState(
+    token ? "verifying" : "resend"
+  );
+  const [formError, setFormError] = useState(null);
+  const [cooldownRemaining, setCooldownRemaining] = useState(0);
+  const [isResending, setIsResending] = useState(false);
   useEffect(() => {
-    if (!isLoading) {
-      setShowSpinner(false);
-      return;
-    }
-    if (delay === 0) {
-      setShowSpinner(true);
-      return;
+    if (!token) return;
+    setStatus("verifying");
+    verifyEmail({ token }).then((response) => {
+      setStatus("success");
+      onSuccess?.(response.user);
+    }).catch((err) => {
+      setStatus("error");
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+      onError?.(toAuthError(err));
+    });
+  }, []);
+  useEffect(() => {
+    if (cooldownRemaining <= 0) return;
+    const timer = setInterval(() => {
+      setCooldownRemaining((prev) => {
+        if (prev <= 1) {
+          clearInterval(timer);
+          return 0;
+        }
+        return prev - 1;
+      });
+    }, 1e3);
+    return () => clearInterval(timer);
+  }, [cooldownRemaining]);
+  const handleResend = useCallback(async () => {
+    if (!email) return;
+    setFormError(null);
+    setIsResending(true);
+    try {
+      await sendVerificationEmail({ email, redirectUrl });
+      setCooldownRemaining(resendCooldown);
+    } catch (err) {
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+      onError?.(toAuthError(err));
+    } finally {
+      setIsResending(false);
     }
-    const timer = setTimeout(() => {
-      setShowSpinner(true);
-    }, delay);
-    return () => clearTimeout(timer);
-  }, [isLoading, delay]);
-  if (isLoading && showSpinner) {
-    return className ? /* @__PURE__ */ jsx("div", { className, children: spinner }) : /* @__PURE__ */ jsx(Fragment, { children: spinner });
+  }, [
+    email,
+    redirectUrl,
+    resendCooldown,
+    sendVerificationEmail,
+    localization,
+    localizeErrors,
+    onError
+  ]);
+  if (status === "verifying") {
+    return /* @__PURE__ */ jsxs(Card, { className, children: [
+      /* @__PURE__ */ jsxs(CardHeader, { children: [
+        /* @__PURE__ */ jsx(CardTitle, { children: localization.EMAIL_VERIFICATION }),
+        /* @__PURE__ */ jsx(CardDescription, { children: localization.EMAIL_VERIFICATION_DESCRIPTION })
+      ] }),
+      /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center py-8", "aria-live": "polite", children: /* @__PURE__ */ jsxs("div", { className: "flex items-center space-x-3", children: [
+        /* @__PURE__ */ jsx("div", { className: "h-5 w-5 animate-spin rounded-full border-2 border-gray-300 border-t-gray-900" }),
+        /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-600", children: localization.EMAIL_VERIFICATION_CHECKING })
+      ] }) }) })
+    ] });
   }
-  if (isLoading) {
-    return null;
+  if (status === "success") {
+    return /* @__PURE__ */ jsxs(Card, { className, children: [
+      /* @__PURE__ */ jsxs(CardHeader, { children: [
+        /* @__PURE__ */ jsx(CardTitle, { children: localization.EMAIL_VERIFICATION }),
+        /* @__PURE__ */ jsx(CardDescription, { children: localization.EMAIL_VERIFICATION_DESCRIPTION })
+      ] }),
+      /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs(
+        "div",
+        {
+          className: "flex flex-col items-center justify-center py-8 space-y-4",
+          "aria-live": "polite",
+          children: [
+            /* @__PURE__ */ jsx("div", { className: "rounded-full bg-green-100 p-3", children: /* @__PURE__ */ jsx(
+              "svg",
+              {
+                className: "h-8 w-8 text-green-600",
+                fill: "none",
+                stroke: "currentColor",
+                viewBox: "0 0 24 24",
+                "aria-hidden": "true",
+                children: /* @__PURE__ */ jsx(
+                  "path",
+                  {
+                    strokeLinecap: "round",
+                    strokeLinejoin: "round",
+                    strokeWidth: 2,
+                    d: "M5 13l4 4L19 7"
+                  }
+                )
+              }
+            ) }),
+            /* @__PURE__ */ jsx("p", { className: "text-sm font-medium text-green-600", children: localization.EMAIL_VERIFICATION_SUCCESS })
+          ]
+        }
+      ) })
+    ] });
   }
-  return /* @__PURE__ */ jsx(Fragment, { children });
-}
-function SubmitButton({ loading, loadingLabel, actionLabel, className }) {
-  return /* @__PURE__ */ jsx(Button, { type: "submit", disabled: loading, className: className ?? "w-full", children: loading ? loadingLabel : actionLabel });
-}
-
-// src/helpers/risk-utils.ts
-function getRiskLevel(score) {
-  if (score < 30) return "low";
-  if (score < 60) return "medium";
-  return "high";
+  return /* @__PURE__ */ jsxs(Card, { className, children: [
+    /* @__PURE__ */ jsxs(CardHeader, { children: [
+      /* @__PURE__ */ jsx(CardTitle, { children: localization.EMAIL_VERIFICATION }),
+      /* @__PURE__ */ jsx(CardDescription, { children: localization.EMAIL_VERIFICATION_DESCRIPTION })
+    ] }),
+    /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+      email && /* @__PURE__ */ jsxs("div", { className: "text-sm text-gray-600", children: [
+        localization.CHECK_YOUR_EMAIL,
+        ": ",
+        /* @__PURE__ */ jsx("strong", { children: maskEmail(email) })
+      ] }),
+      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          type: "button",
+          variant: "outline",
+          disabled: isResending || cooldownRemaining > 0,
+          onClick: handleResend,
+          className: "w-full",
+          children: isResending ? localization.RESENDING : cooldownRemaining > 0 ? localization.RESEND_IN.replace("{{seconds}}", cooldownRemaining.toString()) : localization.RESEND_VERIFICATION_EMAIL
+        }
+      )
+    ] }) })
+  ] });
 }
-var RISK_COLORS = {
-  low: "text-green-600 bg-green-50",
-  medium: "text-yellow-600 bg-yellow-50",
-  high: "text-red-600 bg-red-50"
-};
-function LoginActivityFeed({
-  limit = 20,
-  showRiskBadge = false,
-  showReportActions = false,
-  filterByStatus,
-  onSuspiciousReported,
+var forgotPasswordSchema = z.object({
+  email: z.string().min(1).email()
+});
+function ForgotPasswordForm({
+  redirectUrl,
+  onSuccess,
+  onError,
+  onBackToLogin,
+  resendCooldown = 60,
   className
 }) {
+  const { requestPasswordReset } = useAuth();
+  const { localization, localizeErrors } = useAuthLocalization();
+  const [sent, setSent] = useState(false);
+  const [sentEmail, setSentEmail] = useState("");
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const [formError, setFormError] = useState(null);
+  const [cooldownRemaining, setCooldownRemaining] = useState(0);
   const {
-    events,
-    hasMore,
-    isLoading,
-    error,
-    refresh,
-    loadMore,
-    filter,
-    markRecognized,
-    reportSuspicious
-  } = useLoginActivity({ limit });
-  const { localization } = useAuthLocalization();
+    register,
+    handleSubmit,
+    formState: { errors },
+    getValues
+  } = useForm({
+    resolver: zodResolver(forgotPasswordSchema),
+    defaultValues: { email: "" }
+  });
   useEffect(() => {
-    if (filterByStatus) {
-      filter({ status: filterByStatus, limit });
-    }
-    refresh();
-  }, [refresh, filter, filterByStatus, limit]);
-  const handleMarkRecognized = useCallback(
-    async (event) => {
-      await markRecognized(event.id);
-    },
-    [markRecognized]
-  );
-  const handleReportSuspicious = useCallback(
-    async (event) => {
-      await reportSuspicious(event.id);
-      onSuspiciousReported?.(event);
+    if (cooldownRemaining <= 0) return;
+    const timer = setInterval(() => {
+      setCooldownRemaining((prev) => Math.max(0, prev - 1));
+    }, 1e3);
+    return () => clearInterval(timer);
+  }, [cooldownRemaining]);
+  const onSubmit = useCallback(
+    async (data) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        await requestPasswordReset({ email: data.email, redirectUrl });
