@burdenoff/microfe-auth 2026.510.127

package/dist/auth/pages/LoginPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginPage.js","names":[],"sources":["../../../src/auth/pages/LoginPage.tsx"],"sourcesContent":["import { useState, useEffect, useCallback, useRef } from \"react\";\nimport { useNavigate, useSearchParams, useLocation } from \"react-router-dom\";\nimport {\n  useI18n,\n  useActiveContext,\n} from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport {\n  getSSORedirectUrl,\n  SSORedirectSpinner,\n} from \"@burdenoff/fe-libs/shared/components\";\n\nimport {\n  getProfileTokens,\n  getProfileUser,\n  getProfiles,\n  resolveActiveProfileId,\n} from \"@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager\";\nimport { useAuthOperations, useMyWorkspaces } from \"../hooks\";\nimport { useOAuthOperations } from \"../hooks/useOAuthOperations\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport {\n  EmailIcon,\n  LockIcon,\n  EyeIcon,\n  EyeOffIcon,\n  AlertIcon,\n  SpinnerIcon,\n  GoogleIcon,\n  GitHubIcon,\n  MicrosoftIcon,\n} from \"../components/AuthIcons\";\nimport { useCaptchaV3 } from \"../hooks/useCaptchaV3\";\nimport type { SignInInput } from \"../types\";\n\nfunction hasValidAccessToken(token: string): boolean {\n  try {\n    const raw = token.split(\".\")[1].replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padded = raw.padEnd(Math.ceil(raw.length / 4) * 4, \"=\");\n    const payload = JSON.parse(atob(padded)) as { exp?: unknown };\n    return typeof payload.exp === \"number\" && payload.exp > Date.now() / 1000;\n  } catch {\n    return false;\n  }\n}\n\nfunction decodeSameOriginReturnTo(returnTo: string | null): string | null {\n  if (!returnTo) return null;\n  try {\n    const decoded = decodeURIComponent(returnTo);\n    const url = new URL(decoded, window.location.origin);\n    if (url.origin !== window.location.origin) return null;\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Login page with professional design\n * Provides email/password login and social OAuth options\n */\nexport function LoginPage() {\n  const navigate = useNavigate();\n  const location = useLocation();\n  const [searchParams] = useSearchParams();\n  const { t } = useI18n();\n  const tr = useCallback(\n    (key: string, fallback: string): string => {\n      const translated = t(key);\n      return translated === key ? fallback : translated;\n    },\n    [t],\n  );\n  const { signIn, isLoading, error, errorCode, resendVerification } =\n    useAuthOperations();\n  const { completeAuthFlow } = useMyWorkspaces();\n  const { setWorkspace, setOrganization } = useActiveContext();\n  const { initiateGoogleOAuth, initiateMicrosoftOAuth, isProviderConfigured } =\n    useOAuthOperations();\n  const mfaRequired = useAuthStore((state) => state.mfaRequired);\n  const { executeRecaptcha: executeCaptchaV3 } = useCaptchaV3();\n  const [isCompletingAuth, setIsCompletingAuth] = useState(false);\n  const [isSsoRedirecting, setIsSsoRedirecting] = useState(false);\n\n  const redirectAfterLogin = useCallback(\n    (path: string) => {\n      if (typeof window !== \"undefined\") {\n        try {\n          sessionStorage.setItem(\"bf-post-login-return-to\", path);\n        } catch {\n          // Ignore storage failures; redirect still proceeds.\n        }\n        window.location.assign(path);\n        return;\n      }\n      navigate(path);\n    },\n    [navigate],\n  );\n  const [showPassword, setShowPassword] = useState(false);\n  const [isAccountInactive, setIsAccountInactive] = useState(false);\n  const [isAccountDeleted, setIsAccountDeleted] = useState(false);\n  const [isAccountSuspended, setIsAccountSuspended] = useState(false);\n  const [isOAuthOnlyAccount, setIsOAuthOnlyAccount] = useState(false);\n  const [isEmailNotVerified, setIsEmailNotVerified] = useState(false);\n  const [isResendingVerification, setIsResendingVerification] = useState(false);\n  const [resendSuccess, setResendSuccess] = useState(false);\n  const [oauthError, setOauthError] = useState<string | null>(null);\n  const [infoMessage, setInfoMessage] = useState<string | null>(null);\n  const [formData, setFormData] = useState<\n    SignInInput & { rememberMe?: boolean }\n  >({\n    email: \"\",\n    password: \"\",\n    rememberMe: false,\n  });\n  const [validationError, setValidationError] = useState<string | null>(null);\n  const [isDuplicateAccount, setIsDuplicateAccount] = useState(false);\n\n  // Detect add-account mode and returnTo from URL params\n  const isAddAccountMode = searchParams.get(\"mode\") === \"add-account\";\n  const returnTo = searchParams.get(\"returnTo\");\n  const initialReturnToRef = useRef<string | null>(returnTo);\n\n  useEffect(() => {\n    if (!initialReturnToRef.current && returnTo) {\n      initialReturnToRef.current = returnTo;\n    }\n  }, [returnTo]);\n\n  useEffect(() => {\n    if (isAddAccountMode || isCompletingAuth) return;\n\n    const profileId = resolveActiveProfileId();\n    if (profileId) {\n      const tokens = getProfileTokens(profileId);\n      const user = getProfileUser(profileId);\n      if (\n        tokens?.accessToken &&\n        user &&\n        hasValidAccessToken(tokens.accessToken)\n      ) {\n        useAuthStore.getState().loadFromProfile(profileId);\n        redirectAfterLogin(decodeSameOriginReturnTo(returnTo) ?? \"/\");\n        return;\n      }\n    }\n\n    const ssoUrl = getSSORedirectUrl();\n    if (ssoUrl) {\n      setIsSsoRedirecting(true);\n      window.location.replace(ssoUrl);\n    }\n  }, [isAddAccountMode, isCompletingAuth, redirectAfterLogin, returnTo]);\n\n  // Load remembered email on mount and clean up any legacy plaintext password storage\n  useEffect(() => {\n    try {\n      // Security cleanup: remove any previously stored plaintext passwords\n      localStorage.removeItem(\"remembered_password\");\n\n      const rememberedEmail = localStorage.getItem(\"remembered_email\");\n\n      if (rememberedEmail) {\n        setFormData((prev) => ({\n          ...prev,\n          email: rememberedEmail,\n          rememberMe: true,\n        }));\n      }\n    } catch (error) {\n      console.warn(\"[LoginPage] Failed to load remembered email:\", error);\n    }\n  }, []);\n\n  // Check for redirect message and email from location state (e.g., from expired MFA or SSO redirect)\n  useEffect(() => {\n    const state = location.state as { message?: string; email?: string } | null;\n    if (state?.message) {\n      setInfoMessage(state.message);\n    }\n    if (state?.email) {\n      setFormData((prev) => ({ ...prev, email: state.email }));\n    }\n    // Clear state to prevent showing message on refresh\n    if (state) {\n      window.history.replaceState({}, document.title);\n    }\n  }, [location.state]);\n\n  // Determine error type from GraphQL error code (primary) or message (fallback).\n  // The backend sends structured codes in extensions.code which are propagated\n  // through useAuthOperations → authStore.errorCode.\n  const checkErrorType = (\n    err: string | null,\n    code?: string | null,\n  ):\n    | \"DELETED\"\n    | \"SUSPENDED\"\n    | \"OAUTH_ONLY\"\n    | \"INACTIVE\"\n    | \"EMAIL_NOT_VERIFIED\"\n    | null => {\n    // Primary: match on GraphQL error code from extensions\n    if (code) {\n      switch (code) {\n        case \"ACCOUNT_DELETED\":\n          return \"DELETED\";\n        case \"ACCOUNT_SUSPENDED\":\n          return \"SUSPENDED\";\n        case \"OAUTH_ONLY_ACCOUNT\":\n          return \"OAUTH_ONLY\";\n        case \"ACCOUNT_INACTIVE\":\n          return \"INACTIVE\";\n        case \"EMAIL_NOT_VERIFIED\":\n          return \"EMAIL_NOT_VERIFIED\";\n        default:\n          break;\n      }\n    }\n\n    // Fallback: match on error message for non-GraphQL errors or legacy responses\n    if (!err) return null;\n    const lowerErr = err.toLowerCase();\n\n    if (\n      lowerErr.includes(\"deleted\") ||\n      lowerErr.includes(\"permanently deleted\")\n    ) {\n      return \"DELETED\";\n    }\n    if (lowerErr.includes(\"suspended\")) {\n      return \"SUSPENDED\";\n    }\n    if (\n      lowerErr.includes(\"oauth provider\") ||\n      lowerErr.includes(\"oauth-only\") ||\n      lowerErr.includes(\"oauth only\")\n    ) {\n      return \"OAUTH_ONLY\";\n    }\n    if (\n      lowerErr.includes(\"inactive\") ||\n      lowerErr.includes(\"deactivated\") ||\n      lowerErr.includes(\"not active\")\n    ) {\n      return \"INACTIVE\";\n    }\n    if (\n      lowerErr.includes(\"verify your email\") ||\n      lowerErr.includes(\"email not verified\") ||\n      lowerErr.includes(\"email_not_verified\")\n    ) {\n      return \"EMAIL_NOT_VERIFIED\";\n    }\n    return null;\n  };\n\n  // Pre-fill email from URL query parameter (e.g., after email verification)\n  useEffect(() => {\n    const emailFromUrl = searchParams.get(\"email\");\n    if (emailFromUrl) {\n      setFormData((prev) => ({ ...prev, email: emailFromUrl }));\n    }\n\n    // Check for expired session redirect\n    const isExpired = searchParams.get(\"expired\");\n    if (isExpired === \"true\") {\n      setInfoMessage(\n        tr(\n          \"auth.login.sessionExpired\",\n          \"Your session has expired. Please sign in again.