@entropy-softworks/ui 2026.7.31

package/lib/screens/auth/LoginScreen.jsx

@@ -0,0 +1,326 @@
+import React, { useEffect, useRef, useState } from "react";
+import { ScrollView, View } from "react-native";
+import { SafeAreaView } from "react-native-safe-area-context";
+import { useNavigation } from "../../context/NavigationContext";
+import { StatusBar } from "expo-status-bar";
+import { Ionicons } from "@expo/vector-icons";
+import { useColorScheme } from "nativewind";
+import * as Haptics from "expo-haptics";
+import { Heading, MutedText, Text } from "../../components/text";
+import { Button, IconButton } from "../../components/button";
+import { Card, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, } from "../../components/card";
+import { EmailInput, PasswordInput } from "../../components/input";
+import { Dialog, DialogButton, DialogFooter } from "../../components/dialog";
+import { SeparatorWithText } from "../../components/separator";
+import { useAuth } from "../../hooks/useAuth";
+import { ApiError } from "../../utils/http-error";
+import { validateEmail } from "../../utils/validation";
+import { useShakeAnimation } from "../../hooks/useShakeAnimation";
+import ShakeField from "../../forms/shake-field";
+import FormError from "../../forms/form-error";
+import { useAppConfig } from "../../context/AppConfigContext";
+const SCROLL_CONTENT_STYLE = { flexGrow: 1 };
+export function LoginScreen({ topAccessory, socialAuth, passwordPlaceholder = "Enter your password", passwordLabel = "Password", passkeyEnabled = false, passkeyUnlockPlaceholder = "Enter your master password", passkeyUnlockTitle = "Unlock your vault", passkeyUnlockDescription = "Signed in successfully. This passkey can't unlock the vault on its own — enter your master password to decrypt your data.", } = {}) {
+    const { login: authLogin, loginWithPasskey, unlockWithPassword } = useAuth();
+    const router = useNavigation();
+    const { appName, Logo, routes } = useAppConfig();
+    const [email, setEmail] = useState("");
+    const [password, setPassword] = useState("");
+    const [isLoading, setIsLoading] = useState(false);
+    const [errors, setErrors] = useState({});
+    // Passkey ceremony state machine.
+    //   "idle"            — default; primary CTA is the email/password form.
+    //   "passkey-loading" — passkey ceremony is in flight.
+    //   "passkey-unlock"  — server accepted the assertion but the
+    //                       authenticator did not honor PRF; collect the
+    //                       master password to complete local unlock.
+    const [passkeyStep, setPasskeyStep] = useState("idle");
+    const [unlockPassword, setUnlockPassword] = useState("");
+    const [unlockError, setUnlockError] = useState("");
+    const [pendingOnboardingStep, setPendingOnboardingStep] = useState(null);
+    // Abort an in-flight passkey ceremony on unmount so the OS prompt
+    // tears down and the resolved credential doesn't land on a stale
+    // setState. Ref + cleanup so navigating away mid-ceremony is clean.
+    const passkeyAbortRef = useRef(null);
+    useEffect(() => () => {
+        passkeyAbortRef.current?.abort();
+    }, []);
+    const { colorScheme } = useColorScheme();
+    const isDark = colorScheme === "dark";
+    const emailShake = useShakeAnimation();
+    const passwordShake = useShakeAnimation();
+    const firstError = errors.email ?? errors.password;
+    const validateForm = () => {
+        const newErrors = {};
+        if (!email) {
+            newErrors.email = "Email is required";
+        }
+        else if (!validateEmail(email)) {
+            newErrors.email = "Please enter a valid email";
+        }
+        if (!password) {
+            newErrors.password = "Password is required";
+        }
+        else if (password.length < 8) {
+            newErrors.password = "Password must be at least 8 characters";
+        }
+        return newErrors;
+    };
+    const performLogin = async () => {
+        setIsLoading(true);
+        try {
+            await authLogin(email.trim().toLowerCase(), password);
+            setPassword("");
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Success);
+        }
+        catch (error) {
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+            const errorMessage = error instanceof Error ? error.message : "Login failed";
+            // Prefer the server's machine-readable `error.code` over
+            // substring-matching the English message — i18n on the server
+            // (or a wording tweak) silently broke the old branches.
+            const code = error instanceof ApiError ? error.code : undefined;
+            // Codes the server emits today. Unknown / missing codes fall
+            // through to the generic "show the server's message" branch.