+        setSent(true);
+        setSentEmail(data.email);
+        setCooldownRemaining(resendCooldown);
+        onSuccess?.();
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
     },
-    [reportSuspicious, onSuspiciousReported]
+    [
+      requestPasswordReset,
+      redirectUrl,
+      resendCooldown,
+      onSuccess,
+      onError,
+      localization,
+      localizeErrors
+    ]
   );
-  if (isLoading && events.length === 0) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.LOADING_ACTIVITY }) });
-  }
-  if (error) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-red-600", children: error.message }) });
-  }
-  if (events.length === 0) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.NO_ACTIVITY }) });
+  const handleResend = useCallback(async () => {
+    const email = getValues("email");
+    setFormError(null);
+    setIsSubmitting(true);
+    try {
+      await requestPasswordReset({ email, redirectUrl });
+      setCooldownRemaining(resendCooldown);
+    } catch (err) {
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+    } finally {
+      setIsSubmitting(false);
+    }
+  }, [requestPasswordReset, redirectUrl, resendCooldown, getValues, localization, localizeErrors]);
+  if (sent) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4", children: [
+      /* @__PURE__ */ jsxs("div", { className: "text-center space-y-2", children: [
+        /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: localization.CHECK_YOUR_EMAIL }),
+        /* @__PURE__ */ jsx("p", { className: "text-sm", children: localization.FORGOT_PASSWORD_EMAIL }),
+        /* @__PURE__ */ jsx("p", { className: "text-sm font-medium", children: maskEmail(sentEmail) })
+      ] }),
+      /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+        /* @__PURE__ */ jsx(
+          Button,
+          {
+            type: "button",
+            variant: "outline",
+            disabled: isSubmitting || cooldownRemaining > 0,
+            onClick: handleResend,
+            className: "w-full",
+            children: cooldownRemaining > 0 ? localization.RESEND_IN.replace("{{seconds}}", String(cooldownRemaining)) : isSubmitting ? localization.RESENDING : localization.RESEND
+          }
+        ),
+        onBackToLogin && /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: onBackToLogin, className: "w-full", children: localization.GO_BACK })
+      ] }),
+      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600 text-center", children: formError })
+    ] }) });
   }
   return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4", children: [
-    events.map((event) => {
-      const riskLevel = getRiskLevel(event.riskScore);
-      return /* @__PURE__ */ jsxs(
-        "div",
+    /* @__PURE__ */ jsxs("div", { className: "text-center space-y-2", children: [
+      /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: localization.FORGOT_PASSWORD }),
+      /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: localization.FORGOT_PASSWORD_DESCRIPTION })
+    ] }),
+    /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onSubmit), className: "space-y-4", children: [
+      /* @__PURE__ */ jsx(
+        FormInput,
         {
-          className: "flex items-start justify-between gap-4 rounded border p-4",
-          children: [
-            /* @__PURE__ */ jsxs("div", { children: [
-              /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
-                /* @__PURE__ */ jsx("span", { className: "font-medium", children: event.deviceName }),
-                /* @__PURE__ */ jsx("span", { className: "rounded bg-gray-100 px-2 py-0.5 text-xs text-gray-600", children: event.status }),
-                showRiskBadge && /* @__PURE__ */ jsx("span", { className: `rounded px-2 py-0.5 text-xs ${RISK_COLORS[riskLevel]}`, children: riskLevel })
-              ] }),
-              /* @__PURE__ */ jsxs("p", { className: "text-sm text-gray-500", children: [
-                event.method,
-                " \xB7 ",
-                event.ip
-              ] }),
-              (event.city || event.country) && /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: [event.city, event.country].filter(Boolean).join(", ") }),
-              /* @__PURE__ */ jsx("p", { className: "text-xs text-gray-400", children: event.createdAt })
-            ] }),
-            showReportActions && /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
-              /* @__PURE__ */ jsx(
-                Button,
-                {
-                  type: "button",
-                  variant: "outline",
-                  size: "sm",
-                  onClick: () => handleMarkRecognized(event),
-                  children: localization.MARK_RECOGNIZED
-                }
-              ),
-              /* @__PURE__ */ jsx(
-                Button,
-                {
-                  type: "button",
-                  variant: "destructive",
-                  size: "sm",
-                  onClick: () => handleReportSuspicious(event),
-                  children: localization.REPORT_SUSPICIOUS
-                }
-              )
-            ] })
-          ]
-        },
-        event.id
-      );
-    }),
-    hasMore && /* @__PURE__ */ jsx("div", { className: "text-center", children: /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", disabled: isLoading, onClick: loadMore, children: isLoading ? localization.LOADING : localization.LOAD_MORE }) })
+          label: localization.EMAIL,
+          id: "forgot-password-email",
+          type: "email",
+          autoComplete: "email",
+          error: errors.email?.message,
+          disabled: isSubmitting,
+          ...register("email")
+        }
+      ),
+      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+      /* @__PURE__ */ jsx(
+        SubmitButton,
+        {
+          loading: isSubmitting,
+          loadingLabel: localization.SENDING,
+          actionLabel: localization.FORGOT_PASSWORD_ACTION
+        }
+      ),
+      onBackToLogin && /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: onBackToLogin, className: "w-full", children: localization.GO_BACK })
+    ] })
   ] }) });
 }
-function toAuthError(error) {
-  if (error instanceof AuthError) return error;
-  const message = error instanceof Error ? error.message : String(error);
-  return new AuthError({
-    code: AuthErrorCode.NetworkError,
-    message,
-    statusCode: 0
-  });
-}
 var credentialLoginSchema = z.object({
   identity: z.string().min(1, "Email or username is required"),
   password: z.string().min(1, "Password is required"),
@@ -1483,11 +1796,6 @@ var phoneLoginSchema = z.object({
 var otpVerifySchema = z.object({
   code: z.string().length(6, "Code must be 6 digits")
 });
-
-// src/components/shared/utils.ts
-function isEmail(value) {
-  return value.includes("@");
-}
 var PROVIDER_NAMES = {
   google: "Google",
   github: "GitHub",
@@ -1869,40 +2177,99 @@ function LoginForm({
     ] })
   ] }) });
 }
-var magicLinkSchema = z.object({
-  email: z.string().email("Invalid email address")
+var recoverEmailSchema = z.object({
+  email: z.string().min(1).email()
 });
-function maskEmail(email) {
-  const [local, domain] = email.split("@");
-  if (!local || !domain) return email;
-  const masked = local.length <= 2 ? `${local[0]}***` : `${local[0]}***${local[local.length - 1]}`;
-  return `${masked}@${domain}`;
-}
-function MagicLinkForm({ redirectUrl, onSuccess, onError, className }) {
-  const { sendMagicLink } = useAuth();
+var recoverCodeSchema = z.object({
+  code: z.string().length(6).regex(/^\d{6}$/)
+});
+var recoverNewPasswordSchema = z.object({
+  newPassword: z.string().min(8),
+  confirmPassword: z.string().min(1)
+}).refine((data) => data.newPassword === data.confirmPassword, {
+  message: "PASSWORDS_DO_NOT_MATCH",
+  path: ["confirmPassword"]
+});
+var recoverPhoneSchema = z.object({
