@forjio/auth-ui 0.6.0 → 0.8.0

package/dist/AuthForm.js

@@ -1,11 +1,14 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-import { useState } from "react";
+import { useEffect, useState } from "react";
 import { useRouter, useSearchParams } from "next/navigation";
 import Link from "next/link";
-import { Loader2, AlertCircle } from "lucide-react";
+import { Loader2, AlertCircle, ShieldCheck, ArrowLeft } from "lucide-react";
 import { Turnstile } from "@marsidev/react-turnstile";
 import { useTurnstileTheme } from "./useTurnstileTheme";
+import { Button } from "./components/ui/button";
+import { Input } from "./components/ui/input";
+import { Label } from "./components/ui/label";
 import { defaultEndpoints } from "./types";
 const TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;
 function AuthForm({
@@ -36,6 +39,15 @@ function AuthForm({
   const [error, setError] = useState(
     ssoError ? `Sign-in failed: ${ssoDetail || ssoError}` : null
   );
+  const [step, setStep] = useState("credentials");
+  const [mfaChallengeToken, setMfaChallengeToken] = useState("");
+  const [mfaMethods, setMfaMethods] = useState([]);
+  const [mfaExpiresAt, setMfaExpiresAt] = useState(null);
+  const [code, setCode] = useState("");
+  function redirectAfterAuth() {
+    router.push(returnTo);
+    router.refresh();
+  }
   async function submit(e) {
     e.preventDefault();
     setError(null);
@@ -52,23 +64,80 @@ function AuthForm({
         body: JSON.stringify(body)
       });
       if (!res.ok) {
-        const payload = await res.json().catch(() => null);
-        if (payload?.error?.code === "MFA_REQUIRED") {
+        const payload2 = await res.json().catch(() => null);
+        if (payload2?.error?.code === "MFA_REQUIRED") {
           setRedirecting(true);
           const qs = new URLSearchParams({ return_to: returnTo, ...socialParams });
           window.location.href = `${ep.socialStart}?${qs.toString()}`;
           return;
         }
+        throw new Error(payload2?.error?.message ?? `Request failed (${res.status})`);
+      }
+      const payload = await res.json().catch(() => null);
+      const challenge = payload?.data ?? payload;
+      if (challenge?.mfaRequired && challenge.mfaChallengeToken) {
+        setMfaChallengeToken(challenge.mfaChallengeToken);
+        setMfaMethods(Array.isArray(challenge.methods) ? challenge.methods : []);
+        setMfaExpiresAt(challenge.expiresAt ?? null);
+        setCode("");
+        setStep("otp");
+        return;
+      }
+      redirectAfterAuth();
+    } catch (err) {
+      setError(err.message);
+    } finally {
+      setSubmitting(false);
+    }
+  }
+  async function submitMfa(e) {
+    e.preventDefault();
+    setError(null);
+    setSubmitting(true);
+    try {
+      const body = { mfaChallengeToken, code };
+      if (TURNSTILE_SITE_KEY && turnstileToken) body["cf-turnstile-response"] = turnstileToken;
+      const res = await fetch(ep.mfa, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        credentials: "include",
+        body: JSON.stringify(body)
+      });
+      if (!res.ok) {
+        const payload = await res.json().catch(() => null);
         throw new Error(payload?.error?.message ?? `Request failed (${res.status})`);
       }
-      router.push(returnTo);
-      router.refresh();
+      redirectAfterAuth();
     } catch (err) {
       setError(err.message);
     } finally {
       setSubmitting(false);
     }
   }
+  function backToCredentials() {
+    setStep("credentials");
+    setError(null);
+    setCode("");
+    setMfaChallengeToken("");
+    setMfaMethods([]);
+    setMfaExpiresAt(null);
+  }
+  const [secondsLeft, setSecondsLeft] = useState(null);
+  useEffect(() => {
+    if (step !== "otp" || !mfaExpiresAt) {
+      setSecondsLeft(null);
+      return;
+    }
+    const target = new Date(mfaExpiresAt).getTime();
+    if (Number.isNaN(target)) {
+      setSecondsLeft(null);
+      return;
+    }
+    const tick = () => setSecondsLeft(Math.max(0, Math.round((target - Date.now()) / 1e3)));
+    tick();
+    const id = setInterval(tick, 1e3);
+    return () => clearInterval(id);
+  }, [step, mfaExpiresAt]);
   const otherMode = mode === "login" ? "signup" : "login";
   const otherHref = `${otherMode === "signup" ? signupHref : loginHref}?return_to=${encodeURIComponent(returnTo)}`;
   const socialUrl = (provider) => {
@@ -88,39 +157,105 @@ function AuthForm({
       /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 shrink-0 mt-0.5 animate-spin" }),
       /* @__PURE__ */ jsx("span", { children: "Redirecting you to complete two-factor sign-in\u2026" })
     ] }),
-    hasAnySocial && /* @__PURE__ */ jsxs(Fragment, { children: [
-      /* @__PURE__ */ jsxs("div", { className: "grid gap-2", children: [
-        showGoogle && /* @__PURE__ */ jsxs(
-          "a",
+    step === "otp" && /* @__PURE__ */ jsxs("div", { className: "space-y-4", children: [
+      /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 text-sm font-medium text-foreground", children: [
+          /* @__PURE__ */ jsx(ShieldCheck, { className: "h-4 w-4 shrink-0" }),
+          "Two-factor authentication"
+        ] }),
+        /* @__PURE__ */ jsx("p", { className: "text-xs leading-relaxed text-muted-foreground", children: "Enter the 6-digit code from your authenticator app." })
+      ] }),
+      /* @__PURE__ */ jsxs("form", { onSubmit: submitMfa, className: "space-y-3", children: [
+        /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx(
+            Label,
+            {
+              htmlFor: "mfa-code",
+              className: "mb-1 block text-xs leading-4 text-muted-foreground",
+              children: "Verification code"
+            }
+          ),
+          /* @__PURE__ */ jsx(
+            Input,
+            {
+              id: "mfa-code",
+              type: "text",
+              required: true,
+              autoFocus: true,
+              inputMode: "numeric",
+              autoComplete: "one-time-code",
+              pattern: "[0-9]*",
+              maxLength: 6,
+              value: code,
+              onChange: (e) => setCode(e.target.value.replace(/\D/g, "").slice(0, 6)),
+              "aria-label": "Six-digit verification code",
+              className: "h-auto border-border bg-background py-2 text-center text-lg tracking-[0.4em] shadow-none focus:outline-none focus:ring-1 focus:ring-primary"
+            }
+          ),
+          secondsLeft !== null && /* @__PURE__ */ jsx("p", { className: "mt-1 text-[11px] text-muted-foreground", children: secondsLeft > 0 ? `Code expires in ${Math.floor(secondsLeft / 60)}:${String(secondsLeft % 60).padStart(2, "0")}` : "Code expired \u2014 go back and sign in again." })
+        ] }),
+        /* @__PURE__ */ jsxs(
+          Button,
           {
-            href: socialUrl("google"),
-            className: "flex w-full items-center justify-center gap-2 rounded-md border border-border bg-background py-2 text-sm font-medium hover:bg-accent",
+            type: "submit",
+            disabled: submitting || code.length !== 6,
+            className: "flex h-auto w-full py-2.5 shadow-none hover:opacity-90",
             children: [
+              submitting && /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 animate-spin" }),
+              submitting ? "Verifying\u2026" : "Verify"
+            ]
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs(
+        "button",
+        {
+          type: "button",
+          onClick: backToCredentials,
+          className: "flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground",
+          children: [
+            /* @__PURE__ */ jsx(ArrowLeft, { className: "h-3.5 w-3.5" }),
+            "Back to sign in"
+          ]
+        }
+      )
+    ] }),
+    step === "credentials" && hasAnySocial && /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs("div", { className: "grid gap-2", children: [
+        showGoogle && /* @__PURE__ */ jsx(
+          Button,
+          {
+            asChild: true,
+            variant: "outline",
+            className: "flex h-auto w-full border-border py-2 shadow-none",
+            children: /* @__PURE__ */ jsxs("a", { href: socialUrl("google"), children: [
               /* @__PURE__ */ jsx(GoogleMark, { className: "h-4 w-4" }),
               "Continue with Google"
-            ]
+            ] })
           }
         ),
-        showApple && /* @__PURE__ */ jsxs(
-          "a",
+        showApple && /* @__PURE__ */ jsx(
+          Button,
           {
-            href: socialUrl("apple"),
-            className: "flex w-full items-center justify-center gap-2 rounded-md border border-border bg-background py-2 text-sm font-medium hover:bg-accent",
-            children: [
+            asChild: true,
+            variant: "outline",
+            className: "flex h-auto w-full border-border py-2 shadow-none",
+            children: /* @__PURE__ */ jsxs("a", { href: socialUrl("apple"), children: [
               /* @__PURE__ */ jsx(AppleMark, { className: "h-4 w-4" }),
               "Continue with Apple"
-            ]
+            ] })
           }
         ),
-        showFacebook && /* @__PURE__ */ jsxs(
-          "a",
+        showFacebook && /* @__PURE__ */ jsx(
+          Button,
           {
-            href: socialUrl("facebook"),
-            className: "flex w-full items-center justify-center gap-2 rounded-md border border-border bg-background py-2 text-sm font-medium hover:bg-accent",
-            children: [
+            asChild: true,
+            variant: "outline",
+            className: "flex h-auto w-full border-border py-2 shadow-none",
+            children: /* @__PURE__ */ jsxs("a", { href: socialUrl("facebook"), children: [
               /* @__PURE__ */ jsx(FacebookMark, { className: "h-4 w-4" }),
               "Continue with Facebook"
-            ]
+            ] })
           }
         )
       ] }),
@@ -130,25 +265,25 @@ function AuthForm({
         /* @__PURE__ */ jsx("div", { className: "flex-1 border-t border-border" })
       ] })
     ] }),
-    /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-3", children: [
+    step === "credentials" && /* @__PURE__ */ jsxs("form", { onSubmit: submit, className: "space-y-3", children: [
       /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("label", { className: "mb-1 block text-xs font-medium text-muted-foreground", children: "Email" }),
+        /* @__PURE__ */ jsx(Label, { className: "mb-1 block text-xs leading-4 text-muted-foreground", children: "Email" }),
         /* @__PURE__ */ jsx(
-          "input",
+          Input,
           {
             type: "email",
             required: true,
             value: email,
             onChange: (e) => setEmail(e.target.value),
             autoComplete: "email",
-            className: "w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary"
+            className: "h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary"
           }
         )
       ] }),
       /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsx("label", { className: "mb-1 block text-xs font-medium text-muted-foreground", children: "Password" }),
+        /* @__PURE__ */ jsx(Label, { className: "mb-1 block text-xs leading-4 text-muted-foreground", children: "Password" }),
         /* @__PURE__ */ jsx(
-          "input",
+          Input,
           {
             type: "password",
             required: true,
@@ -156,24 +291,24 @@ function AuthForm({
             value: password,
             onChange: (e) => setPassword(e.target.value),
             autoComplete: mode === "signup" ? "new-password" : "current-password",
-            className: "w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary"
+            className: "h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary"
           }
         ),
         mode === "signup" && /* @__PURE__ */ jsx("p", { className: "mt-1 text-[11px] text-muted-foreground", children: "At least 10 characters, with a letter and a number." })
       ] }),
       mode === "signup" && /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsxs("label", { className: "mb-1 block text-xs font-medium text-muted-foreground", children: [
+        /* @__PURE__ */ jsxs(Label, { className: "mb-1 block text-xs leading-4 text-muted-foreground", children: [
           "Your name ",
           /* @__PURE__ */ jsx("span", { className: "text-muted-foreground/60", children: "(optional)" })
         ] }),
         /* @__PURE__ */ jsx(
-          "input",
+          Input,
           {
             type: "text",
             value: name,
             onChange: (e) => setName(e.target.value),
             autoComplete: "name",
-            className: "w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary"
+            className: "h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary"
           }
         )
       ] }),
@@ -187,11 +322,11 @@ function AuthForm({
         }
       ) }),
       /* @__PURE__ */ jsxs(
-        "button",
+        Button,
         {
           type: "submit",
           disabled: submitting || redirecting,
-          className: "flex w-full items-center justify-center gap-2 rounded-md bg-primary py-2.5 text-sm font-medium text-primary-foreground transition hover:opacity-90 disabled:opacity-50",
+          className: "flex h-auto w-full py-2.5 shadow-none hover:opacity-90",
           children: [
             (submitting || redirecting) && /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 animate-spin" }),
             redirecting ? "Redirecting\u2026" : submitting ? mode === "signup" ? "Creating\u2026" : "Signing in\u2026" : mode === "signup" ? "Create account" : "Sign in"
@@ -199,7 +334,7 @@ function AuthForm({
         }
       )
     ] }),
-    /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between pt-2 text-xs text-muted-foreground", children: [
+    step === "credentials" && /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between pt-2 text-xs text-muted-foreground", children: [
       mode === "login" && /* @__PURE__ */ jsx(Link, { href: forgotPasswordHref, className: "hover:text-foreground", children: "Forgot password?" }),
       /* @__PURE__ */ jsxs("span", { className: mode === "login" ? "" : "ml-auto", children: [
         mode === "login" ? `New to ${brand}?` : "Already have an account?",