+            if (code === "INVALID_CREDENTIALS") {
+                setErrors({ password: "Invalid email or password" });
+                emailShake.shake();
+                passwordShake.shake();
+            }
+            else if (code === "ACCOUNT_LOCKED") {
+                setErrors({ email: "Account is locked. Please contact support." });
+                emailShake.shake();
+            }
+            else {
+                setErrors({ password: errorMessage });
+                passwordShake.shake();
+            }
+        }
+        finally {
+            setIsLoading(false);
+        }
+    };
+    const handleLogin = async () => {
+        const newErrors = validateForm();
+        if (Object.keys(newErrors).length > 0) {
+            setErrors(newErrors);
+            if (newErrors.email) {
+                emailShake.shake();
+            }
+            if (newErrors.password) {
+                passwordShake.shake();
+            }
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+            return;
+        }
+        setErrors({});
+        await performLogin();
+    };
+    const routeAfterUnlock = (onboardingStep) => {
+        if (onboardingStep === "email_verification") {
+            router.replace({ pathname: routes.verifyEmail, params: { email } });
+        }
+        else if (onboardingStep === "mfa_enrollment") {
+            router.replace(routes.mfaEnroll);
+        }
+        else if (onboardingStep === "import") {
+            router.replace(routes.importData);
+        }
+        else {
+            // `complete`, null, undefined, or any unknown step the client
+            // doesn't recognise — the consumer's route guard re-evaluates
+            // and bounces to welcome / the right step if the server says
+            // onboarding isn't done. Default to home rather than stranding
+            // the user.
+            router.replace(routes.home);
+        }
+    };
+    const handlePasskeyLogin = async () => {
+        setPasskeyStep("passkey-loading");
+        setErrors({});
+        // Abort any prior ceremony before starting a new one so a
+        // double-tap doesn't race two outstanding credentials.get() calls.
+        passkeyAbortRef.current?.abort();
+        const controller = new AbortController();
+        passkeyAbortRef.current = controller;
+        try {
+            const trimmedEmail = email.trim().toLowerCase();
+            const result = await loginWithPasskey(trimmedEmail.length > 0 ? trimmedEmail : undefined, controller.signal);
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Success);
+            if (result.unlocked) {
+                setPasskeyStep("idle");
+                routeAfterUnlock(result.user.onboarding_step);
+                return;
+            }
+            setPendingOnboardingStep(result.user.onboarding_step ?? null);
+            setPasskeyStep("passkey-unlock");
+        }
+        catch (error) {
+            // Distinguish user-cancel / programmatic-abort from real
+            // failures. `NotAllowedError` (user cancel, timeout) and
+            // `AbortError` (signal abort) shouldn't paint a destructive
+            // error on the password field — the user knows they cancelled.
+            // Real failures (`SecurityError`, `UnknownError`, network) do
+            // want the inline message + shake so the user falls back to
+            // password.
+            const name = error instanceof Error ? error.name : undefined;
+            const isBenign = name === "NotAllowedError" || name === "AbortError";
+            if (!isBenign) {
+                await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+                const message = error instanceof Error ? error.message : "Passkey sign-in failed";
+                setErrors({ password: message });
+            }
+            setPasskeyStep("idle");
+        }
+    };
+    const handleUnlockAfterPasskey = async () => {
+        if (!unlockPassword) {
+            setUnlockError("Master password is required");
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+            return;
+        }
+        setIsLoading(true);
+        try {
+            await unlockWithPassword(unlockPassword);
+            setUnlockPassword("");
+            setUnlockError("");
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Success);
+            routeAfterUnlock(pendingOnboardingStep ?? "complete");
+            setPasskeyStep("idle");
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "Failed to unlock the vault. Check your password.";
+            setUnlockError(message);
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+        }
+        finally {
+            setIsLoading(false);
+        }
+    };
+    return (<>
+      <SafeAreaView className="flex-1 bg-background">
+        <StatusBar style={isDark ? "light" : "dark"}/>
+        <ScrollView className="flex-1" contentContainerStyle={SCROLL_CONTENT_STYLE} keyboardShouldPersistTaps="handled" showsVerticalScrollIndicator={false}>
+          <View className="flex-1 justify-between px-6">
+            <View className="mt-4">
+              <IconButton variant="ghost" onPress={() => router.push(routes.welcome)} className="self-start" accessibilityLabel="Go back" accessibilityRole="button">
+                <Ionicons name="arrow-back" size={24} color={isDark ? "#FFFFFF" : "#000000"}/>
+              </IconButton>
+            </View>
+            {topAccessory}
+
+            <View className="flex-1 items-center justify-center">
+              <View className="mb-6 items-center">
+                <View className="flex-row items-center">
+                  <Logo width={72} height={72} style={{ marginRight: -2 }}/>
+                  <Heading className="text-4xl">{appName}</Heading>
+                </View>
+              </View>
+
+              <Card className="w-full max-w-[360px]">
+                <CardHeader>
+                  <CardTitle>Sign In</CardTitle>
+                  <CardDescription>Enter your credentials to sign in to {appName}</CardDescription>
+                </CardHeader>
+
+                <CardContent className="gap-4">
+                  {/* Passkey CTA above email/password — passkeys are
+            the preferred primary factor when the device has
+            one enrolled. Email is optional; when blank the
+            server emits a discoverable-credential challenge
+            and the platform UI picks the account. */}
+                  {passkeyEnabled ? (<>
+                      <Button variant="outline" className="w-full" onPress={handlePasskeyLogin} isLoading={passkeyStep === "passkey-loading"} accessibilityLabel="Sign in with passkey" accessibilityRole="button" accessibilityHint="Use a passkey from this device to sign in" testID="login-passkey-button">
+                        <View className="flex-row items-center justify-center">
+                          <Ionicons name="key-outline" size={20} color={isDark ? "#FFFFFF" : "#000000"} className="mr-2"/>
+                          <Text className="text-base font-medium">Sign in with passkey</Text>
+                        </View>
+                      </Button>
+                      <SeparatorWithText />
+                    </>) : null}
+
+                  <ShakeField shake={emailShake} label="Email">
+                    <EmailInput value={email} onChangeText={(text) => {
+            setEmail(text);
+            if (errors.email) {
+                setErrors({ ...errors, email: undefined });
+            }
+        }} autoFocus invalid={!!errors.email} autoComplete="email" accessibilityLabel="Email address" testID="login-email-input"/>
+                  </ShakeField>
+
+                  <ShakeField shake={passwordShake} label={passwordLabel}>
+                    <PasswordInput value={password} onChangeText={(text) => {
+            setPassword(text);
+            if (errors.password) {
+                setErrors({ ...errors, password: undefined });
+            }
+        }} placeholder={passwordPlaceholder} invalid={!!errors.password} autoComplete="password" returnKeyType="done" onSubmitEditing={handleLogin} accessibilityLabel={passwordLabel} testID="login-password-input"/>
+                  </ShakeField>
+
+                  <View className="items-end">
+                    <Text className="font-mono text-sm underline" onPress={() => router.push(routes.forgotPassword)} accessibilityRole="link" accessibilityLabel="Forgot password">
+                      Forgot password?