\",\n        ),\n      );\n      // Clear the query param to prevent showing on refresh\n      const newUrl = window.location.pathname;\n      window.history.replaceState({}, document.title, newUrl);\n    }\n  }, [searchParams, tr]);\n\n  // Redirect to MFA verification when required\n  useEffect(() => {\n    if (mfaRequired) {\n      navigate(\"/auth/mfa-verify\");\n    }\n  }, [mfaRequired, navigate]);\n\n  const handleSubmit = async (e: React.FormEvent) => {\n    e.preventDefault();\n    setIsAccountInactive(false);\n    setIsAccountDeleted(false);\n    setIsAccountSuspended(false);\n    setIsOAuthOnlyAccount(false);\n    setIsEmailNotVerified(false);\n    setIsDuplicateAccount(false);\n    setResendSuccess(false);\n    setValidationError(null);\n\n    // Client-side validation\n    const emailTrimmed = (formData.email ?? \"\").trim();\n    if (!emailTrimmed) {\n      setValidationError(\n        tr(\n          \"auth.login.enterEmailOrUsername\",\n          \"Please enter your email or username\",\n        ),\n      );\n      return;\n    }\n\n    // Basic email format validation (if it contains @)\n    if (emailTrimmed.includes(\"@\")) {\n      const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n      if (!emailRegex.test(emailTrimmed)) {\n        setValidationError(\n          tr(\"auth.login.invalidEmail\", \"Please enter a valid email address\"),\n        );\n        return;\n      }\n    }\n\n    if (!formData.password || formData.password.length < 1) {\n      setValidationError(\n        tr(\"auth.login.enterPassword\", \"Please enter your password\"),\n      );\n      return;\n    }\n\n    // In add-account mode, check if this email is already signed in\n    if (isAddAccountMode) {\n      const existingProfiles = getProfiles();\n      const alreadySignedIn = existingProfiles.some(\n        (p) => p.email.toLowerCase() === emailTrimmed.toLowerCase(),\n      );\n      if (alreadySignedIn) {\n        setIsDuplicateAccount(true);\n        setValidationError(null);\n        return;\n      }\n    }\n    setIsDuplicateAccount(false);\n\n    try {\n      // Get reCAPTCHA v3 token (no-op when captcha is disabled)\n      const recaptchaToken = await executeCaptchaV3(\"login\");\n\n      const result = await signIn({\n        email: emailTrimmed,\n        password: formData.password,\n        rememberMe: formData.rememberMe,\n        ...(recaptchaToken ? { recaptchaToken } : {}),\n      });\n\n      // If MFA is required, the useEffect above will handle redirect\n      if (result.requiresMFA) {\n        return;\n      }\n\n      // Successful login - complete auth flow (fetch workspaces + issue token)\n      if (result.success) {\n        try {\n          const profileId = result.user?.id;\n          if (profileId) {\n            const hostname = window.location.hostname;\n            const domain = hostname.endsWith(\".local.burdenoff.com\")\n              ? \".local.burdenoff.com\"\n              : undefined;\n            const domainPart = domain ? `; domain=${domain}` : \"\";\n            const securePart =\n              window.location.protocol === \"https:\" ? \"; secure\" : \"\";\n            const ssoValue = JSON.stringify({\n              id: profileId,\n              origin: window.location.origin,\n            });\n            document.cookie = `bf-sso=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n            document.cookie = `bf-sso-profile=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n          }\n        } catch {\n          // Best effort only. Login can continue without the fast-path cookie.\n        }\n\n        // Handle Remember Me: Save or clear email only (never store passwords)\n        try {\n          if (formData.rememberMe) {\n            localStorage.setItem(\"remembered_email\", emailTrimmed);\n          } else {\n            localStorage.removeItem(\"remembered_email\");\n          }\n        } catch (error) {\n          console.warn(\n            \"[LoginPage] Failed to save/clear remembered email:\",\n            error,\n          );\n        }\n\n        setIsCompletingAuth(true);\n        // In add-account mode, redirect back to where the user was\n        const effectiveReturnTo = initialReturnToRef.current || returnTo;\n        const postLoginPath = effectiveReturnTo\n          ? decodeURIComponent(effectiveReturnTo)\n          : \"/dashboard\";\n        try {\n          type AuthFlowResult = Awaited<ReturnType<typeof completeAuthFlow>>;\n          // Pass the token directly to avoid race condition with React state updates\n          const authFlowResult = await Promise.race<AuthFlowResult>([\n            completeAuthFlow(result.token),\n            new Promise<AuthFlowResult>((resolve) => {\n              window.setTimeout(() => {\n                resolve({\n                  success: false,\n                  error: \"Auth flow timed out after login\",\n                });\n              }, 5000);\n            }),\n          ]);\n\n          if (authFlowResult.success) {\n            // Sync workspace and organization to ActiveContext\n            // This is critical for global search and other workspace-scoped features\n            if (authFlowResult.workspace) {\n              setWorkspace(authFlowResult.workspace.id);\n              if (authFlowResult.workspace.organizationId) {\n                setOrganization(authFlowResult.workspace.organizationId);\n              }\n            }\n\n            // Full auth flow completed - redirect to dashboard or returnTo\n            redirectAfterLogin(postLoginPath);\n          } else if (authFlowResult.error?.includes(\"No workspaces found\")) {\n            // No workspaces - redirect to onboarding/workspace creation\n            navigate(\"/onboarding/create-workspace\");\n          } else {\n            // Partial success or error - still sync workspace if available and redirect\n            if (authFlowResult.workspace) {\n              setWorkspace(authFlowResult.workspace.id);\n              if (authFlowResult.workspace.organizationId) {\n                setOrganization(authFlowResult.workspace.organizationId);\n              }\n            }\n            console.warn(\"Auth flow warning:\", authFlowResult.error);\n            redirectAfterLogin(postLoginPath);\n          }\n        } catch (authFlowError) {\n          // Auth flow failed but login succeeded - still redirect\n          console.error(\"Auth flow error (login succeeded):\", authFlowError);\n          redirectAfterLogin(postLoginPath);\n        } finally {\n          setIsCompletingAuth(false);\n        }\n      }\n    } catch (err) {\n      if (import.meta.env.DEV) {\n        console.error(\"Sign in failed:\", err);\n      }\n      // Check error type using error code (from store) and message\n      const errorMsg = err instanceof Error ? err.message : String(err);\n      if (errorMsg.includes(\"reCAPTCHA\")) {\n        setValidationError(errorMsg);\n      }\n      const storeErrorCode = useAuthStore.getState().errorCode;\n      const errorType = checkErrorType(errorMsg, storeErrorCode);\n      if (errorType === \"DELETED\") {\n        setIsAccountDeleted(true);\n      } else if (errorType === \"SUSPENDED\") {\n        setIsAccountSuspended(true);\n      } else if (errorType === \"OAUTH_ONLY\") {\n        setIsOAuthOnlyAccount(true);\n      } else if (errorType === \"INACTIVE\") {\n        setIsAccountInactive(true);\n      } else if (errorType === \"EMAIL_NOT_VERIFIED\") {\n        setIsEmailNotVerified(true);\n      }\n    }\n  };\n\n  // Also check the error from useAuthOperations\n  useEffect(() => {\n    if (error) {\n      const errorType = checkErrorType(error, errorCode);\n      if (errorType === \"DELETED\") {\n        setIsAccountDeleted(true);\n      } else if (errorType === \"SUSPENDED\") {\n        setIsAccountSuspended(true);\n      } else if (errorType === \"OAUTH_ONLY\") {\n        setIsOAuthOnlyAccount(true);\n      } else if (errorType === \"INACTIVE\") {\n        setIsAccountInactive(true);\n      } else if (errorType === \"EMAIL_NOT_VERIFIED\") {\n        setIsEmailNotVerified(true);\n      }\n    }\n  }, [error, errorCode]);\n\n  /**\n   * Handle Google OAuth login\n   */\n  const handleGoogleLogin = () => {\n    setOauthError(null);\n    try {\n      initiateGoogleOAuth();\n    } catch (err) {\n      setOauthError(\n        err instanceof Error\n          ? err.message\n          : tr(\n              \"auth.login.googleSignInFailed\",\n              \"Failed to initiate Google sign in\",\n            ),\n      );\n    }\n  };\n\n  /**\n   * Handle Microsoft OAuth login\n   */\n  const handleMicrosoftLogin = () => {\n    setOauthError(null);\n    try {\n      initiateMicrosoftOAuth();\n    } catch (err) {\n      setOauthError(\n        err instanceof Error\n          ? err.message\n          : tr(\n              \"auth.login.microsoftSignInFailed\",\n              \"Failed to initiate Microsoft sign in\",\n            ),\n      );\n    }\n  };\n\n  /**\n   * Handle resend verification email\n   */\n  const handleResendVerification = async () => {\n    setIsResendingVerification(true);\n    setResendSuccess(false);\n    try {\n      const emailTrimmed = (formData.email ?? \"\").trim();\n      const result = await resendVerification(emailTrimmed);\n      if (result.success) {\n        setResendSuccess(true);\n      }\n    } catch (err) {\n      console.error(\"Failed to resend verification email:\", err);\n    } finally {\n      setIsResendingVerification(false);\n    }\n  };\n\n  // Check if OAuth providers are configured\n  const isGoogleConfigured = isProviderConfigured(\"google\");\n  const isMicrosoftConfigured = isProviderConfigured(\"microsoft\");\n\n  const oauthProviders = [\n    {\n      name: \"Google\",\n      icon: GoogleIcon,\n      onClick: handleGoogleLogin,\n      disabled: !isGoogleConfigured,\n      tooltip: isGoogleConfigured\n        ? undefined\n        : tr(\n            \"auth.login.googleNotConfigured\",\n            \"Google sign in is not configured\",\n          ),\n    },\n    {\n      name: \"GitHub\",\n      icon: GitHubIcon,\n      onClick: () => {},\n      disabled: true,\n      tooltip: tr(\n        \"auth.login.githubNotConfigured\",\n        \"GitHub sign in is not configured\",\n      ),\n    },\n    {\n      name: \"Microsoft\",\n      icon: MicrosoftIcon,\n      onClick: handleMicrosoftLogin,\n      disabled: !isMicrosoftConfigured,\n      tooltip: isMicrosoftConfigured\n        ? undefined\n        : tr(\n            \"auth.login.microsoftNotConfigured\",\n            \"Microsoft sign in is not configured\",\n          ),\n    },\n  ];\n\n  if (isSsoRedirecting) {\n    return <SSORedirectSpinner />;\n  }\n\n  return (\n    <AuthLayout\n      title={tr(\"auth.login.welcomeBack\", \"Welcome back\")}\n      subtitle={tr(\n        \"auth.login.enterCredentials\",\n        \"Enter your credentials to continue\",\n      )}\n    >\n      <form onSubmit={handleSubmit} className=\"space-y-5\">\n        {/* Info Message (e.g., from expired MFA redirect) */}\n        {infoMessage && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl border bg-status-info-bg-subtle border-status-info-border\">\n            <svg\n              className=\"w-5 h-5 flex-shrink-0 mt-0.5 text-text-link\"\n              fill=\"none\"\n              viewBox=\"0 0 24 24\"\n              stroke=\"currentColor\"\n            >\n              <path\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n                strokeWidth={2}\n                d=\"M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z\"\n              />\n            </svg>\n            <p className=\"text-sm text-status-info-text\">{infoMessage}</p>\n          </div>\n        )}\n\n        {/* Validation Error */}\n        {validationError && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl border bg-status-warning-bg-subtle border-status-warning-border\">\n            <AlertIcon className=\"w-5 h-5 flex-shrink-0 mt-0.5 text-status-warning-text\" />\n            <p className=\"text-sm text-status-warning-text\">\n              {validationError}\n            </p>\n          </div>\n        )}\n\n        {/* Duplicate Account Warning (Add Account mode) */}\n        {isDuplicateAccount && (\n          <div className=\"flex items-start gap-3 p-4 rounded-xl border bg-status-warning-bg-subtle border-status-warning-border\">\n            <AlertIcon className=\"w-5 h-5 flex-shrink-0 mt-0.5 text-status-warning-text\" />\n            <div className=\"flex-1\">\n              <p className=\"text-sm font-medium text-status-warning-text\">\n                {tr(\n                  \"auth.login.duplicateAccount\",\n                  \"This account is already signed in.