package/dist/AuthForm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/AuthForm.tsx"],"sourcesContent":["'use client';\n\nimport { useState } from 'react';\nimport { useRouter, useSearchParams } from 'next/navigation';\nimport Link from 'next/link';\nimport { Loader2, AlertCircle } from 'lucide-react';\nimport { Turnstile } from '@marsidev/react-turnstile';\nimport { useTurnstileTheme } from './useTurnstileTheme';\nimport { defaultEndpoints, type AuthEndpoints, type SocialProviders } from './types';\n\n// Cloudflare Turnstile is enabled family-wide by setting\n// NEXT_PUBLIC_TURNSTILE_SITE_KEY at build time. Next inlines NEXT_PUBLIC_*\n// referenced here (in node_modules) into each product's bundle, so no\n// per-product page edit is needed — set the env var + the widget appears,\n// and the token rides the login/signup request as `cf-turnstile-response`.\n// The backend (@forjio/sdk/auth-server) verifies it when\n// TURNSTILE_SECRET_KEY is set; both sides bypass gracefully when unset.\nconst TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;\n\nexport interface AuthFormProps {\n  mode: 'login' | 'signup';\n  /** Display name shown in copy (\"New to Plugipay?\", \"Welcome back\"). */\n  brand: string;\n  /** Override the auth endpoint paths. Default matches Forjio family\n   *  `@forjio/sdk/auth-handlers` mounts. */\n  endpoints?: Partial<AuthEndpoints>;\n  /** Which social providers to render. Host fetches the provider\n   *  status; pass undefined to show all (fail-open). */\n  providers?: SocialProviders | null;\n  /** Default redirect target after a successful auth. Default\n   *  `/dashboard`. Search-param `?return_to=` overrides at runtime. */\n  defaultReturnTo?: string;\n  /** Mode-switch link targets. Default `/login` / `/signup`. Override\n   *  for products with non-default auth routes (e.g. role-scoped\n   *  `/creators/login` + `/creators/onboarding`). `?return_to=` is\n   *  appended automatically. */\n  loginHref?: string;\n  signupHref?: string;\n  /** \"Forgot password?\" link target. Default `/forgot-password`. */\n  forgotPasswordHref?: string;\n  /** Extra fields merged into the login/signup request body — e.g. a\n   *  `role` discriminator for multi-role products. */\n  extraBody?: Record<string, unknown>;\n  /** Extra query params appended to the social-start URL — e.g.\n   *  `{ role }`, which the Huudis OIDC start needs to mint the correct\n   *  per-role session on callback. */\n  socialParams?: Record<string, string>;\n}\n\nexport function AuthForm({\n  mode,\n  brand,\n  endpoints,\n  providers,\n  defaultReturnTo = '/dashboard',\n  loginHref = '/login',\n  signupHref = '/signup',\n  forgotPasswordHref = '/forgot-password',\n  extraBody,\n  socialParams,\n}: AuthFormProps) {\n  const router = useRouter();\n  const params = useSearchParams();\n  const returnTo = params?.get('return_to') || defaultReturnTo;\n  const ssoError = params?.get('sso_error');\n  const ssoDetail = params?.get('sso_detail');\n  const ep: AuthEndpoints = { ...defaultEndpoints, ...endpoints };\n\n  const [email, setEmail] = useState('');\n  const [password, setPassword] = useState('');\n  const [name, setName] = useState('');\n  const [submitting, setSubmitting] = useState(false);\n  const [redirecting, setRedirecting] = useState(false);\n  const [turnstileToken, setTurnstileToken] = useState('');\n  const turnstileTheme = useTurnstileTheme();\n  const [error, setError] = useState<string | null>(\n    ssoError ? `Sign-in failed: ${ssoDetail || ssoError}` : null,\n  );\n\n  async function submit(e: React.FormEvent) {\n    e.preventDefault();\n    setError(null);\n    setSubmitting(true);\n    try {\n      const path = mode === 'signup' ? ep.signup : ep.login;\n      const body: Record<string, unknown> = { email, password, ...extraBody };\n      if (mode === 'signup' && name.trim()) body.name = name.trim();\n      if (TURNSTILE_SITE_KEY) body['cf-turnstile-response'] = turnstileToken;\n      const res = await fetch(path, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        credentials: 'include',\n        body: JSON.stringify(body),\n      });\n      if (!res.ok) {\n        const payload = (await res.json().catch(() => null)) as {\n          error?: { code?: string; message?: string };\n        } | null;\n        // The product BFF does not do inline MFA. When a user has MFA\n        // enabled, Huudis ROPC fails and the SDK returns 401 with\n        // `code: 'MFA_REQUIRED'`. Hand off to the Huudis hosted-login\n        // flow (no `provider=` param) — Huudis performs the challenge.\n        // `socialParams` (e.g. `{ role }`) MUST ride along so a\n        // multi-role product mints the correct per-role session on the\n        // OIDC callback — otherwise the role is lost and the user is\n        // gated on the wrong portal.\n        if (payload?.error?.code === 'MFA_REQUIRED') {\n          setRedirecting(true);\n          const qs = new URLSearchParams({ return_to: returnTo, ...socialParams });\n          window.location.href = `${ep.socialStart}?${qs.toString()}`;\n          return;\n        }\n        throw new Error(payload?.error?.message ?? `Request failed (${res.status})`);\n      }\n      router.push(returnTo);\n      router.refresh();\n    } catch (err) {\n      setError((err as Error).message);\n    } finally {\n      setSubmitting(false);\n    }\n  }\n\n  const otherMode = mode === 'login' ? 'signup' : 'login';\n  const otherHref = `${otherMode === 'signup' ? signupHref : loginHref}?return_to=${encodeURIComponent(returnTo)}`;\n  const socialUrl = (provider: 'google' | 'apple' | 'facebook') => {\n    const qs = new URLSearchParams({ provider, return_to: returnTo, ...socialParams });\n    return `${ep.socialStart}?${qs.toString()}`;\n  };\n\n  const showGoogle = providers?.google !== false;\n  const showApple = providers?.apple !== false;\n  const showFacebook = providers?.facebook !== false;\n  const hasAnySocial = showGoogle || showApple || showFacebook;\n\n  return (\n    <div className=\"space-y-4\">\n      {error && !redirecting && (\n        <div className=\"flex items-start gap-2 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-sm text-destructive\">\n          <AlertCircle className=\"h-4 w-4 shrink-0 mt-0.5\" />\n          <span>{error}</span>\n        </div>\n      )}\n\n      {redirecting && (\n        <div className=\"flex items-start gap-2 rounded-md border border-border bg-accent px-3 py-2 text-sm text-muted-foreground\">\n          <Loader2 className=\"h-4 w-4 shrink-0 mt-0.5 animate-spin\" />\n          <span>Redirecting you to complete two-factor sign-in…</span>\n        </div>\n      )}\n\n      {hasAnySocial && (\n        <>\n          <div className=\"grid gap-2\">\n            {showGoogle && (\n              <a\n                href={socialUrl('google')}\n                className=\"flex w-full items-center justify-center gap-2 rounded-md border border-border bg-background py-2 text-sm font-medium hover:bg-accent\"\n              >\n                <GoogleMark className=\"h-4 w-4\" />\n                Continue with Google\n              </a>\n            )}\n            {showApple && (\n              <a\n                href={socialUrl('apple')}\n                className=\"flex w-full items-center justify-center gap-2 rounded-md border border-border bg-background py-2 text-sm font-medium hover:bg-accent\"\n              >\n                <AppleMark className=\"h-4 w-4\" />\n                Continue with Apple\n              </a>\n            )}\n            {showFacebook && (\n              <a\n                href={socialUrl('facebook')}\n                className=\"flex w-full items-center justify-center gap-2 rounded-md border border-border bg-background py-2 text-sm font-medium hover:bg-accent\"\n              >\n                <FacebookMark className=\"h-4 w-4\" />\n                Continue with Facebook\n              </a>\n            )}\n          </div>\n\n          <div className=\"my-4 flex items-center gap-3 text-[11px] text-muted-foreground\">\n            <div className=\"flex-1 border-t border-border\" />\n            OR\n            <div className=\"flex-1 border-t border-border\" />\n          </div>\n        </>\n      )}\n\n      <form onSubmit={submit} className=\"space-y-3\">\n        <div>\n          <label className=\"mb-1 block text-xs font-medium text-muted-foreground\">Email</label>\n          <input\n            type=\"email\"\n            required\n            value={email}\n            onChange={(e) => setEmail(e.target.value)}\n            autoComplete=\"email\"\n            className=\"w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary\"\n          />\n        </div>\n        <div>\n          <label className=\"mb-1 block text-xs font-medium text-muted-foreground\">Password</label>\n          <input\n            type=\"password\"\n            required\n            minLength={mode === 'signup' ? 10 : undefined}\n            value={password}\n            onChange={(e) => setPassword(e.target.value)}\n            autoComplete={mode === 'signup' ? 'new-password' : 'current-password'}\n            className=\"w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary\"\n          />\n          {mode === 'signup' && (\n            <p className=\"mt-1 text-[11px] text-muted-foreground\">At least 10 characters, with a letter and a number.