+                    </Text>
+                  </View>
+                </CardContent>
+
+                <CardFooter className="flex-col gap-3 border-t-0">
+                  <MutedText className="text-center text-sm">
+                    Don&apos;t have an account?{" "}
+                    <Text className="text-sm text-foreground underline" onPress={() => router.push(routes.register)} accessibilityRole="link" accessibilityLabel="Sign up">
+                      Sign Up
+                    </Text>
+                  </MutedText>
+
+                  <FormError message={firstError}/>
+
+                  <Button className="w-full" onPress={handleLogin} isLoading={isLoading} accessibilityLabel="Sign in" accessibilityRole="button" accessibilityHint="Double tap to sign in with your credentials" testID="login-submit">
+                    Sign In
+                  </Button>
+
+                  {socialAuth ? (<>
+                      <SeparatorWithText />
+                      {socialAuth}
+                    </>) : null}
+                </CardFooter>
+              </Card>
+            </View>
+
+            <View className="mb-6"/>
+          </View>
+        </ScrollView>
+      </SafeAreaView>
+
+      {/* Passkey unlock dialog — shown only when the authenticator
+            did NOT honor the PRF extension. The session is already
+            established server-side; this prompt gathers the master
+            password so the consumer's `unlockWithPassword` handler can
+            derive the symmetric key locally before routing. */}
+      <Dialog visible={passkeyStep === "passkey-unlock"} onClose={() => {
+            setPasskeyStep("idle");
+            setUnlockPassword("");
+            setUnlockError("");
+        }} draggable dismissOnBackdrop={false}>
+        <View className="mb-5 items-center">
+          <View className={`mb-4 h-14 w-14 items-center justify-center rounded-full ${isDark ? "bg-white/10" : "bg-black/5"}`}>
+            <Ionicons name="lock-open-outline" size={28} color={isDark ? "#FFFFFF" : "#000000"}/>
+          </View>
+          <Heading className="mb-2 text-xl">{passkeyUnlockTitle}</Heading>
+          <Text className="mb-3 text-center text-sm leading-5">{passkeyUnlockDescription}</Text>
+          <PasswordInput value={unlockPassword} onChangeText={(text) => {
+            setUnlockPassword(text);
+            if (unlockError) {
+                setUnlockError("");
+            }
+        }} placeholder={passkeyUnlockPlaceholder} error={unlockError} autoComplete="password" returnKeyType="done" onSubmitEditing={handleUnlockAfterPasskey} accessibilityLabel="Master password" testID="login-passkey-unlock-input"/>
+        </View>
+        <DialogFooter style={{ justifyContent: "center" }}>
+          <DialogButton variant="primary" onPress={isLoading ? () => { } : handleUnlockAfterPasskey} accessibilityLabel="Unlock" accessibilityRole="button">
+            {isLoading ? "Unlocking…" : "Unlock"}
+          </DialogButton>
+        </DialogFooter>
+      </Dialog>
+    </>);
+}
+export default LoginScreen;
+//# sourceMappingURL=LoginScreen.jsx.map

package/lib/screens/auth/LoginScreen.jsx.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginScreen.jsx","sourceRoot":"","sources":["../../../src/screens/auth/LoginScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACL,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,UAAU,MAAM,yBAAyB,CAAC;AACjD,OAAO,SAAS,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAE9D,MAAM,oBAAoB,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAW,CAAC;AAqCtD,MAAM,UAAU,WAAW,CAAC,EAC1B,YAAY,EACZ,UAAU,EACV,mBAAmB,GAAG,qBAAqB,EAC3C,aAAa,GAAG,UAAU,EAC1B,cAAc,GAAG,KAAK,EACtB,wBAAwB,GAAG,4BAA4B,EACvD,kBAAkB,GAAG,mBAAmB,EACxC,wBAAwB,GAAG,2HAA2H,MAClI,EAAE;IACtB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAEjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAwC,EAAE,CAAC,CAAC;IAChF,kCAAkC;IAClC,yEAAyE;IACzE,uDAAuD;IACvD,8DAA8D;IAC9D,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAC5C,MAAM,CACP,CAAC;IACF,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExF,kEAAkE;IAClE,iEAAiE;IACjE,oEAAoE;IACpE,MAAM,eAAe,GAAG,MAAM,CAAyB,IAAI,CAAC,CAAC;IAC7D,SAAS,CACP,GAAG,EAAE,CAAC,GAAG,EAAE;QACT,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC,EACD,EAAE,CACH,CAAC;IAEF,