\",\n                )}\n              </p>\n              <p className=\"mt-1 text-sm text-status-warning-text/80\">\n                {tr(\n                  \"auth.login.duplicateAccountHint\",\n                  \"Please use a different account, or go back and switch to this account from the profile menu.\",\n                )}\n              </p>\n              {(initialReturnToRef.current || returnTo) && (\n                <button\n                  type=\"button\"\n                  onClick={() =>\n                    navigate(\n                      decodeURIComponent(\n                        initialReturnToRef.current || returnTo || \"/dashboard\",\n                      ),\n                    )\n                  }\n                  className=\"mt-3 inline-flex items-center gap-2 px-4 py-2.5 rounded-xl border border-status-warning-border bg-bg-surface text-status-warning-text text-sm font-medium hover:bg-status-warning-bg-subtle hover:border-status-warning-border transition-all shadow-sm\"\n                >\n                  <svg\n                    className=\"w-4 h-4\"\n                    fill=\"none\"\n                    viewBox=\"0 0 24 24\"\n                    stroke=\"currentColor\"\n                  >\n                    <path\n                      strokeLinecap=\"round\"\n                      strokeLinejoin=\"round\"\n                      strokeWidth={2}\n                      d=\"M10 19l-7-7m0 0l7-7m-7 7h18\"\n                    />\n                  </svg>\n                  {tr(\n                    \"auth.login.goBackSwitchAccount\",\n                    \"Go back and switch account\",\n                  )}\n                </button>\n              )}\n            </div>\n          </div>\n        )}\n\n        {/* Error Alert */}\n        {error && !validationError && !isDuplicateAccount && (\n          <div\n            className={`flex items-start gap-3 p-4 rounded-xl border ${\n              isAccountInactive || isOAuthOnlyAccount || isEmailNotVerified\n                ? \"bg-status-warning-bg-subtle border-status-warning-border\"\n                : \"bg-status-error-bg-subtle border-status-error-border\"\n            }`}\n          >\n            <AlertIcon\n              className={`w-5 h-5 flex-shrink-0 mt-0.5 ${\n                isAccountInactive || isOAuthOnlyAccount || isEmailNotVerified\n                  ? \"text-status-warning-text\"\n                  : \"text-status-error-text\"\n              }`}\n            />\n            <div className=\"flex-1\">\n              <p\n                className={`text-sm ${\n                  isAccountInactive || isOAuthOnlyAccount || isEmailNotVerified\n                    ? \"text-status-warning-text\"\n                    : \"text-status-error-text\"\n                }`}\n              >\n                {isAccountDeleted\n                  ? tr(\n                      \"auth.login.accountDeleted\",\n                      \"This account has been permanently deleted and cannot be recovered.\",\n                    )\n                  : isAccountSuspended\n                    ? tr(\n                        \"auth.login.accountSuspended\",\n                        \"Your account has been suspended. Please contact support for assistance.\",\n                      )\n                    : isAccountInactive\n                      ? tr(\n                          \"auth.login.accountDeactivated\",\n                          \"Your account has been deactivated.\",\n                        )\n                      : isOAuthOnlyAccount\n                        ? tr(\n                            \"auth.login.oauthOnly\",\n                            \"This account uses OAuth sign-in. Please use Google or Microsoft to sign in.\",\n                          )\n                        : isEmailNotVerified\n                          ? tr(\n                              \"auth.login.emailNotVerified\",\n                              \"Please verify your email before signing in. Check your inbox for the verification link.\",\n                            )\n                          : error}\n              </p>\n              {isAccountInactive && (\n                <button\n                  type=\"button\"\n                  onClick={() =>\n                    navigate(\"/auth/reactivate\", {\n                      state: { email: formData.email },\n                    })\n                  }\n                  className=\"mt-2 text-sm font-semibold text-status-warning-text hover:text-status-warning-text underline underline-offset-2\"\n                >\n                  {tr(\n                    \"auth.login.clickReactivate\",\n                    \"Click here to reactivate your account\",\n                  )}\n                </button>\n              )}\n              {isEmailNotVerified && (\n                <div className=\"mt-3\">\n                  {resendSuccess ? (\n                    <div className=\"flex items-center gap-2 text-sm text-status-success-text\">\n                      <svg\n                        className=\"w-4 h-4\"\n                        fill=\"none\"\n                        viewBox=\"0 0 24 24\"\n                        stroke=\"currentColor\"\n                      >\n                        <path\n                          strokeLinecap=\"round\"\n                          strokeLinejoin=\"round\"\n                          strokeWidth={2}\n                          d=\"M5 13l4 4L19 7\"\n                        />\n                      </svg>\n                      {tr(\n                        \"auth.login.verificationSent\",\n                        \"Verification email sent! Please check your inbox.\",\n                      )}\n                    </div>\n                  ) : (\n                    <button\n                      type=\"button\"\n                      onClick={handleResendVerification}\n                      disabled={isResendingVerification}\n                      className=\"inline-flex items-center gap-2 px-4 py-2.5 rounded-xl border border-status-warning-border bg-bg-surface text-status-warning-text text-sm font-medium hover:bg-status-warning-bg-subtle hover:border-status-warning-border transition-all shadow-sm disabled:opacity-50 disabled:cursor-not-allowed\"\n                    >\n                      {isResendingVerification ? (\n                        <>\n                          <SpinnerIcon className=\"w-4 h-4 animate-spin\" />\n                          {tr(\"auth.login.sending\", \"Sending...\")}\n                        </>\n                      ) : (\n                        <>\n                          <svg\n                            className=\"w-4 h-4\"\n                            fill=\"none\"\n                            viewBox=\"0 0 24 24\"\n                            stroke=\"currentColor\"\n                          >\n                            <path\n                              strokeLinecap=\"round\"\n                              strokeLinejoin=\"round\"\n                              strokeWidth={2}\n                              d=\"M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z\"\n                            />\n                          </svg>\n                          {tr(\n                            \"auth.login.resendVerification\",\n                            \"Resend verification email\",\n                          )}\n                        </>\n                      )}\n                    </button>\n                  )}\n                </div>\n              )}\n              {isOAuthOnlyAccount && (\n                <div className=\"mt-3 flex flex-col gap-2\">\n                  {isProviderConfigured(\"google\") && (\n                    <button\n                      type=\"button\"\n                      onClick={handleGoogleLogin}\n                      className=\"inline-flex items-center justify-center gap-2 px-4 py-2.5 rounded-xl border border-border-default bg-bg-surface text-text-primary text-sm font-medium hover:bg-bg-canvas hover:border-border-default transition-all shadow-sm\"\n                    >\n                      <GoogleIcon className=\"w-5 h-5\" />\n                      {tr(\"auth.login.signInWithGoogle\", \"Sign in with Google\")}\n                    </button>\n                  )}\n                  {isProviderConfigured(\"microsoft\") && (\n                    <button\n                      type=\"button\"\n                      onClick={handleMicrosoftLogin}\n                      className=\"inline-flex items-center justify-center gap-2 px-4 py-2.5 rounded-xl border border-border-default bg-bg-surface text-text-primary text-sm font-medium hover:bg-bg-canvas hover:border-border-default