+  phoneNumber: z.string().min(1)
+});
+function RecoverAccountForm({
+  redirectUrl,
+  enablePhone = false,
+  onSuccess,
+  onError,
+  resendCooldown = 60,
+  className
+}) {
+  const { requestPasswordReset, sendVerificationEmail, verifyEmail, resetPassword } = useAuth();
+  const { sendOTP, verify: verifyPhone } = usePhone();
   const { localization, localizeErrors } = useAuthLocalization();
-  const [sent, setSent] = useState(false);
-  const [sentEmail, setSentEmail] = useState("");
+  const [step, setStep] = useState(1);
+  const [email, setEmail] = useState("");
+  const [phoneNumber, setPhoneNumber] = useState("");
+  const [selectedMethod, setSelectedMethod] = useState(null);
+  const [verificationToken, setVerificationToken] = useState(null);
   const [isSubmitting, setIsSubmitting] = useState(false);
   const [formError, setFormError] = useState(null);
-  const {
-    register,
-    handleSubmit,
-    formState: { errors },
-    getValues
-  } = useForm({
-    resolver: zodResolver(magicLinkSchema),
+  const [cooldownRemaining, setCooldownRemaining] = useState(0);
+  const codeRef = useRef("");
+  const emailForm = useForm({
+    resolver: zodResolver(recoverEmailSchema),
     defaultValues: { email: "" }
   });
-  const onSubmit = useCallback(
-    async (data) => {
+  const phoneForm = useForm({
+    resolver: zodResolver(recoverPhoneSchema),
+    defaultValues: { phoneNumber: "" }
+  });
+  const passwordForm = useForm({
+    resolver: zodResolver(recoverNewPasswordSchema),
+    defaultValues: { newPassword: "", confirmPassword: "" }
+  });
+  useEffect(() => {
+    if (cooldownRemaining <= 0) return;
+    const timer = setInterval(() => {
+      setCooldownRemaining((prev) => Math.max(0, prev - 1));
+    }, 1e3);
+    return () => clearInterval(timer);
+  }, [cooldownRemaining]);
+  const getTotalSteps = useCallback(() => {
+    if (selectedMethod === "email_link") return 3;
+    return 4;
+  }, [selectedMethod]);
+  const handleGoBack = useCallback(() => {
+    if (step === 2) {
+      setStep(1);
+      setSelectedMethod(null);
+    } else if (step === 3) {
+      setStep(2);
+      codeRef.current = "";
+    } else if (step === 4) {
+      setStep(3);
+    }
+    setFormError(null);
+  }, [step]);
+  const onEmailSubmit = useCallback(async (data) => {
+    setFormError(null);
+    setEmail(data.email);
+    setStep(2);
+  }, []);
+  const handleMethodSelect = useCallback(
+    async (method) => {
       setFormError(null);
       setIsSubmitting(true);
+      setSelectedMethod(method);
       try {
-        await sendMagicLink({ email: data.email, redirectUrl });
-        setSent(true);
-        setSentEmail(data.email);
-        onSuccess?.();
+        if (method === "email_link") {
+          await requestPasswordReset({ email, redirectUrl });
+          setCooldownRemaining(resendCooldown);
+          setStep(3);
+        } else if (method === "email_code") {
+          await sendVerificationEmail({ email, redirectUrl });
+          setCooldownRemaining(resendCooldown);
+          setStep(3);
+        } else if (method === "phone_otp") {
+          setStep(3);
+        }
       } catch (err) {
         setFormError(getLocalizedError(err, localization, localizeErrors));
         onError?.(toAuthError(err));
@@ -1910,53 +2277,544 @@ function MagicLinkForm({ redirectUrl, onSuccess, onError, className }) {
         setIsSubmitting(false);
       }
     },
-    [sendMagicLink, redirectUrl, onSuccess, onError, localization, localizeErrors]
-  );
-  const handleResend = useCallback(async () => {
-    const email = getValues("email");
+    [
+      email,
+      redirectUrl,
+      resendCooldown,
+      requestPasswordReset,
+      sendVerificationEmail,
+      onError,
+      localization,
+      localizeErrors
+    ]
+  );
+  const handleResendEmailLink = useCallback(async () => {
     setFormError(null);
     setIsSubmitting(true);
     try {
-      await sendMagicLink({ email, redirectUrl });
+      await requestPasswordReset({ email, redirectUrl });
+      setCooldownRemaining(resendCooldown);
     } catch (err) {
       setFormError(getLocalizedError(err, localization, localizeErrors));
     } finally {
       setIsSubmitting(false);
     }
-  }, [sendMagicLink, redirectUrl, getValues, localization, localizeErrors]);
-  if (sent) {
-    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4 text-center", children: [
-      /* @__PURE__ */ jsxs("p", { className: "text-sm", children: [
-        localization.MAGIC_LINK_EMAIL,
-        " ",
-        /* @__PURE__ */ jsx("strong", { children: maskEmail(sentEmail) })
-      ] }),
-      /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: localization.MAGIC_LINK_HINT }),
-      /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", disabled: isSubmitting, onClick: handleResend, children: isSubmitting ? localization.RESENDING : localization.RESEND }),
-      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError })
-    ] }) });
-  }
-  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onSubmit), className: "p-6 space-y-4", children: [
-    /* @__PURE__ */ jsx(
-      FormInput,
-      {
-        label: localization.EMAIL,
-        id: "magic-link-email",
-        type: "email",
-        autoComplete: "email",
-        error: errors.email?.message,
-        ...register("email")
+  }, [email, redirectUrl, resendCooldown, requestPasswordReset, localization, localizeErrors]);
+  const handleResendEmailCode = useCallback(async () => {
+    setFormError(null);
+    setIsSubmitting(true);
+    try {
+      await sendVerificationEmail({ email, redirectUrl });
+      setCooldownRemaining(resendCooldown);
+    } catch (err) {
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+    } finally {
+      setIsSubmitting(false);
+    }
+  }, [email, redirectUrl, resendCooldown, sendVerificationEmail, localization, localizeErrors]);
+  const handleResendPhoneOTP = useCallback(async () => {
+    setFormError(null);
+    setIsSubmitting(true);
+    try {
+      await sendOTP(phoneNumber);
+      setCooldownRemaining(resendCooldown);
+    } catch (err) {
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+    } finally {
+      setIsSubmitting(false);
+    }
+  }, [phoneNumber, resendCooldown, sendOTP, localization, localizeErrors]);
+  const onPhoneSubmit = useCallback(
+    async (data) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        setPhoneNumber(data.phoneNumber);
+        await sendOTP(data.phoneNumber);
+        setCooldownRemaining(resendCooldown);
+        setFormError(null);
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
       }
-    ),
-    formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
-    /* @__PURE__ */ jsx(
-      SubmitButton,
-      {
-        loading: isSubmitting,
-        loadingLabel: localization.SENDING,
-        actionLabel: localization.MAGIC_LINK_ACTION
+    },
+    [sendOTP, resendCooldown, onError, localization, localizeErrors]
+  );
+  const handleVerifyEmailCode = useCallback(
+    async (code) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        await verifyEmail({ token: code });
+        setVerificationToken(code);
+        setStep(4);
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
       }
-    )
+    },
+    [verifyEmail, onError, localization, localizeErrors]
+  );
+  const handleVerifyPhoneCode = useCallback(
+    async (code) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        await verifyPhone(phoneNumber, code);
+        setVerificationToken(code);
+        setStep(4);
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
+    },
+    [verifyPhone, phoneNumber, onError, localization, localizeErrors]
+  );
+  const handleOtpComplete = useCallback(
+    (code) => {
+      codeRef.current = code;
+      if (selectedMethod === "email_code") {
+        handleVerifyEmailCode(code);
+      } else if (selectedMethod === "phone_otp") {
+        handleVerifyPhoneCode(code);