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,KAAK,MAAM,CAAC;IAEtC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC;IAEnD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,MAAM,SAAS,GAAkB,EAAE,CAAC;QAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS,CAAC,KAAK,GAAG,mBAAmB,CAAC;QACxC,CAAC;aAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,SAAS,CAAC,KAAK,GAAG,4BAA4B,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS,CAAC,QAAQ,GAAG,sBAAsB,CAAC;QAC9C,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,QAAQ,GAAG,wCAAwC,CAAC;QAChE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtD,WAAW,CAAC,EAAE,CAAC,CAAC;YAChB,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YAC7E,yDAAyD;YACzD,8DAA8D;YAC9D,wDAAwD;YACxD,MAAM,IAAI,GAAG,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAEhE,6DAA6D;YAC7D,6DAA6D;YAC7D,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACnC,SAAS,CAAC,EAAE,QAAQ,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACrD,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;iBAAM,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACrC,SAAS,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBACnE,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;gBACtC,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,SAAS,CAAC,SAAS,CAAC,CAAC;YACrB,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;gBACpB,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,aAAa,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,SAAS,CAAC,EAAE,CAAC,CAAC;QAEd,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,cAA8B,EAAE,EAAE;QAC1D,IAAI,cAAc,KAAK,oBAAoB,EAAE,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAU,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,cAAc,KAAK,gBAAgB,EAAE,CAAC;YAC/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,8DAA8D;YAC9D,8DAA8D;YAC9D,6DAA6D;YAC7D,+DAA+D;YAC/D,YAAY;YACZ,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,IAAI,EAAE;QACpC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAClC,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,0DAA0D;QAC1D,mEAAmE;QACnE,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,eAAe,CAAC,OAAO,GAAG,UAAU,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAClD,UAAU,CAAC,MAAM,CAClB,CAAC;YACF,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;YAE1E,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,cAAc,CAAC,MAAM,CAAC,CAAC;gBACvB,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yDAAyD;YACzD,yDAAyD;YACzD,4DAA4D;YAC5D,+DAA+D;YAC/D,8DAA8D;YAC9D,4DAA4D;YAC5D,YAAY;YACZ,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,MAAM,QAAQ,GAAG,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,YAAY,CAAC;YACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;gBAClF,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,KAAK,IAAI,EAAE;QAC1C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,6BAA6B,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,cAAc,CAAC,CAAC;YACzC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACtB,cAAc,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;YAC1E,gBAAgB,CAAC,qBAAqB,IAAI,UAAU,CAAC,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kDAAkD,CAAC;YAC9F,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,EACE;MAAA,CAAC,YAAY,CAAC,SAAS,CAAC,sBAAsB,CAC5C;QAAA,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAC5C;QAAA,CAAC,UAAU,CACT,SAAS,CAAC,QAAQ,CAClB,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,CAC5C,yBAAyB,CAAC,SAAS,CACnC,4BAA4B,CAAC,CAAC,KAAK,CAAC,CAEpC;UAAA,CAAC,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAC3C;YAAA,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB;cAAA,CAAC,UAAU,CACT,OAAO,CAAC,OAAO,CACf,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC3C,SAAS,CAAC,YAAY,CACtB,kBAAkB,CAAC,SAAS,CAC5B,iBAAiB,CAAC,QAAQ,CAE1B;gBAAA,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAC9E;cAAA,EAAE,UAAU,CACd;YAAA,EAAE,IAAI,CACN;YAAA,CAAC,YAAY,CAEb;;YAAA,CAAC,IAAI,CAAC,SAAS,CAAC,oCAAoC,CAClD;cAAA,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CACjC;gBAAA,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CACrC;kBAAA,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EACxD;kBAAA,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAClD;gBAAA,EAAE,IAAI,CACR;cAAA,EAAE,IAAI,CAEN;;cAAA,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CACpC;gBAAA,CAAC,UAAU,CACT;kBAAA,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAC7B;kBAAA,CAAC,eAAe,CAAC,qCAAqC,CAAC,OAAO,CAAC,EAAE,eAAe,CAClF;gBAAA,EAAE,UAAU,CAEZ;;gBAAA,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAC5B;kBAAA,CAAC;;;;qDAI4C,CAC7C;kBAAA,CAAC,cAAc,CAAC,CAAC,CAAC,CAChB,EACE;sBAAA,CAAC,MAAM,CACL,OAAO,CAAC,SAAS,CACjB,SAAS,CAAC,QAAQ,CAClB,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAC5B,SAAS,CAAC,CAAC,WAAW,KAAK,iBAAiB,CAAC,CAC7C,kBAAkB,CAAC,sBAAsB,CACzC,iBAAiB,CAAC,QAAQ,CAC1B,iBAAiB,CAAC,2CAA2C,CAC7D,MAAM,CAAC,sBAAsB,CAE7B;wBAAA,CAAC,IAAI,CAAC,SAAS,CAAC,sCAAsC,CACpD;0BAAA,CAAC,QAAQ,CACP,IAAI,CAAC,aAAa,CAClB,IAAI,CAAC,CAAC,EAAE,CAAC,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CACtC,SAAS,CAAC,MAAM,EAElB;0BAAA,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,oBAAoB,EAAE,IAAI,CACpE;wBAAA,EAAE,IAAI,CACR;sBAAA,EAAE,MAAM,CACR;sBAAA,CAAC,iBAAiB,CAAC,AAAD,EACpB;oBAAA,GAAG,CACJ,CAAC,CAAC,CAAC,IAAI,CAER;;kBAAA,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAC1C;oBAAA,CAAC,UAAU,CACT,KAAK,CAAC,CAAC,KAAK,CAAC,CACb,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CACF,SAAS,CACT,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACxB,YAAY,CAAC,OAAO,CACpB,kBAAkB,CAAC,eAAe,CAClC,MAAM,CAAC,mBAAmB,EAE9B;kBAAA,EAAE,UAAU,CAEZ;;kBAAA,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,CACrD;oBAAA,CAAC,aAAa,CACZ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAChB,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,WAAW,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CACF,WAAW,CAAC,CAAC,mBAAmB,CAAC,CACjC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC3B,YAAY,CAAC,UAAU,CACvB,aAAa,CAAC,MAAM,CACpB,eAAe,CAAC,CAAC,WAAW,CAAC,CAC7B,kBAAkB,CAAC,CAAC,aAAa,CAAC,CAClC,MAAM,CAAC,sBAAsB,EAEjC;kBAAA,EAAE,UAAU,CAEZ;;kBAAA,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CACzB;oBAAA,CAAC,IAAI,CACH,SAAS,CAAC,6BAA6B,CACvC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAClD,iBAAiB,CAAC,MAAM,CACxB,kBAAkB,CAAC,iBAAiB,CAEpC;;oBACF,EAAE,IAAI,CACR;kBAAA,EAAE,IAAI,CACR;gBAAA,EAAE,WAAW,CAEb;;gBAAA,CAAC,UAAU,CAAC,SAAS,CAAC,2BAA2B,CAC/C;kBAAA,CAAC,SAAS,CAAC,SAAS,CAAC,qBAAqB,CACxC;+CAA2B,CAAC,GAAG,CAC/B;oBAAA,CAAC,IAAI,CACH,SAAS,CAAC,mCAAmC,CAC7C,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAC5C,iBAAiB,CAAC,MAAM,CACxB,kBAAkB,CAAC,SAAS,CAE5B;;oBACF,EAAE,IAAI,CACR;kBAAA,EAAE,SAAS,CAEX;;kBAAA,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,EAE/B;;kBAAA,CAAC,MAAM,CACL,SAAS,CAAC,QAAQ,CAClB,OAAO,CAAC,CAAC,WAAW,CAAC,CACrB,SAAS,CAAC,CAAC,SAAS,CAAC,CACrB,kBAAkB,CAAC,SAAS,CAC5B,iBAAiB,CAAC,QAAQ,CAC1B,iBAAiB,CAAC,6CAA6C,CAC/D,MAAM,CAAC,cAAc,CAErB;;kBACF,EAAE,MAAM,CAER;;kBAAA,CAAC,UAAU,CAAC,CAAC,CAAC,CACZ,EACE;sBAAA,CAAC,iBAAiB,CAAC,AAAD,EAClB;sBAAA,CAAC,UAAU,CACb;oBAAA,GAAG,CACJ,CAAC,CAAC,CAAC,IAAI,CACV;gBAAA,EAAE,UAAU,CACd;cAAA,EAAE,IAAI,CACR;YAAA,EAAE,IAAI,CAEN;;YAAA,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EACxB;UAAA,EAAE,IAAI,CACR;QAAA,EAAE,UAAU,CACd;MAAA,EAAE,YAAY,CAEd;;MAAA,CAAC;;;;+DAIsD,CACvD;MAAA,CAAC,MAAM,CACL,OAAO,CAAC,CAAC,WAAW,KAAK,gBAAgB,CAAC,CAC1C,OAAO,CAAC,CAAC,GAAG,EAAE;YACZ,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACtB,cAAc,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC,CACF,SAAS,CACT,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAEzB;QAAA,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CACjC;UAAA,CAAC,IAAI,CACH,SAAS,CAAC,CAAC,2DAA2D,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAE9G;YAAA,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EACrF;UAAA,EAAE,IAAI,CACN;UAAA,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAC/D;UAAA,CAAC,IAAI,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CACrF;UAAA,CAAC,aAAa,CACZ,KAAK,CAAC,CAAC,cAAc,CAAC,CACtB,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,WAAW,EAAE,CAAC;gBAChB,cAAc,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CACF,WAAW,CAAC,CAAC,wBAAwB,CAAC,CACtC,KAAK,CAAC,CAAC,WAAW,CAAC,CACnB,YAAY,CAAC,UAAU,CACvB,aAAa,CAAC,MAAM,CACpB,eAAe,CAAC,CAAC,wBAAwB,CAAC,CAC1C,kBAAkB,CAAC,iBAAiB,CACpC,MAAM,CAAC,4BAA4B,EAEvC;QAAA,EAAE,IAAI,CACN;QAAA,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAChD;UAAA,CAAC,YAAY,CACX,OAAO,CAAC,SAAS,CACjB,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CACzD,kBAAkB,CAAC,QAAQ,CAC3B,iBAAiB,CAAC,QAAQ,CAE1B;YAAA,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CACtC;UAAA,EAAE,YAAY,CAChB;QAAA,EAAE,YAAY,CAChB;MAAA,EAAE,MAAM,CACV;IAAA,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,eAAe,WAAW,CAAC"}