transition-all shadow-sm\"\n                    >\n                      <MicrosoftIcon className=\"w-5 h-5\" />\n                      {tr(\n                        \"auth.login.signInWithMicrosoft\",\n                        \"Sign in with Microsoft\",\n                      )}\n                    </button>\n                  )}\n                </div>\n              )}\n            </div>\n          </div>\n        )}\n\n        {/* Email Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"email\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.login.emailLabel\", \"Email\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <EmailIcon className=\"w-5 h-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"email\"\n              type=\"text\"\n              autoComplete=\"email username\"\n              required\n              value={formData.email}\n              onChange={(e) =>\n                setFormData({ ...formData, email: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-4 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\"auth.login.emailPlaceholder\", \"you@example.com\")}\n            />\n          </div>\n        </div>\n\n        {/* Password Input */}\n        <div className=\"space-y-2\">\n          <label\n            htmlFor=\"password\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)]\"\n          >\n            {tr(\"auth.login.passwordLabel\", \"Password\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3.5 flex items-center pointer-events-none\">\n              <LockIcon className=\"w-5 h-5 text-[var(--color-text-tertiary)]\" />\n            </div>\n            <input\n              id=\"password\"\n              type={showPassword ? \"text\" : \"password\"}\n              autoComplete=\"current-password\"\n              required\n              value={formData.password}\n              onChange={(e) =>\n                setFormData({ ...formData, password: e.target.value })\n              }\n              className=\"block w-full pl-[3.5rem] pr-12 py-3 rounded-xl border border-[var(--color-border-default)] bg-[var(--color-bg-surface)] text-[var(--color-text-primary)] placeholder:text-[var(--color-text-tertiary)] focus:outline-none focus:ring-2 focus:ring-action-primary-bg/20 focus:border-action-primary-bg transition-all\"\n              placeholder={tr(\n                \"auth.login.passwordPlaceholder\",\n                \"Enter your password\",\n              )}\n            />\n            <button\n              type=\"button\"\n              onClick={() => setShowPassword(!showPassword)}\n              aria-label={showPassword ? \"Hide password\" : \"Show password\"}\n              className=\"absolute inset-y-0 right-0 pr-3.5 flex items-center text-[var(--color-text-tertiary)] hover:text-[var(--color-text-secondary)] transition-colors\"\n            >\n              {showPassword ? (\n                <EyeOffIcon className=\"w-5 h-5\" />\n              ) : (\n                <EyeIcon className=\"w-5 h-5\" />\n              )}\n            </button>\n          </div>\n        </div>\n\n        {/* Remember & Forgot */}\n        <div className=\"flex items-center justify-between\">\n          <label className=\"flex items-center gap-2 cursor-pointer group\">\n            <div className=\"relative\">\n              <input\n                type=\"checkbox\"\n                checked={formData.rememberMe}\n                onChange={(e) => {\n                  const isChecked = e.target.checked;\n                  setFormData({ ...formData, rememberMe: isChecked });\n\n                  // Clear saved email immediately when unchecked\n                  if (!isChecked) {\n                    try {\n                      localStorage.removeItem(\"remembered_email\");\n                    } catch (error) {\n                      console.warn(\n                        \"[LoginPage] Failed to clear remembered email:\",\n                        error,\n                      );\n                    }\n                  }\n                }}\n                className=\"sr-only peer\"\n              />\n              <div className=\"w-5 h-5 rounded-md border-2 border-[var(--color-border-default)] bg-[var(--color-bg-surface)] peer-checked:bg-status-info-bg-subtle0 peer-checked:border-action-primary-bg transition-all peer-focus:ring-2 peer-focus:ring-action-primary-bg/20\">\n                <svg\n                  className=\"w-full h-full text-white opacity-0 peer-checked:opacity-100 transition-opacity p-0.5\"\n                  fill=\"none\"\n                  viewBox=\"0 0 24 24\"\n                  stroke=\"currentColor\"\n                  strokeWidth={3}\n                >\n                  <path\n                    strokeLinecap=\"round\"\n                    strokeLinejoin=\"round\"\n                    d=\"M5 13l4 4L19 7\"\n                  />\n                </svg>\n              </div>\n            </div>\n            <span className=\"text-sm text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)] transition-colors\">\n              {tr(\"auth.login.rememberMe\", \"Remember me\")}\n            </span>\n          </label>\n          <button\n            type=\"button\"\n            onClick={() => navigate(\"/auth/reset-password\")}\n            className=\"text-sm font-medium text-text-link hover:text-text-linkHover transition-colors\"\n          >\n            {tr(\"auth.login.forgotPassword\", \"Forgot password?\")}\n          </button>\n        </div>\n\n        {/* Submit Button */}\n        <button\n          type=\"submit\"\n          disabled={isLoading || isCompletingAuth}\n          className=\"auth-primary-button flex w-full items-center justify-center gap-2 px-4 py-3 font-semibold\"\n        >\n          {isLoading || isCompletingAuth ? (\n            <>\n              <SpinnerIcon className=\"w-5 h-5 animate-spin\" />\n              <span>\n                {isCompletingAuth\n                  ? tr(\n                      \"auth.login.settingUpWorkspace\",\n                      \"Setting up workspace...\",\n                    )\n                  : tr(\"auth.login.signingIn\", \"Signing in...\")}\n              </span>\n            </>\n          ) : (\n            tr(\"auth.login.signIn\", \"Sign in\")\n          )}\n        </button>\n      </form>\n\n      {/* Divider */}\n      <div className=\"relative my-8\">\n        <div className=\"absolute inset-0 flex items-center\">\n          <div className=\"w-full border-t border-[var(--color-border-default)]\" />\n        </div>\n        <div className=\"relative flex justify-center\">\n          <span className=\"px-4 bg-[var(--color-bg-canvas)] text-sm text-[var(--color-text-tertiary)]\">\n            {tr(\"auth.login.orContinueWith\", \"or continue with\")}\n          </span>\n        </div>\n      </div>\n\n      {/* OAuth Error */}\n      {oauthError && (\n        <div className=\"flex items-start gap-3 p-4 rounded-xl border bg-status-error-bg-subtle border-status-error-border\">\n          <AlertIcon className=\"w-5 h-5 flex-shrink-0 mt-0.5 text-status-error-text\" />\n          <p className=\"text-sm text-status-error-text\">{oauthError}</p>\n        </div>\n      )}\n\n      {/* OAuth Buttons */}\n      <div className=\"grid grid-cols-3 gap-3\">\n        {oauthProviders.map((provider) => (\n          <button\n            key={provider.name}\n            type=\"button\"\n            onClick={provider.onClick}\n            disabled={provider.disabled}\n            title={provider.tooltip}\n            className={`flex items-center justify-center gap-2 px-4 py-3 rounded-xl border transition-all duration-200 group ${\n              provider.disabled\n                ? \"border-[var(--color-border-subtle)] bg-[var(--color-bg-disabled)] cursor-not-allowed opacity-50\"\n                : \"border-[var(--color-border-default)] bg-[var(--color-bg-surface)] hover:bg-[var(--color-bg-sunken)] hover:border-[var(--color-border-strong)]\"\n            }`}\n          >\n            <provider.icon\n              className={`w-5 h-5 ${provider.disabled ? \"opacity-50\" : \"\"}`}\n            />\n            <span\n              className={`sr-only sm:not-sr-only text-sm font-medium transition-colors hidden sm:inline ${\n                provider.disabled\n                  ? \"text-[var(--color-text-disabled)]\"\n                  : \"text-[var(--color-text-secondary)] group-hover:text-[var(--color-text-primary)]\"\n              }`}\n            >\n              {provider.name}\n            </span>\n          </button>\n        ))}\n      </div>\n\n      {/* Enterprise SSO Option */}\n      <div className=\"mt-6\">\n        <button\n          onClick={() => navigate(\"/auth/sso/login\")}\n          className=\"w-full flex items-center justify-center gap-3 px-4 py-3 rounded-xl border-2 border-dashed border-[var(--color-border-default)] hover:border-action-primary-bg bg-[var(--color-bg-surface)] hover:bg-status-info-bg-subtle transition-all duration-200 group\"\n        >\n          <svg\n            className=\"w-5 h-5 text-[var(--color-text-tertiary)] group-hover:text-text-link\"\n            fill=\"none\"\n            viewBox=\"0 0 24 24\"\n            stroke=\"currentColor\"\n          >\n            <path\n              strokeLinecap=\"round\"\n              strokeLinejoin=\"round\"\n              strokeWidth={1.5}\n              d=\"M19 21V5a2 2 0 00-2-2H7a2 2 0 00-2 2v16m14 0h2m-2 0h-5m-9 0H3m2 0h5M9 7h1m-1 4h1m4-4h1m-1 4h1m-5 10v-5a1 1 0 011-1h2a1 1 0 011 1v5m-4 0h4\"\n            />\n          </svg>\n          <span className=\"text-sm font-medium text-[var(--color-text-secondary)] group-hover:text-text-link\">\n            {tr(\"auth.login.enterpriseSso\", \"Sign in with Enterprise SSO\")}\n          </span>\n        </button>\n      </div>\n\n      {/* Magic Link Option */}\n      <div className=\"mt-4 text-center\">\n        <button\n          onClick={() => navigate(\"/auth/magic-link\")}\n          className=\"text-sm text-[var(--color-text-secondary)] hover:text-[var(--color-text-primary)] transition-colors\"\n        >\n          {tr(\"auth.login.preferPasswordless\", \"Prefer passwordless login?