+      }
+    },
+    [selectedMethod, handleVerifyEmailCode, handleVerifyPhoneCode]
+  );
+  const handleManualVerify = useCallback(
+    (e) => {
+      e.preventDefault();
+      if (codeRef.current) {
+        if (selectedMethod === "email_code") {
+          handleVerifyEmailCode(codeRef.current);
+        } else if (selectedMethod === "phone_otp") {
+          handleVerifyPhoneCode(codeRef.current);
+        }
+      }
+    },
+    [selectedMethod, handleVerifyEmailCode, handleVerifyPhoneCode]
+  );
+  const onPasswordSubmit = useCallback(
+    async (data) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        const token = verificationToken ?? "";
+        await resetPassword({ token, newPassword: data.newPassword });
+        onSuccess?.();
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
+    },
+    [verificationToken, resetPassword, onSuccess, onError, localization, localizeErrors]
+  );
+  if (step === 1) {
+    return /* @__PURE__ */ jsxs(Card, { className, children: [
+      /* @__PURE__ */ jsxs(CardHeader, { children: [
+        /* @__PURE__ */ jsx(CardTitle, { children: localization.RECOVER_ACCOUNT }),
+        /* @__PURE__ */ jsx(CardDescription, { children: localization.RECOVER_ACCOUNT_DESCRIPTION })
+      ] }),
+      /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs("form", { onSubmit: emailForm.handleSubmit(onEmailSubmit), className: "space-y-4", children: [
+        /* @__PURE__ */ jsx(
+          FormInput,
+          {
+            label: localization.EMAIL,
+            id: "recover-email",
+            type: "email",
+            autoComplete: "email",
+            error: emailForm.formState.errors.email?.message,
+            disabled: isSubmitting,
+            ...emailForm.register("email")
+          }
+        ),
+        formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+        /* @__PURE__ */ jsx(
+          SubmitButton,
+          {
+            loading: isSubmitting,
+            loadingLabel: localization.LOADING,
+            actionLabel: localization.CONTINUE
+          }
+        )
+      ] }) })
+    ] });
+  }
+  if (step === 2) {
+    return /* @__PURE__ */ jsxs(Card, { className, children: [
+      /* @__PURE__ */ jsxs(CardHeader, { children: [
+        /* @__PURE__ */ jsx(CardTitle, { children: localization.SELECT_RECOVERY_METHOD }),
+        /* @__PURE__ */ jsx(CardDescription, { children: localization.STEP_OF.replace("{{current}}", "2").replace(
+          "{{total}}",
+          String(getTotalSteps())
+        ) })
+      ] }),
+      /* @__PURE__ */ jsxs(CardContent, { className: "space-y-4", children: [
+        /* @__PURE__ */ jsx(
+          "button",
+          {
+            type: "button",
+            onClick: () => handleMethodSelect("email_link"),
+            disabled: isSubmitting,
+            className: "w-full p-4 text-left border rounded-lg hover:bg-gray-50 disabled:opacity-50 disabled:cursor-not-allowed transition-colors",
+            children: /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
+              /* @__PURE__ */ jsx("div", { className: "font-medium", children: localization.RESET_VIA_EMAIL }),
+              /* @__PURE__ */ jsx("div", { className: "text-sm text-gray-500", children: localization.FORGOT_PASSWORD_EMAIL })
+            ] })
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "button",
+          {
+            type: "button",
+            onClick: () => handleMethodSelect("email_code"),
+            disabled: isSubmitting,
+            className: "w-full p-4 text-left border rounded-lg hover:bg-gray-50 disabled:opacity-50 disabled:cursor-not-allowed transition-colors",
+            children: /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
+              /* @__PURE__ */ jsx("div", { className: "font-medium", children: localization.VERIFY_WITH_CODE }),
+              /* @__PURE__ */ jsx("div", { className: "text-sm text-gray-500", children: localization.EMAIL_OTP_DESCRIPTION })
+            ] })
+          }
+        ),
+        enablePhone && /* @__PURE__ */ jsx(
+          "button",
+          {
+            type: "button",
+            onClick: () => handleMethodSelect("phone_otp"),
+            disabled: isSubmitting,
+            className: "w-full p-4 text-left border rounded-lg hover:bg-gray-50 disabled:opacity-50 disabled:cursor-not-allowed transition-colors",
+            children: /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
+              /* @__PURE__ */ jsx("div", { className: "font-medium", children: localization.VERIFY_VIA_PHONE }),
+              /* @__PURE__ */ jsx("div", { className: "text-sm text-gray-500", children: localization.SENDING_VERIFICATION_CODE })
+            ] })
+          }
+        ),
+        formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+        /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
+      ] })
+    ] });
+  }
+  if (step === 3) {
+    if (selectedMethod === "email_link") {
+      return /* @__PURE__ */ jsxs(Card, { className, children: [
+        /* @__PURE__ */ jsxs(CardHeader, { children: [
+          /* @__PURE__ */ jsx(CardTitle, { children: localization.CHECK_YOUR_EMAIL }),
+          /* @__PURE__ */ jsx(CardDescription, { children: localization.STEP_OF.replace("{{current}}", "3").replace(
+            "{{total}}",
+            String(getTotalSteps())
+          ) })
+        ] }),
+        /* @__PURE__ */ jsxs(CardContent, { className: "space-y-4", children: [
+          /* @__PURE__ */ jsxs("div", { className: "text-center space-y-2", children: [
+            /* @__PURE__ */ jsx("p", { className: "text-sm", children: localization.FORGOT_PASSWORD_EMAIL }),
+            /* @__PURE__ */ jsx("p", { className: "text-sm font-medium", children: maskEmail(email) })
+          ] }),
+          /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+            /* @__PURE__ */ jsx(
+              Button,
+              {
+                type: "button",
+                variant: "outline",
+                disabled: isSubmitting || cooldownRemaining > 0,
+                onClick: handleResendEmailLink,
+                className: "w-full",
+                children: cooldownRemaining > 0 ? localization.RESEND_IN.replace("{{seconds}}", String(cooldownRemaining)) : isSubmitting ? localization.RESENDING : localization.RESEND
+              }
+            ),
+            /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
+          ] }),
+          formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600 text-center", children: formError })
+        ] })
+      ] });
+    }
+    if (selectedMethod === "email_code") {
+      return /* @__PURE__ */ jsxs(Card, { className, children: [
+        /* @__PURE__ */ jsxs(CardHeader, { children: [
+          /* @__PURE__ */ jsx(CardTitle, { children: localization.EMAIL_OTP }),
+          /* @__PURE__ */ jsx(CardDescription, { children: localization.STEP_OF.replace("{{current}}", "3").replace(
+            "{{total}}",
+            String(getTotalSteps())
+          ) })
+        ] }),
+        /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+          /* @__PURE__ */ jsx("div", { className: "text-center space-y-2", children: /* @__PURE__ */ jsxs("p", { className: "text-sm", children: [
+            localization.EMAIL_OTP_SENT,
+            " ",
+            /* @__PURE__ */ jsx("strong", { children: maskEmail(email) })
+          ] }) }),
+          /* @__PURE__ */ jsxs("form", { onSubmit: handleManualVerify, className: "space-y-4", children: [
+            /* @__PURE__ */ jsxs("label", { className: "block text-sm font-medium", children: [
+              localization.ENTER_VERIFICATION_CODE,
+              /* @__PURE__ */ jsx(
+                OTPInput,
+                {
+                  length: 6,
+                  onComplete: handleOtpComplete,
+                  disabled: isSubmitting,
+                  className: "mt-2"
+                }
+              )