</p>\n          )}\n        </div>\n        {mode === 'signup' && (\n          <div>\n            <label className=\"mb-1 block text-xs font-medium text-muted-foreground\">\n              Your name <span className=\"text-muted-foreground/60\">(optional)</span>\n            </label>\n            <input\n              type=\"text\"\n              value={name}\n              onChange={(e) => setName(e.target.value)}\n              autoComplete=\"name\"\n              className=\"w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary\"\n            />\n          </div>\n        )}\n        {TURNSTILE_SITE_KEY && (\n          <div className=\"flex justify-center py-1\">\n            <Turnstile\n              siteKey={TURNSTILE_SITE_KEY}\n              onSuccess={setTurnstileToken}\n              onError={() => setError('Security check failed.')}\n              options={{ theme: turnstileTheme }}\n            />\n          </div>\n        )}\n        <button\n          type=\"submit\"\n          disabled={submitting || redirecting}\n          className=\"flex w-full items-center justify-center gap-2 rounded-md bg-primary py-2.5 text-sm font-medium text-primary-foreground transition hover:opacity-90 disabled:opacity-50\"\n        >\n          {(submitting || redirecting) && <Loader2 className=\"h-4 w-4 animate-spin\" />}\n          {redirecting\n            ? 'Redirecting…'\n            : submitting\n            ? mode === 'signup'\n              ? 'Creating…'\n              : 'Signing in…'\n            : mode === 'signup'\n            ? 'Create account'\n            : 'Sign in'}\n        </button>\n      </form>\n\n      <div className=\"flex items-center justify-between pt-2 text-xs text-muted-foreground\">\n        {mode === 'login' && (\n          <Link href={forgotPasswordHref} className=\"hover:text-foreground\">\n            Forgot password?\n          </Link>\n        )}\n        <span className={mode === 'login' ? '' : 'ml-auto'}>\n          {mode === 'login' ? `New to ${brand}?` : 'Already have an account?'}{' '}\n          <Link href={otherHref} className=\"font-medium text-foreground hover:underline\">\n            {mode === 'login' ? 'Sign up' : 'Sign in'}\n          </Link>\n        </span>\n      </div>\n      <p className=\"pt-2 text-[11px] leading-relaxed text-muted-foreground/80\">\n        Identity is powered by{' '}\n        <a href=\"https://huudis.com\" className=\"underline hover:text-foreground\">\n          Huudis\n        </a>\n        . One account for every Forjio product.\n      </p>\n    </div>\n  );\n}\n\nfunction GoogleMark({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" aria-hidden=\"true\">\n      <path d=\"M21.6 12.227c0-.708-.064-1.39-.182-2.045H12v3.868h5.384a4.603 4.603 0 0 1-1.997 3.018v2.51h3.232c1.891-1.742 2.98-4.307 2.98-7.35Z\" fill=\"#4285F4\" />\n      <path d=\"M12 22c2.7 0 4.965-.895 6.62-2.422l-3.233-2.51c-.895.6-2.041.955-3.386.955-2.604 0-4.81-1.76-5.596-4.122H3.067v2.59A9.996 9.996 0 0 0 12 22Z\" fill=\"#34A853\" />\n      <path d=\"M6.404 13.9a6.016 6.016 0 0 1 0-3.8V7.512H3.067a9.996 9.996 0 0 0 0 8.977L6.404 13.9Z\" fill=\"#FBBC05\" />\n      <path d=\"M12 5.977c1.468 0 2.786.505 3.823 1.497l2.868-2.868C16.96 2.986 14.696 2 12 2 8.118 2 4.76 4.232 3.067 7.51l3.337 2.59C7.19 7.737 9.396 5.977 12 5.977Z\" fill=\"#EA4335\" />\n    </svg>\n  );\n}\n\nfunction FacebookMark({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" fill=\"#1877F2\" aria-hidden=\"true\">\n      <path d=\"M24 12.073C24 5.404 18.627 0 12 0S0 5.404 0 12.073c0 6.026 4.388 11.022 10.125 11.927v-8.437H7.078v-3.49h3.047V9.41c0-3.026 1.792-4.697 4.533-4.697 1.313 0 2.686.236 2.686.236v2.971H15.83c-1.49 0-1.955.93-1.955 1.886v2.266h3.328l-.532 3.49h-2.796v8.437C19.612 23.095 24 18.099 24 12.073Z\" />\n    </svg>\n  );\n}\n\nfunction AppleMark({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" fill=\"currentColor\" aria-hidden=\"true\">\n      <path d=\"M17.564 12.73c-.037-3.16 2.58-4.678 2.698-4.752-1.47-2.146-3.76-2.44-4.576-2.473-1.948-.2-3.8 1.148-4.788 1.148-.993 0-2.513-1.12-4.13-1.091-2.127.03-4.085 1.236-5.174 3.142-2.207 3.82-.562 9.463 1.58 12.56 1.052 1.514 2.306 3.216 3.952 3.155 1.586-.065 2.185-1.026 4.102-1.026 1.917 0 2.455 1.026 4.133.99 1.705-.03 2.785-1.546 3.83-3.066 1.207-1.757 1.702-3.462 1.731-3.55-.038-.018-3.325-1.274-3.358-5.037Zm-3.154-9.24c.878-1.06 1.467-2.542 1.306-4.014-1.26.051-2.79.838-3.695 1.898-.813.937-1.524 2.433-1.333 3.885 1.405.108 2.843-.712 3.722-1.77Z\" />\n    </svg>\n  );\n}\n"],"mappings":";AA0IQ,SAcA,UAbE,KADF;AAxIR,SAAS,gBAAgB;AACzB,SAAS,WAAW,uBAAuB;AAC3C,OAAO,UAAU;AACjB,SAAS,SAAS,mBAAmB;AACrC,SAAS,iBAAiB;AAC1B,SAAS,yBAAyB;AAClC,SAAS,wBAAkE;AAS3E,MAAM,qBAAqB,QAAQ,IAAI;AAgChC,SAAS,SAAS;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB;AAAA,EACA;AACF,GAAkB;AAChB,QAAM,SAAS,UAAU;AACzB,QAAM,SAAS,gBAAgB;AAC/B,QAAM,WAAW,QAAQ,IAAI,WAAW,KAAK;AAC7C,QAAM,WAAW,QAAQ,IAAI,WAAW;AACxC,QAAM,YAAY,QAAQ,IAAI,YAAY;AAC1C,QAAM,KAAoB,EAAE,GAAG,kBAAkB,GAAG,UAAU;AAE9D,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AACnC,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,SAAS,EAAE;AACvD,QAAM,iBAAiB,kBAAkB;AACzC,QAAM,CAAC,OAAO,QAAQ,IAAI;AAAA,IACxB,WAAW,mBAAmB,aAAa,QAAQ,KAAK;AAAA,EAC1D;AAEA,iBAAe,OAAO,GAAoB;AACxC,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,OAAO,SAAS,WAAW,GAAG,SAAS,GAAG;AAChD,YAAM,OAAgC,EAAE,OAAO,UAAU,GAAG,UAAU;AACtE,UAAI,SAAS,YAAY,KAAK,KAAK,EAAG,MAAK,OAAO,KAAK,KAAK;AAC5D,UAAI,mBAAoB,MAAK,uBAAuB,IAAI;AACxD,YAAM,MAAM,MAAM,MAAM,MAAM;AAAA,QAC5B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,QACb,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAWlD,YAAI,SAAS,OAAO,SAAS,gBAAgB;AAC3C,yBAAe,IAAI;AACnB,gBAAM,KAAK,IAAI,gBAAgB,EAAE,WAAW,UAAU,GAAG,aAAa,CAAC;AACvE,iBAAO,SAAS,OAAO,GAAG,GAAG,WAAW,IAAI,GAAG,SAAS,CAAC;AACzD;AAAA,QACF;AACA,cAAM,IAAI,MAAM,SAAS,OAAO,WAAW,mBAAmB,IAAI,MAAM,GAAG;AAAA,MAC7E;AACA,aAAO,KAAK,QAAQ;AACpB,aAAO,QAAQ;AAAA,IACjB,SAAS,KAAK;AACZ,eAAU,IAAc,OAAO;AAAA,IACjC,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,YAAY,SAAS,UAAU,WAAW;AAChD,QAAM,YAAY,GAAG,cAAc,WAAW,aAAa,SAAS,cAAc,mBAAmB,QAAQ,CAAC;AAC9G,QAAM,YAAY,CAAC,aAA8C;AAC/D,UAAM,KAAK,IAAI,gBAAgB,EAAE,UAAU,WAAW,UAAU,GAAG,aAAa,CAAC;AACjF,WAAO,GAAG,GAAG,WAAW,IAAI,GAAG,SAAS,CAAC;AAAA,EAC3C;AAEA,QAAM,aAAa,WAAW,WAAW;AACzC,QAAM,YAAY,WAAW,UAAU;AACvC,QAAM,eAAe,WAAW,aAAa;AAC7C,QAAM,eAAe,cAAc,aAAa;AAEhD,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,aAAS,CAAC,eACT,qBAAC,SAAI,WAAU,uHACb;AAAA,0BAAC,eAAY,WAAU,2BAA0B;AAAA,MACjD,oBAAC,UAAM,iBAAM;AAAA,OACf;AAAA,IAGD,eACC,qBAAC,SAAI,WAAU,4GACb;AAAA,0BAAC,WAAQ,WAAU,wCAAuC;AAAA,MAC1D,oBAAC,UAAK,kEAA+C;AAAA,OACvD;AAAA,IAGD,gBACC,iCACE;AAAA,2BAAC,SAAI,WAAU,cACZ;AAAA,sBACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAM,UAAU,QAAQ;AAAA,YACxB,WAAU;AAAA,YAEV;AAAA,kCAAC,cAAW,WAAU,WAAU;AAAA,cAAE;AAAA;AAAA;AAAA,QAEpC;AAAA,QAED,aACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAM,UAAU,OAAO;AAAA,YACvB,WAAU;AAAA,YAEV;AAAA,kCAAC,aAAU,WAAU,WAAU;AAAA,cAAE;AAAA;AAAA;AAAA,QAEnC;AAAA,QAED,gBACC;AAAA,UAAC;AAAA;AAAA,YACC,MAAM,UAAU,UAAU;AAAA,YAC1B,WAAU;AAAA,YAEV;AAAA,kCAAC,gBAAa,WAAU,WAAU;AAAA,cAAE;AAAA;AAAA;AAAA,QAEtC;AAAA,SAEJ;AAAA,MAEA,qBAAC,SAAI,WAAU,kEACb;AAAA,4BAAC,SAAI,WAAU,iCAAgC;AAAA,QAAE;AAAA,QAEjD,oBAAC,SAAI,WAAU,iCAAgC;AAAA,SACjD;AAAA,OACF;AAAA,IAGF,qBAAC,UAAK,UAAU,QAAQ,WAAU,aAChC;AAAA,2BAAC,SACC;AAAA,4BAAC,WAAM,WAAU,wDAAuD,mBAAK;AAAA,QAC7E;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UAAQ;AAAA,YACR,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,YACxC,cAAa;AAAA,YACb,WAAU;AAAA;AAAA,QACZ;AAAA,SACF;AAAA,MACA,qBAAC,SACC;AAAA,4BAAC,WAAM,WAAU,wDAAuD,sBAAQ;AAAA,QAChF;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UAAQ;AAAA,YACR,WAAW,SAAS,WAAW,KAAK;AAAA,YACpC,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,cAAc,SAAS,WAAW,iBAAiB;AAAA,YACnD,WAAU;AAAA;AAAA,QACZ;AAAA,QACC,SAAS,YACR,oBAAC,OAAE,WAAU,0CAAyC,iEAAmD;AAAA,SAE7G;AAAA,MACC,SAAS,YACR,qBAAC,SACC;AAAA,6BAAC,WAAM,WAAU,wDAAuD;AAAA;AAAA,UAC5D,oBAAC,UAAK,WAAU,4BAA2B,wBAAU;AAAA,WACjE;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,YACvC,cAAa;AAAA,YACb,WAAU;AAAA;AAAA,QACZ;AAAA,SACF;AAAA,MAED,sBACC,oBAAC,SAAI,WAAU,4BACb;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,WAAW;AAAA,UACX,SAAS,MAAM,SAAS,wBAAwB;AAAA,UAChD,SAAS,EAAE,OAAO,eAAe;AAAA;AAAA,MACnC,GACF;AAAA,MAEF;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAER;AAAA,2BAAc,gBAAgB,oBAAC,WAAQ,WAAU,wBAAuB;AAAA,YACzE,cACG,sBACA,aACA,SAAS,WACP,mBACA,qBACF,SAAS,WACT,mBACA;AAAA;AAAA;AAAA,MACN;AAAA,OACF;AAAA,IAEA,qBAAC,SAAI,WAAU,wEACZ;AAAA,eAAS,WACR,oBAAC,QAAK,MAAM,oBAAoB,WAAU,yBAAwB,8BAElE;AAAA,MAEF,qBAAC,UAAK,WAAW,SAAS,UAAU,KAAK,WACtC;AAAA,iBAAS,UAAU,UAAU,KAAK,MAAM;AAAA,QAA4B;AAAA,QACrE,oBAAC,QAAK,MAAM,WAAW,WAAU,+CAC9B,mBAAS,UAAU,YAAY,WAClC;AAAA,SACF;AAAA,OACF;AAAA,IACA,qBAAC,OAAE,WAAU,6DAA4D;AAAA;AAAA,MAChD;AAAA,MACvB,oBAAC,OAAE,MAAK,sBAAqB,WAAU,mCAAkC,oBAEzE;AAAA,MAAI;AAAA,OAEN;AAAA,KACF;AAEJ;AAEA,SAAS,WAAW,EAAE,UAAU,GAA2B;AACzD,SACE,qBAAC,SAAI,WAAsB,SAAQ,aAAY,OAAM,8BAA6B,eAAY,QAC5F;AAAA,wBAAC,UAAK,GAAE,sIAAqI,MAAK,WAAU;AAAA,IAC5J,oBAAC,UAAK,GAAE,gJAA+I,MAAK,WAAU;AAAA,IACtK,oBAAC,UAAK,GAAE,yFAAwF,MAAK,WAAU;AAAA,IAC/G,oBAAC,UAAK,GAAE,2JAA0J,MAAK,WAAU;AAAA,KACnL;AAEJ;AAEA,SAAS,aAAa,EAAE,UAAU,GAA2B;AAC3D,SACE,oBAAC,SAAI,WAAsB,SAAQ,aAAY,OAAM,8BAA6B,MAAK,WAAU,eAAY,QAC3G,8BAAC,UAAK,GAAE,mSAAkS,GAC5S;AAEJ;AAEA,SAAS,UAAU,EAAE,UAAU,GAA2B;AACxD,SACE,oBAAC,SAAI,WAAsB,SAAQ,aAAY,OAAM,8BAA6B,MAAK,gBAAe,eAAY,QAChH,8BAAC,UAAK,GAAE,2iBAA0iB,GACpjB;AAEJ;","names":[]}