\")}{\" \"}\n          <span className=\"font-semibold text-text-link hover:text-text-linkHover\">\n            {tr(\"auth.login.signInMagicLink\", \"Sign in with Magic Link\")}\n          </span>\n        </button>\n      </div>\n\n      {/* Sign Up Link */}\n      <p className=\"mt-6 text-center text-sm text-[var(--color-text-secondary)]\">\n        {tr(\"auth.login.dontHaveAccount\", \"Don't have an account?\")}{\" \"}\n        <button\n          onClick={() => navigate(\"/auth/register\")}\n          className=\"font-semibold text-text-link hover:text-text-linkHover transition-colors\"\n        >\n          {tr(\"auth.login.signUp\", \"Sign up\")}\n        </button>\n      </p>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmCA,SAAS,GAAoB,GAAwB;AACnD,KAAI;EACF,IAAM,IAAM,EAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,EAC/D,IAAS,EAAI,OAAO,KAAK,KAAK,EAAI,SAAS,EAAE,GAAG,GAAG,IAAI,EACvD,IAAU,KAAK,MAAM,KAAK,EAAO,CAAC;AACxC,SAAO,OAAO,EAAQ,OAAQ,YAAY,EAAQ,MAAM,KAAK,KAAK,GAAG;SAC/D;AACN,SAAO;;;AAIX,SAAS,GAAyB,GAAwC;AACxE,KAAI,CAAC,EAAU,QAAO;AACtB,KAAI;EAEF,IAAM,IAAM,IAAI,IADA,mBAAmB,EAAS,EACf,OAAO,SAAS,OAAO;AAEpD,SADI,EAAI,WAAW,OAAO,SAAS,SAC5B,GAAG,EAAI,WAAW,EAAI,SAAS,EAAI,SADQ;SAE5C;AACN,SAAO;;;AAQX,SAAgB,IAAY;CAC1B,IAAM,IAAW,IAAa,EACxB,IAAW,IAAa,EACxB,CAAC,KAAgB,IAAiB,EAClC,EAAE,SAAM,IAAS,EACjB,IAAK,GACR,GAAa,MAA6B;EACzC,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAEzC,CAAC,EAAE,CACJ,EACK,EAAE,YAAQ,cAAW,UAAO,cAAW,2BAC3C,GAAmB,EACf,EAAE,yBAAqB,GAAiB,EACxC,EAAE,iBAAc,uBAAoB,IAAkB,EACtD,EAAE,yBAAqB,4BAAwB,4BACnD,GAAoB,EAChB,IAAc,GAAc,MAAU,EAAM,YAAY,EACxD,EAAE,kBAAkB,OAAqB,IAAc,EACvD,CAAC,GAAkB,KAAuB,EAAS,GAAM,EACzD,CAAC,IAAkB,MAAuB,EAAS,GAAM,EAEzD,IAAqB,GACxB,MAAiB;AAChB,MAAI,OAAO,SAAW,KAAa;AACjC,OAAI;AACF,mBAAe,QAAQ,2BAA2B,EAAK;WACjD;AAGR,UAAO,SAAS,OAAO,EAAK;AAC5B;;AAEF,IAAS,EAAK;IAEhB,CAAC,EAAS,CACX,EACK,CAAC,GAAc,MAAmB,EAAS,GAAM,EACjD,CAAC,GAAmB,KAAwB,EAAS,GAAM,EAC3D,CAAC,IAAkB,KAAuB,EAAS,GAAM,EACzD,CAAC,IAAoB,KAAyB,EAAS,GAAM,EAC7D,CAAC,GAAoB,KAAyB,EAAS,GAAM,EAC7D,CAAC,GAAoB,KAAyB,EAAS,GAAM,EAC7D,CAAC,GAAyB,KAA8B,EAAS,GAAM,EACvE,CAAC,IAAe,KAAoB,EAAS,GAAM,EACnD,CAAC,GAAY,KAAiB,EAAwB,KAAK,EAC3D,CAAC,GAAa,MAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAU,KAAe,EAE9B;EACA,OAAO;EACP,UAAU;EACV,YAAY;EACb,CAAC,EACI,CAAC,GAAiB,KAAsB,EAAwB,KAAK,EACrE,CAAC,IAAoB,KAAyB,EAAS,GAAM,EAG7D,IAAmB,EAAa,IAAI,OAAO,KAAK,eAChD,IAAW,EAAa,IAAI,WAAW,EACvC,IAAqB,GAAsB,EAAS;AAsD1D,CApDA,QAAgB;AACd,EAAI,CAAC,EAAmB,WAAW,MACjC,EAAmB,UAAU;IAE9B,CAAC,EAAS,CAAC,EAEd,QAAgB;AACd,MAAI,KAAoB,EAAkB;EAE1C,IAAM,IAAY,IAAwB;AAC1C,MAAI,GAAW;GACb,IAAM,IAAS,GAAiB,EAAU,EACpC,IAAO,GAAe,EAAU;AACtC,OACE,GAAQ,eACR,KACA,GAAoB,EAAO,YAAY,EACvC;AAEA,IADA,EAAa,UAAU,CAAC,gBAAgB,EAAU,EAClD,EAAmB,GAAyB,EAAS,IAAI,IAAI;AAC7D;;;EAIJ,IAAM,IAAS,IAAmB;AAClC,EAAI,MACF,GAAoB,GAAK,EACzB,OAAO,SAAS,QAAQ,EAAO;IAEhC;EAAC;EAAkB;EAAkB;EAAoB;EAAS,CAAC,EAGtE,QAAgB;AACd,MAAI;AAEF,gBAAa,WAAW,sBAAsB;GAE9C,IAAM,IAAkB,aAAa,QAAQ,mBAAmB;AAEhE,GAAI,KACF,GAAa,OAAU;IACrB,GAAG;IACH,OAAO;IACP,YAAY;IACb,EAAE;WAEE,GAAO;AACd,WAAQ,KAAK,gDAAgD,EAAM;;IAEpE,EAAE,CAAC,EAGN,QAAgB;EACd,IAAM,IAAQ,EAAS;AAQvB,EAPI,GAAO,WACT,GAAe,EAAM,QAAQ,EAE3B,GAAO,SACT,GAAa,OAAU;GAAE,GAAG;GAAM,OAAO,EAAM;GAAO,EAAE,EAGtD,KACF,OAAO,QAAQ,aAAa,EAAE,EAAE,SAAS,MAAM;IAEhD,CAAC,EAAS,MAAM,CAAC;CAKpB,IAAM,MACJ,GACA,MAOU;AAEV,MAAI,EACF,SAAQ,GAAR;GACE,KAAK,kBACH,QAAO;GACT,KAAK,oBACH,QAAO;GACT,KAAK,qBACH,QAAO;GACT,KAAK,mBACH,QAAO;GACT,KAAK,qBACH,QAAO;GACT,QACE;;AAKN,MAAI,CAAC,EAAK,QAAO;EACjB,IAAM,IAAW,EAAI,aAAa;AAgClC,SA7BE,EAAS,SAAS,UAAU,IAC5B,EAAS,SAAS,sBAAsB,GAEjC,YAEL,EAAS,SAAS,YAAY,GACzB,cAGP,EAAS,SAAS,iBAAiB,IACnC,EAAS,SAAS,aAAa,IAC/B,EAAS,SAAS,aAAa,GAExB,eAGP,EAAS,SAAS,WAAW,IAC7B,EAAS,SAAS,cAAc,IAChC,EAAS,SAAS,aAAa,GAExB,aAGP,EAAS,SAAS,oBAAoB,IACtC,EAAS,SAAS,qBAAqB,IACvC,EAAS,SAAS,qBAAqB,GAEhC,uBAEF;;AA0BT,CAtBA,QAAgB;EACd,IAAM,IAAe,EAAa,IAAI,QAAQ;AAO9C,MANI,KACF,GAAa,OAAU;GAAE,GAAG;GAAM,OAAO;GAAc,EAAE,EAIzC,EAAa,IAAI,UAAU,KAC3B,QAAQ;AACxB,MACE,EACE,6BACA,kDACD,CACF;GAED,IAAM,IAAS,OAAO,SAAS;AAC/B,UAAO,QAAQ,aAAa,EAAE,EAAE,SAAS,OAAO,EAAO;;IAExD,CAAC,GAAc,EAAG,CAAC,EAGtB,QAAgB;AACd,EAAI,KACF,EAAS,mBAAmB;IAE7B,CAAC,GAAa,EAAS,CAAC;CAE3B,IAAM,KAAe,OAAO,MAAuB;AASjD,EARA,EAAE,gBAAgB,EAClB,EAAqB,GAAM,EAC3B,EAAoB,GAAM,EAC1B,EAAsB,GAAM,EAC5B,EAAsB,GAAM,EAC5B,EAAsB,GAAM,EAC5B,EAAsB,GAAM,EAC5B,EAAiB,GAAM,EACvB,EAAmB,KAAK;EAGxB,IAAM,KAAgB,EAAS,SAAS,IAAI,MAAM;AAClD,MAAI,CAAC,GAAc;AACjB,KACE,EACE,mCACA,sCACD,CACF;AACD;;AAIF,MAAI,EAAa,SAAS,IAAI,IAExB,CADe,6BACH,KAAK,EAAa,EAAE;AAClC,KACE,EAAG,2BAA2B,qCAAqC,CACpE;AACD;;AAIJ,MAAI,CAAC,EAAS,YAAY,EAAS,SAAS,SAAS,GAAG;AACtD,KACE,EAAG,4BAA4B,6BAA6B,CAC7D;AACD;;AAIF,MAAI,KACuB,IAAa,CACG,MACtC,MAAM,EAAE,MAAM,aAAa,KAAK,EAAa,aAAa,CAC5D,EACoB;AAEnB,GADA,EAAsB,GAAK,EAC3B,EAAmB,KAAK;AACxB;;AAGJ,IAAsB,GAAM;AAE5B,MAAI;GAEF,IAAM,IAAiB,MAAM,GAAiB,QAAQ,EAEhD,IAAS,MAAM,GAAO;IAC1B,OAAO;IACP,UAAU,EAAS;IACnB,YAAY,EAAS;IACrB,GAAI,IAAiB,EAAE,mBAAgB,GAAG,EAAE;IAC7C,CAAC;AAGF,OAAI,EAAO,YACT;AAIF,OAAI,EAAO,SAAS;AAClB,QAAI;KACF,IAAM,IAAY,EAAO,MAAM;AAC/B,SAAI,GAAW;MAEb,IAAM,IADW,OAAO,SAAS,SACT,SAAS,uBAAuB,GACpD,yBACA,KAAA,GACE,IAAa,IAAS,YAAY,MAAW,IAC7C,IACJ,OAAO,SAAS,aAAa,WAAW,aAAa,IACjD,IAAW,KAAK,UAAU;OAC9B,IAAI;OACJ,QAAQ,OAAO,SAAS;OACzB,CAAC;AAEF,MADA,SAAS,SAAS,UAAU,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW,kBACzG,SAAS,SAAS,kBAAkB,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW;;YAE7G;AAKR,QAAI;AACF,KAAI,EAAS,aACX,aAAa,QAAQ,oBAAoB,EAAa,GAEtD,aAAa,WAAW,mBAAmB;aAEtC,GAAO;AACd,aAAQ,KACN,sDACA,EACD;;AAGH,MAAoB,GAAK;IAEzB,IAAM,IAAoB,EAAmB,WAAW,GAClD,IAAgB,IAClB,mBAAmB,EAAkB,GACrC;AACJ,QAAI;KAGF,IAAM,IAAiB,MAAM,QAAQ,KAAqB,CACxD,GAAiB,EAAO,MAAM,EAC9B,IAAI,SAAyB,MAAY;AACvC,aAAO,iBAAiB;AACtB,SAAQ;QACN,SAAS;QACT,OAAO;QACR,CAAC;SACD,IAAK;OACR,CACH,CAAC;AAEF,KAAI,EAAe,WAGb,EAAe,cACjB,EAAa,EAAe,UAAU,GAAG,EACrC,EAAe,UAAU,kBAC3B,EAAgB,EAAe,UAAU,eAAe,GAK5D,EAAmB,EAAc,IACxB,EAAe,OAAO,SAAS,sBAAsB,GAE9D,EAAS,+BAA+B,IAGpC,EAAe,cACjB,EAAa,EAAe,UAAU,GAAG,EACrC,EAAe,UAAU,kBAC3B,EAAgB,EAAe,UAAU,eAAe,GAG5D,QAAQ,KAAK,sBAAsB,EAAe,MAAM,EACxD,EAAmB,EAAc;aAE5B,GAAe;AAGtB,KADA,QAAQ,MAAM,sCAAsC,EAAc,EAClE,EAAmB,EAAc;cACzB;AACR,OAAoB,GAAM;;;WAGvB,GAAK;GAKZ,IAAM,IAAW,aAAe,QAAQ,EAAI,UAAU,OAAO,EAAI;AACjE,GAAI,EAAS,SAAS,YAAY,IAChC,EAAmB,EAAS;GAE9B,IAAM,IAAiB,EAAa,UAAU,CAAC,WACzC,IAAY,GAAe,GAAU,EAAe;AAC1D,GAAI,MAAc,YAChB,EAAoB,GAAK,GAChB,MAAc,cACvB,EAAsB,GAAK,GAClB,MAAc,eACvB,EAAsB,GAAK,GAClB,MAAc,aACvB,EAAqB,GAAK,GACjB,MAAc,wBACvB,EAAsB,GAAK;;;AAMjC,SAAgB;AACd,MAAI,GAAO;GACT,IAAM,IAAY,GAAe,GAAO,EAAU;AAClD,GAAI,MAAc,YAChB,EAAoB,GAAK,GAChB,MAAc,cACvB,EAAsB,GAAK,GAClB,MAAc,eACvB,EAAsB,GAAK,GAClB,MAAc,aACvB,EAAqB,GAAK,GACjB,MAAc,wBACvB,EAAsB,GAAK;;IAG9B,CAAC,GAAO,EAAU,CAAC;CAKtB,IAAM,WAA0B;AAC9B,IAAc,KAAK;AACnB,MAAI;AACF,OAAqB;WACd,GAAK;AACZ,KACE,aAAe,QACX,EAAI,UACJ,EACE,iCACA,oCACD,CACN;;IAOC,WAA6B;AACjC,IAAc,KAAK;AACnB,MAAI;AACF,OAAwB;WACjB,GAAK;AACZ,KACE,aAAe,QACX,EAAI,UACJ,EACE,oCACA,uCACD,CACN;;IAOC,KAA2B,YAAY;AAE3C,EADA,EAA2B,GAAK,EAChC,EAAiB,GAAM;AACvB,MAAI;AAGF,IADe,MAAM,IADC,EAAS,SAAS,IAAI,MAAM,CACG,EAC1C,WACT,EAAiB,GAAK;WAEjB,GAAK;AACZ,WAAQ,MAAM,wCAAwC,EAAI;YAClD;AACR,KAA2B,GAAM;;IAK/B,KAAqB,EAAqB,SAAS,EACnD,IAAwB,EAAqB,YAAY,EAEzD,KAAiB;EACrB;GACE,MAAM;GACN,MAAM;GACN,SAAS;GACT,UAAU,CAAC;GACX,SAAS,KACL,KAAA,IACA,EACE,kCACA,mCACD;GACN;EACD;GACE,MAAM;GACN,MAAM;GACN,eAAe;GACf,UAAU;GACV,SAAS,EACP,kCACA,mCACD;GACF;EACD;GACE,MAAM;GACN,MAAM;GACN,SAAS;GACT,UAAU,CAAC;GACX,SAAS,IACL,KAAA,IACA,EACE,qCACA,sCACD;GACN;EACF;AAMD,QAJI,KACK,kBAAC,IAAD,EAAsB,CAAA,GAI7B,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,eAAe;EACnD,UAAU,EACR,+BACA,qCACD;YALH;GAOE,kBAAC,QAAD;IAAM,UAAU;IAAc,WAAU;cAAxC;KAEG,KACC,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,OAAD;OACE,WAAU;OACV,MAAK;OACL,SAAQ;OACR,QAAO;iBAEP,kBAAC,QAAD;QACE,eAAc;QACd,gBAAe;QACf,aAAa;QACb,GAAE;QACF,CAAA;OACE,CAAA,EACN,kBAAC,KAAD;OAAG,WAAU;iBAAiC;OAAgB,CAAA,CAC1D;;KAIP,KACC,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,yDAA0D,CAAA,EAC/E,kBAAC,KAAD;OAAG,WAAU;iBACV;OACC,CAAA,CACA;;KAIP,MACC,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD,EAAW,WAAU,yDAA0D,CAAA,EAC/E,kBAAC,OAAD;OAAK,WAAU;iBAAf;QACE,kBAAC,KAAD;SAAG,WAAU;mBACV,EACC,+BACA,qCACD;SACC,CAAA;QACJ,kBAAC,KAAD;SAAG,WAAU;mBACV,EACC,mCACA,+FACD;SACC,CAAA;SACF,EAAmB,WAAW,MAC9B,kBAAC,UAAD;SACE,MAAK;SACL,eACE,EACE,mBACE,EAAmB,WAAW,KAAY,aAC3C,CACF;SAEH,WAAU;mBATZ,CAWE,kBAAC,OAAD;UACE,WAAU;UACV,MAAK;UACL,SAAQ;UACR,QAAO;oBAEP,kBAAC,QAAD;WACE,eAAc;WACd,gBAAe;WACf,aAAa;WACb,GAAE;WACF,CAAA;UACE,CAAA,EACL,EACC,kCACA,6BACD,CACM;;QAEP;SACF;;KAIP,KAAS,CAAC,KAAmB,CAAC,MAC7B,kBAAC,OAAD;MACE,WAAW,gDACT,KAAqB,KAAsB,IACvC,6DACA;gBAJR,CAOE,kBAAC,GAAD,EACE,WAAW,gCACT,KAAqB,KAAsB,IACvC,6BACA,4BAEN,CAAA,EACF,kBAAC,OAAD;OAAK,WAAU;iBAAf;QACE,kBAAC,KAAD;SACE,WAAW,WACT,KAAqB,KAAsB,IACvC,6BACA;mBAGL,KACG,EACE,6BACA,qEACD,GACD,KACE,EACE,+BACA,0EACD,GACD,IACE,EACE,iCACA,qCACD,GACD,IACE,EACE,wBACA,8EACD,GACD,IACE,EACE,+BACA,0FACD,GACD;SACV,CAAA;QACH,KACC,kBAAC,UAAD;SACE,MAAK;SACL,eACE,EAAS,oBAAoB,EAC3B,OAAO,EAAE,OAAO,EAAS,OAAO,EACjC,CAAC;SAEJ,WAAU;mBAET,EACC,8BACA,wCACD;SACM,CAAA;QAEV,KACC,kBAAC,OAAD;SAAK,WAAU;mBACZ,KACC,kBAAC,OAAD;UAAK,WAAU;oBAAf,CACE,kBAAC,OAAD;WACE,WAAU;WACV,MAAK;WACL,SAAQ;WACR,QAAO;qBAEP,kBAAC,QAAD;YACE,eAAc;YACd,gBAAe;YACf,aAAa;YACb,GAAE;YACF,CAAA;WACE,CAAA,EACL,EACC,+BACA,oDACD,CACG;cAEN,kBAAC,UAAD;UACE,MAAK;UACL,SAAS;UACT,UAAU;UACV,WAAU;oBAET,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,wBAAyB,CAAA,EAC/C,EAAG,sBAAsB,aAAa,CACtC,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,OAAD;WACE,WAAU;WACV,MAAK;WACL,SAAQ;WACR,QAAO;qBAEP,kBAAC,QAAD;YACE,eAAc;YACd,gBAAe;YACf,aAAa;YACb,GAAE;YACF,CAAA;WACE,CAAA,EACL,EACC,iCACA,4BACD,CACA,EAAA,CAAA;UAEE,CAAA;SAEP,CAAA;QAEP,KACC,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACG,EAAqB,SAAS,IAC7B,kBAAC,UAAD;UACE,MAAK;UACL,SAAS;UACT,WAAU;oBAHZ,CAKE,kBAAC,GAAD,EAAY,WAAU,WAAY,CAAA,EACjC,EAAG,+BAA+B,sBAAsB,CAClD;aAEV,EAAqB,YAAY,IAChC,kBAAC,UAAD;UACE,MAAK;UACL,SAAS;UACT,WAAU;oBAHZ,CAKE,kBAAC,GAAD,EAAe,WAAU,WAAY,CAAA,EACpC,EACC,kCACA,yBACD,CACM;YAEP;;QAEJ;SACF;;KAIR,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,SAAQ;OACR,WAAU;iBAET,EAAG,yBAAyB,QAAQ;OAC/B,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,OAAD;QAAK,WAAU;kBACb,kBAAC,IAAD,EAAW,WAAU,6CAA8C,CAAA;QAC/D,CAAA,EACN,kBAAC,SAAD;QACE,IAAG;QACH,MAAK;QACL,cAAa;QACb,UAAA;QACA,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,OAAO,EAAE,OAAO;SAAO,CAAC;QAErD,WAAU;QACV,aAAa,EAAG,+BAA+B,kBAAkB;QACjE,CAAA,CACE;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,SAAQ;OACR,WAAU;iBAET,EAAG,4BAA4B,WAAW;OACrC,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf;QACE,kBAAC,OAAD;SAAK,WAAU;mBACb,kBAAC,IAAD,EAAU,WAAU,6CAA8C,CAAA;SAC9D,CAAA;QACN,kBAAC,SAAD;SACE,IAAG;SACH,MAAM,IAAe,SAAS;SAC9B,cAAa;SACb,UAAA;SACA,OAAO,EAAS;SAChB,WAAW,MACT,EAAY;UAAE,GAAG;UAAU,UAAU,EAAE,OAAO;UAAO,CAAC;SAExD,WAAU;SACV,aAAa,EACX,kCACA,sBACD;SACD,CAAA;QACF,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,GAAgB,CAAC,EAAa;SAC7C,cAAY,IAAe,kBAAkB;SAC7C,WAAU;mBAGR,EADD,IACE,KAEA,IAFD,EAAY,WAAU,WAAY,CAEH;SAE1B,CAAA;QACL;SACF;;KAGN,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OAAO,WAAU;iBAAjB,CACE,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,SAAD;SACE,MAAK;SACL,SAAS,EAAS;SAClB,WAAW,MAAM;UACf,IAAM,IAAY,EAAE,OAAO;AAI3B,cAHA,EAAY;WAAE,GAAG;WAAU,YAAY;WAAW,CAAC,EAG/C,CAAC,EACH,KAAI;AACF,wBAAa,WAAW,mBAAmB;mBACpC,GAAO;AACd,mBAAQ,KACN,iDACA,EACD;;;SAIP,WAAU;SACV,CAAA,EACF,kBAAC,OAAD;SAAK,WAAU;mBACb,kBAAC,OAAD;UACE,WAAU;UACV,MAAK;UACL,SAAQ;UACR,QAAO;UACP,aAAa;oBAEb,kBAAC,QAAD;WACE,eAAc;WACd,gBAAe;WACf,GAAE;WACF,CAAA;UACE,CAAA;SACF,CAAA,CACF;WACN,kBAAC,QAAD;QAAM,WAAU;kBACb,EAAG,yBAAyB,cAAc;QACtC,CAAA,CACD;UACR,kBAAC,UAAD;OACE,MAAK;OACL,eAAe,EAAS,uBAAuB;OAC/C,WAAU;iBAET,EAAG,6BAA6B,mBAAmB;OAC7C,CAAA,CACL;;KAGN,kBAAC,UAAD;MACE,MAAK;MACL,UAAU,KAAa;MACvB,WAAU;gBAET,KAAa,IACZ,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD,EAAa,WAAU,wBAAyB,CAAA,EAChD,kBAAC,QAAD,EAAA,UACG,IACG,EACE,iCACA,0BACD,GACD,EAAG,wBAAwB,gBAAgB,EAC1C,CAAA,CACN,EAAA,CAAA,GAEH,EAAG,qBAAqB,UAAU;MAE7B,CAAA;KACJ;;GAGP,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,OAAD,EAAK,WAAU,wDAAyD,CAAA;KACpE,CAAA,EACN,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,QAAD;MAAM,WAAU;gBACb,EAAG,6BAA6B,mBAAmB;MAC/C,CAAA;KACH,CAAA,CACF;;GAGL,KACC,kBAAC,OAAD;IAAK,WAAU;cAAf,CACE,kBAAC,GAAD,EAAW,WAAU,uDAAwD,CAAA,EAC7E,kBAAC,KAAD;KAAG,WAAU;eAAkC;KAAe,CAAA,CAC1D;;GAIR,kBAAC,OAAD;IAAK,WAAU;cACZ,GAAe,KAAK,MACnB,kBAAC,UAAD;KAEE,MAAK;KACL,SAAS,EAAS;KAClB,UAAU,EAAS;KACnB,OAAO,EAAS;KAChB,WAAW,wGACT,EAAS,WACL,oGACA;eATR,CAYE,kBAAC,EAAS,MAAV,EACE,WAAW,WAAW,EAAS,WAAW,eAAe,MACzD,CAAA,EACF,kBAAC,QAAD;MACE,WAAW,iFACT,EAAS,WACL,sCACA;gBAGL,EAAS;MACL,CAAA,CACA;OAvBF,EAAS,KAuBP,CACT;IACE,CAAA;GAGN,kBAAC,OAAD;IAAK,WAAU;cACb,kBAAC,UAAD;KACE,eAAe,EAAS,kBAAkB;KAC1C,WAAU;eAFZ,CAIE,kBAAC,OAAD;MACE,WAAU;MACV,MAAK;MACL,SAAQ;MACR,QAAO;gBAEP,kBAAC,QAAD;OACE,eAAc;OACd,gBAAe;OACf,aAAa;OACb,GAAE;OACF,CAAA;MACE,CAAA,EACN,kBAAC,QAAD;MAAM,WAAU;gBACb,EAAG,4BAA4B,8BAA8B;MACzD,CAAA,CACA;;IACL,CAAA;GAGN,kBAAC,OAAD;IAAK,WAAU;cACb,kBAAC,UAAD;KACE,eAAe,EAAS,mBAAmB;KAC3C,WAAU;eAFZ;MAIG,EAAG,iCAAiC,6BAA6B;MAAE;MACpE,kBAAC,QAAD;OAAM,WAAU;iBACb,EAAG,8BAA8B,0BAA0B;OACvD,CAAA;MACA;;IACL,CAAA;GAGN,kBAAC,KAAD;IAAG,WAAU;cAAb;KACG,EAAG,8BAA8B,yBAAyB;KAAE;KAC7D,kBAAC,UAAD;MACE,eAAe,EAAS,iBAAiB;MACzC,WAAU;gBAET,EAAG,qBAAqB,UAAU;MAC5B,CAAA;KACP;;GACO"}

package/dist/auth/pages/MagicLinkPage.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Magic Link authentication page
+ * Supports both sending magic links and verifying them via token
+ */
+export declare function MagicLinkPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=MagicLinkPage.d.ts.map

package/dist/auth/pages/MagicLinkPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MagicLinkPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/MagicLinkPage.tsx"],"names":[],"mappings":"AAuDA;;;GAGG;AACH,wBAAgB,aAAa,4CAuT5B"}

package/dist/auth/pages/MagicLinkPage.js

@@ -0,0 +1,219 @@
+import { useAuth as e } from "../providers/AuthProvider.js";
+import { useAuthStore as t } from "../store/authStore.js";
+import { AuthenticateMagicLinkDocument as n, SendMagicLinkDocument as r } from "../../generated/global-operations.js";
+import { AuthLayout as i } from "../components/AuthLayout.js";
+import { AlertIcon as a, CheckIcon as o, EmailIcon as s } from "../components/AuthIcons.js";
+import { useCallback as c, useEffect as l, useState as u } from "react";
+import { useNavigate as d, useSearchParams as f } from "react-router-dom";
+import { useI18n as p } from "@burdenoff/fe-libs/shared/providers/shell";
+import { jsx as m, jsxs as h } from "react/jsx-runtime";
+import { loginProfile as g } from "@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager";
+import { useMutation as _ } from "@apollo/client/react";
+import { useEventBus as v } from "@burdenoff/fe-libs/shared/events";
+//#region src/auth/pages/MagicLinkPage.tsx
+function y(e) {
+	return { ...e };
+}
+function b(e) {
+	try {
+		let t = window.location.hostname.endsWith(".local.burdenoff.com") ? ".local.burdenoff.com" : void 0, n = t ? `; domain=${t}` : "", r = window.location.protocol === "https:" ? "; secure" : "", i = JSON.stringify({
+			id: e,
+			origin: window.location.origin
+		});
+		document.cookie = `bf-sso=${encodeURIComponent(i)}${n}; path=/; samesite=lax${r}; max-age=86400`, document.cookie = `bf-sso-profile=${encodeURIComponent(i)}${n}; path=/; samesite=lax${r}; max-age=86400`;
+	} catch {}
+}
+function x() {
+	let { t: x } = p(), S = (e, t) => {
+		let n = x(e);
+		return n === e ? t : n;
+	}, C = d(), [w] = f(), T = w.get("token"), E = e(), D = v(), [O, k] = u(""), [A, j] = u(T ? "verifying" : "form"), [M, N] = u(""), [P, F] = u(!1), [I, { loading: L }] = _(r), [R] = _(n), z = c(async (e) => {
+		let n = t.getState();
+		try {
+			j("verifying"), n.setLoading(!0);
+			let { data: t } = await R({ variables: { token: e } }), r = t.authenticateMagicLink;
+			if (!r.success || !r.user) throw Error(r.error || "Authentication failed");
+			n.setUser(r.user), n.setAuthTokens(r.token ?? "", r.refreshToken ?? ""), n.setAuthenticated(!0), n.setMfaRequired(!1);
+			let i = r.expiresIn ? Date.now() + r.expiresIn * 1e3 : void 0;
+			g(y(r.user), {
+				accessToken: r.token ?? "",
+				refreshToken: r.refreshToken ?? "",
+				expiresAt: i
+			}), b(r.user.id), D.emit("auth.signed_in", {
+				userId: r.user.id,
+				tenantId: r.user.tenantId,
+				workspaceId: r.user.defaultWorkspaceId,
+				mfaEnabled: r.user.mfaEnabled,
+				emailVerified: r.user.emailVerified
+			}, { component: "MagicLinkPage" }), E.onAuthSuccess?.(r.user, r.token, r.refreshToken), j("success"), N("You have been signed in successfully!"), setTimeout(() => {
+				C("/", { replace: !0 });
+			}, 1500);
+		} catch (e) {
+			if (n.isAuthenticated && n.user) {
+				console.info("[MagicLink] Token already used but user is authenticated, redirecting..."), C("/", { replace: !0 });
+				return;
+			}
+			j("error"), N(e instanceof Error ? e.message : "Invalid or expired magic link");
+		} finally {
+			n.setLoading(!1);
+		}
+	}, [
+		R,
+		E,
+		D,
+		C
+	]);
+	return l(() => {
+		T && !P && (F(!0), z(T));
+	}, [
+		T,
+		P,
+		z
+	]), A === "verifying" ? /* @__PURE__ */ m(i, {
+		title: S("auth.magicLink.signingIn", "Signing you in..."),
+		subtitle: S("auth.magicLink.verifyingSubtitle", "Please wait while we verify your magic link"),
+		children: /* @__PURE__ */ h("div", {
+			className: "flex flex-col items-center py-8",
+			children: [/* @__PURE__ */ m("div", { className: "animate-spin rounded-full h-12 w-12 border-b-2 border-[var(--color-accent-primary)]" }), /* @__PURE__ */ m("p", {
+				className: "mt-4 text-[var(--color-text-secondary)]",
+				children: S("auth.magicLink.verifying", "Verifying magic link...")
+			})]
+		})
+	}) : A === "success" ? /* @__PURE__ */ m(i, {
+		title: S("auth.magicLink.welcomeBack", "Welcome back!"),
+		subtitle: S("auth.magicLink.signedInSuccess", "You have been signed in successfully"),
+		children: /* @__PURE__ */ h("div", {
+			className: "flex flex-col items-center py-8",
+			children: [
+				/* @__PURE__ */ m("div", {
+					className: "w-16 h-16 rounded-full bg-[var(--color-status-success-subtle)] flex items-center justify-center mb-4",
+					children: /* @__PURE__ */ m(o, { className: "w-8 h-8 text-[var(--color-status-success)]" })
+				}),
+				/* @__PURE__ */ m("p", {
+					className: "text-[var(--color-text-primary)] text-center mb-4",
+					children: M
+				}),
+				/* @__PURE__ */ m("p", {
+					className: "text-sm text-[var(--color-text-secondary)]",
+					children: S("auth.magicLink.redirecting", "Redirecting to application...")
+				})
+			]
+		})
+	}) : A === "error" ? /* @__PURE__ */ m(i, {
+		title: S("auth.magicLink.oops", "Oops!"),
+		subtitle: S("auth.magicLink.somethingWrong", "Something went wrong"),
+		children: /* @__PURE__ */ h("div", {
+			className: "flex flex-col items-center py-8",
+			children: [
+				/* @__PURE__ */ m("div", {
+					className: "w-16 h-16 rounded-full bg-[var(--color-status-error-subtle)] flex items-center justify-center mb-4",
+					children: /* @__PURE__ */ m(a, { className: "w-8 h-8 text-[var(--color-status-error)]" })
+				}),
+				/* @__PURE__ */ m("p", {
+					className: "text-[var(--color-status-error)] text-center mb-4",
+					children: M
+				}),
+				/* @__PURE__ */ m("button", {
+					onClick: () => {
+						j("form"), N("");
+					},
+					className: "px-4 py-2 rounded-lg bg-[var(--color-accent-primary)] text-white hover:bg-[var(--color-accent-primary-hover)]",
+					children: S("auth.magicLink.tryAgain", "Try again")
+				})
+			]
+		})
+	}) : A === "sent" ? /* @__PURE__ */ m(i, {
+		title: S("auth.magicLink.checkEmail", "Check your email"),
+		subtitle: S("auth.magicLink.sentMagicLink", "We've sent you a magic link"),
+		children: /* @__PURE__ */ h("div", {
+			className: "flex flex-col items-center py-8",
+			children: [
+				/* @__PURE__ */ m("div", {
+					className: "w-16 h-16 rounded-full bg-[var(--color-status-success-subtle)] flex items-center justify-center mb-4",
+					children: /* @__PURE__ */ m(s, { className: "w-8 h-8 text-[var(--color-status-success)]" })
+				}),
+				/* @__PURE__ */ m("p", {
+					className: "text-[var(--color-text-primary)] text-center mb-2",
+					children: S("auth.magicLink.sentTo", "We've sent a magic link to:")
+				}),
+				/* @__PURE__ */ m("p", {
+					className: "text-[var(--color-accent-primary)] font-medium mb-4",
+					children: O
+				}),
+				/* @__PURE__ */ m("p", {
+					className: "text-sm text-[var(--color-text-secondary)] text-center mb-6",
+					children: S("auth.magicLink.linkExpires", "Click the link in the email to sign in. The link expires in 24 hours.")