+            ] }),
+            formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+            /* @__PURE__ */ jsx(
+              SubmitButton,
+              {
+                loading: isSubmitting,
+                loadingLabel: localization.VERIFYING,
+                actionLabel: localization.VERIFY
+              }
+            ),
+            /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+              /* @__PURE__ */ jsx(
+                Button,
+                {
+                  type: "button",
+                  variant: "outline",
+                  disabled: isSubmitting || cooldownRemaining > 0,
+                  onClick: handleResendEmailCode,
+                  className: "w-full",
+                  children: cooldownRemaining > 0 ? localization.RESEND_IN.replace("{{seconds}}", String(cooldownRemaining)) : isSubmitting ? localization.RESENDING : localization.RESEND
+                }
+              ),
+              /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
+            ] })
+          ] })
+        ] }) })
+      ] });
+    }
+    if (selectedMethod === "phone_otp") {
+      if (!phoneNumber) {
+        return /* @__PURE__ */ jsxs(Card, { className, children: [
+          /* @__PURE__ */ jsxs(CardHeader, { children: [
+            /* @__PURE__ */ jsx(CardTitle, { children: localization.VERIFY_VIA_PHONE }),
+            /* @__PURE__ */ jsx(CardDescription, { children: localization.STEP_OF.replace("{{current}}", "3").replace(
+              "{{total}}",
+              String(getTotalSteps())
+            ) })
+          ] }),
+          /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs("form", { onSubmit: phoneForm.handleSubmit(onPhoneSubmit), className: "space-y-4", children: [
+            /* @__PURE__ */ jsx(
+              FormInput,
+              {
+                label: localization.PHONE_NUMBER_PLACEHOLDER,
+                id: "recover-phone",
+                type: "tel",
+                autoComplete: "tel",
+                error: phoneForm.formState.errors.phoneNumber?.message,
+                disabled: isSubmitting,
+                ...phoneForm.register("phoneNumber")
+              }
+            ),
+            formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+            /* @__PURE__ */ jsx(
+              SubmitButton,
+              {
+                loading: isSubmitting,
+                loadingLabel: localization.SENDING_VERIFICATION_CODE,
+                actionLabel: localization.SEND_VERIFICATION_CODE
+              }
+            ),
+            /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
+          ] }) })
+        ] });
+      }
+      return /* @__PURE__ */ jsxs(Card, { className, children: [
+        /* @__PURE__ */ jsxs(CardHeader, { children: [
+          /* @__PURE__ */ jsx(CardTitle, { children: localization.ONE_TIME_PASSWORD }),
+          /* @__PURE__ */ jsx(CardDescription, { children: localization.STEP_OF.replace("{{current}}", "3").replace(
+            "{{total}}",
+            String(getTotalSteps())
+          ) })
+        ] }),
+        /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+          /* @__PURE__ */ jsx("div", { className: "text-center space-y-2", children: /* @__PURE__ */ jsxs("p", { className: "text-sm", children: [
+            localization.EMAIL_OTP_SENT,
+            " ",
+            /* @__PURE__ */ jsx("strong", { children: phoneNumber })
+          ] }) }),
+          /* @__PURE__ */ jsxs("form", { onSubmit: handleManualVerify, className: "space-y-4", children: [
+            /* @__PURE__ */ jsxs("label", { className: "block text-sm font-medium", children: [
+              localization.ENTER_VERIFICATION_CODE,
+              /* @__PURE__ */ jsx(
+                OTPInput,
+                {
+                  length: 6,
+                  onComplete: handleOtpComplete,
+                  disabled: isSubmitting,
+                  className: "mt-2"
+                }
+              )
+            ] }),
+            formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+            /* @__PURE__ */ jsx(
+              SubmitButton,
+              {
+                loading: isSubmitting,
+                loadingLabel: localization.VERIFYING,
+                actionLabel: localization.VERIFY
+              }
+            ),
+            /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+              /* @__PURE__ */ jsx(
+                Button,
+                {
+                  type: "button",
+                  variant: "outline",
+                  disabled: isSubmitting || cooldownRemaining > 0,
+                  onClick: handleResendPhoneOTP,
+                  className: "w-full",
+                  children: cooldownRemaining > 0 ? localization.RESEND_IN.replace("{{seconds}}", String(cooldownRemaining)) : isSubmitting ? localization.RESENDING : localization.RESEND
+                }
+              ),
+              /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
+            ] })
+          ] })
+        ] }) })
+      ] });
+    }
+  }
+  if (step === 4) {
+    return /* @__PURE__ */ jsxs(Card, { className, children: [
+      /* @__PURE__ */ jsxs(CardHeader, { children: [
+        /* @__PURE__ */ jsx(CardTitle, { children: localization.RESET_PASSWORD }),
+        /* @__PURE__ */ jsx(CardDescription, { children: localization.STEP_OF.replace("{{current}}", "4").replace(
+          "{{total}}",
+          String(getTotalSteps())
+        ) })
+      ] }),
+      /* @__PURE__ */ jsx(CardContent, { children: /* @__PURE__ */ jsxs("form", { onSubmit: passwordForm.handleSubmit(onPasswordSubmit), className: "space-y-4", children: [
+        /* @__PURE__ */ jsx(
+          FormPasswordInput,
+          {
+            label: localization.NEW_PASSWORD,
+            id: "new-password",
+            autoComplete: "new-password",
+            error: passwordForm.formState.errors.newPassword?.message,
+            disabled: isSubmitting,
+            ...passwordForm.register("newPassword")
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          FormPasswordInput,
+          {
+            label: localization.CONFIRM_NEW_PASSWORD,
+            id: "confirm-password",
+            autoComplete: "new-password",
+            error: passwordForm.formState.errors.confirmPassword?.message,
+            disabled: isSubmitting,
+            ...passwordForm.register("confirmPassword")
+          }
+        ),
+        formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+        /* @__PURE__ */ jsx(
+          SubmitButton,
+          {
+            loading: isSubmitting,
+            loadingLabel: localization.LOADING,
+            actionLabel: localization.RESET_PASSWORD_ACTION
+          }
+        ),
+        /* @__PURE__ */ jsx(Button, { type: "button", variant: "ghost", onClick: handleGoBack, className: "w-full", children: localization.GO_BACK })
+      ] }) })
+    ] });
+  }
+  return null;
+}
+var resetPasswordSchema = z.object({
+  newPassword: z.string().min(8),
+  confirmPassword: z.string().min(1)
+}).refine((data) => data.newPassword === data.confirmPassword, {
+  message: "PASSWORDS_DO_NOT_MATCH",
+  path: ["confirmPassword"]
+});
+function ResetPasswordForm({
+  token,
+  onSuccess,
+  onError,
+  className
+}) {
+  const { resetPassword } = useAuth();
+  const { localization, localizeErrors } = useAuthLocalization();
+  const [isSuccess, setIsSuccess] = useState(false);
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const [formError, setFormError] = useState(null);
+  const {
+    register,
+    handleSubmit,
+    formState: { errors }
+  } = useForm({
+    resolver: zodResolver(resetPasswordSchema),
+    defaultValues: { newPassword: "", confirmPassword: "" }
+  });
+  const onSubmit = useCallback(
+    async (data) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        await resetPassword({ token, newPassword: data.newPassword });