+{"version":3,"sources":["../src/AuthForm.tsx"],"sourcesContent":["'use client';\n\nimport { useEffect, useState } from 'react';\nimport { useRouter, useSearchParams } from 'next/navigation';\nimport Link from 'next/link';\nimport { Loader2, AlertCircle, ShieldCheck, ArrowLeft } from 'lucide-react';\nimport { Turnstile } from '@marsidev/react-turnstile';\nimport { useTurnstileTheme } from './useTurnstileTheme';\nimport { Button } from './components/ui/button';\nimport { Input } from './components/ui/input';\nimport { Label } from './components/ui/label';\nimport { defaultEndpoints, type AuthEndpoints, type SocialProviders } from './types';\n\n// Cloudflare Turnstile is enabled family-wide by setting\n// NEXT_PUBLIC_TURNSTILE_SITE_KEY at build time. Next inlines NEXT_PUBLIC_*\n// referenced here (in node_modules) into each product's bundle, so no\n// per-product page edit is needed — set the env var + the widget appears,\n// and the token rides the login/signup request as `cf-turnstile-response`.\n// The backend (@forjio/sdk/auth-server) verifies it when\n// TURNSTILE_SECRET_KEY is set; both sides bypass gracefully when unset.\nconst TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;\n\n/** Shape of the product-hosted MFA challenge the login POST returns when\n *  the user has MFA enabled and the product opted in. */\ninterface MfaChallenge {\n  mfaRequired?: boolean;\n  mfaChallengeToken?: string;\n  methods?: string[];\n  expiresAt?: string;\n}\n\nexport interface AuthFormProps {\n  mode: 'login' | 'signup';\n  /** Display name shown in copy (\"New to Plugipay?\", \"Welcome back\"). */\n  brand: string;\n  /** Override the auth endpoint paths. Default matches Forjio family\n   *  `@forjio/sdk/auth-handlers` mounts. */\n  endpoints?: Partial<AuthEndpoints>;\n  /** Which social providers to render. Host fetches the provider\n   *  status; pass undefined to show all (fail-open). */\n  providers?: SocialProviders | null;\n  /** Default redirect target after a successful auth. Default\n   *  `/dashboard`. Search-param `?return_to=` overrides at runtime. */\n  defaultReturnTo?: string;\n  /** Mode-switch link targets. Default `/login` / `/signup`. Override\n   *  for products with non-default auth routes (e.g. role-scoped\n   *  `/creators/login` + `/creators/onboarding`). `?return_to=` is\n   *  appended automatically. */\n  loginHref?: string;\n  signupHref?: string;\n  /** \"Forgot password?\" link target. Default `/forgot-password`. */\n  forgotPasswordHref?: string;\n  /** Extra fields merged into the login/signup request body — e.g. a\n   *  `role` discriminator for multi-role products. */\n  extraBody?: Record<string, unknown>;\n  /** Extra query params appended to the social-start URL — e.g.\n   *  `{ role }`, which the Huudis OIDC start needs to mint the correct\n   *  per-role session on callback. */\n  socialParams?: Record<string, string>;\n}\n\nexport function AuthForm({\n  mode,\n  brand,\n  endpoints,\n  providers,\n  defaultReturnTo = '/dashboard',\n  loginHref = '/login',\n  signupHref = '/signup',\n  forgotPasswordHref = '/forgot-password',\n  extraBody,\n  socialParams,\n}: AuthFormProps) {\n  const router = useRouter();\n  const params = useSearchParams();\n  const returnTo = params?.get('return_to') || defaultReturnTo;\n  const ssoError = params?.get('sso_error');\n  const ssoDetail = params?.get('sso_detail');\n  const ep: AuthEndpoints = { ...defaultEndpoints, ...endpoints };\n\n  const [email, setEmail] = useState('');\n  const [password, setPassword] = useState('');\n  const [name, setName] = useState('');\n  const [submitting, setSubmitting] = useState(false);\n  const [redirecting, setRedirecting] = useState(false);\n  const [turnstileToken, setTurnstileToken] = useState('');\n  const turnstileTheme = useTurnstileTheme();\n  const [error, setError] = useState<string | null>(\n    ssoError ? `Sign-in failed: ${ssoDetail || ssoError}` : null,\n  );\n\n  // Product-hosted MFA / OTP step. When the login POST returns\n  // `{ mfaRequired, mfaChallengeToken, methods, expiresAt }` (optionally\n  // wrapped in `{ data: … }`), the form swaps to the OTP step instead of\n  // redirecting. Backward-compatible: a normal login response never sets\n  // `mfaChallengeToken`, so the credentials step keeps today's behavior.\n  const [step, setStep] = useState<'credentials' | 'otp'>('credentials');\n  const [mfaChallengeToken, setMfaChallengeToken] = useState('');\n  const [mfaMethods, setMfaMethods] = useState<string[]>([]);\n  const [mfaExpiresAt, setMfaExpiresAt] = useState<string | null>(null);\n  const [code, setCode] = useState('');\n\n  function redirectAfterAuth() {\n    router.push(returnTo);\n    router.refresh();\n  }\n\n  async function submit(e: React.FormEvent) {\n    e.preventDefault();\n    setError(null);\n    setSubmitting(true);\n    try {\n      const path = mode === 'signup' ? ep.signup : ep.login;\n      const body: Record<string, unknown> = { email, password, ...extraBody };\n      if (mode === 'signup' && name.trim()) body.name = name.trim();\n      if (TURNSTILE_SITE_KEY) body['cf-turnstile-response'] = turnstileToken;\n      const res = await fetch(path, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        credentials: 'include',\n        body: JSON.stringify(body),\n      });\n      if (!res.ok) {\n        const payload = (await res.json().catch(() => null)) as {\n          error?: { code?: string; message?: string };\n        } | null;\n        // The product BFF does not do inline MFA. When a user has MFA\n        // enabled, Huudis ROPC fails and the SDK returns 401 with\n        // `code: 'MFA_REQUIRED'`. Hand off to the Huudis hosted-login\n        // flow (no `provider=` param) — Huudis performs the challenge.\n        // `socialParams` (e.g. `{ role }`) MUST ride along so a\n        // multi-role product mints the correct per-role session on the\n        // OIDC callback — otherwise the role is lost and the user is\n        // gated on the wrong portal.\n        if (payload?.error?.code === 'MFA_REQUIRED') {\n          setRedirecting(true);\n          const qs = new URLSearchParams({ return_to: returnTo, ...socialParams });\n          window.location.href = `${ep.socialStart}?${qs.toString()}`;\n          return;\n        }\n        throw new Error(payload?.error?.message ?? `Request failed (${res.status})`);\n      }\n      // Product-hosted MFA opt-in: the SDK responds 200 with an MFA\n      // challenge (possibly wrapped in `{ data: … }`) instead of a\n      // session. Swap to the in-product OTP step rather than redirect.\n      const payload = (await res.json().catch(() => null)) as\n        | { data?: MfaChallenge } & MfaChallenge\n        | null;\n      const challenge = payload?.data ?? payload;\n      if (challenge?.mfaRequired && challenge.mfaChallengeToken) {\n        setMfaChallengeToken(challenge.mfaChallengeToken);\n        setMfaMethods(Array.isArray(challenge.methods) ? challenge.methods : []);\n        setMfaExpiresAt(challenge.expiresAt ?? null);\n        setCode('');\n        setStep('otp');\n        return;\n      }\n      redirectAfterAuth();\n    } catch (err) {\n      setError((err as Error).message);\n    } finally {\n      setSubmitting(false);\n    }\n  }\n\n  async function submitMfa(e: React.FormEvent) {\n    e.preventDefault();\n    setError(null);\n    setSubmitting(true);\n    try {\n      const body: Record<string, unknown> = { mfaChallengeToken, code };\n      // MFA verify doesn't need a fresh captcha; only forward a token the\n      // credentials step already produced (never block on a missing one).\n      if (TURNSTILE_SITE_KEY && turnstileToken) body['cf-turnstile-response'] = turnstileToken;\n      const res = await fetch(ep.mfa, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        credentials: 'include',\n        body: JSON.stringify(body),\n      });\n      if (!res.ok) {\n        const payload = (await res.json().catch(() => null)) as {\n          error?: { code?: string; message?: string };\n        } | null;\n        throw new Error(payload?.error?.message ?? `Request failed (${res.status})`);\n      }\n      redirectAfterAuth();\n    } catch (err) {\n      setError((err as Error).message);\n    } finally {\n      setSubmitting(false);\n    }\n  }\n\n  function backToCredentials() {\n    setStep('credentials');\n    setError(null);\n    setCode('');\n    setMfaChallengeToken('');\n    setMfaMethods([]);\n    setMfaExpiresAt(null);\n  }\n\n  // Live countdown to the challenge expiry, shown as a small hint on the\n  // OTP step. Recomputed every second while the OTP step is visible.\n  const [secondsLeft, setSecondsLeft] = useState<number | null>(null);\n  useEffect(() => {\n    if (step !== 'otp' || !mfaExpiresAt) {\n      setSecondsLeft(null);\n      return;\n    }\n    const target = new Date(mfaExpiresAt).getTime();\n    if (Number.isNaN(target)) {\n      setSecondsLeft(null);\n      return;\n    }\n    const tick = () => setSecondsLeft(Math.max(0, Math.round((target - Date.now()) / 1000)));\n    tick();\n    const id = setInterval(tick, 1000);\n    return () => clearInterval(id);\n  }, [step, mfaExpiresAt]);\n\n  const otherMode = mode === 'login' ? 'signup' : 'login';\n  const otherHref = `${otherMode === 'signup' ? signupHref : loginHref}?return_to=${encodeURIComponent(returnTo)}`;\n  const socialUrl = (provider: 'google' | 'apple' | 'facebook') => {\n    const qs = new URLSearchParams({ provider, return_to: returnTo, ...socialParams });\n    return `${ep.socialStart}?