+				}),
+				/* @__PURE__ */ m("button", {
+					onClick: () => {
+						j("form"), N("");
+					},
+					className: "text-[var(--color-accent-primary)] hover:underline",
+					children: S("auth.magicLink.differentEmail", "Use a different email")
+				})
+			]
+		})
+	}) : /* @__PURE__ */ m(i, {
+		title: S("auth.magicLink.title", "Sign in with Magic Link"),
+		subtitle: S("auth.magicLink.subtitle", "No password needed - we'll email you a link"),
+		children: /* @__PURE__ */ h("form", {
+			onSubmit: async (e) => {
+				if (e.preventDefault(), !O) {
+					N(S("auth.magicLink.enterEmail", "Please enter your email address"));
+					return;
+				}
+				try {
+					let { data: e } = await I({ variables: { email: O } });
+					e.sendMagicLink.success ? (j("sent"), N(e.sendMagicLink.message || "Magic link sent! Check your email.")) : N(e.sendMagicLink.message || "Failed to send magic link");
+				} catch (e) {
+					N(e instanceof Error ? e.message : "Failed to send magic link");
+				}
+			},
+			className: "space-y-6",
+			children: [
+				/* @__PURE__ */ h("div", { children: [/* @__PURE__ */ m("label", {
+					htmlFor: "email",
+					className: "block text-sm font-medium text-[var(--color-text-primary)] mb-2",
+					children: S("auth.magicLink.emailLabel", "Email address")
+				}), /* @__PURE__ */ h("div", {
+					className: "relative",
+					children: [/* @__PURE__ */ m("div", {
+						className: "absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none",
+						children: /* @__PURE__ */ m(s, { className: "h-5 w-5 text-[var(--color-text-secondary)]" })
+					}), /* @__PURE__ */ m("input", {
+						id: "email",
+						type: "email",
+						value: O,
+						onChange: (e) => k(e.target.value),
+						placeholder: "you@example.com",
+						className: "block w-full pl-[3.25rem] pr-4 py-3 border border-[var(--color-border-primary)] rounded-lg bg-[var(--color-background-base)] text-[var(--color-text-primary)] placeholder-[var(--color-text-secondary)] focus:outline-none focus:ring-2 focus:ring-[var(--color-accent-primary)] focus:border-transparent",
+						required: !0
+					})]
+				})] }),
+				M && /* @__PURE__ */ m("p", {
+					className: "text-sm text-[var(--color-status-error)]",
+					children: M
+				}),
+				/* @__PURE__ */ m("button", {
+					type: "submit",
+					disabled: L,
+					className: "w-full py-3 px-4 rounded-lg bg-[var(--color-accent-primary)] text-white font-medium hover:bg-[var(--color-accent-primary-hover)] focus:outline-none focus:ring-2 focus:ring-[var(--color-accent-primary)] focus:ring-offset-2 disabled:opacity-50 disabled:cursor-not-allowed transition-colors",
+					children: L ? S("auth.magicLink.sending", "Sending...") : S("auth.magicLink.sendButton", "Send Magic Link")
+				}),
+				/* @__PURE__ */ m("div", {
+					className: "text-center",
+					children: /* @__PURE__ */ m("button", {
+						type: "button",
+						onClick: () => C("/auth/login"),
+						className: "text-sm text-[var(--color-accent-primary)] hover:underline",
+						children: S("auth.magicLink.passwordInstead", "Sign in with password instead")
+					})
+				})
+			]
+		})
+	});
+}
+//#endregion
+export { x as MagicLinkPage };
+
+//# sourceMappingURL=MagicLinkPage.js.map

package/dist/auth/pages/MagicLinkPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MagicLinkPage.js","names":[],"sources":["../../../src/auth/pages/MagicLinkPage.tsx"],"sourcesContent":["import { useState, useEffect, useCallback } from \"react\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useNavigate, useSearchParams } from \"react-router-dom\";\nimport { useMutation } from \"@apollo/client/react\";\nimport { useEventBus } from \"@burdenoff/fe-libs/shared/events\";\nimport {\n  loginProfile,\n  type ProfileUser,\n} from \"@burdenoff/fe-libs/shared/providers/shell/ProfileStorageManager\";\nimport { AuthLayout } from \"../components/AuthLayout\";\nimport { EmailIcon, CheckIcon, AlertIcon } from \"../components/AuthIcons\";\nimport { useAuthStore } from \"../store/authStore\";\nimport { useAuth } from \"../providers/AuthProvider\";\nimport type { MagicLinkSendResult, AuthResult, User } from \"../types\";\n\nfunction toProfileUser(user: User): ProfileUser {\n  return { ...user };\n}\n\nfunction setShellSsoCookie(userId: string): void {\n  try {\n    const hostname = window.location.hostname;\n    const domain = hostname.endsWith(\".local.burdenoff.com\")\n      ? \".local.burdenoff.com\"\n      : undefined;\n    const domainPart = domain ? `; domain=${domain}` : \"\";\n    const securePart = window.location.protocol === \"https:\" ? \"; secure\" : \"\";\n    const ssoValue = JSON.stringify({\n      id: userId,\n      origin: window.location.origin,\n    });\n    document.cookie = `bf-sso=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n    document.cookie = `bf-sso-profile=${encodeURIComponent(ssoValue)}${domainPart}; path=/; samesite=lax${securePart}; max-age=86400`;\n  } catch {\n    // Best effort only.\n  }\n}\n\nimport {\n  SendMagicLinkDocument,\n  AuthenticateMagicLinkDocument,\n} from \"../../generated/global-operations\";\n// Response types for GraphQL mutations\ninterface SendMagicLinkResponse {\n  sendMagicLink: MagicLinkSendResult;\n}\n\ninterface AuthenticateMagicLinkResponse {\n  authenticateMagicLink: AuthResult;\n}\n\n// GraphQL Operations\n\ntype PageStatus = \"form\" | \"sent\" | \"verifying\" | \"success\" | \"error\";\n\n/**\n * Magic Link authentication page\n * Supports both sending magic links and verifying them via token\n */\nexport function MagicLinkPage() {\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const translated = t(key);\n    return translated === key ? fallback : translated;\n  };\n\n  const navigate = useNavigate();\n  const [searchParams] = useSearchParams();\n  const token = searchParams.get(\"token\");\n  const context = useAuth();\n  const eventBus = useEventBus();\n\n  const [email, setEmail] = useState(\"\");\n  const [status, setStatus] = useState<PageStatus>(\n    token ? \"verifying\" : \"form\",\n  );\n  const [message, setMessage] = useState(\"\");\n  const [hasVerified, setHasVerified] = useState(false);\n\n  const [sendMagicLink, { loading: sendLoading }] =\n    useMutation<SendMagicLinkResponse>(SendMagicLinkDocument);\n  const [authenticateMagicLink] = useMutation<AuthenticateMagicLinkResponse>(\n    AuthenticateMagicLinkDocument,\n  );\n\n  const handleVerifyToken = useCallback(\n    async (tokenValue: string) => {\n      const store = useAuthStore.getState();\n\n      try {\n        setStatus(\"verifying\");\n        store.setLoading(true);\n\n        const { data } = await authenticateMagicLink({\n          variables: { token: tokenValue },\n        });\n        const result = data!.authenticateMagicLink;\n\n        if (!result.success || !result.user) {\n          throw new Error(result.error || \"Authentication failed\");\n        }\n\n        store.setUser(result.user);\n        store.setAuthTokens(result.token ?? \"\", result.refreshToken ?? \"\");\n        store.setAuthenticated(true);\n        store.setMfaRequired(false);\n\n        const expiresAt = result.expiresIn\n          ? Date.now() + result.expiresIn * 1000\n          : undefined;\n        loginProfile(toProfileUser(result.user), {\n          accessToken: result.token ?? \"\",\n          refreshToken: result.refreshToken ?? \"\",\n          expiresAt,\n        });\n        setShellSsoCookie(result.user.id);\n\n        eventBus.emit(\n          \"auth.signed_in\",\n          {\n            userId: result.user.id,\n            tenantId: result.user.tenantId,\n            workspaceId: result.user.defaultWorkspaceId,\n            mfaEnabled: result.user.mfaEnabled,\n            emailVerified: result.user.emailVerified,\n          },\n          { component: \"MagicLinkPage\" },\n        );\n\n        context.onAuthSuccess?.(result.user, result.token, result.refreshToken);\n\n        setStatus(\"success\");\n        setMessage(\"You have been signed in successfully!\");\n\n        // Redirect to dashboard after successful authentication\n        setTimeout(() => {\n          navigate(\"/\", { replace: true });\n        }, 1500);\n      } catch (err) {\n        // If user is already authenticated (token was already used), redirect to dashboard\n        if (store.isAuthenticated && store.user) {\n          console.info(\n            \"[MagicLink] Token already used but user is authenticated, redirecting...\",\n          );\n          navigate(\"/\", { replace: true });\n          return;\n        }\n\n        setStatus(\"error\");\n        const errorMessage =\n          err instanceof Error ? err.message : \"Invalid or expired magic link\";\n        setMessage(errorMessage);\n      } finally {\n        store.setLoading(false);\n      }\n    },\n    [authenticateMagicLink, context, eventBus, navigate],\n  );\n\n  // Handle token verification on page load (only once)\n  useEffect(() => {\n    if (token && !hasVerified) {\n      setHasVerified(true);\n      handleVerifyToken(token);\n    }\n  }, [token, hasVerified, handleVerifyToken]);\n\n  const handleSendMagicLink = async (e: React.FormEvent) => {\n    e.preventDefault();\n\n    if (!email) {\n      setMessage(\n        tr(\"auth.magicLink.enterEmail\", \"Please enter your email address\"),\n      );\n      return;\n    }\n\n    try {\n      const { data } = await sendMagicLink({ variables: { email } });\n\n      if (data!.sendMagicLink.success) {\n        setStatus(\"sent\");\n        setMessage(\n          data!.sendMagicLink.message || \"Magic link sent! Check your email.\",\n        );\n      } else {\n        setMessage(data!.sendMagicLink.message || \"Failed to send magic link\");\n      }\n    } catch (err) {\n      const errorMessage =\n        err instanceof Error ? err.message : \"Failed to send magic link\";\n      setMessage(errorMessage);\n    }\n  };\n\n  // Verifying state\n  if (status === \"verifying\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.magicLink.signingIn\", \"Signing you in...\")}\n        subtitle={tr(\n          \"auth.magicLink.verifyingSubtitle\",\n          \"Please wait while we verify your magic link\",\n        )}\n      >\n        <div className=\"flex flex-col items-center py-8\">\n          <div className=\"animate-spin rounded-full h-12 w-12 border-b-2 border-[var(--color-accent-primary)]\" />\n          <p className=\"mt-4 text-[var(--color-text-secondary)]\">\n            {tr(\"auth.magicLink.verifying\", \"Verifying magic link...\")}\n          </p>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Success state\n  if (status === \"success\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.magicLink.welcomeBack\", \"Welcome back!