+        setIsSuccess(true);
+        onSuccess?.();
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
+    },
+    [resetPassword, token, onSuccess, onError, localization, localizeErrors]
+  );
+  if (isSuccess) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4 text-center", children: [
+      /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: localization.RESET_PASSWORD_SUCCESS }),
+      /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: localization.RESET_PASSWORD_SUCCESS })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4", children: [
+    /* @__PURE__ */ jsxs("div", { className: "text-center space-y-2", children: [
+      /* @__PURE__ */ jsx("h2", { className: "text-lg font-semibold", children: localization.RESET_PASSWORD }),
+      /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: localization.CHANGE_PASSWORD_DESCRIPTION })
+    ] }),
+    /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onSubmit), className: "space-y-4", children: [
+      /* @__PURE__ */ jsx(
+        FormPasswordInput,
+        {
+          label: localization.NEW_PASSWORD,
+          id: "reset-password-new",
+          autoComplete: "new-password",
+          error: errors.newPassword?.message,
+          disabled: isSubmitting,
+          ...register("newPassword")
+        }
+      ),
+      /* @__PURE__ */ jsx(
+        FormPasswordInput,
+        {
+          label: localization.CONFIRM_NEW_PASSWORD,
+          id: "reset-password-confirm",
+          autoComplete: "new-password",
+          error: errors.confirmPassword?.message === "PASSWORDS_DO_NOT_MATCH" ? localization.PASSWORDS_DO_NOT_MATCH || "Passwords do not match" : errors.confirmPassword?.message,
+          disabled: isSubmitting,
+          ...register("confirmPassword")
+        }
+      ),
+      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+      /* @__PURE__ */ jsx(
+        SubmitButton,
+        {
+          loading: isSubmitting,
+          loadingLabel: localization.LOADING,
+          actionLabel: localization.RESET_PASSWORD_ACTION
+        }
+      )
+    ] })
   ] }) });
 }
 var signupSchema = z.object({
@@ -2120,6 +2978,630 @@ function SignupForm({
     ] })
   ] }) });
 }
+var totpSchema = z.object({
+  code: z.string().length(6).regex(/^\d{6}$/)
+});
+var backupCodeSchema = z.object({
+  backupCode: z.string().min(1)
+});
+function TwoFactorForm({
+  onVerify,
+  onError,
+  autoSubmit = true,
+  isLoading,
+  className
+}) {
+  const { localization, localizeErrors } = useAuthLocalization();
+  const [mode, setMode] = useState("totp");
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const [formError, setFormError] = useState(null);
+  const codeRef = useRef("");
+  const loading = isLoading ?? isSubmitting;
+  const backupForm = useForm({
+    resolver: zodResolver(backupCodeSchema),
+    defaultValues: { backupCode: "" }
+  });
+  const handleVerify = useCallback(
+    async (code) => {
+      setIsSubmitting(true);
+      setFormError(null);
+      try {
+        await onVerify(code);
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
+    },
+    [onVerify, onError, localization, localizeErrors]
+  );
+  const handleOtpComplete = useCallback(
+    (code) => {
+      codeRef.current = code;
+      if (autoSubmit) {
+        handleVerify(code);
+      }
+    },
+    [autoSubmit, handleVerify]
+  );
+  const handleManualVerify = useCallback(
+    (e) => {
+      e.preventDefault();
+      if (codeRef.current) {
+        handleVerify(codeRef.current);
+      }
+    },
+    [handleVerify]
+  );
+  const handleBackupSubmit = useCallback(
+    async (data) => {
+      await handleVerify(data.backupCode);
+    },
+    [handleVerify]
+  );
+  return /* @__PURE__ */ jsxs(Card, { className, children: [
+    /* @__PURE__ */ jsxs(CardHeader, { children: [
+      /* @__PURE__ */ jsx(CardTitle, { children: localization.TWO_FACTOR_PROMPT }),
+      /* @__PURE__ */ jsx(CardDescription, { children: mode === "totp" ? localization.ENTER_TOTP_CODE : localization.BACKUP_CODES })
+    ] }),
+    /* @__PURE__ */ jsxs(CardContent, { className: "space-y-4", children: [
+      mode === "totp" && /* @__PURE__ */ jsxs("form", { onSubmit: handleManualVerify, className: "space-y-4", children: [
+        /* @__PURE__ */ jsxs("label", { className: "block text-sm font-medium", children: [
+          localization.VERIFICATION_CODE_LABEL,
+          /* @__PURE__ */ jsx(
+            OTPInput,
+            {
+              length: 6,
+              onComplete: handleOtpComplete,
+              disabled: loading,
+              className: "mt-2"
+            }
+          )
+        ] }),
+        formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+        /* @__PURE__ */ jsx(
+          SubmitButton,
+          {
+            loading,
+            loadingLabel: localization.VERIFYING,
+            actionLabel: localization.TWO_FACTOR_ACTION
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Button,
+          {
+            variant: "link",
+            type: "button",
+            className: "p-0 h-auto text-sm",
+            onClick: () => setMode("backup"),
+            disabled: loading,
+            children: localization.USE_BACKUP_CODE
+          }
+        )
+      ] }),
+      mode === "backup" && /* @__PURE__ */ jsxs("form", { onSubmit: backupForm.handleSubmit(handleBackupSubmit), className: "space-y-4", children: [
+        /* @__PURE__ */ jsx(
+          FormInput,
+          {
+            label: localization.BACKUP_CODE_PLACEHOLDER,
+            id: "backup-code",
+            error: backupForm.formState.errors.backupCode?.message,
+            disabled: loading,
+            ...backupForm.register("backupCode")
+          }
+        ),
+        formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+        /* @__PURE__ */ jsx(
+          SubmitButton,
+          {
+            loading,
+            loadingLabel: localization.VERIFYING,
+            actionLabel: localization.VERIFY
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Button,
+          {
+            variant: "link",
+            type: "button",
+            className: "p-0 h-auto text-sm",
+            onClick: () => setMode("totp"),
+            disabled: loading,
+            children: localization.USE_AUTHENTICATOR
+          }
+        )
+      ] })
+    ] })
+  ] });
+}
+function AuthView({
+  pathname,
+  paths,
+  fallback = null,
+  searchParams,
+  getSearchParam,
+  onSuccess,
+  onError,
+  enablePhone,
+  oauthProviders,
+  oauthRedirectUri,
+  redirectUrl,
+  className
+}) {
+  const resolvedPaths = useMemo(() => {
+    return { ...authViewPaths, ...paths };
+  }, [paths]);
+  const getParam = (key) => {
+    if (searchParams) {
+      return searchParams[key];
+    }
+    if (getSearchParam) {
+      return getSearchParam(key);
+    }
+    return void 0;
+  };
+  const matchedPath = Object.entries(resolvedPaths).find(
+    ([, mappedPath]) => mappedPath === pathname
+  )?.[0];
+  switch (matchedPath) {
+    case "/sign-in": {
+      if (oauthProviders && oauthRedirectUri) {
+        return /* @__PURE__ */ jsx(
+          LoginForm,
+          {
+            onSuccess: (user) => onSuccess?.(user),
+            onError,
+            enablePhone,
+            oauthProviders,
+            oauthRedirectUri,
+            className
+          }
+        );
+      }
+      return /* @__PURE__ */ jsx(
+        LoginForm,
+        {
+          onSuccess: (user) => onSuccess?.(user),
+          onError,
+          enablePhone,
+          className
+        }
+      );
+    }
+    case "/sign-up": {
+      return /* @__PURE__ */ jsx(
+        SignupForm,
+        {
+          onSuccess: (user) => onSuccess?.(user),
+          onError,
+          className
+        }
+      );
+    }
+    case "/forgot-password": {
+      if (!redirectUrl) {
+        throw new Error("AuthView: redirectUrl is required for /forgot-password");
+      }