${qs.toString()}`;\n  };\n\n  const showGoogle = providers?.google !== false;\n  const showApple = providers?.apple !== false;\n  const showFacebook = providers?.facebook !== false;\n  const hasAnySocial = showGoogle || showApple || showFacebook;\n\n  return (\n    <div className=\"space-y-4\">\n      {error && !redirecting && (\n        <div className=\"flex items-start gap-2 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-sm text-destructive\">\n          <AlertCircle className=\"h-4 w-4 shrink-0 mt-0.5\" />\n          <span>{error}</span>\n        </div>\n      )}\n\n      {redirecting && (\n        <div className=\"flex items-start gap-2 rounded-md border border-border bg-accent px-3 py-2 text-sm text-muted-foreground\">\n          <Loader2 className=\"h-4 w-4 shrink-0 mt-0.5 animate-spin\" />\n          <span>Redirecting you to complete two-factor sign-in…</span>\n        </div>\n      )}\n\n      {step === 'otp' && (\n        <div className=\"space-y-4\">\n          <div className=\"space-y-1\">\n            <div className=\"flex items-center gap-2 text-sm font-medium text-foreground\">\n              <ShieldCheck className=\"h-4 w-4 shrink-0\" />\n              Two-factor authentication\n            </div>\n            <p className=\"text-xs leading-relaxed text-muted-foreground\">\n              Enter the 6-digit code from your authenticator app.\n            </p>\n          </div>\n\n          <form onSubmit={submitMfa} className=\"space-y-3\">\n            <div>\n              <Label\n                htmlFor=\"mfa-code\"\n                className=\"mb-1 block text-xs leading-4 text-muted-foreground\"\n              >\n                Verification code\n              </Label>\n              <Input\n                id=\"mfa-code\"\n                type=\"text\"\n                required\n                autoFocus\n                inputMode=\"numeric\"\n                autoComplete=\"one-time-code\"\n                pattern=\"[0-9]*\"\n                maxLength={6}\n                value={code}\n                onChange={(e) => setCode(e.target.value.replace(/\\D/g, '').slice(0, 6))}\n                aria-label=\"Six-digit verification code\"\n                className=\"h-auto border-border bg-background py-2 text-center text-lg tracking-[0.4em] shadow-none focus:outline-none focus:ring-1 focus:ring-primary\"\n              />\n              {secondsLeft !== null && (\n                <p className=\"mt-1 text-[11px] text-muted-foreground\">\n                  {secondsLeft > 0\n                    ? `Code expires in ${Math.floor(secondsLeft / 60)}:${String(secondsLeft % 60).padStart(2, '0')}`\n                    : 'Code expired — go back and sign in again.'}\n                </p>\n              )}\n            </div>\n            <Button\n              type=\"submit\"\n              disabled={submitting || code.length !== 6}\n              className=\"flex h-auto w-full py-2.5 shadow-none hover:opacity-90\"\n            >\n              {submitting && <Loader2 className=\"h-4 w-4 animate-spin\" />}\n              {submitting ? 'Verifying…' : 'Verify'}\n            </Button>\n          </form>\n\n          <button\n            type=\"button\"\n            onClick={backToCredentials}\n            className=\"flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground\"\n          >\n            <ArrowLeft className=\"h-3.5 w-3.5\" />\n            Back to sign in\n          </button>\n        </div>\n      )}\n\n      {step === 'credentials' && hasAnySocial && (\n        <>\n          <div className=\"grid gap-2\">\n            {showGoogle && (\n              <Button\n                asChild\n                variant=\"outline\"\n                className=\"flex h-auto w-full border-border py-2 shadow-none\"\n              >\n                <a href={socialUrl('google')}>\n                  <GoogleMark className=\"h-4 w-4\" />\n                  Continue with Google\n                </a>\n              </Button>\n            )}\n            {showApple && (\n              <Button\n                asChild\n                variant=\"outline\"\n                className=\"flex h-auto w-full border-border py-2 shadow-none\"\n              >\n                <a href={socialUrl('apple')}>\n                  <AppleMark className=\"h-4 w-4\" />\n                  Continue with Apple\n                </a>\n              </Button>\n            )}\n            {showFacebook && (\n              <Button\n                asChild\n                variant=\"outline\"\n                className=\"flex h-auto w-full border-border py-2 shadow-none\"\n              >\n                <a href={socialUrl('facebook')}>\n                  <FacebookMark className=\"h-4 w-4\" />\n                  Continue with Facebook\n                </a>\n              </Button>\n            )}\n          </div>\n\n          <div className=\"my-4 flex items-center gap-3 text-[11px] text-muted-foreground\">\n            <div className=\"flex-1 border-t border-border\" />\n            OR\n            <div className=\"flex-1 border-t border-border\" />\n          </div>\n        </>\n      )}\n\n      {step === 'credentials' && (\n      <form onSubmit={submit} className=\"space-y-3\">\n        <div>\n          <Label className=\"mb-1 block text-xs leading-4 text-muted-foreground\">Email</Label>\n          <Input\n            type=\"email\"\n            required\n            value={email}\n            onChange={(e) => setEmail(e.target.value)}\n            autoComplete=\"email\"\n            className=\"h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary\"\n          />\n        </div>\n        <div>\n          <Label className=\"mb-1 block text-xs leading-4 text-muted-foreground\">Password</Label>\n          <Input\n            type=\"password\"\n            required\n            minLength={mode === 'signup' ? 10 : undefined}\n            value={password}\n            onChange={(e) => setPassword(e.target.value)}\n            autoComplete={mode === 'signup' ? 'new-password' : 'current-password'}\n            className=\"h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary\"\n          />\n          {mode === 'signup' && (\n            <p className=\"mt-1 text-[11px] text-muted-foreground\">At least 10 characters, with a letter and a number.</p>\n          )}\n        </div>\n        {mode === 'signup' && (\n          <div>\n            <Label className=\"mb-1 block text-xs leading-4 text-muted-foreground\">\n              Your name <span className=\"text-muted-foreground/60\">(optional)</span>\n            </Label>\n            <Input\n              type=\"text\"\n              value={name}\n              onChange={(e) => setName(e.target.value)}\n              autoComplete=\"name\"\n              className=\"h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary\"\n            />\n          </div>\n        )}\n        {TURNSTILE_SITE_KEY && (\n          <div className=\"flex justify-center py-1\">\n            <Turnstile\n              siteKey={TURNSTILE_SITE_KEY}\n              onSuccess={setTurnstileToken}\n              onError={() => setError('Security check failed.')}\n              options={{ theme: turnstileTheme }}\n            />\n          </div>\n        )}\n        <Button\n          type=\"submit\"\n          disabled={submitting || redirecting}\n          className=\"flex h-auto w-full py-2.5 shadow-none hover:opacity-90\"\n        >\n          {(submitting || redirecting) && <Loader2 className=\"h-4 w-4 animate-spin\" />}\n          {redirecting\n            ? 'Redirecting…'\n            : submitting\n            ? mode === 'signup'\n              ? 'Creating…'\n              : 'Signing in…'\n            : mode === 'signup'\n            ? 'Create account'\n            : 'Sign in'}\n        </Button>\n      </form>\n      )}\n\n      {step === 'credentials' && (\n      <div className=\"flex items-center justify-between pt-2 text-xs text-muted-foreground\">\n        {mode === 'login' && (\n          <Link href={forgotPasswordHref} className=\"hover:text-foreground\">\n            Forgot password?\n          </Link>\n        )}\n        <span className={mode === 'login' ? '' : 'ml-auto'}>\n          {mode === 'login' ? `New to ${brand}?` : 'Already have an account?'}{' '}\n          <Link href={otherHref} className=\"font-medium text-foreground hover:underline\">\n            {mode === 'login' ? 'Sign up' : 'Sign in'}\n          </Link>\n        </span>\n      </div>\n      )}\n      <p className=\"pt-2 text-[11px] leading-relaxed text-muted-foreground/80\">\n        Identity is powered by{' '}\n        <a href=\"https://huudis.com\" className=\"underline hover:text-foreground\">\n          Huudis\n        </a>\n        . One account for every Forjio product.