package/lib/screens/auth/MfaChallengeScreen.d.ts

@@ -0,0 +1,4 @@
+import React from "react";
+export declare function MfaChallengeScreen(): React.JSX.Element;
+export default MfaChallengeScreen;
+//# sourceMappingURL=MfaChallengeScreen.d.ts.map

package/lib/screens/auth/MfaChallengeScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaChallengeScreen.d.ts","sourceRoot":"","sources":["../../../src/screens/auth/MfaChallengeScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAaxC,wBAAgB,kBAAkB,sBAwMjC;AAED,eAAe,kBAAkB,CAAC"}

package/lib/screens/auth/MfaChallengeScreen.jsx

@@ -0,0 +1,139 @@
+import React, { useState } from "react";
+import { ActivityIndicator, Platform, Pressable, Text, TextInput, View } from "react-native";
+import { SafeAreaView } from "react-native-safe-area-context";
+import { useNavigation } from "../../context/NavigationContext";
+import { StatusBar } from "expo-status-bar";
+import { Ionicons } from "@expo/vector-icons";
+import { useColorScheme } from "nativewind";
+import * as Haptics from "expo-haptics";
+import AuthService from "../../services/auth.service";
+import { useAppConfig } from "../../context/AppConfigContext";
+import { getErrorMessage } from "../../utils/error";
+export function MfaChallengeScreen() {
+    const { colorScheme } = useColorScheme();
+    const isDark = colorScheme === "dark";
+    const router = useNavigation();
+    const { routes } = useAppConfig();
+    const [code, setCode] = useState("");
+    const [isLoading, setIsLoading] = useState(false);
+    const [error, setError] = useState("");
+    const [isRecoveryMode, setIsRecoveryMode] = useState(false);
+    const handleVerify = async () => {
+        // Re-entry guard: a fast double-tap (button + onSubmitEditing)
+        // would otherwise re-issue verifyMfa before `setIsLoading(true)`
+        // had time to flow through React and disable the submit. Each
+        // verify burns a one-shot TOTP attempt server-side; cheaper to
+        // gate at the client.
+        if (isLoading) {
+            return;
+        }
+        const trimmed = code.trim();
+        if (!isRecoveryMode && trimmed.length !== 6) {
+            setError("Please enter a 6-digit code");
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+            return;
+        }
+        if (isRecoveryMode && trimmed.length === 0) {
+            setError("Please enter a recovery code");
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+            return;
+        }
+        setIsLoading(true);
+        setError("");
+        try {
+            await AuthService.verifyMfa(trimmed);
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Success);
+            router.replace(routes.home);
+        }
+        catch (err) {
+            setError(getErrorMessage(err, "Invalid code"));
+            setCode("");
+            await Haptics.notificationAsync(Haptics.NotificationFeedbackType.Error);
+        }
+        finally {
+            setIsLoading(false);
+        }
+    };
+    const toggleRecoveryMode = () => {
+        setIsRecoveryMode(!isRecoveryMode);
+        setCode("");
+        setError("");
+    };
+    const inputStyle = {
+        borderWidth: 1,
+        borderColor: error ? "#EF4444" : isDark ? "#333333" : "#E5E5E5",
+        borderRadius: 8,
+        paddingHorizontal: 12,
+        paddingVertical: Platform.OS === "ios" ? 12 : 8,
+        backgroundColor: isDark ? "#0A0A0A" : "#FAFAFA",
+    };
+    return (<SafeAreaView className="flex-1" style={{ backgroundColor: isDark ? "#000000" : "#FFFFFF" }}>
+      <StatusBar style={isDark ? "light" : "dark"}/>
+      <View className="flex-1 items-center justify-center px-6">
+        <View className="w-full max-w-[360px]">
+          <View className="items-center mb-6">
+            <Ionicons name="shield-checkmark-outline" size={48} color={isDark ? "#FFFFFF" : "#000000"}/>
+          </View>
+
+          <Text className="font-sans-bold text-2xl text-center mb-2" style={{ color: isDark ? "#FFFFFF" : "#000000" }}>
+            Two-Factor Authentication
+          </Text>
+
+          <Text className="font-sans text-sm text-center mb-8" style={{ color: isDark ? "#999999" : "#666666", lineHeight: 22 }}>