+      return /* @__PURE__ */ jsx(
+        ForgotPasswordForm,
+        {
+          redirectUrl,
+          onSuccess: () => onSuccess?.(),
+          onError,
+          className
+        }
+      );
+    }
+    case "/reset-password": {
+      const token = getParam("token");
+      if (!token) {
+        throw new Error("AuthView: token query param is required for /reset-password");
+      }
+      return /* @__PURE__ */ jsx(
+        ResetPasswordForm,
+        {
+          token,
+          onSuccess: () => onSuccess?.(),
+          onError,
+          className
+        }
+      );
+    }
+    case "/verify-email": {
+      if (!redirectUrl) {
+        throw new Error("AuthView: redirectUrl is required for /verify-email");
+      }
+      const token = getParam("token");
+      const email = getParam("email");
+      return /* @__PURE__ */ jsx(
+        EmailVerificationForm,
+        {
+          token,
+          email,
+          redirectUrl,
+          onSuccess: (user) => onSuccess?.(user),
+          onError,
+          className
+        }
+      );
+    }
+    case "/email-otp": {
+      if (!redirectUrl) {
+        throw new Error("AuthView: redirectUrl is required for /email-otp");
+      }
+      return /* @__PURE__ */ jsx(
+        EmailOTPForm,
+        {
+          redirectUrl,
+          onSuccess: (user) => onSuccess?.(user),
+          onError,
+          className
+        }
+      );
+    }
+    case "/recover-account": {
+      if (!redirectUrl) {
+        throw new Error("AuthView: redirectUrl is required for /recover-account");
+      }
+      return /* @__PURE__ */ jsx(
+        RecoverAccountForm,
+        {
+          redirectUrl,
+          enablePhone,
+          onSuccess: () => onSuccess?.(),
+          onError,
+          className
+        }
+      );
+    }
+    case "/two-factor": {
+      return /* @__PURE__ */ jsx(
+        TwoFactorForm,
+        {
+          onVerify: () => {
+            onSuccess?.();
+          },
+          onError,
+          className
+        }
+      );
+    }
+    default: {
+      return /* @__PURE__ */ jsx(Fragment, { children: fallback });
+    }
+  }
+}
+var magicLinkSchema = z.object({
+  email: z.string().email("Invalid email address")
+});
+function MagicLinkForm({ redirectUrl, onSuccess, onError, className }) {
+  const { sendMagicLink } = useAuth();
+  const { localization, localizeErrors } = useAuthLocalization();
+  const [sent, setSent] = useState(false);
+  const [sentEmail, setSentEmail] = useState("");
+  const [isSubmitting, setIsSubmitting] = useState(false);
+  const [formError, setFormError] = useState(null);
+  const {
+    register,
+    handleSubmit,
+    formState: { errors },
+    getValues
+  } = useForm({
+    resolver: zodResolver(magicLinkSchema),
+    defaultValues: { email: "" }
+  });
+  const onSubmit = useCallback(
+    async (data) => {
+      setFormError(null);
+      setIsSubmitting(true);
+      try {
+        await sendMagicLink({ email: data.email, redirectUrl });
+        setSent(true);
+        setSentEmail(data.email);
+        onSuccess?.();
+      } catch (err) {
+        setFormError(getLocalizedError(err, localization, localizeErrors));
+        onError?.(toAuthError(err));
+      } finally {
+        setIsSubmitting(false);
+      }
+    },
+    [sendMagicLink, redirectUrl, onSuccess, onError, localization, localizeErrors]
+  );
+  const handleResend = useCallback(async () => {
+    const email = getValues("email");
+    setFormError(null);
+    setIsSubmitting(true);
+    try {
+      await sendMagicLink({ email, redirectUrl });
+    } catch (err) {
+      setFormError(getLocalizedError(err, localization, localizeErrors));
+    } finally {
+      setIsSubmitting(false);
+    }
+  }, [sendMagicLink, redirectUrl, getValues, localization, localizeErrors]);
+  if (sent) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4 text-center", children: [
+      /* @__PURE__ */ jsxs("p", { className: "text-sm", children: [
+        localization.MAGIC_LINK_EMAIL,
+        " ",
+        /* @__PURE__ */ jsx("strong", { children: maskEmail(sentEmail) })
+      ] }),
+      /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: localization.MAGIC_LINK_HINT }),
+      /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", disabled: isSubmitting, onClick: handleResend, children: isSubmitting ? localization.RESENDING : localization.RESEND }),
+      formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError })
+    ] }) });
+  }
+  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("form", { onSubmit: handleSubmit(onSubmit), className: "p-6 space-y-4", children: [
+    /* @__PURE__ */ jsx(
+      FormInput,
+      {
+        label: localization.EMAIL,
+        id: "magic-link-email",
+        type: "email",
+        autoComplete: "email",
+        error: errors.email?.message,
+        ...register("email")
+      }
+    ),
+    formError && /* @__PURE__ */ jsx("div", { "aria-live": "polite", className: "text-sm text-red-600", children: formError }),
+    /* @__PURE__ */ jsx(
+      SubmitButton,
+      {
+        loading: isSubmitting,
+        loadingLabel: localization.SENDING,
+        actionLabel: localization.MAGIC_LINK_ACTION
+      }
+    )
+  ] }) });
+}
+var DEFAULT_DEVICE_ICONS = {
+  mobile: "\u{1F4F1}",
+  desktop: "\u{1F4BB}",
+  tablet: "\u{1F4DF}"
+};
+function DeviceList({
+  showTrustToggle = false,
+  showRemoveAction = false,
+  onDeviceTrusted,
+  onDeviceUntrusted,
+  onDeviceRemoved,
+  renderDeviceIcon,
+  className
+}) {
+  const { devices, isLoading, error, refresh, trustDevice, untrustDevice, removeDevice } = useDevices();
+  const { localization } = useAuthLocalization();
+  useEffect(() => {
+    refresh();
+  }, [refresh]);
+  const handleTrustToggle = useCallback(
+    async (device) => {
+      if (device.isTrusted) {
+        await untrustDevice(device.id);
+        onDeviceUntrusted?.(device);
+      } else {
+        await trustDevice(device.id);
+        onDeviceTrusted?.(device);
+      }
+    },
+    [trustDevice, untrustDevice, onDeviceTrusted, onDeviceUntrusted]
+  );
+  const handleRemove = useCallback(
+    async (device) => {
+      await removeDevice(device.id);
+      onDeviceRemoved?.(device);
+    },
+    [removeDevice, onDeviceRemoved]
+  );
+  if (isLoading && devices.length === 0) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.LOADING_DEVICES }) });
+  }
+  if (error) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-red-600", children: error.message }) });
+  }
+  if (devices.length === 0) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.NO_DEVICES }) });
+  }
+  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 space-y-4", children: devices.map((device) => /* @__PURE__ */ jsxs(
+    "div",
+    {
+      className: "flex items-start justify-between gap-4 rounded border p-4",
+      children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex items-start gap-3", children: [
+          /* @__PURE__ */ jsx("span", { className: "text-2xl", children: renderDeviceIcon ? renderDeviceIcon(device) : DEFAULT_DEVICE_ICONS[device.deviceType] ?? "\u{1F4BB}" }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
+              /* @__PURE__ */ jsx("span", { className: "font-medium", children: device.name }),
+              device.isCurrent && /* @__PURE__ */ jsx("span", { className: "rounded bg-blue-100 px-2 py-0.5 text-xs text-blue-700", children: localization.CURRENT_DEVICE })
+            ] }),
+            /* @__PURE__ */ jsxs("p", { className: "text-sm text-gray-500", children: [
+              device.browser,
+              " \xB7 ",
+              device.os
+            ] }),
+            (device.lastCity || device.lastCountry) && /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: [device.lastCity, device.lastCountry].filter(Boolean).join(", ") }),
+            /* @__PURE__ */ jsxs("p", { className: "text-xs text-gray-400", children: [