\n      </p>\n    </div>\n  );\n}\n\nfunction GoogleMark({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" aria-hidden=\"true\">\n      <path d=\"M21.6 12.227c0-.708-.064-1.39-.182-2.045H12v3.868h5.384a4.603 4.603 0 0 1-1.997 3.018v2.51h3.232c1.891-1.742 2.98-4.307 2.98-7.35Z\" fill=\"#4285F4\" />\n      <path d=\"M12 22c2.7 0 4.965-.895 6.62-2.422l-3.233-2.51c-.895.6-2.041.955-3.386.955-2.604 0-4.81-1.76-5.596-4.122H3.067v2.59A9.996 9.996 0 0 0 12 22Z\" fill=\"#34A853\" />\n      <path d=\"M6.404 13.9a6.016 6.016 0 0 1 0-3.8V7.512H3.067a9.996 9.996 0 0 0 0 8.977L6.404 13.9Z\" fill=\"#FBBC05\" />\n      <path d=\"M12 5.977c1.468 0 2.786.505 3.823 1.497l2.868-2.868C16.96 2.986 14.696 2 12 2 8.118 2 4.76 4.232 3.067 7.51l3.337 2.59C7.19 7.737 9.396 5.977 12 5.977Z\" fill=\"#EA4335\" />\n    </svg>\n  );\n}\n\nfunction FacebookMark({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" fill=\"#1877F2\" aria-hidden=\"true\">\n      <path d=\"M24 12.073C24 5.404 18.627 0 12 0S0 5.404 0 12.073c0 6.026 4.388 11.022 10.125 11.927v-8.437H7.078v-3.49h3.047V9.41c0-3.026 1.792-4.697 4.533-4.697 1.313 0 2.686.236 2.686.236v2.971H15.83c-1.49 0-1.955.93-1.955 1.886v2.266h3.328l-.532 3.49h-2.796v8.437C19.612 23.095 24 18.099 24 12.073Z\" />\n    </svg>\n  );\n}\n\nfunction AppleMark({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" fill=\"currentColor\" aria-hidden=\"true\">\n      <path d=\"M17.564 12.73c-.037-3.16 2.58-4.678 2.698-4.752-1.47-2.146-3.76-2.44-4.576-2.473-1.948-.2-3.8 1.148-4.788 1.148-.993 0-2.513-1.12-4.13-1.091-2.127.03-4.085 1.236-5.174 3.142-2.207 3.82-.562 9.463 1.58 12.56 1.052 1.514 2.306 3.216 3.952 3.155 1.586-.065 2.185-1.026 4.102-1.026 1.917 0 2.455 1.026 4.133.99 1.705-.03 2.785-1.546 3.83-3.066 1.207-1.757 1.702-3.462 1.731-3.55-.038-.018-3.325-1.274-3.358-5.037Zm-3.154-9.24c.878-1.06 1.467-2.542 1.306-4.014-1.26.051-2.79.838-3.695 1.898-.813.937-1.524 2.433-1.333 3.885 1.405.108 2.843-.712 3.722-1.77Z\" />\n    </svg>\n  );\n}\n"],"mappings":";AA6OQ,SA6EA,UA5EE,KADF;AA3OR,SAAS,WAAW,gBAAgB;AACpC,SAAS,WAAW,uBAAuB;AAC3C,OAAO,UAAU;AACjB,SAAS,SAAS,aAAa,aAAa,iBAAiB;AAC7D,SAAS,iBAAiB;AAC1B,SAAS,yBAAyB;AAClC,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,wBAAkE;AAS3E,MAAM,qBAAqB,QAAQ,IAAI;AAyChC,SAAS,SAAS;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB;AAAA,EACA;AACF,GAAkB;AAChB,QAAM,SAAS,UAAU;AACzB,QAAM,SAAS,gBAAgB;AAC/B,QAAM,WAAW,QAAQ,IAAI,WAAW,KAAK;AAC7C,QAAM,WAAW,QAAQ,IAAI,WAAW;AACxC,QAAM,YAAY,QAAQ,IAAI,YAAY;AAC1C,QAAM,KAAoB,EAAE,GAAG,kBAAkB,GAAG,UAAU;AAE9D,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AACnC,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,SAAS,EAAE;AACvD,QAAM,iBAAiB,kBAAkB;AACzC,QAAM,CAAC,OAAO,QAAQ,IAAI;AAAA,IACxB,WAAW,mBAAmB,aAAa,QAAQ,KAAK;AAAA,EAC1D;AAOA,QAAM,CAAC,MAAM,OAAO,IAAI,SAAgC,aAAa;AACrE,QAAM,CAAC,mBAAmB,oBAAoB,IAAI,SAAS,EAAE;AAC7D,QAAM,CAAC,YAAY,aAAa,IAAI,SAAmB,CAAC,CAAC;AACzD,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,IAAI;AACpE,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AAEnC,WAAS,oBAAoB;AAC3B,WAAO,KAAK,QAAQ;AACpB,WAAO,QAAQ;AAAA,EACjB;AAEA,iBAAe,OAAO,GAAoB;AACxC,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,OAAO,SAAS,WAAW,GAAG,SAAS,GAAG;AAChD,YAAM,OAAgC,EAAE,OAAO,UAAU,GAAG,UAAU;AACtE,UAAI,SAAS,YAAY,KAAK,KAAK,EAAG,MAAK,OAAO,KAAK,KAAK;AAC5D,UAAI,mBAAoB,MAAK,uBAAuB,IAAI;AACxD,YAAM,MAAM,MAAM,MAAM,MAAM;AAAA,QAC5B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,QACb,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAMA,WAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAWlD,YAAIA,UAAS,OAAO,SAAS,gBAAgB;AAC3C,yBAAe,IAAI;AACnB,gBAAM,KAAK,IAAI,gBAAgB,EAAE,WAAW,UAAU,GAAG,aAAa,CAAC;AACvE,iBAAO,SAAS,OAAO,GAAG,GAAG,WAAW,IAAI,GAAG,SAAS,CAAC;AACzD;AAAA,QACF;AACA,cAAM,IAAI,MAAMA,UAAS,OAAO,WAAW,mBAAmB,IAAI,MAAM,GAAG;AAAA,MAC7E;AAIA,YAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAGlD,YAAM,YAAY,SAAS,QAAQ;AACnC,UAAI,WAAW,eAAe,UAAU,mBAAmB;AACzD,6BAAqB,UAAU,iBAAiB;AAChD,sBAAc,MAAM,QAAQ,UAAU,OAAO,IAAI,UAAU,UAAU,CAAC,CAAC;AACvE,wBAAgB,UAAU,aAAa,IAAI;AAC3C,gBAAQ,EAAE;AACV,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,wBAAkB;AAAA,IACpB,SAAS,KAAK;AACZ,eAAU,IAAc,OAAO;AAAA,IACjC,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,iBAAe,UAAU,GAAoB;AAC3C,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,OAAgC,EAAE,mBAAmB,KAAK;AAGhE,UAAI,sBAAsB,eAAgB,MAAK,uBAAuB,IAAI;AAC1E,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,QACb,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAGlD,cAAM,IAAI,MAAM,SAAS,OAAO,WAAW,mBAAmB,IAAI,MAAM,GAAG;AAAA,MAC7E;AACA,wBAAkB;AAAA,IACpB,SAAS,KAAK;AACZ,eAAU,IAAc,OAAO;AAAA,IACjC,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,WAAS,oBAAoB;AAC3B,YAAQ,aAAa;AACrB,aAAS,IAAI;AACb,YAAQ,EAAE;AACV,yBAAqB,EAAE;AACvB,kBAAc,CAAC,CAAC;AAChB,oBAAgB,IAAI;AAAA,EACtB;AAIA,QAAM,CAAC,aAAa,cAAc,IAAI,SAAwB,IAAI;AAClE,YAAU,MAAM;AACd,QAAI,SAAS,SAAS,CAAC,cAAc;AACnC,qBAAe,IAAI;AACnB;AAAA,IACF;AACA,UAAM,SAAS,IAAI,KAAK,YAAY,EAAE,QAAQ;AAC9C,QAAI,OAAO,MAAM,MAAM,GAAG;AACxB,qBAAe,IAAI;AACnB;AAAA,IACF;AACA,UAAM,OAAO,MAAM,eAAe,KAAK,IAAI,GAAG,KAAK,OAAO,SAAS,KAAK,IAAI,KAAK,GAAI,CAAC,CAAC;AACvF,SAAK;AACL,UAAM,KAAK,YAAY,MAAM,GAAI;AACjC,WAAO,MAAM,cAAc,EAAE;AAAA,EAC/B,GAAG,CAAC,MAAM,YAAY,CAAC;AAEvB,QAAM,YAAY,SAAS,UAAU,WAAW;AAChD,QAAM,YAAY,GAAG,cAAc,WAAW,aAAa,SAAS,cAAc,mBAAmB,QAAQ,CAAC;AAC9G,QAAM,YAAY,CAAC,aAA8C;AAC/D,UAAM,KAAK,IAAI,gBAAgB,EAAE,UAAU,WAAW,UAAU,GAAG,aAAa,CAAC;AACjF,WAAO,GAAG,GAAG,WAAW,IAAI,GAAG,SAAS,CAAC;AAAA,EAC3C;AAEA,QAAM,aAAa,WAAW,WAAW;AACzC,QAAM,YAAY,WAAW,UAAU;AACvC,QAAM,eAAe,WAAW,aAAa;AAC7C,QAAM,eAAe,cAAc,aAAa;AAEhD,SACE,qBAAC,SAAI,WAAU,aACZ;AAAA,aAAS,CAAC,eACT,qBAAC,SAAI,WAAU,uHACb;AAAA,0BAAC,eAAY,WAAU,2BAA0B;AAAA,MACjD,oBAAC,UAAM,iBAAM;AAAA,OACf;AAAA,IAGD,eACC,qBAAC,SAAI,WAAU,4GACb;AAAA,0BAAC,WAAQ,WAAU,wCAAuC;AAAA,MAC1D,oBAAC,UAAK,kEAA+C;AAAA,OACvD;AAAA,IAGD,SAAS,SACR,qBAAC,SAAI,WAAU,aACb;AAAA,2BAAC,SAAI,WAAU,aACb;AAAA,6BAAC,SAAI,WAAU,+DACb;AAAA,8BAAC,eAAY,WAAU,oBAAmB;AAAA,UAAE;AAAA,WAE9C;AAAA,QACA,oBAAC,OAAE,WAAU,iDAAgD,iEAE7D;AAAA,SACF;AAAA,MAEA,qBAAC,UAAK,UAAU,WAAW,WAAU,aACnC;AAAA,6BAAC,SACC;AAAA;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,WAAU;AAAA,cACX;AAAA;AAAA,UAED;AAAA,UACA;AAAA,YAAC;AAAA;AAAA,cACC,IAAG;AAAA,cACH,MAAK;AAAA,cACL,UAAQ;AAAA,cACR,WAAS;AAAA,cACT,WAAU;AAAA,cACV,cAAa;AAAA,cACb,SAAQ;AAAA,cACR,WAAW;AAAA,cACX,OAAO;AAAA,cACP,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,MAAM,QAAQ,OAAO,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,cACtE,cAAW;AAAA,cACX,WAAU;AAAA;AAAA,UACZ;AAAA,UACC,gBAAgB,QACf,oBAAC,OAAE,WAAU,0CACV,wBAAc,IACX,mBAAmB,KAAK,MAAM,cAAc,EAAE,CAAC,IAAI,OAAO,cAAc,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,KAC5F,kDACN;AAAA,WAEJ;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UAAU,cAAc,KAAK,WAAW;AAAA,YACxC,WAAU;AAAA,YAET;AAAA,4BAAc,oBAAC,WAAQ,WAAU,wBAAuB;AAAA,cACxD,aAAa,oBAAe;AAAA;AAAA;AAAA,QAC/B;AAAA,SACF;AAAA,MAEA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,SAAS;AAAA,UACT,WAAU;AAAA,UAEV;AAAA,gCAAC,aAAU,WAAU,eAAc;AAAA,YAAE;AAAA;AAAA;AAAA,MAEvC;AAAA,OACF;AAAA,IAGD,SAAS,iBAAiB,gBACzB,iCACE;AAAA,2BAAC,SAAI,WAAU,cACZ;AAAA,sBACC;AAAA,UAAC;AAAA;AAAA,YACC,SAAO;AAAA,YACP,SAAQ;AAAA,YACR,WAAU;AAAA,YAEV,+BAAC,OAAE,MAAM,UAAU,QAAQ,GACzB;AAAA,kCAAC,cAAW,WAAU,WAAU;AAAA,cAAE;AAAA,eAEpC;AAAA;AAAA,QACF;AAAA,QAED,aACC;AAAA,UAAC;AAAA;AAAA,YACC,SAAO;AAAA,YACP,SAAQ;AAAA,YACR,WAAU;AAAA,YAEV,+BAAC,OAAE,MAAM,UAAU,OAAO,GACxB;AAAA,kCAAC,aAAU,WAAU,WAAU;AAAA,cAAE;AAAA,eAEnC;AAAA;AAAA,QACF;AAAA,QAED,gBACC;AAAA,UAAC;AAAA;AAAA,YACC,SAAO;AAAA,YACP,SAAQ;AAAA,YACR,WAAU;AAAA,YAEV,+BAAC,OAAE,MAAM,UAAU,UAAU,GAC3B;AAAA,kCAAC,gBAAa,WAAU,WAAU;AAAA,cAAE;AAAA,eAEtC;AAAA;AAAA,QACF;AAAA,SAEJ;AAAA,MAEA,qBAAC,SAAI,WAAU,kEACb;AAAA,4BAAC,SAAI,WAAU,iCAAgC;AAAA,QAAE;AAAA,QAEjD,oBAAC,SAAI,WAAU,iCAAgC;AAAA,SACjD;AAAA,OACF;AAAA,IAGD,SAAS,iBACV,qBAAC,UAAK,UAAU,QAAQ,WAAU,aAChC;AAAA,2BAAC,SACC;AAAA,4BAAC,SAAM,WAAU,sDAAqD,mBAAK;AAAA,QAC3E;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UAAQ;AAAA,YACR,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,YACxC,cAAa;AAAA,YACb,WAAU;AAAA;AAAA,QACZ;AAAA,SACF;AAAA,MACA,qBAAC,SACC;AAAA,4BAAC,SAAM,WAAU,sDAAqD,sBAAQ;AAAA,QAC9E;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,UAAQ;AAAA,YACR,WAAW,SAAS,WAAW,KAAK;AAAA,YACpC,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,YAAY,EAAE,OAAO,KAAK;AAAA,YAC3C,cAAc,SAAS,WAAW,iBAAiB;AAAA,YACnD,WAAU;AAAA;AAAA,QACZ;AAAA,QACC,SAAS,YACR,oBAAC,OAAE,WAAU,0CAAyC,iEAAmD;AAAA,SAE7G;AAAA,MACC,SAAS,YACR,qBAAC,SACC;AAAA,6BAAC,SAAM,WAAU,sDAAqD;AAAA;AAAA,UAC1D,oBAAC,UAAK,WAAU,4BAA2B,wBAAU;AAAA,WACjE;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK;AAAA,YACvC,cAAa;AAAA,YACb,WAAU;AAAA;AAAA,QACZ;AAAA,SACF;AAAA,MAED,sBACC,oBAAC,SAAI,WAAU,4BACb;AAAA,QAAC;AAAA;AAAA,UACC,SAAS;AAAA,UACT,WAAW;AAAA,UACX,SAAS,MAAM,SAAS,wBAAwB;AAAA,UAChD,SAAS,EAAE,OAAO,eAAe;AAAA;AAAA,MACnC,GACF;AAAA,MAEF;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAU,cAAc;AAAA,UACxB,WAAU;AAAA,UAER;AAAA,2BAAc,gBAAgB,oBAAC,WAAQ,WAAU,wBAAuB;AAAA,YACzE,cACG,sBACA,aACA,SAAS,WACP,mBACA,qBACF,SAAS,WACT,mBACA;AAAA;AAAA;AAAA,MACN;AAAA,OACF;AAAA,IAGC,SAAS,iBACV,qBAAC,SAAI,WAAU,wEACZ;AAAA,eAAS,WACR,oBAAC,QAAK,MAAM,oBAAoB,WAAU,yBAAwB,8BAElE;AAAA,MAEF,qBAAC,UAAK,WAAW,SAAS,UAAU,KAAK,WACtC;AAAA,iBAAS,UAAU,UAAU,KAAK,MAAM;AAAA,QAA4B;AAAA,QACrE,oBAAC,QAAK,MAAM,WAAW,WAAU,+CAC9B,mBAAS,UAAU,YAAY,WAClC;AAAA,SACF;AAAA,OACF;AAAA,IAEA,qBAAC,OAAE,WAAU,6DAA4D;AAAA;AAAA,MAChD;AAAA,MACvB,oBAAC,OAAE,MAAK,sBAAqB,WAAU,mCAAkC,oBAEzE;AAAA,MAAI;AAAA,OAEN;AAAA,KACF;AAEJ;AAEA,SAAS,WAAW,EAAE,UAAU,GAA2B;AACzD,SACE,qBAAC,SAAI,WAAsB,SAAQ,aAAY,OAAM,8BAA6B,eAAY,QAC5F;AAAA,wBAAC,UAAK,GAAE,sIAAqI,MAAK,WAAU;AAAA,IAC5J,oBAAC,UAAK,GAAE,gJAA+I,MAAK,WAAU;AAAA,IACtK,oBAAC,UAAK,GAAE,yFAAwF,MAAK,WAAU;AAAA,IAC/G,oBAAC,UAAK,GAAE,2JAA0J,MAAK,WAAU;AAAA,KACnL;AAEJ;AAEA,SAAS,aAAa,EAAE,UAAU,GAA2B;AAC3D,SACE,oBAAC,SAAI,WAAsB,SAAQ,aAAY,OAAM,8BAA6B,MAAK,WAAU,eAAY,QAC3G,8BAAC,UAAK,GAAE,mSAAkS,GAC5S;AAEJ;AAEA,SAAS,UAAU,EAAE,UAAU,GAA2B;AACxD,SACE,oBAAC,SAAI,WAAsB,SAAQ,aAAY,OAAM,8BAA6B,MAAK,gBAAe,eAAY,QAChH,8BAAC,UAAK,GAAE,2iBAA0iB,GACpjB;AAEJ;","names":["payload"]}