+            {isRecoveryMode
+            ? "Enter one of your recovery codes"
+            : "Enter the 6-digit code from your authenticator app"}
+          </Text>
+
+          {error ? (<View className="rounded-lg p-3 mb-4" style={{
+                backgroundColor: isDark ? "#1A0000" : "#FEF2F2",
+                borderWidth: 1,
+                borderColor: isDark ? "#7F1D1D" : "#FECACA",
+            }}>
+              <Text className="font-sans text-sm text-center" style={{ color: "#EF4444" }}>
+                {error}
+              </Text>
+            </View>) : null}
+
+          {isRecoveryMode ? (<TextInput value={code} onChangeText={(text) => {
+                setCode(text);
+                if (error) {
+                    setError("");
+                }
+            }} placeholder="Enter recovery code" placeholderTextColor={isDark ? "#999999" : "#666666"} className="font-mono text-lg text-center tracking-wide" style={{
+                ...inputStyle,
+                color: isDark ? "#FFFFFF" : "#000000",
+            }} autoCapitalize="none" autoCorrect={false} autoFocus returnKeyType="done" onSubmitEditing={handleVerify} accessibilityLabel="Recovery code"/>) : (<TextInput value={code} onChangeText={(text) => {
+                const digits = text.replace(/[^0-9]/g, "").slice(0, 6);
+                setCode(digits);
+                if (error) {
+                    setError("");
+                }
+            }} placeholder="000000" placeholderTextColor={isDark ? "#999999" : "#666666"} className="font-mono text-center" style={{
+                ...inputStyle,
+                fontSize: 32,
+                color: isDark ? "#FFFFFF" : "#000000",
+                letterSpacing: 12,
+            }} keyboardType="number-pad" maxLength={6} autoFocus returnKeyType="done" onSubmitEditing={handleVerify} accessibilityLabel="Authenticator code"/>)}
+
+          <Pressable onPress={handleVerify} disabled={isLoading} className="rounded-lg items-center mt-5" style={({ pressed }) => ({
+            backgroundColor: isDark ? "#FFFFFF" : "#000000",
+            paddingVertical: 14,
+            opacity: pressed || isLoading ? 0.7 : 1,
+        })} accessibilityRole="button" accessibilityLabel="Verify" accessibilityHint="Double tap to verify your code">
+            {isLoading ? (<ActivityIndicator color={isDark ? "#000000" : "#FFFFFF"}/>) : (<Text className="font-sans-bold text-base" style={{ color: isDark ? "#000000" : "#FFFFFF" }}>
+                Verify
+              </Text>)}
+          </Pressable>
+
+          <Pressable onPress={toggleRecoveryMode} className="mt-5 items-center" hitSlop={{ top: 10, bottom: 10, left: 10, right: 10 }} accessibilityRole="button" accessibilityLabel={isRecoveryMode ? "Use authenticator code" : "Use recovery code"}>
+            <Text className="font-sans text-sm underline" style={{ color: isDark ? "#999999" : "#666666" }}>
+              {isRecoveryMode ? "Use authenticator code" : "Use recovery code"}
+            </Text>
+          </Pressable>
+        </View>
+      </View>
+    </SafeAreaView>);
+}
+export default MfaChallengeScreen;
+//# sourceMappingURL=MfaChallengeScreen.jsx.map

package/lib/screens/auth/MfaChallengeScreen.jsx.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaChallengeScreen.jsx","sourceRoot":"","sources":["../../../src/screens/auth/MfaChallengeScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AAExC,OAAO,WAAW,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,KAAK,MAAM,CAAC;IACtC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAElC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5D,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,+DAA+D;QAC/D,iEAAiE;QACjE,8DAA8D;QAC9D,+DAA+D;QAC/D,sBAAsB;QACtB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,6BAA6B,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,IAAI,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,8BAA8B,CAAC,CAAC;YACzC,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,iBAAiB,CAAC,CAAC,cAAc,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,QAAQ,CAAC,EAAE,CAAC,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG;QACjB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC/D,YAAY,EAAE,CAAC;QACf,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC;IAEF,OAAO,CACL,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAC1F;MAAA,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAC5C;MAAA,CAAC,IAAI,CAAC,SAAS,CAAC,yCAAyC,CACvD;QAAA,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CACpC;UAAA,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CACjC;YAAA,CAAC,QAAQ,CACP,IAAI,CAAC,0BAA0B,CAC/B,IAAI,CAAC,CAAC,EAAE,CAAC,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAE1C;UAAA,EAAE,IAAI,CAEN;;UAAA,CAAC,IAAI,CACH,SAAS,CAAC,0CAA0C,CACpD,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAEjD;;UACF,EAAE,IAAI,CAEN;;UAAA,CAAC,IAAI,CACH,SAAS,CAAC,oCAAoC,CAC9C,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAEjE;YAAA,CAAC,cAAc;YACb,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,oDAAoD,CAC1D;UAAA,EAAE,IAAI,CAEN;;UAAA,CAAC,KAAK,CAAC,CAAC,CAAC,CACP,CAAC,IAAI,CACH,SAAS,CAAC,qBAAqB,CAC/B,KAAK,CAAC,CAAC;gBACL,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC/C,WAAW,EAAE,CAAC;gBACd,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aAC5C,CAAC,CAEF;cAAA,CAAC,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAC1E;gBAAA,CAAC,KAAK,CACR;cAAA,EAAE,IAAI,CACR;YAAA,EAAE,IAAI,CAAC,CACR,CAAC,CAAC,CAAC,IAAI,CAER;;UAAA,CAAC,cAAc,CAAC,CAAC,CAAC,CAChB,CAAC,SAAS,CACR,KAAK,CAAC,CAAC,IAAI,CAAC,CACZ,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CACF,WAAW,CAAC,qBAAqB,CACjC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CACrD,SAAS,CAAC,6CAA6C,CACvD,KAAK,CAAC,CAAC;gBACL,GAAG,UAAU;gBACb,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACtC,CAAC,CACF,cAAc,CAAC,MAAM,CACrB,WAAW,CAAC,CAAC,KAAK,CAAC,CACnB,SAAS,CACT,aAAa,CAAC,MAAM,CACpB,eAAe,CAAC,CAAC,YAAY,CAAC,CAC9B,kBAAkB,CAAC,eAAe,EAClC,CACH,CAAC,CAAC,CAAC,CACF,CAAC,SAAS,CACR,KAAK,CAAC,CAAC,IAAI,CAAC,CACZ,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CACF,WAAW,CAAC,QAAQ,CACpB,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CACrD,SAAS,CAAC,uBAAuB,CACjC,KAAK,CAAC,CAAC;gBACL,GAAG,UAAU;gBACb,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACrC,aAAa,EAAE,EAAE;aAClB,CAAC,CACF,YAAY,CAAC,YAAY,CACzB,SAAS,CAAC,CAAC,CAAC,CAAC,CACb,SAAS,CACT,aAAa,CAAC,MAAM,CACpB,eAAe,CAAC,CAAC,YAAY,CAAC,CAC9B,kBAAkB,CAAC,oBAAoB,EACvC,CACH,CAED;;UAAA,CAAC,SAAS,CACR,OAAO,CAAC,CAAC,YAAY,CAAC,CACtB,QAAQ,CAAC,CAAC,SAAS,CAAC,CACpB,SAAS,CAAC,8BAA8B,CACxC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACvB,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/C,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxC,CAAC,CAAC,CACH,iBAAiB,CAAC,QAAQ,CAC1B,kBAAkB,CAAC,QAAQ,CAC3B,iBAAiB,CAAC,gCAAgC,CAElD;YAAA,CAAC,SAAS,CAAC,CAAC,CAAC,CACX,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAG,CAC7D,CAAC,CAAC,CAAC,CACF,CAAC,IAAI,CACH,SAAS,CAAC,0BAA0B,CACpC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAEjD;;cACF,EAAE,IAAI,CAAC,CACR,CACH;UAAA,EAAE,SAAS,CAEX;;UAAA,CAAC,SAAS,CACR,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAC5B,SAAS,CAAC,mBAAmB,CAC7B,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CACtD,iBAAiB,CAAC,QAAQ,CAC1B,kBAAkB,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAEpF;YAAA,CAAC,IAAI,CACH,SAAS,CAAC,6BAA6B,CACvC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAEjD;cAAA,CAAC,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,CAClE;YAAA,EAAE,IAAI,CACR;UAAA,EAAE,SAAS,CACb;QAAA,EAAE,IAAI,CACR;MAAA,EAAE,IAAI,CACR;IAAA,EAAE,YAAY,CAAC,CAChB,CAAC;AACJ,CAAC;AAED,eAAe,kBAAkB,CAAC"}

package/lib/screens/auth/MfaEnrollScreen.d.ts

@@ -0,0 +1,12 @@
+import React from "react";
+export interface MfaEnrollScreenProps {
+    /**
+     * Optional promo widget rendered on the prompt step (vault advertises
+     * its authenticator app here). When omitted, the screen renders
+     * nothing in that slot.
+     */
+    authenticatorAppPromo?: React.ReactNode;
+}
+export declare function MfaEnrollScreen({ authenticatorAppPromo }?: MfaEnrollScreenProps): React.JSX.Element;
+export default MfaEnrollScreen;
+//# sourceMappingURL=MfaEnrollScreen.d.ts.map

package/lib/screens/auth/MfaEnrollScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaEnrollScreen.d.ts","sourceRoot":"","sources":["../../../src/screens/auth/MfaEnrollScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAsC,MAAM,OAAO,CAAC;AA8B3D,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CACzC;AAED,wBAAgB,eAAe,CAAC,EAAE,qBAAqB,EAAE,GAAE,oBAAyB,qBA0VnF;AAED,eAAe,eAAe,CAAC"}