+              localization.LAST_USED,
+              " ",
+              device.lastUsedAt,
+              " \xB7 ",
+              localization.IP_LABEL,
+              " ",
+              device.lastIp
+            ] })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
+          showTrustToggle && /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "outline",
+              size: "sm",
+              onClick: () => handleTrustToggle(device),
+              children: device.isTrusted ? localization.UNTRUST_DEVICE : localization.TRUST_DEVICE
+            }
+          ),
+          showRemoveAction && /* @__PURE__ */ jsx(
+            Button,
+            {
+              type: "button",
+              variant: "destructive",
+              size: "sm",
+              disabled: device.isCurrent,
+              onClick: () => handleRemove(device),
+              children: localization.REMOVE
+            }
+          )
+        ] })
+      ]
+    },
+    device.id
+  )) }) });
+}
+function LoadingBoundary({
+  children,
+  spinner = /* @__PURE__ */ jsx("div", { children: "Loading..." }),
+  delay = 0,
+  className
+}) {
+  const { isLoading } = useSession();
+  const [showSpinner, setShowSpinner] = useState(delay === 0 && isLoading);
+  useEffect(() => {
+    if (!isLoading) {
+      setShowSpinner(false);
+      return;
+    }
+    if (delay === 0) {
+      setShowSpinner(true);
+      return;
+    }
+    const timer = setTimeout(() => {
+      setShowSpinner(true);
+    }, delay);
+    return () => clearTimeout(timer);
+  }, [isLoading, delay]);
+  if (isLoading && showSpinner) {
+    return className ? /* @__PURE__ */ jsx("div", { className, children: spinner }) : /* @__PURE__ */ jsx(Fragment, { children: spinner });
+  }
+  if (isLoading) {
+    return null;
+  }
+  return /* @__PURE__ */ jsx(Fragment, { children });
+}
+
+// src/helpers/risk-utils.ts
+function getRiskLevel(score) {
+  if (score < 30) return "low";
+  if (score < 60) return "medium";
+  return "high";
+}
+var RISK_COLORS = {
+  low: "text-green-600 bg-green-50",
+  medium: "text-yellow-600 bg-yellow-50",
+  high: "text-red-600 bg-red-50"
+};
+function LoginActivityFeed({
+  limit = 20,
+  showRiskBadge = false,
+  showReportActions = false,
+  filterByStatus,
+  onSuspiciousReported,
+  className
+}) {
+  const {
+    events,
+    hasMore,
+    isLoading,
+    error,
+    refresh,
+    loadMore,
+    filter,
+    markRecognized,
+    reportSuspicious
+  } = useLoginActivity({ limit });
+  const { localization } = useAuthLocalization();
+  useEffect(() => {
+    if (filterByStatus) {
+      filter({ status: filterByStatus, limit });
+    }
+    refresh();
+  }, [refresh, filter, filterByStatus, limit]);
+  const handleMarkRecognized = useCallback(
+    async (event) => {
+      await markRecognized(event.id);
+    },
+    [markRecognized]
+  );
+  const handleReportSuspicious = useCallback(
+    async (event) => {
+      await reportSuspicious(event.id);
+      onSuspiciousReported?.(event);
+    },
+    [reportSuspicious, onSuspiciousReported]
+  );
+  if (isLoading && events.length === 0) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.LOADING_ACTIVITY }) });
+  }
+  if (error) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-red-600", children: error.message }) });
+  }
+  if (events.length === 0) {
+    return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsx("div", { className: "p-6 text-center text-sm text-gray-500", children: localization.NO_ACTIVITY }) });
+  }
+  return /* @__PURE__ */ jsx(Card, { className, children: /* @__PURE__ */ jsxs("div", { className: "p-6 space-y-4", children: [
+    events.map((event) => {
+      const riskLevel = getRiskLevel(event.riskScore);
+      return /* @__PURE__ */ jsxs(
+        "div",
+        {
+          className: "flex items-start justify-between gap-4 rounded border p-4",
+          children: [
+            /* @__PURE__ */ jsxs("div", { children: [
+              /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
+                /* @__PURE__ */ jsx("span", { className: "font-medium", children: event.deviceName }),
+                /* @__PURE__ */ jsx("span", { className: "rounded bg-gray-100 px-2 py-0.5 text-xs text-gray-600", children: event.status }),
+                showRiskBadge && /* @__PURE__ */ jsx("span", { className: `rounded px-2 py-0.5 text-xs ${RISK_COLORS[riskLevel]}`, children: riskLevel })
+              ] }),
+              /* @__PURE__ */ jsxs("p", { className: "text-sm text-gray-500", children: [
+                event.method,
+                " \xB7 ",
+                event.ip
+              ] }),
+              (event.city || event.country) && /* @__PURE__ */ jsx("p", { className: "text-sm text-gray-500", children: [event.city, event.country].filter(Boolean).join(", ") }),
+              /* @__PURE__ */ jsx("p", { className: "text-xs text-gray-400", children: event.createdAt })
+            ] }),
+            showReportActions && /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
+              /* @__PURE__ */ jsx(
+                Button,
+                {
+                  type: "button",
+                  variant: "outline",
+                  size: "sm",
+                  onClick: () => handleMarkRecognized(event),
+                  children: localization.MARK_RECOGNIZED
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Button,
+                {
+                  type: "button",
+                  variant: "destructive",
+                  size: "sm",
+                  onClick: () => handleReportSuspicious(event),
+                  children: localization.REPORT_SUSPICIOUS
+                }
+              )
+            ] })
+          ]
+        },
+        event.id
+      );
+    }),
+    hasMore && /* @__PURE__ */ jsx("div", { className: "text-center", children: /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", disabled: isLoading, onClick: loadMore, children: isLoading ? localization.LOADING : localization.LOAD_MORE }) })
+  ] }) });
+}
 function OrganizationMenu({
   showCreateNew = false,
   currentOrgId,
@@ -2177,6 +3659,6 @@ function UserMenu({ showOrganization = false, menuItems, className }) {
   ] }) });
 }
 
-export { AUTH_ERROR_CODES, AccountSwitcher, AuthContext, AuthProvider, DeviceList, LoadingBoundary, LocalizationContext, LoginActivityFeed, LoginForm, MagicLinkForm, OAuthButton, OrganizationMenu, PhoneLoginForm, RISK_COLORS, SessionGuard, SignupForm, UserMenu, authLocalization, credentialLoginSchema, getInitials, getLocalizedError, getRiskLevel, magicLinkSchema, otpVerifySchema, phoneLoginSchema, phoneNumberSchema, otpVerifySchema2 as phoneOtpVerifySchema, phonePasswordSchema, signupSchema, toAuthError, useApiKeys, useAuth, useAuthContext, useAuthLocalization, useDevices, useLoginActivity, useOrganizations, usePhone, useSession, useSessions, useUser };
+export { AUTH_ERROR_CODES, AccountSwitcher, AuthContext, AuthProvider, AuthView, DeviceList, EmailOTPForm, EmailVerificationForm, ForgotPasswordForm, LoadingBoundary, LocalizationContext, LoginActivityFeed, LoginForm, MagicLinkForm, OAuthButton, OrganizationMenu, PhoneLoginForm, RISK_COLORS, RecoverAccountForm, ResetPasswordForm, SessionGuard, SignupForm, TwoFactorForm, UserMenu, authLocalization, authViewPaths, backupCodeSchema, credentialLoginSchema, emailOtpCodeSchema, emailOtpEmailSchema, forgotPasswordSchema, getInitials, getLocalizedError, getRiskLevel, isEmail, magicLinkSchema, maskEmail, otpVerifySchema, phoneLoginSchema, phoneNumberSchema, otpVerifySchema2 as phoneOtpVerifySchema, phonePasswordSchema, recoverCodeSchema, recoverEmailSchema, recoverNewPasswordSchema, recoverPhoneSchema, resetPasswordSchema, signupSchema, toAuthError, totpSchema, useApiKeys, useAuth, useAuthContext, useAuthLocalization, useDevices, useLoginActivity, useOrganizations, usePhone, useSession, useSessions, useUser };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map