package/dist/ForgotPasswordForm.cjs

@@ -38,6 +38,9 @@ var import_link = __toESM(require("next/link"), 1);
 var import_lucide_react = require("lucide-react");
 var import_react_turnstile = require("@marsidev/react-turnstile");
 var import_useTurnstileTheme = require("./useTurnstileTheme");
+var import_button = require("./components/ui/button");
+var import_input = require("./components/ui/input");
+var import_label = require("./components/ui/label");
 var import_types = require("./types");
 const TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;
 function ForgotPasswordForm({ endpoints } = {}) {
@@ -91,9 +94,9 @@ function ForgotPasswordForm({ endpoints } = {}) {
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: error })
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("label", { className: "mb-1 block text-xs font-medium text-muted-foreground", children: "Email" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_label.Label, { className: "mb-1 block text-xs leading-4 text-muted-foreground", children: "Email" }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
-        "input",
+        import_input.Input,
         {
           type: "email",
           required: true,
@@ -101,7 +104,7 @@ function ForgotPasswordForm({ endpoints } = {}) {
           onChange: (e) => setEmail(e.target.value),
           autoComplete: "email",
           autoFocus: true,
-          className: "w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary"
+          className: "h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary"
         }
       )
     ] }),
@@ -115,11 +118,11 @@ function ForgotPasswordForm({ endpoints } = {}) {
       }
     ) }),
     /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
-      "button",
+      import_button.Button,
       {
         type: "submit",
         disabled: submitting,
-        className: "flex w-full items-center justify-center gap-2 rounded-md bg-primary py-2.5 text-sm font-medium text-primary-foreground transition hover:opacity-90 disabled:opacity-50",
+        className: "flex h-auto w-full py-2.5 shadow-none hover:opacity-90",
         children: [
           submitting && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_lucide_react.Loader2, { className: "h-4 w-4 animate-spin" }),
           submitting ? "Sending\u2026" : "Send reset link"