\")}\n        subtitle={tr(\n          \"auth.magicLink.signedInSuccess\",\n          \"You have been signed in successfully\",\n        )}\n      >\n        <div className=\"flex flex-col items-center py-8\">\n          <div className=\"w-16 h-16 rounded-full bg-[var(--color-status-success-subtle)] flex items-center justify-center mb-4\">\n            <CheckIcon className=\"w-8 h-8 text-[var(--color-status-success)]\" />\n          </div>\n          <p className=\"text-[var(--color-text-primary)] text-center mb-4\">\n            {message}\n          </p>\n          <p className=\"text-sm text-[var(--color-text-secondary)]\">\n            {tr(\"auth.magicLink.redirecting\", \"Redirecting to application...\")}\n          </p>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Error state\n  if (status === \"error\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.magicLink.oops\", \"Oops!\")}\n        subtitle={tr(\"auth.magicLink.somethingWrong\", \"Something went wrong\")}\n      >\n        <div className=\"flex flex-col items-center py-8\">\n          <div className=\"w-16 h-16 rounded-full bg-[var(--color-status-error-subtle)] flex items-center justify-center mb-4\">\n            <AlertIcon className=\"w-8 h-8 text-[var(--color-status-error)]\" />\n          </div>\n          <p className=\"text-[var(--color-status-error)] text-center mb-4\">\n            {message}\n          </p>\n          <button\n            onClick={() => {\n              setStatus(\"form\");\n              setMessage(\"\");\n            }}\n            className=\"px-4 py-2 rounded-lg bg-[var(--color-accent-primary)] text-white hover:bg-[var(--color-accent-primary-hover)]\"\n          >\n            {tr(\"auth.magicLink.tryAgain\", \"Try again\")}\n          </button>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Sent state\n  if (status === \"sent\") {\n    return (\n      <AuthLayout\n        title={tr(\"auth.magicLink.checkEmail\", \"Check your email\")}\n        subtitle={tr(\n          \"auth.magicLink.sentMagicLink\",\n          \"We've sent you a magic link\",\n        )}\n      >\n        <div className=\"flex flex-col items-center py-8\">\n          <div className=\"w-16 h-16 rounded-full bg-[var(--color-status-success-subtle)] flex items-center justify-center mb-4\">\n            <EmailIcon className=\"w-8 h-8 text-[var(--color-status-success)]\" />\n          </div>\n          <p className=\"text-[var(--color-text-primary)] text-center mb-2\">\n            {tr(\"auth.magicLink.sentTo\", \"We've sent a magic link to:\")}\n          </p>\n          <p className=\"text-[var(--color-accent-primary)] font-medium mb-4\">\n            {email}\n          </p>\n          <p className=\"text-sm text-[var(--color-text-secondary)] text-center mb-6\">\n            {tr(\n              \"auth.magicLink.linkExpires\",\n              \"Click the link in the email to sign in. The link expires in 24 hours.\",\n            )}\n          </p>\n          <button\n            onClick={() => {\n              setStatus(\"form\");\n              setMessage(\"\");\n            }}\n            className=\"text-[var(--color-accent-primary)] hover:underline\"\n          >\n            {tr(\"auth.magicLink.differentEmail\", \"Use a different email\")}\n          </button>\n        </div>\n      </AuthLayout>\n    );\n  }\n\n  // Form state\n  return (\n    <AuthLayout\n      title={tr(\"auth.magicLink.title\", \"Sign in with Magic Link\")}\n      subtitle={tr(\n        \"auth.magicLink.subtitle\",\n        \"No password needed - we'll email you a link\",\n      )}\n    >\n      <form onSubmit={handleSendMagicLink} className=\"space-y-6\">\n        <div>\n          <label\n            htmlFor=\"email\"\n            className=\"block text-sm font-medium text-[var(--color-text-primary)] mb-2\"\n          >\n            {tr(\"auth.magicLink.emailLabel\", \"Email address\")}\n          </label>\n          <div className=\"relative\">\n            <div className=\"absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none\">\n              <EmailIcon className=\"h-5 w-5 text-[var(--color-text-secondary)]\" />\n            </div>\n            <input\n              id=\"email\"\n              type=\"email\"\n              value={email}\n              onChange={(e) => setEmail(e.target.value)}\n              placeholder=\"you@example.com\"\n              className=\"block w-full pl-[3.25rem] pr-4 py-3 border border-[var(--color-border-primary)] rounded-lg bg-[var(--color-background-base)] text-[var(--color-text-primary)] placeholder-[var(--color-text-secondary)] focus:outline-none focus:ring-2 focus:ring-[var(--color-accent-primary)] focus:border-transparent\"\n              required\n            />\n          </div>\n        </div>\n\n        {message && (\n          <p className=\"text-sm text-[var(--color-status-error)]\">{message}</p>\n        )}\n\n        <button\n          type=\"submit\"\n          disabled={sendLoading}\n          className=\"w-full py-3 px-4 rounded-lg bg-[var(--color-accent-primary)] text-white font-medium hover:bg-[var(--color-accent-primary-hover)] focus:outline-none focus:ring-2 focus:ring-[var(--color-accent-primary)] focus:ring-offset-2 disabled:opacity-50 disabled:cursor-not-allowed transition-colors\"\n        >\n          {sendLoading\n            ? tr(\"auth.magicLink.sending\", \"Sending...\")\n            : tr(\"auth.magicLink.sendButton\", \"Send Magic Link\")}\n        </button>\n\n        <div className=\"text-center\">\n          <button\n            type=\"button\"\n            onClick={() => navigate(\"/auth/login\")}\n            className=\"text-sm text-[var(--color-accent-primary)] hover:underline\"\n          >\n            {tr(\n              \"auth.magicLink.passwordInstead\",\n              \"Sign in with password instead\",\n            )}\n          </button>\n        </div>\n      </form>\n    </AuthLayout>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,SAAS,EAAc,GAAyB;AAC9C,QAAO,EAAE,GAAG,GAAM;;AAGpB,SAAS,EAAkB,GAAsB;AAC/C,KAAI;EAEF,IAAM,IADW,OAAO,SAAS,SACT,SAAS,uBAAuB,GACpD,yBACA,KAAA,GACE,IAAa,IAAS,YAAY,MAAW,IAC7C,IAAa,OAAO,SAAS,aAAa,WAAW,aAAa,IAClE,IAAW,KAAK,UAAU;GAC9B,IAAI;GACJ,QAAQ,OAAO,SAAS;GACzB,CAAC;AAEF,EADA,SAAS,SAAS,UAAU,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW,kBACzG,SAAS,SAAS,kBAAkB,mBAAmB,EAAS,GAAG,EAAW,wBAAwB,EAAW;SAC3G;;AA0BV,SAAgB,IAAgB;CAC9B,IAAM,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAa,EAAE,EAAI;AACzB,SAAO,MAAe,IAAM,IAAW;IAGnC,IAAW,GAAa,EACxB,CAAC,KAAgB,GAAiB,EAClC,IAAQ,EAAa,IAAI,QAAQ,EACjC,IAAU,GAAS,EACnB,IAAW,GAAa,EAExB,CAAC,GAAO,KAAY,EAAS,GAAG,EAChC,CAAC,GAAQ,KAAa,EAC1B,IAAQ,cAAc,OACvB,EACK,CAAC,GAAS,KAAc,EAAS,GAAG,EACpC,CAAC,GAAa,KAAkB,EAAS,GAAM,EAE/C,CAAC,GAAe,EAAE,SAAS,OAC/B,EAAmC,EAAsB,EACrD,CAAC,KAAyB,EAC9B,EACD,EAEK,IAAoB,EACxB,OAAO,MAAuB;EAC5B,IAAM,IAAQ,EAAa,UAAU;AAErC,MAAI;AAEF,GADA,EAAU,YAAY,EACtB,EAAM,WAAW,GAAK;GAEtB,IAAM,EAAE,YAAS,MAAM,EAAsB,EAC3C,WAAW,EAAE,OAAO,GAAY,EACjC,CAAC,EACI,IAAS,EAAM;AAErB,OAAI,CAAC,EAAO,WAAW,CAAC,EAAO,KAC7B,OAAU,MAAM,EAAO,SAAS,wBAAwB;AAM1D,GAHA,EAAM,QAAQ,EAAO,KAAK,EAC1B,EAAM,cAAc,EAAO,SAAS,IAAI,EAAO,gBAAgB,GAAG,EAClE,EAAM,iBAAiB,GAAK,EAC5B,EAAM,eAAe,GAAM;GAE3B,IAAM,IAAY,EAAO,YACrB,KAAK,KAAK,GAAG,EAAO,YAAY,MAChC,KAAA;AA0BJ,GAzBA,EAAa,EAAc,EAAO,KAAK,EAAE;IACvC,aAAa,EAAO,SAAS;IAC7B,cAAc,EAAO,gBAAgB;IACrC;IACD,CAAC,EACF,EAAkB,EAAO,KAAK,GAAG,EAEjC,EAAS,KACP,kBACA;IACE,QAAQ,EAAO,KAAK;IACpB,UAAU,EAAO,KAAK;IACtB,aAAa,EAAO,KAAK;IACzB,YAAY,EAAO,KAAK;IACxB,eAAe,EAAO,KAAK;IAC5B,EACD,EAAE,WAAW,iBAAiB,CAC/B,EAED,EAAQ,gBAAgB,EAAO,MAAM,EAAO,OAAO,EAAO,aAAa,EAEvE,EAAU,UAAU,EACpB,EAAW,wCAAwC,EAGnD,iBAAiB;AACf,MAAS,KAAK,EAAE,SAAS,IAAM,CAAC;MAC/B,KAAK;WACD,GAAK;AAEZ,OAAI,EAAM,mBAAmB,EAAM,MAAM;AAIvC,IAHA,QAAQ,KACN,2EACD,EACD,EAAS,KAAK,EAAE,SAAS,IAAM,CAAC;AAChC;;AAMF,GAHA,EAAU,QAAQ,EAGlB,EADE,aAAe,QAAQ,EAAI,UAAU,gCACf;YAChB;AACR,KAAM,WAAW,GAAM;;IAG3B;EAAC;EAAuB;EAAS;EAAU;EAAS,CACrD;AAwJD,QArJA,QAAgB;AACd,EAAI,KAAS,CAAC,MACZ,EAAe,GAAK,EACpB,EAAkB,EAAM;IAEzB;EAAC;EAAO;EAAa;EAAkB,CAAC,EA+BvC,MAAW,cAEX,kBAAC,GAAD;EACE,OAAO,EAAG,4BAA4B,oBAAoB;EAC1D,UAAU,EACR,oCACA,8CACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,OAAD,EAAK,WAAU,uFAAwF,CAAA,EACvG,kBAAC,KAAD;IAAG,WAAU;cACV,EAAG,4BAA4B,0BAA0B;IACxD,CAAA,CACA;;EACK,CAAA,GAKb,MAAW,YAEX,kBAAC,GAAD;EACE,OAAO,EAAG,8BAA8B,gBAAgB;EACxD,UAAU,EACR,kCACA,uCACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD,EAAW,WAAU,8CAA+C,CAAA;KAChE,CAAA;IACN,kBAAC,KAAD;KAAG,WAAU;eACV;KACC,CAAA;IACJ,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,8BAA8B,gCAAgC;KAChE,CAAA;IACA;;EACK,CAAA,GAKb,MAAW,UAEX,kBAAC,GAAD;EACE,OAAO,EAAG,uBAAuB,QAAQ;EACzC,UAAU,EAAG,iCAAiC,uBAAuB;YAErE,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD,EAAW,WAAU,4CAA6C,CAAA;KAC9D,CAAA;IACN,kBAAC,KAAD;KAAG,WAAU;eACV;KACC,CAAA;IACJ,kBAAC,UAAD;KACE,eAAe;AAEb,MADA,EAAU,OAAO,EACjB,EAAW,GAAG;;KAEhB,WAAU;eAET,EAAG,2BAA2B,YAAY;KACpC,CAAA;IACL;;EACK,CAAA,GAKb,MAAW,SAEX,kBAAC,GAAD;EACE,OAAO,EAAG,6BAA6B,mBAAmB;EAC1D,UAAU,EACR,gCACA,8BACD;YAED,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD,EAAW,WAAU,8CAA+C,CAAA;KAChE,CAAA;IACN,kBAAC,KAAD;KAAG,WAAU;eACV,EAAG,yBAAyB,8BAA8B;KACzD,CAAA;IACJ,kBAAC,KAAD;KAAG,WAAU;eACV;KACC,CAAA;IACJ,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,8BACA,wEACD;KACC,CAAA;IACJ,kBAAC,UAAD;KACE,eAAe;AAEb,MADA,EAAU,OAAO,EACjB,EAAW,GAAG;;KAEhB,WAAU;eAET,EAAG,iCAAiC,wBAAwB;KACtD,CAAA;IACL;;EACK,CAAA,GAMf,kBAAC,GAAD;EACE,OAAO,EAAG,wBAAwB,0BAA0B;EAC5D,UAAU,EACR,2BACA,8CACD;YAED,kBAAC,QAAD;GAAM,UAtJkB,OAAO,MAAuB;AAGxD,QAFA,EAAE,gBAAgB,EAEd,CAAC,GAAO;AACV,OACE,EAAG,6BAA6B,kCAAkC,CACnE;AACD;;AAGF,QAAI;KACF,IAAM,EAAE,YAAS,MAAM,EAAc,EAAE,WAAW,EAAE,UAAO,EAAE,CAAC;AAE9D,KAAI,EAAM,cAAc,WACtB,EAAU,OAAO,EACjB,EACE,EAAM,cAAc,WAAW,qCAChC,IAED,EAAW,EAAM,cAAc,WAAW,4BAA4B;aAEjE,GAAK;AAGZ,OADE,aAAe,QAAQ,EAAI,UAAU,4BACf;;;GA8Ha,WAAU;aAA/C;IACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,SAAD;KACE,SAAQ;KACR,WAAU;eAET,EAAG,6BAA6B,gBAAgB;KAC3C,CAAA,EACR,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD;MAAK,WAAU;gBACb,kBAAC,GAAD,EAAW,WAAU,8CAA+C,CAAA;MAChE,CAAA,EACN,kBAAC,SAAD;MACE,IAAG;MACH,MAAK;MACL,OAAO;MACP,WAAW,MAAM,EAAS,EAAE,OAAO,MAAM;MACzC,aAAY;MACZ,WAAU;MACV,UAAA;MACA,CAAA,CACE;OACF,EAAA,CAAA;IAEL,KACC,kBAAC,KAAD;KAAG,WAAU;eAA4C;KAAY,CAAA;IAGvE,kBAAC,UAAD;KACE,MAAK;KACL,UAAU;KACV,WAAU;eAET,IACG,EAAG,0BAA0B,aAAa,GAC1C,EAAG,6BAA6B,kBAAkB;KAC/C,CAAA;IAET,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,UAAD;MACE,MAAK;MACL,eAAe,EAAS,cAAc;MACtC,WAAU;gBAET,EACC,kCACA,gCACD;MACM,CAAA;KACL,CAAA;IACD;;EACI,CAAA"}

package/dist/auth/pages/MfaSetupPage.d.ts

@@ -0,0 +1,5 @@
+/**
+ * MFA setup and management page with professional UI
+ */
+export declare function MfaSetupPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=MfaSetupPage.d.ts.map

package/dist/auth/pages/MfaSetupPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaSetupPage.d.ts","sourceRoot":"","sources":["../../../src/auth/pages/MfaSetupPage.tsx"],"names":[],"mappings":"AAcA;;GAEG;AACH,wBAAgB,YAAY,4CAuf3B"}