package/dist/ForgotPasswordForm.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/ForgotPasswordForm.tsx"],"sourcesContent":["'use client';\n\nimport { useState } from 'react';\nimport Link from 'next/link';\nimport { Loader2, AlertCircle, CheckCircle2 } from 'lucide-react';\nimport { Turnstile } from '@marsidev/react-turnstile';\nimport { useTurnstileTheme } from './useTurnstileTheme';\nimport { defaultEndpoints, type AuthEndpoints } from './types';\n\n// Enabled family-wide via NEXT_PUBLIC_TURNSTILE_SITE_KEY (see AuthForm).\nconst TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;\n\nexport interface ForgotPasswordFormProps {\n  endpoints?: Partial<AuthEndpoints>;\n}\n\nexport function ForgotPasswordForm({ endpoints }: ForgotPasswordFormProps = {}) {\n  const ep: AuthEndpoints = { ...defaultEndpoints, ...endpoints };\n  const [email, setEmail] = useState('');\n  const [submitting, setSubmitting] = useState(false);\n  const [sent, setSent] = useState(false);\n  const [turnstileToken, setTurnstileToken] = useState('');\n  const turnstileTheme = useTurnstileTheme();\n  const [error, setError] = useState<string | null>(null);\n\n  async function submit(e: React.FormEvent) {\n    e.preventDefault();\n    setError(null);\n    setSubmitting(true);\n    try {\n      const res = await fetch(ep.forgotPassword, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          email,\n          ...(TURNSTILE_SITE_KEY ? { 'cf-turnstile-response': turnstileToken } : {}),\n        }),\n      });\n      if (!res.ok) {\n        const payload = (await res.json().catch(() => null)) as { error?: { message?: string } } | null;\n        throw new Error(payload?.error?.message ?? `Request failed (${res.status})`);\n      }\n      setSent(true);\n    } catch (err) {\n      setError((err as Error).message);\n    } finally {\n      setSubmitting(false);\n    }\n  }\n\n  if (sent) {\n    return (\n      <div className=\"space-y-4\">\n        <div className=\"flex items-start gap-2 rounded-md border border-primary/30 bg-primary/10 px-3 py-2 text-sm text-foreground\">\n          <CheckCircle2 className=\"h-4 w-4 shrink-0 mt-0.5 text-primary\" />\n          <span>\n            If <strong>{email}</strong> has a Huudis account, we&rsquo;ve sent a reset link. It expires in 1 hour.\n          </span>\n        </div>\n        <Link href=\"/login\" className=\"block text-center text-sm font-medium text-foreground hover:underline\">\n          Back to sign in\n        </Link>\n      </div>\n    );\n  }\n\n  return (\n    <form onSubmit={submit} className=\"space-y-4\">\n      {error && (\n        <div className=\"flex items-start gap-2 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-sm text-destructive\">\n          <AlertCircle className=\"h-4 w-4 shrink-0 mt-0.5\" />\n          <span>{error}</span>\n        </div>\n      )}\n      <div>\n        <label className=\"mb-1 block text-xs font-medium text-muted-foreground\">Email</label>\n        <input\n          type=\"email\"\n          required\n          value={email}\n          onChange={(e) => setEmail(e.target.value)}\n          autoComplete=\"email\"\n          autoFocus\n          className=\"w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary\"\n        />\n      </div>\n      {TURNSTILE_SITE_KEY && (\n        <div className=\"flex justify-center py-1\">\n          <Turnstile\n            siteKey={TURNSTILE_SITE_KEY}\n            onSuccess={setTurnstileToken}\n            onError={() => setError('Security check failed.')}\n            options={{ theme: turnstileTheme }}\n          />\n        </div>\n      )}\n      <button\n        type=\"submit\"\n        disabled={submitting}\n        className=\"flex w-full items-center justify-center gap-2 rounded-md bg-primary py-2.5 text-sm font-medium text-primary-foreground transition hover:opacity-90 disabled:opacity-50\"\n      >\n        {submitting && <Loader2 className=\"h-4 w-4 animate-spin\" />}\n        {submitting ? 'Sending…' : 'Send reset link'}\n      </button>\n      <div className=\"text-center text-xs text-muted-foreground\">\n        Remembered it?{' '}\n        <Link href=\"/login\" className=\"font-medium text-foreground hover:underline\">\n          Sign in\n        </Link>\n      </div>\n    </form>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAsDU;AApDV,mBAAyB;AACzB,kBAAiB;AACjB,0BAAmD;AACnD,6BAA0B;AAC1B,+BAAkC;AAClC,mBAAqD;AAGrD,MAAM,qBAAqB,QAAQ,IAAI;AAMhC,SAAS,mBAAmB,EAAE,UAAU,IAA6B,CAAC,GAAG;AAC9E,QAAM,KAAoB,EAAE,GAAG,+BAAkB,GAAG,UAAU;AAC9D,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,EAAE;AACrC,QAAM,CAAC,YAAY,aAAa,QAAI,uBAAS,KAAK;AAClD,QAAM,CAAC,MAAM,OAAO,QAAI,uBAAS,KAAK;AACtC,QAAM,CAAC,gBAAgB,iBAAiB,QAAI,uBAAS,EAAE;AACvD,QAAM,qBAAiB,4CAAkB;AACzC,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAwB,IAAI;AAEtD,iBAAe,OAAO,GAAoB;AACxC,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,GAAG,gBAAgB;AAAA,QACzC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB;AAAA,UACA,GAAI,qBAAqB,EAAE,yBAAyB,eAAe,IAAI,CAAC;AAAA,QAC1E,CAAC;AAAA,MACH,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAClD,cAAM,IAAI,MAAM,SAAS,OAAO,WAAW,mBAAmB,IAAI,MAAM,GAAG;AAAA,MAC7E;AACA,cAAQ,IAAI;AAAA,IACd,SAAS,KAAK;AACZ,eAAU,IAAc,OAAO;AAAA,IACjC,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,MAAM;AACR,WACE,6CAAC,SAAI,WAAU,aACb;AAAA,mDAAC,SAAI,WAAU,8GACb;AAAA,oDAAC,oCAAa,WAAU,wCAAuC;AAAA,QAC/D,6CAAC,UAAK;AAAA;AAAA,UACD,4CAAC,YAAQ,iBAAM;AAAA,UAAS;AAAA,WAC7B;AAAA,SACF;AAAA,MACA,4CAAC,YAAAA,SAAA,EAAK,MAAK,UAAS,WAAU,yEAAwE,6BAEtG;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,6CAAC,UAAK,UAAU,QAAQ,WAAU,aAC/B;AAAA,aACC,6CAAC,SAAI,WAAU,uHACb;AAAA,kDAAC,mCAAY,WAAU,2BAA0B;AAAA,MACjD,4CAAC,UAAM,iBAAM;AAAA,OACf;AAAA,IAEF,6CAAC,SACC;AAAA,kDAAC,WAAM,WAAU,wDAAuD,mBAAK;AAAA,MAC7E;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAQ;AAAA,UACR,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,cAAa;AAAA,UACb,WAAS;AAAA,UACT,WAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IACC,sBACC,4CAAC,SAAI,WAAU,4BACb;AAAA,MAAC;AAAA;AAAA,QACC,SAAS;AAAA,QACT,WAAW;AAAA,QACX,SAAS,MAAM,SAAS,wBAAwB;AAAA,QAChD,SAAS,EAAE,OAAO,eAAe;AAAA;AAAA,IACnC,GACF;AAAA,IAEF;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,UAAU;AAAA,QACV,WAAU;AAAA,QAET;AAAA,wBAAc,4CAAC,+BAAQ,WAAU,wBAAuB;AAAA,UACxD,aAAa,kBAAa;AAAA;AAAA;AAAA,IAC7B;AAAA,IACA,6CAAC,SAAI,WAAU,6CAA4C;AAAA;AAAA,MAC1C;AAAA,MACf,4CAAC,YAAAA,SAAA,EAAK,MAAK,UAAS,WAAU,+CAA8C,qBAE5E;AAAA,OACF;AAAA,KACF;AAEJ;","names":["Link"]}
+{"version":3,"sources":["../src/ForgotPasswordForm.tsx"],"sourcesContent":["'use client';\n\nimport { useState } from 'react';\nimport Link from 'next/link';\nimport { Loader2, AlertCircle, CheckCircle2 } from 'lucide-react';\nimport { Turnstile } from '@marsidev/react-turnstile';\nimport { useTurnstileTheme } from './useTurnstileTheme';\nimport { Button } from './components/ui/button';\nimport { Input } from './components/ui/input';\nimport { Label } from './components/ui/label';\nimport { defaultEndpoints, type AuthEndpoints } from './types';\n\n// Enabled family-wide via NEXT_PUBLIC_TURNSTILE_SITE_KEY (see AuthForm).\nconst TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;\n\nexport interface ForgotPasswordFormProps {\n  endpoints?: Partial<AuthEndpoints>;\n}\n\nexport function ForgotPasswordForm({ endpoints }: ForgotPasswordFormProps = {}) {\n  const ep: AuthEndpoints = { ...defaultEndpoints, ...endpoints };\n  const [email, setEmail] = useState('');\n  const [submitting, setSubmitting] = useState(false);\n  const [sent, setSent] = useState(false);\n  const [turnstileToken, setTurnstileToken] = useState('');\n  const turnstileTheme = useTurnstileTheme();\n  const [error, setError] = useState<string | null>(null);\n\n  async function submit(e: React.FormEvent) {\n    e.preventDefault();\n    setError(null);\n    setSubmitting(true);\n    try {\n      const res = await fetch(ep.forgotPassword, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          email,\n          ...(TURNSTILE_SITE_KEY ? { 'cf-turnstile-response': turnstileToken } : {}),\n        }),\n      });\n      if (!res.ok) {\n        const payload = (await res.json().catch(() => null)) as { error?: { message?: string } } | null;\n        throw new Error(payload?.error?.message ?? `Request failed (${res.status})`);\n      }\n      setSent(true);\n    } catch (err) {\n      setError((err as Error).message);\n    } finally {\n      setSubmitting(false);\n    }\n  }\n\n  if (sent) {\n    return (\n      <div className=\"space-y-4\">\n        <div className=\"flex items-start gap-2 rounded-md border border-primary/30 bg-primary/10 px-3 py-2 text-sm text-foreground\">\n          <CheckCircle2 className=\"h-4 w-4 shrink-0 mt-0.5 text-primary\" />\n          <span>\n            If <strong>{email}</strong> has a Huudis account, we&rsquo;ve sent a reset link. It expires in 1 hour.\n          </span>\n        </div>\n        <Link href=\"/login\" className=\"block text-center text-sm font-medium text-foreground hover:underline\">\n          Back to sign in\n        </Link>\n      </div>\n    );\n  }\n\n  return (\n    <form onSubmit={submit} className=\"space-y-4\">\n      {error && (\n        <div className=\"flex items-start gap-2 rounded-md border border-destructive/40 bg-destructive/10 px-3 py-2 text-sm text-destructive\">\n          <AlertCircle className=\"h-4 w-4 shrink-0 mt-0.5\" />\n          <span>{error}</span>\n        </div>\n      )}\n      <div>\n        <Label className=\"mb-1 block text-xs leading-4 text-muted-foreground\">Email</Label>\n        <Input\n          type=\"email\"\n          required\n          value={email}\n          onChange={(e) => setEmail(e.target.value)}\n          autoComplete=\"email\"\n          autoFocus\n          className=\"h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary\"\n        />\n      </div>\n      {TURNSTILE_SITE_KEY && (\n        <div className=\"flex justify-center py-1\">\n          <Turnstile\n            siteKey={TURNSTILE_SITE_KEY}\n            onSuccess={setTurnstileToken}\n            onError={() => setError('Security check failed.')}\n            options={{ theme: turnstileTheme }}\n          />\n        </div>\n      )}\n      <Button\n        type=\"submit\"\n        disabled={submitting}\n        className=\"flex h-auto w-full py-2.5 shadow-none hover:opacity-90\"\n      >\n        {submitting && <Loader2 className=\"h-4 w-4 animate-spin\" />}\n        {submitting ? 'Sending…' : 'Send reset link'}\n      </Button>\n      <div className=\"text-center text-xs text-muted-foreground\">\n        Remembered it?{' '}\n        <Link href=\"/login\" className=\"font-medium text-foreground hover:underline\">\n          Sign in\n        </Link>\n      </div>\n    </form>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAyDU;AAvDV,mBAAyB;AACzB,kBAAiB;AACjB,0BAAmD;AACnD,6BAA0B;AAC1B,+BAAkC;AAClC,oBAAuB;AACvB,mBAAsB;AACtB,mBAAsB;AACtB,mBAAqD;AAGrD,MAAM,qBAAqB,QAAQ,IAAI;AAMhC,SAAS,mBAAmB,EAAE,UAAU,IAA6B,CAAC,GAAG;AAC9E,QAAM,KAAoB,EAAE,GAAG,+BAAkB,GAAG,UAAU;AAC9D,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAS,EAAE;AACrC,QAAM,CAAC,YAAY,aAAa,QAAI,uBAAS,KAAK;AAClD,QAAM,CAAC,MAAM,OAAO,QAAI,uBAAS,KAAK;AACtC,QAAM,CAAC,gBAAgB,iBAAiB,QAAI,uBAAS,EAAE;AACvD,QAAM,qBAAiB,4CAAkB;AACzC,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAwB,IAAI;AAEtD,iBAAe,OAAO,GAAoB;AACxC,MAAE,eAAe;AACjB,aAAS,IAAI;AACb,kBAAc,IAAI;AAClB,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,GAAG,gBAAgB;AAAA,QACzC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB;AAAA,UACA,GAAI,qBAAqB,EAAE,yBAAyB,eAAe,IAAI,CAAC;AAAA,QAC1E,CAAC;AAAA,MACH,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAClD,cAAM,IAAI,MAAM,SAAS,OAAO,WAAW,mBAAmB,IAAI,MAAM,GAAG;AAAA,MAC7E;AACA,cAAQ,IAAI;AAAA,IACd,SAAS,KAAK;AACZ,eAAU,IAAc,OAAO;AAAA,IACjC,UAAE;AACA,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,MAAM;AACR,WACE,6CAAC,SAAI,WAAU,aACb;AAAA,mDAAC,SAAI,WAAU,8GACb;AAAA,oDAAC,oCAAa,WAAU,wCAAuC;AAAA,QAC/D,6CAAC,UAAK;AAAA;AAAA,UACD,4CAAC,YAAQ,iBAAM;AAAA,UAAS;AAAA,WAC7B;AAAA,SACF;AAAA,MACA,4CAAC,YAAAA,SAAA,EAAK,MAAK,UAAS,WAAU,yEAAwE,6BAEtG;AAAA,OACF;AAAA,EAEJ;AAEA,SACE,6CAAC,UAAK,UAAU,QAAQ,WAAU,aAC/B;AAAA,aACC,6CAAC,SAAI,WAAU,uHACb;AAAA,kDAAC,mCAAY,WAAU,2BAA0B;AAAA,MACjD,4CAAC,UAAM,iBAAM;AAAA,OACf;AAAA,IAEF,6CAAC,SACC;AAAA,kDAAC,sBAAM,WAAU,sDAAqD,mBAAK;AAAA,MAC3E;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,UAAQ;AAAA,UACR,OAAO;AAAA,UACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,UACxC,cAAa;AAAA,UACb,WAAS;AAAA,UACT,WAAU;AAAA;AAAA,MACZ;AAAA,OACF;AAAA,IACC,sBACC,4CAAC,SAAI,WAAU,4BACb;AAAA,MAAC;AAAA;AAAA,QACC,SAAS;AAAA,QACT,WAAW;AAAA,QACX,SAAS,MAAM,SAAS,wBAAwB;AAAA,QAChD,SAAS,EAAE,OAAO,eAAe;AAAA;AAAA,IACnC,GACF;AAAA,IAEF;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACL,UAAU;AAAA,QACV,WAAU;AAAA,QAET;AAAA,wBAAc,4CAAC,+BAAQ,WAAU,wBAAuB;AAAA,UACxD,aAAa,kBAAa;AAAA;AAAA;AAAA,IAC7B;AAAA,IACA,6CAAC,SAAI,WAAU,6CAA4C;AAAA;AAAA,MAC1C;AAAA,MACf,4CAAC,YAAAA,SAAA,EAAK,MAAK,UAAS,WAAU,+CAA8C,qBAE5E;AAAA,OACF;AAAA,KACF;AAEJ;","names":["Link"]}

package/dist/ForgotPasswordForm.d.cts

@@ -1,9 +1,9 @@
-import * as react from 'react';
+import * as React from 'react';
 import { AuthEndpoints } from './types.cjs';
 
 interface ForgotPasswordFormProps {
     endpoints?: Partial<AuthEndpoints>;
 }
-declare function ForgotPasswordForm({ endpoints }?: ForgotPasswordFormProps): react.JSX.Element;
+declare function ForgotPasswordForm({ endpoints }?: ForgotPasswordFormProps): React.JSX.Element;
 
 export { ForgotPasswordForm, type ForgotPasswordFormProps };

package/dist/ForgotPasswordForm.d.ts

@@ -1,9 +1,9 @@
-import * as react from 'react';
+import * as React from 'react';
 import { AuthEndpoints } from './types.js';
 
 interface ForgotPasswordFormProps {
     endpoints?: Partial<AuthEndpoints>;
 }
-declare function ForgotPasswordForm({ endpoints }?: ForgotPasswordFormProps): react.JSX.Element;
+declare function ForgotPasswordForm({ endpoints }?: ForgotPasswordFormProps): React.JSX.Element;
 
 export { ForgotPasswordForm, type ForgotPasswordFormProps };

package/dist/ForgotPasswordForm.js

@@ -5,6 +5,9 @@ import Link from "next/link";
 import { Loader2, AlertCircle, CheckCircle2 } from "lucide-react";
 import { Turnstile } from "@marsidev/react-turnstile";
 import { useTurnstileTheme } from "./useTurnstileTheme";
+import { Button } from "./components/ui/button";
+import { Input } from "./components/ui/input";
+import { Label } from "./components/ui/label";
 import { defaultEndpoints } from "./types";
 const TURNSTILE_SITE_KEY = process.env.NEXT_PUBLIC_TURNSTILE_SITE_KEY;
 function ForgotPasswordForm({ endpoints } = {}) {
@@ -58,9 +61,9 @@ function ForgotPasswordForm({ endpoints } = {}) {
       /* @__PURE__ */ jsx("span", { children: error })
     ] }),
     /* @__PURE__ */ jsxs("div", { children: [
-      /* @__PURE__ */ jsx("label", { className: "mb-1 block text-xs font-medium text-muted-foreground", children: "Email" }),
+      /* @__PURE__ */ jsx(Label, { className: "mb-1 block text-xs leading-4 text-muted-foreground", children: "Email" }),
       /* @__PURE__ */ jsx(
-        "input",
+        Input,
         {
           type: "email",
           required: true,
@@ -68,7 +71,7 @@ function ForgotPasswordForm({ endpoints } = {}) {
           onChange: (e) => setEmail(e.target.value),
           autoComplete: "email",
           autoFocus: true,
-          className: "w-full rounded-md border border-border bg-background px-3 py-2 text-sm focus:outline-none focus:ring-1 focus:ring-primary"
+          className: "h-auto border-border bg-background py-2 text-sm shadow-none focus:outline-none focus:ring-1 focus:ring-primary"
         }
       )
     ] }),
@@ -82,11 +85,11 @@ function ForgotPasswordForm({ endpoints } = {}) {
       }
     ) }),
     /* @__PURE__ */ jsxs(
-      "button",
+      Button,
       {
         type: "submit",
         disabled: submitting,
-        className: "flex w-full items-center justify-center gap-2 rounded-md bg-primary py-2.5 text-sm font-medium text-primary-foreground transition hover:opacity-90 disabled:opacity-50",
+        className: "flex h-auto w-full py-2.5 shadow-none hover:opacity-90",
         children: [
           submitting && /* @__PURE__ */ jsx(Loader2, { className: "h-4 w-4 animate-spin" }),
           submitting ? "Sending\u2026" : "Send reset link"